72 lines
1.8 KiB
Ruby
72 lines
1.8 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require 'spec_helper'
|
|
|
|
# Test an operation that triggers background jobs requiring administrative rights
|
|
RSpec.describe 'Admin mode for workers', :request_store, feature_category: :authentication_and_authorization do
|
|
include Spec::Support::Helpers::Features::AdminUsersHelpers
|
|
|
|
let(:user) { create(:user) }
|
|
let(:user_to_delete) { create(:user) }
|
|
|
|
before do
|
|
sign_in(user)
|
|
end
|
|
|
|
context 'as a regular user' do
|
|
it 'cannot delete user' do
|
|
visit admin_user_path(user_to_delete)
|
|
|
|
expect(page).to have_gitlab_http_status(:not_found)
|
|
end
|
|
end
|
|
|
|
context 'as an admin user' do
|
|
let(:user) { create(:admin) }
|
|
|
|
context 'when admin mode disabled' do
|
|
it 'cannot delete user', :js do
|
|
visit admin_user_path(user_to_delete)
|
|
|
|
expect(page).to have_content('Re-authentication required')
|
|
end
|
|
end
|
|
|
|
context 'when admin mode enabled', :delete do
|
|
before do
|
|
gitlab_enable_admin_mode_sign_in(user)
|
|
end
|
|
|
|
it 'can delete user', :js do
|
|
visit admin_user_path(user_to_delete)
|
|
|
|
click_action_in_user_dropdown(user_to_delete.id, 'Delete user')
|
|
|
|
page.within '.modal-dialog' do
|
|
find("input[name='username']").send_keys(user_to_delete.name)
|
|
click_button 'Delete user'
|
|
|
|
wait_for_requests
|
|
end
|
|
|
|
expect(page).to have_content('The user is being deleted.')
|
|
|
|
# Perform jobs while logged out so that admin mode is only enabled in job metadata
|
|
execute_jobs_signed_out(user)
|
|
|
|
visit admin_user_path(user_to_delete)
|
|
|
|
expect(find('h1.page-title')).to have_content('(Blocked)')
|
|
end
|
|
end
|
|
end
|
|
|
|
def execute_jobs_signed_out(user)
|
|
gitlab_sign_out
|
|
|
|
Sidekiq::Worker.drain_all
|
|
|
|
sign_in(user)
|
|
gitlab_enable_admin_mode_sign_in(user)
|
|
end
|
|
end
|