openproject/spec/features/placeholder_users/index_spec.rb

#-- copyright
# OpenProject is an open source project management software.
# Copyright (C) 2012-2021 the OpenProject GmbH
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License version 3.
#
# OpenProject is a fork of ChiliProject, which is a fork of Redmine. The copyright follows:
# Copyright (C) 2006-2013 Jean-Philippe Lang
# Copyright (C) 2010-2013 the ChiliProject Team
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
#
# See COPYRIGHT and LICENSE files for more details.
#++

require 'spec_helper'

describe 'index placeholder users', type: :feature, js: true do
  let!(:current_user) { FactoryBot.create :admin }
  let!(:anonymous) { FactoryBot.create :anonymous }
  let!(:placeholder_user_1) do
    FactoryBot.create(:placeholder_user,
                      name: 'B',
                      created_at: 3.minutes.ago)
  end
  let!(:placeholder_user_2) do
    FactoryBot.create(:placeholder_user,
                      name: 'A',
                      created_at: 2.minutes.ago)
  end
  let!(:placeholder_user_3) do
    FactoryBot.create(:placeholder_user,
                      name: 'C',
                      created_at: 1.minute.ago)
  end
  let(:manager_role) { FactoryBot.create :existing_role, permissions: [:manage_members] }
  let(:member_role) { FactoryBot.create :existing_role, permissions: [:view_work_packages] }
  let(:index_page) { Pages::Admin::PlaceholderUsers::Index.new }

  shared_examples 'placeholders index flow' do
    it 'shows the placeholder users and allows filtering and ordering' do
      index_page.visit!

      index_page.expect_not_listed(anonymous, current_user)

      # Order is by id, asc
      # so first ones created are on top.
      index_page.expect_listed(placeholder_user_1, placeholder_user_2, placeholder_user_3)

      index_page.order_by('Name')
      index_page.expect_ordered(placeholder_user_2, placeholder_user_1, placeholder_user_3)

      index_page.order_by('Name')
      index_page.expect_ordered(placeholder_user_3, placeholder_user_1, placeholder_user_2)

      index_page.order_by('Created on')
      index_page.expect_ordered(placeholder_user_3, placeholder_user_2, placeholder_user_1)

      index_page.order_by('Created on')
      index_page.expect_ordered(placeholder_user_1, placeholder_user_2, placeholder_user_3)

      index_page.filter_by_name(placeholder_user_3.name)
      index_page.expect_listed(placeholder_user_3)
      index_page.expect_not_listed(placeholder_user_1, placeholder_user_2)
    end
  end

  context 'as admin' do
    current_user { FactoryBot.create :admin }

    it_behaves_like 'placeholders index flow'
  end

  context 'as user with global permission' do
    current_user { FactoryBot.create :user, global_permission: %i[manage_placeholder_user] }

    it_behaves_like 'placeholders index flow'

    context 'when all placeholder users are not members of any project' do
      before do
        index_page.visit!
      end

      it 'allows the deletion of all placeholder users' do
        # Reason: As the placeholder users are not used anywhere it is safe to delete them.
        index_page.expect_delete_button(placeholder_user_1)
        index_page.expect_delete_button(placeholder_user_2)
        index_page.expect_delete_button(placeholder_user_3)
      end
    end
    
    context 'when user is allowed to manage members only in some projects of the placeholder users' do
      let(:shared_project) do
        FactoryBot.create(:project, members: {
                            placeholder_user_1 => member_role,
                            placeholder_user_2 => member_role,
                            current_user => manager_role
                          })
      end

      let(:not_shared_project) do
        FactoryBot.create(:project, members: {
                           placeholder_user_2 => member_role,
                           placeholder_user_3 => member_role
                         })
      end

      before do
        shared_project
        not_shared_project

        index_page.visit!
      end

      it 'shows the delete buttons where allowed' do
        # Show the delete buttons only for those placeholder users that are only in projects
        # where the current user has the permission to manage members.
        index_page.expect_delete_button(placeholder_user_1)
        index_page.expect_no_delete_button(placeholder_user_2)
        index_page.expect_no_delete_button(placeholder_user_3)
      end
    end
  end

  context 'as user without global permission' do
    current_user { FactoryBot.create :user }

    it 'returns an error' do
      index_page.visit!
      expect(page).to have_text 'You are not authorized to access this page.'
    end
  end
end