spree_marketplace 3.1.0

data/spec/features/admin/settings_spec.rb

@@ -0,0 +1,29 @@
+require 'spec_helper'
+
+describe 'Admin - Marketplace Settings', js: true do
+
+  before do
+    login_user create(:admin_user)
+
+    visit spree.admin_path
+    within 'ul[data-hook=admin_tabs]' do
+      click_link 'Configuration'
+    end
+    within 'ul[data-hook=admin_configurations_sidebar_menu]' do
+      click_link 'Marketplace Settings'
+    end
+  end
+
+  it 'should be able to be updated' do
+    # Change settings
+    check 'allow_signup'
+    click_button 'Update'
+    expect(page).to have_content('Marketplace settings successfully updated.')
+
+    # Verify update saved properly by reversing checkboxes or checking field values.
+    uncheck 'allow_signup'
+    click_button 'Update'
+    expect(page).to have_content('Marketplace settings successfully updated.')
+  end
+
+end

data/spec/features/admin/suppliers_controller_spec.rb

@@ -0,0 +1,43 @@
+require "spec_helper"
+
+feature "Admin - Suppliers", js: true do
+
+  before do
+    country = create(:country, name: "United States")
+    create(:state, name: "Vermont", country: country)
+    @supplier = create :supplier
+  end
+
+  context "as an Admin" do
+
+    before do
+      login_user create(:admin_user)
+      visit spree.admin_path
+      within "ul[data-hook=admin_tabs]" do
+        click_link "Suppliers"
+      end
+      page.should have_content("Listing Suppliers")
+    end
+
+    scenario "should be able to create new supplier" do
+      click_link "New Supplier"
+      check "supplier_active"
+      fill_in "supplier[name]", with: "Test Supplier"
+      fill_in "supplier[email]", with: "spree@example.com"
+      fill_in "supplier[url]", with: "http://www.test.com"
+      fill_in "supplier[commission_flat_rate]", with: "0"
+      fill_in "supplier[commission_percentage]", with: "0"
+      fill_in "supplier[address_attributes][firstname]", with: "First"
+      fill_in "supplier[address_attributes][lastname]", with: "Last"
+      fill_in "supplier[address_attributes][address1]", with: "1 Test Drive"
+      fill_in "supplier[address_attributes][city]", with: "Test City"
+      fill_in "supplier[address_attributes][zipcode]", with: "55555"
+      select2 "United States", from: "Country"
+      select2 "Vermont", from: "State"
+      fill_in "supplier[address_attributes][phone]", with: "555-555-5555"
+      click_button "Create"
+      page.should have_content('Supplier "Test Supplier" has been successfully created!')
+    end
+
+  end
+end

data/spec/features/supplier_signup_spec.rb

@@ -0,0 +1,134 @@
+require 'spec_helper'
+
+feature 'Supplier Signup', js: true do
+
+  scenario 'existing supplier' do
+    @user = create(:user)
+    create(:supplier, email: @user.email, users: [@user])
+    login_user @user
+    visit spree.new_supplier_path
+    page.current_path.should eql(spree.account_path)
+    page.should have_content("You've already signed up to become a supplier.")
+  end
+
+  context 'as guest user' do
+
+    after do
+      SpreeMarketplace::Config.set(allow_signup: false)
+    end
+
+    before do
+      SpreeMarketplace::Config.set(allow_signup: true)
+      visit spree.new_supplier_path
+      page.should have_content('LOGIN')
+    end
+
+    scenario 'as business' do
+      fill_in 'supplier[name]', with: 'Spree'
+      fill_in 'supplier[first_name]', with: 'First'
+      fill_in 'supplier[last_name]', with: 'Last'
+      fill_in 'supplier[email]', with: 'spree@example.com'
+      fill_in 'supplier[password]', with: 'password'
+      fill_in 'supplier[password_confirmation]', with: 'password'
+      fill_in 'supplier[tax_id]', with: '000000000'
+      click_button 'Sign Up'
+      page.should have_content('Thank you for signing up!')
+      page.should_not have_content('LOGIN')
+    end
+
+    scenario 'as individual' do
+      fill_in 'supplier[name]', with: 'Spree'
+      fill_in 'supplier[first_name]', with: 'First'
+      fill_in 'supplier[last_name]', with: 'Last'
+      fill_in 'supplier[email]', with: 'spree@example.com'
+      fill_in 'supplier[password]', with: 'password'
+      fill_in 'supplier[password_confirmation]', with: 'password'
+      click_button 'Sign Up'
+      page.should have_content('Thank you for signing up!')
+      page.should_not have_content('LOGIN')
+    end
+
+    scenario 'should require correct password for existing user account' do
+      fill_in 'supplier[email]', with: create(:user).email
+      fill_in 'supplier[first_name]', with: 'First'
+      fill_in 'supplier[last_name]', with: 'Last'
+      fill_in 'supplier[password]', with: 'invalid'
+      fill_in 'supplier[password_confirmation]', with: 'invalid'
+      fill_in 'supplier[name]', with: 'Test Supplier'
+      fill_in 'supplier[tax_id]', with: '000000000'
+      click_on 'Sign Up'
+      expect(page).to have_content("Invalid password please sign in or sign up.")
+    end
+  end
+
+  context 'logged in' do
+
+    before do
+      @user = create(:user)
+      login_user @user
+    end
+
+    context 'w/ DropShipConfig[:allow_signup] == false (the default)' do
+
+      before do
+        SpreeMarketplace::Config.set(allow_signup: false)
+      end
+
+      scenario 'should not be able to create new supplier' do
+        visit spree.account_path
+        within '#user-info' do
+          page.should_not have_link 'Sign Up To Become A Supplier'
+        end
+        visit spree.new_supplier_path
+        page.should have_content('Authorization Failure')
+      end
+
+    end
+
+    context 'w/ DropShipConfig[:allow_signup] == true' do
+
+      after do
+        SpreeMarketplace::Config.set(allow_signup: false)
+      end
+
+      before do
+        SpreeMarketplace::Config.set(allow_signup: true)
+        visit spree.account_path
+      end
+
+      scenario 'should be able to create new individual supplier' do
+        within '#user-info' do
+          click_link 'Sign Up To Become A Supplier'
+        end
+        fill_in 'supplier[name]', with: 'Test Supplier'
+        fill_in 'supplier[first_name]', with: 'First'
+        fill_in 'supplier[last_name]', with: 'Last'
+        click_button 'Sign Up'
+        page.should have_content('Thank you for signing up!')
+      end
+
+      scenario 'should be able to create new business supplier' do
+        within '#user-info' do
+          click_link 'Sign Up To Become A Supplier'
+        end
+        fill_in 'supplier[name]', with: 'Test Supplier'
+        fill_in 'supplier[first_name]', with: 'First'
+        fill_in 'supplier[last_name]', with: 'Last'
+        fill_in 'supplier[tax_id]', with: '000000000'
+        click_button 'Sign Up'
+        page.should have_content('Thank you for signing up!')
+      end
+
+      scenario 'should display errors with invalid supplier' do
+        within '#user-info' do
+          click_link 'Sign Up To Become A Supplier'
+        end
+        click_button 'Sign Up'
+        page.should have_content('This field is required.')
+      end
+
+    end
+
+  end
+
+end

data/spec/models/spree/marketplace_ability_spec.rb

@@ -0,0 +1,32 @@
+require 'spec_helper'
+require 'cancan/matchers'
+require 'spree/testing_support/ability_helpers'
+
+describe Spree::MarketplaceAbility do
+
+  let(:user) { create(:user, supplier: create(:supplier)) }
+  let(:ability) { Spree::MarketplaceAbility.new(user) }
+  let(:token) { nil }
+
+  context 'for SupplierBankAccount' do
+    context 'requested by non supplier user' do
+      let(:ability) { Spree::MarketplaceAbility.new(create(:user)) }
+      let(:resource) { Spree::SupplierBankAccount.new }
+
+      it_should_behave_like 'admin denied'
+      it_should_behave_like 'access denied'
+    end
+
+    context 'requested by suppliers user' do
+      let(:resource) { Spree::SupplierBankAccount.new({supplier: user.supplier}, without_protection: true) }
+      it_should_behave_like 'admin granted'
+      it_should_behave_like 'access granted'
+    end
+
+    context 'requested by another suppliers user' do
+      let(:resource) { Spree::SupplierBankAccount.new({supplier: create(:supplier)}, without_protection: true) }
+      it_should_behave_like 'create only'
+    end
+  end
+
+end

data/spec/models/spree/supplier_ability_spec.rb

@@ -0,0 +1,337 @@
+require 'spec_helper'
+require 'cancan/matchers'
+require 'spree/testing_support/ability_helpers'
+
+describe Spree::SupplierAbility do
+
+  let(:user) { create(:user, supplier: create(:supplier)) }
+  let(:ability) { Spree::SupplierAbility.new(user) }
+  let(:token) { nil }
+
+  context 'for Dash' do
+    let(:resource) { Spree::Admin::OverviewController }
+
+    context 'requested by supplier' do
+      it_should_behave_like 'access denied'
+      it_should_behave_like 'no index allowed'
+      it_should_behave_like 'admin denied'
+    end
+  end
+
+  context 'for Digital' do
+    let(:resource) { Spree::Digital }
+
+    it_should_behave_like 'index allowed'
+    it_should_behave_like 'admin granted'
+
+    context 'requested by another suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! create(:supplier)
+        Spree::Digital.new(variant: p.reload.master)
+      }
+      it_should_behave_like 'create only'
+    end
+
+    context 'requested by suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! user.supplier
+        Spree::Digital.new(variant: p.reload.master)
+      }
+      it_should_behave_like 'access granted'
+    end
+  end
+
+  context 'for Image' do
+    let(:resource) { Spree::Image }
+
+    it_should_behave_like 'index allowed'
+    it_should_behave_like 'admin granted'
+
+    context 'requested by another suppliers user' do
+      let(:variant) {
+        p = create :product
+        p.add_supplier! create(:supplier)
+        p.master
+      }
+      let(:resource) { Spree::Image.new({viewable_id: variant.id, viewable_type: variant.class.to_s}, without_protection: true) }
+      it_should_behave_like 'create only'
+    end
+
+    context 'requested by suppliers user' do
+      let(:variant) {
+        p = create :product
+        p.add_supplier! user.supplier
+        p.master
+      }
+      let(:resource) { Spree::Image.new({viewable_id: variant.id, viewable_type: variant.class.to_s}, without_protection: true) }
+      it_should_behave_like 'access granted'
+    end
+  end
+
+  context 'for GroupPricing' do
+    let(:resource) { Spree::GroupPrice }
+
+    context 'requested by another suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! create(:supplier)
+        Spree::GroupPrice.new(variant: p.reload.master)
+      }
+      it_should_behave_like 'access denied'
+    end
+
+    context 'requested by suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! user.supplier
+        Spree::GroupPrice.new(variant: p.reload.master)
+      }
+      it_should_behave_like 'access granted'
+    end
+  end
+
+  context 'for Product' do
+    let(:resource) { Spree::Product }
+
+    it_should_behave_like 'index allowed'
+    it_should_behave_like 'admin granted'
+
+    context 'requested by another suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! create(:supplier)
+        p
+      }
+      it { ability.should be_able_to :create, resource }
+    end
+
+    context 'requested by suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! user.supplier
+        p.reload
+      }
+      it_should_behave_like 'access granted'
+    end
+  end
+
+  context 'for ProductProperty' do
+    let(:resource) { Spree::ProductProperty }
+
+    it_should_behave_like 'index allowed'
+    it_should_behave_like 'admin granted'
+
+    context 'requested by another suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! create(:supplier)
+        Spree::ProductProperty.new(product: p.reload)
+      }
+      it_should_behave_like 'access denied'
+    end
+
+    context 'requested by suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! user.supplier
+        Spree::ProductProperty.new(product: p.reload)
+      }
+      it_should_behave_like 'access granted'
+    end
+  end
+
+  context 'for Property' do
+    let(:resource) { Spree::Property }
+
+    it_should_behave_like 'admin granted'
+    it_should_behave_like 'read only'
+  end
+
+  context 'for Prototype' do
+    let(:resource) { Spree::Prototype }
+
+    it_should_behave_like 'admin granted'
+    it_should_behave_like 'read only'
+  end
+
+  context 'for Relation' do
+    let(:resource) { Spree::Relation }
+
+    it_should_behave_like 'index allowed'
+    it_should_behave_like 'admin granted'
+
+    context 'requested by another suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! create(:supplier)
+        Spree::Relation.new(relatable: p.reload)
+      }
+      it_should_behave_like 'access denied'
+    end
+
+    context 'requested by suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! user.supplier
+        Spree::Relation.new(relatable: p.reload)
+      }
+      it_should_behave_like 'access granted'
+    end
+  end
+
+  context 'for Shipment' do
+    context 'requested by another suppliers user' do
+      let(:resource) { Spree::Shipment.new({stock_location: create(:stock_location, supplier: create(:supplier))}, without_protection: true) }
+      it_should_behave_like 'access denied'
+      it_should_behave_like 'no index allowed'
+      it_should_behave_like 'admin denied'
+      it { ability.should_not be_able_to :ready, resource }
+      it { ability.should_not be_able_to :ship, resource }
+    end
+
+    context 'requested by suppliers user' do
+      context 'when order is complete' do
+        let(:resource) {
+          order = create(:completed_order_for_drop_ship_with_totals)
+          order.stock_locations.first.update_attribute :supplier, user.supplier
+          Spree::Shipment.new({order: order, stock_location: order.stock_locations.first }, without_protection: true)
+        }
+        it_should_behave_like 'access granted'
+        it_should_behave_like 'index allowed'
+        it_should_behave_like 'admin granted'
+        it { ability.should be_able_to :ready, resource }
+        it { ability.should be_able_to :ship, resource }
+      end
+
+      context 'when order is incomplete' do
+        let(:resource) { Spree::Shipment.new({stock_location: create(:stock_location, supplier: user.supplier)}, without_protection: true) }
+        it_should_behave_like 'access denied'
+        it { ability.should_not be_able_to :ready, resource }
+        it { ability.should_not be_able_to :ship, resource }
+      end
+    end
+  end
+
+  context 'for StockItem' do
+    let(:resource) { Spree::StockItem }
+
+    it_should_behave_like 'index allowed'
+    it_should_behave_like 'admin granted'
+
+    context 'requested by another suppliers user' do
+      let(:resource) {
+        p = create :product
+        supplier = create(:supplier)
+        p.add_supplier! supplier
+        Spree::StockItem.new(stock_location_id: supplier.stock_locations.first.id)
+      }
+      it_should_behave_like 'access denied'
+    end
+
+    context 'requested by suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! user.supplier
+        Spree::StockItem.new(stock_location_id: user.supplier.stock_locations.first.id)
+      }
+      it_should_behave_like 'access granted'
+    end
+  end
+
+  context 'for StockLocation' do
+    context 'requsted by another suppliers user' do
+      let(:resource) { Spree::StockLocation.new({supplier: create(:supplier)}, without_protection: true) }
+      it_should_behave_like 'create only'
+    end
+
+    context 'requested by suppliers user' do
+      let(:resource) { Spree::StockLocation.new({supplier: user.supplier}, without_protection: true) }
+      it_should_behave_like 'access granted'
+      it_should_behave_like 'admin granted'
+      it_should_behave_like 'index allowed'
+    end
+  end
+
+  context 'for StockMovement' do
+    let(:resource) { Spree::StockMovement }
+
+    it_should_behave_like 'index allowed'
+    it_should_behave_like 'admin granted'
+
+    context 'requested by another suppliers user' do
+      let(:resource) {
+        p = create :product
+        supplier = create(:supplier)
+        p.add_supplier! supplier
+        Spree::StockMovement.new stock_item: p.master.stock_items.where(stock_location_id: supplier.stock_locations.pluck(:id)).first
+      }
+      it_should_behave_like 'create only'
+    end
+
+    context 'requested by suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! user.supplier
+        Spree::StockMovement.new stock_item: p.master.stock_items.where(stock_location_id: user.supplier.stock_locations.pluck(:id)).first
+      }
+      it_should_behave_like 'access granted'
+    end
+  end
+
+  context 'for Supplier' do
+    context 'requested by any user' do
+      let(:ability) { Spree::SupplierAbility.new(create(:user)) }
+      let(:resource) { Spree::Supplier }
+
+      it_should_behave_like 'admin denied'
+
+      context 'w/ Marketplace Config[:allow_signup] == false (the default)' do
+        it_should_behave_like 'access denied'
+      end
+
+      context 'w/ Marketplace Config[:allow_signup] == true' do
+        after do
+          SpreeMarketplace::Config.set allow_signup: false
+        end
+        before do
+          SpreeMarketplace::Config.set allow_signup: true
+        end
+        it_should_behave_like 'create only'
+      end
+    end
+
+    context 'requested by suppliers user' do
+      let(:resource) { user.supplier }
+      it_should_behave_like 'admin granted'
+      it_should_behave_like 'update only'
+    end
+  end
+
+  context 'for Variant' do
+    let(:resource) { Spree::Variant }
+
+    it_should_behave_like 'index allowed'
+    it_should_behave_like 'admin granted'
+
+    context 'requested by another suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! create(:supplier)
+        p.reload.master
+      }
+      it_should_behave_like 'access denied'
+    end
+
+    context 'requested by suppliers user' do
+      let(:resource) {
+        p = create :product
+        p.add_supplier! user.supplier
+        p.reload.master
+      }
+      it_should_behave_like 'access granted'
+    end
+  end
+
+end