gitlab-org--gitlab-foss/spec/policies/resource_label_event_policy_spec.rb

# frozen_string_literal: true

require 'spec_helper'

RSpec.describe ResourceLabelEventPolicy do
  let_it_be(:user) { create(:user) }
  let_it_be(:project) { create(:project, :private) }
  let_it_be(:issue) { create(:issue, project: project) }
  let_it_be(:private_project) { create(:project, :private) }

  describe '#read_resource_label_event' do
    context 'with non-member user' do
      it 'does not allow to read event' do
        event = build_event(project)

        expect(permissions(user, event)).to be_disallowed(:read_resource_label_event)
      end
    end

    context 'with member user' do
      before do
        project.add_guest(user)
      end

      it 'allows to read event for accessible label' do
        event = build_event(project)

        expect(permissions(user, event)).to be_allowed(:read_resource_label_event)
      end

      it 'does not allow to read event for not accessible label' do
        event = build_event(private_project)

        expect(permissions(user, event)).to be_disallowed(:read_resource_label_event)
      end
    end
  end

  describe '#read_label' do
    it 'allows to read deleted label' do
      event = build(:resource_label_event, issue: issue, label: nil)

      expect(permissions(user, event)).to be_allowed(:read_label)
    end

    it 'allows to read accessible label' do
      project.add_guest(user)
      event = build_event(project)

      expect(permissions(user, event)).to be_allowed(:read_label)
    end

    it 'does not allow to read not accessible label' do
      event = build_event(private_project)

      expect(permissions(user, event)).to be_disallowed(:read_label)
    end
  end

  def build_event(label_project)
    label = create(:label, project: label_project)

    build(:resource_label_event, issue: issue, label: label)
  end

  def permissions(user, issue)
    described_class.new(user, issue)
  end
end