raggedstaff/openfoodnetwork
1
0
Fork 0
mirror of https://github.com/openfoodfoundation/openfoodnetwork synced 2026-01-24 20:36:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Only show orders I am distributing in the API

Browse Source
This commit is contained in:
Rob H
2014-04-16 14:54:50 +10:00
parent 2b283405e7
commit c68aeb4c36
2 changed files with 43 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/controllers/spree/api/orders_controller_decorator.rb
View File

@@ -7,7 +7,7 @@ Spree::Api::OrdersController.class_eval do
before_filter :authorize_read!, :except => [:managed]
def managed
@orders = Spree::Order.ransack(params[:q]).result.managed_by(current_api_user).page(params[:page]).per(params[:per_page])
@orders = Spree::Order.ransack(params[:q]).result.distributed_by_user(current_api_user).page(params[:page]).per(params[:per_page])
respond_with(@orders, default_template: :index)
end
end

55
spec/controllers/spree/api/orders_controller_spec.rb
View File

@@ -68,28 +68,57 @@ module Spree
end
end
context "As a supplier enterprise user" do
context "As an enterprise user" do
let(:supplier) { create(:supplier_enterprise) }
let!(:order1) { FactoryGirl.create(:order, state: 'complete', completed_at: Time.now, billing_address: FactoryGirl.create(:address) ) }
let(:distributor1) { create(:distributor_enterprise) }
let(:distributor2) { create(:distributor_enterprise) }
let!(:order1) { FactoryGirl.create(:order, state: 'complete', completed_at: Time.now, distributor: distributor1, billing_address: FactoryGirl.create(:address) ) }
let!(:line_item1) { FactoryGirl.create(:line_item, order: order1, product: FactoryGirl.create(:product, supplier: supplier)) }
let!(:line_item2) { FactoryGirl.create(:line_item, order: order1, product: FactoryGirl.create(:product, supplier: FactoryGirl.create(:supplier_enterprise))) }
let(:enterprise_user) do
user = create(:user)
let!(:line_item2) { FactoryGirl.create(:line_item, order: order1, product: FactoryGirl.create(:product, supplier: supplier)) }
let!(:order2) { FactoryGirl.create(:order, state: 'complete', completed_at: Time.now, distributor: distributor2, billing_address: FactoryGirl.create(:address) ) }
let!(:line_item3) { FactoryGirl.create(:line_item, order: order2, product: FactoryGirl.create(:product, supplier: supplier)) }
let(:supplier_user) do
user = create(:user, spree_roles: [])
user.enterprise_roles.create(enterprise: supplier)
user.spree_roles = []
user.save!
user
end
let(:distributor1_user) do
user = create(:user, spree_roles: [])
user.enterprise_roles.create(enterprise: distributor1)
user.save!
user
end
let(:distributor2_user) do
user = create(:user, spree_roles: [])
user.enterprise_roles.create(enterprise: distributor2)
user.save!
user
end
before :each do
stub_authentication!
Spree.user_class.stub :find_by_spree_api_key => enterprise_user
spree_get :managed, { :template => 'bulk_index', :format => :json }
context "producer enterprise" do
before :each do
stub_authentication!
Spree.user_class.stub :find_by_spree_api_key => supplier_user
spree_get :managed, { :template => 'bulk_index', :format => :json }
end
it "does not display line item for which my enteprise is a supplier" do
json_response.map{ |order| order['line_items'] }.flatten.length.should == 0
end
end
it "returns a list of orders with only managed line items shown" do
json_response.map{ |order| order['line_items'] }.flatten.length.should == 1
json_response[0]['line_items'][0]['id'].should == line_item1.id
context "hub enterprise" do
before :each do
stub_authentication!
Spree.user_class.stub :find_by_spree_api_key => distributor1_user
spree_get :managed, { :template => 'bulk_index', :format => :json }
binding.pry
end
it "only displays line items from orders for which my enterprise is a distributor" do
json_response.map{ |order| order['line_items'] }.flatten.map{ |line_item| line_item["id"] }.should == [line_item1.id, line_item2.id]
end
end
end
end