solidus_core_devise_token_auth 2.8.0.alpha.0

data/spec/models/spree/permission_sets/base_spec.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::Base do
+  let(:ability) { Spree::Ability.new nil }
+  subject { described_class.new(ability).activate! }
+
+  describe "activate!" do
+    it "raises a not implemented error" do
+      expect{ subject }.to raise_error(NotImplementedError)
+    end
+  end
+end

data/spec/models/spree/permission_sets/configuration_display.rb

@@ -0,0 +1,79 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::ConfigurationDisplay do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:edit, :general_settings) }
+    it { is_expected.to be_able_to(:display, Spree::TaxCategory) }
+    it { is_expected.to be_able_to(:display, Spree::TaxRate) }
+    it { is_expected.to be_able_to(:display, Spree::Zone) }
+    it { is_expected.to be_able_to(:display, Spree::Country) }
+    it { is_expected.to be_able_to(:display, Spree::State) }
+    it { is_expected.to be_able_to(:display, Spree::PaymentMethod) }
+    it { is_expected.to be_able_to(:display, Spree::Taxonomy) }
+    it { is_expected.to be_able_to(:display, Spree::ShippingMethod) }
+    it { is_expected.to be_able_to(:display, Spree::ShippingCategory) }
+    it { is_expected.to be_able_to(:display, Spree::StockLocation) }
+    it { is_expected.to be_able_to(:display, Spree::StockMovement) }
+    it { is_expected.to be_able_to(:display, Spree::RefundReason) }
+    it { is_expected.to be_able_to(:display, Spree::ReimbursementType) }
+    it { is_expected.to be_able_to(:display, Spree::ReturnReason) }
+    it { is_expected.to be_able_to(:admin, :general_settings) }
+    it { is_expected.to be_able_to(:admin, Spree::TaxCategory) }
+    it { is_expected.to be_able_to(:admin, Spree::TaxRate) }
+    it { is_expected.to be_able_to(:admin, Spree::Zone) }
+    it { is_expected.to be_able_to(:admin, Spree::Country) }
+    it { is_expected.to be_able_to(:admin, Spree::State) }
+    it { is_expected.to be_able_to(:admin, Spree::PaymentMethod) }
+    it { is_expected.to be_able_to(:admin, Spree::Taxonomy) }
+    it { is_expected.to be_able_to(:admin, Spree::ShippingMethod) }
+    it { is_expected.to be_able_to(:admin, Spree::ShippingCategory) }
+    it { is_expected.to be_able_to(:admin, Spree::StockLocation) }
+    it { is_expected.to be_able_to(:admin, Spree::StockMovement) }
+    it { is_expected.to be_able_to(:admin, Spree::RefundReason) }
+    it { is_expected.to be_able_to(:admin, Spree::ReimbursementType) }
+    it { is_expected.to be_able_to(:admin, Spree::ReturnReason) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:edit, :general_settings) }
+    it { is_expected.not_to be_able_to(:display, Spree::TaxCategory) }
+    it { is_expected.not_to be_able_to(:display, Spree::TaxRate) }
+    it { is_expected.not_to be_able_to(:display, Spree::Zone) }
+    it { is_expected.not_to be_able_to(:display, Spree::Country) }
+    it { is_expected.not_to be_able_to(:display, Spree::State) }
+    it { is_expected.not_to be_able_to(:display, Spree::PaymentMethod) }
+    it { is_expected.not_to be_able_to(:display, Spree::Taxonomy) }
+    it { is_expected.not_to be_able_to(:display, Spree::ShippingMethod) }
+    it { is_expected.not_to be_able_to(:display, Spree::ShippingCategory) }
+    it { is_expected.not_to be_able_to(:display, Spree::StockLocation) }
+    it { is_expected.not_to be_able_to(:display, Spree::StockMovement) }
+    it { is_expected.not_to be_able_to(:display, Spree::RefundReason) }
+    it { is_expected.not_to be_able_to(:display, Spree::ReimbursementType) }
+    it { is_expected.not_to be_able_to(:display, Spree::ReturnReason) }
+    it { is_expected.not_to be_able_to(:admin, :general_settings) }
+    it { is_expected.not_to be_able_to(:admin, Spree::TaxCategory) }
+    it { is_expected.not_to be_able_to(:admin, Spree::TaxRate) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Zone) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Country) }
+    it { is_expected.not_to be_able_to(:admin, Spree::State) }
+    it { is_expected.not_to be_able_to(:admin, Spree::PaymentMethod) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Taxonomy) }
+    it { is_expected.not_to be_able_to(:admin, Spree::ShippingMethod) }
+    it { is_expected.not_to be_able_to(:admin, Spree::ShippingCategory) }
+    it { is_expected.not_to be_able_to(:admin, Spree::StockLocation) }
+    it { is_expected.not_to be_able_to(:admin, Spree::StockMovement) }
+    it { is_expected.not_to be_able_to(:admin, Spree::RefundReason) }
+    it { is_expected.not_to be_able_to(:admin, Spree::ReimbursementType) }
+    it { is_expected.not_to be_able_to(:admin, Spree::ReturnReason) }
+  end
+end

data/spec/models/spree/permission_sets/configuration_management_spec.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::ConfigurationManagement do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:manage, :general_settings) }
+    it { is_expected.to be_able_to(:manage, Spree::TaxCategory) }
+    it { is_expected.to be_able_to(:manage, Spree::TaxRate) }
+    it { is_expected.to be_able_to(:manage, Spree::Zone) }
+    it { is_expected.to be_able_to(:manage, Spree::Country) }
+    it { is_expected.to be_able_to(:manage, Spree::State) }
+    it { is_expected.to be_able_to(:manage, Spree::PaymentMethod) }
+    it { is_expected.to be_able_to(:manage, Spree::Taxonomy) }
+    it { is_expected.to be_able_to(:manage, Spree::ShippingMethod) }
+    it { is_expected.to be_able_to(:manage, Spree::ShippingCategory) }
+    it { is_expected.to be_able_to(:manage, Spree::StockLocation) }
+    it { is_expected.to be_able_to(:manage, Spree::StockMovement) }
+    it { is_expected.to be_able_to(:manage, Spree::RefundReason) }
+    it { is_expected.to be_able_to(:manage, Spree::ReimbursementType) }
+    it { is_expected.to be_able_to(:manage, Spree::ReturnReason) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:manage, :general_settings) }
+    it { is_expected.not_to be_able_to(:manage, Spree::TaxCategory) }
+    it { is_expected.not_to be_able_to(:manage, Spree::TaxRate) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Zone) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Country) }
+    it { is_expected.not_to be_able_to(:manage, Spree::State) }
+    it { is_expected.not_to be_able_to(:manage, Spree::PaymentMethod) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Taxonomy) }
+    it { is_expected.not_to be_able_to(:manage, Spree::ShippingMethod) }
+    it { is_expected.not_to be_able_to(:manage, Spree::ShippingCategory) }
+    it { is_expected.not_to be_able_to(:manage, Spree::StockLocation) }
+    it { is_expected.not_to be_able_to(:manage, Spree::StockMovement) }
+    it { is_expected.not_to be_able_to(:manage, Spree::RefundReason) }
+    it { is_expected.not_to be_able_to(:manage, Spree::ReimbursementType) }
+    it { is_expected.not_to be_able_to(:manage, Spree::ReturnReason) }
+  end
+end

data/spec/models/spree/permission_sets/dashboard_display_spec.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::DashboardDisplay do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:admin, :dashboards) }
+    it { is_expected.to be_able_to(:home, :dashboards) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:admin, :dashboards) }
+    it { is_expected.not_to be_able_to(:home, :dashboards) }
+  end
+end

data/spec/models/spree/permission_sets/order_display_spec.rb

@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::OrderDisplay do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:display, Spree::Order) }
+    it { is_expected.to be_able_to(:display, Spree::Payment) }
+    it { is_expected.to be_able_to(:display, Spree::Shipment) }
+    it { is_expected.to be_able_to(:display, Spree::Adjustment) }
+    it { is_expected.to be_able_to(:display, Spree::LineItem) }
+    it { is_expected.to be_able_to(:display, Spree::ReturnAuthorization) }
+    it { is_expected.to be_able_to(:display, Spree::CustomerReturn) }
+    it { is_expected.to be_able_to(:admin, Spree::Order) }
+    it { is_expected.to be_able_to(:admin, Spree::Payment) }
+    it { is_expected.to be_able_to(:admin, Spree::Shipment) }
+    it { is_expected.to be_able_to(:admin, Spree::Adjustment) }
+    it { is_expected.to be_able_to(:admin, Spree::LineItem) }
+    it { is_expected.to be_able_to(:admin, Spree::ReturnAuthorization) }
+    it { is_expected.to be_able_to(:admin, Spree::CustomerReturn) }
+    it { is_expected.to be_able_to(:edit, Spree::Order) }
+    it { is_expected.to be_able_to(:cart, Spree::Order) }
+    it { is_expected.to be_able_to(:display, Spree::Reimbursement) }
+    it { is_expected.to be_able_to(:display, Spree::ReturnItem) }
+    it { is_expected.to be_able_to(:display, Spree::Refund) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:display, Spree::Order) }
+    it { is_expected.not_to be_able_to(:display, Spree::Payment) }
+    it { is_expected.not_to be_able_to(:display, Spree::Shipment) }
+    it { is_expected.not_to be_able_to(:display, Spree::Adjustment) }
+    it { is_expected.not_to be_able_to(:display, Spree::LineItem) }
+    it { is_expected.not_to be_able_to(:display, Spree::ReturnAuthorization) }
+    it { is_expected.not_to be_able_to(:display, Spree::CustomerReturn) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Order) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Payment) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Shipment) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Adjustment) }
+    it { is_expected.not_to be_able_to(:admin, Spree::LineItem) }
+    it { is_expected.not_to be_able_to(:admin, Spree::ReturnAuthorization) }
+    it { is_expected.not_to be_able_to(:admin, Spree::CustomerReturn) }
+    it { is_expected.not_to be_able_to(:cart, Spree::Order) }
+    it { is_expected.not_to be_able_to(:display, Spree::Reimbursement) }
+    it { is_expected.not_to be_able_to(:display, Spree::ReturnItem) }
+    it { is_expected.not_to be_able_to(:display, Spree::Refund) }
+  end
+end

data/spec/models/spree/permission_sets/order_management_spec.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::OrderManagement do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:manage, Spree::Order) }
+    it { is_expected.to be_able_to(:manage, Spree::Payment) }
+    it { is_expected.to be_able_to(:manage, Spree::Shipment) }
+    it { is_expected.to be_able_to(:manage, Spree::Adjustment) }
+    it { is_expected.to be_able_to(:manage, Spree::LineItem) }
+    it { is_expected.to be_able_to(:manage, Spree::ReturnAuthorization) }
+    it { is_expected.to be_able_to(:manage, Spree::CustomerReturn) }
+    it { is_expected.to be_able_to(:display, Spree::ReimbursementType) }
+    it { is_expected.to be_able_to(:manage, Spree::OrderCancellations) }
+    it { is_expected.to be_able_to(:manage, Spree::Reimbursement) }
+    it { is_expected.to be_able_to(:manage, Spree::ReturnItem) }
+    it { is_expected.to be_able_to(:manage, Spree::Refund) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:manage, Spree::Order) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Payment) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Shipment) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Adjustment) }
+    it { is_expected.not_to be_able_to(:manage, Spree::LineItem) }
+    it { is_expected.not_to be_able_to(:manage, Spree::ReturnAuthorization) }
+    it { is_expected.not_to be_able_to(:manage, Spree::CustomerReturn) }
+    it { is_expected.not_to be_able_to(:display, Spree::ReimbursementType) }
+    it { is_expected.not_to be_able_to(:manage, Spree::OrderCancellations) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Reimbursement) }
+    it { is_expected.not_to be_able_to(:manage, Spree::ReturnItem) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Refund) }
+  end
+end

data/spec/models/spree/permission_sets/product_display_spec.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::ProductDisplay do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:display, Spree::Product) }
+    it { is_expected.to be_able_to(:display, Spree::Image) }
+    it { is_expected.to be_able_to(:display, Spree::Variant) }
+    it { is_expected.to be_able_to(:display, Spree::OptionValue) }
+    it { is_expected.to be_able_to(:display, Spree::ProductProperty) }
+    it { is_expected.to be_able_to(:display, Spree::OptionType) }
+    it { is_expected.to be_able_to(:display, Spree::Property) }
+    it { is_expected.to be_able_to(:display, Spree::Taxonomy) }
+    it { is_expected.to be_able_to(:display, Spree::Taxon) }
+    it { is_expected.to be_able_to(:admin, Spree::Product) }
+    it { is_expected.to be_able_to(:admin, Spree::Image) }
+    it { is_expected.to be_able_to(:admin, Spree::Variant) }
+    it { is_expected.to be_able_to(:admin, Spree::OptionValue) }
+    it { is_expected.to be_able_to(:admin, Spree::ProductProperty) }
+    it { is_expected.to be_able_to(:admin, Spree::OptionType) }
+    it { is_expected.to be_able_to(:admin, Spree::Property) }
+    it { is_expected.to be_able_to(:admin, Spree::Taxonomy) }
+    it { is_expected.to be_able_to(:admin, Spree::Taxon) }
+    it { is_expected.to be_able_to(:edit, Spree::Product) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:display, Spree::Product) }
+    it { is_expected.not_to be_able_to(:display, Spree::Image) }
+    it { is_expected.not_to be_able_to(:display, Spree::Variant) }
+    it { is_expected.not_to be_able_to(:display, Spree::OptionValue) }
+    it { is_expected.not_to be_able_to(:display, Spree::ProductProperty) }
+    it { is_expected.not_to be_able_to(:display, Spree::OptionType) }
+    it { is_expected.not_to be_able_to(:display, Spree::Property) }
+    it { is_expected.not_to be_able_to(:display, Spree::Taxonomy) }
+    it { is_expected.not_to be_able_to(:display, Spree::Taxon) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Product) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Image) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Variant) }
+    it { is_expected.not_to be_able_to(:admin, Spree::OptionValue) }
+    it { is_expected.not_to be_able_to(:admin, Spree::ProductProperty) }
+    it { is_expected.not_to be_able_to(:admin, Spree::OptionType) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Property) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Taxonomy) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Taxon) }
+    it { is_expected.not_to be_able_to(:edit, Spree::Product) }
+  end
+end

data/spec/models/spree/permission_sets/product_management_spec.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::ProductManagement do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:manage, Spree::Product) }
+    it { is_expected.to be_able_to(:manage, Spree::Image) }
+    it { is_expected.to be_able_to(:manage, Spree::Variant) }
+    it { is_expected.to be_able_to(:manage, Spree::OptionValue) }
+    it { is_expected.to be_able_to(:manage, Spree::ProductProperty) }
+    it { is_expected.to be_able_to(:manage, Spree::OptionType) }
+    it { is_expected.to be_able_to(:manage, Spree::Property) }
+    it { is_expected.to be_able_to(:manage, Spree::Taxonomy) }
+    it { is_expected.to be_able_to(:manage, Spree::Taxon) }
+    it { is_expected.to be_able_to(:manage, Spree::Classification) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:manage, Spree::Product) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Image) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Variant) }
+    it { is_expected.not_to be_able_to(:manage, Spree::OptionValue) }
+    it { is_expected.not_to be_able_to(:manage, Spree::ProductProperty) }
+    it { is_expected.not_to be_able_to(:manage, Spree::OptionType) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Property) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Taxonomy) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Taxon) }
+    it { is_expected.not_to be_able_to(:manage, Spree::Classification) }
+  end
+end

data/spec/models/spree/permission_sets/promotion_display_spec.rb

@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::PromotionDisplay do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:display, Spree::Promotion) }
+    it { is_expected.to be_able_to(:display, Spree::PromotionRule) }
+    it { is_expected.to be_able_to(:display, Spree::PromotionAction) }
+    it { is_expected.to be_able_to(:display, Spree::PromotionCategory) }
+    it { is_expected.to be_able_to(:display, Spree::PromotionCode) }
+    it { is_expected.to be_able_to(:admin, Spree::Promotion) }
+    it { is_expected.to be_able_to(:admin, Spree::PromotionRule) }
+    it { is_expected.to be_able_to(:admin, Spree::PromotionAction) }
+    it { is_expected.to be_able_to(:admin, Spree::PromotionCategory) }
+    it { is_expected.to be_able_to(:admin, Spree::PromotionCode) }
+    it { is_expected.to be_able_to(:edit, Spree::Promotion) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:display, Spree::Promotion) }
+    it { is_expected.not_to be_able_to(:display, Spree::PromotionRule) }
+    it { is_expected.not_to be_able_to(:display, Spree::PromotionAction) }
+    it { is_expected.not_to be_able_to(:display, Spree::PromotionCategory) }
+    it { is_expected.not_to be_able_to(:display, Spree::PromotionCode) }
+    it { is_expected.not_to be_able_to(:admin, Spree::Promotion) }
+    it { is_expected.not_to be_able_to(:admin, Spree::PromotionRule) }
+    it { is_expected.not_to be_able_to(:admin, Spree::PromotionAction) }
+    it { is_expected.not_to be_able_to(:admin, Spree::PromotionCategory) }
+    it { is_expected.not_to be_able_to(:admin, Spree::PromotionCode) }
+    it { is_expected.not_to be_able_to(:edit, Spree::Promotion) }
+  end
+end

data/spec/models/spree/permission_sets/promotion_management_spec.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::PromotionManagement do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:manage, Spree::Promotion) }
+    it { is_expected.to be_able_to(:manage, Spree::PromotionRule) }
+    it { is_expected.to be_able_to(:manage, Spree::PromotionAction) }
+    it { is_expected.to be_able_to(:manage, Spree::PromotionCategory) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:manage, Spree::Promotion) }
+    it { is_expected.not_to be_able_to(:manage, Spree::PromotionRule) }
+    it { is_expected.not_to be_able_to(:manage, Spree::PromotionAction) }
+    it { is_expected.not_to be_able_to(:manage, Spree::PromotionCategory) }
+  end
+end

data/spec/models/spree/permission_sets/restricted_stock_display_spec.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::RestrictedStockDisplay do
+  let(:ability) { Spree::Ability.new(user) }
+  let(:user) { create :user }
+
+  subject { ability }
+
+  let!(:variant) { create :variant }
+
+  let(:sl1) { create :stock_location, active: false }
+  let(:sl2) { create :stock_location, active: false }
+
+  let(:item1) { variant.stock_items.where(stock_location_id: sl1.id).first }
+  let(:item2) { variant.stock_items.where(stock_location_id: sl2.id).first }
+
+  before do
+    user.stock_locations << sl1
+  end
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:display, sl1) }
+    it { is_expected.to_not be_able_to(:display, sl2) }
+
+    it { is_expected.to be_able_to(:display, item1) }
+    it { is_expected.to_not be_able_to(:display, item2) }
+  end
+
+  context "when not activated" do
+    it { is_expected.to_not be_able_to(:display, sl1) }
+    it { is_expected.to_not be_able_to(:display, sl2) }
+
+    it { is_expected.to_not be_able_to(:display, item1) }
+    it { is_expected.to_not be_able_to(:display, item2) }
+  end
+end

data/spec/models/spree/permission_sets/restricted_stock_management_spec.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::RestrictedStockManagement do
+  let(:ability) { Spree::Ability.new(user) }
+  let(:user) { create :user }
+
+  subject { ability }
+
+  let!(:variant) { create :variant }
+
+  let(:sl1) { create :stock_location, active: false }
+  let(:sl2) { create :stock_location, active: false }
+
+  let(:item1) { variant.stock_items.where(stock_location_id: sl1.id).first }
+  let(:item2) { variant.stock_items.where(stock_location_id: sl2.id).first }
+
+  before do
+    user.stock_locations << sl1
+  end
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:display, sl1) }
+    it { is_expected.to_not be_able_to(:display, sl2) }
+
+    it { is_expected.to be_able_to(:manage, item1) }
+    it { is_expected.to_not be_able_to(:manage, item2) }
+  end
+
+  context "when not activated" do
+    it { is_expected.to_not be_able_to(:display, sl1) }
+    it { is_expected.to_not be_able_to(:display, sl2) }
+
+    it { is_expected.to_not be_able_to(:manage, item1) }
+    it { is_expected.to_not be_able_to(:manage, item2) }
+  end
+end

data/spec/models/spree/permission_sets/stock_display_spec.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::StockDisplay do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:display, Spree::StockItem) }
+    it { is_expected.to be_able_to(:admin, Spree::StockItem) }
+    it { is_expected.to be_able_to(:display, Spree::StockLocation) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:display, Spree::StockItem) }
+    it { is_expected.not_to be_able_to(:admin, Spree::StockItem) }
+    it { is_expected.not_to be_able_to(:display, Spree::StockLocation) }
+  end
+end

data/spec/models/spree/permission_sets/stock_management_spec.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::StockManagement do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:manage, Spree::StockItem) }
+    it { is_expected.to be_able_to(:display, Spree::StockLocation) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:manage, Spree::StockItem) }
+    it { is_expected.not_to be_able_to(:display, Spree::StockLocation) }
+  end
+end

data/spec/models/spree/permission_sets/user_display_spec.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::UserDisplay do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:display, Spree.user_class) }
+    it { is_expected.to be_able_to(:admin, Spree.user_class) }
+    it { is_expected.to be_able_to(:edit, Spree.user_class) }
+    it { is_expected.to be_able_to(:addresses, Spree.user_class) }
+    it { is_expected.to be_able_to(:orders, Spree.user_class) }
+    it { is_expected.to be_able_to(:items, Spree.user_class) }
+    it { is_expected.to be_able_to(:display, Spree::StoreCredit) }
+    it { is_expected.to be_able_to(:admin, Spree::StoreCredit) }
+    it { is_expected.to be_able_to(:display, Spree::Role) }
+    it { is_expected.not_to be_able_to(:delete, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:destroy, Spree.user_class) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:display, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:admin, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:edit, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:addresses, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:orders, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:items, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:display, Spree::StoreCredit) }
+    it { is_expected.not_to be_able_to(:admin, Spree::StoreCredit) }
+    it { is_expected.not_to be_able_to(:display, Spree::Role) }
+  end
+end

data/spec/models/spree/permission_sets/user_management_spec.rb

@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+
+RSpec.describe Spree::PermissionSets::UserManagement do
+  let(:ability) { DummyAbility.new }
+
+  subject { ability }
+
+  context "when activated" do
+    before do
+      described_class.new(ability).activate!
+    end
+
+    it { is_expected.to be_able_to(:admin, Spree.user_class) }
+    it { is_expected.to be_able_to(:display, Spree.user_class) }
+    it { is_expected.to be_able_to(:create, Spree.user_class) }
+    it { is_expected.to be_able_to(:update, Spree.user_class) }
+    it { is_expected.to be_able_to(:save_in_address_book, Spree.user_class) }
+    it { is_expected.to be_able_to(:remove_from_address_book, Spree.user_class) }
+    it { is_expected.to be_able_to(:addresses, Spree.user_class) }
+    it { is_expected.to be_able_to(:orders, Spree.user_class) }
+    it { is_expected.to be_able_to(:items, Spree.user_class) }
+
+    context 'when the user does not have a role' do
+      let(:user) { create(:user) }
+      it { is_expected.to be_able_to(:update_email, user) }
+    end
+
+    context 'when the user has a role' do
+      let(:user) { create(:user, spree_roles: [create(:role)]) }
+      it { is_expected.not_to be_able_to(:update_email, user) }
+    end
+
+    it { is_expected.not_to be_able_to(:delete, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:destroy, Spree.user_class) }
+
+    it { is_expected.to be_able_to(:manage, Spree::StoreCredit) }
+    it { is_expected.to be_able_to(:display, Spree::Role) }
+  end
+
+  context "when not activated" do
+    it { is_expected.not_to be_able_to(:manage, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:delete, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:destroy, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:update, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:save_in_address_book, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:remove_from_address_book, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:addresses, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:orders, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:items, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:destroy, Spree.user_class) }
+    it { is_expected.not_to be_able_to(:manage, Spree::StoreCredit) }
+    it { is_expected.not_to be_able_to(:display, Spree::Role) }
+  end
+end