require 'spec_helper' describe 'Project Jobs Permissions' do let(:user) { create(:user) } let(:group) { create(:group, name: 'some group') } let(:project) { create(:project, :repository, namespace: group) } let(:pipeline) { create(:ci_empty_pipeline, project: project, sha: project.commit.sha, ref: 'master') } let!(:job) { create(:ci_build, :running, :coverage, :trace_artifact, pipeline: pipeline) } before do sign_in(user) project.enable_ci end describe 'jobs pages' do shared_examples 'recent job page details responds with status' do |status| before do visit project_job_path(project, job) end it { expect(status_code).to eq(status) } end shared_examples 'project jobs page responds with status' do |status| before do visit project_jobs_path(project) end it { expect(status_code).to eq(status) } end context 'when public access for jobs is disabled' do before do project.update(public_builds: false) end context 'when user is a guest' do before do project.add_guest(user) end it_behaves_like 'recent job page details responds with status', 404 it_behaves_like 'project jobs page responds with status', 404 end context 'when project is internal' do before do project.update(visibility_level: Gitlab::VisibilityLevel::INTERNAL) end it_behaves_like 'recent job page details responds with status', 404 it_behaves_like 'project jobs page responds with status', 404 end end context 'when public access for jobs is enabled' do before do project.update(public_builds: true) end context 'when project is internal' do before do project.update(visibility_level: Gitlab::VisibilityLevel::INTERNAL) end it_behaves_like 'recent job page details responds with status', 200 do it 'renders job details', :js do expect(page).to have_content "Job ##{job.id}" expect(page).to have_css '#build-trace' end end it_behaves_like 'project jobs page responds with status', 200 do it 'renders job' do page.within('.build') do expect(page).to have_content("##{job.id}") .and have_content(job.sha[0..7]) .and have_content(job.ref) .and have_content(job.name) end end end end end end describe 'artifacts page' do context 'when recent job has artifacts available' do before do archive = fixture_file_upload('spec/fixtures/ci_build_artifacts.zip') job.update(legacy_artifacts_file: archive) end context 'when public access for jobs is disabled' do before do project.update(public_builds: false) end context 'when user with guest role' do before do project.add_guest(user) end it 'responds with 404 status' do visit download_project_job_artifacts_path(project, job) expect(status_code).to eq(404) end end context 'when user with reporter role' do before do project.add_reporter(user) end it 'starts download artifact' do visit download_project_job_artifacts_path(project, job) expect(status_code).to eq(200) expect(page.response_headers['Content-Type']).to eq 'application/zip' expect(page.response_headers['Content-Transfer-Encoding']).to eq 'binary' end end end end end end