87 lines
		
	
	
		
			1.9 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			87 lines
		
	
	
		
			1.9 KiB
		
	
	
	
		
			Ruby
		
	
	
	
	
	
| # frozen_string_literal: true
 | |
| 
 | |
| require 'rails_helper'
 | |
| require 'pundit/rspec'
 | |
| 
 | |
| RSpec.describe AccountPolicy do
 | |
|   let(:subject) { described_class }
 | |
|   let(:admin)   { Fabricate(:user, admin: true).account }
 | |
|   let(:john)    { Fabricate(:user).account }
 | |
| 
 | |
|   permissions :index?, :show?, :unsuspend?, :unsilence?, :remove_avatar?, :remove_header? do
 | |
|     context 'staff' do
 | |
|       it 'permits' do
 | |
|         expect(subject).to permit(admin)
 | |
|       end
 | |
|     end
 | |
| 
 | |
|     context 'not staff' do
 | |
|       it 'denies' do
 | |
|         expect(subject).to_not permit(john)
 | |
|       end
 | |
|     end
 | |
|   end
 | |
| 
 | |
|   permissions :redownload?, :subscribe?, :unsubscribe? do
 | |
|     context 'admin' do
 | |
|       it 'permits' do
 | |
|         expect(subject).to permit(admin)
 | |
|       end
 | |
|     end
 | |
| 
 | |
|     context 'not admin' do
 | |
|       it 'denies' do
 | |
|         expect(subject).to_not permit(john)
 | |
|       end
 | |
|     end
 | |
|   end
 | |
| 
 | |
|   permissions :suspend?, :silence? do
 | |
|     let(:staff) { Fabricate(:user, admin: true).account }
 | |
| 
 | |
|     context 'staff' do
 | |
|       context 'record is staff' do
 | |
|         it 'denies' do
 | |
|           expect(subject).to_not permit(admin, staff)
 | |
|         end
 | |
|       end
 | |
| 
 | |
|       context 'record is not staff' do
 | |
|         it 'permits' do
 | |
|           expect(subject).to permit(admin, john)
 | |
|         end
 | |
|       end
 | |
|     end
 | |
| 
 | |
|     context 'not staff' do
 | |
|       it 'denies' do
 | |
|         expect(subject).to_not permit(john, Account)
 | |
|       end
 | |
|     end
 | |
|   end
 | |
| 
 | |
|   permissions :memorialize? do
 | |
|     let(:other_admin) { Fabricate(:user, admin: true).account }
 | |
| 
 | |
|     context 'admin' do
 | |
|       context 'record is admin' do
 | |
|         it 'denies' do
 | |
|           expect(subject).to_not permit(admin, other_admin)
 | |
|         end
 | |
|       end
 | |
| 
 | |
|       context 'record is not admin' do
 | |
|         it 'permits' do
 | |
|           expect(subject).to permit(admin, john)
 | |
|         end
 | |
|       end
 | |
|     end
 | |
| 
 | |
|     context 'not admin' do
 | |
|       it 'denies' do
 | |
|         expect(subject).to_not permit(john, Account)
 | |
|       end
 | |
|     end
 | |
|   end
 | |
| end
 |