Use CanCanCan for changeset comments

[rails.git] / test / abilities / capability_test.rb

diff --git a/test/abilities/capability_test.rb b/test/abilities/capability_test.rb
index a25c670434677ffe098da203fd9b7a534fa8ba15..8e77537a45c2f4eca02d22895d7cfa6b906f6cbc 100644 (file)
--- a/test/abilities/capability_test.rb
+++ b/test/abilities/capability_test.rb
@@ -12,6 +12,48 @@ class CapabilityTest < ActiveSupport::TestCase
   end
 end
 
   end
 end
 

+class ChangesetCommentCapabilityTest < CapabilityTest
+  test "as a normal user with permissionless token" do
+    token = create(:access_token)
+    capability = Capability.new token
+
+    [:create, :destroy, :restore].each do |action|
+      assert capability.cannot? action, ChangesetComment
+    end
+  end
+
+  test "as a normal user with allow_write_api token" do
+    token = create(:access_token, :allow_write_api => true)
+    capability = Capability.new token
+
+    [:destroy, :restore].each do |action|
+      assert capability.cannot? action, ChangesetComment
+    end
+
+    [:create].each do |action|
+      assert capability.can? action, ChangesetComment
+    end
+  end
+
+  test "as a moderator with permissionless token" do
+    token = create(:access_token, :user => create(:moderator_user))
+    capability = Capability.new token
+
+    [:create, :destroy, :restore].each do |action|
+      assert capability.cannot? action, ChangesetComment
+    end
+  end
+
+  test "as a moderator with allow_write_api token" do
+    token = create(:access_token, :user => create(:moderator_user), :allow_write_api => true)
+    capability = Capability.new token
+
+    [:create, :destroy, :restore].each do |action|
+      assert capability.can? action, ChangesetComment
+    end
+  end
+end
+

 class UserCapabilityTest < CapabilityTest
   test "user preferences" do
     # a user with no tokens
 class UserCapabilityTest < CapabilityTest
   test "user preferences" do
     # a user with no tokens