openproject/spec/controllers/api/v2/versions_controller_spec.rb

#-- copyright
# OpenProject is a project management system.
# Copyright (C) 2012-2015 the OpenProject Foundation (OPF)
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License version 3.
#
# OpenProject is a fork of ChiliProject, which is a fork of Redmine. The copyright follows:
# Copyright (C) 2006-2013 Jean-Philippe Lang
# Copyright (C) 2010-2013 the ChiliProject Team
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
#
# See doc/COPYRIGHT.rdoc for more details.
#++

require 'spec_helper'

describe Api::V2::VersionsController, type: :controller do
  let(:project) { FactoryGirl.create(:project) }
  let(:version) { FactoryGirl.create(:version, project: project) }
  let(:admin_user) { FactoryGirl.create(:admin) }

  shared_examples_for 'unauthorized access' do
    before { get action, request_params }

    it { expect(response.status).to eq(401) }
  end

  describe '#index' do
    it_behaves_like 'unauthorized access' do
      let(:action) { :index }
      let(:request_params) { { project_id: project.id, format: :xml } }
    end

    context 'with access' do
      let!(:version) { FactoryGirl.create(:version, project: project) }

      before { allow(User).to receive(:current).and_return admin_user }

      describe 'single project' do
        before { get :index, project_id: project.id, format: :xml }

        it { expect(assigns(:project)).to eq(project) }

        it { expect(assigns(:projects)).to be_nil }

        it { expect(assigns(:versions).length).to eql(1) }

        it { expect(assigns(:versions).map(&:id)).to include(version.id) }
      end

      describe 'multiple projects' do
        let(:project_2) { FactoryGirl.create(:project) }

        shared_context 'request versions' do
          before do
            get :index,
                project_id: projects.map(&:id).join(','),
                format: :xml
          end
        end

        shared_examples_for 'request with multiple projects' do
          include_context 'request versions'

          it { expect(assigns(:project)).to be_nil }

          it { expect(assigns(:projects)).to match_array(expected_projects) }

          it { expect(assigns(:versions).map(&:id)).to match_array(expected_versions.map(&:id)) }
        end

        context 'projects are not in hierarchy' do
          let!(:version_2) { FactoryGirl.create(:version, project: project_2) }

          context 'user has access to all projects' do
            it_behaves_like 'request with multiple projects' do
              let(:projects) { [project, project_2] }
              let(:expected_projects) { projects }
              let(:expected_versions) { [version, version_2] }
            end
          end

          context 'user has access only to one project' do
            let(:user) { FactoryGirl.create(:user, member_in_project: project) }

            before { allow(User).to receive(:current).and_return user }

            it_behaves_like 'request with multiple projects' do
              let(:projects) { [project, project_2] }
              let(:expected_projects) { [project] }
              let(:expected_versions) { [version] }
            end
          end
        end

        context 'projects are in hierarchy and version is shared' do
          let(:child_project) { FactoryGirl.create(:project, parent: project) }
          let(:projects) { [project, child_project] }
          let!(:shared_version) { FactoryGirl.create(:version, project: project, sharing: 'descendants') }

          it_behaves_like 'request with multiple projects' do
            let(:expected_projects) { [project, child_project] }
            let(:expected_versions) { [version, shared_version] }
          end

          describe 'shared versions' do
            include_context 'request versions'

            subject { assigns(:versions).detect { |v| v.id == shared_version.id }.shared_with }

            it { expect(subject).to include(project.id, child_project.id) }
          end
        end
      end

      describe 'ids' do
        shared_context 'request versions filtered' do
          before { get :index, ids: ids, project_id: project.id, format: :json }
        end

        describe 'invalid version' do
          include_context 'request versions filtered' do
            let(:ids) { '0' }
          end

          it { expect(assigns(:versions)).to be_empty }
        end

        describe 'valid versions' do
          let(:version_2) { FactoryGirl.create(:version, project: project) }
          let(:ids) { [version, version_2].map(&:id).join(',') }

          include_context 'request versions filtered'

          it { expect(assigns(:versions).map(&:id)).to match_array([version.id, version_2.id]) }
        end

        describe 'shared version' do
          let(:child_project) { FactoryGirl.create(:project, parent: project) }
          let(:shared_version) { FactoryGirl.create(:version, project: project, sharing: 'descendants') }

          before { get :index, ids: shared_version.id.to_s, project_id: child_project.id, format: :json }

          it { expect(assigns(:versions).map(&:id)).to match_array([shared_version.id]) }

          it { expect(assigns(:versions).first.shared_with).to match_array([child_project.id]) }
        end

        describe 'shared version when the user has access to only the inheriting project' do
          let(:child_project) { FactoryGirl.create(:project, parent: project) }
          let(:shared_version) do
            FactoryGirl.create(:version, project: project, sharing: 'descendants')
          end
          let(:user) { FactoryGirl.create(:user, member_in_project: child_project) }

          before do
            allow(User).to receive(:current).and_return user

            get :index, ids: shared_version.id.to_s, project_id: child_project.id, format: :json
          end

          it { expect(assigns(:versions).map(&:id)).to match_array([shared_version.id]) }

          it { expect(assigns(:versions).first.shared_with).to match_array([child_project.id]) }
        end
      end
    end
  end
end