98 lines
2.5 KiB
Ruby
98 lines
2.5 KiB
Ruby
|
require 'rails_helper'
|
||
|
|
|
||
|
|
RSpec.describe MapPolicy, type: :policy do
|
||
|
|
subject { described_class }
|
||
|
|
|
||
|
|
context 'unauthenticated' do
|
||
|
|
context 'commons' do
|
||
|
|
let(:map) { create(:map, permission: :commons) }
|
||
|
|
permissions :show? do
|
||
|
|
it 'can view' do
|
||
|
|
expect(subject).to permit(nil, map)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
permissions :create?, :update?, :destroy? do
|
||
|
|
it 'can not modify' do
|
||
|
|
expect(subject).to_not permit(nil, map)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
context 'private' do
|
||
|
|
let(:map) { create(:map, permission: :private) }
|
||
|
|
permissions :show?, :create?, :update?, :destroy? do
|
||
|
|
it 'can not view or modify' do
|
||
|
|
expect(subject).to_not permit(nil, map)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
#
|
||
|
|
# Now begin the logged-in tests
|
||
|
|
#
|
||
|
|
|
||
|
|
context 'logged in' do
|
||
|
|
let(:user) { create(:user) }
|
||
|
|
|
||
|
|
context 'commons' do
|
||
|
|
let(:owner) { create(:user) }
|
||
|
|
let(:map) { create(:map, permission: :commons, user: owner) }
|
||
|
|
permissions :show?, :create?, :update? do
|
||
|
|
it 'can view and modify' do
|
||
|
|
expect(subject).to permit(user, map)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
permissions :destroy? do
|
||
|
|
it 'can not destroy' do
|
||
|
|
expect(subject).to_not permit(user, map)
|
||
|
|
end
|
||
|
|
it 'owner can destroy' do
|
||
|
|
expect(subject).to permit(owner, map)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
context 'public' do
|
||
|
|
let(:owner) { create(:user) }
|
||
|
|
let(:map) { create(:map, permission: :public, user: owner) }
|
||
|
|
permissions :show? do
|
||
|
|
it 'can view' do
|
||
|
|
expect(subject).to permit(user, map)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
permissions :create? do
|
||
|
|
it 'can create' do
|
||
|
|
expect(subject).to permit(user, map)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
permissions :update?, :destroy? do
|
||
|
|
it 'can not update/destroy' do
|
||
|
|
expect(subject).to_not permit(user, map)
|
||
|
|
end
|
||
|
|
it 'owner can update/destroy' do
|
||
|
|
expect(subject).to permit(owner, map)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
context 'private' do
|
||
|
|
let(:owner) { create(:user) }
|
||
|
|
let(:map) { create(:map, permission: :private, user: owner) }
|
||
|
|
permissions :create? do
|
||
|
|
it 'can create' do
|
||
|
|
expect(subject).to permit(user, map)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
permissions :show?, :update?, :destroy? do
|
||
|
|
it 'can not view or modify' do
|
||
|
|
expect(subject).to_not permit(user, map)
|
||
|
|
end
|
||
|
|
it 'owner can view and modify' do
|
||
|
|
expect(subject).to permit(owner, map)
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|