X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/d27fd3e2648e47f014f7da67056825aca3724004..f8e6cb30ca6a3cdb20be47f7a81663d4affd0b7f:/apps/workbench/test/integration/anonymous_access_test.rb diff --git a/apps/workbench/test/integration/anonymous_access_test.rb b/apps/workbench/test/integration/anonymous_access_test.rb index 2e04dcaecd..1b187e7b05 100644 --- a/apps/workbench/test/integration/anonymous_access_test.rb +++ b/apps/workbench/test/integration/anonymous_access_test.rb @@ -22,6 +22,7 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest assert_text 'indicate that you have read and accepted the user agreement' end within('.navbar-fixed-top') do + assert_selector 'a', text: Rails.configuration.site_name.downcase assert_selector 'a', text: "#{user['email']}" find('a', text: "#{user['email']}").click within('.dropdown-menu') do @@ -31,6 +32,8 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest else # anonymous assert_text 'Unrestricted public data' within('.navbar-fixed-top') do + assert_text Rails.configuration.site_name.downcase + assert_no_selector 'a', text: Rails.configuration.site_name.downcase assert_selector 'a', text: 'Log in' end end @@ -55,6 +58,7 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest test "selection actions when anonymous user accesses shared project" do visit PUBLIC_PROJECT + assert_selector 'a', text: 'Description' assert_selector 'a', text: 'Data collections' assert_selector 'a', text: 'Jobs and pipelines' assert_selector 'a', text: 'Pipeline templates' @@ -63,6 +67,7 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest assert_no_selector 'a', text: 'Other objects' assert_no_selector 'button', text: 'Add data' + click_link 'Data collections' click_button 'Selection' within('.selection-action-container') do assert_selector 'li', text: 'Compare selected' @@ -75,6 +80,7 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest test "anonymous user accesses data collections tab in shared project" do visit PUBLIC_PROJECT + click_link 'Data collections' collection = api_fixture('collections')['user_agreement_in_anonymously_accessible_project'] assert_text 'GNU General Public License' @@ -87,10 +93,12 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest # in collection page assert_no_selector 'input', text: 'Create sharing link' + assert_no_text 'Sharing and permissions' assert_no_selector 'a', text: 'Upload' assert_no_selector 'button', 'Selection' within '#collection_files tr,li', text: 'GNU_General_Public_License,_version_3.pdf' do + assert page.has_no_selector?('[value*="GNU_General_Public_License"]') find 'a[title~=View]' find 'a[title~=Download]' end @@ -113,6 +121,7 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest ].each do |type| test "anonymous user accesses jobs and pipelines tab in shared project and clicks on #{type}" do visit PUBLIC_PROJECT + click_link 'Data collections' assert_text 'GNU General Public License' click_link 'Jobs and pipelines' @@ -131,6 +140,7 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest within first('tr', text: look_for) do click_link 'Show' end + assert_text 'Public Projects Unrestricted public data' assert_text 'script_version' assert_text 'zzzzz-tpzed-xurymjxw79nv3jz' # modified by user @@ -147,6 +157,7 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest end # in pipeline instance page + assert_text 'Public Projects Unrestricted public data' assert_text 'This pipeline is complete' assert_no_selector 'a', text: 'Re-run with latest' assert_no_selector 'a', text: 'Re-run options' @@ -154,6 +165,7 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest test "anonymous user accesses pipeline templates tab in shared project" do visit PUBLIC_PROJECT + click_link 'Data collections' assert_text 'GNU General Public License' assert_selector 'a', text: 'Pipeline templates' @@ -166,7 +178,127 @@ class AnonymousAccessTest < ActionDispatch::IntegrationTest end # in template page + assert_text 'Public Projects Unrestricted public data' assert_text 'script version' assert_no_selector 'a', text: 'Run this pipeline' end + + [ + ['pipeline_in_publicly_accessible_project', true], + ['pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false], + ['pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false, 'spectator'], + ['pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', true, 'admin'], + + ['completed_job_in_publicly_accessible_project', true], + ['job_in_publicly_accessible_project_but_other_objects_elsewhere', false], + ].each do |fixture, objects_readable, user=nil| + test "access #{fixture} in public project with objects readable=#{objects_readable} with user #{user}" do + pipeline_page = true if fixture.include?('pipeline') + + if pipeline_page + object = api_fixture('pipeline_instances')[fixture] + page = "/pipeline_instances/#{object['uuid']}" + else # job + object = api_fixture('jobs')[fixture] + page = "/jobs/#{object['uuid']}" + end + + if user + visit page_with_token user, page + else + visit page + end + + # click job link, if in pipeline page + click_link 'foo' if pipeline_page + + if objects_readable + if pipeline_page + assert_text 'This pipeline was created from' + assert_selector 'a', text: object['components']['foo']['job']['uuid'] + end + assert_no_text 'Output data not available' + assert_selector 'a[href="#Log"]', text: 'Log' + assert_no_selector 'a[data-toggle="disabled"]', text: 'Log' + else + if pipeline_page + assert_no_text 'This pipeline was created from' # template is not readable + assert_no_selector 'a', text: object['components']['foo']['job']['uuid'] + end + assert_text 'Output data not available' + assert_text object['job'] + assert_selector 'a[data-toggle="disabled"]', text: 'Log' + end + + click_link 'Log' + if objects_readable + assert_no_text 'foo' # should be in Log tab + assert_text 'stderr crunchstat' if pipeline_page + else + assert_text 'foo' # Log tab disabled and hence still in first tab + assert_no_text 'stderr crunchstat' # log line shouldn't be seen + end + end + end + + [ + ['new_pipeline_in_publicly_accessible_project', true], + ['new_pipeline_in_publicly_accessible_project', true, 'spectator'], + ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false], + ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', false, 'spectator'], + ['new_pipeline_in_publicly_accessible_project_but_other_objects_elsewhere', true, 'admin'], + ['new_pipeline_in_publicly_accessible_project_with_dataclass_file_and_other_objects_elsewhere', false], + ['new_pipeline_in_publicly_accessible_project_with_dataclass_file_and_other_objects_elsewhere', false, 'spectator'], + ['new_pipeline_in_publicly_accessible_project_with_dataclass_file_and_other_objects_elsewhere', true, 'admin'], + ].each do |fixture, objects_readable, user=nil| + test "access #{fixture} in public project with objects readable=#{objects_readable} with user #{user}" do + object = api_fixture('pipeline_instances')[fixture] + page = "/pipeline_instances/#{object['uuid']}" + if user + visit page_with_token user, page + else + visit page + end + + # click Components tab + click_link 'Components' + + if objects_readable + assert_text 'This pipeline was created from' + if user == 'admin' + assert_text 'input' + assert_selector 'a', text: 'Choose' + assert_selector 'a', text: 'Run' + assert_no_selector 'a.disabled', text: 'Run' + else + assert_selector 'a', text: object['components']['foo']['script_parameters']['input']['value'] + user ? (assert_selector 'a', text: 'Run') : (assert_no_selector 'a', text: 'Run') + end + else + assert_no_text 'This pipeline was created from' # template is not readable + input = object['components']['foo']['script_parameters']['input']['value'] + assert_no_selector 'a', text: input + if user + input = input.gsub('/', '\\/') + assert_text "One or more inputs provided are not readable" + assert_selector "input[type=text][value=#{input}]" + assert_selector 'a.disabled', text: 'Run' + else + assert_no_text "One or more inputs provided are not readable" + assert_text input + assert_no_selector 'a', text: 'Run' + end + end + end + end + + test "anonymous user accesses collection in shared project" do + visit "/collections/#{api_fixture('collections')['public_text_file']['uuid']}" + + # in collection page + assert_text 'Public Projects Unrestricted public data' + assert_text 'Hello world' + assert_text 'Content address' + assert_selector 'a', text: 'Provenance graph' + end end