Download as
Browse Code »

Commit ea779cc5abe9218193197d1c7b60d898dde47904

Authored by Dmitriy Zaporozhets
1 parent bcdc7b5d
Exists in master and in 4 other branches 6-8-stable, 7-0-stable, 7-0-stable-spb, spb-stable

Public/Private projects security specs

Showing 3 changed files with 469 additions and 474 deletions   Show diff stats
spec/features/security/project/private_access_spec.rb 0 → 100644
  Diff comments   View file @ea779cc
@@ -0,0 +1,218 @@ @@ -0,0 +1,218 @@
  1 +require 'spec_helper'
  2 +
  3 +describe "Private Project Access" do
  4 + let(:project) { create(:project_with_code) }
  5 +
  6 + let(:master) { create(:user) }
  7 + let(:guest) { create(:user) }
  8 + let(:reporter) { create(:user) }
  9 +
  10 + before do
  11 + # full access
  12 + project.team << [master, :master]
  13 +
  14 + # readonly
  15 + project.team << [reporter, :reporter]
  16 + end
  17 +
  18 + describe "GET /:project_path" do
  19 + subject { project_path(project) }
  20 +
  21 + it { should be_allowed_for master }
  22 + it { should be_allowed_for reporter }
  23 + it { should be_allowed_for :admin }
  24 + it { should be_denied_for guest }
  25 + it { should be_denied_for :user }
  26 + it { should be_denied_for :visitor }
  27 + end
  28 +
  29 + describe "GET /:project_path/tree/master" do
  30 + subject { project_tree_path(project, project.repository.root_ref) }
  31 +
  32 + it { should be_allowed_for master }
  33 + it { should be_allowed_for reporter }
  34 + it { should be_allowed_for :admin }
  35 + it { should be_denied_for guest }
  36 + it { should be_denied_for :user }
  37 + it { should be_denied_for :visitor }
  38 + end
  39 +
  40 + describe "GET /:project_path/commits/master" do
  41 + subject { project_commits_path(project, project.repository.root_ref, limit: 1) }
  42 +
  43 + it { should be_allowed_for master }
  44 + it { should be_allowed_for reporter }
  45 + it { should be_allowed_for :admin }
  46 + it { should be_denied_for guest }
  47 + it { should be_denied_for :user }
  48 + it { should be_denied_for :visitor }
  49 + end
  50 +
  51 + describe "GET /:project_path/commit/:sha" do
  52 + subject { project_commit_path(project, project.repository.commit) }
  53 +
  54 + it { should be_allowed_for master }
  55 + it { should be_allowed_for reporter }
  56 + it { should be_allowed_for :admin }
  57 + it { should be_denied_for guest }
  58 + it { should be_denied_for :user }
  59 + it { should be_denied_for :visitor }
  60 + end
  61 +
  62 + describe "GET /:project_path/compare" do
  63 + subject { project_compare_index_path(project) }
  64 +
  65 + it { should be_allowed_for master }
  66 + it { should be_allowed_for reporter }
  67 + it { should be_allowed_for :admin }
  68 + it { should be_denied_for guest }
  69 + it { should be_denied_for :user }
  70 + it { should be_denied_for :visitor }
  71 + end
  72 +
  73 + describe "GET /:project_path/team" do
  74 + subject { project_team_index_path(project) }
  75 +
  76 + it { should be_allowed_for master }
  77 + it { should be_denied_for reporter }
  78 + it { should be_allowed_for :admin }
  79 + it { should be_denied_for guest }
  80 + it { should be_denied_for :user }
  81 + it { should be_denied_for :visitor }
  82 + end
  83 +
  84 + describe "GET /:project_path/wall" do
  85 + subject { project_wall_path(project) }
  86 +
  87 + it { should be_allowed_for master }
  88 + it { should be_allowed_for reporter }
  89 + it { should be_allowed_for :admin }
  90 + it { should be_denied_for guest }
  91 + it { should be_denied_for :user }
  92 + it { should be_denied_for :visitor }
  93 + end
  94 +
  95 + describe "GET /:project_path/blob" do
  96 + before do
  97 + commit = project.repository.commit
  98 + path = commit.tree.contents.select { |i| i.is_a?(Grit::Blob) }.first.name
  99 + @blob_path = project_blob_path(project, File.join(commit.id, path))
  100 + end
  101 +
  102 + it { @blob_path.should be_allowed_for master }
  103 + it { @blob_path.should be_allowed_for reporter }
  104 + it { @blob_path.should be_allowed_for :admin }
  105 + it { @blob_path.should be_denied_for guest }
  106 + it { @blob_path.should be_denied_for :user }
  107 + it { @blob_path.should be_denied_for :visitor }
  108 + end
  109 +
  110 + describe "GET /:project_path/edit" do
  111 + subject { edit_project_path(project) }
  112 +
  113 + it { should be_allowed_for master }
  114 + it { should be_denied_for reporter }
  115 + it { should be_allowed_for :admin }
  116 + it { should be_denied_for guest }
  117 + it { should be_denied_for :user }
  118 + it { should be_denied_for :visitor }
  119 + end
  120 +
  121 + describe "GET /:project_path/deploy_keys" do
  122 + subject { project_deploy_keys_path(project) }
  123 +
  124 + it { should be_allowed_for master }
  125 + it { should be_denied_for reporter }
  126 + it { should be_allowed_for :admin }
  127 + it { should be_denied_for guest }
  128 + it { should be_denied_for :user }
  129 + it { should be_denied_for :visitor }
  130 + end
  131 +
  132 + describe "GET /:project_path/issues" do
  133 + subject { project_issues_path(project) }
  134 +
  135 + it { should be_allowed_for master }
  136 + it { should be_allowed_for reporter }
  137 + it { should be_allowed_for :admin }
  138 + it { should be_denied_for guest }
  139 + it { should be_denied_for :user }
  140 + it { should be_denied_for :visitor }
  141 + end
  142 +
  143 + describe "GET /:project_path/snippets" do
  144 + subject { project_snippets_path(project) }
  145 +
  146 + it { should be_allowed_for master }
  147 + it { should be_allowed_for reporter }
  148 + it { should be_allowed_for :admin }
  149 + it { should be_denied_for guest }
  150 + it { should be_denied_for :user }
  151 + it { should be_denied_for :visitor }
  152 + end
  153 +
  154 + describe "GET /:project_path/merge_requests" do
  155 + subject { project_merge_requests_path(project) }
  156 +
  157 + it { should be_allowed_for master }
  158 + it { should be_allowed_for reporter }
  159 + it { should be_allowed_for :admin }
  160 + it { should be_denied_for guest }
  161 + it { should be_denied_for :user }
  162 + it { should be_denied_for :visitor }
  163 + end
  164 +
  165 + describe "GET /:project_path/branches/recent" do
  166 + subject { recent_project_branches_path(project) }
  167 +
  168 + it { should be_allowed_for master }
  169 + it { should be_allowed_for reporter }
  170 + it { should be_allowed_for :admin }
  171 + it { should be_denied_for guest }
  172 + it { should be_denied_for :user }
  173 + it { should be_denied_for :visitor }
  174 + end
  175 +
  176 + describe "GET /:project_path/branches" do
  177 + subject { project_branches_path(project) }
  178 +
  179 + before do
  180 + # Speed increase
  181 + Project.any_instance.stub(:branches).and_return([])
  182 + end
  183 +
  184 + it { should be_allowed_for master }
  185 + it { should be_allowed_for reporter }
  186 + it { should be_allowed_for :admin }
  187 + it { should be_denied_for guest }
  188 + it { should be_denied_for :user }
  189 + it { should be_denied_for :visitor }
  190 + end
  191 +
  192 + describe "GET /:project_path/tags" do
  193 + subject { project_tags_path(project) }
  194 +
  195 + before do
  196 + # Speed increase
  197 + Project.any_instance.stub(:tags).and_return([])
  198 + end
  199 +
  200 + it { should be_allowed_for master }
  201 + it { should be_allowed_for reporter }
  202 + it { should be_allowed_for :admin }
  203 + it { should be_denied_for guest }
  204 + it { should be_denied_for :user }
  205 + it { should be_denied_for :visitor }
  206 + end
  207 +
  208 + describe "GET /:project_path/hooks" do
  209 + subject { project_hooks_path(project) }
  210 +
  211 + it { should be_allowed_for master }
  212 + it { should be_denied_for reporter }
  213 + it { should be_allowed_for :admin }
  214 + it { should be_denied_for guest }
  215 + it { should be_denied_for :user }
  216 + it { should be_denied_for :visitor }
  217 + end
  218 +end
spec/features/security/project/public_access_spec.rb 0 → 100644
  Diff comments   View file @ea779cc
@@ -0,0 +1,251 @@ @@ -0,0 +1,251 @@
  1 +require 'spec_helper'
  2 +
  3 +describe "Public Project Access" do
  4 + let(:project) { create(:project_with_code) }
  5 +
  6 + let(:master) { create(:user) }
  7 + let(:guest) { create(:user) }
  8 + let(:reporter) { create(:user) }
  9 +
  10 + before do
  11 + # public project
  12 + project.public = true
  13 + project.save!
  14 +
  15 + # full access
  16 + project.team << [master, :master]
  17 +
  18 + # readonly
  19 + project.team << [reporter, :reporter]
  20 +
  21 + end
  22 +
  23 + describe "Project should be public" do
  24 + subject { project }
  25 +
  26 + its(:public?) { should be_true }
  27 + end
  28 +
  29 + describe "GET /:project_path" do
  30 + subject { project_path(project) }
  31 +
  32 + it { should be_allowed_for master }
  33 + it { should be_allowed_for reporter }
  34 + it { should be_allowed_for :admin }
  35 + it { should be_allowed_for guest }
  36 + it { should be_allowed_for :user }
  37 + it { should be_allowed_for :visitor }
  38 + end
  39 +
  40 + describe "GET /:project_path/tree/master" do
  41 + subject { project_tree_path(project, project.repository.root_ref) }
  42 +
  43 + it { should be_allowed_for master }
  44 + it { should be_allowed_for reporter }
  45 + it { should be_allowed_for :admin }
  46 + it { should be_allowed_for guest }
  47 + it { should be_allowed_for :user }
  48 + it { should be_allowed_for :visitor }
  49 + end
  50 +
  51 + describe "GET /:project_path/commits/master" do
  52 + subject { project_commits_path(project, project.repository.root_ref, limit: 1) }
  53 +
  54 + it { should be_allowed_for master }
  55 + it { should be_allowed_for reporter }
  56 + it { should be_allowed_for :admin }
  57 + it { should be_allowed_for guest }
  58 + it { should be_allowed_for :user }
  59 + it { should be_allowed_for :visitor }
  60 + end
  61 +
  62 + describe "GET /:project_path/commit/:sha" do
  63 + subject { project_commit_path(project, project.repository.commit) }
  64 +
  65 + it { should be_allowed_for master }
  66 + it { should be_allowed_for reporter }
  67 + it { should be_allowed_for :admin }
  68 + it { should be_allowed_for guest }
  69 + it { should be_allowed_for :user }
  70 + it { should be_allowed_for :visitor }
  71 + end
  72 +
  73 + describe "GET /:project_path/compare" do
  74 + subject { project_compare_index_path(project) }
  75 +
  76 + it { should be_allowed_for master }
  77 + it { should be_allowed_for reporter }
  78 + it { should be_allowed_for :admin }
  79 + it { should be_allowed_for guest }
  80 + it { should be_allowed_for :user }
  81 + it { should be_allowed_for :visitor }
  82 + end
  83 +
  84 + describe "GET /:project_path/team" do
  85 + subject { project_team_index_path(project) }
  86 +
  87 + it { should be_allowed_for master }
  88 + it { should be_denied_for reporter }
  89 + it { should be_allowed_for :admin }
  90 + it { should be_denied_for guest }
  91 + it { should be_denied_for :user }
  92 + it { should be_denied_for :visitor }
  93 + end
  94 +
  95 + describe "GET /:project_path/wall" do
  96 + subject { project_wall_path(project) }
  97 +
  98 + it { should be_allowed_for master }
  99 + it { should be_allowed_for reporter }
  100 + it { should be_allowed_for :admin }
  101 + it { should be_allowed_for guest }
  102 + it { should be_allowed_for :user }
  103 + it { should be_allowed_for :visitor }
  104 + end
  105 +
  106 + describe "GET /:project_path/blob" do
  107 + before do
  108 + commit = project.repository.commit
  109 + path = commit.tree.contents.select { |i| i.is_a?(Grit::Blob) }.first.name
  110 + @blob_path = project_blob_path(project, File.join(commit.id, path))
  111 + end
  112 +
  113 + it { @blob_path.should be_allowed_for master }
  114 + it { @blob_path.should be_allowed_for reporter }
  115 + it { @blob_path.should be_allowed_for :admin }
  116 + it { @blob_path.should be_allowed_for guest }
  117 + it { @blob_path.should be_allowed_for :user }
  118 + it { @blob_path.should be_allowed_for :visitor }
  119 + end
  120 +
  121 + describe "GET /:project_path/edit" do
  122 + subject { edit_project_path(project) }
  123 +
  124 + it { should be_allowed_for master }
  125 + it { should be_denied_for reporter }
  126 + it { should be_allowed_for :admin }
  127 + it { should be_denied_for guest }
  128 + it { should be_denied_for :user }
  129 + it { should be_denied_for :visitor }
  130 + end
  131 +
  132 + describe "GET /:project_path/deploy_keys" do
  133 + subject { project_deploy_keys_path(project) }
  134 +
  135 + it { should be_allowed_for master }
  136 + it { should be_denied_for reporter }
  137 + it { should be_allowed_for :admin }
  138 + it { should be_denied_for guest }
  139 + it { should be_denied_for :user }
  140 + it { should be_denied_for :visitor }
  141 + end
  142 +
  143 + describe "GET /:project_path/issues" do
  144 + subject { project_issues_path(project) }
  145 +
  146 + it { should be_allowed_for master }
  147 + it { should be_allowed_for reporter }
  148 + it { should be_allowed_for :admin }
  149 + it { should be_allowed_for guest }
  150 + it { should be_allowed_for :user }
  151 + it { should be_allowed_for :visitor }
  152 + end
  153 +
  154 + describe "GET /:project_path/snippets" do
  155 + subject { project_snippets_path(project) }
  156 +
  157 + it { should be_allowed_for master }
  158 + it { should be_allowed_for reporter }
  159 + it { should be_allowed_for :admin }
  160 + it { should be_allowed_for guest }
  161 + it { should be_allowed_for :user }
  162 + it { should be_allowed_for :visitor }
  163 + end
  164 +
  165 + describe "GET /:project_path/snippets/new" do
  166 + subject { new_project_snippet_path(project) }
  167 +
  168 + it { should be_allowed_for master }
  169 + it { should be_allowed_for reporter }
  170 + it { should be_allowed_for :admin }
  171 + it { should be_denied_for guest }
  172 + it { should be_denied_for :user }
  173 + it { should be_denied_for :visitor }
  174 + end
  175 +
  176 + describe "GET /:project_path/merge_requests" do
  177 + subject { project_merge_requests_path(project) }
  178 +
  179 + it { should be_allowed_for master }
  180 + it { should be_allowed_for reporter }
  181 + it { should be_allowed_for :admin }
  182 + it { should be_allowed_for guest }
  183 + it { should be_allowed_for :user }
  184 + it { should be_allowed_for :visitor }
  185 + end
  186 +
  187 + describe "GET /:project_path/merge_requests/new" do
  188 + subject { new_project_merge_request_path(project) }
  189 +
  190 + it { should be_allowed_for master }
  191 + it { should be_denied_for reporter }
  192 + it { should be_allowed_for :admin }
  193 + it { should be_denied_for guest }
  194 + it { should be_denied_for :user }
  195 + it { should be_denied_for :visitor }
  196 + end
  197 +
  198 + describe "GET /:project_path/branches/recent" do
  199 + subject { recent_project_branches_path(project) }
  200 +
  201 + it { should be_allowed_for master }
  202 + it { should be_allowed_for reporter }
  203 + it { should be_allowed_for :admin }
  204 + it { should be_allowed_for guest }
  205 + it { should be_allowed_for :user }
  206 + it { should be_allowed_for :visitor }
  207 + end
  208 +
  209 + describe "GET /:project_path/branches" do
  210 + subject { project_branches_path(project) }
  211 +
  212 + before do
  213 + # Speed increase
  214 + Project.any_instance.stub(:branches).and_return([])
  215 + end
  216 +
  217 + it { should be_allowed_for master }
  218 + it { should be_allowed_for reporter }
  219 + it { should be_allowed_for :admin }
  220 + it { should be_allowed_for guest }
  221 + it { should be_allowed_for :user }
  222 + it { should be_allowed_for :visitor }
  223 + end
  224 +
  225 + describe "GET /:project_path/tags" do
  226 + subject { project_tags_path(project) }
  227 +
  228 + before do
  229 + # Speed increase
  230 + Project.any_instance.stub(:tags).and_return([])
  231 + end
  232 +
  233 + it { should be_allowed_for master }
  234 + it { should be_allowed_for reporter }
  235 + it { should be_allowed_for :admin }
  236 + it { should be_allowed_for guest }
  237 + it { should be_allowed_for :user }
  238 + it { should be_allowed_for :visitor }
  239 + end
  240 +
  241 + describe "GET /:project_path/hooks" do
  242 + subject { project_hooks_path(project) }
  243 +
  244 + it { should be_allowed_for master }
  245 + it { should be_denied_for reporter }
  246 + it { should be_allowed_for :admin }
  247 + it { should be_denied_for guest }
  248 + it { should be_denied_for :user }
  249 + it { should be_denied_for :visitor }
  250 + end
  251 +end
spec/features/security/project_access_spec.rb
View file @bcdc7b5
@@ -1,474 +0,0 @@ @@ -1,474 +0,0 @@
1 -require 'spec_helper'  
2 -  
3 -describe "Application access" do  
4 - describe "GET /" do  
5 - it { root_path.should be_allowed_for :admin }  
6 - it { root_path.should be_allowed_for :user }  
7 - it { root_path.should be_denied_for :visitor }  
8 - end  
9 -  
10 - describe "GET /projects/new" do  
11 - it { new_project_path.should be_allowed_for :admin }  
12 - it { new_project_path.should be_allowed_for :user }  
13 - it { new_project_path.should be_denied_for :visitor }  
14 - end  
15 -  
16 - describe "Project" do  
17 - let(:project) { create(:project_with_code) }  
18 -  
19 - let(:master) { create(:user) }  
20 - let(:guest) { create(:user) }  
21 - let(:reporter) { create(:user) }  
22 -  
23 - before do  
24 - # full access  
25 - project.team << [master, :master]  
26 -  
27 - # readonly  
28 - project.team << [reporter, :reporter]  
29 - end  
30 -  
31 - describe "GET /project_code" do  
32 - subject { project_path(project) }  
33 -  
34 - it { should be_allowed_for master }  
35 - it { should be_allowed_for reporter }  
36 - it { should be_allowed_for :admin }  
37 - it { should be_denied_for guest }  
38 - it { should be_denied_for :user }  
39 - it { should be_denied_for :visitor }  
40 - end  
41 -  
42 - describe "GET /project_code/tree/master" do  
43 - subject { project_tree_path(project, project.repository.root_ref) }  
44 -  
45 - it { should be_allowed_for master }  
46 - it { should be_allowed_for reporter }  
47 - it { should be_allowed_for :admin }  
48 - it { should be_denied_for guest }  
49 - it { should be_denied_for :user }  
50 - it { should be_denied_for :visitor }  
51 - end  
52 -  
53 - describe "GET /project_code/commits/master" do  
54 - subject { project_commits_path(project, project.repository.root_ref, limit: 1) }  
55 -  
56 - it { should be_allowed_for master }  
57 - it { should be_allowed_for reporter }  
58 - it { should be_allowed_for :admin }  
59 - it { should be_denied_for guest }  
60 - it { should be_denied_for :user }  
61 - it { should be_denied_for :visitor }  
62 - end  
63 -  
64 - describe "GET /project_code/commit/:sha" do  
65 - subject { project_commit_path(project, project.repository.commit) }  
66 -  
67 - it { should be_allowed_for master }  
68 - it { should be_allowed_for reporter }  
69 - it { should be_allowed_for :admin }  
70 - it { should be_denied_for guest }  
71 - it { should be_denied_for :user }  
72 - it { should be_denied_for :visitor }  
73 - end  
74 -  
75 - describe "GET /project_code/compare" do  
76 - subject { project_compare_index_path(project) }  
77 -  
78 - it { should be_allowed_for master }  
79 - it { should be_allowed_for reporter }  
80 - it { should be_allowed_for :admin }  
81 - it { should be_denied_for guest }  
82 - it { should be_denied_for :user }  
83 - it { should be_denied_for :visitor }  
84 - end  
85 -  
86 - describe "GET /project_code/team" do  
87 - subject { project_team_index_path(project) }  
88 -  
89 - it { should be_allowed_for master }  
90 - it { should be_allowed_for reporter }  
91 - it { should be_allowed_for :admin }  
92 - it { should be_denied_for guest }  
93 - it { should be_denied_for :user }  
94 - it { should be_denied_for :visitor }  
95 - end  
96 -  
97 - describe "GET /project_code/wall" do  
98 - subject { project_wall_path(project) }  
99 -  
100 - it { should be_allowed_for master }  
101 - it { should be_allowed_for reporter }  
102 - it { should be_allowed_for :admin }  
103 - it { should be_denied_for guest }  
104 - it { should be_denied_for :user }  
105 - it { should be_denied_for :visitor }  
106 - end  
107 -  
108 - describe "GET /project_code/blob" do  
109 - before do  
110 - commit = project.repository.commit  
111 - path = commit.tree.contents.select { |i| i.is_a?(Grit::Blob) }.first.name  
112 - @blob_path = project_blob_path(project, File.join(commit.id, path))  
113 - end  
114 -  
115 - it { @blob_path.should be_allowed_for master }  
116 - it { @blob_path.should be_allowed_for reporter }  
117 - it { @blob_path.should be_allowed_for :admin }  
118 - it { @blob_path.should be_denied_for guest }  
119 - it { @blob_path.should be_denied_for :user }  
120 - it { @blob_path.should be_denied_for :visitor }  
121 - end  
122 -  
123 - describe "GET /project_code/edit" do  
124 - subject { edit_project_path(project) }  
125 -  
126 - it { should be_allowed_for master }  
127 - it { should be_denied_for reporter }  
128 - it { should be_allowed_for :admin }  
129 - it { should be_denied_for guest }  
130 - it { should be_denied_for :user }  
131 - it { should be_denied_for :visitor }  
132 - end  
133 -  
134 - describe "GET /project_code/deploy_keys" do  
135 - subject { project_deploy_keys_path(project) }  
136 -  
137 - it { should be_allowed_for master }  
138 - it { should be_denied_for reporter }  
139 - it { should be_allowed_for :admin }  
140 - it { should be_denied_for guest }  
141 - it { should be_denied_for :user }  
142 - it { should be_denied_for :visitor }  
143 - end  
144 -  
145 - describe "GET /project_code/issues" do  
146 - subject { project_issues_path(project) }  
147 -  
148 - it { should be_allowed_for master }  
149 - it { should be_allowed_for reporter }  
150 - it { should be_allowed_for :admin }  
151 - it { should be_denied_for guest }  
152 - it { should be_denied_for :user }  
153 - it { should be_denied_for :visitor }  
154 - end  
155 -  
156 - describe "GET /project_code/snippets" do  
157 - subject { project_snippets_path(project) }  
158 -  
159 - it { should be_allowed_for master }  
160 - it { should be_allowed_for reporter }  
161 - it { should be_allowed_for :admin }  
162 - it { should be_denied_for guest }  
163 - it { should be_denied_for :user }  
164 - it { should be_denied_for :visitor }  
165 - end  
166 -  
167 - describe "GET /project_code/merge_requests" do  
168 - subject { project_merge_requests_path(project) }  
169 -  
170 - it { should be_allowed_for master }  
171 - it { should be_allowed_for reporter }  
172 - it { should be_allowed_for :admin }  
173 - it { should be_denied_for guest }  
174 - it { should be_denied_for :user }  
175 - it { should be_denied_for :visitor }  
176 - end  
177 -  
178 - describe "GET /project_code/branches/recent" do  
179 - subject { recent_project_branches_path(project) }  
180 -  
181 - it { should be_allowed_for master }  
182 - it { should be_allowed_for reporter }  
183 - it { should be_allowed_for :admin }  
184 - it { should be_denied_for guest }  
185 - it { should be_denied_for :user }  
186 - it { should be_denied_for :visitor }  
187 - end  
188 -  
189 - describe "GET /project_code/branches" do  
190 - subject { project_branches_path(project) }  
191 -  
192 - before do  
193 - # Speed increase  
194 - Project.any_instance.stub(:branches).and_return([])  
195 - end  
196 -  
197 - it { should be_allowed_for master }  
198 - it { should be_allowed_for reporter }  
199 - it { should be_allowed_for :admin }  
200 - it { should be_denied_for guest }  
201 - it { should be_denied_for :user }  
202 - it { should be_denied_for :visitor }  
203 - end  
204 -  
205 - describe "GET /project_code/tags" do  
206 - subject { project_tags_path(project) }  
207 -  
208 - before do  
209 - # Speed increase  
210 - Project.any_instance.stub(:tags).and_return([])  
211 - end  
212 -  
213 - it { should be_allowed_for master }  
214 - it { should be_allowed_for reporter }  
215 - it { should be_allowed_for :admin }  
216 - it { should be_denied_for guest }  
217 - it { should be_denied_for :user }  
218 - it { should be_denied_for :visitor }  
219 - end  
220 -  
221 - describe "GET /project_code/hooks" do  
222 - subject { project_hooks_path(project) }  
223 -  
224 - it { should be_allowed_for master }  
225 - it { should be_allowed_for reporter }  
226 - it { should be_allowed_for :admin }  
227 - it { should be_denied_for guest }  
228 - it { should be_denied_for :user }  
229 - it { should be_denied_for :visitor }  
230 - end  
231 - end  
232 -  
233 -  
234 - describe "PublicProject" do  
235 - let(:project) { create(:project_with_code) }  
236 -  
237 - let(:master) { create(:user) }  
238 - let(:guest) { create(:user) }  
239 - let(:reporter) { create(:user) }  
240 -  
241 - let(:admin) { create(:user) }  
242 -  
243 - before do  
244 - # public project  
245 - project.public = true  
246 - project.save!  
247 -  
248 - # full access  
249 - project.team << [master, :master]  
250 -  
251 - # readonly  
252 - project.team << [reporter, :reporter]  
253 -  
254 - end  
255 -  
256 - describe "Project should be public" do  
257 - subject { project }  
258 -  
259 - its(:public?) { should be_true }  
260 - end  
261 -  
262 - describe "GET /project_code" do  
263 - subject { project_path(project) }  
264 -  
265 - it { should be_allowed_for master }  
266 - it { should be_allowed_for reporter }  
267 - it { should be_allowed_for admin }  
268 - it { should be_allowed_for guest }  
269 - it { should be_allowed_for :user }  
270 - it { should be_denied_for :visitor }  
271 - end  
272 -  
273 - describe "GET /project_code/tree/master" do  
274 - subject { project_tree_path(project, project.repository.root_ref) }  
275 -  
276 - it { should be_allowed_for master }  
277 - it { should be_allowed_for reporter }  
278 - it { should be_allowed_for :admin }  
279 - it { should be_allowed_for guest }  
280 - it { should be_allowed_for :user }  
281 - it { should be_denied_for :visitor }  
282 - end  
283 -  
284 - describe "GET /project_code/commits/master" do  
285 - subject { project_commits_path(project, project.repository.root_ref, limit: 1) }  
286 -  
287 - it { should be_allowed_for master }  
288 - it { should be_allowed_for reporter }  
289 - it { should be_allowed_for :admin }  
290 - it { should be_allowed_for guest }  
291 - it { should be_allowed_for :user }  
292 - it { should be_denied_for :visitor }  
293 - end  
294 -  
295 - describe "GET /project_code/commit/:sha" do  
296 - subject { project_commit_path(project, project.repository.commit) }  
297 -  
298 - it { should be_allowed_for master }  
299 - it { should be_allowed_for reporter }  
300 - it { should be_allowed_for :admin }  
301 - it { should be_allowed_for guest }  
302 - it { should be_allowed_for :user }  
303 - it { should be_denied_for :visitor }  
304 - end  
305 -  
306 - describe "GET /project_code/compare" do  
307 - subject { project_compare_index_path(project) }  
308 -  
309 - it { should be_allowed_for master }  
310 - it { should be_allowed_for reporter }  
311 - it { should be_allowed_for :admin }  
312 - it { should be_allowed_for guest }  
313 - it { should be_allowed_for :user }  
314 - it { should be_denied_for :visitor }  
315 - end  
316 -  
317 - describe "GET /project_code/team" do  
318 - subject { project_team_index_path(project) }  
319 -  
320 - it { should be_allowed_for master }  
321 - it { should be_allowed_for reporter }  
322 - it { should be_allowed_for :admin }  
323 - it { should be_allowed_for guest }  
324 - it { should be_allowed_for :user }  
325 - it { should be_denied_for :visitor }  
326 - end  
327 -  
328 - describe "GET /project_code/wall" do  
329 - subject { project_wall_path(project) }  
330 -  
331 - it { should be_allowed_for master }  
332 - it { should be_allowed_for reporter }  
333 - it { should be_allowed_for :admin }  
334 - it { should be_allowed_for guest }  
335 - it { should be_allowed_for :user }  
336 - it { should be_denied_for :visitor }  
337 - end  
338 -  
339 - describe "GET /project_code/blob" do  
340 - before do  
341 - commit = project.repository.commit  
342 - path = commit.tree.contents.select { |i| i.is_a?(Grit::Blob) }.first.name  
343 - @blob_path = project_blob_path(project, File.join(commit.id, path))  
344 - end  
345 -  
346 - it { @blob_path.should be_allowed_for master }  
347 - it { @blob_path.should be_allowed_for reporter }  
348 - it { @blob_path.should be_allowed_for :admin }  
349 - it { @blob_path.should be_allowed_for guest }  
350 - it { @blob_path.should be_allowed_for :user }  
351 - it { @blob_path.should be_denied_for :visitor }  
352 - end  
353 -  
354 - describe "GET /project_code/edit" do  
355 - subject { edit_project_path(project) }  
356 -  
357 - it { should be_allowed_for master }  
358 - it { should be_denied_for reporter }  
359 - it { should be_allowed_for :admin }  
360 - it { should be_denied_for guest }  
361 - it { should be_denied_for :user }  
362 - it { should be_denied_for :visitor }  
363 - end  
364 -  
365 - describe "GET /project_code/deploy_keys" do  
366 - subject { project_deploy_keys_path(project) }  
367 -  
368 - it { should be_allowed_for master }  
369 - it { should be_denied_for reporter }  
370 - it { should be_allowed_for :admin }  
371 - it { should be_denied_for guest }  
372 - it { should be_denied_for :user }  
373 - it { should be_denied_for :visitor }  
374 - end  
375 -  
376 - describe "GET /project_code/issues" do  
377 - subject { project_issues_path(project) }  
378 -  
379 - it { should be_allowed_for master }  
380 - it { should be_allowed_for reporter }  
381 - it { should be_allowed_for :admin }  
382 - it { should be_allowed_for guest }  
383 - it { should be_allowed_for :user }  
384 - it { should be_denied_for :visitor }  
385 - end  
386 -  
387 - describe "GET /project_code/snippets" do  
388 - subject { project_snippets_path(project) }  
389 -  
390 - it { should be_allowed_for master }  
391 - it { should be_allowed_for reporter }  
392 - it { should be_allowed_for :admin }  
393 - it { should be_allowed_for guest }  
394 - it { should be_allowed_for :user }  
395 - it { should be_denied_for :visitor }  
396 - end  
397 -  
398 - describe "GET /project_code/snippets/new" do  
399 - subject { new_project_snippet_path(project) }  
400 -  
401 - it { should be_allowed_for master }  
402 - it { should be_allowed_for reporter }  
403 - it { should be_allowed_for :admin }  
404 - it { should be_denied_for guest }  
405 - it { should be_denied_for :user }  
406 - it { should be_denied_for :visitor }  
407 - end  
408 -  
409 - describe "GET /project_code/merge_requests" do  
410 - subject { project_merge_requests_path(project) }  
411 -  
412 - it { should be_allowed_for master }  
413 - it { should be_allowed_for reporter }  
414 - it { should be_allowed_for :admin }  
415 - it { should be_allowed_for guest }  
416 - it { should be_allowed_for :user }  
417 - it { should be_denied_for :visitor }  
418 - end  
419 -  
420 - describe "GET /project_code/branches/recent" do  
421 - subject { recent_project_branches_path(project) }  
422 -  
423 - it { should be_allowed_for master }  
424 - it { should be_allowed_for reporter }  
425 - it { should be_allowed_for :admin }  
426 - it { should be_allowed_for guest }  
427 - it { should be_allowed_for :user }  
428 - it { should be_denied_for :visitor }  
429 - end  
430 -  
431 - describe "GET /project_code/branches" do  
432 - subject { project_branches_path(project) }  
433 -  
434 - before do  
435 - # Speed increase  
436 - Project.any_instance.stub(:branches).and_return([])  
437 - end  
438 -  
439 - it { should be_allowed_for master }  
440 - it { should be_allowed_for reporter }  
441 - it { should be_allowed_for :admin }  
442 - it { should be_allowed_for guest }  
443 - it { should be_allowed_for :user }  
444 - it { should be_denied_for :visitor }  
445 - end  
446 -  
447 - describe "GET /project_code/tags" do  
448 - subject { project_tags_path(project) }  
449 -  
450 - before do  
451 - # Speed increase  
452 - Project.any_instance.stub(:tags).and_return([])  
453 - end  
454 -  
455 - it { should be_allowed_for master }  
456 - it { should be_allowed_for reporter }  
457 - it { should be_allowed_for :admin }  
458 - it { should be_allowed_for guest }  
459 - it { should be_allowed_for :user }  
460 - it { should be_denied_for :visitor }  
461 - end  
462 -  
463 - describe "GET /project_code/hooks" do  
464 - subject { project_hooks_path(project) }  
465 -  
466 - it { should be_allowed_for master }  
467 - it { should be_allowed_for reporter }  
468 - it { should be_allowed_for :admin }  
469 - it { should be_allowed_for guest }  
470 - it { should be_allowed_for :user }  
471 - it { should be_denied_for :visitor }  
472 - end  
473 - end  
474 -end