require('spec_helper') describe Projects::ProjectMembersController do describe '#apply_import' do let(:project) { create(:project) } let(:another_project) { create(:project, :private) } let(:user) { create(:user) } let(:member) { create(:user) } before do project.team << [user, :master] another_project.team << [member, :guest] sign_in(user) end shared_context 'import applied' do before do post(:apply_import, namespace_id: project.namespace, project_id: project, source_project_id: another_project.id) end end context 'when user can access source project members' do before { another_project.team << [user, :guest] } include_context 'import applied' it 'imports source project members' do expect(project.team_members).to include member expect(response).to set_flash.to 'Successfully imported' expect(response).to redirect_to( namespace_project_project_members_path(project.namespace, project) ) end end context 'when user is not member of a source project' do include_context 'import applied' it 'does not import team members' do expect(project.team_members).not_to include member end it 'responds with not found' do expect(response.status).to eq 404 end end end describe '#index' do context 'when user is member' do before do project = create(:project, :private) member = create(:user) project.team << [member, :guest] sign_in(member) get :index, namespace_id: project.namespace, project_id: project end it { expect(response.status).to eq(200) } end end describe '#destroy' do let(:project) { create(:project, :public) } context 'when member is not found' do it 'returns 404' do delete :destroy, namespace_id: project.namespace, project_id: project, id: 42 expect(response.status).to eq(404) end end context 'when member is found' do let(:user) { create(:user) } let(:team_user) { create(:user) } let(:member) do project.team << [team_user, :developer] project.members.find_by(user_id: team_user.id) end context 'when user does not have enough rights' do before do project.team << [user, :developer] sign_in(user) end it 'returns 404' do delete :destroy, namespace_id: project.namespace, project_id: project, id: member expect(response.status).to eq(404) expect(project.users).to include team_user end end context 'when user has enough rights' do before do project.team << [user, :master] sign_in(user) end it '[HTML] removes user from members' do delete :destroy, namespace_id: project.namespace, project_id: project, id: member expect(response).to redirect_to( namespace_project_project_members_path(project.namespace, project) ) expect(project.users).not_to include team_user end it '[JS] removes user from members' do xhr :delete, :destroy, namespace_id: project.namespace, project_id: project, id: member expect(response).to be_success expect(project.users).not_to include team_user end end end end describe '#leave' do let(:project) { create(:project, :public) } let(:user) { create(:user) } context 'when member is not found' do before { sign_in(user) } it 'returns 403' do delete :leave, namespace_id: project.namespace, project_id: project expect(response.status).to eq(403) end end context 'when member is found' do context 'and is not an owner' do before do project.team << [user, :developer] sign_in(user) end it 'removes user from members' do delete :leave, namespace_id: project.namespace, project_id: project expect(response).to set_flash.to "You left the \"#{project.human_name}\" project." expect(response).to redirect_to(dashboard_projects_path) expect(project.users).not_to include user end end context 'and is an owner' do before do project.update(namespace_id: user.namespace_id) project.team << [user, :master, user] sign_in(user) end it 'cannot remove himself from the project' do delete :leave, namespace_id: project.namespace, project_id: project expect(response).to redirect_to( namespace_project_path(project.namespace, project) ) expect(response).to set_flash[:alert].to "You can not leave the \"#{project.human_name}\" project. Transfer or delete the project." expect(project.users).to include user end end context 'and is a requester' do before do project.request_access(user) sign_in(user) end it 'removes user from members' do delete :leave, namespace_id: project.namespace, project_id: project expect(response).to set_flash.to 'Your access request to the project has been withdrawn.' expect(response).to redirect_to(dashboard_projects_path) expect(project.members.request).to be_empty expect(project.users).not_to include user end end end end describe '#request_access' do let(:project) { create(:project, :public) } let(:user) { create(:user) } before do sign_in(user) end it 'creates a new ProjectMember that is not a team member' do post :request_access, namespace_id: project.namespace, project_id: project expect(response).to set_flash.to 'Your request for access has been queued for review.' expect(response).to redirect_to( namespace_project_path(project.namespace, project) ) expect(project.members.request.exists?(user_id: user)).to be_truthy expect(project.users).not_to include user end end describe '#approve' do let(:project) { create(:project, :public) } context 'when member is not found' do it 'returns 404' do post :approve_access_request, namespace_id: project.namespace, project_id: project, id: 42 expect(response.status).to eq(404) end end context 'when member is found' do let(:user) { create(:user) } let(:team_requester) { create(:user) } let(:member) do project.request_access(team_requester) project.members.request.find_by(user_id: team_requester.id) end context 'when user does not have enough rights' do before do project.team << [user, :developer] sign_in(user) end it 'returns 404' do post :approve_access_request, namespace_id: project.namespace, project_id: project, id: member expect(response.status).to eq(404) expect(project.users).not_to include team_requester end end context 'when user has enough rights' do before do project.team << [user, :master] sign_in(user) end it 'adds user to members' do post :approve_access_request, namespace_id: project.namespace, project_id: project, id: member expect(response).to redirect_to( namespace_project_project_members_path(project.namespace, project) ) expect(project.users).to include team_requester end end end end end