X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/71d9ea52ae12dc80d7062657fc5c059a128106d7..7afe2c73ccdaad21b2d36b345a1627c1ad3f51a1:/apps/workbench/test/integration/anonymous_access_test.rb

diff --git a/apps/workbench/test/integration/anonymous_access_test.rb b/apps/workbench/test/integration/anonymous_access_test.rb
index f5753a5548..9f31ef9486 100644
--- a/apps/workbench/test/integration/anonymous_access_test.rb
+++ b/apps/workbench/test/integration/anonymous_access_test.rb
@@ -8,39 +8,33 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest
 
   setup do
     need_javascript
+    Rails.configuration.anonymous_user_token = api_fixture('api_client_authorizations')['anonymous']['api_token']
   end
 
-  def verify_homepage_anonymous_enabled user, is_active, has_profile
+  PUBLIC_PROJECT = "/projects/#{api_fixture('groups')['anonymously_accessible_project']['uuid']}"
+
+  def verify_site_navigation_anonymous_enabled user, is_active
     if user
       if user['is_active']
-        if has_profile
-          assert_text 'Unrestricted public data'
-          assert_selector 'a', text: 'Projects'
-        else
-          assert_text 'All required fields must be completed before you can proceed'
-        end
+        assert_text 'Unrestricted public data'
+        assert_selector 'a', text: 'Projects'
       else
         assert_text 'indicate that you have read and accepted the user agreement'
       end
       within('.navbar-fixed-top') do
-        assert_no_text 'You are viewing public data'
+        assert_selector 'a', text: Rails.configuration.site_name.downcase
         assert_selector 'a', text: "#{user['email']}"
         find('a', text: "#{user['email']}").click
         within('.dropdown-menu') do
           assert_selector 'a', text: 'Log out'
         end
       end
-    else
+    else  # anonymous
       assert_text 'Unrestricted public data'
       within('.navbar-fixed-top') do
-        assert_text 'You are viewing public data'
-        anonymous_user = api_fixture('users')['anonymous']
-        assert_selector 'a', "#{anonymous_user['email']}"
-        find('a', text: "#{anonymous_user['email']}").click
-        within('.dropdown-menu') do
-          assert_selector 'a', text: 'Log in'
-          assert_no_selector 'a', text: 'Log out'
-        end
+        assert_text Rails.configuration.site_name.downcase
+        assert_no_selector 'a', text: Rails.configuration.site_name.downcase
+        assert_selector 'a', text: 'Log in'
       end
     end
   end
@@ -49,48 +43,258 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest
     [nil, nil, false, false],
     ['inactive', api_fixture('users')['inactive'], false, false],
     ['active', api_fixture('users')['active'], true, true],
-    ['active_no_prefs_profile', api_fixture('users')['active_no_prefs_profile'], true, false],
-    ['admin', api_fixture('users')['admin'], true, true],
-  ].each do |token, user, is_active, has_profile|
-    test "visit public project as user #{token} when anonymous browsing is enabled" do
-      Rails.configuration.anonymous_user_token = api_fixture('api_client_authorizations')['anonymous']['api_token']
+  ].each do |token, user, is_active|
+    test "visit public project as user #{token.inspect} when anonymous browsing is enabled" do
+      if !token
+        visit PUBLIC_PROJECT
+      else
+        visit page_with_token(token, PUBLIC_PROJECT)
+      end
 
-      path = "/projects/#{api_fixture('groups')['anonymously_accessible_project']['uuid']}/?public_data=true"
+      verify_site_navigation_anonymous_enabled user, is_active
+    end
+  end
 
-      if !token
-        visit path
+  test "selection actions when anonymous user accesses shared project" do
+    visit PUBLIC_PROJECT
+
+    assert_selector 'a', text: 'Description'
+    assert_selector 'a', text: 'Data collections'
+    assert_selector 'a', text: 'Jobs and pipelines'
+    assert_selector 'a', text: 'Pipeline templates'
+    assert_selector 'a', text: 'Advanced'
+    assert_no_selector 'a', text: 'Subprojects'
+    assert_no_selector 'a', text: 'Other objects'
+    assert_no_selector 'button', text: 'Add data'
+
+    click_link 'Data collections'
+    click_button 'Selection'
+    within('.selection-action-container') do
+      assert_selector 'li', text: 'Compare selected'
+      assert_no_selector 'li', text: 'Create new collection with selected collections'
+      assert_no_selector 'li', text: 'Copy selected'
+      assert_no_selector 'li', text: 'Move selected'
+      assert_no_selector 'li', text: 'Remove selected'
+    end
+  end
+
+  test "anonymous user accesses data collections tab in shared project" do
+    visit PUBLIC_PROJECT
+    click_link 'Data collections'
+    collection = api_fixture('collections')['user_agreement_in_anonymously_accessible_project']
+    assert_text 'GNU General Public License'
+
+    assert_selector 'a', text: 'Data collections'
+
+    # click on show collection
+    within "tr[data-object-uuid=\"#{collection['uuid']}\"]" do
+      click_link 'Show'
+    end
+
+    # in collection page
+    assert_no_selector 'input', text: 'Create sharing link'
+    assert_no_text 'Sharing and permissions'
+    assert_no_selector 'a', text: 'Upload'
+    assert_no_selector 'button', 'Selection'
+
+    within '#collection_files tr,li', text: 'GNU_General_Public_License,_version_3.pdf' do
+      assert page.has_no_selector?('[value*="GNU_General_Public_License"]')
+      find 'a[title~=View]'
+      find 'a[title~=Download]'
+    end
+  end
+
+  test 'view file' do
+    magic = rand(2**512).to_s 36
+    CollectionsController.any_instance.stubs(:file_enumerator).returns([magic])
+    collection = api_fixture('collections')['public_text_file']
+    visit '/collections/' + collection['uuid']
+    find('tr,li', text: 'Hello world.txt').
+      find('a[title~=View]').click
+    assert_text magic
+  end
+
+  [
+    'running_job',
+    'completed_job',
+    'pipelineInstance'
+  ].each do |type|
+    test "anonymous user accesses jobs and pipelines tab in shared project and clicks on #{type}" do
+      visit PUBLIC_PROJECT
+      click_link 'Data collections'
+      assert_text 'GNU General Public License'
+
+      click_link 'Jobs and pipelines'
+      assert_text 'Pipeline in publicly accessible project'
+
+      # click on the specified job
+      if type.include? 'job'
+        verify_job_row type
       else
-        visit page_with_token(token, path)
+        verify_pipeline_instance_row
       end
-      verify_homepage_anonymous_enabled user, is_active, has_profile
     end
   end
 
+  def verify_job_row look_for
+    within first('tr', text: look_for) do
+      click_link 'Show'
+    end
+    assert_text 'Public Projects Unrestricted public data'
+    assert_text 'script_version'
+
+    assert_text 'zzzzz-tpzed-xurymjxw79nv3jz' # modified by user
+    assert_no_selector 'a', text: 'zzzzz-tpzed-xurymjxw79nv3jz'
+    assert_no_selector 'a', text: 'Move job'
+    assert_no_selector 'button', text: 'Cancel'
+    assert_no_selector 'button', text: 'Re-run job'
+  end
+
+  def verify_pipeline_instance_row
+    within first('tr[data-kind="arvados#pipelineInstance"]') do
+      assert_text 'Pipeline in publicly accessible project'
+      click_link 'Show'
+    end
+
+    # in pipeline instance page
+    assert_text 'Public Projects Unrestricted public data'
+    assert_text 'This pipeline is complete'
+    assert_no_selector 'a', text: 'Re-run with latest'
+    assert_no_selector 'a', text: 'Re-run options'
+  end
+
+  test "anonymous user accesses pipeline templates tab in shared project" do
+    visit PUBLIC_PROJECT
+    click_link 'Data collections'
+    assert_text 'GNU General Public License'
+
+    assert_selector 'a', text: 'Pipeline templates'
+
+    click_link 'Pipeline templates'
+    assert_text 'Pipeline template in publicly accessible project'
+
+    within first('tr[data-kind="arvados#pipelineTemplate"]') do
+      click_link 'Show'
+    end
+
+    # in template page
+    assert_text 'Public Projects Unrestricted public data'
+    assert_text 'script version'
+    assert_no_selector 'a', text: 'Run this pipeline'
+  end
+
   [
-    [nil, nil],
-    ['active', api_fixture('users')['active']],
-  ].each do |token, user, is_active|
-    test "visit public project as user #{token} when anonymous browsing is not enabled" do
-      Rails.configuration.anonymous_user_token = false
+    ['pipeline_in_publicly_accessible_project', true],
+    ['pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false],
+    ['pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false, 'spectator'],
+    ['pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', true, 'admin'],
 
-      path = "/projects/#{api_fixture('groups')['anonymously_accessible_project']['uuid']}/?public_data=true"
-      if !token
-        visit path
+    ['completed_job_in_publicly_accessible_project', true],
+    ['job_in_publicly_accessible_project_but_other_objects_elsewhere', false],
+  ].each do |fixture, objects_readable, user=nil|
+    test "access #{fixture} in public project with objects readable=#{objects_readable} with user #{user}" do
+      pipeline_page = true if fixture.include?('pipeline')
+
+      if pipeline_page
+        object = api_fixture('pipeline_instances')[fixture]
+        page = "/pipeline_instances/#{object['uuid']}"
+      else      # job
+        object = api_fixture('jobs')[fixture]
+        page = "/jobs/#{object['uuid']}"
+      end
+
+      if user
+        visit page_with_token user, page
+      else
+        visit page
+      end
+
+      # click job link, if in pipeline page
+      click_link 'foo' if pipeline_page
+
+      if objects_readable
+        if pipeline_page
+          assert_text 'This pipeline was created from'
+          assert_selector 'a', text: object['components']['foo']['job']['uuid']
+        end
+        assert_no_text 'Output data not available'
+        assert_selector 'a[href="#Log"]', text: 'Log'
+        assert_no_selector 'a[data-toggle="disabled"]', text: 'Log'
+      else
+        if pipeline_page
+          assert_no_text 'This pipeline was created from'  # template is not readable
+          assert_no_selector 'a', text: object['components']['foo']['job']['uuid']
+        end
+        assert_text 'Output data not available'
+        assert_text object['job']
+        assert_selector 'a[data-toggle="disabled"]', text: 'Log'
+      end
+
+      click_link 'Log'
+      if objects_readable
+        assert_no_text 'foo'  # should be in Log tab
+        assert_text 'stderr crunchstat'   if pipeline_page
       else
-        visit page_with_token(token, path)
+        assert_text 'foo'     # Log tab disabled and hence still in first tab
+        assert_no_text 'stderr crunchstat'  # log line shouldn't be seen
       end
+    end
+  end
 
+  [
+    ['new_pipeline_in_publicly_accessible_project', true],
+    ['new_pipeline_in_publicly_accessible_project', true, 'spectator'],
+    ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false],
+    ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false, 'spectator'],
+    ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', true, 'admin'],
+    ['new_pipeline_in_publicly_accessible_project_with_dataclass_file_and_other_objects_elsewhere', false, 'spectator'],
+  ].each do |fixture, objects_readable, user=nil|
+    test "access #{fixture} in public project with objects readable=#{objects_readable} with user #{user}" do
+      object = api_fixture('pipeline_instances')[fixture]
+      page = "/pipeline_instances/#{object['uuid']}"
       if user
-        assert_text 'Unrestricted public data'
+        visit page_with_token user, page
       else
-        assert_text 'Please log in'
+        visit page
+      end
+
+      # click Components tab
+      click_link 'Components'
+
+      if objects_readable
+        assert_text 'This pipeline was created from'
+        if user == 'admin'
+          assert_text 'input'
+          assert_selector 'a', text: 'Choose'
+          assert_selector 'a', text: 'Run'
+          assert_no_selector 'a.disabled', text: 'Run'
+        else
+          assert_selector 'a', text: object['components']['foo']['script_parameters']['input']['value']
+          user ? (assert_selector 'a', text: 'Run') : (assert_no_selector 'a', text: 'Run')
+        end
+      else
+        assert_no_text 'This pipeline was created from'  # template is not readable
+        assert_no_selector 'a', text: object['components']['foo']['script_parameters']['input']['value']
+        if user
+          assert_text "One or more inputs provided are not readable"
+          assert_selector "input[type=text][value=#{object['components']['foo']['script_parameters']['input']['value']}]"
+          assert_selector 'a.disabled', text: 'Run'
+        else
+          assert_no_text "One or more inputs provided are not readable"
+          assert_text object['components']['foo']['script_parameters']['input']['value']
+          assert_no_selector 'a', text: 'Run'
+        end
       end
     end
   end
 
-  test "visit non-public project as anonymous when anonymous browsing is enabled and expect page not found" do
-    Rails.configuration.anonymous_user_token = api_fixture('api_client_authorizations')['anonymous']['api_token']
-    visit "/projects/#{api_fixture('groups')['aproject']['uuid']}/?public_data=true"
-    assert_text 'Not Found'
+  test "anonymous user accesses collection in shared project" do
+    visit "/collections/#{api_fixture('collections')['public_text_file']['uuid']}"
+
+    # in collection page
+    assert_text 'Public Projects Unrestricted public data'
+    assert_text 'Hello world'
+    assert_text 'Content address'
+    assert_selector 'a', text: 'Provenance graph'
   end
 end