X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/7c55a5cb3b07f40ab1897a7d746de27317255c42..0bdac25fbdfbf6c2f23178133acc63556de64fe7:/test/controllers/old_relations_controller_test.rb diff --git a/test/controllers/old_relations_controller_test.rb b/test/controllers/old_relations_controller_test.rb index 87c4926ef..66a960e6f 100644 --- a/test/controllers/old_relations_controller_test.rb +++ b/test/controllers/old_relations_controller_test.rb @@ -8,7 +8,7 @@ class OldRelationsControllerTest < ActionDispatch::IntegrationTest ) end - def test_visible + def test_visible_with_one_version relation = create(:relation, :with_history) get old_relation_path(relation, 1) assert_response :success @@ -17,7 +17,37 @@ class OldRelationsControllerTest < ActionDispatch::IntegrationTest assert_select "h4", /^Version/ do assert_select "a[href='#{old_relation_path relation, 1}']", :count => 0 end - assert_select "a[href='#{relation_version_path relation, 1}']", :count => 1 + assert_select ".secondary-actions a[href='#{api_old_relation_path relation, 1}']", :count => 1 + assert_select ".secondary-actions a[href='#{relation_path relation}']", :count => 1 + assert_select ".secondary-actions a[href='#{old_relation_path relation, 1, :params => { :show_redactions => true }}']", :count => 0 + assert_select ".secondary-actions a[href='#{relation_history_path relation}']", :count => 1 + end + + def test_visible_with_two_versions + relation = create(:relation, :with_history, :version => 2) + get old_relation_path(relation, 1) + assert_response :success + assert_template "old_relations/show" + assert_template :layout => "map" + assert_select "h4", /^Version/ do + assert_select "a[href='#{old_relation_path relation, 1}']", :count => 0 + end + assert_select ".secondary-actions a[href='#{api_old_relation_path relation, 1}']", :count => 1 + assert_select ".secondary-actions a[href='#{relation_path relation}']", :count => 1 + assert_select ".secondary-actions a[href='#{relation_history_path relation}']", :count => 1 + assert_select ".secondary-actions a[href='#{old_relation_path relation, 2}']", :count => 1 + + get old_relation_path(relation, 2) + assert_response :success + assert_template "old_relations/show" + assert_template :layout => "map" + assert_select "h4", /^Version/ do + assert_select "a[href='#{old_relation_path relation, 2}']", :count => 0 + end + assert_select ".secondary-actions a[href='#{api_old_relation_path relation, 2}']", :count => 1 + assert_select ".secondary-actions a[href='#{relation_path relation}']", :count => 1 + assert_select ".secondary-actions a[href='#{relation_history_path relation}']", :count => 1 + assert_select ".secondary-actions a[href='#{old_relation_path relation, 1}']", :count => 1 end def test_visible_with_members @@ -29,16 +59,67 @@ class OldRelationsControllerTest < ActionDispatch::IntegrationTest assert_template :layout => "map" end - def test_redacted - relation = create(:relation, :with_history, :deleted, :version => 2) - relation_v1 = relation.old_relations.find_by(:version => 1) - relation_v1.redact!(create(:redaction)) + test "show unrevealed redacted versions to anonymous users" do + relation = create_redacted_relation + get old_relation_path(relation, 1) + assert_response :success + assert_template "old_relations/show" + assert_template :layout => "map" + assert_select "td", :text => "TOP SECRET", :count => 0 + assert_select ".secondary-actions a[href='#{relation_path relation}']", :count => 1 + assert_select ".secondary-actions a[href='#{old_relation_path relation, 1, :params => { :show_redactions => true }}']", :count => 0 + assert_select ".secondary-actions a[href='#{old_relation_path relation, 1}']", :count => 0 + assert_select ".secondary-actions a[href='#{api_old_relation_path relation, 1}']", :count => 0 + end + + test "show unrevealed redacted versions to regular users" do + session_for(create(:user)) + relation = create_redacted_relation + get old_relation_path(relation, 1) + assert_response :success + assert_template "old_relations/show" + assert_template :layout => "map" + assert_select "td", :text => "TOP SECRET", :count => 0 + assert_select ".secondary-actions a[href='#{relation_path relation}']", :count => 1 + assert_select ".secondary-actions a[href='#{old_relation_path relation, 1, :params => { :show_redactions => true }}']", :count => 0 + assert_select ".secondary-actions a[href='#{old_relation_path relation, 1}']", :count => 0 + assert_select ".secondary-actions a[href='#{api_old_relation_path relation, 1}']", :count => 0 + end + + test "show unrevealed redacted versions to moderators" do + session_for(create(:moderator_user)) + relation = create_redacted_relation get old_relation_path(relation, 1) assert_response :success assert_template "old_relations/show" assert_template :layout => "map" - assert_select "a[href='#{old_relation_path relation, 1}']", :count => 0 - assert_select "a[href='#{relation_version_path relation, 1}']", :count => 0 + assert_select "td", :text => "TOP SECRET", :count => 0 + assert_select ".secondary-actions a[href='#{relation_path relation}']", :count => 1 + assert_select ".secondary-actions a[href='#{old_relation_path relation, 1, :params => { :show_redactions => true }}']", :count => 1 + assert_select ".secondary-actions a[href='#{old_relation_path relation, 1}']", :count => 0 + assert_select ".secondary-actions a[href='#{api_old_relation_path relation, 1}']", :count => 0 + end + + test "don't reveal redacted versions to anonymous users" do + relation = create_redacted_relation + get old_relation_path(relation, 1, :params => { :show_redactions => true }) + assert_response :redirect + end + + test "don't reveal redacted versions to regular users" do + session_for(create(:user)) + relation = create_redacted_relation + get old_relation_path(relation, 1, :params => { :show_redactions => true }) + assert_response :redirect + end + + test "reveal redacted versions to moderators" do + session_for(create(:moderator_user)) + relation = create_redacted_relation + get old_relation_path(relation, 1, :params => { :show_redactions => true }) + assert_response :success + assert_select "td", :text => "TOP SECRET", :count => 1 + assert_select ".secondary-actions a[href='#{old_relation_path relation, 1}']", :count => 1 end def test_not_found @@ -48,4 +129,14 @@ class OldRelationsControllerTest < ActionDispatch::IntegrationTest assert_template :layout => "map" assert_select "#sidebar_content", /relation #0 version 0 could not be found/ end + + private + + def create_redacted_relation + create(:relation, :with_history, :version => 2) do |relation| + relation_v1 = relation.old_relations.find_by(:version => 1) + create(:old_relation_tag, :old_relation => relation_v1, :k => "name", :v => "TOP SECRET") + relation_v1.redact!(create(:redaction)) + end + end end