Merge pull request #6177 from cirosantilli/public-user-pages

User pages are public

Merge pull request #6177 from cirosantilli/public-user-pages
User pages are public
Dmitriy Zaporozhets
2 parents aef78288 91571c07
Showing 19 changed files with 229 additions and 71 deletions Show diff stats
CHANGELOG
app/assets/stylesheets/sections/header.scss
app/controllers/users_controller.rb
app/views/help/public_access.html.haml
app/views/layouts/_head_panel.html.haml
app/views/layouts/_public_head_panel.html.haml
app/views/layouts/public.html.haml
app/views/layouts/public_projects.html.haml
app/views/layouts/public_users.html.haml
features/admin/groups.feature
features/group/group.feature
features/steps/admin/admin_groups.rb
features/steps/group/group.rb
features/steps/public/projects_feature.rb
features/steps/shared/paths.rb
features/steps/shared/project.rb
features/steps/shared/user.rb
features/steps/user.rb
features/user.feature
@@ -3,7 +3,7 @@ v 6.6.0
   - Permissions: Developer now can manage issue tracker (modify any issue)
   - Improve Code Compare page performance
   - Group avatar
-  - Pygments.rb replaced with highlight.js   
+  - Pygments.rb replaced with highlight.js
   - Improve Merge request diff store logic
   - Improve render performnace for MR show page
   - Fixed Assembla hardcoded project name
@@ -13,6 +13,7 @@ v 6.6.0
   - Mobile UI improvements (Drew Blessing)
   - Fix block/remove UI for admin::users#show page
   - Show users' group membership on users' activity page
+  - User pages are visible without login if user is authorized to a public project
 v 6.5.1
   - Fix branch selectbox when create merge request from fork
@@ -46,7 +47,7 @@ v6.4.3
 v6.4.2
   - Fixed wrong behaviour of script/upgrade.rb
-v6.4.1 
+v6.4.1
   - Fixed bug with repository rename
   - Fixed bug with project transfer
@@ -56,7 +56,7 @@ header {
       font-size: 18px;
       .app_logo { margin-left: -15px; }
-      .project_name {
+      .title {
         display: inline-block;
         overflow: hidden;
         text-overflow: ellipsis;
@@ -127,7 +127,7 @@ header {
    * Project / Area name
    *
    */
-  .project_name {
+  .title {
     position: relative;
     float: left;
     margin: 0;
@@ -227,7 +227,7 @@ header {
         }
       }
     }
-    .project_name {
+    .title {
       a {
         color: #BBB;
         &:hover {
 class UsersController < ApplicationController
-  layout 'navless'
+
+  skip_before_filter :authenticate_user!, only: [:show]
+  layout :determine_layout
   def show
-    @user = User.find_by!(username: params[:username])
-    @projects = @user.authorized_projects.where(id: current_user.authorized_projects.pluck(:id)).includes(:namespace)
+    @user = User.find_by_username!(params[:username])
+    @projects = @user.authorized_projects.includes(:namespace).select {|project| can?(current_user, :read_project, project)}
+    if !current_user && @projects.empty?
+      return authenticate_user!
+    end
     @events = @user.recent_events.where(project_id: @projects.map(&:id)).limit(20)
-
     @title = @user.name
   end
+
+  def determine_layout
+    if current_user
+      'navless'
+    else
+      'public_users'
+    end
+  end
 end
@@ -44,3 +44,18 @@
     %li Go to your project dashboard
     %li Click on the "Edit" tab
     %li Change "Visibility Level"
+
+  %h4 Visibility of users
+  The public page of users, located at
+  = succeed "," do
+    %code u/username
+  is visible if either:
+  %ul
+    %li
+      You are logged in.
+    %li
+      %p
+        You are logged out, and the target user is authorized to (is Guest, Reporter, etc.)
+        at least one public project.
+      %p Otherwise, you will be redirected to the sign in page.
+  When visiting the public page of an user, you will only see listed projects which you can view yourself.
@@ -6,7 +6,7 @@
         = link_to root_path, class: "home has_bottom_tooltip", title: "Dashboard" do
           %h1 GITLAB
         %span.separator
-      %h1.project_name= title
+      %h1.title= title
       %button.navbar-toggle{"data-target" => ".navbar-collapse", "data-toggle" => "collapse", type: "button"}
         %span.sr-only Toggle navigation
@@ -6,11 +6,7 @@
         = link_to public_root_path, class: "home" do
           %h1 GITLAB
         %span.separator
-      %h1.project_name
-        - if @project
-          = project_title(@project)
-        - else
-          Public Projects
+      %h1.title= title
       .pull-right
         = link_to "Sign in", new_session_path(:user), class: 'btn btn-sign-in btn-new'
@@ -5,7 +5,6 @@
     - if current_user
       = render "layouts/head_panel", title: "Public Projects"
     - else
-      = render "layouts/public_head_panel"
-
+      = render "layouts/public_head_panel", title: "Public Projects"
     .container.navless-container
       .content= yield
@@ -2,8 +2,8 @@
 %html{ lang: "en"}
   = render "layouts/head", title: @project.name_with_namespace
   %body{class: "#{app_theme} application", :'data-page' => body_data_page}
-    = render "layouts/public_head_panel"
-    %nav.main-nav.navbar-collapse.collapse
+    = render "layouts/public_head_panel", title: @project.name_with_namespace
+    %nav.main-nav
       .container= render 'layouts/nav/project'
     .container
       .content= yield
@@ -0,0 +1,7 @@
+!!! 5
+%html{ lang: "en"}
+  = render "layouts/head", title: @title
+  %body{class: "#{app_theme} application", :'data-page' => body_data_page}
+    = render "layouts/public_head_panel", title: @title
+    .container.navless-container
+      .content= yield
@@ -2,7 +2,7 @@ Feature: Admin Groups
   Background:
     Given I sign in as an admin
     And I have group with projects
-    And Create gitlab user "John"
+    And Create user "John Doe"
     And I visit admin groups page
   Scenario: See group list
@@ -17,5 +17,5 @@ Feature: Admin Groups
   @javascript
   Scenario: Add user into projects in group
     When I visit admin group page
-    When I select user "John" from user list as "Reporter"
-    Then I should see "John" in team list in every project as "Reporter"
+    When I select user "John Doe" from user list as "Reporter"
+    Then I should see "John Doe" in team list in every project as "Reporter"
@@ -21,10 +21,10 @@ Feature: Groups
   @javascript
   Scenario: I should add user to projects in Group
-    Given I have new user "John"
+    Given Create user "John Doe"
     When I visit group members page
-    And I select user "John" from list with role "Reporter"
-    Then I should see user "John" in team list
+    And I select user "John Doe" from list with role "Reporter"
+    Then I should see user "John Doe" in team list
   Scenario: I should see edit group page
     When I visit group settings page
 class AdminGroups < Spinach::FeatureSteps
   include SharedAuthentication
   include SharedPaths
+  include SharedUser
   include SharedActiveTab
   include Select2Helper
@@ -20,10 +21,6 @@ class AdminGroups &lt; Spinach::FeatureSteps
     @project.team << [current_user, :master]
   end
-  And 'Create gitlab user "John"' do
-    create(:user, name: "John")
-  end
-
   And 'submit form with new group info' do
     fill_in 'group_name', with: 'gitlab'
     fill_in 'group_description', with: 'Group description'
@@ -39,8 +36,8 @@ class AdminGroups &lt; Spinach::FeatureSteps
     current_path.should == admin_group_path(Group.last)
   end
-  When 'I select user "John" from user list as "Reporter"' do
-    user = User.find_by(name: "John")
+  When 'I select user "John Doe" from user list as "Reporter"' do
+    user = User.find_by(name: "John Doe")
     select2(user.id, from: "#user_ids", multiple: true)
     within "#new_team_member" do
       select "Reporter", from: "group_access"
@@ -48,9 +45,9 @@ class AdminGroups &lt; Spinach::FeatureSteps
     click_button "Add users into group"
   end
-  Then 'I should see "John" in team list in every project as "Reporter"' do
+  Then 'I should see "John Doe" in team list in every project as "Reporter"' do
     within ".group-users-list" do
-      page.should have_content "John"
+      page.should have_content "John Doe"
       page.should have_content "Reporter"
     end
   end
 class Groups < Spinach::FeatureSteps
   include SharedAuthentication
   include SharedPaths
+  include SharedUser
   include Select2Helper
   Then 'I should see projects list' do
@@ -34,12 +35,8 @@ class Groups &lt; Spinach::FeatureSteps
     end
   end
-  Given 'I have new user "John"' do
-    create(:user, name: "John")
-  end
-
-  And 'I select user "John" from list with role "Reporter"' do
-    user = User.find_by(name: "John")
+  And 'I select user "John Doe" from list with role "Reporter"' do
+    user = User.find_by(name: "John Doe")
     within ".users-group-form" do
       select2(user.id, from: "#user_ids", multiple: true)
       select "Reporter", from: "group_access"
@@ -47,9 +44,9 @@ class Groups &lt; Spinach::FeatureSteps
     click_button "Add users into group"
   end
-  Then 'I should see user "John" in team list' do
+  Then 'I should see user "John Doe" in team list' do
     projects_with_access = find(".ui-box .well-list")
-    projects_with_access.should have_content("John")
+    projects_with_access.should have_content("John Doe")
   end
   Given 'project from group has issues assigned to me' do
@@ -3,12 +3,8 @@ class Spinach::Features::PublicProjectsFeature &lt; Spinach::FeatureSteps
   include SharedPaths
   include SharedProject
-  step 'I should see project "Community"' do
-    page.should have_content "Community"
-  end
-
-  step 'I should not see project "Enterprise"' do
-    page.should_not have_content "Enterprise"
+  step 'public empty project "Empty Public Project"' do
+    create :empty_project, name: 'Empty Public Project', visibility_level: Gitlab::VisibilityLevel::PUBLIC
   end
   step 'I should see project "Empty Public Project"' do
@@ -24,14 +20,6 @@ class Spinach::Features::PublicProjectsFeature &lt; Spinach::FeatureSteps
     page.should have_content 'README.md'
   end
-  step 'public project "Community"' do
-    create :project, name: 'Community', visibility_level: Gitlab::VisibilityLevel::PUBLIC
-  end
-
-  step 'public empty project "Empty Public Project"' do
-    create :empty_project, name: 'Empty Public Project', visibility_level: Gitlab::VisibilityLevel::PUBLIC
-  end
-
   step 'I visit empty project page' do
     project = Project.find_by(name: 'Empty Public Project')
     visit project_path(project)
@@ -60,10 +48,6 @@ class Spinach::Features::PublicProjectsFeature &lt; Spinach::FeatureSteps
     end
   end
-  step 'private project "Enterprise"' do
-    create :project, name: 'Enterprise'
-  end
-
   step 'I visit project "Enterprise" page' do
     project = Project.find_by(name: 'Enterprise')
     visit project_path(project)
@@ -75,18 +59,6 @@ class Spinach::Features::PublicProjectsFeature &lt; Spinach::FeatureSteps
     end
   end
-  step 'internal project "Internal"' do
-    create :project, name: 'Internal', visibility_level: Gitlab::VisibilityLevel::INTERNAL
-  end
-
-  step 'I should see project "Internal"' do
-    page.should have_content "Internal"
-  end
-
-  step 'I should not see project "Internal"' do
-    page.should_not have_content "Internal"
-  end
-
   step 'I visit project "Internal" page' do
     project = Project.find_by(name: 'Internal')
     visit project_path(project)
@@ -6,6 +6,14 @@ module SharedPaths
   end
   # ----------------------------------------
+  # User
+  # ----------------------------------------
+
+  step 'I visit user "John Doe" page' do
+    visit user_path("john_doe")
+  end
+
+  # ----------------------------------------
   # Group
   # ----------------------------------------
@@ -65,4 +65,68 @@ module SharedProject
   def current_project
     @project ||= Project.first
   end
+
+  # ----------------------------------------
+  # Visibility level
+  # ----------------------------------------
+
+  step 'private project "Enterprise"' do
+    create :project, name: 'Enterprise'
+  end
+
+  step 'I should see project "Enterprise"' do
+    page.should have_content "Enterprise"
+  end
+
+  step 'I should not see project "Enterprise"' do
+    page.should_not have_content "Enterprise"
+  end
+
+  step 'internal project "Internal"' do
+    create :project, name: 'Internal', visibility_level: Gitlab::VisibilityLevel::INTERNAL
+  end
+
+  step 'I should see project "Internal"' do
+    page.should have_content "Internal"
+  end
+
+  step 'I should not see project "Internal"' do
+    page.should_not have_content "Internal"
+  end
+
+  step 'public project "Community"' do
+    create :project, name: 'Community', visibility_level: Gitlab::VisibilityLevel::PUBLIC
+  end
+
+  step 'I should see project "Community"' do
+    page.should have_content "Community"
+  end
+
+  step 'I should not see project "Community"' do
+    page.should_not have_content "Community"
+  end
+
+  step '"John Doe" is authorized to private project "Enterprise"' do
+    user = User.find_by(name: "John Doe")
+    user ||= create(:user, name: "John Doe", username: "john_doe")
+    project = Project.find_by(name: "Enterprise")
+    project ||= create(:project, name: "Enterprise", namespace: user.namespace)
+    project.team << [user, :master]
+  end
+
+  step '"John Doe" is authorized to internal project "Internal"' do
+    user = User.find_by(name: "John Doe")
+    user ||= create(:user, name: "John Doe", username: "john_doe")
+    project = Project.find_by(name: "Internal")
+    project ||= create :project, name: 'Internal', visibility_level: Gitlab::VisibilityLevel::INTERNAL
+    project.team << [user, :master]
+  end
+
+  step '"John Doe" is authorized to public project "Community"' do
+    user = User.find_by(name: "John Doe")
+    user ||= create(:user, name: "John Doe", username: "john_doe")
+    project = Project.find_by(name: "Community")
+    project ||= create :project, name: 'Community', visibility_level: Gitlab::VisibilityLevel::PUBLIC
+    project.team << [user, :master]
+  end
 end
@@ -0,0 +1,11 @@
+module SharedUser
+  include Spinach::DSL
+
+  step 'Create user "John Doe"' do
+    create(:user, name: "John Doe", username: "john_doe")
+  end
+
+  step 'I sign in as "John Doe"' do
+    login_with(User.find_by(name: "John Doe"))
+  end
+end
@@ -0,0 +1,10 @@
+class Spinach::Features::User < Spinach::FeatureSteps
+  include SharedAuthentication
+  include SharedPaths
+  include SharedUser
+  include SharedProject
+
+  step 'I should see user "John Doe" page' do
+    expect(page.title).to match(/^\s*John Doe/)
+  end
+end
@@ -0,0 +1,69 @@
+Feature: User
+  Background:
+    Given Create user "John Doe"
+    And "John Doe" is authorized to private project "Enterprise"
+
+  # Signed out
+
+  Scenario: I visit user "John Doe" page while not signed in when he is authorized to a public project
+    Given "John Doe" is authorized to internal project "Internal"
+    And "John Doe" is authorized to public project "Community"
+    When I visit user "John Doe" page
+    Then I should see user "John Doe" page
+    And I should not see project "Enterprise"
+    And I should not see project "Internal"
+    And I should see project "Community"
+
+  Scenario: I visit user "John Doe" page while not signed in when he is not authorized to a public project
+    Given "John Doe" is authorized to internal project "Internal"
+    When I visit user "John Doe" page
+    Then I should be redirected to sign in page
+
+  # Signed in as someone else
+
+  Scenario: I visit user "John Doe" page while signed in as someone else when he is authorized to a public project
+    Given "John Doe" is authorized to public project "Community"
+    And "John Doe" is authorized to internal project "Internal"
+    And I sign in as a user
+    When I visit user "John Doe" page
+    Then I should see user "John Doe" page
+    And I should not see project "Enterprise"
+    And I should see project "Internal"
+    And I should see project "Community"
+
+  Scenario: I visit user "John Doe" page while signed in as someone else when he is not authorized to a public project
+    Given "John Doe" is authorized to internal project "Internal"
+    And I sign in as a user
+    When I visit user "John Doe" page
+    Then I should see user "John Doe" page
+    And I should not see project "Enterprise"
+    And I should see project "Internal"
+    And I should not see project "Community"
+
+  Scenario: I visit user "John Doe" page while signed in as someone else when he is not authorized to a project I can see
+    Given I sign in as a user
+    When I visit user "John Doe" page
+    Then I should see user "John Doe" page
+    And I should not see project "Enterprise"
+    And I should not see project "Internal"
+    And I should not see project "Community"
+
+  # Signed in as the user himself
+
+  Scenario: I visit user "John Doe" page while signed in as "John Doe" when he has a public project
+    Given "John Doe" is authorized to internal project "Internal"
+    And "John Doe" is authorized to public project "Community"
+    And I sign in as "John Doe"
+    When I visit user "John Doe" page
+    Then I should see user "John Doe" page
+    And I should see project "Enterprise"
+    And I should see project "Internal"
+    And I should see project "Community"
+
+  Scenario: I visit user "John Doe" page while signed in as "John Doe" when he has no public project
+    Given I sign in as "John Doe"
+    When I visit user "John Doe" page
+    Then I should see user "John Doe" page
+    And I should see project "Enterprise"
+    And I should not see project "Internal"
+    And I should not see project "Community"
	@@ -56,7 +56,7 @@ header {		@@ -56,7 +56,7 @@ header {
56	font-size: 18px;	56	font-size: 18px;
57		57
58	.app_logo { margin-left: -15px; }	58	.app_logo { margin-left: -15px; }
59	- .project_name {	59	+ .title {
60	display: inline-block;	60	display: inline-block;
61	overflow: hidden;	61	overflow: hidden;
62	text-overflow: ellipsis;	62	text-overflow: ellipsis;
	@@ -127,7 +127,7 @@ header {		@@ -127,7 +127,7 @@ header {
127	* Project / Area name	127	* Project / Area name
128	*	128	*
129	*/	129	*/
130	- .project_name {	130	+ .title {
131	position: relative;	131	position: relative;
132	float: left;	132	float: left;
133	margin: 0;	133	margin: 0;
	@@ -227,7 +227,7 @@ header {		@@ -227,7 +227,7 @@ header {
227	}	227	}
228	}	228	}
229	}	229	}
230	- .project_name {	230	+ .title {
231	a {	231	a {
232	color: #BBB;	232	color: #BBB;
233	&:hover {	233	&:hover {
1	class UsersController < ApplicationController	1	class UsersController < ApplicationController
2	- layout 'navless'	2	+
		3	+ skip_before_filter :authenticate_user!, only: [:show]
		4	+ layout :determine_layout
3		5
4	def show	6	def show
5	- @user = User.find_by!(username: params[:username])
6	- @projects = @user.authorized_projects.where(id: current_user.authorized_projects.pluck(:id)).includes(:namespace)	7	+ @user = User.find_by_username!(params[:username])
		8	+ @projects = @user.authorized_projects.includes(:namespace).select {\|project\| can?(current_user, :read_project, project)}
		9	+ if !current_user && @projects.empty?
		10	+ return authenticate_user!
		11	+ end
7	@events = @user.recent_events.where(project_id: @projects.map(&:id)).limit(20)	12	@events = @user.recent_events.where(project_id: @projects.map(&:id)).limit(20)
8	-
9	@title = @user.name	13	@title = @user.name
10	end	14	end
		15	+
		16	+ def determine_layout
		17	+ if current_user
		18	+ 'navless'
		19	+ else
		20	+ 'public_users'
		21	+ end
		22	+ end
11	end	23	end
	@@ -44,3 +44,18 @@		@@ -44,3 +44,18 @@
44	%li Go to your project dashboard	44	%li Go to your project dashboard
45	%li Click on the "Edit" tab	45	%li Click on the "Edit" tab
46	%li Change "Visibility Level"	46	%li Change "Visibility Level"
		47	+
		48	+ %h4 Visibility of users
		49	+ The public page of users, located at
		50	+ = succeed "," do
		51	+ %code u/username
		52	+ is visible if either:
		53	+ %ul
		54	+ %li
		55	+ You are logged in.
		56	+ %li
		57	+ %p
		58	+ You are logged out, and the target user is authorized to (is Guest, Reporter, etc.)
		59	+ at least one public project.
		60	+ %p Otherwise, you will be redirected to the sign in page.
		61	+ When visiting the public page of an user, you will only see listed projects which you can view yourself.
	@@ -6,7 +6,7 @@		@@ -6,7 +6,7 @@
6	= link_to root_path, class: "home has_bottom_tooltip", title: "Dashboard" do	6	= link_to root_path, class: "home has_bottom_tooltip", title: "Dashboard" do
7	%h1 GITLAB	7	%h1 GITLAB
8	%span.separator	8	%span.separator
9	- %h1.project_name= title	9	+ %h1.title= title
10		10
11	%button.navbar-toggle{"data-target" => ".navbar-collapse", "data-toggle" => "collapse", type: "button"}	11	%button.navbar-toggle{"data-target" => ".navbar-collapse", "data-toggle" => "collapse", type: "button"}
12	%span.sr-only Toggle navigation	12	%span.sr-only Toggle navigation
@@ -0,0 +1,7 @@		@@ -0,0 +1,7 @@
	1	+!!! 5
	2	+%html{ lang: "en"}
	3	+ = render "layouts/head", title: @title
	4	+ %body{class: "#{app_theme} application", :'data-page' => body_data_page}
	5	+ = render "layouts/public_head_panel", title: @title
	6	+ .container.navless-container
	7	+ .content= yield
	@@ -3,12 +3,8 @@ class Spinach::Features::PublicProjectsFeature < Spinach::FeatureSteps		@@ -3,12 +3,8 @@ class Spinach::Features::PublicProjectsFeature < Spinach::FeatureSteps
3	include SharedPaths	3	include SharedPaths
4	include SharedProject	4	include SharedProject
5		5
6	- step 'I should see project "Community"' do
7	- page.should have_content "Community"
8	- end
9	-
10	- step 'I should not see project "Enterprise"' do
11	- page.should_not have_content "Enterprise"	6	+ step 'public empty project "Empty Public Project"' do
		7	+ create :empty_project, name: 'Empty Public Project', visibility_level: Gitlab::VisibilityLevel::PUBLIC
12	end	8	end
13		9
14	step 'I should see project "Empty Public Project"' do	10	step 'I should see project "Empty Public Project"' do
	@@ -24,14 +20,6 @@ class Spinach::Features::PublicProjectsFeature < Spinach::FeatureSteps		@@ -24,14 +20,6 @@ class Spinach::Features::PublicProjectsFeature < Spinach::FeatureSteps
24	page.should have_content 'README.md'	20	page.should have_content 'README.md'
25	end	21	end
26		22
27	- step 'public project "Community"' do
28	- create :project, name: 'Community', visibility_level: Gitlab::VisibilityLevel::PUBLIC
29	- end
30	-
31	- step 'public empty project "Empty Public Project"' do
32	- create :empty_project, name: 'Empty Public Project', visibility_level: Gitlab::VisibilityLevel::PUBLIC
33	- end
34	-
35	step 'I visit empty project page' do	23	step 'I visit empty project page' do
36	project = Project.find_by(name: 'Empty Public Project')	24	project = Project.find_by(name: 'Empty Public Project')
37	visit project_path(project)	25	visit project_path(project)
	@@ -60,10 +48,6 @@ class Spinach::Features::PublicProjectsFeature < Spinach::FeatureSteps		@@ -60,10 +48,6 @@ class Spinach::Features::PublicProjectsFeature < Spinach::FeatureSteps
60	end	48	end
61	end	49	end
62		50
63	- step 'private project "Enterprise"' do
64	- create :project, name: 'Enterprise'
65	- end
66	-
67	step 'I visit project "Enterprise" page' do	51	step 'I visit project "Enterprise" page' do
68	project = Project.find_by(name: 'Enterprise')	52	project = Project.find_by(name: 'Enterprise')
69	visit project_path(project)	53	visit project_path(project)
	@@ -75,18 +59,6 @@ class Spinach::Features::PublicProjectsFeature < Spinach::FeatureSteps		@@ -75,18 +59,6 @@ class Spinach::Features::PublicProjectsFeature < Spinach::FeatureSteps
75	end	59	end
76	end	60	end
77		61
78	- step 'internal project "Internal"' do
79	- create :project, name: 'Internal', visibility_level: Gitlab::VisibilityLevel::INTERNAL
80	- end
81	-
82	- step 'I should see project "Internal"' do
83	- page.should have_content "Internal"
84	- end
85	-
86	- step 'I should not see project "Internal"' do
87	- page.should_not have_content "Internal"
88	- end
89	-
90	step 'I visit project "Internal" page' do	62	step 'I visit project "Internal" page' do
91	project = Project.find_by(name: 'Internal')	63	project = Project.find_by(name: 'Internal')
92	visit project_path(project)	64	visit project_path(project)
	@@ -6,6 +6,14 @@ module SharedPaths		@@ -6,6 +6,14 @@ module SharedPaths
6	end	6	end
7		7
8	# ----------------------------------------	8	# ----------------------------------------
		9	+ # User
		10	+ # ----------------------------------------
		11	+
		12	+ step 'I visit user "John Doe" page' do
		13	+ visit user_path("john_doe")
		14	+ end
		15	+
		16	+ # ----------------------------------------
9	# Group	17	# Group
10	# ----------------------------------------	18	# ----------------------------------------
11		19
	@@ -65,4 +65,68 @@ module SharedProject		@@ -65,4 +65,68 @@ module SharedProject
65	def current_project	65	def current_project
66	@project \|\|= Project.first	66	@project \|\|= Project.first
67	end	67	end
		68	+
		69	+ # ----------------------------------------
		70	+ # Visibility level
		71	+ # ----------------------------------------
		72	+
		73	+ step 'private project "Enterprise"' do
		74	+ create :project, name: 'Enterprise'
		75	+ end
		76	+
		77	+ step 'I should see project "Enterprise"' do
		78	+ page.should have_content "Enterprise"
		79	+ end
		80	+
		81	+ step 'I should not see project "Enterprise"' do
		82	+ page.should_not have_content "Enterprise"
		83	+ end
		84	+
		85	+ step 'internal project "Internal"' do
		86	+ create :project, name: 'Internal', visibility_level: Gitlab::VisibilityLevel::INTERNAL
		87	+ end
		88	+
		89	+ step 'I should see project "Internal"' do
		90	+ page.should have_content "Internal"
		91	+ end
		92	+
		93	+ step 'I should not see project "Internal"' do
		94	+ page.should_not have_content "Internal"
		95	+ end
		96	+
		97	+ step 'public project "Community"' do
		98	+ create :project, name: 'Community', visibility_level: Gitlab::VisibilityLevel::PUBLIC
		99	+ end
		100	+
		101	+ step 'I should see project "Community"' do
		102	+ page.should have_content "Community"
		103	+ end
		104	+
		105	+ step 'I should not see project "Community"' do
		106	+ page.should_not have_content "Community"
		107	+ end
		108	+
		109	+ step '"John Doe" is authorized to private project "Enterprise"' do
		110	+ user = User.find_by(name: "John Doe")
		111	+ user \|\|= create(:user, name: "John Doe", username: "john_doe")
		112	+ project = Project.find_by(name: "Enterprise")
		113	+ project \|\|= create(:project, name: "Enterprise", namespace: user.namespace)
		114	+ project.team << [user, :master]
		115	+ end
		116	+
		117	+ step '"John Doe" is authorized to internal project "Internal"' do
		118	+ user = User.find_by(name: "John Doe")
		119	+ user \|\|= create(:user, name: "John Doe", username: "john_doe")
		120	+ project = Project.find_by(name: "Internal")
		121	+ project \|\|= create :project, name: 'Internal', visibility_level: Gitlab::VisibilityLevel::INTERNAL
		122	+ project.team << [user, :master]
		123	+ end
		124	+
		125	+ step '"John Doe" is authorized to public project "Community"' do
		126	+ user = User.find_by(name: "John Doe")
		127	+ user \|\|= create(:user, name: "John Doe", username: "john_doe")
		128	+ project = Project.find_by(name: "Community")
		129	+ project \|\|= create :project, name: 'Community', visibility_level: Gitlab::VisibilityLevel::PUBLIC
		130	+ project.team << [user, :master]
		131	+ end
68	end	132	end
@@ -0,0 +1,11 @@		@@ -0,0 +1,11 @@
	1	+module SharedUser
	2	+ include Spinach::DSL
	3	+
	4	+ step 'Create user "John Doe"' do
	5	+ create(:user, name: "John Doe", username: "john_doe")
	6	+ end
	7	+
	8	+ step 'I sign in as "John Doe"' do
	9	+ login_with(User.find_by(name: "John Doe"))
	10	+ end
	11	+end
@@ -0,0 +1,10 @@		@@ -0,0 +1,10 @@
	1	+class Spinach::Features::User < Spinach::FeatureSteps
	2	+ include SharedAuthentication
	3	+ include SharedPaths
	4	+ include SharedUser
	5	+ include SharedProject
	6	+
	7	+ step 'I should see user "John Doe" page' do
	8	+ expect(page.title).to match(/^\s*John Doe/)
	9	+ end
	10	+end