Moritz
cbc9376b7b
Member/User auth tests use data-testid and #row-id selectors. Sidebar auth tests assert on data-testid=sidebar-administration. Sidebar test expects data-testid in expanded-menu-group markup.
102 lines
3.1 KiB
Elixir
102 lines
3.1 KiB
Elixir
defmodule MvWeb.MemberLiveAuthorizationTest do
|
|
@moduledoc """
|
|
Tests for UI authorization on Member LiveViews (Index and Show).
|
|
"""
|
|
use MvWeb.ConnCase, async: false
|
|
|
|
import Phoenix.LiveViewTest
|
|
|
|
alias Mv.Fixtures
|
|
|
|
describe "Member Index - Vorstand (read_only)" do
|
|
@tag role: :read_only
|
|
test "sees member list but not New Member button", %{conn: conn} do
|
|
_member = Fixtures.member_fixture()
|
|
|
|
{:ok, view, _html} = live(conn, "/members")
|
|
|
|
refute has_element?(view, "[data-testid=member-new]")
|
|
end
|
|
|
|
@tag role: :read_only
|
|
test "does not see Edit or Delete buttons in table", %{conn: conn} do
|
|
member = Fixtures.member_fixture()
|
|
|
|
{:ok, view, _html} = live(conn, "/members")
|
|
|
|
refute has_element?(view, "#row-#{member.id} [data-testid=member-edit]")
|
|
refute has_element?(view, "#row-#{member.id} [data-testid=member-delete]")
|
|
end
|
|
end
|
|
|
|
describe "Member Index - Kassenwart (normal_user)" do
|
|
@tag role: :normal_user
|
|
test "sees New Member and Edit buttons", %{conn: conn} do
|
|
member = Fixtures.member_fixture()
|
|
|
|
{:ok, view, _html} = live(conn, "/members")
|
|
|
|
assert has_element?(view, "[data-testid=member-new]")
|
|
assert has_element?(view, "#row-#{member.id} [data-testid=member-edit]")
|
|
end
|
|
|
|
@tag role: :normal_user
|
|
test "does not see Delete button", %{conn: conn} do
|
|
member = Fixtures.member_fixture()
|
|
|
|
{:ok, view, _html} = live(conn, "/members")
|
|
|
|
refute has_element?(view, "#row-#{member.id} [data-testid=member-delete]")
|
|
end
|
|
end
|
|
|
|
describe "Member Index - Admin" do
|
|
@tag role: :admin
|
|
test "sees New Member, Edit and Delete buttons", %{conn: conn} do
|
|
member = Fixtures.member_fixture()
|
|
|
|
{:ok, view, _html} = live(conn, "/members")
|
|
|
|
assert has_element?(view, "[data-testid=member-new]")
|
|
assert has_element?(view, "#row-#{member.id} [data-testid=member-edit]")
|
|
assert has_element?(view, "#row-#{member.id} [data-testid=member-delete]")
|
|
end
|
|
end
|
|
|
|
describe "Member Index - Mitglied (own_data)" do
|
|
@tag role: :member
|
|
test "is redirected when accessing /members", %{conn: conn, current_user: user} do
|
|
assert {:error, {:redirect, %{to: to}}} = live(conn, "/members")
|
|
assert to == "/users/#{user.id}"
|
|
end
|
|
end
|
|
|
|
describe "Member Show - Edit button visibility" do
|
|
@tag role: :admin
|
|
test "admin sees Edit button", %{conn: conn} do
|
|
member = Fixtures.member_fixture()
|
|
|
|
{:ok, view, _html} = live(conn, "/members/#{member.id}")
|
|
|
|
assert has_element?(view, "[data-testid=member-edit]")
|
|
end
|
|
|
|
@tag role: :read_only
|
|
test "read_only does not see Edit button", %{conn: conn} do
|
|
member = Fixtures.member_fixture()
|
|
|
|
{:ok, view, _html} = live(conn, "/members/#{member.id}")
|
|
|
|
refute has_element?(view, "[data-testid=member-edit]")
|
|
end
|
|
|
|
@tag role: :normal_user
|
|
test "normal_user sees Edit button", %{conn: conn} do
|
|
member = Fixtures.member_fixture()
|
|
|
|
{:ok, view, _html} = live(conn, "/members/#{member.id}")
|
|
|
|
assert has_element?(view, "[data-testid=member-edit]")
|
|
end
|
|
end
|
|
end
|