81 lines
2.2 KiB
Ruby
81 lines
2.2 KiB
Ruby
require 'rails_helper'
|
|
|
|
describe CodeOcean::FilePolicy do
|
|
subject { CodeOcean::FilePolicy }
|
|
|
|
permissions :create? do
|
|
context 'as part of an exercise' do
|
|
before(:all) do
|
|
@exercise = FactoryGirl.create(:fibonacci)
|
|
@file = @exercise.files.first
|
|
end
|
|
|
|
it 'grants access to admins' do
|
|
expect(subject).to permit(FactoryGirl.build(:admin), @file)
|
|
end
|
|
|
|
it 'grants access to authors' do
|
|
expect(subject).to permit(@exercise.author, @file)
|
|
end
|
|
|
|
it 'does not grant access to all other users' do
|
|
[:external_user, :teacher].each do |factory_name|
|
|
expect(subject).not_to permit(FactoryGirl.build(factory_name), @file)
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'as part of a submission' do
|
|
before(:all) do
|
|
@submission = FactoryGirl.create(:submission)
|
|
@file = @submission.files.first
|
|
end
|
|
|
|
it 'grants access to authors' do
|
|
expect(subject).to permit(@submission.author, @file)
|
|
end
|
|
|
|
it 'does not grant access to all other users' do
|
|
[:admin, :external_user, :teacher].each do |factory_name|
|
|
expect(subject).not_to permit(FactoryGirl.build(factory_name), @file)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
permissions :destroy? do
|
|
context 'as part of an exercise' do
|
|
before(:all) do
|
|
@exercise = FactoryGirl.create(:fibonacci)
|
|
@file = @exercise.files.first
|
|
end
|
|
|
|
it 'grants access to admins' do
|
|
expect(subject).to permit(FactoryGirl.build(:admin), @file)
|
|
end
|
|
|
|
it 'grants access to authors' do
|
|
expect(subject).to permit(@exercise.author, @file)
|
|
end
|
|
|
|
it 'does not grant access to all other users' do
|
|
[:external_user, :teacher].each do |factory_name|
|
|
expect(subject).not_to permit(FactoryGirl.build(factory_name), @file)
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'as part of a submission' do
|
|
before(:all) do
|
|
@file = FactoryGirl.create(:submission).files.first
|
|
end
|
|
|
|
it 'does not grant access to anyone' do
|
|
[:admin, :external_user, :teacher].each do |factory_name|
|
|
expect(subject).not_to permit(FactoryGirl.build(factory_name), @file)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|