summaryrefslogtreecommitdiff
path: root/spec/models/project_security_spec.rb
blob: f80294639f9acc0ae21bdb75960b5c38e19c56f6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
require 'spec_helper'

describe Project do
  describe :authorization do
    before do
      @p1 = Factory :project
      @u1 = Factory :user
      @u2 = Factory :user
      @abilities = Six.new
      @abilities << Ability
    end

    describe :read do
      before do
        @p1.users_projects.create(:project => @p1, :user => @u1, :read => false)
        @p1.users_projects.create(:project => @p1, :user => @u2, :read => true)
      end

      it { @abilities.allowed?(@u1, :read_project, @p1).should be_false }
      it { @abilities.allowed?(@u2, :read_project, @p1).should be_true }
    end

    describe :write do
      before do
        @p1.users_projects.create(:project => @p1, :user => @u1, :write => false)
        @p1.users_projects.create(:project => @p1, :user => @u2, :write => true)
      end

      it { @abilities.allowed?(@u1, :write_project, @p1).should be_false }
      it { @abilities.allowed?(@u2, :write_project, @p1).should be_true }
    end

    describe :admin do
      before do
        @p1.users_projects.create(:project => @p1, :user => @u1, :admin => false)
        @p1.users_projects.create(:project => @p1, :user => @u2, :admin => true)
      end

      it { @abilities.allowed?(@u1, :admin_project, @p1).should be_false }
      it { @abilities.allowed?(@u2, :admin_project, @p1).should be_true }
    end
  end
end
# == Schema Information
#
# Table name: projects
#
#  id           :integer         not null, primary key
#  name         :string(255)
#  path         :string(255)
#  description  :text
#  created_at   :datetime
#  updated_at   :datetime
#  private_flag :boolean         default(TRUE), not null
#  code         :string(255)
#