require "rails_helper" # rubocop:disable RSpec/PredicateMatcher RSpec.describe Authorizer, type: :policy do subject(:authorizer) { described_class.for(user: user) } let(:user) { create(:user) } describe "#any_admin?" do # This test che it "queries the user's roles" do # I want to test `expect(authorizer.admin?)` but our rubocop # version squaks. expect(authorizer.admin?).to be_falsey end end describe "#administrative_access_to?" do subject(:method_call) { authorizer.administrative_access_to?(resource: resource) } let(:resource) { nil } context "when not an admin or super admin and not given a resource" do let(:user) { build(:user) } it { is_expected.to be_falsey } end context "when an admin and not given a resource" do let(:user) { build(:user, :admin) } it { is_expected.to be_truthy } end context "when a super_admin and not given a resource" do let(:user) { build(:user, :super_admin) } it { is_expected.to be_truthy } end context "when given a resource and the user is assigned singular administration" do let(:resource) { Article } before do user.add_role(:single_resource_admin, resource) end it { is_expected.to be_truthy } end context "when given a resource and the user is assigned singular administration to another" do let(:resource) { Article } before do user.add_role(:single_resource_admin, Comment) end it { is_expected.to be_falsey } end end describe "#trusted?" do # We don't need a saved user. Let's not require that. let(:user) { instance_double(User, id: 123) } it "memoizes the result from rolify" do allow(Rails.cache) .to receive(:fetch) .with("user-#{user.id}/has_trusted_role", expires_in: 200.hours) .and_return(false) .once 2.times { authorizer.trusted? } end end describe "#vomited_on?" do subject(:method_call) { authorizer.vomited_on? } # I included this test because I had mis-copied something and the # system broke. This test is my "penance" for pushing up broken # code. it { is_expected.not_to be_nil } end end # rubocop:enable RSpec/PredicateMatcher