db25dc13e1
We were using Foundation's accordion menu to open/close nested lists of
links. Unfortunately, Foundation's accordion makes it impossible to
access links in nested links using the keyboard [1] (note the issue is
closed, but in the latest version of Foundation, 6.8.1, it's still
present, and Foundation's development is mostly discontinued).
Furtheremore, it adds the `menuitem` role to links, but ARIA menus are
not ment for navigation but for application behavior and, since it
doesn't add the `menubar` or `menu` roles to the parent elements, it
results in accessibility issues for people using screen readers (also
reported by the Axe accessibility testing engine).
So we need to implement our own solution. We're using the most commonly
used pattern: a buttton with the `aria-expanded` attribute. And, for
people using browsers where JavaScript hasn't loaded, we're keeping the
submenus open at all times (just like we were doing until now), and
we're disabling the buttons (since they do nothing without JavaScript).
This might not be an ideal solution, but it's probably good enough, and
way better than what we had until now.
We've also considered using the <details> and <summary> elements instead
of using buttons to open/close items on the list. However, these
elements still present some accessibility issues [2], and the transition
between open and closed can't be animated unless we overwrite the
`click` event with JavaScript. The pattern of using these elements to
open/close a nested list of links isn't common either, and some people
using screen readers might get confused when entering/leaving the nested
list.
We tried other approaches to get the animation effect, all of them based
on adding `[aria-expanded="false"]:not([disabled]) + * { display: none;
}` to the CSS file.
Unfortunately, animation using CSS isn't feasible right now because
browsers can't animate a change form `height: 0` to `height: auto`.
There are some hacks like animating the `max-height` or the `flex-grow`
property, but the resulting animation is inconsistent. A perfect
animation can be done using the `grid-template-rows` property [3], but
it requires adding a grid container and only works in Firefox and recent
versions of Chrome and similar browsers.
Getting to a solution with JavaScript was also tricky. With the
following approach, `slideToggle()` opened the menu the first time, even
if it was already open (not sure why):
```
toggle_buttons.on("click", function() {
$(this).attr("aria-expanded", !JSON.parse($(this).attr("aria-expanded")));
$(this).next().slideToggle();
});
```
This made the arrow turn after the menu had slided instead of doing it
at the same time:
```
toggle_buttons.on("click", function() {
var button = $(this);
button.next().slideToggle(function() {
button.attr("aria-expanded",
!JSON.parse(button.attr("aria-expanded")));
});
}
```
With this, everything disappeared quickly:
```
toggle_buttons.on("click", function() {
var expanded = JSON.parse($(this).attr("aria-expanded"));
if (expanded) {
$(this).next().slideUp();
} else {
$(this).next().slideDown();
}
$(this).attr("aria-expanded", !expanded);
}
```
So, in the end, we're hiding the nested link lists with JavaScript
instead of CSS.
[1] Issue 12046 in https://github.com/foundation/foundation-sites
[2] https://www.scottohara.me/blog/2022/09/12/details-summary.html
[3] https://css-tricks.com/css-grid-can-do-auto-height-transitions
107 lines
3.1 KiB
Ruby
107 lines
3.1 KiB
Ruby
require "rails_helper"
|
|
|
|
describe "Admin" do
|
|
let(:user) { create(:user) }
|
|
|
|
scenario "Access as regular user is not authorized" do
|
|
login_as(user)
|
|
visit admin_root_path
|
|
|
|
expect(page).not_to have_current_path(admin_root_path)
|
|
expect(page).to have_current_path(root_path)
|
|
expect(page).to have_content "You do not have permission to access this page"
|
|
end
|
|
|
|
scenario "Access as moderator is not authorized" do
|
|
create(:moderator, user: user)
|
|
login_as(user)
|
|
visit admin_root_path
|
|
|
|
expect(page).not_to have_current_path(admin_root_path)
|
|
expect(page).to have_current_path(root_path)
|
|
expect(page).to have_content "You do not have permission to access this page"
|
|
end
|
|
|
|
scenario "Access as valuator is not authorized" do
|
|
create(:valuator, user: user)
|
|
login_as(user)
|
|
visit admin_root_path
|
|
|
|
expect(page).not_to have_current_path(admin_root_path)
|
|
expect(page).to have_current_path(root_path)
|
|
expect(page).to have_content "You do not have permission to access this page"
|
|
end
|
|
|
|
scenario "Access as manager is not authorized" do
|
|
create(:manager, user: user)
|
|
login_as(user)
|
|
visit admin_root_path
|
|
|
|
expect(page).not_to have_current_path(admin_root_path)
|
|
expect(page).to have_current_path(root_path)
|
|
expect(page).to have_content "You do not have permission to access this page"
|
|
end
|
|
|
|
scenario "Access as SDG manager is not authorized" do
|
|
create(:sdg_manager, user: user)
|
|
login_as(user)
|
|
visit admin_root_path
|
|
|
|
expect(page).not_to have_current_path(admin_root_path)
|
|
expect(page).to have_current_path(root_path)
|
|
expect(page).to have_content "You do not have permission to access this page"
|
|
end
|
|
|
|
scenario "Access as poll officer is not authorized" do
|
|
login_as(create(:poll_officer).user)
|
|
visit admin_root_path
|
|
|
|
expect(page).not_to have_current_path(admin_root_path)
|
|
expect(page).to have_current_path(root_path)
|
|
expect(page).to have_content "You do not have permission to access this page"
|
|
end
|
|
|
|
scenario "Access as administrator is authorized", :admin do
|
|
visit root_path
|
|
|
|
click_link "Menu"
|
|
click_link "Administration"
|
|
|
|
expect(page).to have_current_path(admin_root_path)
|
|
expect(page).to have_css "#admin_menu"
|
|
expect(page).not_to have_css "#moderation_menu"
|
|
expect(page).not_to have_css "#valuation_menu"
|
|
expect(page).not_to have_content "You do not have permission to access this page"
|
|
end
|
|
|
|
scenario "Admin menu does not hide active elements", :admin do
|
|
visit admin_budgets_path
|
|
|
|
within("#admin_menu") do
|
|
expect(page).to have_link "Participatory budgets"
|
|
|
|
click_button "Site content"
|
|
|
|
expect(page).to have_link "Participatory budgets"
|
|
end
|
|
end
|
|
|
|
describe "Menu button", :admin do
|
|
scenario "is not present on large screens" do
|
|
visit admin_root_path
|
|
|
|
expect(page).not_to have_button "Menu"
|
|
end
|
|
|
|
scenario "toggles the menu on small screens", :small_window do
|
|
visit admin_root_path
|
|
|
|
expect(page).not_to have_link "My account"
|
|
|
|
click_button "Menu"
|
|
|
|
expect(page).to have_link "My account"
|
|
end
|
|
end
|
|
end
|