zydronium/internetee-registry
1
0
Fork 0
mirror of https://github.com/internetee/registry.git synced 2025-07-02 17:23:34 +02:00
Code Issues Projects Releases Packages Wiki Activity

Lock down the controllers

Browse source
This commit is contained in:
Martin Lensment 2014-12-19 13:45:17 +02:00
parent 3045c08b3e
commit 3b1e632ab7
36 changed files with 166 additions and 97 deletions
Download patch file Download diff file Expand all files Collapse all files

38
spec/models/user_spec.rb
View file

@ -1,5 +1,43 @@
require 'rails_helper'
require 'cancan/matchers'
describe User do
it { should belong_to(:role) }
describe 'abilities' do
subject(:ability) { Ability.new(user) }
let(:user) { nil }
context 'when user is admin' do
let(:user) { Fabricate(:user) }
it { should be_able_to(:manage, Domain.new) }
it { should be_able_to(:manage, Contact.new) }
it { should be_able_to(:manage, Registrar.new) }
it { should be_able_to(:manage, Setting.new) }
it { should be_able_to(:manage, ZonefileSetting.new) }
it { should be_able_to(:manage, DomainVersion.new) }
it { should be_able_to(:manage, User.new) }
it { should be_able_to(:manage, EppUser.new) }
it { should be_able_to(:index, :delayed_job) }
it { should be_able_to(:create, :zonefile) }
it { should be_able_to(:access, :settings_menu) }
end
context 'when user is customer service' do
let(:user) { Fabricate(:user, role: Role.new(code: 'customer_service')) }
it { should be_able_to(:manage, Domain.new) }
it { should be_able_to(:manage, Contact.new) }
it { should be_able_to(:manage, Registrar.new) }
it { should_not be_able_to(:manage, Setting.new) }
it { should_not be_able_to(:manage, ZonefileSetting.new) }
it { should_not be_able_to(:manage, DomainVersion.new) }
it { should_not be_able_to(:manage, User.new) }
it { should_not be_able_to(:manage, EppUser.new) }
it { should_not be_able_to(:index, :delayed_job) }
it { should_not be_able_to(:create, :zonefile) }
it { should_not be_able_to(:access, :settings_menu) }
end
end
end