rosa-build/spec/controllers/api/v1/pull_requests_controller.rb

270 lines
10 KiB
Ruby

# -*- encoding : utf-8 -*-
require 'spec_helper'
def create_pull to_ref, from_ref, owner, project = @project
pull = project.pull_requests.new :issue_attributes => {:title => 'test', :body => 'testing'}
pull.issue.user, pull.issue.project = owner, pull.to_project
pull.to_ref, pull.from_ref, pull.from_project = to_ref, from_ref, project
pull.save; pull.check
pull
end
describe Api::V1::PullRequestsController do
before(:all) do
stub_symlink_methods
stub_redis
@project = FactoryGirl.create(:project_with_commit)
@pull = create_pull 'master', 'non_conflicts', @project.owner
@another_project = FactoryGirl.create(:project_with_commit)
@another_pull = create_pull 'master', 'non_conflicts', @another_project.owner, @another_project
@hidden_project = FactoryGirl.create(:project_with_commit)
@hidden_project.update_column :visibility, 'hidden'
@hidden_pull = create_pull 'master', 'non_conflicts', @hidden_project.owner, @hidden_project
@own_hidden_project = FactoryGirl.create(:project_with_commit, :owner => @project.owner)
@own_hidden_project.update_column :visibility, 'hidden'
@own_hidden_pull = create_pull 'master', 'non_conflicts', @own_hidden_project.owner, @own_hidden_project
@own_hidden_pull.issue.update_column :assignee_id, @project.owner.id
@membered_project = FactoryGirl.create(:project_with_commit)
@membered_pull = create_pull 'master', 'non_conflicts', @membered_project.owner, @membered_project
@membered_project.relations.create(:role => 'reader', :actor => @pull.user)
@create_params = {:pull_request => {:title => 'title', :body => 'body',
:from_ref => 'conflicts', :to_ref => 'master'},
:project_id => @project.id, :format => :json}
@update_params = {:pull_request => {:title => 'new title'},
:project_id => @project.id, :id => @pull.serial_id, :format => :json}
end
context 'read and accessible abilities' do
context 'for user' do
before(:each) do
http_login(@project.owner)
end
it 'can show pull request in own project' do
get :show, :project_id => @project.id, :id => @pull.serial_id, :format => :json
response.should be_success
end
it 'should render right template for show action' do
get :show, :project_id => @project.id, :id => @pull.serial_id, :format => :json
response.should render_template('api/v1/pull_requests/show')
end
it 'can show pull request in open project' do
get :show, :project_id => @another_project.id, :id => @another_pull.serial_id, :format => :json
response.should be_success
end
it 'can show pull request in own hidden project' do
get :show, :project_id => @own_hidden_project.id, :id => @own_hidden_pull.serial_id, :format => :json
response.should be_success
end
it 'cant show pull request in hidden project' do
get :show, :project_id => @hidden_project.id, :id => @hidden_pull.serial_id, :format => :json
response.status.should == 403
end
it 'should return three pull requests' do
get :all_index, :filter => 'all', :format => :json
assigns[:pulls].should include(@pull)
assigns[:pulls].should include(@own_hidden_pull)
assigns[:pulls].should include(@membered_pull)
end
it 'should render right template for all index action' do
get :all_index, :format => :json
response.should render_template('api/v1/pull_requests/index')
end
it 'should return only assigned pull request' do
get :user_index, :format => :json
assigns[:pulls].should include(@own_hidden_pull)
assigns[:pulls].count.should == 1
end
it 'should render right template for user index action' do
get :user_index, :format => :json
response.should render_template('api/v1/pull_requests/index')
end
%w(commits files).each do |action|
it "can show pull request #{action} in own project" do
get action, :project_id => @project.id, :id => @pull.serial_id, :format => :json
response.should be_success
end
it "should render right template for commits action" do
get action, :project_id => @project.id, :id => @pull.serial_id, :format => :json
response.should render_template("api/v1/pull_requests/#{action}")
end
it "can't show pull request #{action} in hidden project" do
get action, :project_id => @hidden_project.id, :id => @hidden_pull.serial_id, :format => :json
response.should_not be_success
end
end
end
context 'for anonymous user' do
it 'can show pull request in open project', :anonymous_access => true do
get :show, :project_id => @project.id, :id => @pull.serial_id, :format => :json
response.should be_success
end
it 'cant show pull request in hidden project', :anonymous_access => true do
@project.update_column :visibility, 'hidden'
get :show, :project_id => @project.id, :id => @pull.serial_id, :format => :json
response.status.should == 403
end
it 'should not return any pull requests' do
get :all_index, :filter => 'all', :format => :json
response.status.should == 401
end
%w(commits files).each do |action|
it "can show pull request #{action} in project" do
get action, :project_id => @project.id, :id => @pull.serial_id, :format => :json
response.should be_success
end
it "should render right template for commits action" do
get action, :project_id => @project.id, :id => @pull.serial_id, :format => :json
response.should render_template("api/v1/pull_requests/#{action}")
end
it "can't show pull request #{action} in hidden project" do
get action, :project_id => @hidden_project.id, :id => @hidden_pull.serial_id, :format => :json
response.should_not be_success
end
end
end
end
context 'create accessibility' do
context 'for user' do
before(:each) do
http_login(@pull.user)
end
it 'can create pull request in own project' do
lambda { post :create, @create_params }.should change{ PullRequest.count }.by(1)
end
it 'can create pull request in own hidden project' do
lambda { post :create, @create_params.merge(:project_id => @own_hidden_project.id) }.should
change{ PullRequest.count }.by(1)
end
it 'can create pull request in open project' do
lambda { post :create, @create_params.merge(:project_id => @another_project.id) }.should
change{ PullRequest.count }.by(1)
end
it 'cant create pull request in hidden project' do
lambda { post :create, @create_params.merge(:project_id => @hidden_project.id) }.should
change{ PullRequest.count }.by(0)
end
end
context 'for anonymous user' do
it 'cant create pull request in project', :anonymous_access => true do
lambda { post :create, @create_params }.should change{ PullRequest.count }.by(0)
end
it 'cant create pull request in hidden project', :anonymous_access => true do
lambda { post :create, @create_params.merge(:project_id => @hidden_project.id) }.should
change{ PullRequest.count }.by(0)
end
end
end
context 'update accessibility' do
context 'for user' do
before(:each) do
http_login(@project.owner)
end
it 'can update pull request in own project' do
put :update, @update_params
@pull.reload.title.should == 'new title'
end
it 'can update pull request in own hidden project' do
put :update, @update_params.merge(:project_id => @own_hidden_project.id, :id => @own_hidden_pull.serial_id)
@own_hidden_pull.reload.title.should == 'new title'
end
it 'cant update pull request in open project' do
put :update, @update_params.merge(:project_id => @another_project.id, :id => @another_pull.serial_id)
@another_pull.reload.title.should_not == 'new title'
end
it 'cant update pull request in hidden project' do
put :update, @update_params.merge(:project_id => @hidden_project.id, :id => @hidden_pull.serial_id)
@hidden_pull.reload.title.should_not == 'title'
end
it 'can merge pull request in own project' do
put :merge, :project_id => @project.id, :id => @pull.serial_id, :format => :json
@pull.reload.status.should == 'merged'
response.should be_success
end
it 'can merge pull request in own hidden project' do
put :merge, :project_id => @own_hidden_project.id, :id => @own_hidden_pull.serial_id, :format => :json
@own_hidden_pull.reload.status.should == 'merged'
response.should be_success
end
it 'cant merge pull request in open project' do
put :merge, :project_id => @another_project.id, :id => @another_pull.serial_id, :format => :json
@another_pull.reload.status.should == 'ready'
response.status.should == 403
end
it 'cant merge pull request in hidden project' do
put :merge, :project_id => @hidden_project.id, :id => @hidden_pull.serial_id, :format => :json
@hidden_pull.reload.status.should == 'ready'
response.status.should == 403
end
end
context 'for anonymous user' do
it 'cant update pull request in project', :anonymous_access => true do
put :update, @update_params
response.status.should == 401
end
it 'cant update pull request in hidden project', :anonymous_access => true do
put :update, @update_params.merge(:project_id => @hidden_project.id, :id => @hidden_pull.serial_id)
response.status.should == 401
end
it 'cant merge pull request in open project' do
put :merge, :project_id => @another_project.id, :id => @another_pull.serial_id, :format => :json
@another_pull.reload.status.should == 'ready'
response.status.should == 401
end
it 'cant merge pull request in hidden project' do
put :merge, :project_id => @hidden_project.id, :id => @hidden_pull.serial_id, :format => :json
@hidden_pull.reload.status.should == 'ready'
response.status.should == 401
end
end
end
after(:all) do
User.destroy_all
Platform.destroy_all
end
end