spec/lib/gitlab/checks/snippet_check_spec.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

# frozen_string_literal: true

require 'spec_helper'

RSpec.describe Gitlab::Checks::SnippetCheck do
  include_context 'change access checks context'

  let_it_be(:snippet) { create(:personal_snippet, :repository) }

  let(:user_access) { Gitlab::UserAccessSnippet.new(user, snippet: snippet) }
  let(:default_branch) { snippet.default_branch }
  let(:branch_name) { default_branch }
  let(:creation) { false }
  let(:deletion) { false }

  subject { described_class.new(changes, default_branch: default_branch, root_ref: snippet.repository.root_ref, logger: logger) }

  describe '#validate!' do
    it 'does not raise any error' do
      expect { subject.validate! }.not_to raise_error
    end

    shared_examples 'raises and logs error' do
      specify do
        expect(Gitlab::ErrorTracking).to receive(:log_exception).with(instance_of(Gitlab::GitAccess::ForbiddenError), default_branch: default_branch, branch_name: branch_name, creation: creation, deletion: deletion)

        expect { subject.validate! }.to raise_error(Gitlab::GitAccess::ForbiddenError, 'You can not create or delete branches.')
      end
    end

    context 'trying to delete the branch' do
      let(:newrev) { '0000000000000000000000000000000000000000' }

      it_behaves_like 'raises and logs error' do
        let(:deletion) { true }
      end
    end

    context 'trying to create the branch' do
      let(:oldrev) { '0000000000000000000000000000000000000000' }
      let(:ref) { 'refs/heads/feature' }

      it_behaves_like 'raises and logs error' do
        let(:creation) { true }
        let(:branch_name) { 'feature' }
      end

      context 'when branch is the same as the default branch' do
        let(:ref) { "refs/heads/#{default_branch}" }

        it 'allows the operation' do
          expect { subject.validate! }.not_to raise_error
        end
      end

      context 'when snippet has an empty repo' do
        let_it_be(:snippet) { create(:personal_snippet, :empty_repo) }

        it 'allows the operation' do
          expect { subject.validate! }.not_to raise_error
        end
      end
    end

    context 'when default_branch is nil' do
      let(:default_branch) { nil }

      it_behaves_like 'raises and logs error' do
        let(:branch_name) { 'master' }
      end
    end
  end
end