hyrax 2.6.0 → 2.9.0

data/spec/.gitignore

@@ -1 +0,0 @@
-internal

data/spec/abilities/ability_spec.rb

@@ -1,183 +0,0 @@
-require 'cancan/matchers'
-
-RSpec.describe 'Hyrax::Ability', type: :model do
-  let(:ability) { Ability.new(user) }
-
-  subject { ability }
-
-  describe '.admin_group_name' do
-    let(:user) { create(:user) }
-
-    it 'returns the admin group name' do
-      expect(subject.admin_group_name).to eq 'admin'
-    end
-  end
-
-  describe "#registered_user?" do
-    subject { ability.send :registered_user? }
-
-    context "with a guest user" do
-      let(:user) { create(:user, :guest) }
-
-      it { is_expected.to be false }
-    end
-  end
-
-  describe "#can_create_any_work?" do
-    subject { ability.can_create_any_work? }
-
-    let(:user) { create(:user) }
-
-    context "when user doesn't have deposit into any admin set" do
-      it { is_expected.to be false }
-    end
-
-    context "when user can deposit into an admin set" do
-      let(:permission_template) { create(:permission_template, with_admin_set: true) }
-
-      before do
-        # Grant the user access to deposit into an admin set.
-        create(:permission_template_access,
-               :deposit,
-               permission_template: permission_template,
-               agent_type: 'user',
-               agent_id: user.user_key)
-      end
-      it { is_expected.to be true }
-    end
-  end
-
-  describe "can?(:review, :submissions)" do
-    subject { ability.can?(:review, :submissions) }
-
-    let(:role) { Sipity::Role.create(name: role_name) }
-    let(:user) { create(:user) }
-    let(:permission_template) { create(:permission_template, with_active_workflow: true) }
-    let(:workflow) { permission_template.active_workflow }
-
-    before do
-      workflow.workflow_roles.create(role: role)
-      # We are testing that this workflow role is removed
-      Hyrax::Workflow::PermissionGenerator.call(roles: role,
-                                                workflow: workflow,
-                                                agents: user)
-    end
-
-    context "as an administrator" do
-      # Assign a role that should not grant review ability
-      let(:role_name) { 'depositing' }
-
-      before do
-        Sipity::Role.create(name: 'approving')
-        # Admin-ify the user
-        allow(user).to receive_messages(groups: ['admin', 'registered'])
-      end
-
-      it { is_expected.to be true }
-    end
-
-    context "as a depositor" do
-      let(:role_name) { 'depositing' }
-
-      before do
-        Sipity::Role.create(name: 'approving')
-      end
-
-      it { is_expected.to be false }
-    end
-
-    context "as an approver" do
-      let(:role_name) { 'approving' }
-
-      it { is_expected.to be true }
-    end
-  end
-
-  describe "a user with no roles" do
-    let(:user) { nil }
-
-    it { is_expected.not_to be_able_to(:update, ContentBlock) }
-    it { is_expected.not_to be_able_to(:create, AdminSet) }
-    it { is_expected.to be_able_to(:read, ContentBlock) }
-    it { is_expected.to be_able_to(:read, GenericWork) }
-    it { is_expected.to be_able_to(:stats, GenericWork) }
-    it { is_expected.to be_able_to(:citation, GenericWork) }
-  end
-
-  describe "a registered user" do
-    let(:user) { create(:user) }
-
-    it { is_expected.not_to be_able_to(:update, ContentBlock) }
-    it { is_expected.to be_able_to(:read, ContentBlock) }
-    it { is_expected.not_to be_able_to(:read, Hyrax::Statistics) }
-    it { is_expected.not_to be_able_to(:read, :admin_dashboard) }
-    it { is_expected.not_to be_able_to(:create, AdminSet) }
-    it { is_expected.not_to be_able_to(:update, :appearance) }
-  end
-
-  describe "a user in the admin group" do
-    let(:user) { create(:user) }
-
-    before { allow(user).to receive_messages(groups: ['admin', 'registered']) }
-    it { is_expected.to be_able_to(:update, ContentBlock) }
-    it { is_expected.to be_able_to(:read, ContentBlock) }
-    it { is_expected.to be_able_to(:read, Hyrax::Statistics) }
-    it { is_expected.to be_able_to(:download, 'abcd123') } # an id for a work/FileSet
-    it { is_expected.to be_able_to(:edit, 'abcd123') } # an id for a work/FileSet
-    it { is_expected.to be_able_to(:destroy, 'abcd123') } # an id for a work/FileSet
-    it { is_expected.to be_able_to(:read, :admin_dashboard) }
-    it { is_expected.to be_able_to(:manage, AdminSet) }
-    it { is_expected.to be_able_to(:create, AdminSet) }
-    it { is_expected.to be_able_to(:update, :appearance) }
-  end
-
-  describe "AdminSets and PermissionTemplates" do
-    let(:permission_template) { build(:permission_template, source_id: admin_set.id) }
-    let(:permission_template_access) { build(:permission_template_access, permission_template: permission_template) }
-    let(:user) { create(:user) }
-    let(:admin_set) { create(:admin_set) }
-
-    RSpec.shared_examples 'A user with additional access' do
-      it { is_expected.to be_able_to(:edit, admin_set) }
-      it { is_expected.to be_able_to(:update, admin_set) }
-      it { is_expected.to be_able_to(:destroy, admin_set) }
-      it { is_expected.to be_able_to(:create, permission_template) }
-      it { is_expected.to be_able_to(:create, permission_template_access) }
-    end
-
-    describe 'as admin' do
-      let(:user) { create(:user, groups: ['admin']) }
-
-      it '#admin? is true' do
-        expect(ability).to be_admin
-      end
-      it_behaves_like 'A user with additional access'
-    end
-
-    describe 'via AdminSet-specific edit_users' do
-      let(:admin_set) { create(:admin_set, with_permission_template: true, edit_users: [user]) }
-
-      it '#admin? is false' do
-        expect(ability).not_to be_admin
-      end
-
-      it 'A user who can manage an AdminSet' do
-        create(:permission_template_access,
-               :manage,
-               permission_template: admin_set.permission_template,
-               agent_type: 'user',
-               agent_id: user.user_key)
-        is_expected.to be_able_to(:manage_any, AdminSet)
-      end
-      it_behaves_like 'A user with additional access'
-    end
-
-    describe "a user without edit access" do
-      it { is_expected.not_to be_able_to(:edit, admin_set) }
-      it { is_expected.not_to be_able_to(:update, admin_set) }
-      it { is_expected.not_to be_able_to(:destroy, admin_set) }
-      it { is_expected.not_to be_able_to(:create, permission_template) }
-      it { is_expected.not_to be_able_to(:create, permission_template_access) }
-    end
-  end
-end

data/spec/abilities/admin_ability_spec.rb

@@ -1,18 +0,0 @@
-require 'cancan/matchers'
-
-RSpec.describe 'Hyrax::Ability', type: :model do
-  context "with a registered user" do
-    let(:user) { create(:user) }
-
-    subject { Ability.new(user) }
-
-    it { is_expected.not_to be_able_to(:read, :admin_dashboard) }
-  end
-  context "with an administrative user" do
-    let(:user) { create(:admin) }
-
-    subject { Ability.new(user) }
-
-    it { is_expected.to be_able_to(:read, :admin_dashboard) }
-  end
-end

data/spec/abilities/admin_set_ability_spec.rb

@@ -1,177 +0,0 @@
-require 'cancan/matchers'
-
-RSpec.describe 'AdminSetAbility' do
-  subject { ability }
-
-  let(:ability) { Ability.new(current_user) }
-  let(:user) { create(:user) }
-  let(:current_user) { user }
-  let(:admin_set) { create(:admin_set, edit_users: [user], with_permission_template: true) }
-
-  context 'when user who created the admin set' do
-    it 'allows the edit_users to edit and read' do
-      is_expected.to be_able_to(:read, admin_set)
-      is_expected.to be_able_to(:edit, admin_set)
-    end
-  end
-
-  context 'when admin user' do
-    let(:user) { FactoryBot.create(:admin) }
-    let!(:solr_document) { SolrDocument.new(admin_set.to_solr) }
-
-    it 'allows all abilities' do # rubocop:disable RSpec/ExampleLength
-      is_expected.to be_able_to(:manage, AdminSet)
-      is_expected.to be_able_to(:manage_any, AdminSet)
-      is_expected.to be_able_to(:create_any, AdminSet)
-      is_expected.to be_able_to(:create, AdminSet)
-      is_expected.to be_able_to(:view_admin_show_any, AdminSet)
-      is_expected.to be_able_to(:edit, admin_set)
-      is_expected.to be_able_to(:edit, solr_document) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:update, admin_set)
-      is_expected.to be_able_to(:update, solr_document) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:destroy, admin_set)
-      is_expected.to be_able_to(:destroy, solr_document) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:deposit, admin_set)
-      is_expected.to be_able_to(:deposit, solr_document)
-      is_expected.to be_able_to(:view_admin_show, admin_set)
-      is_expected.to be_able_to(:view_admin_show, solr_document)
-      is_expected.to be_able_to(:read, admin_set) # admins can do everything
-      is_expected.to be_able_to(:read, solr_document) # defined in solr_document_ability.rb
-    end
-  end
-
-  context 'when admin set manager' do
-    let!(:admin_set) { create(:admin_set, id: 'as_mu', with_permission_template: true) }
-    let!(:solr_document) { SolrDocument.new(admin_set.to_solr) }
-
-    before do
-      create(:permission_template_access,
-             :manage,
-             permission_template: admin_set.permission_template,
-             agent_type: 'user',
-             agent_id: user.user_key)
-      admin_set.reset_access_controls!
-    end
-
-    it 'allows most abilities' do # rubocop:disable RSpec/ExampleLength
-      is_expected.to be_able_to(:manage_any, AdminSet)
-      is_expected.to be_able_to(:view_admin_show_any, AdminSet)
-      is_expected.to be_able_to(:edit, admin_set) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:edit, solr_document)
-      is_expected.to be_able_to(:update, admin_set) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:update, solr_document)
-      is_expected.to be_able_to(:destroy, admin_set) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:destroy, solr_document)
-      is_expected.to be_able_to(:deposit, admin_set)
-      is_expected.to be_able_to(:deposit, solr_document)
-      is_expected.to be_able_to(:view_admin_show, admin_set)
-      is_expected.to be_able_to(:view_admin_show, solr_document)
-      is_expected.to be_able_to(:read, admin_set) # edit access grants read and write
-      is_expected.to be_able_to(:read, solr_document) # edit access grants read and write # defined in solr_document_ability.rb
-    end
-
-    it 'denies manage ability' do
-      is_expected.not_to be_able_to(:manage, AdminSet)
-      is_expected.not_to be_able_to(:create_any, AdminSet) # granted by collection type, not collection
-      is_expected.not_to be_able_to(:create, AdminSet)
-    end
-  end
-
-  context 'when admin set depositor' do
-    let!(:admin_set) { create(:admin_set, id: 'as_du', with_permission_template: true) }
-    let!(:solr_document) { SolrDocument.new(admin_set.to_solr) }
-
-    before do
-      create(:permission_template_access,
-             :deposit,
-             permission_template: admin_set.permission_template,
-             agent_type: 'user',
-             agent_id: user.user_key)
-      admin_set.reset_access_controls!
-    end
-
-    it 'allows deposit related abilities' do
-      is_expected.to be_able_to(:view_admin_show_any, AdminSet)
-      is_expected.to be_able_to(:deposit, admin_set)
-      is_expected.to be_able_to(:deposit, solr_document)
-      is_expected.to be_able_to(:view_admin_show, admin_set)
-      is_expected.to be_able_to(:view_admin_show, solr_document)
-    end
-
-    it 'denies non-deposit related abilities' do # rubocop:disable RSpec/ExampleLength
-      is_expected.not_to be_able_to(:manage, AdminSet)
-      is_expected.not_to be_able_to(:manage_any, AdminSet)
-      is_expected.not_to be_able_to(:create_any, AdminSet) # granted by collection type, not collection
-      is_expected.not_to be_able_to(:create, AdminSet)
-      is_expected.not_to be_able_to(:edit, admin_set)
-      is_expected.not_to be_able_to(:edit, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:update, admin_set)
-      is_expected.not_to be_able_to(:update, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:destroy, admin_set)
-      is_expected.not_to be_able_to(:destroy, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:read, admin_set) # no public page for admin sets
-      is_expected.not_to be_able_to(:read, solr_document) # defined in solr_document_ability.rb
-    end
-  end
-
-  context 'when admin set viewer' do
-    let!(:admin_set) { create(:admin_set, id: 'as_vu', with_permission_template: true) }
-    let!(:solr_document) { SolrDocument.new(admin_set.to_solr) }
-
-    before do
-      create(:permission_template_access,
-             :view,
-             permission_template: admin_set.permission_template,
-             agent_type: 'user',
-             agent_id: user.user_key)
-      admin_set.reset_access_controls!
-    end
-
-    it 'allows viewing only ability' do
-      is_expected.to be_able_to(:view_admin_show_any, AdminSet)
-      is_expected.to be_able_to(:view_admin_show, admin_set)
-    end
-
-    it 'denies most abilities' do # rubocop:disable RSpec/ExampleLength
-      is_expected.not_to be_able_to(:manage, AdminSet)
-      is_expected.not_to be_able_to(:manage_any, AdminSet)
-      is_expected.not_to be_able_to(:create_any, AdminSet) # granted by collection type, not collection
-      is_expected.not_to be_able_to(:create, AdminSet)
-      is_expected.not_to be_able_to(:edit, admin_set)
-      is_expected.not_to be_able_to(:edit, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:update, admin_set)
-      is_expected.not_to be_able_to(:update, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:destroy, admin_set)
-      is_expected.not_to be_able_to(:destroy, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:deposit, admin_set)
-      is_expected.not_to be_able_to(:deposit, solr_document)
-      is_expected.not_to be_able_to(:read, admin_set) # no public page for admin sets
-      is_expected.not_to be_able_to(:read, solr_document) # defined in solr_document_ability.rb
-    end
-  end
-
-  context 'when user has no special access' do
-    let(:admin_set) { create(:admin_set, id: 'as', with_permission_template: true) }
-    let!(:solr_document) { SolrDocument.new(admin_set.to_solr) }
-
-    it 'denies all abilities' do # rubocop:disable RSpec/ExampleLength
-      is_expected.not_to be_able_to(:manage, AdminSet)
-      is_expected.not_to be_able_to(:manage_any, AdminSet)
-      is_expected.not_to be_able_to(:create_any, AdminSet) # granted by collection type, not collection
-      is_expected.not_to be_able_to(:create, AdminSet)
-      is_expected.not_to be_able_to(:view_admin_show_any, AdminSet)
-      is_expected.not_to be_able_to(:edit, admin_set)
-      is_expected.not_to be_able_to(:edit, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:update, admin_set)
-      is_expected.not_to be_able_to(:update, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:destroy, admin_set)
-      is_expected.not_to be_able_to(:destroy, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:deposit, admin_set)
-      is_expected.not_to be_able_to(:deposit, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:view_admin_show, admin_set)
-      is_expected.not_to be_able_to(:view_admin_show, solr_document)
-      is_expected.not_to be_able_to(:read, admin_set) # no public page for admin sets
-      is_expected.not_to be_able_to(:read, solr_document) # defined in solr_document_ability.rb
-    end
-  end
-end

data/spec/abilities/collection_ability_spec.rb

@@ -1,194 +0,0 @@
-require 'cancan/matchers'
-
-RSpec.describe 'CollectionAbility' do
-  subject { ability }
-
-  let(:ability) { Ability.new(current_user) }
-  let(:user) { create(:user) }
-  let(:current_user) { user }
-  let(:collection_type_gid) { create(:collection_type).gid }
-
-  context 'when admin user' do
-    let(:user) { FactoryBot.create(:admin) }
-    let!(:collection) { build(:collection_lw, id: 'col_au', with_permission_template: true, collection_type_gid: collection_type_gid) }
-    let!(:solr_document) { SolrDocument.new(collection.to_solr) }
-
-    it 'allows all abilities' do # rubocop:disable RSpec/ExampleLength
-      is_expected.to be_able_to(:manage, Collection)
-      is_expected.to be_able_to(:manage_any, Collection)
-      is_expected.to be_able_to(:create_any, Collection)
-      is_expected.to be_able_to(:view_admin_show_any, Collection)
-      is_expected.to be_able_to(:edit, collection)
-      is_expected.to be_able_to(:edit, solr_document) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:update, collection)
-      is_expected.to be_able_to(:update, solr_document) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:destroy, collection)
-      is_expected.to be_able_to(:destroy, solr_document) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:deposit, collection)
-      is_expected.to be_able_to(:deposit, solr_document)
-      is_expected.to be_able_to(:view_admin_show, collection)
-      is_expected.to be_able_to(:view_admin_show, solr_document)
-      is_expected.to be_able_to(:read, collection)
-      is_expected.to be_able_to(:read, solr_document) # defined in solr_document_ability.rb
-    end
-  end
-
-  context 'when collection manager' do
-    let!(:collection) { build(:collection_lw, id: 'col_mu', with_permission_template: true, collection_type_gid: collection_type_gid) }
-    let!(:solr_document) { SolrDocument.new(collection.to_solr) }
-
-    before do
-      create(:permission_template_access,
-             :manage,
-             permission_template: collection.permission_template,
-             agent_type: 'user',
-             agent_id: user.user_key)
-      collection.reset_access_controls!
-    end
-
-    it 'allows most abilities' do # rubocop:disable RSpec/ExampleLength
-      is_expected.to be_able_to(:manage_any, Collection)
-      is_expected.to be_able_to(:view_admin_show_any, Collection)
-      is_expected.to be_able_to(:edit, collection)
-      is_expected.to be_able_to(:edit, solr_document) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:update, collection)
-      is_expected.to be_able_to(:update, solr_document) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:destroy, collection)
-      is_expected.to be_able_to(:destroy, solr_document) # defined in solr_document_ability.rb
-      is_expected.to be_able_to(:deposit, collection)
-      is_expected.to be_able_to(:deposit, solr_document)
-      is_expected.to be_able_to(:view_admin_show, collection)
-      is_expected.to be_able_to(:view_admin_show, solr_document)
-      is_expected.to be_able_to(:read, collection) # edit access grants read and write
-      is_expected.to be_able_to(:read, solr_document) # defined in solr_document_ability.rb
-    end
-
-    it 'denies manage ability' do
-      is_expected.not_to be_able_to(:manage, Collection)
-    end
-  end
-
-  context 'when collection depositor' do
-    let!(:collection) { build(:collection_lw, id: 'col_du', with_permission_template: true, collection_type_gid: collection_type_gid) }
-    let!(:solr_document) { SolrDocument.new(collection.to_solr) }
-
-    before do
-      create(:permission_template_access,
-             :deposit,
-             permission_template: collection.permission_template,
-             agent_type: 'user',
-             agent_id: user.user_key)
-      collection.reset_access_controls!
-    end
-
-    it 'allows deposit related abilities' do
-      is_expected.to be_able_to(:view_admin_show_any, Collection)
-      is_expected.to be_able_to(:deposit, collection)
-      is_expected.to be_able_to(:deposit, solr_document)
-      is_expected.to be_able_to(:view_admin_show, collection)
-      is_expected.to be_able_to(:view_admin_show, solr_document)
-    end
-
-    it 'denies non-deposit related abilities' do # rubocop:disable RSpec/ExampleLength
-      is_expected.not_to be_able_to(:manage, Collection)
-      is_expected.not_to be_able_to(:manage_any, Collection)
-      is_expected.not_to be_able_to(:edit, collection)
-      is_expected.not_to be_able_to(:edit, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:update, collection)
-      is_expected.not_to be_able_to(:update, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:destroy, collection)
-      is_expected.not_to be_able_to(:destroy, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:read, collection)
-      is_expected.not_to be_able_to(:read, solr_document) # defined in solr_document_ability.rb
-    end
-  end
-
-  context 'when collection viewer' do
-    let!(:collection) { build(:collection_lw, id: 'col_vu', with_permission_template: true, collection_type_gid: collection_type_gid) }
-    let!(:solr_document) { SolrDocument.new(collection.to_solr) }
-
-    before do
-      create(:permission_template_access,
-             :view,
-             permission_template: collection.permission_template,
-             agent_type: 'user',
-             agent_id: user.user_key)
-      collection.reset_access_controls!
-    end
-
-    it 'allows viewing only ability' do
-      is_expected.to be_able_to(:view_admin_show_any, Collection)
-      is_expected.to be_able_to(:view_admin_show, collection)
-      is_expected.to be_able_to(:view_admin_show, solr_document)
-      is_expected.to be_able_to(:read, collection)
-      is_expected.to be_able_to(:read, solr_document)
-    end
-
-    it 'denies most abilities' do # rubocop:disable RSpec/ExampleLength
-      is_expected.not_to be_able_to(:manage, Collection)
-      is_expected.not_to be_able_to(:manage_any, Collection)
-      is_expected.not_to be_able_to(:edit, collection)
-      is_expected.not_to be_able_to(:edit, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:update, collection)
-      is_expected.not_to be_able_to(:update, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:destroy, collection)
-      is_expected.not_to be_able_to(:destroy, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:deposit, collection)
-      is_expected.not_to be_able_to(:deposit, solr_document)
-    end
-  end
-
-  context 'when user has no special access' do
-    let!(:collection) { create(:collection_lw, id: 'as', with_permission_template: true, collection_type_gid: collection_type_gid) }
-    let!(:solr_document) { SolrDocument.new(collection.to_solr) }
-
-    it 'denies all abilities' do # rubocop:disable RSpec/ExampleLength
-      is_expected.not_to be_able_to(:manage, Collection)
-      is_expected.not_to be_able_to(:manage_any, Collection)
-      is_expected.not_to be_able_to(:view_admin_show_any, Collection)
-      is_expected.not_to be_able_to(:edit, collection)
-      is_expected.not_to be_able_to(:edit, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:update, collection)
-      is_expected.not_to be_able_to(:update, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:destroy, collection)
-      is_expected.not_to be_able_to(:destroy, solr_document) # defined in solr_document_ability.rb
-      is_expected.not_to be_able_to(:deposit, collection)
-      is_expected.not_to be_able_to(:deposit, solr_document)
-      is_expected.not_to be_able_to(:view_admin_show, collection)
-      is_expected.not_to be_able_to(:view_admin_show, solr_document)
-      is_expected.not_to be_able_to(:read, collection)
-      is_expected.not_to be_able_to(:read, solr_document) # defined in solr_document_ability.rb
-    end
-  end
-
-  context 'create_any' do
-    # Whether a user can create a collection depends on collection type participants, so need to test separately.
-
-    context 'when there are no collection types that have create access' do
-      before do
-        # User Collection type is always created and gives all users the ability to create.  To be able to test that
-        # particular roles don't automatically give users create abilities, the create access for User Collection type
-        # has to be removed.
-        uct = Hyrax::CollectionType.find_by(machine_id: Hyrax::CollectionType::USER_COLLECTION_MACHINE_ID)
-        if uct.present?
-          uctp = Hyrax::CollectionTypeParticipant.find_by(hyrax_collection_type_id: uct.id, access: "create")
-          uctp.destroy if uctp.present?
-        end
-      end
-
-      it 'denies create_any' do
-        is_expected.not_to be_able_to(:create_any, Collection)
-      end
-    end
-
-    context 'when there are collection types that have create access' do
-      before do
-        create(:user_collection_type)
-      end
-
-      it 'allows create_any' do
-        is_expected.to be_able_to(:create_any, Collection)
-      end
-    end
-  end
-end