diff options
author | GitLab Bot <gitlab-bot@gitlab.com> | 2021-07-06 16:14:47 +0300 |
---|---|---|
committer | GitLab Bot <gitlab-bot@gitlab.com> | 2021-07-06 16:14:47 +0300 |
commit | 7ab0cadbbdf42fdd316941b3260e294577d649f4 (patch) | |
tree | 26ed9d750eb7706174afddb43a9e6fab210f2176 /spec/policies | |
parent | 3aad3a0b6ffb1a0fe36db41f81e8bbd3728e5f80 (diff) |
Add latest changes from gitlab-org/gitlab@14-0-stable-ee
Diffstat (limited to 'spec/policies')
-rw-r--r-- | spec/policies/project_policy_spec.rb | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/spec/policies/project_policy_spec.rb b/spec/policies/project_policy_spec.rb index d0fe0cca8a1..f3c92751d06 100644 --- a/spec/policies/project_policy_spec.rb +++ b/spec/policies/project_policy_spec.rb @@ -795,6 +795,37 @@ RSpec.describe ProjectPolicy do end end + context 'deploy key access' do + context 'private project' do + let(:project) { private_project } + let!(:deploy_key) { create(:deploy_key, user: owner) } + + subject { described_class.new(deploy_key, project) } + + context 'when a read deploy key is enabled in the project' do + let!(:deploy_keys_project) { create(:deploy_keys_project, project: project, deploy_key: deploy_key) } + + it { is_expected.to be_allowed(:download_code) } + it { is_expected.to be_disallowed(:push_code) } + it { is_expected.to be_disallowed(:read_project) } + end + + context 'when a write deploy key is enabled in the project' do + let!(:deploy_keys_project) { create(:deploy_keys_project, :write_access, project: project, deploy_key: deploy_key) } + + it { is_expected.to be_allowed(:download_code) } + it { is_expected.to be_allowed(:push_code) } + it { is_expected.to be_disallowed(:read_project) } + end + + context 'when the deploy key is not enabled in the project' do + it { is_expected.to be_disallowed(:download_code) } + it { is_expected.to be_disallowed(:push_code) } + it { is_expected.to be_disallowed(:read_project) } + end + end + end + context 'deploy token access' do let!(:project_deploy_token) do create(:project_deploy_token, project: project, deploy_token: deploy_token) |