openfoodnetwork/spec/controllers/api/v0/promo_images_controller_spec.rb

# frozen_string_literal: true

require "spec_helper"

module Api
  RSpec.describe V0::PromoImagesController do
    include AuthenticationHelper
    include FileHelper

    let(:admin_user) { create(:admin_user) }
    let(:enterprise_owner) { create(:user) }
    let(:enterprise) { create(:enterprise, owner: enterprise_owner ) }
    let(:enterprise_manager) { create(:user, enterprise_limit: 10, enterprises: [enterprise]) }
    let(:other_enterprise_owner) { create(:user) }
    let(:other_enterprise) { create(:enterprise, owner: other_enterprise_owner ) }
    let(:other_enterprise_manager) {
      create(:user, enterprise_limit: 10, enterprises: [other_enterprise])
    }

    describe "removing promo image" do
      let(:image) { black_logo_file }

      let(:enterprise) { create(:enterprise, owner: enterprise_owner, promo_image: image) }

      before do
        allow(controller).to receive(:spree_current_user) { current_user }
      end

      context "as manager" do
        let(:current_user) { enterprise_manager }

        it "removes promo image" do
          spree_delete :destroy, enterprise_id: enterprise

          expect(response).to have_http_status :ok
          expect(json_response["id"]).to eq enterprise.id
          enterprise.reload
          expect(enterprise.promo_image).not_to be_attached
        end

        context "when promo image does not exist" do
          let(:enterprise) { create(:enterprise, owner: enterprise_owner, promo_image: nil) }

          it "responds with error" do
            spree_delete :destroy, enterprise_id: enterprise

            expect(response).to have_http_status(:conflict)
            expect(json_response['error']).to eq 'Promo image does not exist'
          end
        end
      end

      context "as owner" do
        let(:current_user) { enterprise_owner }

        it "allows removal of promo image" do
          spree_delete :destroy, enterprise_id: enterprise
          expect(response).to have_http_status :ok
        end
      end

      context "as super admin" do
        let(:current_user) { admin_user }

        it "allows removal of promo image" do
          spree_delete :destroy, enterprise_id: enterprise
          expect(response).to have_http_status :ok
        end
      end

      context "as manager of other enterprise" do
        let(:current_user) { other_enterprise_manager }

        it "does not allow removal of promo image" do
          spree_delete :destroy, enterprise_id: enterprise
          expect(response).to have_http_status(:unauthorized)
          enterprise.reload
          expect(enterprise.promo_image).to be_attached
        end
      end

      context "as owner of other enterprise" do
        let(:current_user) { other_enterprise_owner }

        it "does not allow removal of promo image" do
          spree_delete :destroy, enterprise_id: enterprise
          expect(response).to have_http_status(:unauthorized)
          enterprise.reload
          expect(enterprise.promo_image).to be_attached
        end
      end
    end
  end
end