Welcome to mirror list, hosted at ThFree Co, Russian Federation.

project_security_spec.rb « models « spec - gitlab.com/gitlab-org/gitlab-foss.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
blob: 8eb8ee80f6c4d7125dacbf892306e3213979af8f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
require 'spec_helper'

describe Project do
  describe :authorization do 
    before do 
      @p1 = Factory :project
      @u1 = Factory :user
      @u2 = Factory :user
      @abilities = Six.new
      @abilities << Ability
    end

    describe :read do 
      before do 
        @p1.users_projects.create(:project => @p1, :user => @u1, :read => false) 
        @p1.users_projects.create(:project => @p1, :user => @u2, :read => true) 
      end

      it { @abilities.allowed?(@u1, :read_project, @p1).should be_false }
      it { @abilities.allowed?(@u2, :read_project, @p1).should be_true }
    end

    describe :write do 
      before do 
        @p1.users_projects.create(:project => @p1, :user => @u1, :write => false) 
        @p1.users_projects.create(:project => @p1, :user => @u2, :write => true) 
      end

      it { @abilities.allowed?(@u1, :write_project, @p1).should be_false }
      it { @abilities.allowed?(@u2, :write_project, @p1).should be_true }
    end

    describe :admin do 
      before do 
        @p1.users_projects.create(:project => @p1, :user => @u1, :admin => false) 
        @p1.users_projects.create(:project => @p1, :user => @u2, :admin => true) 
      end

      it { @abilities.allowed?(@u1, :admin_project, @p1).should be_false }
      it { @abilities.allowed?(@u2, :admin_project, @p1).should be_true }
    end
  end
end
# == Schema Information
#
# Table name: projects
#
#  id           :integer         not null, primary key
#  name         :string(255)
#  path         :string(255)
#  description  :text
#  created_at   :datetime
#  updated_at   :datetime
#  private_flag :boolean         default(TRUE), not null
#  code         :string(255)
#