mumuki-laboratory 7.5.0

data/public/kibi.svg

@@ -0,0 +1,2 @@
+<?xml version="1.0" encoding="utf-8"?><svg xmlns:xlink="http://www.w3.org/1999/xlink" id="kibi" image-rendering="auto" baseProfile="basic" version="1.1" x="0px" y="0px" width="77" height="77" xmlns="http://www.w3.org/2000/svg"><defs><symbol id="pierna_t1" overflow="visible"><path fill="none" stroke="#F90" stroke-width="5" stroke-linecap="round" stroke-linejoin="round" d="M0,0L0.4,19.55"/>
+</symbol></defs><g id="Scene_1" overflow="visible"><use xlink:href="#pierna_t1" transform="matrix(1 0 0 1 25.45 54.85)"/><use xlink:href="#pierna_t1" transform="matrix(1 0 0 1 52.75 54.85)"/><g id="brazo_t2" transform="matrix(1 0 0 1 4.3 52.15)"><path fill="none" stroke="#F90" stroke-width="5" stroke-linecap="round" stroke-linejoin="round" d="M3.2,6.5Q0.4,10.8 0,15.1M3.2,6.5Q6.25,1.75 10.45,0"/></g><g id="brazo_t3" transform="matrix(1 0 0 1 63.95 51.7)"><path fill="none" stroke="#F90" stroke-width="5" stroke-linecap="round" stroke-linejoin="round" d="M7.25,6.5Q10.05,10.8 10.45,15.1M7.25,6.5Q4.2,1.75 0,0"/></g><g id="torso_t" transform="matrix(1 0 0 1 6.1 2.75)"><g id="fleco_t" transform="matrix(1 0 0 1 29.85 -0.049)"><path fill="none" stroke="#FC3" stroke-width="3" stroke-linecap="round" stroke-linejoin="round" d="M3.6,3.35L3.5,0"/><path fill="none" stroke="#FC3" stroke-width="3" stroke-linecap="round" stroke-linejoin="round" d="M0,1.9L1.5,4"/><path fill="none" stroke="#FC3" stroke-width="3" stroke-linecap="round" stroke-linejoin="round" d="M7.3,1.85L5.7,3.9"/></g><path fill="#F90" d="M45.75,14.9L41.55,8.85Q37.75,3.1 33.55,3.05 32.15,3.05 30.8,3.65 30,3.95 29.35,4.55 27.3,5.85 25.3,8.65L20.7,14.9 45.75,14.9"/><path fill="#FFB933" d="M49.9,20.95L45.75,14.9 20.7,14.9 16.4,20.5 3.7,37.5Q3.6,37.6 3.5,37.75 -0.75,45.85 2.9,52.3 5.9,57.6 12.85,59.1L55.4,58.95Q59.9,57.35 62.35,53.4 66.1,47.5 62.65,39.65 62.5,39.4 62.35,39.1L56.75,30.9 49.9,20.95"/><path fill="#FFA702" d="M51.25,36.95Q49.25,37.2 47.85,38.8 46.55,40.45 46.75,42.55 46.9,44.65 48.45,46 50,47.35 52.05,47.1 54.05,46.9 55.4,45.25 56.7,43.6 56.55,41.5 56.35,39.4 54.8,38.05 53.25,36.75 51.25,36.95"/><path fill="#FFA702" d="M18.2,47.1Q20.2,46.9 21.55,45.25 22.85,43.6 22.7,41.5 22.5,39.4 20.95,38.05 19.4,36.75 17.4,36.95 15.4,37.2 14,38.8 12.7,40.45 12.9,42.55 13.05,44.65 14.6,46 16.15,47.35 18.2,47.1"/></g><path fill="#0E2D38" stroke="#0E2D38" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" d="M42.801,52.001Q44.801,52.001 46.201,50.351 47.601,48.851 47.701,46.751L37.901,46.751Q37.901,48.901 39.251,50.401 40.751,52.001 42.801,52.001"/><g id="ojos1" transform="matrix(1 0 0 1 28.45 28.6)"><path fill="#FFF" d="M10.15,2.05Q8.7,0.4 6.25,0.25 3.85,0.1 1.95,1.55 0.15,3.2 0,5.6 -0.15,8 1.5,9.65 3.1,11.6 5.5,11.75 7.95,11.9 9.7,10.15 11.55,8.75 11.7,6.35 11.85,3.95 10.15,2.05"/><path fill="#0E2D38" d="M7.2,5.05L8.7,3.3Q7.75,2.35 6.2,2.25 4.6,2.15 3.35,3.1 2.15,4.2 2.05,5.8 1.95,7.4 3.05,8.5 4.1,9.8 5.7,9.9 7.35,10 8.5,8.85 9.75,7.9 9.85,6.3 9.9,5.8 9.8,5.4L7.2,5.05"/><path fill="#FFF" d="M24.7,9.9Q26.55,8.5 26.7,6.1 26.85,3.7 25.15,1.8 23.7,0.15 21.25,0 18.85,-0.15 16.95,1.3 15.15,2.95 15,5.35 14.85,7.75 16.5,9.4 18.1,11.35 20.5,11.5 22.95,11.65 24.7,9.9"/><path fill="#0E2D38" d="M23.85,2.95Q22.9,2 21.35,1.9 19.75,1.8 18.5,2.75 17.3,3.85 17.2,5.45 17.1,7.05 18.2,8.15 19.25,9.45 20.85,9.55 22.5,9.65 23.65,8.5 24.9,7.55 25,5.95 25.05,5.45 24.95,5.05L22.35,4.7 23.85,2.95"/></g></g></svg>

data/spec/api_helper.rb

@@ -0,0 +1,7 @@
+def set_token!(token)
+  @request.env["HTTP_AUTHORIZATION"] = token
+end
+
+def set_api_client!(api_client)
+  set_token! api_client.token
+end

data/spec/capybara_helper.rb

@@ -0,0 +1,12 @@
+require 'capybara/rails'
+require 'capybara/rspec'
+
+def set_subdomain_host!(subdomain)
+  @request.try { |it| it.host = Mumukit::Platform.laboratory.organic_domain subdomain }
+  Capybara.app_host = Mumukit::Platform.laboratory.organic_url subdomain
+end
+
+def set_implicit_central!
+  @request.try { |it| it.host = Mumukit::Platform.laboratory.domain }
+  Capybara.app_host = Mumukit::Platform.laboratory.url
+end

data/spec/controllers/api_clients_controller.rb

@@ -0,0 +1,26 @@
+require 'spec_helper'
+
+describe ApiClientsController, type: :controller, organization_workspace: :base do
+  before { set_api_client! api_client }
+  let(:api_client) { create :api_client }
+  let(:api_client_json) do
+    {description: 'foo',
+     user_attributes: user_json
+    }
+  end
+  let(:user_json) do
+    {first_name: 'foo',
+     last_name: 'bar',
+     email: 'foo@bar.com',
+     permissions: {student: 'foo/*'}
+    }
+  end
+  context 'post' do
+    before { post :create, params: { api_client: api_client_json }}
+
+    it { expect(response.status).to eq 200 }
+    it { expect(ApiClient.count).to eq 1 }
+    it { expect(ApiClient.first.user.permissions).to eq('student' => 'foo/*') }
+    it { expect(Apiclient.first.user.email).to eq 'foo@bar.com' }
+  end
+end

data/spec/controllers/chapters_controller_spec.rb

@@ -0,0 +1,17 @@
+require 'spec_helper'
+
+describe ChaptersController, type: :controller, organization_workspace: :test do
+  describe 'when chapter does not exist' do
+    before { get :show, params: {id: 0} }
+
+    it { expect(response.status).to eq 404 }
+  end
+
+  describe 'when chapter exists' do
+    let!(:chapter) { create(:chapter) }
+
+    before { get :show, params: {id: chapter.id} }
+
+    it { expect(response.status).to eq 200 }
+  end
+end

data/spec/controllers/confirmations_controller_spec.rb

@@ -0,0 +1,20 @@
+require 'spec_helper'
+
+describe ExerciseConfirmationsController, organization_workspace: :test do
+  let(:user) { create(:user) }
+  let(:reading) { create(:reading, guide: create(:indexed_guide)) }
+
+  context 'when not authenticated' do
+    before { post :create, params: { exercise_id: reading.id } }
+
+    it { expect(response.status).to eq 403 }
+  end
+
+  context 'when authenticated' do
+    before { set_current_user! user }
+    before { post :create, params: { exercise_id: reading.id } }
+
+    it { expect(response.status).to eq 200 }
+    it { expect(response.body).to json_like(guide_finished_by_solution: true, class_for_progress_list_item: 'progress-list-item text-center success active') }
+  end
+end

data/spec/controllers/courses_api_controller_spec.rb

@@ -0,0 +1,28 @@
+require 'spec_helper'
+
+describe Api::CoursesController, type: :controller, organization_workspace: :base do
+  before { set_api_client! api_client }
+  let(:api_client) { create :api_client }
+  let(:course_json) do
+    {slug: 'test/bar',
+     shifts: %w(morning),
+     code: 'k2003',
+     days: %w(monday wednesday),
+     period: '2016',
+     description: 'test course'}
+  end
+
+  let!(:organization) { create :organization, name: 'test' }
+
+  context 'post' do
+    before { post :create, params: { course: course_json }}
+
+    it { expect(response.status).to eq 200 }
+    it { expect(Course.count).to eq 1 }
+    it { expect(Course.first.slug).to eq 'test/bar' }
+    it { expect(Course.first.organization).to eq(organization) }
+    it { expect(Course.first.shifts).to eq(%w(morning)) }
+    it { expect(Course.first.days).to eq(%w(monday wednesday)) }
+  end
+
+end

data/spec/controllers/discussions_controller_spec.rb

@@ -0,0 +1,64 @@
+require 'spec_helper'
+
+describe DiscussionsController, organization_workspace: :test do
+  let(:user) { create(:user, permissions: Mumukit::Auth::Permissions.parse(student: '*')) }
+  let(:exercise) { create(:exercise) }
+  let(:exercise_params) { {debatable_class: 'Exercise', exercise_id: exercise.id} }
+
+  before { set_current_user! user }
+  before { Organization.current.tap { |it| it.forum_enabled = true }.save! }
+
+  describe 'show' do
+    let(:another_orga) { create(:organization, {name: 'another_orga'}) }
+
+    describe 'a discussion from the current orga' do
+      let(:discussion) { create(:discussion, {organization: Organization.current}) }
+      before {get :show, params: exercise_params.merge({id: discussion.id})}
+
+      it {expect(response.status).to eq 200}
+    end
+
+    describe 'a discussion from another orga' do
+      let(:discussion) { create(:discussion, {organization: another_orga}) }
+      before {get :show, params: exercise_params.merge({id: discussion.id})}
+
+      it {expect(response.status).to eq 404}
+    end
+  end
+
+  describe 'post' do
+    before { allow_any_instance_of(DiscussionsController).to receive(:discussion_params).and_return title: 'A title' }
+    before { post :create, params: exercise_params }
+
+    it { expect(response.status).to eq 302 }
+    it { expect(exercise.discussions.size).to eq 1 }
+    it { expect(user.discussions.size).to eq 1 }
+    it { expect(user.watched_discussions.size).to eq 1 }
+
+    describe 'deleting exercises does delete all discussions' do
+      before { @discussion_id = exercise.discussions.first.id }
+      before { exercise.destroy }
+
+      it { expect { Discussion.find(@discussion_id) }.to raise_exception(ActiveRecord::RecordNotFound) }
+    end
+  end
+
+  describe 'when the minimal role for discussions is teacher' do
+    before { Organization.current.tap { |it| it.forum_discussions_minimal_role = 'teacher' }.save! }
+
+    describe 'and the user does not match the minimal role' do
+      before { post :create, params: exercise_params }
+
+      it { expect(response.status).to eq 404 }
+    end
+
+    describe 'and the user matches the minimal role' do
+      let(:user) { create(:user, permissions: Mumukit::Auth::Permissions.parse(teacher: '*')) }
+      before { allow_any_instance_of(DiscussionsController).to receive(:discussion_params).and_return title: 'A title' }
+      before { post :create, params: exercise_params }
+
+      it { expect(response.status).to eq 302 }
+      it { expect(exercise.discussions.size).to eq 1 }
+    end
+  end
+end

data/spec/controllers/exercise_solutions_controller_spec.rb

@@ -0,0 +1,88 @@
+require 'spec_helper'
+
+describe ExerciseSolutionsController, organization_workspace: :test do
+  let(:user) { create(:user) }
+  let(:problem) { create(:problem) }
+  let(:kids_problem) { create(:problem, layout: :input_kids) }
+  let!(:chapter) {
+    create(:chapter, name: 'Functional Programming', lessons: [
+      create(:lesson, exercises: [problem, kids_problem])
+    ]) }
+
+  before { reindex_current_organization! }
+  before { set_current_user! user }
+
+  def post_problem(problem)
+    post :create, params: { exercise_id: problem.id, solution: { content: 'asd' } }
+  end
+
+
+  describe 'when simple content is sent' do
+    context 'for a non-kids exercise' do
+      before { post_problem(problem) }
+      let(:assignment) { Assignment.last }
+
+      context 'without client-side interpolations' do
+        it { expect(response.status).to eq 200 }
+        it { expect(assignment.solution).to eq('asd')}
+
+        it { expect(response.body).to json_eq({ status: :failed, guide_finished_by_solution: false },
+                                              except: [:class_for_progress_list_item, :html, :remaining_attempts_html]) }
+
+
+        it 'does not include kids specific renders' do
+          body = JSON.parse(response.body)
+
+          expect(body.key?('button_html')).to be false
+          expect(body.key?('title_html')).to be false
+          expect(body.key?('expectations_html')).to be false
+          expect(body.key?('test_results')).to be false
+        end
+      end
+
+      context 'with client-side interpolations' do
+        let(:problem) { create(:problem, extra: interpolation) }
+        let(:interpolation) { %q{function longitud(unString) /*<elipsis-for-student@*/ {
+          return unString.length;
+        } /*@elipsis-for-student>*/} }
+
+        it { expect(assignment.extra.strip).to eq interpolation.strip }
+      end
+    end
+
+    context 'for a kids exercise' do
+      before { post_problem(kids_problem) }
+
+      it { expect(response.body).to json_eq({ status: :failed, guide_finished_by_solution: false },
+                                            except: [:class_for_progress_list_item, :html, :remaining_attempts_html,
+                                                     :title_html, :button_html, :expectations, :test_results, :tips]) }
+
+      it 'includes kids specific renders' do
+        body = JSON.parse(response.body)
+
+        expect(body.key?('button_html')).to be true
+        expect(body.key?('title_html')).to be true
+        expect(body.key?('expectations')).to be true
+        expect(body.key?('test_results')).to be true
+        expect(body.key?('tips')).to be true
+      end
+    end
+  end
+
+  context 'when multifile content is sent' do
+    before { create(:language, extension: 'js', highlight_mode: 'javascript') }
+    before { post :create, params: { exercise_id: problem.id, solution: { content: {
+      'a_file.css' => 'a css content',
+      'a_file.js' => 'a js content'
+    } } } }
+    let(:files) { Assignment.last.files }
+
+    it { expect(response.status).to eq 200 }
+    it { expect(Assignment.last.solution).to eq("/*<a_file.css#*/a css content/*#a_file.css>*/\n/*<a_file.js#*/a js content/*#a_file.js>*/") }
+    it { expect(files.count).to eq 2 }
+    it { expect(files[0]).to have_attributes(name: 'a_file.css', content: 'a css content') }
+    it { expect(files[0].highlight_mode).to eq 'css' }
+    it { expect(files[1]).to have_attributes(name: 'a_file.js', content: 'a js content') }
+    it { expect(files[1].highlight_mode).to eq 'javascript' }
+  end
+end

data/spec/controllers/guide_progress_controller_spec.rb

@@ -0,0 +1,40 @@
+require 'spec_helper'
+
+describe GuideProgressController, organization_workspace: :test do
+  let(:user) { create(:user) }
+
+  let(:exam_problem) { build(:problem) }
+  let(:test_organization) { Organization.find_by_name('test') }
+  let(:exam) { create(:exam, organization: test_organization, guide: exam_guide) }
+  let(:lesson) { create(:lesson, guide: lesson_guide) }
+
+  describe 'delete' do
+    before { set_current_user! user }
+
+    describe 'an exam guide progress' do
+      let(:exam_guide) { create(:guide, exercises: [exam_problem])}
+      before { exam.index_usage! test_organization }
+      before { reindex_current_organization! }
+      before { delete :destroy, params: { guide_id: exam_guide.id } }
+
+      it { expect(response.status).to eq 403 }
+    end
+
+    describe 'a lesson guide progress' do
+      let(:book) { create(:book,
+                          slug: 'mumuki/book',
+                          chapters: [
+                            create(:chapter,
+                                   slug: 'mumuki/topic1',
+                                   lessons: [lesson])]) }
+
+      let(:lesson_guide) { create(:guide, exercises: [exam_problem])}
+      before { test_organization.update! book: book }
+      before { lesson.index_usage! test_organization }
+      before { reindex_current_organization! }
+      before { delete :destroy, params: { guide_id: lesson_guide.id } }
+
+      it { expect(response.status).to eq 302 }
+    end
+  end
+end

data/spec/controllers/invitations_controller_spec.rb

@@ -0,0 +1,26 @@
+require 'spec_helper'
+
+describe InvitationsController, type: :controller, organization_workspace: :test do
+  let(:user) { create(:user) }
+
+  before { set_current_user! user }
+
+  describe 'when invitation does not exist' do
+    before { get :join, params: {code: 'foo123' } }
+
+    it { expect(response.status).to eq 404 }
+  end
+
+  describe 'when invitation exists' do
+    let(:organization) { Organization.current }
+    let(:course) { create(:course, slug: 'test/foo-1111', name: 'Generic Course', organization: organization) }
+    let!(:invitation) { create(:invitation, code: 'foo123', course: course ) }
+
+    before { get :join, params: {code: 'foo123', user: {first_name: 'new first_name', gender: 'female'} } }
+    before { user.reload }
+
+    it { expect(response.status).to eq 302 }
+    it { expect(user.first_name).to eq 'new first_name' }
+    it { expect(user.gender).to eq 'female' }
+  end
+end

data/spec/controllers/messages_controller_spec.rb

@@ -0,0 +1,32 @@
+require 'spec_helper'
+
+describe MessagesController, organization_workspace: :test do
+  let(:user) { create(:user) }
+  let(:exercise) { create(:exercise) }
+  before { set_current_user! user }
+  before { allow_any_instance_of(MessagesController).to receive(:message_params).and_return content: 'foo' }
+
+  describe 'post when no previous assignment' do
+    before { post :create, params: {exercise_id: exercise.id} }
+
+    it { expect(response.status).to eq 302 }
+    it { expect(user.assignments.size).to eq 1 }
+    it { expect(user.messages.size).to eq 1 }
+
+    describe 'deleting exercises does delete all messages' do
+      before { @message_id = user.messages.first.id }
+      before { exercise.destroy }
+
+      it { expect { Message.find(@message_id) }.to raise_exception(ActiveRecord::RecordNotFound) }
+    end
+  end
+
+  describe 'post when previous assignment' do
+    let(:assignment) { exercise.submit_solution!(user, content: '') }
+    before { post :create, params: {exercise_id: exercise.id} }
+
+    it { expect(response.status).to eq 302 }
+    it { expect(user.assignments.size).to eq 1 }
+    it { expect(user.messages.size).to eq 1 }
+  end
+end

data/spec/controllers/organizations_api_controller_spec.rb

@@ -0,0 +1,239 @@
+require 'spec_helper'
+
+describe Api::OrganizationsController, type: :controller, organization_workspace: :base do
+  def check_status!(status)
+    expect(response.status).to eq status
+  end
+
+  describe 'unauthenticated request' do
+    before { get :index }
+    it { expect(response.body).to json_eq errors: ['missing authorization header'] }
+    it { check_status! 401 }
+  end
+
+  describe 'invalid authenticated request' do
+    before { set_token! 'foo' }
+    before { get :index }
+    it { expect(response.body).to json_eq errors: ['No Api Client found for Token'] }
+    it { check_status! 401 }
+  end
+
+  describe 'authenticated request' do
+    let(:book) { create :book }
+
+    before { set_api_client! api_client }
+
+    describe 'GET' do
+      let!(:public_organization) { create :organization, name: 'public' }
+      let!(:dot_organization) { create :organization, name: 'dot.org' }
+      let!(:private_organization) { create :organization, name: 'private', public: false }
+      let!(:another_private_organization) { create :organization, name: 'another_private', public: false }
+
+      context 'GET /organizations' do
+        let(:organization_names) { JSON.parse(response.body)['organizations'].map { |it| it['name'] }  }
+
+        context 'with wildcard permissions' do
+          before { get :index }
+          let(:api_client) { create :api_client, role: :janitor, grant: '*' }
+
+          it { check_status! 200 }
+
+          it { expect(organization_names).to contain_exactly 'base', 'public', 'dot.org', 'private', 'another_private' }
+        end
+        context 'with non-wildcard permissions' do
+          before { get :index }
+          let(:api_client) { create :api_client, role: :janitor, grant: 'public/*:private/*' }
+
+          it { check_status! 200 }
+
+          it { expect(organization_names).to contain_exactly 'public', 'private' }
+        end
+      end
+
+      context 'GET /organizations/:id' do
+        context 'with a public organization' do
+          before { get :show, params: {id: 'public'} }
+
+          context 'with a user without janitor permissions' do
+            let(:api_client) { create :api_client, role: :editor, grant: 'another_organization/*' }
+
+            it { check_status! 403 }
+          end
+
+          context 'with a user with janitor' do
+            let(:api_client) { create :api_client, role: :janitor, grant: 'public/*' }
+
+            it { check_status! 200 }
+          end
+        end
+
+        context 'with an organization that has a dot in its name' do
+          before { get :show, params: {id: 'dot.org'} }
+
+          let(:api_client) { create :api_client, role: :janitor, grant: 'dot.org/*' }
+          it { check_status! 200 }
+        end
+
+        context 'with a private organization' do
+          before { get :show, params: {id: 'private'} }
+
+          context 'with a user without permissions' do
+            let(:api_client) { create :api_client, role: :editor, grant: 'another_organization/*' }
+
+            it { check_status! 403 }
+          end
+
+          context 'with a user with permissions' do
+            let(:api_client) { create :api_client, role: :janitor, grant: 'private/*' }
+
+            it { check_status! 200 }
+            it { expect(response.body).to json_like(private_organization.to_resource_h) }
+          end
+        end
+
+        context 'with a non-existing organization' do
+          before { get :show, params: {id: 'non-existing'} }
+          let(:api_client) { create :api_client, role: :editor, grant: 'bleh/*' }
+
+          it { check_status! 404 }
+        end
+      end
+    end
+
+    describe 'POST /organizations' do
+      before { post :create, params: {organization: organization_json} }
+      let(:organization_json) do
+        {contact_email: 'an_email@gmail.com',
+         name: 'a-name',
+         public: false,
+         book: book.slug,
+         locale: 'es'}
+      end
+
+      context 'with the admin permissions' do
+        let(:api_client) { create :api_client, role: :admin, grant: '*' }
+        let(:organization) { Organization.find_by name: 'a-name' }
+
+        it { check_status! 200 }
+        it { expect(response.body).to json_like(organization.to_resource_h) }
+        it { expect(Organization.count).to eq 2 }
+        it { expect(organization.name).to eq 'a-name' }
+        it { expect(organization.contact_email).to eq 'an_email@gmail.com' }
+        it { expect(organization.book).to eq book }
+        it { expect(organization.locale).to eq 'es' }
+
+        context 'with only mandatory values' do
+          it { expect(organization.public?).to eq false }
+          it { expect(organization.login_methods).to eq %w(user_pass) }
+          it { expect(organization.logo_url).to eq 'https://mumuki.io/logo-alt-large.png' }
+          it { expect(organization.theme_stylesheet).to eq '.defaultCssFromBase { css: red }' }
+          it { expect(organization.extension_javascript).to eq 'function jsFromBase() {}' }
+          it { expect(organization.terms_of_service).to eq nil }
+        end
+
+        context 'with optional values' do
+          let(:organization_json) do
+            {contact_email: 'an_email@gmail.com',
+             name: 'a-name',
+             description: 'A description',
+             book: book.slug,
+             locale: 'es',
+             public: false,
+             login_methods: %w(facebook github),
+             logo_url: 'http://a-logo-url.com',
+             theme_stylesheet: '.theme { color: red }',
+             extension_javascript: 'window.a = function() { }',
+             terms_of_service: 'A TOS'}
+          end
+
+          it { expect(organization.public?).to eq false }
+          it { expect(organization.description).to eq 'A description' }
+          it { expect(organization.login_methods).to eq %w(facebook github) }
+          it { expect(organization.logo_url).to eq 'http://a-logo-url.com' }
+          it { expect(organization.theme_stylesheet).to eq ".theme { color: red }" }
+          it { expect(organization.extension_javascript).to eq "window.a = function() { }" }
+          it { expect(organization.terms_of_service).to eq 'A TOS' }
+        end
+
+        context 'with missing values' do
+          let(:organization_json) do
+            {contact_email: 'an_email@gmail.com',
+             locale: 'blabla'}
+          end
+          let(:expected_errors) do
+            {
+                errors: {
+                    name: ["can't be blank"],
+                    locale: ['is not included in the list']
+                }
+            }
+          end
+
+          it { check_status! 400 }
+          it { expect(response.body).to json_eq expected_errors }
+        end
+      end
+
+      context 'with admin permissions' do
+        let(:api_client) { create :api_client, role: :admin, grant: '*' }
+
+        it { check_status! 200 }
+      end
+
+
+      context 'with not-janitor permissions' do
+        let(:api_client) { create :api_client, role: :editor, grant: '*' }
+
+        it { check_status! 403 }
+      end
+    end
+
+    describe 'PUT /organizations/:id' do
+      let!(:organization) {
+        create :organization,
+                name: 'existing-organization',
+                contact_email: 'first_email@gmail.com',
+                terms_of_service: 'A TOS',
+                public: false,
+                login_methods: ['facebook', 'user_pass'],
+                book: book }
+      let(:updated_organizaton) { organization.reload }
+      let(:update_json) { {contact_email: 'second_email@gmail.com', immersive: true, locale: 'en'} }
+
+      context 'with the admin permissions' do
+        let(:api_client) { create :api_client, role: :admin, grant: 'existing-organization/*' }
+        before { put :update, params: {id: organization.name, organization: update_json} }
+
+        it { check_status! 200 }
+        it { expect(response.body).to json_like(
+                                            book: book.slug,
+                                            name: "existing-organization",
+                                            profile: {
+                                              description: "a great org",
+                                              locale: 'en',
+                                              contact_email: "second_email@gmail.com",
+                                              terms_of_service: 'A TOS'
+                                            },
+                                            settings: {
+                                              login_methods: ["facebook", "user_pass"],
+                                              public: false,
+                                              immersive: true
+                                            },
+                                            theme: {
+                                              extension_javascript: 'function jsFromBase() {}',
+                                              theme_stylesheet: '.defaultCssFromBase { css: red }'
+                                            }) }
+
+        it { expect(updated_organizaton.name).to eq 'existing-organization' }
+        it { expect(updated_organizaton.contact_email).to eq 'second_email@gmail.com' }
+      end
+
+      context 'with not-janitor permissions' do
+        let(:api_client) { create :api_client, role: :teacher, grant: 'existing-organization/*' }
+        before { put :update, params: {id: 'existing-organization', organization: update_json} }
+
+        it { check_status! 403 }
+      end
+    end
+  end
+end