{ :path => "/api/0.6/changeset/1/comment.json", :method => :post },
{ :controller => "api/changeset_comments", :action => "create", :changeset_id => "1", :format => "json" }
)
- assert_routing(
- { :path => "/api/0.6/changeset/comment/1/hide", :method => :post },
- { :controller => "api/changeset_comments", :action => "destroy", :id => "1" }
- )
- assert_routing(
- { :path => "/api/0.6/changeset/comment/1/hide.json", :method => :post },
- { :controller => "api/changeset_comments", :action => "destroy", :id => "1", :format => "json" }
- )
- assert_routing(
- { :path => "/api/0.6/changeset/comment/1/unhide", :method => :post },
- { :controller => "api/changeset_comments", :action => "restore", :id => "1" }
- )
- assert_routing(
- { :path => "/api/0.6/changeset/comment/1/unhide.json", :method => :post },
- { :controller => "api/changeset_comments", :action => "restore", :id => "1", :format => "json" }
- )
end
def test_index
end
end
- def test_hide_by_unauthorized
- comment = create(:changeset_comment)
-
- post changeset_comment_hide_path(comment)
-
- assert_response :unauthorized
- assert comment.reload.visible
- end
-
- def test_hide_by_normal_user
- comment = create(:changeset_comment)
- auth_header = bearer_authorization_header
-
- post changeset_comment_hide_path(comment), :headers => auth_header
-
- assert_response :forbidden
- assert comment.reload.visible
- end
-
- def test_hide_missing_comment
- auth_header = bearer_authorization_header create(:moderator_user)
-
- post changeset_comment_hide_path(999111), :headers => auth_header
-
- assert_response :not_found
- end
-
- def test_hide_without_required_scope
- comment = create(:changeset_comment)
- auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[read_prefs]
-
- post changeset_comment_hide_path(comment), :headers => auth_header
-
- assert_response :forbidden
- assert comment.reload.visible
- end
-
- def test_hide_with_write_changeset_comments_scope
- comment = create(:changeset_comment)
- auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_changeset_comments]
-
- post changeset_comment_hide_path(comment), :headers => auth_header
-
- assert_response :success
- assert_equal "application/xml", response.media_type
- assert_dom "osm", 1 do
- assert_dom "> changeset", 1 do
- assert_dom "> @id", comment.changeset_id.to_s
- assert_dom "> @comments_count", "0"
- end
- end
-
- assert_not comment.reload.visible
- end
-
- def test_hide_with_write_changeset_comments_scope_json
- comment = create(:changeset_comment)
- auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_changeset_comments]
-
- post changeset_comment_hide_path(comment, :format => "json"), :headers => auth_header
-
- assert_response :success
- assert_equal "application/json", response.media_type
- js = ActiveSupport::JSON.decode(@response.body)
- assert_not_nil js["changeset"]
- assert_equal comment.changeset_id, js["changeset"]["id"]
- assert_equal 0, js["changeset"]["comments_count"]
-
- assert_not comment.reload.visible
- end
-
- def test_hide_with_write_api_scope
- comment = create(:changeset_comment)
- auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_api]
-
- post changeset_comment_hide_path(comment), :headers => auth_header
-
- assert_response :success
- assert_equal "application/xml", response.media_type
- assert_dom "osm", 1 do
- assert_dom "> changeset", 1 do
- assert_dom "> @id", comment.changeset_id.to_s
- assert_dom "> @comments_count", "0"
- end
- end
-
- assert_not comment.reload.visible
- end
-
- def test_hide_with_write_api_scope_json
- comment = create(:changeset_comment)
- auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_api]
-
- post changeset_comment_hide_path(comment, :format => "json"), :headers => auth_header
-
- assert_response :success
- assert_equal "application/json", response.media_type
- js = ActiveSupport::JSON.decode(@response.body)
- assert_not_nil js["changeset"]
- assert_equal comment.changeset_id, js["changeset"]["id"]
- assert_equal 0, js["changeset"]["comments_count"]
-
- assert_not comment.reload.visible
- end
-
- def test_unhide_by_unauthorized
- comment = create(:changeset_comment, :visible => false)
-
- post changeset_comment_unhide_path(comment)
-
- assert_response :unauthorized
- assert_not comment.reload.visible
- end
-
- def test_unhide_by_normal_user
- comment = create(:changeset_comment, :visible => false)
- auth_header = bearer_authorization_header
-
- post changeset_comment_unhide_path(comment), :headers => auth_header
-
- assert_response :forbidden
- assert_not comment.reload.visible
- end
-
- def test_unhide_missing_comment
- auth_header = bearer_authorization_header create(:moderator_user)
-
- post changeset_comment_unhide_path(999111), :headers => auth_header
-
- assert_response :not_found
- end
-
- def test_unhide_without_required_scope
- comment = create(:changeset_comment, :visible => false)
- auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[read_prefs]
-
- post changeset_comment_unhide_path(comment), :headers => auth_header
-
- assert_response :forbidden
- assert_not comment.reload.visible
- end
-
- def test_unhide_with_write_changeset_comments_scope
- comment = create(:changeset_comment, :visible => false)
- auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_changeset_comments]
-
- post changeset_comment_unhide_path(comment), :headers => auth_header
-
- assert_response :success
- assert_equal "application/xml", response.media_type
- assert_dom "osm", 1 do
- assert_dom "> changeset", 1 do
- assert_dom "> @id", comment.changeset_id.to_s
- assert_dom "> @comments_count", "1"
- end
- end
-
- assert comment.reload.visible
- end
-
- def test_unhide_with_write_changeset_comments_scope_json
- comment = create(:changeset_comment, :visible => false)
- auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_changeset_comments]
-
- post changeset_comment_unhide_path(comment, :format => "json"), :headers => auth_header
-
- assert_response :success
- assert_equal "application/json", response.media_type
- js = ActiveSupport::JSON.decode(@response.body)
- assert_not_nil js["changeset"]
- assert_equal comment.changeset_id, js["changeset"]["id"]
- assert_equal 1, js["changeset"]["comments_count"]
-
- assert comment.reload.visible
- end
-
- def test_unhide_with_write_api_scope
- comment = create(:changeset_comment, :visible => false)
- auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_api]
-
- post changeset_comment_unhide_path(comment), :headers => auth_header
-
- assert_response :success
- assert_equal "application/xml", response.media_type
- assert_dom "osm", 1 do
- assert_dom "> changeset", 1 do
- assert_dom "> @id", comment.changeset_id.to_s
- assert_dom "> @comments_count", "1"
- end
- end
-
- assert comment.reload.visible
- end
-
- def test_unhide_with_write_api_scope_json
- comment = create(:changeset_comment, :visible => false)
- auth_header = bearer_authorization_header create(:moderator_user), :scopes => %w[write_api]
-
- post changeset_comment_unhide_path(comment, :format => "json"), :headers => auth_header
-
- assert_response :success
- js = ActiveSupport::JSON.decode(@response.body)
- assert_equal "application/json", response.media_type
- assert_not_nil js["changeset"]
- assert_equal comment.changeset_id, js["changeset"]["id"]
- assert_equal 1, js["changeset"]["comments_count"]
-
- assert comment.reload.visible
- end
-
private
##
projects / rails.git / blobdiff