decidim-decidim_awesome 0.6.7 → 0.8.1

data/lib/decidim/decidim_awesome/test/shared_examples/current_config_examples.rb

@@ -0,0 +1,143 @@
+# frozen_string_literal: true
+
+shared_examples "same environment" do
+  it "do not modify the environment" do
+    code, new_env = middleware.call(env)
+
+    expect(new_env).to eq(env)
+    expect(code).to eq(200)
+  end
+
+  it "has current organization in env" do
+    _code, new_env = middleware.call(env)
+
+    expect(new_env["decidim.current_organization"]).to eq(env["decidim.current_organization"])
+    expect(new_env["decidim_awesome.current_config"]).to be_a Decidim::DecidimAwesome::Config
+  end
+end
+
+shared_examples "untampered user model" do
+  it "user model is reset" do
+    # ensure model is always reset after calling the middleware
+    Decidim::User.awesome_admins_for_current_scope = [123]
+    middleware.call(env)
+
+    expect(Decidim::User.awesome_admins_for_current_scope).not_to be_present
+  end
+end
+
+shared_examples "tampered users model" do
+  it "user model is tampered" do
+    # ensure model is always reset after calling the middleware
+    Decidim::User.awesome_admins_for_current_scope = [123]
+    middleware.call(env)
+
+    expect(Decidim::User.awesome_admins_for_current_scope).to match_array([user.id, admin.id])
+  end
+end
+
+shared_examples "tampered user model" do
+  it "user model is tampered" do
+    # ensure model is always reset after calling the middleware
+    Decidim::User.awesome_admins_for_current_scope = [123]
+    middleware.call(env)
+
+    expect(Decidim::User.awesome_admins_for_current_scope).to match_array([user.id])
+  end
+end
+
+shared_examples "tampered admin model" do
+  it "user model is tampered" do
+    # ensure model is always reset after calling the middleware
+    Decidim::User.awesome_admins_for_current_scope = [123]
+    middleware.call(env)
+
+    expect(Decidim::User.awesome_admins_for_current_scope).to match_array([admin.id])
+  end
+end
+
+shared_examples "generic admin routes" do
+  context "when admin index" do
+    let(:path) { "admin/" }
+
+    it_behaves_like "tampered users model"
+
+    context "when additional slashes" do
+      let(:path) { "/admin/" }
+
+      it_behaves_like "untampered user model"
+    end
+
+    context "when multiple slashes" do
+      let(:path) { "//admin/" }
+
+      it_behaves_like "untampered user model"
+    end
+
+    context "when POST" do
+      let(:method) { "POST" }
+
+      it_behaves_like "untampered user model"
+    end
+
+    context "when PATCH" do
+      let(:method) { "PATCH" }
+
+      it_behaves_like "untampered user model"
+    end
+  end
+
+  context "when admin terms" do
+    let(:path) { "admin/admin_terms" }
+
+    it_behaves_like "tampered users model"
+
+    context "when POST" do
+      let(:method) { "POST" }
+
+      it_behaves_like "tampered users model"
+    end
+  end
+
+  context "when admin out of scope" do
+    let(:path) { "admin/some_path" }
+
+    it_behaves_like "untampered user model"
+  end
+
+  context "when admin an assembly" do
+    let(:path) { "admin/assemblies/#{assembly.slug}" }
+
+    it_behaves_like "tampered users model"
+
+    context "and accessing assemblies index" do
+      let(:path) { "admin/assemblies" }
+
+      it_behaves_like "tampered users model"
+
+      context "when POST" do
+        let(:method) { "POST" }
+
+        it_behaves_like "untampered user model"
+      end
+
+      context "when PATCH" do
+        let(:method) { "PATCH" }
+
+        it_behaves_like "untampered user model"
+      end
+    end
+  end
+
+  context "and accessing another assemblies index" do
+    let(:path) { "admin/assemblies/#{another_assembly.slug}" }
+
+    it_behaves_like "untampered user model"
+  end
+
+  context "when admin a participatory process" do
+    let(:path) { "admin/participatory_processes/some-process" }
+
+    it_behaves_like "tampered admin model"
+  end
+end

data/lib/decidim/decidim_awesome/test/shared_examples/custom_redirects_contexts.rb

@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+shared_context "with custom redirects params" do
+  let(:organization) { create(:organization) }
+  let(:context) do
+    {
+      current_user: create(:user, organization: organization),
+      current_organization: organization
+    }
+  end
+  let(:params) do
+    {
+      origin: origin,
+      destination: destination,
+      active: active,
+      pass_query: pass_query
+    }
+  end
+  let(:attributes) do
+    [
+      origin,
+      {
+        "destination" => destination,
+        "active" => active,
+        "pass_query" => pass_query
+      }
+    ]
+  end
+  let(:origin) { "/origin" }
+  let(:destination) { "/processes" }
+  let(:active) { true }
+  let(:pass_query) { true }
+
+  let(:another_params) do
+    {
+      allow_images_in_full_editor: true,
+      allow_images_in_small_editor: true
+    }
+  end
+  let(:form) do
+    Decidim::DecidimAwesome::Admin::CustomRedirectForm.from_params(params).with_context(context)
+  end
+  let(:another_form) do
+    Decidim::DecidimAwesome::Admin::ConfigForm.from_params(another_params).with_context(context)
+  end
+  let(:another_config) { Decidim::DecidimAwesome::Admin::UpdateConfig.new(another_form) }
+end

data/lib/decidim/decidim_awesome/test/shared_examples/editor_examples.rb

@@ -11,10 +11,12 @@ shared_examples "has no drag and drop" do |rte|
     end
   else
     it "has no paste event" do
+      sleep 1
       expect(page.execute_script("return typeof $._data($('#{editor_selector}')[0], 'events').paste")).to eq("undefined")
     end
 
     it "has no drop event" do
+      sleep 1
       expect(page.execute_script("return typeof $._data($('#{editor_selector}')[0], 'events').drop")).to eq("undefined")
     end
   end
@@ -31,10 +33,12 @@ shared_examples "has drag and drop" do |rte|
     end
   else
     it "has paste event" do
+      sleep 1
       expect(page.execute_script("return typeof $._data($('#{editor_selector}')[0], 'events').paste")).to eq("object")
     end
 
     it "has drop event" do
+      sleep 1
       expect(page.execute_script("return typeof $._data($('#{editor_selector}')[0], 'events').drop")).to eq("object")
     end
   end

data/lib/decidim/decidim_awesome/test/shared_examples/menu_hack_contexts.rb

@@ -52,20 +52,3 @@ shared_context "with menu hacks params" do
   end
   let(:another_config) { Decidim::DecidimAwesome::Admin::UpdateConfig.new(another_form) }
 end
-
-shared_examples "forbids disabled feature" do
-  let(:feature) { :menu }
-  let(:features) { [feature] }
-  before do
-    features.each do |feat|
-      allow(Decidim::DecidimAwesome.config).to receive(feat).and_return(:disabled)
-    end
-  end
-
-  it "redirects with error" do
-    action
-
-    expect(flash[:alert]).not_to be_empty
-    expect(response).to redirect_to("/admin/")
-  end
-end

data/lib/decidim/decidim_awesome/test/shared_examples/scoped_admins_examples.rb

@@ -0,0 +1,420 @@
+# frozen_string_literal: true
+
+shared_examples "redirects to index" do |_link|
+  it "display index page" do
+    expect(page).to have_content("You are not authorized to perform this action")
+    expect(page).to have_content("Welcome to the Decidim Admin Panel.")
+    expect(page).to have_current_path(decidim_admin.root_path, ignore_query: true)
+  end
+end
+
+shared_examples "forbids awesome access" do
+  it "does not have awesome link" do
+    visit decidim_admin.root_path
+    expect(page).not_to have_content("Decidim awesome")
+  end
+
+  describe "forbids module access" do
+    before do
+      visit decidim_admin_decidim_awesome.config_path(:editors)
+    end
+
+    it_behaves_like "redirects to index"
+  end
+end
+
+shared_examples "allows awesome access" do
+  it "does not have awesome link" do
+    visit decidim_admin.root_path
+    expect(page).to have_link("Decidim awesome")
+  end
+
+  it "allows module access" do
+    visit decidim_admin_decidim_awesome.config_path(:editors)
+    expect(page).to have_content("Tweaks for editors")
+  end
+end
+
+shared_examples "forbids external accesses" do
+  describe "forbids newsletter access" do
+    before do
+      visit decidim_admin.newsletters_path
+    end
+
+    it_behaves_like "redirects to index"
+  end
+
+  describe "forbids participants access" do
+    before do
+      visit decidim_admin.users_path
+    end
+
+    it_behaves_like "redirects to index"
+  end
+
+  describe "forbids pages access" do
+    before do
+      visit decidim_admin.static_pages_path
+    end
+
+    it_behaves_like "redirects to index"
+  end
+
+  describe "forbids moderation access" do
+    before do
+      visit decidim_admin.moderations_path
+    end
+
+    it_behaves_like "redirects to index"
+  end
+
+  describe "forbids organization access" do
+    before do
+      visit decidim_admin.edit_organization_path
+    end
+
+    it_behaves_like "redirects to index"
+  end
+end
+
+shared_examples "allows external accesses" do
+  it "shows newsletter access" do
+    visit decidim_admin.newsletters_path
+    expect(page).to have_content("New newsletter")
+  end
+
+  it "shows participants access" do
+    visit decidim_admin.users_path
+    expect(page).to have_content("New user")
+  end
+
+  it "shows pages access" do
+    visit decidim_admin.static_pages_path
+    expect(page).to have_content("Pages without topic")
+  end
+
+  it "shows moderation access" do
+    visit decidim_admin.moderations_path
+    expect(page).to have_content("Reported content URL")
+  end
+
+  it "shows organization access" do
+    visit decidim_admin.edit_organization_path
+    expect(page).to have_content("Edit organization")
+  end
+end
+
+shared_examples "allows all admin routes" do
+  before do
+    visit decidim_admin.root_path
+  end
+
+  it "allows the admin root page" do
+    expect(page).to have_content("Welcome to the Decidim Admin Panel.")
+  end
+
+  it "allows the assemblies page" do
+    click_link "Assemblies"
+
+    expect(page).to have_content("New assembly")
+  end
+
+  it "allows the processes page" do
+    click_link "Processes"
+
+    expect(page).to have_content("New process")
+  end
+end
+
+shared_examples "allows scoped admin routes" do
+  before do
+    visit decidim_admin.root_path
+  end
+
+  it "allows the admin root page" do
+    expect(page).to have_content("Welcome to the Decidim Admin Panel.")
+  end
+
+  it "allows the assemblies page" do
+    click_link "Assemblies"
+
+    expect(page).to have_content("New assembly")
+  end
+
+  describe "forbids processes" do
+    before do
+      click_link "Processes"
+    end
+
+    it_behaves_like "redirects to index"
+
+    it "is not a process page" do
+      expect(page).not_to have_content("New process")
+    end
+  end
+end
+
+shared_examples "has admin link" do
+  it "has menu link" do
+    within ".topbar__dropmenu.topbar__user__logged" do
+      expect(page).to have_selector("#user-menu li", text: "Admin dashboard", visible: :hidden)
+    end
+  end
+end
+
+shared_examples "has no admin link" do
+  it "has menu link" do
+    within ".topbar__dropmenu.topbar__user__logged" do
+      expect(page).not_to have_selector("#user-menu li", text: "Admin dashboard", visible: :hidden)
+    end
+  end
+end
+
+shared_examples "shows partial admin links in the frontend" do
+  describe "shows the link in the homepage" do
+    before do
+      visit decidim.root_path
+    end
+
+    it_behaves_like "has admin link"
+  end
+
+  describe "shows the link in assemblies" do
+    before do
+      visit decidim_assemblies.assemblies_path
+    end
+
+    it_behaves_like "has admin link"
+    it "has a Edit button" do
+      expect(page).to have_link(href: "/admin/assemblies")
+    end
+  end
+
+  describe "do not show the link in processes" do
+    before do
+      visit decidim_participatory_processes.participatory_processes_path
+    end
+
+    it_behaves_like "has no admin link"
+    it "has no Edit button" do
+      expect(page).not_to have_link(href: "/admin/processes")
+    end
+  end
+end
+
+shared_examples "can edit assembly" do
+  it "can save" do
+    visit decidim_admin_assemblies.edit_assembly_path(assembly.slug)
+    expect(page).to have_content("General Information")
+    fill_in_i18n(
+      :assembly_title,
+      "#assembly-title-tabs",
+      en: "Edited assembly",
+      ca: "Assamblea editada",
+      es: "Asamblea editada"
+    )
+    find("*[type=submit]").click
+    expect(page).to have_admin_callout("successfully")
+  end
+end
+
+shared_examples "edits all assemblies" do
+  before do
+    visit decidim_admin.root_path
+  end
+
+  it_behaves_like "can edit assembly"
+
+  it "can edit another assembly" do
+    visit decidim_admin_assemblies.edit_assembly_path(another_assembly.slug)
+    expect(page).to have_content("General Information")
+  end
+end
+
+shared_examples "edits allowed assemblies" do
+  before do
+    visit decidim_admin.root_path
+  end
+
+  it_behaves_like "can edit assembly"
+
+  describe "forbids unallowed assembly" do
+    before do
+      visit decidim_admin_assemblies.edit_assembly_path(another_assembly.slug)
+    end
+
+    it_behaves_like "redirects to index"
+  end
+
+  describe "create new assemblies" do
+    before do
+      visit decidim_admin_assemblies.new_assembly_path
+    end
+
+    it_behaves_like "redirects to index"
+  end
+end
+
+shared_examples "can manage component" do
+  it "can update proposal" do
+    visit manage_component_path(component)
+    expect(page).to have_content("Proposals")
+    expect(page).to have_content("Title")
+    expect(page).to have_content(proposal.title["en"])
+
+    click_link "Edit proposal"
+    expect(page).to have_content("Update proposal")
+    fill_in_i18n(
+      :proposal_title,
+      "#proposal-title-tabs",
+      en: "Edited proposal",
+      ca: "Proposta editada",
+      es: "Propuesta editada"
+    )
+    find("*[type=submit]").click
+    expect(page).to have_admin_callout("successfully")
+  end
+
+  it "can create a proposal" do
+    visit manage_component_path(component)
+
+    click_link "New proposal"
+    expect(page).to have_content("Create proposal")
+    fill_in_i18n(
+      :proposal_title,
+      "#proposal-title-tabs",
+      en: "Create proposal",
+      ca: "Proposta creada",
+      es: "Propuesta creada"
+    )
+    fill_in_i18n_editor(
+      :proposal_body,
+      "#proposal-body-tabs",
+      en: "Create body",
+      ca: "Body creat",
+      es: "Body creat"
+    )
+    find("*[type=submit]").click
+    expect(page).to have_admin_callout("successfully")
+  end
+end
+
+shared_examples "edits allowed components" do
+  before do
+    visit decidim_admin.root_path
+  end
+
+  it_behaves_like "can manage component"
+  it "can edit component" do
+    visit Decidim::EngineRouter.admin_proxy(component.participatory_space).edit_component_path(component.id)
+    expect(page).to have_content("Edit component")
+  end
+
+  it "set permissions in component" do
+    visit Decidim::EngineRouter.admin_proxy(component.participatory_space).edit_component_permissions_path(component.id)
+    expect(page).to have_content("Edit permissions")
+  end
+
+  describe "forbids unallowed component" do
+    before do
+      visit manage_component_path(another_component)
+    end
+
+    it_behaves_like "redirects to index"
+  end
+end
+
+shared_examples "shows component partial admin links in the frontend" do
+  describe "shows the link in the homepage" do
+    before do
+      visit decidim.root_path
+    end
+
+    it_behaves_like "has admin link"
+  end
+
+  describe "shows the link in the component" do
+    before do
+      visit main_component_path(component)
+    end
+
+    it_behaves_like "has admin link"
+    it "has a Edit button" do
+      expect(page).to have_link(href: manage_component_path(component))
+    end
+  end
+
+  describe "do not show the link in another compoenent" do
+    before do
+      visit main_component_path(another_component)
+    end
+
+    it_behaves_like "has no admin link"
+    it "has no Edit button" do
+      expect(page).not_to have_link(href: manage_component_path(another_component))
+    end
+  end
+end
+
+shared_examples "allows access to group processes" do
+  before do
+    visit decidim_admin_participatory_processes.participatory_processes_path
+  end
+
+  it "shows the list of processes" do
+    expect(page).to have_content("Participatory processes")
+    expect(page).to have_content(participatory_process.title["en"])
+  end
+
+  describe "forbids editing processes" do
+    before do
+      visit decidim_admin_participatory_processes.edit_participatory_process_path(participatory_process.slug)
+    end
+
+    it_behaves_like "redirects to index"
+  end
+
+  describe "allows listing group process" do
+    before do
+      visit decidim_admin_participatory_processes.participatory_process_groups_path
+    end
+
+    it "shows the list of groups" do
+      expect(page).to have_content("Participatory process groups")
+      expect(page).to have_content(process_group.title["en"])
+    end
+  end
+end
+
+shared_examples "allows edit any group process" do
+  before do
+    visit decidim_admin_participatory_processes.edit_participatory_process_group_path(another_process_group.id)
+  end
+
+  it "allows to edit group processes" do
+    expect(page).to have_content("Edit process group")
+    fill_in_i18n(
+      :participatory_process_group_title,
+      "#participatory_process_group-title-tabs",
+      en: "Edited process group",
+      ca: "Proces grup editat",
+      es: "Grupo de procesos editado"
+    )
+    find("*[type=submit]").click
+    expect(page).to have_admin_callout("successfully")
+  end
+end
+
+shared_examples "allows edit only allowed group process" do
+  before do
+    visit decidim_admin_participatory_processes.participatory_processes_path
+  end
+
+  describe "forbids editing group" do
+    before do
+      visit decidim_admin_participatory_processes.edit_participatory_process_group_path(another_process_group.id)
+    end
+
+    it_behaves_like "redirects to index"
+  end
+end