From 94a3addbee3e4a293ba23483dc34ae316d93fbdd Mon Sep 17 00:00:00 2001
From: Radhika Chippada <radhika@curoverse.com>
Date: Sat, 31 Jan 2015 12:45:33 -0500
Subject: [PATCH] 2659: add text message "You are viewing public data" to top
 nav when anonymous user is accessing a public project. also add anonymous
 access tests.

---
 .../workbench/app/views/layouts/body.html.erb |  4 +-
 .../test/integration/anonymous_access_test.rb | 96 +++++++++++++++++++
 2 files changed, 99 insertions(+), 1 deletion(-)
 create mode 100644 apps/workbench/test/integration/anonymous_access_test.rb

diff --git a/apps/workbench/app/views/layouts/body.html.erb b/apps/workbench/app/views/layouts/body.html.erb
index fb28efe1d4..f4757ded6f 100644
--- a/apps/workbench/app/views/layouts/body.html.erb
+++ b/apps/workbench/app/views/layouts/body.html.erb
@@ -7,7 +7,9 @@
           <span class="icon-bar"></span>
           <span class="icon-bar"></span>
         </button>
-        <a class="navbar-brand" href="/" data-push=true><%= Rails.configuration.site_name.downcase rescue Rails.application.class.parent_name %></a>
+        <a class="navbar-brand" href="/" data-push=true><%= Rails.configuration.site_name.downcase rescue Rails.application.class.parent_name %>
+          <% if current_user && is_anonymous %>  You are viewing public data. <% end %>
+        </a>
       </div>
 
       <div class="collapse navbar-collapse">
diff --git a/apps/workbench/test/integration/anonymous_access_test.rb b/apps/workbench/test/integration/anonymous_access_test.rb
new file mode 100644
index 0000000000..87bbe84d49
--- /dev/null
+++ b/apps/workbench/test/integration/anonymous_access_test.rb
@@ -0,0 +1,96 @@
+require 'integration_helper'
+
+class AnonymousAccessTest < ActionDispatch::IntegrationTest
+  # These tests don't do state-changing API calls. Save some time by
+  # skipping the database reset.
+  reset_api_fixtures :after_each_test, false
+  reset_api_fixtures :after_suite, true
+
+  setup do
+    need_javascript
+  end
+
+  def verify_homepage_anonymous_enabled user, is_active, has_profile
+    if user
+      if user['is_active']
+        if has_profile
+          assert_text 'Unrestricted public data'
+          assert_selector 'a', text: 'Projects'
+        else
+          assert_text 'All required fields must be completed before you can proceed'
+        end
+      else
+        assert_text 'indicate that you have read and accepted the user agreement'
+      end
+      within('.navbar-fixed-top') do
+        assert_no_text 'You are viewing public data'
+        assert_selector 'a', text: "#{user['email']}"
+        find('a', text: "#{user['email']}").click
+        within('.dropdown-menu') do
+          assert_selector 'a', text: 'Log out'
+        end
+      end
+    else
+      assert_text 'Unrestricted public data'
+      within('.navbar-fixed-top') do
+        assert_text 'You are viewing public data'
+        anonymous_user = api_fixture('users')['anonymous']
+        assert_selector 'a', "#{anonymous_user['email']}"
+        find('a', text: "#{anonymous_user['email']}").click
+        within('.dropdown-menu') do
+          assert_selector 'a', text: 'Log out'
+          #assert_selector 'a', 'Log in'
+        end
+      end
+    end
+  end
+
+  [
+    [nil, nil, false, false],
+    ['inactive', api_fixture('users')['inactive'], false, false],
+    ['active', api_fixture('users')['active'], true, true],
+    ['active_no_prefs_profile', api_fixture('users')['active_no_prefs_profile'], true, false],
+    ['admin', api_fixture('users')['admin'], true, true],
+  ].each do |token, user, is_active, has_profile|
+    test "visit public project as user #{token} when anonymous browsing is enabled" do
+      Rails.configuration.anonymous_user_token = api_fixture('api_client_authorizations')['anonymous']['api_token']
+
+      path = "/projects/#{api_fixture('groups')['anonymously_accessible_project']['uuid']}/?public_data=true"
+
+      if !token
+        visit path
+      else
+        visit page_with_token(token, path)
+      end
+      verify_homepage_anonymous_enabled user, is_active, has_profile
+    end
+  end
+
+  [
+    [nil, nil],
+    ['active', api_fixture('users')['active']],
+  ].each do |token, user, is_active|
+    test "visit public project as user #{token} when anonymous browsing is not enabled" do
+      Rails.configuration.anonymous_user_token = false
+
+      path = "/projects/#{api_fixture('groups')['anonymously_accessible_project']['uuid']}/?public_data=true"
+      if !token
+        visit path
+      else
+        visit page_with_token(token, path)
+      end
+
+      if user
+        assert_text 'Unrestricted public data'
+      else
+        assert_text 'Please log in'
+      end
+    end
+  end
+
+  test "visit non-public project as anonymous when anonymous browsing is enabled and expect page not found" do
+    Rails.configuration.anonymous_user_token = api_fixture('api_client_authorizations')['anonymous']['api_token']
+    visit "/projects/#{api_fixture('groups')['aproject']['uuid']}/?public_data=true"
+    assert_text 'Not Found'
+  end
+end
-- 
2.30.2