91 lines
2.4 KiB
Ruby
91 lines
2.4 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require 'rails_helper'
|
|
|
|
describe CodeOcean::FilePolicy do
|
|
subject(:policy) { described_class }
|
|
|
|
let(:exercise) { create(:fibonacci) }
|
|
let(:submission) { create(:submission) }
|
|
|
|
permissions :create? do
|
|
context 'when being part of an exercise' do
|
|
let(:file) { exercise.files.first }
|
|
|
|
it 'grants access to admins' do
|
|
expect(policy).to permit(build(:admin), file)
|
|
end
|
|
|
|
it 'grants access to authors' do
|
|
expect(policy).to permit(exercise.author, file)
|
|
end
|
|
|
|
it 'does not grant access to all other users' do
|
|
%i[external_user teacher].each do |factory_name|
|
|
expect(policy).not_to permit(build(factory_name), file)
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'when being part of a submission' do
|
|
let(:file) { submission.files.first }
|
|
|
|
context 'when file creation is allowed' do
|
|
before do
|
|
submission.exercise.update(allow_file_creation: true)
|
|
end
|
|
|
|
it 'grants access to authors' do
|
|
expect(policy).to permit(submission.author, file)
|
|
end
|
|
end
|
|
|
|
context 'when file creation is not allowed' do
|
|
before do
|
|
submission.exercise.update(allow_file_creation: false)
|
|
end
|
|
|
|
it 'grants access to authors' do
|
|
expect(policy).not_to permit(submission.author, file)
|
|
end
|
|
end
|
|
|
|
it 'does not grant access to all other users' do
|
|
%i[admin external_user teacher].each do |factory_name|
|
|
expect(policy).not_to permit(build(factory_name), file)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
permissions :destroy? do
|
|
context 'when being part of an exercise' do
|
|
let(:file) { exercise.files.first }
|
|
|
|
it 'grants access to admins' do
|
|
expect(policy).to permit(build(:admin), file)
|
|
end
|
|
|
|
it 'grants access to authors' do
|
|
expect(policy).to permit(exercise.author, file)
|
|
end
|
|
|
|
it 'does not grant access to all other users' do
|
|
%i[external_user teacher].each do |factory_name|
|
|
expect(policy).not_to permit(build(factory_name), file)
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'when being part of a submission' do
|
|
let(:file) { submission.files.first }
|
|
|
|
it 'does not grant access to anyone' do
|
|
%i[admin external_user teacher].each do |factory_name|
|
|
expect(policy).not_to permit(build(factory_name), file)
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|