|
require 'test_helper'
|
|
|
|
class AssociationAuthorizerTest < ActiveSupport::TestCase
|
|
def setup
|
|
@hostgroup = FactoryGirl.create(:hostgroup)
|
|
@host = FactoryGirl.create(:host, :managed, :hostgroup => @hostgroup)
|
|
@user = FactoryGirl.create(:user)
|
|
end
|
|
|
|
test "user with permissions can view host" do
|
|
role = FactoryGirl.create(:role, :name => 'can_view_host')
|
|
role.add_permissions!(['view_hosts'])
|
|
@user.update_attribute :roles, [role]
|
|
|
|
as_user @user do
|
|
authorized = AssociationAuthorizer.authorized_associations(Hostgroup.reflect_on_association(:hosts).klass, :hosts)
|
|
assert authorized.include?(@host)
|
|
end
|
|
end
|
|
|
|
test "user without permissions can't view host" do
|
|
as_user @user do
|
|
authorized = AssociationAuthorizer.authorized_associations(Hostgroup.reflect_on_association(:hosts).klass, :hosts)
|
|
refute authorized.include?(@host)
|
|
end
|
|
end
|
|
|
|
test "authorized_associations should raise unknown permission exception when should_raise_exception is true" do
|
|
assert_raise(Foreman::Exception) do
|
|
AssociationAuthorizer.view_permission_name('non_existing_permission', true)
|
|
end
|
|
end
|
|
|
|
test "authorized_associations should return false for unknown permission when should_raise_exception is false" do
|
|
permission = AssociationAuthorizer.view_permission_name('non_existing_permission', false)
|
|
assert_equal false, permission
|
|
end
|
|
|
|
test "authorized_associations should return permission if it exists" do
|
|
permission = AssociationAuthorizer.view_permission_name(:host, false)
|
|
assert_equal "view_hosts", permission
|
|
end
|
|
end
|
