445fd0f9e5
* Try renaming moderator -> super_moderator * Still finding 'moderator' words * Fixes for failing specs * Update test with new role name * Update app/services/moderator/manage_activity_and_roles.rb Co-authored-by: Suzanne Aitchison <suzanne@forem.com> Co-authored-by: Suzanne Aitchison <suzanne@forem.com>
94 lines
2.5 KiB
Ruby
94 lines
2.5 KiB
Ruby
require "rails_helper"
|
|
|
|
# rubocop:disable RSpec/PredicateMatcher
|
|
RSpec.describe Authorizer, type: :policy do
|
|
subject(:authorizer) { described_class.for(user: user) }
|
|
|
|
let(:authorizer_mod_role) { described_class.for(user: mod_user) }
|
|
let(:user) { create(:user) }
|
|
let(:mod_user) { create(:user, :super_moderator) }
|
|
|
|
describe "#any_admin?" do
|
|
it "queries the user's roles" do
|
|
# I want to test `expect(authorizer.admin?)` but our rubocop
|
|
# version squaks.
|
|
expect(authorizer.admin?).to be_falsey
|
|
end
|
|
end
|
|
|
|
describe "#super_moderator?" do
|
|
it "queries the user's roles" do
|
|
expect(authorizer.super_moderator?).to be_falsey
|
|
expect(authorizer_mod_role.super_moderator?).to be_truthy
|
|
end
|
|
end
|
|
|
|
describe "#administrative_access_to?" do
|
|
subject(:method_call) { authorizer.administrative_access_to?(resource: resource) }
|
|
|
|
let(:resource) { nil }
|
|
|
|
context "when not an admin or super admin and not given a resource" do
|
|
let(:user) { build(:user) }
|
|
|
|
it { is_expected.to be_falsey }
|
|
end
|
|
|
|
context "when an admin and not given a resource" do
|
|
let(:user) { build(:user, :admin) }
|
|
|
|
it { is_expected.to be_truthy }
|
|
end
|
|
|
|
context "when a super_admin and not given a resource" do
|
|
let(:user) { build(:user, :super_admin) }
|
|
|
|
it { is_expected.to be_truthy }
|
|
end
|
|
|
|
context "when given a resource and the user is assigned singular administration" do
|
|
let(:resource) { Article }
|
|
|
|
before do
|
|
user.add_role(:single_resource_admin, resource)
|
|
end
|
|
|
|
it { is_expected.to be_truthy }
|
|
end
|
|
|
|
context "when given a resource and the user is assigned singular administration to another" do
|
|
let(:resource) { Article }
|
|
|
|
before do
|
|
user.add_role(:single_resource_admin, Comment)
|
|
end
|
|
|
|
it { is_expected.to be_falsey }
|
|
end
|
|
end
|
|
|
|
describe "#trusted?" do
|
|
# We don't need a saved user. Let's not require that.
|
|
let(:user) { instance_double(User, id: 123) }
|
|
|
|
it "memoizes the result from rolify" do
|
|
allow(Rails.cache)
|
|
.to receive(:fetch)
|
|
.with("user-#{user.id}/has_trusted_role", expires_in: 200.hours)
|
|
.and_return(false)
|
|
.once
|
|
|
|
2.times { authorizer.trusted? }
|
|
end
|
|
end
|
|
|
|
describe "#vomited_on?" do
|
|
subject(:method_call) { authorizer.vomited_on? }
|
|
|
|
# I included this test because I had mis-copied something and the
|
|
# system broke. This test is my "penance" for pushing up broken
|
|
# code.
|
|
it { is_expected.not_to be_nil }
|
|
end
|
|
end
|
|
# rubocop:enable RSpec/PredicateMatcher
|