1 files changed, 164 insertions, 0 deletions

diff --git a/spec/features/issues/issue_header_spec.rb b/spec/features/issues/issue_header_spec.rb
new file mode 100644
index 00000000000..cf375d8fb67
--- /dev/null
+++ b/spec/features/issues/issue_header_spec.rb
@@ -0,0 +1,164 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe 'issue header', :js do
+  let_it_be(:user) { create(:user) }
+  let_it_be(:project) { create(:project) }
+  let_it_be(:issue) { create(:issue, project: project) }
+  let_it_be(:closed_issue) { create(:issue, :closed, project: project) }
+  let_it_be(:closed_locked_issue) { create(:issue, :closed, :locked, project: project) }
+  let_it_be(:authored_issue) { create(:issue, project: project, author: user) }
+
+  context 'when user has permission to update' do
+    before do
+      project.add_maintainer(user)
+      sign_in(user)
+    end
+
+    context 'within the issue actions dropdown menu' do
+      before do
+        visit project_issue_path(project, issue)
+
+        # Click on the ellipsis icon
+        click_button 'Issue actions'
+      end
+
+      it 'only shows the "New issue" and "Report abuse" items', :aggregate_failures do
+        expect(page).to have_link 'New issue'
+        expect(page).to have_link 'Report abuse'
+        expect(page).not_to have_link 'Submit as spam'
+      end
+    end
+
+    context 'when the issue is open' do
+      before do
+        visit project_issue_path(project, issue)
+      end
+
+      it 'has a "Close issue" button' do
+        expect(page).to have_button 'Close issue'
+      end
+    end
+
+    context 'when the issue is closed' do
+      before do
+        visit project_issue_path(project, closed_issue)
+      end
+
+      it 'has a "Reopen issue" button' do
+        expect(page).to have_button 'Reopen issue'
+      end
+    end
+
+    context 'when the issue is closed and locked' do
+      before do
+        visit project_issue_path(project, closed_locked_issue)
+      end
+
+      it 'does not have a "Reopen issue" button' do
+        expect(page).not_to have_button 'Reopen issue'
+      end
+    end
+
+    context 'when the current user is the issue author' do
+      before do
+        visit project_issue_path(project, authored_issue)
+      end
+
+      it 'does not show "Report abuse" link in dropdown' do
+        click_button 'Issue actions'
+
+        expect(page).not_to have_link 'Report abuse'
+      end
+    end
+  end
+
+  context 'when user is admin and the project is set up for spam' do
+    let_it_be(:admin) { create(:admin) }
+    let_it_be(:user_agent_detail) { create(:user_agent_detail, subject: issue) }
+
+    before do
+      stub_application_setting(akismet_enabled: true)
+      project.add_maintainer(admin)
+      sign_in(admin)
+    end
+
+    context 'within the issue actions dropdown menu' do
+      before do
+        visit project_issue_path(project, issue)
+
+        # Click on the ellipsis icon
+        click_button 'Issue actions'
+      end
+
+      it 'has "Submit as spam" item' do
+        expect(page).to have_link 'Submit as spam'
+      end
+    end
+  end
+
+  context 'when user does not have permission to update' do
+    before do
+      project.add_guest(user)
+      sign_in(user)
+    end
+
+    context 'within the issue actions dropdown menu' do
+      before do
+        visit project_issue_path(project, issue)
+
+        # Click on the ellipsis icon
+        click_button 'Issue actions'
+      end
+
+      it 'only shows the "New issue" and "Report abuse" items', :aggregate_failures do
+        expect(page).to have_link 'New issue'
+        expect(page).to have_link 'Report abuse'
+        expect(page).not_to have_link 'Submit as spam'
+      end
+    end
+
+    context 'when the issue is open' do
+      before do
+        visit project_issue_path(project, issue)
+      end
+
+      it 'does not have a "Close issue" button' do
+        expect(page).not_to have_button 'Close issue'
+      end
+    end
+
+    context 'when the issue is closed' do
+      before do
+        visit project_issue_path(project, closed_issue)
+      end
+
+      it 'does not have a "Reopen issue" button' do
+        expect(page).not_to have_button 'Reopen issue'
+      end
+    end
+
+    context 'when the issue is closed and locked' do
+      before do
+        visit project_issue_path(project, closed_locked_issue)
+      end
+
+      it 'does not have a "Reopen issue" button' do
+        expect(page).not_to have_button 'Reopen issue'
+      end
+    end
+
+    context 'when the current user is the issue author' do
+      before do
+        visit project_issue_path(project, authored_issue)
+      end
+
+      it 'does not show "Report abuse" link in dropdown' do
+        click_button 'Issue actions'
+
+        expect(page).not_to have_link 'Report abuse'
+      end
+    end
+  end
+end