community_engine 2.0.0.beta1

data/test/functional/sb_posts_controller_test.rb

@@ -0,0 +1,193 @@
+require 'test_helper'
+
+class SbPostsControllerTest < ActionController::TestCase
+  all_fixtures
+
+  def test_should_create_reply
+    counts = lambda { [SbPost.count, forums(:rails).sb_posts_count, users(:aaron).sb_posts_count, topics(:pdi).sb_posts_count] }
+    equal  = lambda { [forums(:rails).topics_count] }
+    old_counts = counts.call
+    old_equal  = equal.call
+
+    login_as :aaron
+    post :create, :forum_id => forums(:rails).to_param, :topic_id => topics(:pdi).to_param, :post => { :body => 'blah' }
+    assert_redirected_to forum_topic_path(:forum_id => forums(:rails).to_param, :id => topics(:pdi).to_param, :anchor => assigns(:post).dom_id, :page => '1')
+    assert_equal topics(:pdi), assigns(:topic)
+    [forums(:rails), users(:aaron), topics(:pdi)].each &:reload
+  
+    assert_equal old_counts.collect { |n| n + 1}, counts.call
+    assert_equal old_equal, equal.call
+  end
+
+  def test_should_update_topic_replied_at_upon_replying
+    old=topics(:pdi).replied_at
+    login_as :aaron
+    post :create, :forum_id => forums(:rails).to_param, :topic_id => topics(:pdi).to_param, :post => { :body => 'blah' }
+    assert_not_equal(old, topics(:pdi).reload.replied_at)
+    assert old < topics(:pdi).reload.replied_at
+  end
+
+  def test_should_reply_with_no_body
+    assert_difference SbPost, :count, 0 do
+      login_as :aaron
+      post :create, :forum_id => forums(:rails).to_param, :topic_id => sb_posts(:pdi).to_param, :post => {:body => ''}
+      assert_redirected_to forum_topic_path({:forum_id => forums(:rails).to_param, :id => sb_posts(:pdi).to_param, :anchor => 'reply-form', :page => '1'}.merge(:post => {:body => ''}))
+    end
+  end
+
+  def test_should_delete_reply
+    counts = lambda { [SbPost.count, forums(:rails).sb_posts_count, users(:sam).sb_posts_count, topics(:pdi).sb_posts_count] }
+    equal  = lambda { [forums(:rails).topics_count] }
+    old_counts = counts.call
+    old_equal  = equal.call
+
+    login_as :admin
+    delete :destroy, :forum_id => forums(:rails).to_param, :topic_id => topics(:pdi).to_param, :id => sb_posts(:pdi_reply).to_param
+    assert_redirected_to forum_topic_path(:forum_id => forums(:rails).to_param, :id => topics(:pdi).to_param)
+
+    [forums(:rails), users(:sam), topics(:pdi)].each &:reload
+
+    assert_equal old_counts.collect { |n| n - 1}, counts.call
+    assert_equal old_equal, equal.call
+  end
+
+  def test_should_delete_reply_as_moderator
+    assert_difference SbPost, :count, -1 do
+      login_as :sam
+      delete :destroy, :forum_id => forums(:rails).to_param, :topic_id => topics(:pdi).to_param, :id => sb_posts(:pdi_rebuttal).to_param
+    end
+  end
+
+  def test_should_delete_topic_if_deleting_the_last_reply
+    assert_difference SbPost, :count, -1 do
+      assert_difference Topic, :count, -1 do
+        login_as :aaron
+        delete :destroy, :forum_id => forums(:rails).to_param, :topic_id => topics(:il8n).to_param, :id => sb_posts(:il8n).to_param
+        assert_redirected_to forum_path(forums(:rails).to_param)
+        assert_raise(ActiveRecord::RecordNotFound) { topics(:il8n).reload }
+      end
+    end
+  end
+
+  def test_edit_js
+    login_as :sam
+    get :edit, :forum_id => forums(:comics).to_param, :topic_id => topics(:galactus).to_param, :id => sb_posts(:silver_surfer).to_param, :format => 'js'
+    assert_response :success
+  end
+
+  def test_can_edit_own_post
+    login_as :sam
+    put :update, :forum_id => forums(:comics).to_param, :topic_id => topics(:galactus).to_param, :id => sb_posts(:silver_surfer).to_param, :post => {}
+    assert_redirected_to forum_topic_path(:forum_id => forums(:comics).to_param, :id => topics(:galactus).to_param, :anchor => sb_posts(:silver_surfer).dom_id, :page => '1')
+  end
+
+  def test_can_edit_other_post_as_moderator
+    login_as :sam
+    put :update, :forum_id => forums(:rails).to_param, :topic_id => topics(:pdi).to_param, :id => sb_posts(:pdi_rebuttal).to_param, :post => {}
+    assert_redirected_to forum_topic_path(:forum_id => forums(:rails).to_param, :id => topics(:pdi).to_param, :anchor => sb_posts(:pdi_rebuttal).dom_id, :page => '1')
+  end
+
+  def test_cannot_edit_other_post
+    login_as :sam
+    put :update, :forum_id => forums(:comics).to_param, :topic_id => topics(:galactus).to_param, :id => sb_posts(:galactus).to_param, :post => {}
+    assert_redirected_to login_path
+  end
+
+  def test_cannot_edit_own_post_user_id
+    login_as :sam
+    put :update, :forum_id => forums(:rails).to_param, :topic_id => topics(:pdi).to_param, :id => sb_posts(:pdi_reply).to_param, :post => { :user_id => 32 }
+    assert_redirected_to forum_topic_path(:forum_id => forums(:rails).to_param, :id => topics(:pdi).to_param, :anchor => sb_posts(:pdi_reply).dom_id, :page => '1')
+    assert_equal users(:sam).id, sb_posts(:pdi_reply).reload.user_id
+  end
+
+  def test_can_edit_other_post_as_admin
+    login_as :admin
+    put :update, :forum_id => forums(:rails).to_param, :topic_id => topics(:pdi).to_param, :id => sb_posts(:pdi_rebuttal).to_param, :post => {}
+    assert_redirected_to forum_topic_path(:forum_id => forums(:rails).to_param, :id => topics(:pdi).to_param, :anchor => sb_posts(:pdi_rebuttal).dom_id, :page => '1')
+  end
+  
+  def test_should_view_recent_posts
+    get :index
+    assert_response :success
+    assert_equal [sb_posts(:il8n), sb_posts(:shield_reply), sb_posts(:shield), sb_posts(:silver_surfer), sb_posts(:galactus), sb_posts(:ponies), sb_posts(:pdi_rebuttal), sb_posts(:pdi_reply), sb_posts(:pdi), sb_posts(:sticky)], assigns(:posts)
+  end
+
+  def test_should_view_posts_by_forum
+    get :index, :forum_id => forums(:comics).to_param
+    assert_response :success
+    assert_equal [sb_posts(:shield_reply), sb_posts(:shield), sb_posts(:silver_surfer), sb_posts(:galactus)], assigns(:posts)
+  end
+
+  def test_should_view_posts_by_user
+    get :index, :user_id => users(:sam).id
+    assert_response :success
+    assert_equal [sb_posts(:shield), sb_posts(:silver_surfer), sb_posts(:ponies), sb_posts(:pdi_reply), sb_posts(:sticky)], assigns(:posts)
+  end
+  
+  def test_should_view_monitored_posts
+    get :monitored, :user_id => users(:aaron).id
+    assert_equal [sb_posts(:pdi_reply)], assigns(:posts)
+  end
+
+  def test_should_search_recent_posts
+    get :search, :q => 'pdi'
+    assert_response :success
+    assert_equal [sb_posts(:pdi_rebuttal), sb_posts(:pdi_reply), sb_posts(:pdi)], assigns(:posts)
+  end
+
+  def test_should_search_posts_by_forum
+    get :search, :forum_id => forums(:comics).to_param, :q => 'galactus'
+    assert_response :success
+    assert_equal [sb_posts(:silver_surfer), sb_posts(:galactus)], assigns(:posts)
+  end
+  
+  def test_should_view_recent_posts_as_rss
+    get :index, :format => 'rss'
+    assert_response :success
+    assert_equal [sb_posts(:il8n), sb_posts(:shield_reply), sb_posts(:shield), sb_posts(:silver_surfer), sb_posts(:galactus), sb_posts(:ponies), sb_posts(:pdi_rebuttal), sb_posts(:pdi_reply), sb_posts(:pdi), sb_posts(:sticky)], assigns(:posts)
+  end
+
+  def test_should_view_posts_by_forum_as_rss
+    get :index, :forum_id => forums(:comics).to_param, :format => 'rss'
+    assert_response :success
+    assert_equal [sb_posts(:shield_reply), sb_posts(:shield), sb_posts(:silver_surfer), sb_posts(:galactus)], assigns(:posts)
+  end
+
+  def test_should_view_posts_by_user_as_rss
+    get :index, :user_id => users(:sam).id, :format => 'rss'
+    assert_response :success
+    assert_equal [sb_posts(:shield), sb_posts(:silver_surfer), sb_posts(:ponies), sb_posts(:pdi_reply), sb_posts(:sticky)], assigns(:posts)
+  end
+  
+  def test_disallow_new_post_to_locked_topic
+    galactus = topics(:galactus)
+    galactus.locked = true
+    galactus.save!
+    login_as :aaron
+    post :create, :forum_id => forums(:comics).to_param, :topic_id => topics(:galactus).to_param, :post => { :body => 'blah' }
+    assert_redirected_to forum_topic_path(forums(:comics).to_param, topics(:galactus).to_param)
+    assert_equal :this_topic_is_locked.l, flash[:notice]
+  end
+  
+  
+  test "should create anonymous reply" do
+    configatron.allow_anonymous_forum_posting = true    
+    assert_difference SbPost, :count, 1 do
+      post :create, :forum_id => forums(:rails).to_param, :topic_id => topics(:pdi).to_param, :post => { :body => 'blah', :author_email => 'foo@bar.com' }
+      assert_redirected_to :controller => "topics", :action => "show", :forum_id => forums(:rails).to_param, :id => topics(:pdi).to_param, :anchor => assigns(:post).dom_id, :page => '1'
+    end
+    configatron.allow_anonymous_forum_posting = false    
+  end
+
+  test "should fail creating an anonymous reply" do
+    configatron.allow_anonymous_forum_posting = true        
+    assert_difference SbPost, :count, 0 do
+      post_params = { :body => 'blah', :author_email => 'foo' }
+      post :create, :forum_id => forums(:rails).to_param, :topic_id => topics(:pdi).to_param, :post => post_params
+      assert_redirected_to forum_topic_path({:forum_id => forums(:rails).to_param, :id => topics(:pdi).to_param, :anchor => 'reply-form', :page => '1'}.merge({:post => post_params}))
+    end
+    configatron.allow_anonymous_forum_posting = false        
+  end
+
+  
+end

data/test/functional/sessions_controller_test.rb

@@ -0,0 +1,55 @@
+require 'test_helper'
+
+class SessionsControllerTest < ActionController::TestCase  
+  fixtures :all
+
+  def test_should_login_and_redirect
+    post :create, :email => 'quentin@example.com', :password => 'test'
+    assert_equal users(:quentin), UserSession.find.record
+    assert_response :redirect
+  end
+
+  def test_should_fail_login_and_not_redirect
+    post :create, :email => 'quentin@example.com', :password => 'bad password'
+    assert_nil UserSession.find
+    assert_response :success
+  end
+
+  def test_should_logout
+    login_as :quentin
+    get :destroy
+    assert_nil UserSession.find
+    assert_response :redirect
+  end
+  
+  def test_should_delete_token_on_logout
+    login_as :quentin
+    get :destroy
+    assert_equal @response.cookies["user_credentials"], nil
+  end
+
+  def test_should_login_with_cookie
+    @request.cookies["user_credentials"] = {:value => {:value => users(:quentin).persistence_token}, :expires => nil}
+    assert @controller.send(:logged_in?)
+  end
+
+  def test_should_fail_cookie_login
+    @request.cookies["user_credentials"] = {:value => {:value => users(:quentin).persistence_token}, :expires => 5.minutes.ago.utc}
+    assert !@controller.send(:logged_in?)
+  end
+
+  def test_should_fail_cookie_login
+    @request.cookies["user_credentials"] = {:value => {:value => 'invalid_token'}, :expires => nil}
+    assert !@controller.send(:logged_in?)
+  end
+  
+  def test_should_login_with_reset_password
+    quentin = users(:quentin)
+    quentin.reset_password
+    newpass = quentin.password
+    quentin.save_without_session_maintenance
+    post :create, :email => 'quentin@example.com', :password => newpass
+    assert_equal users(:quentin), UserSession.find.record
+  end
+
+end

data/test/functional/sitemap_controller_test.rb

@@ -0,0 +1,9 @@
+require 'test_helper'
+
+class SitemapControllerTest < ActionController::TestCase
+
+  def test_should_get_sitemap
+    get :index
+    assert_response :success
+  end
+end

data/test/functional/statistics_controller_test.rb

@@ -0,0 +1,18 @@
+require 'test_helper'
+
+class StatisticsControllerTest < ActionController::TestCase
+  fixtures :users, :roles
+  
+  def test_should_get_index
+    login_as :admin
+    get :index
+    assert_response :success
+  end
+
+  def test_should_not_get_index
+    login_as :quentin
+    get :index
+    assert_redirected_to login_url
+  end
+    
+end

data/test/functional/tags_controller_test.rb

@@ -0,0 +1,52 @@
+require 'test_helper'
+
+class TagsControllerTest < ActionController::TestCase
+  fixtures :tags, :taggings, :photos, :roles, :posts
+
+  def test_should_autocomplete_tags
+    get :auto_complete_for_tag_name, :id => 'mis', :format => 'js'
+    assert_response :success
+  end
+
+
+  def test_should_show_tag
+   get :show, :id => tags(:general).name
+   assert_response :success
+   assert assigns(:photos).include?(photos(:library_pic))
+  end
+  
+  def test_should_show_tag_with_type
+   %w(posts users clippings photos).each do |type|
+     item = type.classify.constantize.first
+     item.tag_list = "general"
+     item.save!
+     
+     get :show, :id => tags(:general).name, :type => 'type'
+     assert_response :success
+   end
+  end
+  
+
+  def test_should_fail_to_show_tag
+   get :show, :id => 'tag_that_does_not_exist'
+   assert_redirected_to :action => :index
+  end
+
+  def test_should_get_index
+   get :index
+   assert_response :success
+  end
+  
+  def test_should_show_matching_items_for_multiple_tags
+    posts(:apt_post).tag_list = "#{tags(:general).name},#{tags(:extra).name}"
+    posts(:apt_post).save
+    posts(:apt2_post).tag_list = "#{tags(:general).name},#{tags(:extra).name},#{tags(:misc).name}"
+    posts(:apt2_post).save
+
+    get :show, :id => 'General,Extra'
+    assert_response :success
+    assert_equal 2, assigns(:posts).size
+    assert assigns(:posts).include?(posts(:apt_post))
+    assert assigns(:posts).include?(posts(:apt2_post))
+  end
+end

data/test/functional/theme_controller_test.rb

@@ -0,0 +1,11 @@
+require 'test_helper'
+
+class ThemeControllerTest < ActionController::TestCase
+
+  def test_malicious_path
+    configatron.theme = 'test'
+    get :stylesheets, :filename => "../../../config/database.yml"
+    assert_response 404
+  end
+
+end

data/test/functional/topics_controller_test.rb

@@ -0,0 +1,201 @@
+require 'test_helper'
+
+class TopicsControllerTest < ActionController::TestCase
+  all_fixtures
+
+  def test_should_get_index
+    get :index, :forum_id => 1
+    assert_redirected_to forum_path(1)
+  end
+
+  def test_should_get_index_as_xml
+    content_type 'application/xml'
+    get :index, :forum_id => 1, :format => 'xml'
+    assert_response :success
+  end
+
+  def test_should_show_topic_as_rss
+    get :show, :forum_id => forums(:rails).id, :id => topics(:pdi).id, :format => 'rss'
+    assert_response :success
+  end
+  
+  def test_should_show_topic_as_xml
+    content_type 'application/xml'
+    get :show, :forum_id => forums(:rails).id, :id => topics(:pdi).id, :format => 'xml'
+    assert_response :success
+  end
+
+  def test_should_get_new
+    login_as :aaron
+    get :new, :forum_id => 1
+    assert_response :success
+  end
+
+  def test_sticky_and_locked_protected_from_non_admin
+    login_as :joe
+    assert ! users(:joe).admin?
+    assert ! users(:joe).moderator_of?(forums(:rails))
+    post :create, :forum_id => forums(:rails).id, :topic => { :title => 'blah', :sticky => "1", :locked => "1", :body => 'foo' }
+    assert assigns(:topic)
+    assert ! assigns(:topic).sticky?
+    assert ! assigns(:topic).locked?
+  end
+
+  def test_sticky_and_locked_allowed_to_moderator
+    login_as :sam
+    assert ! users(:sam).admin?
+    assert users(:sam).moderator_of?(forums(:rails))
+    post :create, :forum_id => forums(:rails).id, :topic => { :title => 'blah', :sticky => "1", :locked => "1", :body => 'foo' }
+    assert assigns(:topic)
+    assert assigns(:topic).sticky?
+    assert assigns(:topic).locked?
+  end
+    
+  def test_should_allow_admin_to_sticky_and_lock
+    login_as :admin
+    post :create, :forum_id => forums(:rails).id, :topic => { :title => 'blah2', :sticky => "1", :locked => "1", :body => 'foo' }
+    assert assigns(:topic).sticky?
+    assert assigns(:topic).locked?
+  end
+
+  uses_transaction :test_should_not_create_topic_without_body
+
+  def test_should_not_create_topic_without_body
+    counts = lambda { [Topic.count, SbPost.count] }
+    old = counts.call
+    
+    login_as :aaron
+    
+    post :create, :forum_id => forums(:rails).id, :topic => { :title => 'blah' }
+    assert assigns(:topic)
+    assert assigns(:post)
+    # both of these should be new records if the save fails so that the view can
+    # render accordingly
+    assert assigns(:topic).new_record?
+    assert assigns(:post).new_record?
+    
+    assert_equal old, counts.call
+  end
+
+  def test_should_create_topic
+    counts = lambda { [Topic.count, SbPost.count, forums(:rails).topics_count, forums(:rails).sb_posts_count,  users(:aaron).sb_posts_count] }
+    old = counts.call
+    
+    login_as :aaron
+    post :create, :forum_id => forums(:rails).id, :topic => { :title => 'blah', :body => 'foo' }, :tag_list => 'tag1, tag2'
+    assert assigns(:topic)
+    assert assigns(:post)
+    assert_redirected_to forum_topic_path(forums(:rails), assigns(:topic))
+    [forums(:rails), users(:aaron)].each(&:reload)
+  
+    assert_equal old.collect { |n| n + 1}, counts.call
+    assert_equal ['tag1', 'tag2'], Topic.find(assigns(:topic).id).tag_list
+  end
+
+
+  def test_should_delete_topic
+    counts = lambda { [SbPost.count, forums(:rails).topics_count, forums(:rails).sb_posts_count] }
+    old = counts.call
+    
+    login_as :admin
+    delete :destroy, :forum_id => forums(:rails).id, :id => topics(:ponies).id
+    assert_redirected_to forum_path(forums(:rails))
+    [forums(:rails), users(:aaron)].each &:reload
+
+    assert_equal old.collect { |n| n - 1}, counts.call
+  end
+
+
+
+  def test_should_allow_moderator_to_delete_topic
+    assert_difference Topic, :count, -1 do
+      login_as :sam
+      delete :destroy, :forum_id => forums(:rails).id, :id => topics(:pdi).id
+    end
+  end
+
+  def test_should_update_views_for_show
+    assert_difference topics(:pdi), :views do
+      get :show, :forum_id => forums(:rails).id, :id => topics(:pdi).id
+      assert_response :success
+      topics(:pdi).reload
+    end
+  end
+
+  def test_should_not_update_views_for_show_via_rss
+    assert_difference topics(:pdi), :views, 0 do
+      get :show, :forum_id => forums(:rails).id, :id => topics(:pdi).id, :format => 'rss'
+      assert_response :success
+      topics(:pdi).reload
+    end
+  end
+
+  def test_should_not_add_viewed_topic_to_session_on_show_rss
+    login_as :aaron
+    get :show, :forum_id => forums(:rails).id, :id => topics(:pdi).id, :format => 'rss'
+    assert_response :success
+    assert session[:topics].blank?
+  end
+
+  def test_should_update_views_for_show_except_topic_author
+    login_as :aaron
+    views=topics(:pdi).views
+    get :show, :forum_id => forums(:rails).id, :id => topics(:pdi).id
+    assert_response :success
+    assert_equal views, topics(:pdi).reload.views
+  end
+
+  def test_should_show_topic
+    get :show, :forum_id => forums(:rails).id, :id => topics(:pdi).id
+    assert_response :success
+    assert_equal topics(:pdi), assigns(:topic)
+    assert_equal [sb_posts(:pdi), sb_posts(:pdi_reply), sb_posts(:pdi_rebuttal)], assigns(:posts)
+  end
+
+  def test_should_show_other_post
+    get :show, :forum_id => forums(:rails).id, :id => topics(:ponies).id
+    assert_response :success
+    assert_equal topics(:ponies), assigns(:topic)
+    assert_equal [sb_posts(:ponies)], assigns(:posts)
+  end
+
+  def test_should_get_edit
+    login_as :admin
+    get :edit, :forum_id => 1, :id => 1
+    assert_response :success
+  end
+  
+  def test_should_update_own_post
+    login_as :sam
+    put :update, :forum_id => forums(:rails).id, :id => topics(:ponies).id, :topic => { }, :tag_list => 'tagX, tagY'
+    assert_redirected_to forum_topic_path(forums(:rails), assigns(:topic))
+    assert_equal ['tagX', 'tagY'], topics(:ponies).reload.tag_list
+  end
+
+
+  def test_should_not_update_user_id_of_own_post
+    login_as :sam
+    put :update, :forum_id => forums(:rails).id, :id => topics(:ponies).id, :topic => { :user_id => 32 }
+    assert_redirected_to forum_topic_path(forums(:rails), assigns(:topic))
+    assert_equal users(:sam).id, sb_posts(:ponies).reload.user_id
+  end
+
+  def test_should_not_update_other_post
+    login_as :sam
+    put :update, :forum_id => forums(:comics).id, :id => topics(:galactus).id, :topic => { }
+    assert_redirected_to login_path
+  end
+
+
+  def test_should_update_other_post_as_moderator
+    login_as :sam
+    put :update, :forum_id => forums(:rails).id, :id => topics(:pdi).id, :topic => { }
+    assert_redirected_to forum_topic_path(forums(:rails), assigns(:topic))
+  end
+
+  def test_should_update_other_post_as_admin
+    login_as :admin
+    put :update, :forum_id => forums(:rails).id, :id => topics(:ponies), :topic => { }
+    assert_redirected_to forum_topic_path(forums(:rails), assigns(:topic))
+  end
+end