spec/features/groups/members/request_access_spec.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

require 'spec_helper'

feature 'Groups > Members > Request access' do
  let(:user) { create(:user) }
  let(:owner) { create(:user) }
  let(:group) { create(:group, :public, :access_requestable) }
  let!(:project) { create(:empty_project, :private, namespace: group) }

  background do
    group.add_owner(owner)
    sign_in(user)
    visit group_path(group)
  end

  scenario 'request access feature is disabled' do
    group.update_attributes(request_access_enabled: false)
    visit group_path(group)

    expect(page).not_to have_content 'Request Access'
  end

  scenario 'user can request access to a group' do
    perform_enqueued_jobs { click_link 'Request Access' }

    expect(ActionMailer::Base.deliveries.last.to).to eq [owner.notification_email]
    expect(ActionMailer::Base.deliveries.last.subject).to match "Request to join the #{group.name} group"

    expect(group.requesters.exists?(user_id: user)).to be_truthy
    expect(page).to have_content 'Your request for access has been queued for review.'

    expect(page).to have_content 'Withdraw Access Request'
    expect(page).not_to have_content 'Leave group'
  end

  scenario 'user does not see private projects' do
    perform_enqueued_jobs { click_link 'Request Access' }

    expect(page).not_to have_content project.name
  end

  scenario 'user does not see group in the Dashboard > Groups page' do
    perform_enqueued_jobs { click_link 'Request Access' }

    visit dashboard_groups_path

    expect(page).not_to have_content group.name
  end

  scenario 'user is not listed in the group members page' do
    click_link 'Request Access'

    expect(group.requesters.exists?(user_id: user)).to be_truthy

    click_link 'Members'

    page.within('.content') do
      expect(page).not_to have_content(user.name)
    end
  end

  scenario 'user can withdraw its request for access' do
    click_link 'Request Access'

    expect(group.requesters.exists?(user_id: user)).to be_truthy

    click_link 'Withdraw Access Request'

    expect(group.requesters.exists?(user_id: user)).to be_falsey
    expect(page).to have_content 'Your access request to the group has been withdrawn.'
  end

  scenario 'member does not see the request access button' do
    group.add_owner(user)
    visit group_path(group)

    expect(page).not_to have_content 'Request Access'
  end
end