openproject/modules/backlogs/spec/controllers/versions_controller_spec.rb

#-- copyright
# OpenProject is an open source project management software.
# Copyright (C) 2012-2021 the OpenProject GmbH
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License version 3.
#
# OpenProject is a fork of ChiliProject, which is a fork of Redmine. The copyright follows:
# Copyright (C) 2006-2013 Jean-Philippe Lang
# Copyright (C) 2010-2013 the ChiliProject Team
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
#
# See docs/COPYRIGHT.rdoc for more details.
#++

require 'spec_helper'

describe VersionsController, type: :controller do
  let(:version) do
    FactoryBot.create(:version,
                      sharing: 'system')
  end

  let(:other_project) do
    FactoryBot.create(:project).tap do |p|
      FactoryBot.create(:member,
                        user: current_user,
                        roles: [FactoryBot.create(:role, permissions: [:manage_versions])],
                        project: p)
    end
  end

  let(:current_user) do
    FactoryBot.create(:user,
                      member_in_project: version.project,
                      member_with_permissions: [:manage_versions])
  end

  before do
    # Create a version assigned to a project
    @oldVersionName = version.name
    @newVersionName = 'NewVersionName'

    # Create params to update version
    @params = {}
    @params[:id] = version.id
    @params[:version] = { name: @newVersionName }
  end

  before do
    login_as current_user
  end

  describe 'update' do
    it 'does not allow to update versions from different projects' do
      @params[:project_id] = other_project.id
      patch 'update', params: @params
      version.reload

      expect(response).to redirect_to controller: '/project_settings/versions', action: 'show', id: other_project
      expect(version.name).to eq(@oldVersionName)
    end

    it 'allows to update versions from the version project' do
      @params[:project_id] = version.project.id
      patch 'update', params: @params
      version.reload

      expect(response).to redirect_to controller: '/project_settings/versions', action: 'show', id: version.project
      expect(version.name).to eq(@newVersionName)
    end
  end
end