Initial commit
This commit is contained in:
zhongjin
@@ -0,0 +1,454 @@
|
||||
require_relative '../../spec_helper_min'
|
||||
require_relative '../../factories/organizations_contexts'
|
||||
|
||||
describe Admin::OrganizationsController do
|
||||
include Warden::Test::Helpers
|
||||
include_context 'organization with users helper'
|
||||
|
||||
let(:out_of_quota_message) { "Your organization has run out of quota" }
|
||||
let(:out_of_seats_message) { "Your organization has run out of seats" }
|
||||
|
||||
before(:all) do
|
||||
@org_user_2.org_admin = true
|
||||
@org_user_2.save
|
||||
end
|
||||
|
||||
describe '#settings' do
|
||||
let(:payload) do
|
||||
{
|
||||
organization: { color: '#ff0000' }
|
||||
}
|
||||
end
|
||||
|
||||
let(:payload_password) do
|
||||
{
|
||||
organization: { color: '#ff0000' },
|
||||
password_confirmation: @org_user_owner.password
|
||||
}
|
||||
end
|
||||
|
||||
let(:payload_wrong_password) do
|
||||
{
|
||||
organization: { color: '#ff0000' },
|
||||
password_confirmation: 'prapra'
|
||||
}
|
||||
end
|
||||
|
||||
before(:each) do
|
||||
host! "#{@organization.name}.localhost.lan"
|
||||
Organization.any_instance.stubs(:update_in_central).returns(true)
|
||||
end
|
||||
|
||||
it 'cannot be accessed by non owner users' do
|
||||
login_as(@org_user_1, scope: @org_user_1.username)
|
||||
get organization_settings_url(user_domain: @org_user_1.username)
|
||||
response.status.should eq 404
|
||||
|
||||
login_as(@org_user_2, scope: @org_user_2.username)
|
||||
get organization_settings_url(user_domain: @org_user_2.username)
|
||||
response.status.should eq 404
|
||||
end
|
||||
|
||||
it 'cannot be updated by non owner users' do
|
||||
login_as(@org_user_1, scope: @org_user_1.username)
|
||||
put organization_settings_update_url(user_domain: @org_user_1.username), payload
|
||||
response.status.should eq 404
|
||||
|
||||
login_as(@org_user_2, scope: @org_user_2.username)
|
||||
put organization_settings_update_url(user_domain: @org_user_2.username), payload
|
||||
response.status.should eq 404
|
||||
end
|
||||
|
||||
it 'can be accessed by owner user' do
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
get organization_settings_url(user_domain: @org_user_owner.username)
|
||||
response.status.should eq 200
|
||||
end
|
||||
|
||||
it 'can be updated by owner user' do
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
put organization_settings_update_url(user_domain: @org_user_owner.username), payload_password
|
||||
response.status.should eq 302
|
||||
end
|
||||
|
||||
it 'fails to update if no password_confirmation' do
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
put organization_settings_update_url(user_domain: @org_user_owner.username), payload
|
||||
response.status.should eq 403
|
||||
response.body.should match /Confirmation password sent does not match your current password/
|
||||
end
|
||||
|
||||
it 'fails to update if wrong password_confirmation' do
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
put organization_settings_update_url(user_domain: @org_user_owner.username), payload_wrong_password
|
||||
response.status.should eq 403
|
||||
response.body.should match /Confirmation password sent does not match your current password/
|
||||
end
|
||||
end
|
||||
|
||||
describe '#regenerate_api_keys' do
|
||||
it 'regenerate api keys for all org users' do
|
||||
api_key = @carto_org_user_owner.api_keys.create_regular_key!(name: 'wadus', grants: [{ type: 'apis', apis: [] }])
|
||||
@organization.engine_enabled = true
|
||||
@organization.save
|
||||
host! "#{@organization.name}.localhost.lan"
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
post regenerate_organization_users_api_key_url(
|
||||
user_domain: @org_user_owner.username,
|
||||
password_confirmation: @org_user_owner.password
|
||||
)
|
||||
response.status.should eq 302
|
||||
|
||||
@organization.users.each do |u|
|
||||
old_api_key = u.api_key
|
||||
u.reload
|
||||
expect(u.api_key).to_not eq old_api_key
|
||||
end
|
||||
expect { api_key.reload }.to(change { api_key.token })
|
||||
api_key.destroy
|
||||
end
|
||||
end
|
||||
|
||||
describe '#delete' do
|
||||
before(:all) do
|
||||
@delete_org = test_organization
|
||||
@delete_org.save
|
||||
|
||||
helper = TestUserFactory.new
|
||||
@delete_org_owner = helper.create_owner(@delete_org)
|
||||
|
||||
@delete_org_user1 = @helper.create_test_user(unique_name('user'), @delete_org)
|
||||
end
|
||||
|
||||
after(:all) do
|
||||
@delete_org.destroy_cascade if Carto::Organization.exists?(@delete_org.id)
|
||||
end
|
||||
|
||||
before(:each) do
|
||||
host! "#{@delete_org.name}.localhost.lan"
|
||||
Organization.any_instance.stubs(:update_in_central).returns(true)
|
||||
end
|
||||
|
||||
it 'cannot be accessed by non owner users' do
|
||||
login_as(@delete_org_user1, scope: @delete_org_user1.username)
|
||||
delete organization_destroy_url(user_domain: @delete_org_user1.username)
|
||||
response.status.should eq 404
|
||||
end
|
||||
|
||||
describe 'as owner' do
|
||||
before(:each) do
|
||||
login_as(@delete_org_owner, scope: @delete_org_owner.username)
|
||||
end
|
||||
|
||||
it 'returns 400 if no password confirmation is provided' do
|
||||
delete organization_destroy_url(user_domain: @delete_org_owner.username)
|
||||
response.status.should eq 400
|
||||
response.body.should include("Password doesn't match")
|
||||
end
|
||||
|
||||
it 'returns 400 if password confirmation is wrong' do
|
||||
payload = { deletion_password_confirmation: @delete_org_owner.password + 'wadus' }
|
||||
delete organization_destroy_url(user_domain: @delete_org_owner.username), payload
|
||||
response.status.should eq 400
|
||||
end
|
||||
|
||||
it 'deletes organization and redirects if passwords match' do
|
||||
payload = { deletion_password_confirmation: @delete_org_owner.password }
|
||||
delete organization_destroy_url(user_domain: @delete_org_owner.username), payload
|
||||
response.status.should eq 302
|
||||
Carto::Organization.exists?(@delete_org.id).should be_false
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
describe '#auth' do
|
||||
let(:payload) do
|
||||
{
|
||||
organization: {
|
||||
whitelisted_email_domains: '',
|
||||
auth_username_password_enabled: true,
|
||||
auth_google_enabled: true,
|
||||
auth_github_enabled: true,
|
||||
strong_passwords_enabled: false,
|
||||
password_expiration_in_d: 1
|
||||
}
|
||||
}
|
||||
end
|
||||
|
||||
let(:payload_password) do
|
||||
{
|
||||
organization: {
|
||||
whitelisted_email_domains: '',
|
||||
auth_username_password_enabled: true,
|
||||
auth_google_enabled: true,
|
||||
auth_github_enabled: true,
|
||||
strong_passwords_enabled: false,
|
||||
password_expiration_in_d: 1
|
||||
},
|
||||
password_confirmation: @org_user_owner.password
|
||||
}
|
||||
end
|
||||
|
||||
let(:payload_wrong_password) do
|
||||
{
|
||||
organization: {
|
||||
whitelisted_email_domains: '',
|
||||
auth_username_password_enabled: true,
|
||||
auth_google_enabled: true,
|
||||
auth_github_enabled: true,
|
||||
strong_passwords_enabled: false
|
||||
},
|
||||
password_confirmation: 'prapra'
|
||||
}
|
||||
end
|
||||
|
||||
before(:each) do
|
||||
host! "#{@organization.name}.localhost.lan"
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
Organization.any_instance.stubs(:update_in_central).returns(true)
|
||||
end
|
||||
|
||||
it 'cannot be accessed by non owner users' do
|
||||
login_as(@org_user_1, scope: @org_user_1.username)
|
||||
get organization_auth_url(user_domain: @org_user_1.username)
|
||||
response.status.should eq 404
|
||||
|
||||
login_as(@org_user_2, scope: @org_user_2.username)
|
||||
get organization_auth_url(user_domain: @org_user_2.username)
|
||||
response.status.should eq 404
|
||||
end
|
||||
|
||||
it 'cannot be updated by non owner users' do
|
||||
login_as(@org_user_1, scope: @org_user_1.username)
|
||||
put organization_auth_update_url(user_domain: @org_user_1.username), payload
|
||||
response.status.should eq 404
|
||||
|
||||
login_as(@org_user_2, scope: @org_user_2.username)
|
||||
put organization_auth_update_url(user_domain: @org_user_2.username), payload
|
||||
response.status.should eq 404
|
||||
end
|
||||
|
||||
it 'can be accessed by owner user' do
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
get organization_auth_url(user_domain: @org_user_owner.username)
|
||||
response.status.should eq 200
|
||||
end
|
||||
|
||||
it 'can be updated by owner user' do
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
put organization_auth_update_url(user_domain: @org_user_owner.username), payload_password
|
||||
response.status.should eq 302
|
||||
end
|
||||
|
||||
it 'cannot be updated by owner user if missing password_confirmation' do
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
put organization_auth_update_url(user_domain: @org_user_owner.username), payload
|
||||
response.status.should eq 403
|
||||
response.body.should match /Confirmation password sent does not match your current password/
|
||||
end
|
||||
|
||||
it 'cannot be updated by owner user if wrong password_confirmation' do
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
put organization_auth_update_url(user_domain: @org_user_owner.username), payload_wrong_password
|
||||
response.status.should eq 403
|
||||
response.body.should match /Confirmation password sent does not match your current password/
|
||||
end
|
||||
|
||||
it 'updates password_expiration_in_d' do
|
||||
@organization.password_expiration_in_d = nil
|
||||
@organization.save
|
||||
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
put organization_auth_update_url(user_domain: @org_user_owner.username), payload_password
|
||||
response.status.should eq 302
|
||||
@organization.reload
|
||||
@organization.password_expiration_in_d.should eq 1
|
||||
|
||||
payload_password[:organization][:password_expiration_in_d] = ''
|
||||
host! "#{@organization.name}.localhost.lan"
|
||||
login_as(@org_user_owner, scope: @org_user_owner.username)
|
||||
put organization_auth_update_url(user_domain: @org_user_owner.username), payload_password
|
||||
response.status.should eq 302
|
||||
@organization.reload
|
||||
@organization.password_expiration_in_d.should be_nil
|
||||
end
|
||||
|
||||
describe 'signup enabled' do
|
||||
before(:all) do
|
||||
@organization.whitelisted_email_domains = ['carto.com']
|
||||
@organization.save
|
||||
end
|
||||
|
||||
before(:each) do
|
||||
@organization.signup_page_enabled.should eq true
|
||||
end
|
||||
|
||||
it 'does not display out warning messages if organization signup would work' do
|
||||
@organization.unassigned_quota.should > @organization.default_quota_in_bytes
|
||||
|
||||
get organization_auth_url(user_domain: @org_user_owner.username)
|
||||
|
||||
response.status.should eq 200
|
||||
response.body.should_not include(out_of_quota_message)
|
||||
response.body.should_not include(out_of_seats_message)
|
||||
end
|
||||
|
||||
it 'displays out of quota message if there is no remaining quota' do
|
||||
old_quota_in_bytes = @organization.quota_in_bytes
|
||||
|
||||
old_remaining_quota = @organization.unassigned_quota
|
||||
new_quota = (@organization.quota_in_bytes - old_remaining_quota) + (@organization.default_quota_in_bytes / 2)
|
||||
@organization.reload
|
||||
@org_user_owner.reload
|
||||
@organization.quota_in_bytes = new_quota
|
||||
@organization.save
|
||||
|
||||
get organization_auth_url(user_domain: @org_user_owner.username)
|
||||
|
||||
response.status.should eq 200
|
||||
response.body.should include(out_of_quota_message)
|
||||
|
||||
@organization.quota_in_bytes = old_quota_in_bytes
|
||||
@organization.save
|
||||
end
|
||||
|
||||
it 'displays out of seats message if there are no seats left' do
|
||||
old_seats = @organization.seats
|
||||
|
||||
new_seats = @organization.seats - @organization.remaining_seats
|
||||
@organization.reload
|
||||
@org_user_owner.reload
|
||||
@organization.seats = new_seats
|
||||
@organization.save
|
||||
|
||||
get organization_auth_url(user_domain: @org_user_owner.username)
|
||||
|
||||
response.status.should eq 200
|
||||
response.body.should include(out_of_seats_message)
|
||||
|
||||
@organization.seats = old_seats
|
||||
@organization.save
|
||||
end
|
||||
end
|
||||
|
||||
describe 'signup disabled' do
|
||||
before(:all) do
|
||||
@organization.whitelisted_email_domains = []
|
||||
@organization.save
|
||||
end
|
||||
|
||||
before(:each) do
|
||||
@organization.signup_page_enabled.should eq false
|
||||
end
|
||||
|
||||
it 'does not display out warning messages even without quota and seats' do
|
||||
old_quota_in_bytes = @organization.quota_in_bytes
|
||||
old_seats = @organization.seats
|
||||
|
||||
@organization.reload
|
||||
@org_user_owner.reload
|
||||
|
||||
@organization.seats = @organization.assigned_seats
|
||||
@organization.quota_in_bytes = @organization.assigned_quota + 1
|
||||
@organization.save
|
||||
|
||||
get organization_auth_url(user_domain: @org_user_owner.username)
|
||||
|
||||
response.status.should eq 200
|
||||
response.body.should_not include(out_of_quota_message)
|
||||
response.body.should_not include(out_of_seats_message)
|
||||
|
||||
@organization.quota_in_bytes = old_quota_in_bytes
|
||||
@organization.seats = old_seats
|
||||
@organization.save
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
shared_examples_for 'notifications' do
|
||||
before(:each) do
|
||||
host! "#{@organization.name}.localhost.lan"
|
||||
login_as(@admin_user, scope: @admin_user.username)
|
||||
end
|
||||
|
||||
describe '#notifications' do
|
||||
it 'displays last notification' do
|
||||
body = 'Free meal today'
|
||||
FactoryGirl.create(:notification, organization: @carto_organization, body: body)
|
||||
get organization_notifications_admin_url(user_domain: @admin_user.username)
|
||||
response.status.should eq 200
|
||||
response.body.should include(body)
|
||||
end
|
||||
end
|
||||
|
||||
describe '#new_notification' do
|
||||
it 'creates a new notification' do
|
||||
params = {
|
||||
body: 'the body',
|
||||
recipients: Carto::Notification::RECIPIENT_ALL
|
||||
}
|
||||
post new_organization_notification_admin_url(
|
||||
user_domain: @admin_user.username
|
||||
), carto_notification: params, password_confirmation: @admin_user.password
|
||||
response.status.should eq 302
|
||||
flash[:success].should eq 'Notification sent!'
|
||||
notification = @carto_organization.reload.notifications.first
|
||||
notification.body.should eq params[:body]
|
||||
notification.recipients.should eq params[:recipients]
|
||||
notification.icon.should eq Carto::Notification::ICON_ALERT
|
||||
end
|
||||
|
||||
it 'does not create a new notification if wrong password_confirmation' do
|
||||
params = {
|
||||
body: 'the body wrong',
|
||||
recipients: Carto::Notification::RECIPIENT_ALL
|
||||
}
|
||||
post new_organization_notification_admin_url(
|
||||
user_domain: @admin_user.username
|
||||
), carto_notification: params, password_confirmation: 'prapra'
|
||||
response.status.should eq 403
|
||||
response.body.should match /Confirmation password sent does not match your current password/
|
||||
notification = @carto_organization.reload.notifications.first
|
||||
notification.body.should_not eq params[:body]
|
||||
end
|
||||
|
||||
it 'does not create a new notification if missing password_confirmation' do
|
||||
params = {
|
||||
body: 'the body missing',
|
||||
recipients: Carto::Notification::RECIPIENT_ALL
|
||||
}
|
||||
post new_organization_notification_admin_url(user_domain: @admin_user.username), carto_notification: params
|
||||
response.status.should eq 403
|
||||
response.body.should match /Confirmation password sent does not match your current password/
|
||||
notification = @carto_organization.reload.notifications.first
|
||||
notification.body.should_not eq params[:body]
|
||||
end
|
||||
end
|
||||
|
||||
describe '#destroy_notification' do
|
||||
it 'destroys a notification' do
|
||||
notification = @carto_organization.notifications.first
|
||||
delete destroy_organization_notification_admin_url(user_domain: @admin_user.username, id: notification.id)
|
||||
response.status.should eq 302
|
||||
flash[:success].should eq 'Notification was successfully deleted!'
|
||||
@carto_organization.reload.notifications.should_not include(notification)
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
describe 'with organization owner' do
|
||||
it_behaves_like 'notifications' do
|
||||
before(:all) do
|
||||
@admin_user = @org_user_owner
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
describe 'with organization admin' do
|
||||
it_behaves_like 'notifications' do
|
||||
before(:all) do
|
||||
@admin_user = @org_user_2
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
Reference in New Issue
Block a user