Welcome to mirror list, hosted at ThFree Co, Russian Federation.

instrumentation_spec.rb « authorize « graphql « gitlab « lib « spec - gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
blob: cf3a8bcc8b4ec3ee54e79480605e29869c28bdb7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
# frozen_string_literal: true

require 'spec_helper'

describe Gitlab::Graphql::Authorize::Instrumentation do
  describe '#build_checker' do
    let(:current_user) { double(:current_user) }
    let(:abilities) { [double(:first_ability), double(:last_ability)] }

    let(:checker) do
      described_class.new.__send__(:build_checker, current_user, abilities)
    end

    it 'returns a checker which checks for a single object' do
      object = double(:object)

      abilities.each do |ability|
        spy_ability_check_for(ability, object, passed: true)
      end

      expect(checker.call(object)).to eq(object)
    end

    it 'returns a checker which checks for all objects' do
      objects = [double(:first), double(:last)]

      abilities.each do |ability|
        objects.each do |object|
          spy_ability_check_for(ability, object, passed: true)
        end
      end

      expect(checker.call(objects)).to eq(objects)
    end

    context 'when some objects would not pass the check' do
      it 'returns nil when it is single object' do
        disallowed = double(:object)

        spy_ability_check_for(abilities.first, disallowed, passed: false)

        expect(checker.call(disallowed)).to be_nil
      end

      it 'returns only objects which passed when there are more than one' do
        allowed = double(:allowed)
        disallowed = double(:disallowed)

        spy_ability_check_for(abilities.first, disallowed, passed: false)

        abilities.each do |ability|
          spy_ability_check_for(ability, allowed, passed: true)
        end

        expect(checker.call([disallowed, allowed]))
          .to contain_exactly(allowed)
      end
    end

    def spy_ability_check_for(ability, object, passed: true)
      expect(Ability)
        .to receive(:allowed?)
        .with(current_user, ability, object)
        .and_return(passed)
    end
  end
end