hyrax 2.9.6 → 3.0.0.pre.beta1

data/spec/services/hyrax/collections/permissions_service_spec.rb

@@ -0,0 +1,380 @@
+RSpec.describe Hyrax::Collections::PermissionsService do
+  let(:user) { create(:user, email: 'user@example.com') }
+
+  let(:ability) { Ability.new(user) }
+
+  context 'collection specific methods' do
+    let(:collection) { build(:collection_lw, id: 'collection_1') }
+    let(:admin_set) { build(:admin_set, id: 'adminset_1') }
+    let(:col_permission_template) { create(:permission_template, source_id: collection.id) }
+    let(:as_permission_template) { create(:permission_template, source_id: admin_set.id) }
+
+    before do
+      allow(Hyrax::PermissionTemplate).to receive(:find_by!).with(source_id: collection.id).and_return(col_permission_template)
+      allow(ability).to receive(:user_groups).and_return(['public', 'registered'])
+    end
+
+    context 'when manage user' do
+      before do
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'manage').and_return([user.user_key])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'deposit').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'view').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'manage').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'deposit').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'view').and_return([])
+      end
+
+      subject { described_class }
+
+      it '.can_deposit_in_collection? returns true' do
+        expect(subject.can_deposit_in_collection?(collection_id: collection.id, ability: ability)).to be true
+      end
+      it '.can_view_admin_show_for_collection? returns true' do
+        expect(subject.can_view_admin_show_for_collection?(collection_id: collection.id, ability: ability)).to be true
+      end
+    end
+
+    context 'when deposit user' do
+      before do
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'manage').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'deposit').and_return([user.user_key])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'view').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'manage').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'deposit').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'view').and_return([])
+      end
+
+      subject { described_class }
+
+      it '.can_deposit_in_collection? returns true' do
+        expect(subject.can_deposit_in_collection?(collection_id: collection.id, ability: ability)).to be true
+      end
+      it '.can_view_admin_show_for_collection? returns true' do
+        expect(subject.can_view_admin_show_for_collection?(collection_id: collection.id, ability: ability)).to be true
+      end
+    end
+
+    context 'when view user' do
+      before do
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'manage').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'deposit').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'view').and_return([user.user_key])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'manage').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'deposit').and_return([])
+        allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'view').and_return([])
+      end
+
+      subject { described_class }
+
+      it '.can_deposit_in_collection? returns false' do
+        expect(subject.can_deposit_in_collection?(collection_id: collection.id, ability: ability)).to be false
+      end
+      it '.can_view_admin_show_for_collection? returns true' do
+        expect(subject.can_view_admin_show_for_collection?(collection_id: collection.id, ability: ability)).to be true
+      end
+    end
+
+    context 'when deposit user' do
+      context 'thru membership in public group' do
+        before do
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'manage').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'deposit').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'view').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'manage').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'deposit').and_return(['public'])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'view').and_return([])
+        end
+
+        subject { described_class }
+
+        it '.can_deposit_in_collection? returns true' do
+          expect(subject.can_deposit_in_collection?(collection_id: collection.id, ability: ability)).to be true
+        end
+        it '.can_view_admin_show_for_collection? returns false' do
+          expect(subject.can_view_admin_show_for_collection?(collection_id: collection.id, ability: ability)).to be false
+        end
+      end
+
+      context 'thru membership in registered group' do
+        before do
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'manage').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'deposit').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'view').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'manage').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'deposit').and_return(['registered'])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'view').and_return([])
+        end
+
+        subject { described_class }
+
+        it '.can_deposit_in_collection? returns true' do
+          expect(subject.can_deposit_in_collection?(collection_id: collection.id, ability: ability)).to be true
+        end
+        it '.can_view_admin_show_for_collection? returns false' do
+          expect(subject.can_view_admin_show_for_collection?(collection_id: collection.id, ability: ability)).to be false
+        end
+      end
+    end
+
+    context 'when view user' do
+      context 'thru membership in public group' do
+        before do
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'manage').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'deposit').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'view').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'manage').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'deposit').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'view').and_return(['public'])
+        end
+
+        subject { described_class }
+
+        it '.can_deposit_in_collection? returns false' do
+          expect(subject.can_deposit_in_collection?(collection_id: collection.id, ability: ability)).to be false
+        end
+        it '.can_view_admin_show_for_collection? returns false' do
+          expect(subject.can_view_admin_show_for_collection?(collection_id: collection.id, ability: ability)).to be false
+        end
+      end
+
+      context 'thru membership in registered group' do
+        before do
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'manage').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'deposit').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'user', access: 'view').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'manage').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'deposit').and_return([])
+          allow(col_permission_template).to receive(:agent_ids_for).with(agent_type: 'group', access: 'view').and_return(['registered'])
+        end
+
+        subject { described_class }
+
+        it '.can_deposit_in_collection? returns false' do
+          expect(subject.can_deposit_in_collection?(collection_id: collection.id, ability: ability)).to be false
+        end
+        it '.can_view_admin_show_for_collection? returns false' do
+          expect(subject.can_view_admin_show_for_collection?(collection_id: collection.id, ability: ability)).to be false
+        end
+      end
+    end
+
+    context 'when user without access' do
+      subject { described_class }
+
+      it '.can_deposit_in_collection? returns false' do
+        expect(subject.can_deposit_in_collection?(collection_id: collection.id, ability: ability)).to be false
+      end
+      it '.can_view_admin_show_for_collection? returns false' do
+        expect(subject.can_view_admin_show_for_collection?(collection_id: collection.id, ability: ability)).to be false
+      end
+    end
+  end
+
+  context 'methods returning ids' do
+    let(:user1) { create(:user, email: 'user1@example.com') }
+    let(:user2) { create(:user, email: 'user2@example.com') }
+
+    let!(:col_vu) do
+      build(:collection_lw, id: 'collection_vu', user: user1, with_solr_document: true,
+                            with_permission_template: { view_users: [user] })
+    end
+    let!(:col_vg) do
+      build(:collection_lw, id: 'collection_vg', user: user1, with_solr_document: true,
+                            with_permission_template: { view_groups: ['view_group'] })
+    end
+    let!(:col_mu) do
+      build(:collection_lw, id: 'collection_mu', user: user1, with_solr_document: true,
+                            with_permission_template: { manage_users: [user] })
+    end
+    let!(:col_mg) do
+      build(:collection_lw, id: 'collection_mg', user: user1, with_solr_document: true,
+                            with_permission_template: { manage_groups: ['manage_group'] })
+    end
+    let!(:col_du) do
+      build(:collection_lw, id: 'collection_du', user: user1, with_solr_document: true,
+                            with_permission_template: { deposit_users: [user] })
+    end
+    let!(:col_dg) do
+      build(:collection_lw, id: 'collection_dg', user: user1, with_solr_document: true,
+                            with_permission_template: { deposit_groups: ['deposit_group'] })
+    end
+
+    let(:as_vu) { create(:admin_set, id: 'adminset_vu', with_permission_template: true) }
+    let(:as_vg) { create(:admin_set, id: 'adminset_vg', with_permission_template: true) }
+    let(:as_mu) { create(:admin_set, id: 'adminset_mu', with_permission_template: true) }
+    let(:as_mg) { create(:admin_set, id: 'adminset_mg', with_permission_template: true) }
+    let(:as_du) { create(:admin_set, id: 'adminset_du', with_permission_template: true) }
+    let(:as_dg) { create(:admin_set, id: 'adminset_dg', with_permission_template: true) }
+
+    before do
+      source_access(as_vu.permission_template, 'user', user.user_key, :view)
+      source_access(as_vg.permission_template, 'group', 'view_group', :view)
+      source_access(as_mu.permission_template, 'user', user.user_key, :manage)
+      source_access(as_mg.permission_template, 'group', 'manage_group', :manage)
+      source_access(as_du.permission_template, 'user', user.user_key, :deposit)
+      source_access(as_dg.permission_template, 'group', 'deposit_group', :deposit)
+
+      allow(user).to receive(:groups).and_return(['view_group', 'deposit_group', 'manage_group'])
+    end
+
+    describe '.collection_ids_for_user' do
+      it 'returns collection ids where user has manage access' do
+        expect(described_class.collection_ids_for_user(access: 'manage', ability: ability)).to match_array [col_mu.id, col_mg.id]
+      end
+      it 'returns collection ids where user has deposit access' do
+        expect(described_class.collection_ids_for_user(access: 'deposit', ability: ability)).to match_array [col_du.id, col_dg.id]
+      end
+      it 'returns collection ids where user has view access' do
+        expect(described_class.collection_ids_for_user(access: 'view', ability: ability)).to match_array [col_vu.id, col_vg.id]
+      end
+      it 'returns collection ids where user has manage, deposit, or view access' do
+        all = [col_mu.id, col_mg.id, col_du.id, col_dg.id, col_vu.id, col_vg.id]
+        expect(described_class.collection_ids_for_user(access: ['manage', 'deposit', 'view'], ability: ability)).to match_array all
+      end
+
+      context 'when user has no access' do
+        let(:ability) { Ability.new(user2) }
+
+        it 'returns empty array' do
+          expect(described_class.collection_ids_for_user(access: ['manage', 'deposit', 'view'], ability: ability)).to match_array []
+        end
+      end
+    end
+
+    describe '.source_ids_for_manage' do
+      it 'returns collection and admin set ids where user has manage access' do
+        expect(described_class.source_ids_for_manage(ability: ability)).to match_array [col_mu.id, col_mg.id, as_mu.id, as_mg.id]
+      end
+      it 'returns collection ids where user has manage access' do
+        expect(described_class.source_ids_for_manage(ability: ability, source_type: 'collection')).to match_array [col_mu.id, col_mg.id]
+      end
+      it 'returns admin set ids where user has manage access' do
+        expect(described_class.source_ids_for_manage(ability: ability, source_type: 'admin_set')).to match_array [as_mu.id, as_mg.id]
+      end
+
+      context 'when user has no access' do
+        let(:ability) { Ability.new(user2) }
+
+        it 'returns empty array' do
+          expect(described_class.source_ids_for_manage(ability: ability)).to match_array []
+        end
+      end
+    end
+
+    describe '.source_ids_for_deposit' do
+      it 'returns collection and admin set ids where user has deposit access' do
+        expect(described_class.source_ids_for_deposit(ability: ability)).to match_array [col_du.id, col_dg.id, col_mu.id, col_mg.id, as_du.id, as_dg.id, as_mu.id, as_mg.id]
+      end
+      it 'returns collection ids where user has deposit access' do
+        expect(described_class.source_ids_for_deposit(ability: ability, source_type: 'collection')).to match_array [col_du.id, col_dg.id, col_mu.id, col_mg.id]
+      end
+      it 'returns admin set ids where user has deposit access' do
+        expect(described_class.source_ids_for_deposit(ability: ability, source_type: 'admin_set')).to match_array [as_du.id, as_dg.id, as_mu.id, as_mg.id]
+      end
+      it 'returns admin set ids where user has deposit access except excluded groups' do
+        expect(described_class.source_ids_for_deposit(ability: ability, source_type: 'admin_set', exclude_groups: ['deposit_group']))
+          .to match_array [as_du.id, as_mu.id, as_mg.id]
+      end
+
+      context 'when user has no access' do
+        let(:ability) { Ability.new(user2) }
+
+        it 'returns empty array' do
+          expect(described_class.source_ids_for_deposit(ability: ability)).to match_array []
+        end
+      end
+    end
+
+    describe '.collection_ids_for_deposit' do
+      it 'returns collection ids where user has manage access' do
+        expect(described_class.collection_ids_for_deposit(ability: ability)).to match_array [col_du.id, col_dg.id, col_mu.id, col_mg.id]
+      end
+
+      context 'when user has no access' do
+        let(:ability) { Ability.new(user2) }
+
+        it 'returns empty array' do
+          expect(described_class.collection_ids_for_deposit(ability: ability)).to match_array []
+        end
+      end
+    end
+
+    describe '.collection_ids_for_view' do
+      it 'returns collection ids where user has view access' do
+        expect(described_class.collection_ids_for_view(ability: ability)).to match_array [col_du.id, col_dg.id, col_mu.id, col_mg.id, col_vu.id, col_vg.id]
+      end
+
+      context 'when user has no access' do
+        let(:ability) { Ability.new(user2) }
+
+        it 'returns empty array' do
+          expect(described_class.collection_ids_for_view(ability: ability)).to match_array []
+        end
+      end
+    end
+
+    describe '.can_manage_any_collection?' do
+      it 'returns true when user has manage access to at least one collection' do
+        expect(described_class.can_manage_any_collection?(ability: ability)).to be true
+      end
+
+      context 'when user has no access' do
+        let(:ability) { Ability.new(user2) }
+
+        it 'returns false' do
+          expect(described_class.can_manage_any_collection?(ability: ability)).to be false
+        end
+      end
+    end
+
+    describe '.can_manage_any_admin_set?' do
+      it 'returns true when user has manage access to at least one admin set' do
+        expect(described_class.can_manage_any_admin_set?(ability: ability)).to be true
+      end
+
+      context 'when user has no access' do
+        let(:ability) { Ability.new(user2) }
+
+        it 'returns false' do
+          expect(described_class.can_manage_any_admin_set?(ability: ability)).to be false
+        end
+      end
+    end
+
+    describe '.can_view_admin_show_for_any_collection?' do
+      it 'returns true when user has manage, deposit, or view access to at least one collection' do
+        expect(described_class.can_view_admin_show_for_any_collection?(ability: ability)).to be true
+      end
+
+      context 'when user has no access' do
+        let(:ability) { Ability.new(user2) }
+
+        it 'returns false' do
+          expect(described_class.can_view_admin_show_for_any_collection?(ability: ability)).to be false
+        end
+      end
+    end
+
+    describe '.can_view_admin_show_for_any_admin set?' do
+      it 'returns true when user has manage, deposit, or view access to at least one admin set' do
+        expect(described_class.can_view_admin_show_for_any_admin_set?(ability: ability)).to be true
+      end
+
+      context 'when user has no access' do
+        let(:ability) { Ability.new(user2) }
+
+        it 'returns false' do
+          expect(described_class.can_view_admin_show_for_any_admin_set?(ability: ability)).to be false
+        end
+      end
+    end
+  end
+
+  def source_access(permission_template, agent_type, agent_id, access)
+    create(:permission_template_access,
+           access,
+           permission_template: permission_template,
+           agent_type: agent_type,
+           agent_id: agent_id)
+  end
+end

data/spec/services/hyrax/collections_service_spec.rb

@@ -0,0 +1,62 @@
+RSpec.describe Hyrax::CollectionsService do
+  let(:controller) { ::CatalogController.new }
+
+  let(:context) do
+    double(current_ability: Ability.new(user1),
+           repository: controller.repository,
+           blacklight_config: controller.blacklight_config)
+  end
+
+  let(:service) { described_class.new(context) }
+  let(:user1) { build(:user) }
+
+  describe "#search_results", :clean_repo do
+    subject { service.search_results(access) }
+
+    let(:user2) { build(:user) }
+    let!(:collection1) do
+      build(:private_collection_lw, id: 'col-1-own', title: ['user1 created'], user: user1,
+                                    with_permission_template: true, with_solr_document: true)
+    end
+    let!(:collection2) do
+      build(:private_collection_lw, id: 'col-2-mgr', title: ['user2 shares manage access with user1'], user: user2,
+                                    with_permission_template: { manage_users: [user1] }, with_solr_document: true)
+    end
+    let!(:collection3) do
+      build(:private_collection_lw, id: 'col-3-dep', title: ['user2 shares deposit access with user1'], user: user2,
+                                    with_permission_template: { deposit_users: [user1] }, with_solr_document: true)
+    end
+    let!(:collection4) do
+      build(:private_collection_lw, id: 'col-4-view', title: ['user2 shares view access with user1'], user: user2,
+                                    with_permission_template: { view_users: [user1] }, with_solr_document: true)
+    end
+
+    before do
+      create(:admin_set, id: 'as-1', read_groups: ['public']) # this should never be returned.
+    end
+
+    context "with read access" do
+      let(:access) { :read }
+
+      it "returns four collections" do
+        expect(subject.map(&:id)).to match_array [collection1.id, collection2.id, collection3.id, collection4.id]
+      end
+    end
+
+    context "with edit access" do
+      let(:access) { :edit }
+
+      it "returns two collections" do
+        expect(subject.map(&:id)).to match_array [collection1.id, collection2.id]
+      end
+    end
+
+    context "with deposit access" do
+      let(:access) { :deposit }
+
+      it "returns one collections" do
+        expect(subject.map(&:id)).to match_array [collection1.id, collection2.id, collection3.id]
+      end
+    end
+  end
+end

data/spec/services/hyrax/curation_concern_spec.rb

@@ -0,0 +1,18 @@
+RSpec.describe Hyrax::CurationConcern do
+  let(:work) { GenericWork.new }
+  let(:user) { double(current_user: double) }
+
+  describe ".actor" do
+    subject { described_class.actor }
+
+    it { is_expected.to be_kind_of Hyrax::Actors::TransactionalRequest }
+  end
+
+  describe ".actor_factory" do
+    subject { described_class.actor_factory }
+
+    it "returns same ActionDispatch::MiddlewareStack instance" do
+      is_expected.to eq described_class.actor_factory
+    end
+  end
+end

data/spec/services/hyrax/database_migrator_spec.rb

@@ -0,0 +1,20 @@
+RSpec.describe Hyrax::DatabaseMigrator do
+  describe '.copy' do
+    let(:mock_migrator) { double }
+
+    it 'creates an instance and calls #copy' do
+      expect(described_class).to receive(:new).once.and_return(mock_migrator)
+      expect(mock_migrator).to receive(:copy).once
+      described_class.copy
+    end
+  end
+
+  describe '#copy' do
+    let(:migrations_count) { subject.send(:migrations).count }
+
+    it 'uses #migration_template to copy all migrations to app' do
+      expect(subject).to receive(:migration_template).exactly(migrations_count).times
+      subject.copy
+    end
+  end
+end

data/spec/services/hyrax/default_middleware_stack_spec.rb

@@ -0,0 +1,36 @@
+RSpec.describe Hyrax::DefaultMiddlewareStack do
+  let(:work) { GenericWork.new }
+  let(:user) { double(current_user: double) }
+
+  describe '.build_stack' do
+    subject { described_class.build_stack }
+
+    it "has the correct stack frames" do
+      expect(subject.middlewares).to eq [
+        Hyrax::Actors::TransactionalRequest,
+        Hyrax::Actors::OptimisticLockValidator,
+        Hyrax::Actors::CreateWithRemoteFilesActor,
+        Hyrax::Actors::CreateWithFilesActor,
+        Hyrax::Actors::CollectionsMembershipActor,
+        Hyrax::Actors::AddToWorkActor,
+        Hyrax::Actors::AttachMembersActor,
+        Hyrax::Actors::ApplyOrderActor,
+        Hyrax::Actors::DefaultAdminSetActor,
+        Hyrax::Actors::InterpretVisibilityActor,
+        Hyrax::Actors::TransferRequestActor,
+        Hyrax::Actors::ApplyPermissionTemplateActor,
+        Hyrax::Actors::CleanupFileSetsActor,
+        Hyrax::Actors::CleanupTrophiesActor,
+        Hyrax::Actors::FeaturedWorkActor,
+        Hyrax::Actors::ModelActor,
+        Hyrax::Actors::InitializeWorkflowActor
+      ]
+    end
+  end
+
+  describe 'Hyrax::CurationConcern.actor' do
+    it "calls the Hyrax::ActorFactory" do
+      expect(Hyrax::CurationConcern.actor).to be_instance_of Hyrax::Actors::TransactionalRequest
+    end
+  end
+end

data/spec/services/hyrax/derivative_path_spec.rb

@@ -0,0 +1,65 @@
+RSpec.describe Hyrax::DerivativePath do
+  let(:id)     { '123' }
+  let(:object) { double(id: id) }
+
+  before { allow(Hyrax.config).to receive(:derivatives_path).and_return('tmp') }
+
+  context "for a single path" do
+    let(:destination_name) { 'thumbnail' }
+
+    describe '.derivative_path_for_reference' do
+      subject { described_class.derivative_path_for_reference(object, destination_name) }
+
+      it { is_expected.to eq('tmp/12/3-thumbnail.jpeg') }
+    end
+
+    describe '#derivative_path' do
+      context "with an object" do
+        subject { described_class.new(object, destination_name).derivative_path }
+
+        it { is_expected.to eq('tmp/12/3-thumbnail.jpeg') }
+      end
+
+      context "with an id" do
+        subject { described_class.new(id, destination_name).derivative_path }
+
+        it { is_expected.to eq('tmp/12/3-thumbnail.jpeg') }
+      end
+    end
+  end
+
+  context "for multiple paths" do
+    before do
+      FileUtils.mkdir_p("tmp/12")
+      File.open("tmp/12/3-thumbnail.jpeg", 'w') do |f|
+        f.write "test"
+      end
+      File.open("tmp/12/4-thumbnail.jpeg", 'w') do |f|
+        f.write "test"
+      end
+    end
+    after do
+      FileUtils.rm_rf("tmp/12")
+    end
+
+    describe ".derivatives_for_reference" do
+      subject { described_class.derivatives_for_reference(object) }
+
+      it { is_expected.to eq(["tmp/12/3-thumbnail.jpeg"]) }
+    end
+
+    describe "#all_paths" do
+      context "with an object" do
+        subject { described_class.new(object, nil).all_paths }
+
+        it { is_expected.to eq(["tmp/12/3-thumbnail.jpeg"]) }
+      end
+
+      context "with an id" do
+        subject { described_class.new(id, nil).all_paths }
+
+        it { is_expected.to eq(["tmp/12/3-thumbnail.jpeg"]) }
+      end
+    end
+  end
+end

data/spec/services/hyrax/derivative_service_spec.rb

@@ -0,0 +1,49 @@
+require 'hyrax/specs/shared_specs'
+
+RSpec.describe Hyrax::DerivativeService do
+  let(:valid_file_set) { FileSet.new }
+
+  subject { described_class.new(file_set) }
+
+  it_behaves_like "a Hyrax::DerivativeService"
+  before do
+    @cached_services = described_class.services
+  end
+  after do
+    described_class.services = @cached_services
+  end
+
+  describe ".services=" do
+    it "allows you to set the available services" do
+      described_class.services = [Hyrax::FileSetDerivativesService, Hyrax::FileSetDerivativesService]
+      expect(described_class.services).to eq [Hyrax::FileSetDerivativesService, Hyrax::FileSetDerivativesService]
+    end
+    it "defaults to an array" do
+      expect(described_class.services).to eq [Hyrax::FileSetDerivativesService]
+    end
+  end
+
+  describe ".for" do
+    before do
+      described_class.services = [Hyrax::FileSetDerivativesService]
+    end
+    context "when a FileSet matches the requirements of a service" do
+      let(:file_set) do
+        FileSet.new.tap do |f|
+          allow(f).to receive(:mime_type).and_return(FileSet.image_mime_types.first)
+        end
+      end
+
+      it "returns it" do
+        expect(described_class.for(file_set)).to be_instance_of Hyrax::FileSetDerivativesService
+      end
+    end
+    context "when a FileSet matches no services" do
+      let(:file_set) { FileSet.new }
+
+      it "returns a base DerivativeService" do
+        expect(described_class.for(file_set)).to be_instance_of described_class
+      end
+    end
+  end
+end