115 lines
3.5 KiB
Ruby
115 lines
3.5 KiB
Ruby
require 'rails_helper'
|
|
|
|
describe ExercisePolicy do
|
|
subject { described_class }
|
|
|
|
let(:exercise) { FactoryGirl.build(:dummy, team: FactoryGirl.create(:team)) }
|
|
|
|
[:create?, :index?, :new?].each do |action|
|
|
permissions(action) do
|
|
it 'grants access to admins' do
|
|
expect(subject).to permit(FactoryGirl.build(:admin), exercise)
|
|
end
|
|
|
|
it 'grants access to teachers' do
|
|
expect(subject).to permit(FactoryGirl.build(:teacher), exercise)
|
|
end
|
|
|
|
it 'does not grant access to external users' do
|
|
expect(subject).not_to permit(FactoryGirl.build(:external_user), exercise)
|
|
end
|
|
end
|
|
end
|
|
|
|
[:clone?, :destroy?, :edit?, :show?, :statistics?, :update?].each do |action|
|
|
permissions(action) do
|
|
it 'grants access to admins' do
|
|
expect(subject).to permit(FactoryGirl.build(:admin), exercise)
|
|
end
|
|
|
|
it 'grants access to authors' do
|
|
expect(subject).to permit(exercise.author, exercise)
|
|
end
|
|
|
|
it 'grants access to team members' do
|
|
expect(subject).to permit(exercise.team.members.first, exercise)
|
|
end
|
|
|
|
it 'does not grant access to all other users' do
|
|
[:external_user, :teacher].each do |factory_name|
|
|
expect(subject).not_to permit(FactoryGirl.build(factory_name), exercise)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
[:implement?, :submit?].each do |action|
|
|
permissions(action) do
|
|
it 'grants access to anyone' do
|
|
[:admin, :external_user, :teacher].each do |factory_name|
|
|
expect(subject).to permit(FactoryGirl.build(factory_name), Exercise.new)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
describe ExercisePolicy::Scope do
|
|
describe '#resolve' do
|
|
before(:all) do
|
|
@admin = FactoryGirl.create(:admin)
|
|
@external_user = FactoryGirl.create(:external_user)
|
|
@teacher = FactoryGirl.create(:teacher)
|
|
|
|
[@admin, @teacher].each do |user|
|
|
[true, false].each do |public|
|
|
[@team, nil].each do |team|
|
|
FactoryGirl.create(:dummy, public: public, team: team, user_id: user.id, user_type: InternalUser.class.name)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'for admins' do
|
|
let(:scope) { Pundit.policy_scope!(@admin, Exercise) }
|
|
|
|
it 'returns all exercises' do
|
|
expect(scope.map(&:id)).to include(*Exercise.all.map(&:id))
|
|
end
|
|
end
|
|
|
|
context 'for external users' do
|
|
let(:scope) { Pundit.policy_scope!(@external_user, Exercise) }
|
|
|
|
it 'returns nothing' do
|
|
expect(scope.count).to be 0
|
|
end
|
|
end
|
|
|
|
context 'for teachers' do
|
|
before(:each) do
|
|
@team = FactoryGirl.create(:team)
|
|
@team.members << @teacher
|
|
end
|
|
|
|
let(:scope) { Pundit.policy_scope!(@teacher, Exercise) }
|
|
|
|
it 'includes all public exercises' do
|
|
expect(scope.map(&:id)).to include(*Exercise.where(public: true).map(&:id))
|
|
end
|
|
|
|
it 'includes all authored non-public exercises' do
|
|
expect(scope.map(&:id)).to include(*Exercise.where(public: false, user_id: @teacher.id).map(&:id))
|
|
end
|
|
|
|
it "includes all of team members' non-public exercises" do
|
|
expect(scope.map(&:id)).to include(*Exercise.where(public: false, team_id: @teacher.teams.first.id).map(&:id))
|
|
end
|
|
|
|
it "does not include other authors' non-public exercises" do
|
|
expect(scope.map(&:id)).not_to include(*Exercise.where(public: false).where("team_id <> #{@team.id} AND user_id <> #{@teacher.id}").map(&:id))
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|