#-- copyright # OpenProject is an open source project management software. # Copyright (C) 2012-2021 the OpenProject GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License version 3. # # OpenProject is a fork of ChiliProject, which is a fork of Redmine. The copyright follows: # Copyright (C) 2006-2013 Jean-Philippe Lang # Copyright (C) 2010-2013 the ChiliProject Team # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. # # See docs/COPYRIGHT.rdoc for more details. #++ require File.dirname(__FILE__) + '/../spec_helper' describe User, type: :model do include Cost::PluginSpecHelper let(:klass) { User } let(:user) { FactoryBot.build(:user) } let(:project) { FactoryBot.build(:valid_project) } let(:project2) { FactoryBot.build(:valid_project) } let(:project_hourly_rate) do FactoryBot.build(:hourly_rate, user: user, project: project) end let(:default_hourly_rate) { FactoryBot.build(:default_hourly_rate, user: user) } describe '#allowed_to' do describe 'WITH querying for a non existent permission' do it { expect(user.allowed_to?(:bogus_permission, project)).to be_falsey } end end describe '#allowed_to_condition_with_project_id' do let(:permission) { :view_own_time_entries } before do project.save! project2.save! end describe "WHEN user has the permission in one project WHEN not requesting for a specific project" do before do is_member(project, user, [permission]) end it 'should return a sql condition where the project id the user has the permission in is enforced' do expect(user.allowed_to_condition_with_project_id(permission)).to eq("(projects.id in (#{project.id}))") end end describe "WHEN user has the permission in two projects WHEN not requesting for a specific project" do before do is_member(project, user, [permission]) is_member(project2, user, [permission]) end it 'should return a sql condition where all the project ids the user has the permission in is enforced' do # as order is not guaranteed and in fact does not matter # we have to check for both valid options valid_conditions = ["(projects.id in (#{project.id}, #{project2.id}))", "(projects.id in (#{project2.id}, #{project.id}))"] expect(valid_conditions).to include(user.allowed_to_condition_with_project_id(permission)) end end describe "WHEN user does not have the permission in any WHEN not requesting for a specific project" do before do user.save! end it 'should return a neutral (for an or operation) sql condition' do expect(user.allowed_to_condition_with_project_id(permission)).to eq('1=0') end end describe "WHEN user has the permission in two projects WHEN requesting for a specific project" do before do is_member(project, user, [permission]) is_member(project2, user, [permission]) end it 'should return a sql condition where all the project ids the user has the permission in is enforced' do expect(user.allowed_to_condition_with_project_id(permission, project)).to eq("(projects.id in (#{project.id}))") end end end describe '#set_existing_rates' do before do user.save project.save end describe "WHEN providing a project WHEN providing attributes for an existing rate in the project" do let(:new_attributes) do { project_hourly_rate.id.to_s => { valid_from: (Date.today + 1.day).to_s, rate: (project_hourly_rate.rate + 5).to_s } } end before do project_hourly_rate.save! user.rates.reload user.set_existing_rates(project, new_attributes) end it 'should update the rate' do expect(user.rates.detect do |r| r.id == project_hourly_rate.id end.rate).to eq(new_attributes[project_hourly_rate.id.to_s][:rate].to_i) end it 'should update valid_from' do expect(user.rates.detect do |r| r.id == project_hourly_rate.id end.valid_from).to eq(new_attributes[project_hourly_rate.id.to_s][:valid_from].to_date) end it 'should not create a rate' do expect(user.rates.size).to eq(1) end end describe "WHEN providing a project WHEN providing attributes for an existing rate in another project" do let(:new_attributes) do { project_hourly_rate.id.to_s => { valid_from: (Date.today + 1.day).to_s, rate: (project_hourly_rate.rate + 5).to_s } } end before do project_hourly_rate.save! user.rates.reload @original_rate = project_hourly_rate.rate @original_valid_from = project_hourly_rate.valid_from user.set_existing_rates(project2, new_attributes) end it 'should not update the rate' do expect(user.rates.detect { |r| r.id == project_hourly_rate.id }.rate).to eq(@original_rate) end it 'should not update valid_from' do expect(user.rates.detect { |r| r.id == project_hourly_rate.id }.valid_from).to eq(@original_valid_from) end it 'should not create a rate' do expect(user.rates.size).to eq(1) end end describe "WHEN providing a project WHEN not providing attributes" do before do project_hourly_rate.save! user.rates.reload user.set_existing_rates(project, {}) end it 'should delete the hourly rate' do expect(user.rates.reload).to be_empty end end describe "WHEN not providing a project WHEN not providing attributes" do before do default_hourly_rate.save! user.default_rates.reload user.set_existing_rates(nil, {}) end it 'should delete the default hourly rate' do expect(user.default_rates.reload).to be_empty end end end end