65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornbergerrequire 'spec_helper'
0d6f8d00bbfa3e07fe9e6bb453e0731246ad6e01Eugen Kuksa let(:item) { create(:permission, subject: owner, role: 'owner').item }
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger create(:permission, subject: editor, role: 'editor', item: item)
b2ee879528ace361f0f5a55de48c6b90515b27b0Eugen Kuksa create(:permission, subject: reader, role: 'reader', item: item)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger should_not be_able_to(perm, Repository.new)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'be allowed: edit, update, destroy, permissions, write' do
d74b53ae8ec704603bf3c74d46280f60f9ce9647Eugen Kuksa %i(show edit update destroy permissions).each do |perm|
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'not be allowed on other: edit, update, destroy, permissions' do
d74b53ae8ec704603bf3c74d46280f60f9ce9647Eugen Kuksa %i(edit update destroy permissions).each do |perm|
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger should_not be_able_to(perm, create(:repository))
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'not be allowed: edit, update, destroy, permissions' do
d74b53ae8ec704603bf3c74d46280f60f9ce9647Eugen Kuksa %i(edit update destroy permissions).each do |perm|
0d6f8d00bbfa3e07fe9e6bb453e0731246ad6e01Eugen Kuksa create(:permission, subject: owner, role: 'owner', item: repo)
b2ee879528ace361f0f5a55de48c6b90515b27b0Eugen Kuksa create(:permission, subject: editor, role: 'editor', item: item)
b2ee879528ace361f0f5a55de48c6b90515b27b0Eugen Kuksa create(:permission, subject: reader, role: 'reader', item: item)
0d6f8d00bbfa3e07fe9e6bb453e0731246ad6e01Eugen Kuksa subject(:ability){ Ability.new(User.new, access_token.to_s) }
8cb89db2406324b7f09d5a83b39eb14b2623150eEugen Kuksa let(:item) { create(:repository, access: 'private_rw', user: owner) }
5ddd457a4e278410e58386a2333f5853f2f2ea8fEugen Kuksa create(:permission, subject: editor, role: 'editor', item: item)
5ddd457a4e278410e58386a2333f5853f2f2ea8fEugen Kuksa create(:permission, subject: reader, role: 'reader', item: item)
8cb89db2406324b7f09d5a83b39eb14b2623150eEugen Kuksa expect(Ability.new(reader, nil)).to_not be_able_to(:write, item)
8cb89db2406324b7f09d5a83b39eb14b2623150eEugen Kuksa expect(Ability.new(reader, nil)).to be_able_to(:show, item)
8cb89db2406324b7f09d5a83b39eb14b2623150eEugen Kuksa expect(Ability.new(role, nil)).to be_able_to(:write, item)
8cb89db2406324b7f09d5a83b39eb14b2623150eEugen Kuksa expect(Ability.new(role, nil)).to be_able_to(:show, item)
8cb89db2406324b7f09d5a83b39eb14b2623150eEugen Kuksa expect(Ability.new(role, nil)).to_not be_able_to(:update, item)
8cb89db2406324b7f09d5a83b39eb14b2623150eEugen Kuksa expect(Ability.new(owner, nil)).to be_able_to(:update, item)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger let(:memberteam){ create(:team_user, user: other).team }
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger let(:otherteam){ create(:team_user, user: other).team }
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger context 'admin' do
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'be allowed: edit, update, destroy' do
d74b53ae8ec704603bf3c74d46280f60f9ce9647Eugen Kuksa %i(edit update destroy).each do |perm|
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger should be_able_to(perm, create(:team_user, user: user).team)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger context 'member' do
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'be allowed: create, show, index' do
d74b53ae8ec704603bf3c74d46280f60f9ce9647Eugen Kuksa %i(create show index).each do |perm|
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger should be_able_to(perm, Team.new)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'not be allowed: edit, update, destroy (without admin on team)' do
d74b53ae8ec704603bf3c74d46280f60f9ce9647Eugen Kuksa %i(edit update destroy).each do |perm|
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger should_not be_able_to(perm, @memberteam)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'not be allowed: edit, update, destroy (without being on team)' do
d74b53ae8ec704603bf3c74d46280f60f9ce9647Eugen Kuksa %i(edit update destroy).each do |perm|
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger should_not be_able_to(perm, otherteam)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger context 'Comment' do
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger let(:comment){ create :comment }
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger context 'author' do
0d6f8d00bbfa3e07fe9e6bb453e0731246ad6e01Eugen Kuksa subject(:ability){ Ability.new(comment.user, nil) }
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'destroy his own comment' do
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger should be_able_to(:destroy, comment)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'not be allowed to destroy others comment' do
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger should_not be_able_to(:destroy, create(:comment))
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger context 'admin' do
0d6f8d00bbfa3e07fe9e6bb453e0731246ad6e01Eugen Kuksa subject(:ability){ Ability.new(create(:admin), nil) }
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'destroy others comment' do
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger should be_able_to(:destroy, comment)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger context 'comments repository owner' do
0d6f8d00bbfa3e07fe9e6bb453e0731246ad6e01Eugen Kuksa subject(:ability){ Ability.new(owner, nil) }
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger create(:permission, subject: owner, role: 'owner', item: comment.commentable.repository)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'destroy others comments for his repository' do
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger should be_able_to(:destroy, comment)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger context 'comments repository editor' do
0d6f8d00bbfa3e07fe9e6bb453e0731246ad6e01Eugen Kuksa subject(:ability){ Ability.new(owner, nil) }
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger create(:permission, subject: owner, role: 'editor', item: comment.commentable.repository)
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger it 'not destroy others comments for his repository' do
65f00d360b7b3fabfc829fcc19a019bfef587595Julian Kornberger should_not be_able_to(:destroy, comment)