require "rails_helper" require "cancan/matchers" describe Abilities::Administrator do subject(:ability) { Ability.new(user) } let(:user) { administrator.user } let(:administrator) { create(:administrator) } let(:other_user) { create(:user) } let(:hidden_user) { create(:user, :hidden) } let(:debate) { create(:debate) } let(:comment) { create(:comment) } let(:proposal) { create(:proposal, author: user) } let(:budget_investment) { create(:budget_investment) } let(:finished_investment) { create(:budget_investment, budget: create(:budget, :finished)) } let(:legislation_question) { create(:legislation_question) } let(:current_poll) { create(:poll) } let(:future_poll) { create(:poll, :future) } let(:current_poll_question) { create(:poll_question) } let(:future_poll_question) { create(:poll_question, poll: future_poll) } let(:current_poll_question_option) { create(:poll_question_option) } let(:future_poll_question_option) { create(:poll_question_option, poll: future_poll) } let(:current_poll_option_video) { create(:poll_option_video, option: current_poll_question_option) } let(:future_poll_option_video) { create(:poll_option_video, option: future_poll_question_option) } let(:current_poll_option_image) { build(:image, imageable: current_poll_question_option) } let(:future_poll_option_image) { build(:image, imageable: future_poll_question_option) } let(:current_poll_option_document) { build(:document, documentable: current_poll_question_option) } let(:future_poll_option_document) { build(:document, documentable: future_poll_question_option) } let(:past_process) { create(:legislation_process, :past) } let(:past_draft_process) { create(:legislation_process, :past, :not_published) } let(:open_process) { create(:legislation_process, :open) } let(:proposal_document) { build(:document, documentable: proposal, user: proposal.author) } let(:budget_investment_document) { build(:document, documentable: budget_investment) } let(:poll_question_document) { build(:document, documentable: current_poll_question) } let(:proposal_image) { build(:image, imageable: proposal, user: proposal.author) } let(:budget_investment_image) { build(:image, imageable: budget_investment) } let(:hidden_debate) { create(:debate, :hidden) } let(:hidden_comment) { create(:comment, :hidden) } let(:hidden_proposal) { create(:proposal, :hidden) } let(:dashboard_administrator_task) { create(:dashboard_administrator_task) } it { should be_able_to(:index, Debate) } it { should be_able_to(:show, debate) } it { should be_able_to(:index, Proposal) } it { should be_able_to(:show, proposal) } it { should_not be_able_to(:restore, comment) } it { should_not be_able_to(:restore, debate) } it { should_not be_able_to(:restore, proposal) } it { should_not be_able_to(:restore, other_user) } it { should be_able_to(:restore, hidden_comment) } it { should be_able_to(:restore, hidden_debate) } it { should be_able_to(:restore, hidden_proposal) } it { should be_able_to(:restore, hidden_user) } it { should_not be_able_to(:confirm_hide, comment) } it { should_not be_able_to(:confirm_hide, debate) } it { should_not be_able_to(:confirm_hide, proposal) } it { should_not be_able_to(:confirm_hide, other_user) } it { should be_able_to(:confirm_hide, hidden_comment) } it { should be_able_to(:confirm_hide, hidden_debate) } it { should be_able_to(:confirm_hide, hidden_proposal) } it { should be_able_to(:confirm_hide, hidden_user) } it { should be_able_to(:comment_as_administrator, debate) } it { should_not be_able_to(:comment_as_moderator, debate) } it { should be_able_to(:comment_as_administrator, proposal) } it { should_not be_able_to(:comment_as_moderator, proposal) } it { should be_able_to(:comment_as_administrator, legislation_question) } it { should_not be_able_to(:comment_as_moderator, legislation_question) } it { should be_able_to(:comment_as_administrator, current_poll) } it { should_not be_able_to(:comment_as_moderator, current_poll) } it { should be_able_to(:summary, past_process) } it { should_not be_able_to(:summary, past_draft_process) } it { should_not be_able_to(:summary, open_process) } it { should be_able_to(:create, Budget) } it { should be_able_to(:update, Budget) } it { should be_able_to(:read_results, create(:budget, :reviewing_ballots, :with_winner)) } it { should be_able_to(:read_results, create(:budget, :finished, :with_winner)) } it { should be_able_to(:read_results, create(:budget, :finished, results_enabled: true)) } it do should_not be_able_to(:read_results, create(:budget, :balloting, :with_winner, results_enabled: true)) end it { should_not be_able_to(:read_results, create(:budget, :reviewing_ballots, results_enabled: true)) } it { should_not be_able_to(:read_results, create(:budget, :finished, results_enabled: false)) } it { should be_able_to(:calculate_winners, create(:budget, :reviewing_ballots)) } it { should_not be_able_to(:calculate_winners, create(:budget, :balloting)) } it { should_not be_able_to(:calculate_winners, create(:budget, :finished)) } it { should be_able_to(:create, Budget::ValuatorAssignment) } it { should be_able_to(:admin_update, Budget::Investment) } it { should be_able_to(:hide, Budget::Investment) } it { should be_able_to(:valuate, create(:budget_investment, budget: create(:budget, :valuating))) } it { should_not be_able_to(:admin_update, finished_investment) } it { should_not be_able_to(:valuate, finished_investment) } it { should_not be_able_to(:comment_valuation, finished_investment) } it { should_not be_able_to(:toggle_selection, finished_investment) } it { should be_able_to(:destroy, proposal_image) } it { should be_able_to(:destroy, proposal_document) } it { should_not be_able_to(:destroy, budget_investment_image) } it { should_not be_able_to(:destroy, budget_investment_document) } it { should be_able_to(:manage, Dashboard::Action) } it { should be_able_to(:read, Poll::Question) } it { should be_able_to(:create, future_poll_question) } it { should be_able_to(:update, future_poll_question) } it { should be_able_to(:destroy, future_poll_question) } it { should_not be_able_to(:create, current_poll_question) } it { should_not be_able_to(:update, current_poll_question) } it { should_not be_able_to(:destroy, current_poll_question) } it { should be_able_to(:read, Poll::Question::Option) } it { should be_able_to(:order_options, Poll::Question::Option) } it { should be_able_to(:create, future_poll_question_option) } it { should be_able_to(:update, future_poll_question_option) } it { should be_able_to(:destroy, future_poll_question_option) } it { should_not be_able_to(:create, current_poll_question_option) } it { should_not be_able_to(:update, current_poll_question_option) } it { should_not be_able_to(:destroy, current_poll_question_option) } it { should be_able_to(:create, future_poll_option_video) } it { should be_able_to(:update, future_poll_option_video) } it { should be_able_to(:destroy, future_poll_option_video) } it { should_not be_able_to(:create, current_poll_option_video) } it { should_not be_able_to(:update, current_poll_option_video) } it { should_not be_able_to(:destroy, current_poll_option_video) } it { should be_able_to(:destroy, future_poll_option_image) } it { should_not be_able_to(:destroy, current_poll_option_image) } it { should be_able_to(:destroy, future_poll_option_document) } it { should_not be_able_to(:destroy, current_poll_option_document) } it { is_expected.to be_able_to :manage, Dashboard::AdministratorTask } it { is_expected.to be_able_to :manage, dashboard_administrator_task } it { should be_able_to(:manage, LocalCensusRecord) } it { should be_able_to(:create, LocalCensusRecords::Import) } it { should be_able_to(:show, LocalCensusRecords::Import) } it { should be_able_to(:read, SDG::Target) } it { should be_able_to(:read, SDG::Manager) } it { should be_able_to(:create, SDG::Manager) } it { should be_able_to(:destroy, SDG::Manager) } it { should be_able_to(:manage, Widget::Card) } describe "tenants" do context "with multitenancy disabled" do before { allow(Rails.application.config).to receive(:multitenancy).and_return(false) } it { should_not be_able_to :create, Tenant } it { should_not be_able_to :read, Tenant } it { should_not be_able_to :update, Tenant } it { should_not be_able_to :destroy, Tenant } end context "with multitenancy enabled" do before { allow(Rails.application.config).to receive(:multitenancy).and_return(true) } it { should be_able_to :create, Tenant } it { should be_able_to :read, Tenant } it { should be_able_to :update, Tenant } it { should be_able_to :hide, Tenant } it { should be_able_to :restore, Tenant } it { should_not be_able_to :destroy, Tenant } context "administrators from other tenants" do before do insert(:tenant, schema: "subsidiary") allow(Tenant).to receive(:current_schema).and_return("subsidiary") end it { should_not be_able_to :create, Tenant } it { should_not be_able_to :read, Tenant } it { should_not be_able_to :update, Tenant } it { should_not be_able_to :destroy, Tenant } it { should_not be_able_to :hide, Tenant } it { should_not be_able_to :restore, Tenant } end end end end