diff options
author | GitLab Bot <gitlab-bot@gitlab.com> | 2020-10-29 21:09:11 +0300 |
---|---|---|
committer | GitLab Bot <gitlab-bot@gitlab.com> | 2020-10-29 21:09:11 +0300 |
commit | ce27ba9f6c36ecb36114887853a5820c83a7036c (patch) | |
tree | 5ea0441efc567f75ca0e23d61fdec9ae426b37d7 /spec/policies/terraform | |
parent | 4dfd78cb55b08ab20124187d1aab6a431da3e302 (diff) |
Add latest changes from gitlab-org/gitlab@master
Diffstat (limited to 'spec/policies/terraform')
-rw-r--r-- | spec/policies/terraform/state_version_policy_spec.rb | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/spec/policies/terraform/state_version_policy_spec.rb b/spec/policies/terraform/state_version_policy_spec.rb new file mode 100644 index 00000000000..6614e073332 --- /dev/null +++ b/spec/policies/terraform/state_version_policy_spec.rb @@ -0,0 +1,33 @@ +# frozen_string_literal: true + +require 'spec_helper' + +RSpec.describe Terraform::StateVersionPolicy do + let_it_be(:project) { create(:project) } + let_it_be(:terraform_state) { create(:terraform_state, :with_version, project: project)} + + subject { described_class.new(user, terraform_state.latest_version) } + + describe 'rules' do + context 'no access' do + let(:user) { create(:user) } + + it { is_expected.to be_disallowed(:read_terraform_state) } + it { is_expected.to be_disallowed(:admin_terraform_state) } + end + + context 'developer' do + let(:user) { create(:user, developer_projects: [project]) } + + it { is_expected.to be_allowed(:read_terraform_state) } + it { is_expected.to be_disallowed(:admin_terraform_state) } + end + + context 'maintainer' do + let(:user) { create(:user, maintainer_projects: [project]) } + + it { is_expected.to be_allowed(:read_terraform_state) } + it { is_expected.to be_allowed(:admin_terraform_state) } + end + end +end |