diff options
author | Thibaut Girka <thib@sitedethib.com> | 2018-12-19 12:58:49 +0100 |
---|---|---|
committer | Thibaut Girka <thib@sitedethib.com> | 2018-12-19 12:58:49 +0100 |
commit | add74816a5fd7c46391413a61f06e01f173ea295 (patch) | |
tree | a1f23bd6e496495ea69c1b831359f7770b7e9354 /spec/policies/account_moderation_note_policy_spec.rb | |
parent | 655da1be2029cecedcaf86479938d7805e72107d (diff) | |
parent | af56efdec56230eddab711edd33a7e33694f2b34 (diff) |
Merge branch 'master' into glitch-soc/merge-upstream
Diffstat (limited to 'spec/policies/account_moderation_note_policy_spec.rb')
-rw-r--r-- | spec/policies/account_moderation_note_policy_spec.rb | 52 |
1 files changed, 52 insertions, 0 deletions
diff --git a/spec/policies/account_moderation_note_policy_spec.rb b/spec/policies/account_moderation_note_policy_spec.rb new file mode 100644 index 000000000..bb7af94e4 --- /dev/null +++ b/spec/policies/account_moderation_note_policy_spec.rb @@ -0,0 +1,52 @@ +# frozen_string_literal: true + +require 'rails_helper' +require 'pundit/rspec' + +RSpec.describe AccountModerationNotePolicy do + let(:subject) { described_class } + let(:admin) { Fabricate(:user, admin: true).account } + let(:john) { Fabricate(:user).account } + + permissions :create? do + context 'staff' do + it 'grants to create' do + expect(subject).to permit(admin, AccountModerationNotePolicy) + end + end + + context 'not staff' do + it 'denies to create' do + expect(subject).to_not permit(john, AccountModerationNotePolicy) + end + end + end + + permissions :destroy? do + let(:account_moderation_note) do + Fabricate(:account_moderation_note, + account: john, + target_account: Fabricate(:account)) + end + + context 'admin' do + it 'grants to destroy' do + expect(subject).to permit(admin, AccountModerationNotePolicy) + end + end + + context 'owner' do + it 'grants to destroy' do + expect(subject).to permit(john, account_moderation_note) + end + end + + context 'neither admin nor owner' do + let(:kevin) { Fabricate(:user).account } + + it 'denies to destroy' do + expect(subject).to_not permit(kevin, account_moderation_note) + end + end + end +end |