494ad153ab
* Add internal response template controller * Add response template policy and spec * Add response template views for internal * Add missing html oops, and some padding * Use arrays instead of %w because spaces * Link to user in index list * Add actual HTML oops * Allow success flash to be displayed * Add tag moderator trait * Remove unnecessary .all * Use constant to avoid duplication * Use URL helpers over manual string URLs * Use appropriate renders and URLs * Follow conventional CRUD and use form_with * Add internal request spec for response_templates * Add missing view file oops * Use table view for index and bootstrap styles * Redirect to index after create * Use clearer messaging for labels * Validate email types to use only plain text and html
53 lines
2.2 KiB
Ruby
53 lines
2.2 KiB
Ruby
require "rails_helper"
|
|
|
|
RSpec.describe ResponseTemplatePolicy, type: :policy do
|
|
subject(:response_template_policy) { described_class.new(user, response_template) }
|
|
|
|
def valid_attributes
|
|
ResponseTemplatePolicy::PERMITTED_ATTRIBUTES
|
|
end
|
|
|
|
context "when user is not signed in" do
|
|
let(:user) { nil }
|
|
let(:response_template) { create(:response_template, type_of: "personal_comment", user: nil) }
|
|
|
|
it { within_block_is_expected.to raise_error(Pundit::NotAuthorizedError) }
|
|
end
|
|
|
|
context "when user is not the author" do
|
|
let(:user) { create(:user) }
|
|
let(:second_user) { create(:user) }
|
|
let(:response_template) { create(:response_template, type_of: "personal_comment", user: second_user) }
|
|
|
|
it { is_expected.to permit_actions(%i[create]) }
|
|
it { is_expected.to forbid_actions(%i[update destroy admin_index moderator_index moderator_create]) }
|
|
it { is_expected.to permit_mass_assignment_of(valid_attributes).for_action(:create) }
|
|
it { is_expected.to permit_mass_assignment_of(valid_attributes).for_action(:update) }
|
|
end
|
|
|
|
context "when user is the author" do
|
|
let(:user) { create(:user) }
|
|
let(:response_template) { create(:response_template, type_of: "personal_comment", user: user) }
|
|
|
|
it { is_expected.to permit_actions(%i[create update destroy]) }
|
|
it { is_expected.to forbid_actions(%i[admin_index moderator_index moderator_create]) }
|
|
it { is_expected.to permit_mass_assignment_of(valid_attributes).for_action(:create) }
|
|
it { is_expected.to permit_mass_assignment_of(valid_attributes).for_action(:update) }
|
|
end
|
|
|
|
context "when user is a tag moderator" do
|
|
let(:user) { create(:user, :tag_moderator) }
|
|
let(:response_template) { create(:response_template, type_of: "mod_comment", user: nil) }
|
|
|
|
it { is_expected.to permit_actions(%i[moderator_index create moderator_create]) }
|
|
it { is_expected.to forbid_actions(%i[update destroy admin_index]) }
|
|
end
|
|
|
|
context "when user is an admin" do
|
|
let(:user) { create(:user, :admin) }
|
|
let(:response_template) { create(:response_template, type_of: "mod_comment", user: nil) }
|
|
|
|
it { is_expected.to permit_actions(%i[moderator_index create moderator_create admin_index]) }
|
|
it { is_expected.to forbid_actions(%i[update destroy]) }
|
|
end
|
|
end
|