metamaps--metamaps/spec/policies/map_policy_spec.rb

require 'rails_helper'

RSpec.describe MapPolicy, type: :policy do
  subject { described_class }

  context 'unauthenticated' do
    context 'commons' do
      let(:map) { create(:map, permission: :commons) }
      permissions :show? do
        it 'permits access' do
          expect(subject).to permit(nil, map)
        end
      end
      permissions :create?, :update?, :destroy? do
        it 'denies access' do
          expect(subject).to_not permit(nil, map)
        end
      end
    end

    context 'private' do
      let(:map) { create(:map, permission: :private) }
      permissions :show?, :create?, :update?, :destroy? do
        it 'permits access' do
          expect(subject).to_not permit(nil, map)
        end
      end
    end
  end

  #
  # Now begin the logged-in tests
  #

  context 'logged in' do
    let(:user) { create(:user) }

    context 'commons' do
      let(:owner) { create(:user) }
      let(:map) { create(:map, permission: :commons, user: owner) }
      permissions :show?, :create?, :update? do
        it 'permits access' do
          expect(subject).to permit(user, map)
        end
      end
      permissions :destroy? do
        it 'denies access' do
          expect(subject).to_not permit(user, map)
        end
        it 'permits access to owner' do
          expect(subject).to permit(owner, map)
        end
      end
    end

    context 'public' do
      let(:owner) { create(:user) }
      let(:map) { create(:map, permission: :public, user: owner) }
      permissions :show?, :create? do
        it 'permits access' do
          expect(subject).to permit(user, map)
        end
      end
      permissions :update?, :destroy? do
        it 'denies access' do
          expect(subject).to_not permit(user, map)
        end
        it 'permits access to owner' do
          expect(subject).to permit(owner, map)
        end
      end
    end

    context 'private' do
      let(:owner) { create(:user) }
      let(:map) { create(:map, permission: :private, user: owner) }
      permissions :create? do
        it 'permits access' do
          expect(subject).to permit(user, map)
        end
      end
      permissions :show?, :update?, :destroy? do
        it 'denies access' do
          expect(subject).to_not permit(user, map)
        end
        it 'permits access to owner' do
          expect(subject).to permit(owner, map)
        end
      end
    end
  end
end