Compare commits
2
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
4edf526475 | ||
|
|
4a28708479 |
+91
@@ -0,0 +1,91 @@
|
||||
defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsForOtherServersDataTest do
|
||||
use DecentralisedBookIndexWeb.LiveCase, async: true
|
||||
|
||||
alias DecentralisedBookIndex.TestEndpoints
|
||||
@test_server_endpoint TestEndpoints.test_api_endpoint()
|
||||
|
||||
setup do
|
||||
moderator = generate(user(role: :moderator))
|
||||
admin = generate(user(role: :admin))
|
||||
server = generate(dbi_server(url: @test_server_endpoint))
|
||||
|
||||
%{
|
||||
server: server,
|
||||
moderator: moderator,
|
||||
admin: admin,
|
||||
users: [moderator, admin]
|
||||
}
|
||||
end
|
||||
|
||||
describe "Book Edit /books/:id/edit" do
|
||||
setup %{server: server} do
|
||||
%{book: generate(book(dbi_server_id: server.id))}
|
||||
end
|
||||
|
||||
test "can't edit other servers' data", %{conn: conn, users: users, book: book} do
|
||||
for user <- users do
|
||||
redirect_url = "/books/#{book.id}"
|
||||
|
||||
assert {:error,
|
||||
{:redirect,
|
||||
%{flash: %{"error" => "Can't edit other server's data!"}, to: ^redirect_url}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/books/#{book.id}/edit")
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
describe "Author Edit /authors/:id/edit" do
|
||||
setup %{server: server} do
|
||||
%{author: generate(author(dbi_server_id: server.id))}
|
||||
end
|
||||
|
||||
test "can't edit other servers' data", %{conn: conn, users: users, author: author} do
|
||||
for user <- users do
|
||||
redirect_url = "/authors/#{author.id}"
|
||||
|
||||
assert {:error,
|
||||
{:redirect,
|
||||
%{flash: %{"error" => "Can't edit other server's data!"}, to: ^redirect_url}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/authors/#{author.id}/edit")
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
describe "Publisher Edit /publishers/:id/edit" do
|
||||
setup %{server: server} do
|
||||
%{publisher: generate(publisher(dbi_server_id: server.id))}
|
||||
end
|
||||
|
||||
test "can't edit other servers' data", %{conn: conn, admin: admin, publisher: publisher} do
|
||||
for user <- [admin] do
|
||||
redirect_url = "/publishers/#{publisher.id}"
|
||||
|
||||
assert {:error,
|
||||
{:redirect,
|
||||
%{flash: %{"error" => "Can't edit other server's data!"}, to: ^redirect_url}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/publishers/#{publisher.id}/edit")
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
describe "Server Edit /servers/:id/edit" do
|
||||
setup %{server: server} do
|
||||
%{dbi_server: generate(dbi_server(dbi_server_id: server.id))}
|
||||
end
|
||||
|
||||
test "can edit other servers' data", %{conn: conn, admin: admin, dbi_server: dbi_server} do
|
||||
for user <- [admin] do
|
||||
assert {:ok, _view, _html} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/servers/#{dbi_server.id}/edit")
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
@@ -47,8 +47,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
describe "Book Edit /books/:id/new" do
|
||||
test "can't be accessed by regular user", %{conn: conn, user: user} do
|
||||
for user <- [nil, user] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
assert {:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/books/new")
|
||||
@@ -78,8 +77,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
|
||||
test "can't be accessed by regular user", %{conn: conn, user: user, book: book} do
|
||||
for user <- [nil, user] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
assert {:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/books/#{book.id}/edit")
|
||||
@@ -136,8 +134,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
describe "Author Edit /authors/:id/new" do
|
||||
test "can't be accessed by regular user", %{conn: conn, user: user} do
|
||||
for user <- [nil, user] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
assert {:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/authors/new")
|
||||
@@ -167,8 +164,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
|
||||
test "can't be accessed by regular user", %{conn: conn, user: user, author: author} do
|
||||
for user <- [nil, user] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
assert {:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/authors/#{author.id}/edit")
|
||||
@@ -225,8 +221,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
|
||||
test "can't be accessed by regular user", %{conn: conn, user: user, publisher: publisher} do
|
||||
for user <- [nil, user] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
assert {:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/publishers/#{publisher.id}")
|
||||
@@ -253,8 +248,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
describe "Publisher Edit /publishers/:id/new" do
|
||||
test "can't be accessed by regular user", %{conn: conn, user: user} do
|
||||
for user <- [nil, user] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/publishers/new")
|
||||
@@ -284,8 +278,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
|
||||
test "can't be accessed by regular user", %{conn: conn, user: user, publisher: publisher} do
|
||||
for user <- [nil, user] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
assert {:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/publishers/#{publisher.id}/edit")
|
||||
@@ -347,8 +340,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
server: server
|
||||
} do
|
||||
for user <- [nil, user, moderator] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
assert {:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/servers/#{server.id}")
|
||||
@@ -370,8 +362,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
describe "Server Edit /servers/:id/new" do
|
||||
test "can't be accessed by non-admin user", %{conn: conn, user: user, moderator: moderator} do
|
||||
for user <- [nil, user, moderator] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
assert {:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/servers/new")
|
||||
@@ -402,8 +393,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
server: server
|
||||
} do
|
||||
for user <- [nil, user, moderator] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
assert {:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/servers/#{server.id}/edit")
|
||||
@@ -470,8 +460,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
moderator: moderator
|
||||
} do
|
||||
for user <- [nil, regular_user, moderator] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
assert {:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/users/#{regular_user.id}")
|
||||
@@ -497,8 +486,7 @@ defmodule DecentralisedBookIndexWeb.LiveViewsPermissionsTest do
|
||||
moderator: moderator
|
||||
} do
|
||||
for user <- [nil, regular_user, moderator] do
|
||||
{:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}}
|
||||
|
||||
assert {:error, {:redirect, %{flash: %{"error" => "Unauthorized!"}, to: "/"}}} =
|
||||
conn
|
||||
|> log_in_user(user)
|
||||
|> live("/users/#{regular_user.id}/edit")
|
||||
|
||||
Reference in New Issue
Block a user