fixes #2199

test/functional/bulk_update_requests_controller_test.rb

@@ -0,0 +1,98 @@
+require 'test_helper'
+
+class BulkUpdateRequestsControllerTest < ActionController::TestCase
+  context "BulkUpdateRequestsController" do
+    setup do
+      @user = FactoryGirl.create(:user)
+      @admin = FactoryGirl.create(:admin_user)
+    end
+
+    context "#new" do
+      should "render" do
+        get :new, {}, {:user_id => @user.id}
+        assert_response :success
+      end
+    end
+
+    context "#create" do
+      should "succeed" do
+        assert_difference("BulkUpdateRequest.count", 1) do
+          post :create, {:bulk_update_request => {:script => "create alias aaa -> bbb"}}, {:user_id => @user.id}
+        end
+      end
+    end
+
+    context "#index" do
+      setup do
+        CurrentUser.scoped(@user) do
+          @bulk_update_request = FactoryGirl.create(:bulk_update_request)
+        end
+      end
+
+      should "render" do
+        get :index, {}, {:user_id => @user.id}
+        assert_response :success
+      end
+    end
+
+    context "#destroy" do
+      setup do
+        CurrentUser.scoped(@user) do
+          @bulk_update_request = FactoryGirl.create(:bulk_update_request)
+        end
+      end
+
+      context "for the creator" do
+        should "succeed" do
+          assert_difference("BulkUpdateRequest.count", -1) do
+            delete :destroy, {:id => @bulk_update_request.id}, {:user_id => @user.id}
+          end
+        end
+      end
+
+      context "for another member" do
+        setup do
+          @another_user = FactoryGirl.create(:user)
+        end
+
+        should "fail" do
+          assert_difference("BulkUpdateRequest.count", 0) do
+            delete :destroy, {:id => @bulk_update_request.id}, {:user_id => @another_user.id}
+          end
+        end
+      end
+
+      context "for an admin" do
+        should "succeed" do
+          assert_difference("BulkUpdateRequest.count", -1) do
+            delete :destroy, {:id => @bulk_update_request.id}, {:user_id => @admin.id}
+          end
+        end
+      end
+    end
+
+    context "#approve" do
+      setup do
+        CurrentUser.scoped(@user) do
+          @bulk_update_request = FactoryGirl.create(:bulk_update_request)
+        end
+      end
+
+      context "for a member" do
+        should "fail" do
+          post :approve, {:id => @bulk_update_request.id}, {:user_id => @user.id}
+          @bulk_update_request.reload
+          assert_equal("pending", @bulk_update_request.status)
+        end
+      end
+
+      context "for an admin" do
+        should "succeed" do
+          post :approve, {:id => @bulk_update_request.id}, {:user_id => @admin.id}
+          @bulk_update_request.reload
+          assert_equal("approved", @bulk_update_request.status)
+        end
+      end
+    end
+  end
+end