require 'spec_helper'
require 'cancan/matchers'

describe 'User' do
  describe 'Abilities' do
    subject { ability }
    let(:ability) { Ability.new(current_user) }
    let(:visibility) { Hydra::AccessControls::AccessRight::VISIBILITY_TEXT_VALUE_PRIVATE }
    let(:creating_user) { create(:user) }
    let(:user) { create(:user) }
    let(:current_user) { user }
    let(:generic_work) { create(:generic_work, visibility: visibility, user: creating_user) }
    let(:file_set) { create(:file_set, visibility: visibility, user: creating_user) }

    describe 'without embargo' do
      describe 'creator of object' do
        let(:creating_user) { user }
        let(:current_user) { user }
        it do
          is_expected.to be_able_to(:create, FileSet.new)
          is_expected.to be_able_to(:versions, file_set)
          is_expected.to be_able_to(:read, file_set)
          is_expected.to be_able_to(:update, file_set)
          is_expected.not_to be_able_to(:delete, file_set)
        end
      end

      describe 'as a repository manager' do
        let(:manager_user) { FactoryBot.create(:admin) }
        let(:creating_user) { user }
        let(:current_user) { manager_user }
        it do
          is_expected.to be_able_to(:create, FileSet.new)
          is_expected.to be_able_to(:versions, file_set)
          is_expected.to be_able_to(:read, file_set)
          is_expected.to be_able_to(:update, file_set)
          is_expected.to be_able_to(:destroy, file_set)
        end
      end

      describe 'another authenticated user' do
        let(:creating_user) { FactoryBot.create(:user) }
        let(:current_user) { user }

        it do
          is_expected.to be_able_to(:create, FileSet.new)
          is_expected.not_to be_able_to(:versions, file_set)
          is_expected.not_to be_able_to(:read, file_set)
          is_expected.not_to be_able_to(:update, file_set)
          is_expected.not_to be_able_to(:delete, file_set)
        end
      end

      describe 'a nil user' do
        let(:creating_user) { FactoryBot.create(:user) }
        let(:current_user) { nil }
        it do
          is_expected.not_to be_able_to(:create, FileSet.new)
          is_expected.not_to be_able_to(:versions, file_set)
          is_expected.not_to be_able_to(:read, file_set)
          is_expected.not_to be_able_to(:update, file_set)
          is_expected.not_to be_able_to(:delete, file_set)
        end
      end
    end
  end
end