docbrown/spec/requests/moderations_spec.rb
Edem Attikese 0ad8cd9eab Edem/improvements/pundit coverage (#498)
* added organization policy + spec

* user specs for is_org_admin?

* added authroize to organization controller

* admin policy + specs

* deleted enforce admin due to pundit policy redundancy

* applied admin policy to entire admin namespace

* refactoring analytics controller WIP - wanna test codeship

* Add protection against reactions to unpublished articles (#473)

* Add chat channel policy and spec (#474)

* Add comment policy and specs (#475)

* Fix edge case with apostrophes

* Add comment policy and specs

* Add login for deleting comment spec

* Change test to raise pundit error instead of 404

* Clean up comment destroy request specs

* Remove redundant raise

* Whitelist columns on to_json call (#477)

* Add pundit policy for several controllers (#476)

* Add pundit policy for several controllers

* Adjust video spec

* Fix tag request specs

* Add proper twilio tokens request specs

* Remove puts statements

* Add a couple basic request specs (#478)

* Add a few tests and fix user tag color bug (#482)

* Refactor handle_tag_index in stories_controller (#481)

* Modify valid_request_origin? (#483)

* Add misc specs and remove banned attribute from user model (#484)

*  Fix missing Cloudinary tags and misc specs (#486)

* removing current_user_is_admin? to use .is_admin? method

* added missing org policy routes

* Add comment for all public controllers

* Fix edge case for test

* Authorize mod controller and add specs

* Refactor methods via inheritance and use only super_admin role

* Create policy method for analytics via article_policy and refactor

* Capitalize all buttons in dashboard page

* Fix org tests and remove old admin test

* Use only happy path for analytics

* Fix tests to use Pundit error

* Update org_policy spec
2018-06-28 09:38:20 -04:00

42 lines
No EOL
1.1 KiB
Ruby

require "rails_helper"
RSpec.describe "Moderations", type: :request do
let(:user) { create(:user) }
let(:article) { create(:article, user_id: user.id) }
let(:comment) do
create(:comment,
commentable_id: article.id,
commentable_type: "Article",
user_id: user.id)
end
before do
sign_in user
end
describe "GET moderations article" do
it "returns 200 if user trusted" do
user.add_role :trusted
get article.path + "/mod"
expect(response).to have_http_status(200)
end
it "returns 404 if user trusted not trusted" do
expect do
get article.path + "/mod"
end.to raise_error(Pundit::NotAuthorizedError)
end
end
describe "GET moderations comment" do
it "returns 200 if user trusted" do
user.add_role :trusted
get comment.path + "/mod"
expect(response).to have_http_status(200)
end
it "returns 404 if user trusted not trusted" do
expect do
get comment.path + "/mod"
end.to raise_error(Pundit::NotAuthorizedError)
end
end
end