* chore: hardcoded paths * hardcoded docs path * Update docs/admin/admin-search.md Co-authored-by: rhymes <github@rhymes.dev> Co-authored-by: rhymes <github@rhymes.dev>
57 lines
1.3 KiB
Ruby
57 lines
1.3 KiB
Ruby
require "rails_helper"
|
|
|
|
RSpec.describe "/admin/permissions", type: :request do
|
|
context "when the user is not an admin" do
|
|
let(:user) { create(:user) }
|
|
|
|
before do
|
|
sign_in user
|
|
end
|
|
|
|
it "blocks the request" do
|
|
expect do
|
|
get admin_permissions_path
|
|
end.to raise_error(Pundit::NotAuthorizedError)
|
|
end
|
|
end
|
|
|
|
context "when the user is a super admin" do
|
|
let(:super_admin) { create(:user, :super_admin) }
|
|
|
|
before do
|
|
sign_in super_admin
|
|
get admin_permissions_path
|
|
end
|
|
|
|
it "allows the request" do
|
|
expect(response).to have_http_status(:ok)
|
|
end
|
|
end
|
|
|
|
context "when the user is a single resource admin" do
|
|
let(:single_resource_admin) { create(:user, :single_resource_admin, resource: Permission) }
|
|
|
|
before do
|
|
sign_in single_resource_admin
|
|
get admin_permissions_path
|
|
end
|
|
|
|
it "allows the request" do
|
|
expect(response).to have_http_status(:ok)
|
|
end
|
|
end
|
|
|
|
context "when the user is the wrong single resource admin" do
|
|
let(:single_resource_admin) { create(:user, :single_resource_admin, resource: Article) }
|
|
|
|
before do
|
|
sign_in single_resource_admin
|
|
end
|
|
|
|
it "blocks the request" do
|
|
expect do
|
|
get admin_permissions_path
|
|
end.to raise_error(Pundit::NotAuthorizedError)
|
|
end
|
|
end
|
|
end
|