1 # Copyright (C) The Arvados Authors. All rights reserved.
3 # SPDX-License-Identifier: AGPL-3.0
5 require 'integration_helper'
7 class AnonymousAccessTest < ActionDispatch::IntegrationTest
8 # These tests don't do state-changing API calls. Save some time by
9 # skipping the database reset.
10 reset_api_fixtures :after_each_test, false
11 reset_api_fixtures :after_suite, true
15 Rails.configuration.Users.AnonymousUserToken = api_fixture('api_client_authorizations')['anonymous']['api_token']
18 PUBLIC_PROJECT = "/projects/#{api_fixture('groups')['anonymously_accessible_project']['uuid']}"
20 def verify_site_navigation_anonymous_enabled user, is_active
23 assert_text 'Unrestricted public data'
24 assert_selector 'a', text: 'Projects'
25 page.find("#projects-menu").click
26 within('.dropdown-menu') do
27 assert_selector 'a', text: 'Search all projects'
28 assert_selector "a[href=\"/projects/public\"]", text: 'Browse public projects'
29 assert_selector 'a', text: 'Add a new project'
30 assert_selector 'li[class="dropdown-header"]', text: 'My projects'
33 assert_text 'indicate that you have read and accepted the user agreement'
35 within('.navbar-fixed-top') do
36 assert_selector 'a', text: Rails.configuration.Workbench.SiteName.downcase
37 assert(page.has_link?("notifications-menu"), 'no user menu')
38 page.find("#notifications-menu").click
39 within('.dropdown-menu') do
40 assert_selector 'a', text: 'Log out'
44 assert_text 'Unrestricted public data'
45 within('.navbar-fixed-top') do
46 assert_text Rails.configuration.Workbench.SiteName.downcase
47 assert_no_selector 'a', text: Rails.configuration.Workbench.SiteName.downcase
48 assert_selector 'a', text: 'Log in'
49 assert_selector 'a', text: 'Browse public projects'
55 [nil, nil, false, false],
56 ['inactive', api_fixture('users')['inactive'], false, false],
57 ['active', api_fixture('users')['active'], true, true],
58 ].each do |token, user, is_active|
59 test "visit public project as user #{token.inspect} when anonymous browsing is enabled" do
63 visit page_with_token(token, PUBLIC_PROJECT)
66 verify_site_navigation_anonymous_enabled user, is_active
70 test "selection actions when anonymous user accesses shared project" do
73 assert_selector 'a', text: 'Description'
74 assert_selector 'a', text: 'Data collections'
75 assert_selector 'a', text: 'Pipelines and processes'
76 assert_selector 'a', text: 'Pipeline templates'
77 assert_selector 'a', text: 'Subprojects'
78 assert_selector 'a', text: 'Advanced'
79 assert_no_selector 'a', text: 'Other objects'
80 assert_no_selector 'button', text: 'Add data'
82 click_link 'Data collections'
83 click_button 'Selection'
84 within('.selection-action-container') do
85 assert_selector 'li', text: 'Compare selected'
86 assert_no_selector 'li', text: 'Create new collection with selected collections'
87 assert_no_selector 'li', text: 'Copy selected'
88 assert_no_selector 'li', text: 'Move selected'
89 assert_no_selector 'li', text: 'Remove selected'
93 test "anonymous user accesses data collections tab in shared project" do
95 click_link 'Data collections'
96 collection = api_fixture('collections')['user_agreement_in_anonymously_accessible_project']
97 assert_text 'GNU General Public License'
99 assert_selector 'a', text: 'Data collections'
101 # click on show collection
102 within "tr[data-object-uuid=\"#{collection['uuid']}\"]" do
107 assert_no_selector 'input', text: 'Create sharing link'
108 assert_no_text 'Sharing and permissions'
109 assert_no_selector 'a', text: 'Upload'
110 assert_no_selector 'button', 'Selection'
112 within '#collection_files tr,li', text: 'GNU_General_Public_License,_version_3.pdf' do
113 assert page.has_no_selector?('[value*="GNU_General_Public_License"]')
114 find 'a[title~=View]'
115 find 'a[title~=Download]'
120 need_selenium "phantomjs does not follow redirects reliably, maybe https://github.com/ariya/phantomjs/issues/10389"
121 magic = rand(2**512).to_s 36
122 owner = api_fixture('groups')['anonymously_accessible_project']['uuid']
123 col = upload_data_and_get_collection(magic, 'admin', "Hello\\040world.txt", owner)
124 visit '/collections/' + col.uuid
125 find('tr,li', text: 'Hello world.txt').
126 find('a[title~=View]').click
131 'running anonymously accessible cr',
134 test "anonymous user accesses pipelines and processes tab in shared project and clicks on '#{proc}'" do
136 click_link 'Data collections'
137 assert_text 'GNU General Public License'
139 click_link 'Pipelines and processes'
140 assert_text 'Pipeline in publicly accessible project'
142 if proc.include? 'pipeline'
143 verify_pipeline_instance_row
145 verify_container_request_row proc
150 def verify_container_request_row look_for
151 within first('tr', text: look_for) do
154 assert_text 'Public Projects Unrestricted public data'
155 assert_text 'command'
157 assert_text 'zzzzz-tpzed-xurymjxw79nv3jz' # modified by user
158 assert_no_selector 'a', text: 'zzzzz-tpzed-xurymjxw79nv3jz'
159 assert_no_selector 'button', text: 'Cancel'
162 def verify_pipeline_instance_row
163 within first('tr[data-kind="arvados#pipelineInstance"]') do
164 assert_text 'Pipeline in publicly accessible project'
168 # in pipeline instance page
169 assert_text 'Public Projects Unrestricted public data'
170 assert_text 'This pipeline is complete'
171 assert_no_selector 'a', text: 'Re-run with latest'
172 assert_no_selector 'a', text: 'Re-run options'
179 test "anonymous user accesses pipeline templates tab in shared project and click on #{type}" do
181 click_link 'Data collections'
182 assert_text 'GNU General Public License'
184 assert_selector 'a', text: 'Pipeline templates'
186 click_link 'Pipeline templates'
187 assert_text 'Pipeline template in publicly accessible project'
188 assert_text 'Workflow with input specifications'
190 if type == 'pipelineTemplate'
191 within first('tr[data-kind="arvados#pipelineTemplate"]') do
196 assert_text 'Public Projects Unrestricted public data'
197 assert_text 'script version'
198 assert_no_selector 'a', text: 'Run this pipeline'
200 within first('tr[data-kind="arvados#workflow"]') do
205 assert_text 'Public Projects Unrestricted public data'
206 assert_text 'this workflow has inputs specified'
211 test "anonymous user accesses subprojects tab in shared project" do
212 visit PUBLIC_PROJECT + '#Subprojects'
214 assert_text 'Subproject in anonymous accessible project'
216 within first('tr[data-kind="arvados#group"]') do
221 assert_text 'Description for subproject in anonymous accessible project'
225 ['pipeline_in_publicly_accessible_project', true],
226 ['pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false],
227 ['pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false, 'spectator'],
228 ['pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', true, 'admin'],
230 ['completed_job_in_publicly_accessible_project', true],
231 ['running_job_in_publicly_accessible_project', true],
232 ['job_in_publicly_accessible_project_but_other_objects_elsewhere', false],
233 ].each do |fixture, objects_readable, user=nil|
234 test "access #{fixture} in public project with objects readable=#{objects_readable} with user #{user}" do
235 pipeline_page = true if fixture.include?('pipeline')
238 object = api_fixture('pipeline_instances')[fixture]
239 page_link = "/pipeline_instances/#{object['uuid']}"
240 expect_log_text = "Log for foo"
242 object = api_fixture('jobs')[fixture]
243 page_link = "/jobs/#{object['uuid']}"
244 expect_log_text = "stderr crunchstat"
248 visit page_with_token user, page_link
253 # click job link, if in pipeline page
254 click_link 'foo' if pipeline_page
257 assert_selector 'a[href="#Log"]', text: 'Log'
258 assert_no_selector 'a[data-toggle="disabled"]', text: 'Log'
259 assert_no_text 'zzzzz-4zz18-bv31uwvy3neko21 (Unavailable)'
261 assert_text 'This pipeline was created from'
262 job_id = object['components']['foo']['job']['uuid']
263 assert_selector 'a', text: job_id
264 assert_selector "a[href=\"/jobs/#{job_id}#Log\"]", text: 'Log'
266 # We'd like to test the Log tab on job pages too, but we can't right
267 # now because Poltergeist 1.x doesn't support JavaScript's
268 # Function.prototype.bind, which is used by job_log_graph.js.
269 find(:xpath, "//a[@href='#Log']").click
270 assert_text expect_log_text
273 assert_selector 'a[data-toggle="disabled"]', text: 'Log'
274 assert_text 'zzzzz-4zz18-bv31uwvy3neko21 (Unavailable)'
275 assert_text object['job']
277 assert_no_text 'This pipeline was created from' # template is not readable
278 assert_no_selector 'a', text: object['components']['foo']['job']['uuid']
279 assert_text 'Log unavailable'
281 find(:xpath, "//a[@href='#Log']").click
282 assert_text 'zzzzz-4zz18-bv31uwvy3neko21 (Unavailable)'
283 assert_no_text expect_log_text
289 ['new_pipeline_in_publicly_accessible_project', true],
290 ['new_pipeline_in_publicly_accessible_project', true, 'spectator'],
291 ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false],
292 ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false, 'spectator'],
293 ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', true, 'admin'],
294 ['new_pipeline_in_publicly_accessible_project_with_dataclass_file_and_other_objects_elsewhere', false],
295 ['new_pipeline_in_publicly_accessible_project_with_dataclass_file_and_other_objects_elsewhere', false, 'spectator'],
296 ['new_pipeline_in_publicly_accessible_project_with_dataclass_file_and_other_objects_elsewhere', true, 'admin'],
297 ].each do |fixture, objects_readable, user=nil|
298 test "access #{fixture} in public project with objects readable=#{objects_readable} with user #{user}" do
299 object = api_fixture('pipeline_instances')[fixture]
300 page = "/pipeline_instances/#{object['uuid']}"
302 visit page_with_token user, page
307 # click Components tab
308 click_link 'Components'
311 assert_text 'This pipeline was created from'
314 assert_selector 'a', text: 'Choose'
315 assert_selector 'a', text: 'Run'
316 assert_no_selector 'a.disabled', text: 'Run'
318 assert_selector 'a', text: object['components']['foo']['script_parameters']['input']['value']
319 user ? (assert_selector 'a', text: 'Run') : (assert_no_selector 'a', text: 'Run')
322 assert_no_text 'This pipeline was created from' # template is not readable
323 input = object['components']['foo']['script_parameters']['input']['value']
324 assert_no_selector 'a', text: input
326 input = input.gsub('/', '\\/')
327 assert_text "One or more inputs provided are not readable"
328 assert_selector "input[type=text][value=#{input}]"
329 assert_selector 'a.disabled', text: 'Run'
331 assert_no_text "One or more inputs provided are not readable"
333 assert_no_selector 'a', text: 'Run'