danbooru/test/functional/dmails_controller_test.rb

require 'test_helper'

class DmailsControllerTest < ActionDispatch::IntegrationTest
  context "The dmails controller" do
    setup do
      @user = create(:user)
      @unrelated_user = create(:user)
      as_user do
        @dmail = create(:dmail, :owner => @user)
      end
    end

    teardown do
      CurrentUser.user = nil
      CurrentUser.ip_addr = nil
    end

    context "new action" do
      should "get the page" do
        get_auth new_dmail_path, @user
        assert_response :success
      end

      context "with a respond_to_id" do
        should "check privileges" do
          @user2 = create(:user)
          get_auth new_dmail_path, @user2, params: {:respond_to_id => @dmail.id}
          assert_response 403
        end

        should "prefill the fields" do
          get_auth new_dmail_path, @user, params: {:respond_to_id => @dmail.id}
          assert_response :success
        end

        context "and a forward flag" do
          should "not populate the to field" do
            get_auth new_dmail_path, @user, params: {:respond_to_id => @dmail.id, :forward => true}
            assert_response :success
          end
        end
      end
    end

    context "index action" do
      should "show dmails owned by the current user by sent" do
        get_auth dmails_path, @user, params: {:search => {:owner_id => @dmail.owner_id, :folder => "sent"}}
        assert_response :success
      end

      should "show dmails owned by the current user by received" do
        get_auth dmails_path, @user, params: {:search => {:owner_id => @dmail.owner_id, :folder => "received"}}
        assert_response :success
      end

      should "not show dmails not owned by the current user" do
        get_auth dmails_path, @user, params: {:search => {:owner_id => @dmail.owner_id}}
        assert_response :success
      end

      should "work for banned users" do
        as(create(:admin_user)) do
          create(:ban, :user => @user)
        end
        get_auth dmails_path, @dmail.owner, params: {:search => {:owner_id => @dmail.owner_id, :folder => "sent"}}

        assert_response :success
      end
    end

    context "show action" do
      should "show dmails owned by the current user" do
        get_auth dmail_path(@dmail), @dmail.owner
        assert_response :success
      end

      should "not show dmails not owned by the current user" do
        get_auth dmail_path(@dmail), @unrelated_user
        assert_response(403)
      end
    end

    context "create action" do
      setup do
        @user_2 = create(:user)
      end

      should "create two messages, one for the sender and one for the recipient" do
        assert_difference("Dmail.count", 2) do
          dmail_attribs = {:to_id => @user_2.id, :title => "abc", :body => "abc"}
          post_auth dmails_path, @user, params: {:dmail => dmail_attribs}
          assert_redirected_to dmail_path(Dmail.last)
        end
      end
    end

    context "destroy action" do
      should "allow deletion if the dmail is owned by the current user" do
        assert_difference("Dmail.count", -1) do
          delete_auth dmail_path(@dmail), @user
          assert_redirected_to dmails_path
        end
      end

      should "not allow deletion if the dmail is not owned by the current user" do
        assert_difference("Dmail.count", 0) do
          delete_auth dmail_path(@dmail), @unrelated_user
        end
      end
    end
  end
end