Contents

require 'spec_helper'

# Fixes missing method tempfile error
class Rack::Test::UploadedFile
  attr_reader :tempfile
end

module Alchemy
  describe AttachmentsController do

    let(:public_page) { FactoryGirl.create(:public_page, :restricted => true) }
    let(:element)     { FactoryGirl.create(:element, :page => public_page, :name => 'download', :create_contents_after_create => true) }
    let(:attachment)  { Attachment.create(:file => File.new(File.expand_path('../../support/image.png', __FILE__))) }

    before do
      essence = element.contents.where(:name => 'file').first.essence
      essence.attachment_id = attachment.id
      essence.save
    end

    it "should not be possible to download attachments from restricted pages" do
      get :download, :id => attachment.id
      response.status.should == 302
      response.should redirect_to(login_path)
    end

    context "as registered user" do

      before do
        sign_in :user, FactoryGirl.create(:registered_user)
      end

      it "should be possible to download attachments from restricted pages" do
        get :download, :id => attachment.id
        response.status.should == 200
      end

    end

    it "should not be possible to see attachments from restricted pages" do
      get :show, :id => attachment.id
      response.status.should == 302
      response.should redirect_to(login_path)
    end

    context "as registered user" do

      before do
        sign_in :user, FactoryGirl.create(:registered_user)
      end

      it "should be possible to see attachments from restricted pages" do
        get :show, :id => attachment.id
        response.status.should == 200
      end

    end

  end
end

Version data entries

6 entries across 6 versions & 1 rubygems

Version	Path
alchemy_cms-2.6.3	spec/controllers/attachments_controller_spec.rb
alchemy_cms-2.6.2.1	spec/controllers/attachments_controller_spec.rb
alchemy_cms-2.6.2	spec/controllers/attachments_controller_spec.rb
alchemy_cms-2.6.1	spec/controllers/attachments_controller_spec.rb
alchemy_cms-2.6.0	spec/controllers/attachments_controller_spec.rb
alchemy_cms-2.6.0.rc5	spec/controllers/attachments_controller_spec.rb