X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/41bd04e7f25b0b5882e971ff7104e3f17c19bf5b..35ba053c83b7ad18e1a336d50d3a8d5a53adce9f:/apps/workbench/test/integration/anonymous_access_test.rb diff --git a/apps/workbench/test/integration/anonymous_access_test.rb b/apps/workbench/test/integration/anonymous_access_test.rb index dedcd4c112..d3f08c62bf 100644 --- a/apps/workbench/test/integration/anonymous_access_test.rb +++ b/apps/workbench/test/integration/anonymous_access_test.rb @@ -1,3 +1,7 @@ +# Copyright (C) The Arvados Authors. All rights reserved. +# +# SPDX-License-Identifier: AGPL-3.0 + require 'integration_helper' class AnonymousAccessTest < ActionDispatch::IntegrationTest @@ -8,7 +12,7 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest setup do need_javascript - Rails.configuration.anonymous_user_token = api_fixture('api_client_authorizations')['anonymous']['api_token'] + Rails.configuration.Users.AnonymousUserToken = api_fixture('api_client_authorizations')['anonymous']['api_token'] end PUBLIC_PROJECT = "/projects/#{api_fixture('groups')['anonymously_accessible_project']['uuid']}" @@ -18,13 +22,20 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest if user['is_active'] assert_text 'Unrestricted public data' assert_selector 'a', text: 'Projects' + page.find("#projects-menu").click + within('.dropdown-menu') do + assert_selector 'a', text: 'Search all projects' + assert_selector "a[href=\"/projects/public\"]", text: 'Browse public projects' + assert_selector 'a', text: 'Add a new project' + assert_selector 'li[class="dropdown-header"]', text: 'My projects' + end else assert_text 'indicate that you have read and accepted the user agreement' end within('.navbar-fixed-top') do - assert_selector 'a', text: Rails.configuration.site_name.downcase - assert_selector 'a', text: "#{user['email']}" - find('a', text: "#{user['email']}").click + assert_selector 'a', text: Rails.configuration.Workbench.SiteName.downcase + assert(page.has_link?("notifications-menu"), 'no user menu') + page.find("#notifications-menu").click within('.dropdown-menu') do assert_selector 'a', text: 'Log out' end @@ -32,9 +43,10 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest else # anonymous assert_text 'Unrestricted public data' within('.navbar-fixed-top') do - assert_text Rails.configuration.site_name.downcase - assert_no_selector 'a', text: Rails.configuration.site_name.downcase + assert_text Rails.configuration.Workbench.SiteName.downcase + assert_no_selector 'a', text: Rails.configuration.Workbench.SiteName.downcase assert_selector 'a', text: 'Log in' + assert_selector 'a', text: 'Browse public projects' end end end @@ -60,10 +72,10 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest assert_selector 'a', text: 'Description' assert_selector 'a', text: 'Data collections' - assert_selector 'a', text: 'Jobs and pipelines' + assert_selector 'a', text: 'Pipelines and processes' assert_selector 'a', text: 'Pipeline templates' + assert_selector 'a', text: 'Subprojects' assert_selector 'a', text: 'Advanced' - assert_no_selector 'a', text: 'Subprojects' assert_no_selector 'a', text: 'Other objects' assert_no_selector 'button', text: 'Add data' @@ -105,49 +117,47 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest end test 'view file' do + use_keep_web_config + magic = rand(2**512).to_s 36 - CollectionsController.any_instance.stubs(:file_enumerator).returns([magic]) - collection = api_fixture('collections')['public_text_file'] - visit '/collections/' + collection['uuid'] + owner = api_fixture('groups')['anonymously_accessible_project']['uuid'] + col = upload_data_and_get_collection(magic, 'admin', "Hello\\040world.txt", owner) + visit '/collections/' + col.uuid find('tr,li', text: 'Hello world.txt'). find('a[title~=View]').click assert_text magic end [ - 'running_job', - 'completed_job', + 'running anonymously accessible cr', 'pipelineInstance' - ].each do |type| - test "anonymous user accesses jobs and pipelines tab in shared project and clicks on #{type}" do + ].each do |proc| + test "anonymous user accesses pipelines and processes tab in shared project and clicks on '#{proc}'" do visit PUBLIC_PROJECT click_link 'Data collections' assert_text 'GNU General Public License' - click_link 'Jobs and pipelines' + click_link 'Pipelines and processes' assert_text 'Pipeline in publicly accessible project' - # click on the specified job - if type.include? 'job' - verify_job_row type - else + if proc.include? 'pipeline' verify_pipeline_instance_row + else + verify_container_request_row proc end end end - def verify_job_row look_for + def verify_container_request_row look_for within first('tr', text: look_for) do click_link 'Show' end assert_text 'Public Projects Unrestricted public data' - assert_text 'script_version' + assert_text 'command' assert_text 'zzzzz-tpzed-xurymjxw79nv3jz' # modified by user assert_no_selector 'a', text: 'zzzzz-tpzed-xurymjxw79nv3jz' - assert_no_selector 'a', text: 'Move job' assert_no_selector 'button', text: 'Cancel' - assert_no_selector 'button', text: 'Re-run job' end def verify_pipeline_instance_row @@ -163,24 +173,53 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest assert_no_selector 'a', text: 'Re-run options' end - test "anonymous user accesses pipeline templates tab in shared project" do - visit PUBLIC_PROJECT - click_link 'Data collections' - assert_text 'GNU General Public License' + [ + 'pipelineTemplate', + 'workflow' + ].each do |type| + test "anonymous user accesses pipeline templates tab in shared project and click on #{type}" do + visit PUBLIC_PROJECT + click_link 'Data collections' + assert_text 'GNU General Public License' - assert_selector 'a', text: 'Pipeline templates' + assert_selector 'a', text: 'Pipeline templates' + + click_link 'Pipeline templates' + assert_text 'Pipeline template in publicly accessible project' + assert_text 'Workflow with input specifications' + + if type == 'pipelineTemplate' + within first('tr[data-kind="arvados#pipelineTemplate"]') do + click_link 'Show' + end + + # in template page + assert_text 'Public Projects Unrestricted public data' + assert_text 'script version' + assert_no_selector 'a', text: 'Run this pipeline' + else + within first('tr[data-kind="arvados#workflow"]') do + click_link 'Show' + end + + # in workflow page + assert_text 'Public Projects Unrestricted public data' + assert_text 'this workflow has inputs specified' + end + end + end + + test "anonymous user accesses subprojects tab in shared project" do + visit PUBLIC_PROJECT + '#Subprojects' - click_link 'Pipeline templates' - assert_text 'Pipeline template in publicly accessible project' + assert_text 'Subproject in anonymous accessible project' - within first('tr[data-kind="arvados#pipelineTemplate"]') do + within first('tr[data-kind="arvados#group"]') do click_link 'Show' end - # in template page - assert_text 'Public Projects Unrestricted public data' - assert_text 'script version' - assert_no_selector 'a', text: 'Run this pipeline' + # in subproject + assert_text 'Description for subproject in anonymous accessible project' end [ @@ -190,6 +229,7 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest ['pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', true, 'admin'], ['completed_job_in_publicly_accessible_project', true], + ['running_job_in_publicly_accessible_project', true], ['job_in_publicly_accessible_project_but_other_objects_elsewhere', false], ].each do |fixture, objects_readable, user=nil| test "access #{fixture} in public project with objects readable=#{objects_readable} with user #{user}" do @@ -197,56 +237,64 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest if pipeline_page object = api_fixture('pipeline_instances')[fixture] - page = "/pipeline_instances/#{object['uuid']}" + page_link = "/pipeline_instances/#{object['uuid']}" + expect_log_text = "Log for foo" else # job object = api_fixture('jobs')[fixture] - page = "/jobs/#{object['uuid']}" + page_link = "/jobs/#{object['uuid']}" + expect_log_text = "stderr crunchstat" end if user - visit page_with_token user, page + visit page_with_token user, page_link else - visit page + visit page_link end # click job link, if in pipeline page click_link 'foo' if pipeline_page if objects_readable + assert_selector 'a[href="#Log"]', text: 'Log' + assert_no_selector 'a[data-toggle="disabled"]', text: 'Log' + assert_no_text 'zzzzz-4zz18-bv31uwvy3neko21 (Unavailable)' if pipeline_page assert_text 'This pipeline was created from' - assert_selector 'a', text: object['components']['foo']['job']['uuid'] + job_id = object['components']['foo']['job']['uuid'] + assert_selector 'a', text: job_id + assert_selector "a[href=\"/jobs/#{job_id}#Log\"]", text: 'Log' + + # We'd like to test the Log tab on job pages too, but we can't right + # now because Poltergeist 1.x doesn't support JavaScript's + # Function.prototype.bind, which is used by job_log_graph.js. + find(:xpath, "//a[@href='#Log']").click + assert_text expect_log_text end - assert_no_text 'Output data not available' - assert_selector 'a[href="#Log"]', text: 'Log' - assert_no_selector 'a[data-toggle="disabled"]', text: 'Log' else + assert_selector 'a[data-toggle="disabled"]', text: 'Log' + assert_text 'zzzzz-4zz18-bv31uwvy3neko21 (Unavailable)' + assert_text object['job'] if pipeline_page assert_no_text 'This pipeline was created from' # template is not readable assert_no_selector 'a', text: object['components']['foo']['job']['uuid'] + assert_text 'Log unavailable' end - assert_text 'Output data not available' - assert_text object['job'] - assert_selector 'a[href="#Log"]', text: 'Log' - assert_selector 'a[data-toggle="disabled"]', text: 'Log' - end - - click_link 'Log' - if objects_readable - assert_no_text 'foo' # should be in Log tab - assert_text 'stderr crunchstat' if pipeline_page - else - assert_text 'foo' # Log tab disabled and hence still in first tab - assert_no_text 'stderr crunchstat' # log line shouldn't be seen + find(:xpath, "//a[@href='#Log']").click + assert_text 'zzzzz-4zz18-bv31uwvy3neko21 (Unavailable)' + assert_no_text expect_log_text end end end [ ['new_pipeline_in_publicly_accessible_project', true], + ['new_pipeline_in_publicly_accessible_project', true, 'spectator'], ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false], ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false, 'spectator'], ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', true, 'admin'], + ['new_pipeline_in_publicly_accessible_project_with_dataclass_file_and_other_objects_elsewhere', false], + ['new_pipeline_in_publicly_accessible_project_with_dataclass_file_and_other_objects_elsewhere', false, 'spectator'], + ['new_pipeline_in_publicly_accessible_project_with_dataclass_file_and_other_objects_elsewhere', true, 'admin'], ].each do |fixture, objects_readable, user=nil| test "access #{fixture} in public project with objects readable=#{objects_readable} with user #{user}" do object = api_fixture('pipeline_instances')[fixture] @@ -265,24 +313,27 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest if user == 'admin' assert_text 'input' assert_selector 'a', text: 'Choose' + assert_selector 'a', text: 'Run' + assert_no_selector 'a.disabled', text: 'Run' else assert_selector 'a', text: object['components']['foo']['script_parameters']['input']['value'] + user ? (assert_selector 'a', text: 'Run') : (assert_no_selector 'a', text: 'Run') end else assert_no_text 'This pipeline was created from' # template is not readable - assert_text object['components']['foo']['script_parameters']['input']['value'] - assert_no_selector 'a', text: object['components']['foo']['script_parameters']['input']['value'] + input = object['components']['foo']['script_parameters']['input']['value'] + assert_no_selector 'a', text: input + if user + input = input.gsub('/', '\\/') + assert_text "One or more inputs provided are not readable" + assert_selector "input[type=text][value=#{input}]" + assert_selector 'a.disabled', text: 'Run' + else + assert_no_text "One or more inputs provided are not readable" + assert_text input + assert_no_selector 'a', text: 'Run' + end end end end - - test "anonymous user accesses collection in shared project" do - visit "/collections/#{api_fixture('collections')['public_text_file']['uuid']}" - - # in collection page - assert_text 'Public Projects Unrestricted public data' - assert_text 'Hello world' - assert_text 'Content address' - assert_selector 'a', text: 'Provenance graph' - end end