docbrown/spec/requests/admin/permissions_spec.rb
Ridhwana 449723d8c7
[15-min-fix] Remove/Update the last of the admin hardcoded paths (#13681)
* chore: hardcoded paths

* hardcoded docs path

* Update docs/admin/admin-search.md

Co-authored-by: rhymes <github@rhymes.dev>

Co-authored-by: rhymes <github@rhymes.dev>
2021-05-06 15:12:06 +02:00

57 lines
1.3 KiB
Ruby

require "rails_helper"
RSpec.describe "/admin/permissions", type: :request do
context "when the user is not an admin" do
let(:user) { create(:user) }
before do
sign_in user
end
it "blocks the request" do
expect do
get admin_permissions_path
end.to raise_error(Pundit::NotAuthorizedError)
end
end
context "when the user is a super admin" do
let(:super_admin) { create(:user, :super_admin) }
before do
sign_in super_admin
get admin_permissions_path
end
it "allows the request" do
expect(response).to have_http_status(:ok)
end
end
context "when the user is a single resource admin" do
let(:single_resource_admin) { create(:user, :single_resource_admin, resource: Permission) }
before do
sign_in single_resource_admin
get admin_permissions_path
end
it "allows the request" do
expect(response).to have_http_status(:ok)
end
end
context "when the user is the wrong single resource admin" do
let(:single_resource_admin) { create(:user, :single_resource_admin, resource: Article) }
before do
sign_in single_resource_admin
end
it "blocks the request" do
expect do
get admin_permissions_path
end.to raise_error(Pundit::NotAuthorizedError)
end
end
end