31 lines
1,004 B
Ruby
31 lines
1,004 B
Ruby
require "rails_helper"
|
|
|
|
RSpec.describe ApiSecretPolicy, type: :policy do
|
|
subject { described_class.new(user, api_secret) }
|
|
|
|
let(:valid_attributes) { %i[description] }
|
|
|
|
context "when user is not signed in" do
|
|
let(:user) { nil }
|
|
let(:api_secret) { build_stubbed(:api_secret) }
|
|
|
|
it { within_block_is_expected.to raise_error(Pundit::NotAuthorizedError) }
|
|
end
|
|
|
|
context "when user owns the secret" do
|
|
let(:user) { build_stubbed(:user) }
|
|
let(:api_secret) { build_stubbed(:api_secret, user: user) }
|
|
|
|
it { is_expected.to permit_actions %i[create destroy] }
|
|
it { is_expected.to permit_mass_assignment_of(valid_attributes) }
|
|
end
|
|
|
|
context "when user does not own the secret" do
|
|
let(:user) { build_stubbed(:user) }
|
|
let(:api_secret) { build_stubbed(:api_secret) }
|
|
|
|
it { is_expected.to permit_actions %i[create] }
|
|
it { is_expected.to forbid_actions %i[destroy] }
|
|
it { is_expected.to permit_mass_assignment_of(valid_attributes) }
|
|
end
|
|
end
|