debian-mirror-gitlab/spec/controllers/groups/group_members_controller_spec.rb

267 lines
7.2 KiB
Ruby
Raw Normal View History

2016-06-02 11:05:42 +05:30
require 'spec_helper'
describe Groups::GroupMembersController do
let(:user) { create(:user) }
2017-08-17 22:00:37 +05:30
let(:group) { create(:group, :public, :access_requestable) }
2016-06-02 11:05:42 +05:30
2017-08-17 22:00:37 +05:30
describe 'GET index' do
it 'renders index with 200 status code' do
2019-02-15 15:39:39 +05:30
get :index, params: { group_id: group }
2016-06-02 11:05:42 +05:30
2018-03-17 18:26:18 +05:30
expect(response).to have_gitlab_http_status(200)
2016-06-02 11:05:42 +05:30
expect(response).to render_template(:index)
end
end
2017-08-17 22:00:37 +05:30
describe 'POST create' do
let(:group_user) { create(:user) }
2017-09-10 17:25:29 +05:30
before do
sign_in(user)
end
2017-08-17 22:00:37 +05:30
context 'when user does not have enough rights' do
2017-09-10 17:25:29 +05:30
before do
group.add_developer(user)
end
it 'returns 403' do
2019-02-15 15:39:39 +05:30
post :create, params: {
group_id: group,
user_ids: group_user.id,
access_level: Gitlab::Access::GUEST
}
2018-03-17 18:26:18 +05:30
expect(response).to have_gitlab_http_status(403)
2017-08-17 22:00:37 +05:30
expect(group.users).not_to include group_user
end
end
2017-08-17 22:00:37 +05:30
context 'when user has enough rights' do
2017-09-10 17:25:29 +05:30
before do
group.add_owner(user)
end
2017-08-17 22:00:37 +05:30
it 'adds user to members' do
2019-02-15 15:39:39 +05:30
post :create, params: {
group_id: group,
user_ids: group_user.id,
access_level: Gitlab::Access::GUEST
}
2017-08-17 22:00:37 +05:30
expect(response).to set_flash.to 'Users were successfully added.'
expect(response).to redirect_to(group_group_members_path(group))
expect(group.users).to include group_user
end
2017-08-17 22:00:37 +05:30
it 'adds no user to members' do
2019-02-15 15:39:39 +05:30
post :create, params: {
group_id: group,
user_ids: '',
access_level: Gitlab::Access::GUEST
}
2017-08-17 22:00:37 +05:30
expect(response).to set_flash.to 'No users specified.'
expect(response).to redirect_to(group_group_members_path(group))
expect(group.users).not_to include group_user
end
end
end
2018-03-17 18:26:18 +05:30
describe 'PUT update' do
let(:requester) { create(:group_member, :access_request, group: group) }
before do
group.add_owner(user)
sign_in(user)
end
Gitlab::Access.options.each do |label, value|
it "can change the access level to #{label}" do
2019-02-15 15:39:39 +05:30
put :update, params: {
group_member: { access_level: value },
group_id: group,
id: requester
}, xhr: true
2018-03-17 18:26:18 +05:30
expect(requester.reload.human_access).to eq(label)
end
end
end
2017-08-17 22:00:37 +05:30
describe 'DELETE destroy' do
let(:member) { create(:group_member, :developer, group: group) }
2017-09-10 17:25:29 +05:30
before do
sign_in(user)
end
2017-08-17 22:00:37 +05:30
context 'when member is not found' do
it 'returns 403' do
2019-02-15 15:39:39 +05:30
delete :destroy, params: { group_id: group, id: 42 }
2017-08-17 22:00:37 +05:30
2018-03-17 18:26:18 +05:30
expect(response).to have_gitlab_http_status(403)
2017-08-17 22:00:37 +05:30
end
end
context 'when member is found' do
context 'when user does not have enough rights' do
2017-09-10 17:25:29 +05:30
before do
group.add_developer(user)
end
it 'returns 403' do
2019-02-15 15:39:39 +05:30
delete :destroy, params: { group_id: group, id: member }
2018-03-17 18:26:18 +05:30
expect(response).to have_gitlab_http_status(403)
2017-08-17 22:00:37 +05:30
expect(group.members).to include member
end
end
context 'when user has enough rights' do
2017-09-10 17:25:29 +05:30
before do
group.add_owner(user)
end
it '[HTML] removes user from members' do
2019-02-15 15:39:39 +05:30
delete :destroy, params: { group_id: group, id: member }
2019-01-03 12:48:30 +05:30
expect(response).to set_flash.to 'User was successfully removed from group and any subresources.'
expect(response).to redirect_to(group_group_members_path(group))
2017-08-17 22:00:37 +05:30
expect(group.members).not_to include member
end
it '[JS] removes user from members' do
2019-02-15 15:39:39 +05:30
delete :destroy, params: { group_id: group, id: member }, xhr: true
expect(response).to be_success
2017-08-17 22:00:37 +05:30
expect(group.members).not_to include member
end
end
end
end
2017-08-17 22:00:37 +05:30
describe 'DELETE leave' do
2017-09-10 17:25:29 +05:30
before do
sign_in(user)
end
context 'when member is not found' do
2016-11-03 12:29:30 +05:30
it 'returns 404' do
2019-02-15 15:39:39 +05:30
delete :leave, params: { group_id: group }
2018-03-17 18:26:18 +05:30
expect(response).to have_gitlab_http_status(404)
end
end
context 'when member is found' do
context 'and is not an owner' do
2017-09-10 17:25:29 +05:30
before do
group.add_developer(user)
end
it 'removes user from members' do
2019-02-15 15:39:39 +05:30
delete :leave, params: { group_id: group }
expect(response).to set_flash.to "You left the \"#{group.name}\" group."
expect(response).to redirect_to(dashboard_groups_path)
expect(group.users).not_to include user
end
2017-09-10 17:25:29 +05:30
it 'supports json request' do
2019-02-15 15:39:39 +05:30
delete :leave, params: { group_id: group }, format: :json
2017-09-10 17:25:29 +05:30
2018-03-17 18:26:18 +05:30
expect(response).to have_gitlab_http_status(200)
2017-09-10 17:25:29 +05:30
expect(json_response['notice']).to eq "You left the \"#{group.name}\" group."
end
end
context 'and is an owner' do
2017-09-10 17:25:29 +05:30
before do
group.add_owner(user)
end
it 'cannot removes himself from the group' do
2019-02-15 15:39:39 +05:30
delete :leave, params: { group_id: group }
2018-03-17 18:26:18 +05:30
expect(response).to have_gitlab_http_status(403)
end
end
context 'and is a requester' do
2017-09-10 17:25:29 +05:30
before do
group.request_access(user)
end
it 'removes user from members' do
2019-02-15 15:39:39 +05:30
delete :leave, params: { group_id: group }
expect(response).to set_flash.to 'Your access request to the group has been withdrawn.'
2016-08-24 12:49:21 +05:30
expect(response).to redirect_to(group_path(group))
expect(group.requesters).to be_empty
expect(group.users).not_to include user
end
end
end
end
2017-08-17 22:00:37 +05:30
describe 'POST request_access' do
2017-09-10 17:25:29 +05:30
before do
sign_in(user)
end
it 'creates a new GroupMember that is not a team member' do
2019-02-15 15:39:39 +05:30
post :request_access, params: { group_id: group }
expect(response).to set_flash.to 'Your request for access has been queued for review.'
expect(response).to redirect_to(group_path(group))
2016-08-24 12:49:21 +05:30
expect(group.requesters.exists?(user_id: user)).to be_truthy
expect(group.users).not_to include user
end
end
2017-08-17 22:00:37 +05:30
describe 'POST approve_access_request' do
let(:member) { create(:group_member, :access_request, group: group) }
2017-09-10 17:25:29 +05:30
before do
sign_in(user)
end
context 'when member is not found' do
it 'returns 403' do
2019-02-15 15:39:39 +05:30
post :approve_access_request, params: { group_id: group, id: 42 }
2018-03-17 18:26:18 +05:30
expect(response).to have_gitlab_http_status(403)
end
end
context 'when member is found' do
context 'when user does not have enough rights' do
2017-09-10 17:25:29 +05:30
before do
group.add_developer(user)
end
it 'returns 403' do
2019-02-15 15:39:39 +05:30
post :approve_access_request, params: { group_id: group, id: member }
2018-03-17 18:26:18 +05:30
expect(response).to have_gitlab_http_status(403)
2017-08-17 22:00:37 +05:30
expect(group.members).not_to include member
end
end
context 'when user has enough rights' do
2017-09-10 17:25:29 +05:30
before do
group.add_owner(user)
end
it 'adds user to members' do
2019-02-15 15:39:39 +05:30
post :approve_access_request, params: { group_id: group, id: member }
expect(response).to redirect_to(group_group_members_path(group))
2017-08-17 22:00:37 +05:30
expect(group.members).to include member
end
end
end
end
2016-06-02 11:05:42 +05:30
end