blob: 12e14f5193f10cc5247f0e9dfc76070d78a30d25 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
|
# frozen_string_literal: true
require 'spec_helper'
RSpec.describe 'Project > Settings > Access Tokens', :js, feature_category: :credential_management do
include Spec::Support::Helpers::ModalHelpers
let_it_be(:user) { create(:user) }
let_it_be(:bot_user) { create(:user, :project_bot) }
let_it_be(:group) { create(:group) }
let_it_be(:project) { create(:project, group: group) }
let_it_be(:resource_settings_access_tokens_path) { project_settings_access_tokens_path(project) }
before_all do
project.add_maintainer(user)
end
before do
sign_in(user)
end
def create_resource_access_token
project.add_maintainer(bot_user)
create(:personal_access_token, user: bot_user)
end
def role_dropdown_options
role_dropdown = page.find_by_id('resource_access_token_access_level')
role_dropdown.all('option').map(&:text)
end
context 'when user is not a project maintainer' do
before do
project.add_developer(user)
end
it_behaves_like 'resource access tokens missing access rights'
end
describe 'token creation' do
context 'when user is a project owner' do
before do
project.add_owner(user)
end
it_behaves_like 'resource access tokens creation', 'project'
it 'shows Owner option' do
visit resource_settings_access_tokens_path
expect(role_dropdown_options).to include('Owner')
end
end
context 'when user is a project maintainer' do
before_all do
project.add_maintainer(user)
end
it_behaves_like 'resource access tokens creation', 'project'
it 'does not show Owner option for a maintainer' do
visit resource_settings_access_tokens_path
expect(role_dropdown_options).not_to include('Owner')
end
end
end
context 'when token creation is not allowed' do
it_behaves_like 'resource access tokens creation disallowed', 'Project access token creation is disabled in this group. You can still use and manage existing tokens.'
context 'with a project in a personal namespace' do
let(:personal_project) { create(:project) }
before do
personal_project.add_maintainer(user)
end
it 'shows access token creation form and text' do
visit project_settings_access_tokens_path(personal_project)
expect(page).to have_selector('#js-new-access-token-form')
end
end
end
describe 'viewing tokens' do
before_all do
project.add_maintainer(user)
end
describe 'active tokens' do
let!(:resource_access_token) { create_resource_access_token }
it_behaves_like 'active resource access tokens'
end
describe 'inactive tokens' do
let!(:resource_access_token) { create_resource_access_token }
it_behaves_like 'inactive resource access tokens', 'This project has no active access tokens.'
end
end
end
|