mirror of
https://github.com/discourse/discourse.git
synced 2024-12-11 21:16:14 +08:00
d2ef490e9a
Moderators are not allowed to delete invites that don't belong to them
38 lines
1.2 KiB
Ruby
38 lines
1.2 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
RSpec.describe InviteSerializer do
|
|
describe "#can_delete_invite" do
|
|
fab!(:user) { Fabricate(:user) }
|
|
fab!(:admin) { Fabricate(:admin) }
|
|
fab!(:moderator) { Fabricate(:moderator) }
|
|
fab!(:invite_from_user) { Fabricate(:invite, invited_by: user) }
|
|
fab!(:invite_from_moderator) { Fabricate(:invite, invited_by: moderator) }
|
|
|
|
it "returns true for admin" do
|
|
serializer = InviteSerializer.new(invite_from_user, scope: Guardian.new(admin), root: false)
|
|
|
|
expect(serializer.as_json[:can_delete_invite]).to eq(true)
|
|
end
|
|
|
|
it "returns false for moderator" do
|
|
serializer =
|
|
InviteSerializer.new(invite_from_user, scope: Guardian.new(moderator), root: false)
|
|
|
|
expect(serializer.as_json[:can_delete_invite]).to eq(false)
|
|
end
|
|
|
|
it "returns true for inviter" do
|
|
serializer = InviteSerializer.new(invite_from_user, scope: Guardian.new(user), root: false)
|
|
|
|
expect(serializer.as_json[:can_delete_invite]).to eq(true)
|
|
end
|
|
|
|
it "returns false for plain user" do
|
|
serializer =
|
|
InviteSerializer.new(invite_from_moderator, scope: Guardian.new(user), root: false)
|
|
|
|
expect(serializer.as_json[:can_delete_invite]).to eq(false)
|
|
end
|
|
end
|
|
end
|