end
end
+ test "old_attributes preserves values deep inside a hash" do
+ set_user_from_auth :active
+ it = specimens(:owned_by_active_user)
+ it.properties = {'foo' => {'bar' => ['baz', 'qux', {'quux' => 'bleat'}]}}
+ it.save!
+ @log_count += 1
+ it.properties['foo']['bar'][2]['quux'] = 'blert'
+ it.save!
+ assert_logged it, :update do |props|
+ assert_equal 'bleat', props['old_attributes']['properties']['foo']['bar'][2]['quux']
+ assert_equal 'blert', props['new_attributes']['properties']['foo']['bar'][2]['quux']
+ end
+ end
+
test "destroying an authorization makes a log" do
set_user_from_auth :admin_trustedclient
auth = api_client_authorizations(:spectator)
test "use ownership and permission links to determine which logs a user can see" do
c = Log.readable_by(users(:admin)).order("id asc").each.to_a
- assert_equal 5, c.size
+ assert_equal 6, c.size
assert_equal 1, c[0].id # no-op
assert_equal 2, c[1].id # admin changes repository foo, which is owned by active user
assert_equal 3, c[2].id # admin changes specimen owned_by_spectator
assert_equal 4, c[3].id # foo collection added, readable by active through link
assert_equal 5, c[4].id # baz collection added, readable by active and spectator through group 'all users' group membership
+ assert_equal 6, c[5].id # log_owned_by_active
c = Log.readable_by(users(:active)).order("id asc").each.to_a
- assert_equal 3, c.size
+ assert_equal 4, c.size
assert_equal 2, c[0].id # admin changes repository foo, which is owned by active user
assert_equal 4, c[1].id # foo collection added, readable by active through link
assert_equal 5, c[2].id # baz collection added, readable by active and spectator through group 'all users' group membership
+ assert_equal 6, c[3].id # log_owned_by_active
c = Log.readable_by(users(:spectator)).order("id asc").each.to_a
assert_equal 2, c.size