mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-01-27 22:49:56 -05:00
231 lines
9.7 KiB
JavaScript
231 lines
9.7 KiB
JavaScript
var should = require('should'),
|
|
sinon = require('sinon'),
|
|
testUtils = require('../../utils'),
|
|
Promise = require('bluebird'),
|
|
models = require('../../../server/models'),
|
|
providers = require('../../../server/permissions/providers'),
|
|
|
|
sandbox = sinon.sandbox.create();
|
|
|
|
describe('Permission Providers', function () {
|
|
before(function () {
|
|
models.init();
|
|
});
|
|
|
|
afterEach(function () {
|
|
sandbox.restore();
|
|
});
|
|
|
|
describe('User', function () {
|
|
it('errors if user cannot be found', function (done) {
|
|
var findUserSpy = sandbox.stub(models.User, 'findOne').callsFake(function () {
|
|
return Promise.resolve();
|
|
});
|
|
|
|
providers.user(1)
|
|
.then(function () {
|
|
done(new Error('Should have thrown a user not found error'));
|
|
})
|
|
.catch(function (err) {
|
|
findUserSpy.callCount.should.eql(1);
|
|
err.errorType.should.eql('NotFoundError');
|
|
done();
|
|
});
|
|
});
|
|
|
|
it('can load user with role, and permissions', function (done) {
|
|
// This test requires quite a lot of unique setup work
|
|
var findUserSpy = sandbox.stub(models.User, 'findOne').callsFake(function () {
|
|
// Create a fake model
|
|
var fakeUser = models.User.forge(testUtils.DataGenerator.Content.users[0]),
|
|
// Roles & Permissions need to be collections
|
|
fakeAdminRole = models.Roles.forge(testUtils.DataGenerator.Content.roles[0]),
|
|
fakeAdminRolePermissions = models.Permissions.forge(testUtils.DataGenerator.Content.permissions);
|
|
|
|
// ## Fake the relations
|
|
// User is related to roles & permissions
|
|
fakeUser.relations = {
|
|
roles: fakeAdminRole,
|
|
permissions: fakeAdminRolePermissions
|
|
};
|
|
// We use this inside toJSON.
|
|
fakeUser.include = ['roles', 'permissions', 'roles.permissions'];
|
|
|
|
return Promise.resolve(fakeUser);
|
|
});
|
|
|
|
// Get permissions for the user
|
|
providers.user(1)
|
|
.then(function (res) {
|
|
findUserSpy.callCount.should.eql(1);
|
|
|
|
res.should.be.an.Object().with.properties('permissions', 'roles');
|
|
|
|
res.permissions.should.be.an.Array().with.lengthOf(10);
|
|
res.roles.should.be.an.Array().with.lengthOf(1);
|
|
|
|
// @TODO fix this!
|
|
// Permissions is an array of models
|
|
// Roles is a JSON array
|
|
res.permissions[0].should.be.an.Object().with.properties('attributes', 'id');
|
|
res.roles[0].should.be.an.Object().with.properties('id', 'name', 'description');
|
|
res.permissions[0].should.be.instanceOf(models.Base.Model);
|
|
res.roles[0].should.not.be.instanceOf(models.Base.Model);
|
|
|
|
done();
|
|
})
|
|
.catch(done);
|
|
});
|
|
|
|
it('can load user with role, and role.permissions', function (done) {
|
|
// This test requires quite a lot of unique setup work
|
|
var findUserSpy = sandbox.stub(models.User, 'findOne').callsFake(function () {
|
|
// Create a fake model
|
|
var fakeUser = models.User.forge(testUtils.DataGenerator.Content.users[0]),
|
|
// Roles & Permissions need to be collections
|
|
fakeAdminRole = models.Roles.forge(testUtils.DataGenerator.Content.roles[0]),
|
|
fakeAdminRolePermissions = models.Permissions.forge(testUtils.DataGenerator.Content.permissions);
|
|
|
|
// ## Fake the relations
|
|
// Roles are related to permissions
|
|
fakeAdminRole.models[0].relations = {
|
|
permissions: fakeAdminRolePermissions
|
|
};
|
|
// User is related to roles
|
|
fakeUser.relations = {
|
|
roles: fakeAdminRole
|
|
};
|
|
// We use this inside toJSON.
|
|
fakeUser.include = ['roles', 'permissions', 'roles.permissions'];
|
|
|
|
return Promise.resolve(fakeUser);
|
|
});
|
|
|
|
// Get permissions for the user
|
|
providers.user(1)
|
|
.then(function (res) {
|
|
findUserSpy.callCount.should.eql(1);
|
|
|
|
res.should.be.an.Object().with.properties('permissions', 'roles');
|
|
|
|
res.permissions.should.be.an.Array().with.lengthOf(10);
|
|
res.roles.should.be.an.Array().with.lengthOf(1);
|
|
|
|
// @TODO fix this!
|
|
// Permissions is an array of models
|
|
// Roles is a JSON array
|
|
res.permissions[0].should.be.an.Object().with.properties('attributes', 'id');
|
|
res.roles[0].should.be.an.Object().with.properties('id', 'name', 'description');
|
|
res.permissions[0].should.be.instanceOf(models.Base.Model);
|
|
res.roles[0].should.not.be.instanceOf(models.Base.Model);
|
|
|
|
done();
|
|
})
|
|
.catch(done);
|
|
});
|
|
|
|
it('can load user with role, permissions and role.permissions and deduplicate them', function (done) {
|
|
// This test requires quite a lot of unique setup work
|
|
var findUserSpy = sandbox.stub(models.User, 'findOne').callsFake(function () {
|
|
// Create a fake model
|
|
var fakeUser = models.User.forge(testUtils.DataGenerator.Content.users[0]),
|
|
// Roles & Permissions need to be collections
|
|
fakeAdminRole = models.Roles.forge(testUtils.DataGenerator.Content.roles[0]),
|
|
fakeAdminRolePermissions = models.Permissions.forge(testUtils.DataGenerator.Content.permissions);
|
|
|
|
// ## Fake the relations
|
|
// Roles are related to permissions
|
|
fakeAdminRole.models[0].relations = {
|
|
permissions: fakeAdminRolePermissions
|
|
};
|
|
// User is related to roles and permissions
|
|
fakeUser.relations = {
|
|
roles: fakeAdminRole,
|
|
permissions: fakeAdminRolePermissions
|
|
};
|
|
// We use this inside toJSON.
|
|
fakeUser.include = ['roles', 'permissions', 'roles.permissions'];
|
|
|
|
return Promise.resolve(fakeUser);
|
|
});
|
|
|
|
// Get permissions for the user
|
|
providers.user(1)
|
|
.then(function (res) {
|
|
findUserSpy.callCount.should.eql(1);
|
|
|
|
res.should.be.an.Object().with.properties('permissions', 'roles');
|
|
|
|
res.permissions.should.be.an.Array().with.lengthOf(10);
|
|
res.roles.should.be.an.Array().with.lengthOf(1);
|
|
|
|
// @TODO fix this!
|
|
// Permissions is an array of models
|
|
// Roles is a JSON array
|
|
res.permissions[0].should.be.an.Object().with.properties('attributes', 'id');
|
|
res.roles[0].should.be.an.Object().with.properties('id', 'name', 'description');
|
|
res.permissions[0].should.be.instanceOf(models.Base.Model);
|
|
res.roles[0].should.not.be.instanceOf(models.Base.Model);
|
|
|
|
done();
|
|
})
|
|
.catch(done);
|
|
});
|
|
});
|
|
|
|
describe('App', function () {
|
|
// @TODO make this consistent or sane or something!
|
|
// Why is this an empty array, when the success is an object?
|
|
// Also why is this an empty array when for users we error?!
|
|
it('returns empty array if app cannot be found!', function (done) {
|
|
var findAppSpy = sandbox.stub(models.App, 'findOne').callsFake(function () {
|
|
return Promise.resolve();
|
|
});
|
|
|
|
providers.app('test')
|
|
.then(function (res) {
|
|
findAppSpy.callCount.should.eql(1);
|
|
res.should.be.an.Array().with.lengthOf(0);
|
|
done();
|
|
})
|
|
.catch(done);
|
|
});
|
|
|
|
it('can load user with role, and permissions', function (done) {
|
|
// This test requires quite a lot of unique setup work
|
|
var findAppSpy = sandbox.stub(models.App, 'findOne').callsFake(function () {
|
|
var fakeApp = models.App.forge(testUtils.DataGenerator.Content.apps[0]),
|
|
fakePermissions = models.Permissions.forge(testUtils.DataGenerator.Content.permissions);
|
|
|
|
// ## Fake the relations
|
|
fakeApp.relations = {
|
|
permissions: fakePermissions
|
|
};
|
|
fakeApp.include = ['permissions'];
|
|
|
|
return Promise.resolve(fakeApp);
|
|
});
|
|
|
|
// Get permissions for the app
|
|
providers.app('kudos')
|
|
.then(function (res) {
|
|
findAppSpy.callCount.should.eql(1);
|
|
|
|
res.should.be.an.Object().with.properties('permissions');
|
|
|
|
res.permissions.should.be.an.Array().with.lengthOf(10);
|
|
should.not.exist(res.roles);
|
|
|
|
// @TODO fix this!
|
|
// Permissions is an array of models
|
|
// Roles is a JSON array
|
|
res.permissions[0].should.be.an.Object().with.properties('attributes', 'id');
|
|
res.permissions[0].should.be.instanceOf(models.Base.Model);
|
|
|
|
done();
|
|
})
|
|
.catch(done);
|
|
});
|
|
});
|
|
});
|
|
|