473594f192
* Started matching spam and suspended roles * Match spam and suspended roles in most cases * Fixed check_suspended for unauthenticated users
45 lines
1.4 KiB
Ruby
45 lines
1.4 KiB
Ruby
require "rails_helper"
|
|
|
|
RSpec.describe ApiSecretPolicy, type: :policy do
|
|
subject { described_class.new(user, api_secret) }
|
|
|
|
let(:valid_attributes) { %i[description] }
|
|
|
|
context "when user is not signed in" do
|
|
let(:user) { nil }
|
|
let(:api_secret) { build_stubbed(:api_secret) }
|
|
|
|
it { within_block_is_expected.to raise_error(Pundit::NotAuthorizedError) }
|
|
end
|
|
|
|
context "when user owns the secret" do
|
|
let(:user) { build_stubbed(:user) }
|
|
let(:api_secret) { build_stubbed(:api_secret, user: user) }
|
|
|
|
it { is_expected.to permit_actions %i[create destroy] }
|
|
it { is_expected.to permit_mass_assignment_of(valid_attributes) }
|
|
end
|
|
|
|
context "when user does not own the secret" do
|
|
let(:user) { build_stubbed(:user) }
|
|
let(:api_secret) { build_stubbed(:api_secret) }
|
|
|
|
it { is_expected.to permit_actions %i[create] }
|
|
it { is_expected.to forbid_actions %i[destroy] }
|
|
it { is_expected.to permit_mass_assignment_of(valid_attributes) }
|
|
end
|
|
|
|
context "when the user is suspended" do
|
|
let(:user) { create(:user, :suspended) }
|
|
let(:api_secret) { build_stubbed(:api_secret) }
|
|
|
|
it { is_expected.to forbid_actions %i[create] }
|
|
end
|
|
|
|
context "when the user has a spam role" do
|
|
let(:user) { create(:user, :spam) }
|
|
let(:api_secret) { build_stubbed(:api_secret) }
|
|
|
|
it { is_expected.to forbid_actions %i[create] }
|
|
end
|
|
end
|