rosa-build/spec/controllers/repositories_controller_spe...

113 lines
3.3 KiB
Ruby

require 'spec_helper'
describe RepositoriesController do
before(:each) do
stub_rsync_methods
@repository = Factory(:repository)
@personal_repository = Factory(:personal_repository)
@platform = Factory(:platform)
@project = Factory(:project)
@another_user = Factory(:user)
@create_params = {:repository => {:name => 'pro', :description => 'pro2'}, :platform_id => @platform.id}
end
context 'for guest' do
[:index, :create].each do |action|
it "should not be able to perform #{ action } action" do
get action
response.should redirect_to(new_user_session_path)
end
end
[:show, :new, :add_project, :remove_project, :destroy].each do |action|
it "should not be able to perform #{ action } action" do
get action, :id => @repository.id
response.should redirect_to(new_user_session_path)
end
end
end
context 'for admin' do
before(:each) do
@admin = Factory(:admin)
set_session_for(@admin)
end
it 'should be able to perform new action' do
get :new, :platform_id => @platform.id
response.should render_template(:new)
end
it 'should be able to perform create action' do
post :create, @create_params
response.should redirect_to(platform_repositories_path(@platform.id))
end
it 'should change objects count after create action' do
lambda { post :create, @create_params }.should change{ Repository.count }.by(1)
end
it_should_behave_like 'repository user with admin rights'
end
context 'for anyone except admin' do
before(:each) do
@user = Factory(:user)
set_session_for(@user)
end
it 'should not be able to perform new action' do
get :new, :platform_id => @platform.id
response.should redirect_to(forbidden_path)
end
it 'should not be able to perform create action' do
post :create, @create_params
response.should redirect_to(forbidden_path)
end
it 'should not change objects count after create action' do
lambda { post :create, @create_params }.should change{ Repository.count }.by(0)
end
it_should_behave_like 'not destroy personal repository'
end
context 'for owner user' do
before(:each) do
@user = Factory(:user)
set_session_for(@user)
@repository.update_attribute(:owner, @user)
@repository.relations.create!(:object_type => 'User', :object_id => @user.id, :role => 'admin')
end
it_should_behave_like 'repository user with owner rights'
end
context 'for reader user' do
before(:each) do
@user = Factory(:user)
set_session_for(@user)
@repository.relations.create!(:object_type => 'User', :object_id => @user.id, :role => 'reader')
end
it_should_behave_like 'repository user with reader rights'
it 'should not be able to perform add_project action' do
get :add_project, :id => @repository.id
response.should redirect_to(forbidden_path)
end
it 'should not be able to perform add_project action with project_id param' do
get :add_project, :id => @repository.id, :project_id => @project.id
response.should redirect_to(forbidden_path)
end
it 'should not be able to perform destroy action' do
delete :destroy, :id => @repository.id
response.should redirect_to(forbidden_path)
end
end
end