discourse/spec/requests/admin/search_logs_spec.rb
Selase Krakani 52be5b3782
DEV: Extend specs coverage for non-admin access to admin endpoints (#18833)
Replace base controller class inheritance specs with explicit specs
for non-staff and moderator access to admin resources
2022-11-03 03:42:44 +00:00

95 lines
2.4 KiB
Ruby

# frozen_string_literal: true
RSpec.describe Admin::SearchLogsController do
fab!(:admin) { Fabricate(:admin) }
fab!(:moderator) { Fabricate(:moderator) }
fab!(:user) { Fabricate(:user) }
before do
SearchLog.log(term: "ruby", search_type: :header, ip_address: "127.0.0.1")
end
after do
SearchLog.clear_debounce_cache!
end
describe "#index" do
shared_examples "search logs accessible" do
it "returns search logs" do
get '/admin/logs/search_logs.json'
expect(response.status).to eq(200)
json = response.parsed_body
expect(json[0]["term"]).to eq("ruby")
expect(json[0]["searches"]).to eq(1)
expect(json[0]["ctr"]).to eq(0)
end
end
context "when logged in as an admin" do
before { sign_in(admin) }
include_examples "search logs accessible"
end
context "when logged in as a moderator" do
before { sign_in(moderator) }
include_examples "search logs accessible"
end
context "when logged in as a non-staff user" do
before { sign_in(user) }
it "denies access with a 404 response" do
get "/admin/logs/search_logs.json"
expect(response.status).to eq(404)
expect(response.parsed_body["errors"]).to include(I18n.t("not_found"))
end
end
end
describe "#term" do
shared_examples "search log term accessible" do
it "returns search log term" do
get '/admin/logs/search_logs/term.json', params: {
term: "ruby"
}
expect(response.status).to eq(200)
json = response.parsed_body
expect(json['term']['type']).to eq('search_log_term')
expect(json['term']['search_result']).to be_present
end
end
context "when logged in as an admin" do
before { sign_in(admin) }
include_examples "search log term accessible"
end
context "when logged in as a moderator" do
before { sign_in(moderator) }
include_examples "search log term accessible"
end
context "when logged in as a non-staff user" do
before { sign_in(user) }
it "denies access with a 404 response" do
get "/admin/logs/search_logs/term.json", params: {
term: "ruby"
}
expect(response.status).to eq(404)
expect(response.parsed_body["errors"]).to include(I18n.t("not_found"))
end
end
end
end