# frozen_string_literal: true #-- copyright # OpenProject is an open source project management software. # Copyright (C) the OpenProject GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License version 3. # # OpenProject is a fork of ChiliProject, which is a fork of Redmine. The copyright follows: # Copyright (C) 2006-2013 Jean-Philippe Lang # Copyright (C) 2010-2013 the ChiliProject Team # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. # # See COPYRIGHT and LICENSE files for more details. #++ require "spec_helper" RSpec.describe Member do let(:user) { create(:user) } let(:project_role) { create(:project_role) } let(:global_role) { create(:global_role) } let(:project) { create(:project) } let(:work_package) { create(:work_package, project:) } subject(:member) { build(:global_member, user:, roles: [global_role]) } describe "relations" do it { expect(member).to have_many(:member_roles).dependent(:destroy) } it { expect(member).to belong_to(:project).optional } it { expect(member).to have_many(:roles).through(:member_roles) } it { expect(member).to belong_to(:principal).required } it { expect(member).to belong_to(:entity).optional } it do expect(member).to have_many(:oauth_client_tokens).with_foreign_key(:user_id).with_primary_key(:user_id).dependent(nil) end end describe "validations" do it { expect(member).to validate_uniqueness_of(:user_id).scoped_to(%i[project_id entity_type entity_id]) } it { expect(member).to validate_inclusion_of(:entity_type).in_array(["WorkPackage"]).allow_blank } end describe "#deletable?" do it "is true, when no roles are inherited" do member.member_roles.first.inherited_from = nil expect(member).to be_deletable end it "is false, when roles are inherited" do member.member_roles.first.inherited_from = 1 expect(member).not_to be_deletable end end describe "#some_roles_deletable?" do before do member.roles << project_role end it "is true, when no roles are inherited" do member.member_roles.first.inherited_from = nil expect(member).to be_some_roles_deletable end it "is true, when not all roles are inherited" do member.member_roles.first.inherited_from = 1 expect(member).to be_some_roles_deletable end it "is false, when all roles are inherited" do member.member_roles.first.inherited_from = 1 member.member_roles.second.inherited_from = 1 expect(member).not_to be_some_roles_deletable end end describe "#deletable_role?" do it "can delete directly assigned roles, but not if role is inherited through a group membership" do # user has the global_role by directly being assigned member.save # user gets a group that will be assigned the project_role group = create(:group, members: [user]) create(:member, project:, principal: group, roles: [project_role]) # run the service to normalize the users permissions expect do Groups::CreateInheritedRolesService .new(group, current_user: User.system, contract_class: EmptyContract) .call(user_ids: [user.id]) user.reload end.to change(user.memberships, :count).by(1) # membership of the user is the global roles they got assigned directly global_membership = user.memberships.find_by(project: nil) expect(global_membership).to be_deletable_role(global_role) # membership of the user is the project role they got by being a group member project_membership = user.memberships.find_by(project:) expect(project_membership).not_to be_deletable_role(project_role) end end describe ".can_be_member_of?" do it "returns true when a whitelisted entity is passed in" do result = described_class.can_be_member_of?(build(:work_package)) expect(result).to be_truthy end it "returns true when the class name of a whitelisted entity is passed in" do result = described_class.can_be_member_of?(WorkPackage) expect(result).to be_truthy end it "returns false when a non-whitelisted entity is passed in" do result = described_class.can_be_member_of?(build(:user)) expect(result).to be_falsey end it "returns false when the class name of a whitelisted entity is passed in" do result = described_class.can_be_member_of?(User) expect(result).to be_falsey end end end