Merge branch 'master' into 3618-column-ordering
[arvados.git] / apps / workbench / test / functional / projects_controller_test.rb
1 require 'test_helper'
2
3 class ProjectsControllerTest < ActionController::TestCase
4   test "invited user is asked to sign user agreements on front page" do
5     get :index, {}, session_for(:inactive)
6     assert_response :redirect
7     assert_match(/^#{Regexp.escape(user_agreements_url)}\b/,
8                  @response.redirect_url,
9                  "Inactive user was not redirected to user_agreements page")
10   end
11
12   test "uninvited user is asked to wait for activation" do
13     get :index, {}, session_for(:inactive_uninvited)
14     assert_response :redirect
15     assert_match(/^#{Regexp.escape(inactive_users_url)}\b/,
16                  @response.redirect_url,
17                  "Uninvited user was not redirected to inactive user page")
18   end
19
20   [[:active, true],
21    [:project_viewer, false]].each do |which_user, should_show|
22     test "create subproject button #{'not ' unless should_show} shown to #{which_user}" do
23       readonly_project_uuid = api_fixture('groups')['aproject']['uuid']
24       get :show, {
25         id: readonly_project_uuid
26       }, session_for(which_user)
27       buttons = css_select('[data-method=post]').select do |el|
28         el.attributes['href'].match /project.*owner_uuid.*#{readonly_project_uuid}/
29       end
30       if should_show
31         assert_not_empty(buttons, "did not offer to create a subproject")
32       else
33         assert_empty(buttons.collect(&:to_s),
34                      "offered to create a subproject in a non-writable project")
35       end
36     end
37   end
38
39   test "sharing a project with a user and group" do
40     uuid_list = [api_fixture("groups")["future_project_viewing_group"]["uuid"],
41                  api_fixture("users")["future_project_user"]["uuid"]]
42     post(:share_with, {
43            id: api_fixture("groups")["asubproject"]["uuid"],
44            uuids: uuid_list,
45            format: "json"},
46          session_for(:active))
47     assert_response :success
48     assert_equal(uuid_list, json_response["success"])
49   end
50
51   test "user with project read permission can't add permissions" do
52     share_uuid = api_fixture("users")["spectator"]["uuid"]
53     post(:share_with, {
54            id: api_fixture("groups")["aproject"]["uuid"],
55            uuids: [share_uuid],
56            format: "json"},
57          session_for(:project_viewer))
58     assert_response 422
59     assert(json_response["errors"].andand.
60              any? { |msg| msg.start_with?("#{share_uuid}: ") },
61            "JSON response missing properly formatted sharing error")
62   end
63
64   def user_can_manage(user_sym, group_key)
65     get(:show, {id: api_fixture("groups")[group_key]["uuid"]},
66         session_for(user_sym))
67     is_manager = assigns(:user_is_manager)
68     assert_not_nil(is_manager, "user_is_manager flag not set")
69     if not is_manager
70       assert_empty(assigns(:share_links),
71                    "non-manager has share links set")
72     end
73     is_manager
74   end
75
76   test "admin can_manage aproject" do
77     assert user_can_manage(:admin, "aproject")
78   end
79
80   test "owner can_manage aproject" do
81     assert user_can_manage(:active, "aproject")
82   end
83
84   test "owner can_manage asubproject" do
85     assert user_can_manage(:active, "asubproject")
86   end
87
88   test "viewer can't manage aproject" do
89     refute user_can_manage(:project_viewer, "aproject")
90   end
91
92   test "viewer can't manage asubproject" do
93     refute user_can_manage(:project_viewer, "asubproject")
94   end
95
96   test "subproject_admin can_manage asubproject" do
97     assert user_can_manage(:subproject_admin, "asubproject")
98   end
99
100   test "project admin can remove items from the project" do
101     coll_key = "collection_to_remove_from_subproject"
102     coll_uuid = api_fixture("collections")[coll_key]["uuid"]
103     delete(:remove_item,
104            { id: api_fixture("groups")["asubproject"]["uuid"],
105              item_uuid: coll_uuid,
106              format: "js" },
107            session_for(:subproject_admin))
108     assert_response :success
109     assert_match(/\b#{coll_uuid}\b/, @response.body,
110                  "removed object not named in response")
111   end
112
113   test 'projects#show tab infinite scroll partial obeys limit' do
114     get_contents_rows(limit: 1, filters: [['uuid','is_a',['arvados#job']]])
115     assert_response :success
116     assert_equal(1, json_response['content'].scan('<tr').count,
117                  "Did not get exactly one row")
118   end
119
120   ['', ' asc', ' desc'].each do |direction|
121     test "projects#show tab partial orders correctly by #{direction}" do
122       _test_tab_content_order direction
123     end
124   end
125
126   def _test_tab_content_order direction
127     get_contents_rows(limit: 100,
128                       order: "created_at#{direction}",
129                       filters: [['uuid','is_a',['arvados#job',
130                                                 'arvados#pipelineInstance']]])
131     assert_response :success
132     not_grouped_by_kind = nil
133     last_timestamp = nil
134     last_kind = nil
135     found_kind = {}
136     json_response['content'].scan /<tr[^>]+>/ do |tr_tag|
137       found_timestamps = 0
138       tr_tag.scan(/\ data-object-created-at=\"(.*?)\"/).each do |t,|
139         if last_timestamp
140           correct_operator = / desc$/ =~ direction ? :>= : :<=
141           assert_operator(last_timestamp, correct_operator, t,
142                           "Rows are not sorted by created_at#{direction}")
143         end
144         last_timestamp = t
145         found_timestamps += 1
146       end
147       assert_equal(1, found_timestamps,
148                    "Content row did not have exactly one timestamp")
149
150       # Confirm that the test for timestamp ordering couldn't have
151       # passed merely because the test fixtures have convenient
152       # timestamps (e.g., there is only one pipeline and one job in
153       # the project being tested, or there are no pipelines at all in
154       # the project being tested):
155       tr_tag.scan /\ data-kind=\"(.*?)\"/ do |kind|
156         if last_kind and last_kind != kind and found_kind[kind]
157           # We saw this kind before, then a different kind, then
158           # this kind again. That means objects are not grouped by
159           # kind.
160           not_grouped_by_kind = true
161         end
162         found_kind[kind] ||= 0
163         found_kind[kind] += 1
164         last_kind = kind
165       end
166     end
167     assert_equal(true, not_grouped_by_kind,
168                  "Could not confirm that results are not grouped by kind")
169   end
170
171   def get_contents_rows params
172     params = {
173       id: api_fixture('users')['active']['uuid'],
174       partial: :contents_rows,
175       format: :json,
176     }.merge(params)
177     encoded_params = Hash[params.map { |k,v|
178                             [k, (v.is_a?(Array) || v.is_a?(Hash)) ? v.to_json : v]
179                           }]
180     get :show, encoded_params, session_for(:active)
181   end
182 end