112 lines
2.7 KiB
Ruby
112 lines
2.7 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
# AccessMatchersForController
|
|
#
|
|
# For testing authorize_xxx in controller.
|
|
module AccessMatchersForController
|
|
extend RSpec::Matchers::DSL
|
|
include Warden::Test::Helpers
|
|
|
|
EXPECTED_STATUS_CODE_ALLOWED = [200, 201, 204, 302].freeze
|
|
EXPECTED_STATUS_CODE_DENIED = [401, 404].freeze
|
|
|
|
def emulate_user(role, membership = nil)
|
|
case role
|
|
when :admin
|
|
user = create(:admin)
|
|
sign_in(user)
|
|
when :user
|
|
user = create(:user)
|
|
sign_in(user)
|
|
when :external
|
|
user = create(:user, external: true)
|
|
sign_in(user)
|
|
when :visitor
|
|
user = nil
|
|
when User
|
|
user = role
|
|
sign_in(user)
|
|
when *Gitlab::Access.sym_options_with_owner.keys # owner, maintainer, developer, reporter, guest
|
|
raise ArgumentError, "cannot emulate #{role} without membership parent" unless membership
|
|
|
|
user = create_user_by_membership(role, membership)
|
|
sign_in(user)
|
|
else
|
|
raise ArgumentError, "cannot emulate user #{role}"
|
|
end
|
|
|
|
user
|
|
end
|
|
|
|
def create_user_by_membership(role, membership)
|
|
if role == :owner && membership.owner
|
|
user = membership.owner
|
|
else
|
|
user = create(:user)
|
|
membership.public_send(:"add_#{role}", user)
|
|
end
|
|
|
|
user
|
|
end
|
|
|
|
def description_for(role, type, expected, result)
|
|
"be #{type} for #{role}. Expected: #{expected.join(',')} Got: #{result}"
|
|
end
|
|
|
|
def update_owner(objects, user)
|
|
return unless objects
|
|
|
|
objects.each do |object|
|
|
if object.respond_to?(:owner)
|
|
object.update_attribute(:owner, user)
|
|
elsif object.respond_to?(:user)
|
|
object.update_attribute(:user, user)
|
|
else
|
|
raise ArgumentError, "cannot own this object #{object}"
|
|
end
|
|
end
|
|
end
|
|
|
|
matcher :be_allowed_for do |role|
|
|
match do |action|
|
|
user = emulate_user(role, @membership)
|
|
update_owner(@objects, user)
|
|
action.call
|
|
|
|
EXPECTED_STATUS_CODE_ALLOWED.include?(response.status)
|
|
end
|
|
|
|
chain :of do |membership|
|
|
@membership = membership
|
|
end
|
|
|
|
chain :own do |*objects|
|
|
@objects = objects
|
|
end
|
|
|
|
description { description_for(role, 'allowed', EXPECTED_STATUS_CODE_ALLOWED, response.status) }
|
|
supports_block_expectations
|
|
end
|
|
|
|
matcher :be_denied_for do |role|
|
|
match do |action|
|
|
user = emulate_user(role, @membership)
|
|
update_owner(@objects, user)
|
|
action.call
|
|
|
|
EXPECTED_STATUS_CODE_DENIED.include?(response.status)
|
|
end
|
|
|
|
chain :of do |membership|
|
|
@membership = membership
|
|
end
|
|
|
|
chain :own do |*objects|
|
|
@objects = objects
|
|
end
|
|
|
|
description { description_for(role, 'denied', EXPECTED_STATUS_CODE_DENIED, response.status) }
|
|
supports_block_expectations
|
|
end
|
|
end
|