X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/e74ede4659428af77c50057d69a0d08e4e74a6ef..7407f41105f8000bb3908d41a31daaf3a30d9440:/services/api/test/unit/link_test.rb diff --git a/services/api/test/unit/link_test.rb b/services/api/test/unit/link_test.rb index 640b26c64d..00f3cc2913 100644 --- a/services/api/test/unit/link_test.rb +++ b/services/api/test/unit/link_test.rb @@ -1,3 +1,7 @@ +# Copyright (C) The Arvados Authors. All rights reserved. +# +# SPDX-License-Identifier: AGPL-3.0 + require 'test_helper' class LinkTest < ActiveSupport::TestCase @@ -7,59 +11,27 @@ class LinkTest < ActiveSupport::TestCase set_user_from_auth :admin_trustedclient end - test 'name links with the same tail_uuid must be unique' do - a = Link.create!(tail_uuid: groups(:aproject).uuid, - head_uuid: specimens(:owned_by_active_user).uuid, - link_class: 'name', - name: 'foo') - assert a.valid?, a.errors.to_s - assert_equal groups(:aproject).uuid, a.owner_uuid - assert_raises ActiveRecord::RecordNotUnique do - b = Link.create!(tail_uuid: groups(:aproject).uuid, - head_uuid: specimens(:owned_by_active_user).uuid, - link_class: 'name', - name: 'foo') + test "cannot delete an object referenced by unwritable links" do + ob = act_as_user users(:active) do + Specimen.create end - end - - test 'name links with different tail_uuid need not be unique' do - a = Link.create!(tail_uuid: groups(:aproject).uuid, - head_uuid: specimens(:owned_by_active_user).uuid, - link_class: 'name', - name: 'foo') - assert a.valid?, a.errors.to_s - assert_equal groups(:aproject).uuid, a.owner_uuid - b = Link.create!(tail_uuid: groups(:asubproject).uuid, - head_uuid: specimens(:owned_by_active_user).uuid, - link_class: 'name', - name: 'foo') - assert b.valid?, b.errors.to_s - assert_equal groups(:asubproject).uuid, b.owner_uuid - assert_not_equal(a.uuid, b.uuid, - "created two links and got the same uuid back.") - end - - [nil, '', false].each do |name| - test "name links cannot have name=#{name.inspect}" do - a = Link.create(tail_uuid: groups(:aproject).uuid, - head_uuid: specimens(:owned_by_active_user).uuid, - link_class: 'name', - name: name) - assert a.invalid?, "invalid name was accepted as valid?" + link = act_as_user users(:admin) do + Link.create(tail_uuid: users(:active).uuid, + head_uuid: ob.uuid, + link_class: 'test', + name: 'test') end - end - - test "cannot delete an object referenced by links" do - ob = Specimen.create - link = Link.create(tail_uuid: users(:active).uuid, - head_uuid: ob.uuid, - link_class: 'test', - name: 'test') assert_equal users(:admin).uuid, link.owner_uuid - assert_raises(ActiveRecord::DeleteRestrictionError, + assert_raises(ArvadosModel::PermissionDeniedError, "should not delete #{ob.uuid} with link #{link.uuid}") do + act_as_user users(:active) do + ob.destroy + end + end + act_as_user users(:admin) do ob.destroy end + assert_empty Link.where(uuid: link.uuid) end def new_active_link_valid?(link_attrs) @@ -76,6 +48,11 @@ class LinkTest < ActiveSupport::TestCase end end + test "non-admin project owner can make it public" do + assert(new_active_link_valid?(tail_uuid: groups(:anonymous_group).uuid), + "non-admin project owner can't make their project public") + end + test "link granting permission to nonexistent user is invalid" do refute new_active_link_valid?(tail_uuid: users(:active).uuid.sub(/-\w+$/, "-#{'z' * 15}")) @@ -100,7 +77,12 @@ class LinkTest < ActiveSupport::TestCase tail_uuid: users(:admin).uuid) end - test "link granting project permissions to unreadable user is valid" do - assert new_active_link_valid?(tail_uuid: users(:admin).uuid) + test "link granting project permissions to unreadable user is invalid" do + refute new_active_link_valid?(tail_uuid: users(:admin).uuid) + end + + test "permission link can't exist on past collection versions" do + refute new_active_link_valid?(tail_uuid: groups(:public).uuid, + head_uuid: collections(:w_a_z_file_version_1).uuid) end end