# frozen_string_literal: true

RSpec.shared_examples 'model with wiki policies' do
  include ProjectHelpers
  include AdminModeHelper

  let(:container) { raise NotImplementedError }
  let(:user) { raise NotImplementedError }

  subject { described_class.new(user, container) }

  let_it_be(:wiki_permissions) do
    {}.tap do |permissions|
      permissions[:guest] = %i[read_wiki]
      permissions[:reporter] = permissions[:guest] + %i[download_wiki_code]
      permissions[:developer] = permissions[:reporter] + %i[create_wiki]
      permissions[:maintainer] = permissions[:developer] + %i[admin_wiki]
      permissions[:all] = permissions[:maintainer]
    end
  end

  using RSpec::Parameterized::TableSyntax

  where(:container_level, :access_level, :membership, :access) do
    :public   | :enabled  | :admin      | :all
    :public   | :enabled  | :maintainer | :maintainer
    :public   | :enabled  | :developer  | :developer
    :public   | :enabled  | :reporter   | :reporter
    :public   | :enabled  | :guest      | :guest
    :public   | :enabled  | :non_member | :guest
    :public   | :enabled  | :anonymous  | :guest

    :public   | :private  | :admin      | :all
    :public   | :private  | :maintainer | :maintainer
    :public   | :private  | :developer  | :developer
    :public   | :private  | :reporter   | :reporter
    :public   | :private  | :guest      | :guest
    :public   | :private  | :non_member | nil
    :public   | :private  | :anonymous  | nil

    :public   | :disabled | :admin      | nil
    :public   | :disabled | :maintainer | nil
    :public   | :disabled | :developer  | nil
    :public   | :disabled | :reporter   | nil
    :public   | :disabled | :guest      | nil
    :public   | :disabled | :non_member | nil
    :public   | :disabled | :anonymous  | nil

    :internal | :enabled  | :admin      | :all
    :internal | :enabled  | :maintainer | :maintainer
    :internal | :enabled  | :developer  | :developer
    :internal | :enabled  | :reporter   | :reporter
    :internal | :enabled  | :guest      | :guest
    :internal | :enabled  | :non_member | :guest
    :internal | :enabled  | :anonymous  | nil

    :internal | :private  | :admin      | :all
    :internal | :private  | :maintainer | :maintainer
    :internal | :private  | :developer  | :developer
    :internal | :private  | :reporter   | :reporter
    :internal | :private  | :guest      | :guest
    :internal | :private  | :non_member | nil
    :internal | :private  | :anonymous  | nil

    :internal | :disabled | :admin      | nil
    :internal | :disabled | :maintainer | nil
    :internal | :disabled | :developer  | nil
    :internal | :disabled | :reporter   | nil
    :internal | :disabled | :guest      | nil
    :internal | :disabled | :non_member | nil
    :internal | :disabled | :anonymous  | nil

    :private  | :private  | :admin      | :all
    :private  | :private  | :maintainer | :maintainer
    :private  | :private  | :developer  | :developer
    :private  | :private  | :reporter   | :reporter
    :private  | :private  | :guest      | :guest
    :private  | :private  | :non_member | nil
    :private  | :private  | :anonymous  | nil

    :private  | :disabled | :admin      | nil
    :private  | :disabled | :maintainer | nil
    :private  | :disabled | :developer  | nil
    :private  | :disabled | :reporter   | nil
    :private  | :disabled | :guest      | nil
    :private  | :disabled | :non_member | nil
    :private  | :disabled | :anonymous  | nil
  end

  with_them do
    let(:user) { create_user_from_membership(container, membership) }
    let(:allowed_permissions) { wiki_permissions[access].dup || [] }
    let(:disallowed_permissions) { wiki_permissions[:all] - allowed_permissions }

    before do
      container.visibility = container_level.to_s
      set_access_level(ProjectFeature.access_level_from_str(access_level.to_s))
      enable_admin_mode!(user) if user&.admin?

      if allowed_permissions.any? && [container_level, access_level, membership] != [:private, :private, :guest]
        allowed_permissions << :download_wiki_code
      end
    end

    it 'allows actions based on membership' do
      expect_allowed(*allowed_permissions)
      expect_disallowed(*disallowed_permissions)
    end
  end

  # TODO: Remove this helper once we implement group features
  # https://gitlab.com/gitlab-org/gitlab/-/issues/208412
  def set_access_level(access_level)
    raise NotImplementedError
  end
end