X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/6edb8dae058979f9c5cb198ad4f7af3f700ba84b..1b977454f7f993ebf6d64c30921a4f62accbc640:/test/controllers/api/old_ways_controller_test.rb diff --git a/test/controllers/api/old_ways_controller_test.rb b/test/controllers/api/old_ways_controller_test.rb index a00dd84cf..bd818c377 100644 --- a/test/controllers/api/old_ways_controller_test.rb +++ b/test/controllers/api/old_ways_controller_test.rb @@ -62,22 +62,56 @@ module Api ## # test that redacted ways aren't visible in the history - def test_index_redacted + def test_index_redacted_unauthorised way = create(:way, :with_history, :version => 2) - way_v1 = way.old_ways.find_by(:version => 1) - way_v1.redact!(create(:redaction)) + way.old_ways.find_by(:version => 1).redact!(create(:redaction)) get api_way_versions_path(way) + assert_response :success, "Redaction shouldn't have stopped history working." - assert_select "osm way[id='#{way_v1.way_id}'][version='#{way_v1.version}']", 0, - "redacted way #{way_v1.way_id} version #{way_v1.version} shouldn't be present in the history." + assert_dom "osm way[id='#{way.id}'][version='1']", 0, + "redacted way #{way.id} version 1 shouldn't be present in the history." + + get api_way_versions_path(way, :show_redactions => "true") + + assert_response :success, "Redaction shouldn't have stopped history working." + assert_dom "osm way[id='#{way.id}'][version='1']", 0, + "redacted way #{way.id} version 1 shouldn't be present in the history when passing flag." + end + + def test_index_redacted_normal_user + way = create(:way, :with_history, :version => 2) + way.old_ways.find_by(:version => 1).redact!(create(:redaction)) + + get api_way_versions_path(way), :headers => bearer_authorization_header + + assert_response :success, "Redaction shouldn't have stopped history working." + assert_dom "osm way[id='#{way.id}'][version='1']", 0, + "redacted node #{way.id} version 1 shouldn't be present in the history, even when logged in." + + get api_way_versions_path(way, :show_redactions => "true"), :headers => bearer_authorization_header + + assert_response :success, "Redaction shouldn't have stopped history working." + assert_dom "osm way[id='#{way.id}'][version='1']", 0, + "redacted node #{way.id} version 1 shouldn't be present in the history, even when logged in and passing flag." + end + + def test_index_redacted_moderator + way = create(:way, :with_history, :version => 2) + way.old_ways.find_by(:version => 1).redact!(create(:redaction)) + auth_header = bearer_authorization_header create(:moderator_user) - # not even to a logged-in user - auth_header = bearer_authorization_header get api_way_versions_path(way), :headers => auth_header + + assert_response :success, "Redaction shouldn't have stopped history working." + assert_dom "osm way[id='#{way.id}'][version='1']", 0, + "way #{way.id} version 1 should not be present in the history for moderators when not passing flag." + + get api_way_versions_path(way, :show_redactions => "true"), :headers => auth_header + assert_response :success, "Redaction shouldn't have stopped history working." - assert_select "osm way[id='#{way_v1.way_id}'][version='#{way_v1.version}']", 0, - "redacted node #{way_v1.way_id} version #{way_v1.version} shouldn't be present in the history, even when logged in." + assert_dom "osm way[id='#{way.id}'][version='1']", 1, + "way #{way.id} version 1 should still be present in the history for moderators when passing flag." end def test_show @@ -107,18 +141,30 @@ module Api ## # test that redacted ways aren't visible, regardless of # authorisation except as moderator... - def test_show_redacted + def test_show_redacted_unauthorised way = create(:way, :with_history, :version => 2) - way_v1 = way.old_ways.find_by(:version => 1) - way_v1.redact!(create(:redaction)) + way.old_ways.find_by(:version => 1).redact!(create(:redaction)) + + get api_way_version_path(way, 1) - get api_way_version_path(way_v1.way_id, way_v1.version) assert_response :forbidden, "Redacted way shouldn't be visible via the version API." - # not even to a logged-in user - auth_header = bearer_authorization_header - get api_way_version_path(way_v1.way_id, way_v1.version), :headers => auth_header + get api_way_version_path(way, 1, :show_redactions => "true") + + assert_response :forbidden, "Redacted way shouldn't be visible via the version API when passing flag." + end + + def test_show_redacted_normal_user + way = create(:way, :with_history, :version => 2) + way.old_ways.find_by(:version => 1).redact!(create(:redaction)) + + get api_way_version_path(way, 1), :headers => bearer_authorization_header + assert_response :forbidden, "Redacted way shouldn't be visible via the version API, even when logged in." + + get api_way_version_path(way, 1, :show_redactions => "true"), :headers => bearer_authorization_header + + assert_response :forbidden, "Redacted way shouldn't be visible via the version API, even when logged in and passing flag." end ## @@ -203,7 +249,9 @@ module Api auth_header = bearer_authorization_header create(:moderator_user) do_redact_way(way_v3, create(:redaction), auth_header) + assert_response :success, "should be OK to redact old version as moderator." + assert_predicate way_v3.reload, :redacted? # check moderator can still see the redacted data, when passing # the appropriate flag @@ -211,16 +259,6 @@ module Api assert_response :forbidden, "After redaction, node should be gone for moderator, when flag not passed." get api_way_version_path(way_v3.way_id, way_v3.version, :show_redactions => "true"), :headers => auth_header assert_response :success, "After redaction, node should not be gone for moderator, when flag passed." - - # and when accessed via history - get api_way_versions_path(way), :headers => auth_header - assert_response :success, "Redaction shouldn't have stopped history working." - assert_select "osm way[id='#{way_v3.way_id}'][version='#{way_v3.version}']", 0, - "way #{way_v3.way_id} version #{way_v3.version} should not be present in the history for moderators when not passing flag." - get api_way_versions_path(way, :show_redactions => "true"), :headers => auth_header - assert_response :success, "Redaction shouldn't have stopped history working." - assert_select "osm way[id='#{way_v3.way_id}'][version='#{way_v3.version}']", 1, - "way #{way_v3.way_id} version #{way_v3.version} should still be present in the history for moderators when passing flag." end # testing that if the moderator drops auth, he can't see the @@ -239,12 +277,6 @@ module Api # check can't see the redacted data get api_way_version_path(way_v3.way_id, way_v3.version), :headers => auth_header assert_response :forbidden, "Redacted node shouldn't be visible via the version API." - - # and when accessed via history - get api_way_versions_path(way), :headers => auth_header - assert_response :success, "Redaction shouldn't have stopped history working." - assert_select "osm way[id='#{way_v3.way_id}'][version='#{way_v3.version}']", 0, - "redacted way #{way_v3.way_id} version #{way_v3.version} shouldn't be present in the history." end ##