// Vikunja is a to-do list application to facilitate your life. // Copyright 2018-present Vikunja and contributors. All rights reserved. // // This program is free software: you can redistribute it and/or modify // it under the terms of the GNU Affero General Public License as published by // the Free Software Foundation, either version 3 of the License, or // (at your option) any later version. // // This program is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU Affero General Public License for more details. // // You should have received a copy of the GNU Affero General Public License // along with this program. If not, see . package models import ( "testing" "code.vikunja.io/api/pkg/db" "code.vikunja.io/api/pkg/user" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" ) func TestTeamMember_Create(t *testing.T) { doer := &user.User{ ID: 1, } t.Run("normal", func(t *testing.T) { db.LoadAndAssertFixtures(t) s := db.NewSession() defer s.Close() tm := &TeamMember{ TeamID: 1, Username: "user3", } err := tm.Create(s, doer) require.NoError(t, err) err = s.Commit() require.NoError(t, err) db.AssertExists(t, "team_members", map[string]interface{}{ "id": tm.ID, "team_id": 1, "user_id": 3, }, false) }) t.Run("already existing", func(t *testing.T) { db.LoadAndAssertFixtures(t) s := db.NewSession() defer s.Close() tm := &TeamMember{ TeamID: 1, Username: "user1", } err := tm.Create(s, doer) require.Error(t, err) assert.True(t, IsErrUserIsMemberOfTeam(err)) }) t.Run("nonexisting user", func(t *testing.T) { db.LoadAndAssertFixtures(t) s := db.NewSession() defer s.Close() tm := &TeamMember{ TeamID: 1, Username: "nonexistinguser", } err := tm.Create(s, doer) require.Error(t, err) assert.True(t, user.IsErrUserDoesNotExist(err)) }) t.Run("nonexisting team", func(t *testing.T) { db.LoadAndAssertFixtures(t) s := db.NewSession() defer s.Close() tm := &TeamMember{ TeamID: 9999999, Username: "user1", } err := tm.Create(s, doer) require.Error(t, err) assert.True(t, IsErrTeamDoesNotExist(err)) }) } func TestTeamMember_Delete(t *testing.T) { t.Run("normal", func(t *testing.T) { db.LoadAndAssertFixtures(t) s := db.NewSession() defer s.Close() tm := &TeamMember{ TeamID: 1, Username: "user1", } err := tm.Delete(s, &user.User{ID: 1}) require.NoError(t, err) err = s.Commit() require.NoError(t, err) db.AssertMissing(t, "team_members", map[string]interface{}{ "team_id": 1, "user_id": 1, }) }) } func TestTeamMember_Update(t *testing.T) { u := &user.User{ID: 1} t.Run("normal", func(t *testing.T) { db.LoadAndAssertFixtures(t) s := db.NewSession() defer s.Close() tm := &TeamMember{ TeamID: 1, Username: "user1", Admin: true, } err := tm.Update(s, u) require.NoError(t, err) assert.False(t, tm.Admin) // Since this endpoint toggles the permission, we should get a false for admin back. err = s.Commit() require.NoError(t, err) db.AssertExists(t, "team_members", map[string]interface{}{ "team_id": 1, "user_id": 1, "admin": false, }, false) }) // This should have the same result as the normal run as the update function // should ignore what was passed. t.Run("explicitly false in payload", func(t *testing.T) { db.LoadAndAssertFixtures(t) s := db.NewSession() defer s.Close() tm := &TeamMember{ TeamID: 1, Username: "user1", Admin: true, } err := tm.Update(s, u) require.NoError(t, err) assert.False(t, tm.Admin) err = s.Commit() require.NoError(t, err) db.AssertExists(t, "team_members", map[string]interface{}{ "team_id": 1, "user_id": 1, "admin": false, }, false) }) } func TestCleanupTaskMembersAfterTeamRemoval(t *testing.T) { t.Run("removes data when member loses team access", func(t *testing.T) { db.LoadAndAssertFixtures(t) s := db.NewSession() defer s.Close() task := &Task{ Title: "team cleanup", ProjectID: 19, CreatedByID: 7, Index: 2, } _, err := s.Insert(task) require.NoError(t, err) _, err = s.Insert(&TaskAssginee{TaskID: task.ID, UserID: 2}) require.NoError(t, err) _, err = s.Insert(&Subscription{EntityType: SubscriptionEntityTask, EntityID: task.ID, UserID: 2}) require.NoError(t, err) _, err = s.Insert(&Subscription{EntityType: SubscriptionEntityProject, EntityID: 19, UserID: 2}) require.NoError(t, err) _, err = s.Where("team_id = ? AND user_id = ?", 9, 2).Delete(&TeamMember{}) require.NoError(t, err) _, err = s.Where("project_id = ? AND user_id = ?", 19, 2).Delete(&ProjectUser{}) require.NoError(t, err) require.NoError(t, s.Commit()) err = cleanupTaskMembersAfterTeamRemoval(s, 9, 2) require.NoError(t, err) db.AssertMissing(t, "task_assignees", map[string]interface{}{"task_id": task.ID, "user_id": 2}) db.AssertMissing(t, "subscriptions", map[string]interface{}{"entity_type": SubscriptionEntityTask, "entity_id": task.ID, "user_id": 2}) db.AssertMissing(t, "subscriptions", map[string]interface{}{"entity_type": SubscriptionEntityProject, "entity_id": 19, "user_id": 2}) }) t.Run("removes orphaned data for deleted project", func(t *testing.T) { db.LoadAndAssertFixtures(t) const orphanProjectID int64 = 54321 s := db.NewSession() defer s.Close() _, err := s.Insert(&TeamProject{TeamID: 9, ProjectID: orphanProjectID, Permission: PermissionRead}) require.NoError(t, err) task := &Task{ Title: "orphan cleanup", ProjectID: orphanProjectID, CreatedByID: 7, Index: 5, } _, err = s.Insert(task) require.NoError(t, err) _, err = s.Insert(&TaskAssginee{TaskID: task.ID, UserID: 2}) require.NoError(t, err) _, err = s.Insert(&Subscription{EntityType: SubscriptionEntityTask, EntityID: task.ID, UserID: 2}) require.NoError(t, err) _, err = s.Insert(&Subscription{EntityType: SubscriptionEntityProject, EntityID: orphanProjectID, UserID: 2}) require.NoError(t, err) _, err = s.Where("team_id = ? AND user_id = ?", 9, 2).Delete(&TeamMember{}) require.NoError(t, err) _, err = s.Where("project_id = ? AND user_id = ?", orphanProjectID, 2).Delete(&ProjectUser{}) require.NoError(t, err) require.NoError(t, s.Commit()) err = cleanupTaskMembersAfterTeamRemoval(s, 9, 2) require.NoError(t, err) db.AssertMissing(t, "task_assignees", map[string]interface{}{"task_id": task.ID, "user_id": 2}) db.AssertMissing(t, "subscriptions", map[string]interface{}{"entity_type": SubscriptionEntityTask, "entity_id": task.ID, "user_id": 2}) db.AssertMissing(t, "subscriptions", map[string]interface{}{"entity_type": SubscriptionEntityProject, "entity_id": orphanProjectID, "user_id": 2}) }) }