1 files changed, 77 insertions, 0 deletions
diff --git a/spec/support/shared_examples/requests/api/graphql/projects/branch_protections/access_level_request_examples.rb b/spec/support/shared_examples/requests/api/graphql/projects/branch_protections/access_level_request_examples.rb
new file mode 100644
index 00000000000..54cc13fac94
--- /dev/null
+++ b/spec/support/shared_examples/requests/api/graphql/projects/branch_protections/access_level_request_examples.rb
@@ -0,0 +1,77 @@
+# frozen_string_literal: true
+
+RSpec.shared_examples 'perform graphql requests for AccessLevel type objects' do |access_level_kind|
+  include GraphqlHelpers
+
+  let_it_be(:project) { create(:project) }
+  let_it_be(:current_user) { create(:user, maintainer_projects: [project]) }
+  let_it_be(:variables) { { path: project.full_path } }
+
+  let(:fields) { all_graphql_fields_for("#{access_level_kind.to_s.classify}AccessLevel", max_depth: 2) }
+  let(:access_levels) { protected_branch.public_send("#{access_level_kind}_access_levels") }
+  let(:access_levels_count) { access_levels.size }
+  let(:maintainer_access_level) { access_levels.for_role.first }
+  let(:maintainer_access_level_data) { access_levels_data.first }
+  let(:access_levels_data) do
+    graphql_data_at('project',
+                    'branchRules',
+                    'nodes',
+                    0,
+                    'branchProtection',
+                    "#{access_level_kind.to_s.camelize(:lower)}AccessLevels",
+                    'nodes')
+  end
+
+  let(:query) do
+    <<~GQL
+    query($path: ID!) {
+      project(fullPath: $path) {
+        branchRules(first: 1) {
+          nodes {
+            branchProtection {
+              #{access_level_kind.to_s.camelize(:lower)}AccessLevels {
+                nodes {
+                  #{fields}
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+    GQL
+  end
+
+  context 'when request AccessLevel type objects as a guest user' do
+    let_it_be(:protected_branch) { create(:protected_branch, project: project) }
+
+    before do
+      project.add_guest(current_user)
+
+      post_graphql(query, current_user: current_user, variables: variables)
+    end
+
+    it_behaves_like 'a working graphql query'
+
+    it { expect(access_levels_data).not_to be_present }
+  end
+
+  context 'when request AccessLevel type objects as a maintainer' do
+    let_it_be(:protected_branch) do
+      create(:protected_branch, "maintainers_can_#{access_level_kind}", project: project)
+    end
+
+    before do
+      post_graphql(query, current_user: current_user, variables: variables)
+    end
+
+    it_behaves_like 'a working graphql query'
+
+    it 'returns all the access level attributes' do
+      expect(maintainer_access_level_data['accessLevel']).to eq(maintainer_access_level.access_level)
+      expect(maintainer_access_level_data['accessLevelDescription']).to eq(maintainer_access_level.humanize)
+      expect(maintainer_access_level_data.dig('group', 'name')).to be_nil
+      expect(maintainer_access_level_data.dig('user', 'name')).to be_nil
+    end
+  end
+end