redmine_dmsf/test/functional/dmsf_controller_test.rb

# encoding: utf-8
# frozen_string_literal: true
#
# Redmine plugin for Document Management System "Features"
#
# Copyright © 2011-20 Karel Pičman <karel.picman@kontron.com>
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

require File.expand_path('../../test_helper', __FILE__)

class DmsfControllerTest < RedmineDmsf::Test::TestCase
  include Redmine::I18n

  fixtures :users, :email_addresses, :dmsf_folders, :custom_fields,
    :custom_values, :projects, :roles, :members, :member_roles, :dmsf_links,
    :dmsf_files, :dmsf_file_revisions, :dmsf_folder_permissions, :dmsf_locks

  def setup
    @project = Project.find 1
    @project.enable_module! :dmsf
    @folder1 = DmsfFolder.find 1
    @folder2 = DmsfFolder.find 2
    @folder3 = DmsfFolder.find 3
    @folder4 = DmsfFolder.find 4
    @folder7 = DmsfFolder.find 7
    @file1 = DmsfFile.find 1
    @file_link2 = DmsfLink.find 4
    @folder_link1 = DmsfLink.find 1
    @role = Role.find 1
    @custom_field = CustomField.find 21
    @custom_value = CustomValue.find 21
    @folder7 = DmsfFolder.find 7
    @manager = User.find 2 #1
    User.current = nil
    @request.session[:user_id] = @manager.id
    @dmsf_storage_directory = Setting.plugin_redmine_dmsf['dmsf_storage_directory']
    Setting.plugin_redmine_dmsf['dmsf_storage_directory'] = 'files/dmsf'
    FileUtils.cp_r File.join(File.expand_path('../../fixtures/files', __FILE__), '.'), DmsfFile.storage_path
  end

  def teardown
    # Delete our tmp folder
    begin
      FileUtils.rm_rf DmsfFile.storage_path
    rescue => e
      error e.message
    end
    Setting.plugin_redmine_dmsf['dmsf_storage_directory'] = @dmsf_storage_directory
  end

  def test_truth
    assert_kind_of Project, @project
    assert_kind_of DmsfFolder, @folder1
    assert_kind_of DmsfFolder, @folder2
    assert_kind_of DmsfFolder, @folder3
    assert_kind_of DmsfFolder, @folder4
    assert_kind_of DmsfFolder, @folder7
    assert_kind_of DmsfFile, @file1
    assert_kind_of DmsfLink, @file_link2
    assert_kind_of DmsfLink, @folder_link1
    assert_kind_of Role, @role
    assert_kind_of CustomField, @custom_field
    assert_kind_of CustomValue, @custom_value
    assert_kind_of User, @manager
  end

  def test_edit_folder_forbidden
    # Missing permissions
    get :edit, params: { id: @project, folder_id: @folder1 }
    assert_response :forbidden
  end

  def test_edit_folder_allowed
    # Permissions OK
    @role.add_permission! :view_dmsf_folders
    @role.add_permission! :folder_manipulation
    get :edit, params: { id: @project, folder_id: @folder1}
    assert_response :success
    assert_select 'label', { text: @custom_field.name }
    assert_select 'option', { value: @custom_value.value }
  end

  def test_edit_folder_redirection_to_the_parent_folder
    @role.add_permission! :view_dmsf_folders
    @role.add_permission! :folder_manipulation
    post :save, params: { id: @project, folder_id: @folder2.id, parent_id: @folder2.dmsf_folder.id,
                          dmsf_folder: { title: @folder2.title, description: @folder2.description} }
    assert_redirected_to dmsf_folder_path(id: @project, folder_id: @folder2.dmsf_folder.id)
  end

  def test_edit_folder_redirection_to_the_same_folder
    @role.add_permission! :view_dmsf_folders
    @role.add_permission! :folder_manipulation
    post :save, params: { id: @project, folder_id: @folder2.id, parent_id: @folder2.dmsf_folder.id,
                          dmsf_folder: { title: @folder2.title, description: @folder2.description,
                                         redirect_to_folder_id: @folder2.id } }
    assert_redirected_to dmsf_folder_path(id: @project, folder_id: @folder2.id)
  end

  def test_trash_forbidden
    # Missing permissions
    get :trash, params: { id: @project }
    assert_response :forbidden
  end

  def test_trash_allowed
    # Permissions OK
    @role.add_permission! :file_delete
    get :trash, params: { id: @project }
    assert_response :success
    assert_select 'h2', { text: l(:link_trash_bin) }
  end

  def test_delete_forbidden
    # Missing permissions
    get :delete, params: { id: @project, folder_id: @folder1.id, commit: false }
    assert_response :forbidden
  end

  def test_delete_with_parmission_but_not_empty
    # Permissions OK but the folder is not empty
    @role.add_permission! :folder_manipulation
    get :delete, params: { id: @project, folder_id: @folder1.id, commit: false}
    assert_response :redirect
    assert_include l(:error_folder_is_not_empty), flash[:error]
  end

  def test_delete_locked
    # Permissions OK but the folder is locked
    @role.add_permission! :folder_manipulation
    @request.env['HTTP_REFERER'] = dmsf_folder_path(id: @project.id, folder_id: @folder2.id)
    get :delete, params: { id: @project, folder_id: @folder2.id, commit: false}
    assert_response :redirect
    assert_include l(:error_folder_is_locked), flash[:error]
  end

  def test_delete_ok
    # Empty and not locked folder
    @role.add_permission! :folder_manipulation
    @request.env['HTTP_REFERER'] = dmsf_folder_path(id: @project.id, folder_id: @folder1.id)
    get :delete, params: { id: @project, folder_id: @folder1.id, commit: false }
    assert_response :redirect
  end

  def test_restore_forbidden
    # Missing permissions
    @folder4.deleted = 1
    @folder4.save
    get :restore, params: { id: @project, folder_id: @folder4.id }
    assert_response :forbidden
  end

  def test_restore_ok
    # Permissions OK
    @request.env['HTTP_REFERER'] = trash_dmsf_path(id: @project.id)
    @role.add_permission! :folder_manipulation
    @folder1.deleted = 1
    @folder1.save
    get :restore, params: { id: @project, folder_id: @folder1.id }
    assert_response :redirect
  end

  def test_delete_entries_forbidden
    # Missing permissions
    get :entries_operation, params: { id: @project, delete_entries: 'Delete',
        ids: ["folder-#{@folder1.id}", "file-#{@file1.id}", "folder-link-#{@folder_link1.id}", "file-link-#{@file_link2.id}"] }
    assert_response :forbidden
  end

  def test_delete_not_empty
    # Permissions OK but the folder is not empty
    @request.env['HTTP_REFERER'] = dmsf_folder_path(id: @project.id)
    @role.add_permission! :folder_manipulation
    @role.add_permission! :view_dmsf_files
    get :entries_operation, params: { id: @project, delete_entries: 'Delete',
      ids: ["folder-#{@folder1.id}", "file-#{@file1.id}", "folder-link-#{@folder_link1.id}", "file-link-#{@file_link2.id}"]}
    assert_response :redirect
    assert_equal flash[:error].to_s, l(:error_folder_is_not_empty)
  end

  def test_delete_entries_ok
    # Permissions OK
    @request.env['HTTP_REFERER'] = dmsf_folder_path(id: @project.id)
    @role.add_permission! :view_dmsf_files
    @role.add_permission! :folder_manipulation
    @role.add_permission! :file_delete
    flash[:error] = nil
    get :entries_operation, params: { id: @project, delete_entries: 'Delete',
        ids: ["folder-#{@folder7.id}", "file-#{@file1.id}", "file-link-#{@file_link2.id}"]}
    assert_response :redirect
    assert_nil flash[:error]
  end

  def test_restore_entries
    # Restore
    @role.add_permission! :view_dmsf_files
    @request.env['HTTP_REFERER'] = trash_dmsf_path(id: @project.id)
    flash[:error] = nil
    get :entries_operation, params: { id: @project, restore_entries: 'Restore',
        ids: ["file-#{@file1.id}", "file-link-#{@file_link2.id}"]}
    assert_response :redirect
    assert_nil flash[:error]
  end

  def test_show
    @role.add_permission! :view_dmsf_files
    @role.add_permission! :view_dmsf_folders
    @role.add_permission! :file_manipulation
    get :show, params: { id: @project.id }
    assert_response :success
    # New file link
    assert_select 'a[href$=?]', '/dmsf/upload/multi_upload'
    # Filters
    assert_select 'fieldset#filters'
    # Options
    assert_select 'fieldset#options'
    # The main table
    assert_select 'table.dmsf'
    # CSV export
    assert_select 'a.csv'
  end

  def test_show_without_file_manipulation
    @role.add_permission! :view_dmsf_files
    @role.add_permission! :view_dmsf_folders
    get :show, params: { id: @project.id }
    assert_response :success
    # New file link should be missing
    assert_select 'a[href$=?]', '/dmsf/upload/multi_upload', count: 0
  end

  def test_show_csv
    @role.add_permission! :view_dmsf_files
    @role.add_permission! :view_dmsf_folders
    get :show, params: { id: @project.id, format: 'csv' }
    assert_response :success
    assert @response.content_type.match?(/^text\/csv/)
  end

  def test_show_folder_doesnt_correspond_the_project
    @role.add_permission! :view_dmsf_files
    @role.add_permission! :view_dmsf_folders
    # Despite the fact that project != @folder3.project
    assert @project != @folder3.project
    get :show, params: { id: @project.id, folder_id: @folder3.id }
    assert_response :success
  end

  def test_new_forbidden
    @role.remove_permission! :folder_manipulation
    get :new, params: { id: @project, parent_id: nil }
    assert_response :forbidden
  end

  def test_new
    @role.add_permission! :folder_manipulation
    get :new, params: { id: @project, parent_id: nil }
    assert_response :success
  end

  def test_email_entries_email_from_forbidden
    Setting.plugin_redmine_dmsf['dmsf_documents_email_from'] = 'karel.picman@kontron.com'
    @role.add_permission! :view_dmsf_files
    get :entries_operation, params: {id: @project, email_entries: 'Email', ids: ["file-#{@file1.id}"]}
    assert_response :forbidden
  end

  def test_email_entries_email_from
    Setting.plugin_redmine_dmsf['dmsf_documents_email_from'] = 'karel.picman@kontron.com'
    @role.add_permission! :view_dmsf_files
    @role.add_permission! :email_documents
    get :entries_operation, params: { id: @project, email_entries: 'Email', ids: ["file-#{@file1.id}"]}
    assert_response :success
    assert_select "input:match('value', ?)", Setting.plugin_redmine_dmsf['dmsf_documents_email_from']
  end

  def test_email_entries_reply_to
    Setting.plugin_redmine_dmsf['dmsf_documents_email_reply_to'] = 'karel.picman@kontron.com'
    @role.add_permission! :view_dmsf_files
    @role.add_permission! :email_documents
    get :entries_operation, params: { id: @project, email_entries: 'Email', ids: ["file-#{@file1.id}"]}
    assert_response :success
    assert_select "input:match('value', ?)", Setting.plugin_redmine_dmsf['dmsf_documents_email_reply_to']
  end

  def test_email_entries_links_only
    Setting.plugin_redmine_dmsf['dmsf_documents_email_links_only'] = '1'
    @role.add_permission! :view_dmsf_files
    @role.add_permission! :email_documents
    get :entries_operation, params: { id: @project, email_entries: 'Email', ids: ["file-#{@file1.id}"]}
    assert_response :success
    assert_select "input:match('value', ?)", Setting.plugin_redmine_dmsf['dmsf_documents_email_links_only']
  end

  def test_entries_email
    @role.add_permission! :view_dmsf_files
    zip_file = Tempfile.new('test', DmsfHelper::temp_dir)
    get :entries_email, params:  { id: @project, email:
        {
          to: 'to@test.com', from: 'from@test.com', subject: 'subject', body: 'body', expired_at: '2015-01-01',
          folders: [], files: [@file1.id], zipped_content: zip_file.path
        }
    }
    assert_redirected_to dmsf_folder_path(id: @project)
  ensure
    zip_file.unlink
  end

  def test_add_email_forbidden
    get :add_email, params: { id: @project.id }, xhr: true
    assert_response :forbidden
  end

  def test_add_email
    @role.add_permission! :view_dmsf_files
    get :add_email, params: { id: @project.id }, xhr: true
    assert_response :success
  end

  def test_append_email_forbidden
    post :append_email, params: { id: @project, user_ids: @project.members.collect{ |m| m.user.id }, format: 'js'}
    assert_response :forbidden
  end

  def test_append_email
    @role.add_permission! :view_dmsf_files
    post :append_email, params: { id: @project, user_ids: @project.members.collect{ |m| m.user.id }, format: 'js'}
    assert_response :success
  end

  def test_autocomplete_for_user_forbidden
    get :autocomplete_for_user, params: { id: @project.id }, xhr: true
    assert_response :forbidden
  end

  def test_autocomplete_for_user
    @role.add_permission! :view_dmsf_files
    get :autocomplete_for_user, params: { id: @project }, xhr: true
    assert_response :success
  end

  def test_create_folder_in_root
    @role.add_permission! :folder_manipulation
    @role.add_permission! :view_dmsf_folders
    assert_difference 'DmsfFolder.count', +1 do
      post :create, params: { id: @project.id, dmsf_folder: { title: 'New folder', description: 'Unit tests' } }
    end
    assert_redirected_to dmsf_folder_path(id: @project, folder_id: nil)
  end

  def test_create_folder
    @role.add_permission! :folder_manipulation
    @role.add_permission! :view_dmsf_folders
    assert_difference 'DmsfFolder.count', +1 do
      post :create, params: { id: @project.id, parent_id: @folder1.id,
                              dmsf_folder: { title: 'New folder', description: 'Unit tests' } }
    end
    assert_redirected_to dmsf_folder_path(id: @project, folder_id: @folder1)
  end

end