docbrown/spec/policies/api_secret_policy_spec.rb
Jacob Herrington a5b2d109d5
Rename banned and comment_banned roles (#12270)
* Rename banned and comment_banned roles

* Add data update script to rename roles containing 'ban'

* Add named error for Suspended users

* Update unidiomatic method names

* Rename misc banned to suspended

* Apply suggestions from code review

Co-authored-by: Michael Kohl <me@citizen428.net>

* Add unit tests for suspended methods

This commit also adds TODO comments for removing banned and
comment_banned from the codebase after data update scripts have
successfully run on all of our Forems.

Co-authored-by: Michael Kohl <me@citizen428.net>
2021-04-06 10:12:14 -05:00

38 lines
1.2 KiB
Ruby

require "rails_helper"
RSpec.describe ApiSecretPolicy, type: :policy do
subject { described_class.new(user, api_secret) }
let(:valid_attributes) { %i[description] }
context "when user is not signed in" do
let(:user) { nil }
let(:api_secret) { build_stubbed(:api_secret) }
it { within_block_is_expected.to raise_error(Pundit::NotAuthorizedError) }
end
context "when user owns the secret" do
let(:user) { build_stubbed(:user) }
let(:api_secret) { build_stubbed(:api_secret, user: user) }
it { is_expected.to permit_actions %i[create destroy] }
it { is_expected.to permit_mass_assignment_of(valid_attributes) }
end
context "when user does not own the secret" do
let(:user) { build_stubbed(:user) }
let(:api_secret) { build_stubbed(:api_secret) }
it { is_expected.to permit_actions %i[create] }
it { is_expected.to forbid_actions %i[destroy] }
it { is_expected.to permit_mass_assignment_of(valid_attributes) }
end
context "when the user is suspended" do
let(:user) { create(:user, :suspended) }
let(:api_secret) { build_stubbed(:api_secret) }
it { is_expected.to forbid_actions %i[create] }
end
end