zammad/spec/requests/checklist_spec.rb

# Copyright (C) 2012-2024 Zammad Foundation, https://zammad-foundation.org/

require 'rails_helper'

RSpec.describe 'Checklist', authenticated_as: :agent_1, current_user_id: 1, type: :request do
  let(:group_1)        { create(:group) }
  let(:group_2)        { create(:group) }
  let(:agent_1)        { create(:agent, groups: [group_1]) }
  let(:ticket_1)       { create(:ticket, group: group_1) }
  let(:ticket_2)       { create(:ticket, group: group_2) }
  let(:ticket_1_empty) { create(:ticket, group: group_1) }
  let(:ticket_2_empty) { create(:ticket, group: group_2) }
  let(:checklist_1)    { create(:checklist, ticket: ticket_1) }
  let(:checklist_2)    { create(:checklist, ticket: ticket_2) }

  before do
    Setting.set('checklist', true)
    checklist_1
    checklist_2
  end

  it 'does show checklist', :aggregate_failures do
    get "/api/v1/checklists/#{checklist_1.id}", params: {}, as: :json
    expect(response).to have_http_status(:ok)
    expect(json_response).to include('id' => checklist_1.id)
  end

  it 'does not show inaccessible checklist' do
    get "/api/v1/checklists/#{checklist_2.id}", params: {}, as: :json
    expect(response).to have_http_status(:forbidden)
  end

  it 'does not show nonexistant checklist' do
    get '/api/v1/checklists/1234', params: {}, as: :json
    expect(response).to have_http_status(:forbidden)
  end

  it 'does create checklist', :aggregate_failures do
    post '/api/v1/checklists', params: { name: SecureRandom.uuid, ticket_id: ticket_1_empty.id }, as: :json
    expect(response).to have_http_status(:created)
    expect(json_response).to include('id' => Checklist.last.id)
  end

  it 'does not create checklist' do
    post '/api/v1/checklists', params: { name: SecureRandom.uuid, ticket_id: ticket_2_empty.id }, as: :json
    expect(response).to have_http_status(:forbidden)
  end

  it 'does update checklist', :aggregate_failures do
    put "/api/v1/checklists/#{checklist_1.id}", params: { name: SecureRandom.uuid }, as: :json
    expect(response).to have_http_status(:ok)
    expect(json_response).to include('id' => checklist_1.id)
  end

  it 'does not update checklist' do
    put "/api/v1/checklists/#{checklist_2.id}", params: { name: SecureRandom.uuid }, as: :json
    expect(response).to have_http_status(:forbidden)
  end

  it 'does destroy checklist' do
    delete "/api/v1/checklists/#{checklist_1.id}", params: {}, as: :json
    expect(response).to have_http_status(:ok)
  end

  it 'does not destroy checklist' do
    delete "/api/v1/checklists/#{checklist_2.id}", params: {}, as: :json
    expect(response).to have_http_status(:forbidden)
  end
end