Merge pull request #737 from hashicorp/feature-scope-capabilities

Feature scope capabilities
This commit is contained in:
Susmitha Girumala authored and GitHub committed 2021-09-03 10:30:05 -04:00
commit caf85c57ec
10 files changed
+439 -192

No files matched your search

+9
View File
@@ -1,9 +1,18 @@
import factory from '../generated/factories/scope';
import { trait } from 'ember-cli-mirage';
import permissions from '../helpers/permissions';
export default factory.extend({
type: 'global',
authorized_actions: () =>
permissions.authorizedActionsFor('scope') || [
'no-op',
'read',
'update',
'delete',
],
authorized_collection_actions: () => {
return {
users: ['create', 'list'],
@@ -346,3 +346,8 @@ credential-library:
help: The body of the HTTP request the library sends to Vault when requesting credentials. Only allowed when HTTP method is set to POST.
types:
vault: Vault
scope:
title: Scope
title_plural: Scopes
messages:
cannot_read: While you do not have permission to read this scope, you may have permission to view resources within it.
+8 -6
View File
@@ -46,11 +46,13 @@
{{/if}}
</form.textarea>
<form.actions
@disabled={{if @model.cannotSave @model.cannotSave}}
@enableEditText={{t 'actions.edit-form'}}
@submitText={{t 'actions.save'}}
@cancelText={{t 'actions.cancel'}}
/>
{{#if (can 'save model' @model)}}
<form.actions
@disabled={{if @model.cannotSave @model.cannotSave}}
@enableEditText={{t 'actions.edit-form'}}
@submitText={{t 'actions.save'}}
@cancelText={{t 'actions.cancel'}}
/>
{{/if}}
</Rose::Form>
+44 -30
View File
@@ -28,40 +28,54 @@
</Copyable>
</page.header>
<page.navigation>
<Rose::Nav::Tabs as |nav|>
<nav.link @route='scopes.scope'>
{{t 'titles.details'}}
</nav.link>
</Rose::Nav::Tabs>
</page.navigation>
{{#if (can 'read model' @model)}}
<page.navigation>
<Rose::Nav::Tabs as |nav|>
<nav.link @route='scopes.scope'>
{{t 'titles.details'}}
</nav.link>
</Rose::Nav::Tabs>
</page.navigation>
{{/if}}
<page.actions>
<Rose::Dropdown
@text='{{t 'actions.manage'}}'
@dropdownRight={{true}}
as |dropdown|
>
<dropdown.button
@style='danger'
@disabled={{@model.canSave}}
{{on 'click' (route-action 'delete' @model)}}
{{#if (can 'delete model' @model)}}
<page.actions>
<Rose::Dropdown
@text='{{t 'actions.manage'}}'
@dropdownRight={{true}}
as |dropdown|
>
{{#if @model.isOrg}}
{{t 'resources.org.actions.delete'}}
{{else}}
{{t 'resources.project.actions.delete'}}
{{/if}}
</dropdown.button>
</Rose::Dropdown>
</page.actions>
<dropdown.button
@style='danger'
@disabled={{@model.canSave}}
{{on 'click' (route-action 'delete' @model)}}
>
{{#if @model.isOrg}}
{{t 'resources.org.actions.delete'}}
{{else}}
{{t 'resources.project.actions.delete'}}
{{/if}}
</dropdown.button>
</Rose::Dropdown>
</page.actions>
{{/if}}
<page.body>
<Form::Scope
@model={{@model}}
@submit={{route-action 'save' @model}}
@cancel={{route-action 'cancel' @model}}
/>
{{#if (can 'read model' @model)}}
<Form::Scope
@model={{@model}}
@submit={{route-action 'save' @model}}
@cancel={{route-action 'cancel' @model}}
/>
{{else}}
<Rose::Layout::Centered>
<Rose::Message as |message|>
<message.description>
{{t 'resources.scope.messages.cannot_read'}}
</message.description>
</Rose::Message>
</Rose::Layout::Centered>
{{/if}}
</page.body>
</Rose::Layout::Page>
-155
View File
@@ -4,8 +4,6 @@ import { setupApplicationTest } from 'ember-qunit';
import setupMirage from 'ember-cli-mirage/test-support/setup-mirage';
import a11yAudit from 'ember-a11y-testing/test-support/audit';
import { Response } from 'miragejs';
import { resolve, reject } from 'rsvp';
import sinon from 'sinon';
import {
authenticateSession,
// These are left here intentionally for future reference.
@@ -202,157 +200,4 @@ module('Acceptance | scopes', function (hooks) {
'Name is required.'
);
});
test('can save changes to existing scope', async function (assert) {
assert.expect(3);
assert.notEqual(instances.scopes.org.name, 'random string');
await visit(urls.orgScopeEdit);
await click('form [type="button"]', 'Activate edit mode');
await fillIn('[name="name"]', 'random string');
await click('.rose-form-actions [type="submit"]');
assert.equal(currentURL(), urls.orgScopeEdit);
assert.equal(
this.server.schema.scopes.where({ type: 'org' }).models[0].name,
'random string'
);
});
test('can cancel changes to existing scope', async function (assert) {
assert.expect(2);
await visit(urls.orgScopeEdit);
await click('form [type="button"]', 'Activate edit mode');
await fillIn('[name="name"]', 'random string');
await click('.rose-form-actions [type="button"]');
assert.notEqual(instances.scopes.org.name, 'random string');
assert.equal(find('[name="name"]').value, instances.scopes.org.name);
});
test('saving an existing scope with invalid fields displays error messages', async function (assert) {
assert.expect(2);
this.server.patch('/scopes/:id', () => {
return new Response(
400,
{},
{
status: 400,
code: 'invalid_argument',
message: 'The request was invalid.',
details: {
request_fields: [
{
name: 'name',
description: 'Name is required.',
},
],
},
}
);
});
await visit(urls.orgScopeEdit);
await click('form [type="button"]', 'Activate edit mode');
await fillIn('[name="name"]', 'random string');
await click('[type="submit"]');
assert.ok(
find('[role="alert"]').textContent.trim(),
'The request was invalid.'
);
assert.ok(
find('.rose-form-error-message').textContent.trim(),
'Name is required.'
);
});
test('can discard unsaved scope changes via dialog', async function (assert) {
assert.expect(5);
const confirmService = this.owner.lookup('service:confirm');
confirmService.enabled = true;
assert.notEqual(instances.scopes.org.name, 'random string');
await visit(urls.orgScopeEdit);
await click('form [type="button"]', 'Activate edit mode');
await fillIn('[name="name"]', 'random string');
assert.equal(currentURL(), urls.orgScopeEdit);
try {
await visit(urls.globalScope);
} catch (e) {
assert.ok(find('.rose-dialog'));
await click('.rose-dialog-footer button:first-child');
assert.equal(currentURL(), urls.globalScope);
assert.notEqual(
this.server.schema.scopes.where({ type: 'org' }).models[0].name,
'random string'
);
}
});
test('can cancel discard unsaved scope changes via dialog', async function (assert) {
assert.expect(5);
const confirmService = this.owner.lookup('service:confirm');
confirmService.enabled = true;
assert.notEqual(instances.scopes.org.name, 'random string');
await visit(urls.orgScopeEdit);
await click('form [type="button"]', 'Activate edit mode');
await fillIn('[name="name"]', 'random string');
assert.equal(currentURL(), urls.orgScopeEdit);
try {
await visit(urls.globalScope);
} catch (e) {
assert.ok(find('.rose-dialog'));
await click('.rose-dialog-footer button:last-child');
assert.equal(currentURL(), urls.orgScopeEdit);
assert.notEqual(
this.server.schema.scopes.where({ type: 'org' }).models[0].name,
'random string'
);
}
});
test('can delete scope', async function (assert) {
assert.expect(1);
const orgScopeCount = getScopeCount('org');
await visit(urls.orgScopeEdit);
await click('.rose-layout-page-actions .rose-dropdown-button-danger');
assert.equal(getScopeCount('org'), orgScopeCount - 1);
});
test('can accept delete scope via dialog', async function (assert) {
assert.expect(2);
const confirmService = this.owner.lookup('service:confirm');
confirmService.enabled = true;
confirmService.confirm = sinon.fake.returns(resolve());
const orgScopeCount = getScopeCount('org');
await visit(urls.orgScopeEdit);
await click('.rose-layout-page-actions .rose-dropdown-button-danger');
assert.equal(getScopeCount('org'), orgScopeCount - 1);
assert.ok(confirmService.confirm.calledOnce);
});
test('cannot cancel delete scope via dialog', async function (assert) {
assert.expect(2);
const confirmService = this.owner.lookup('service:confirm');
confirmService.enabled = true;
confirmService.confirm = sinon.fake.returns(reject());
const orgScopeCount = getScopeCount('org');
await visit(urls.orgScopeEdit);
await click('.rose-layout-page-actions .rose-dropdown-button-danger');
assert.equal(getScopeCount('org'), orgScopeCount);
assert.ok(confirmService.confirm.calledOnce);
});
test('deleting a scope which errors displays error messages', async function (assert) {
assert.expect(1);
this.server.del('/scopes/:id', () => {
return new Response(
490,
{},
{
status: 490,
code: 'error',
message: 'Oops.',
}
);
});
await visit(urls.orgScopeEdit);
await click('.rose-layout-page-actions .rose-dropdown-button-danger');
assert.ok(find('[role="alert"]').textContent.trim(), 'Oops.');
});
});
@@ -0,0 +1,136 @@
import { module, test } from 'qunit';
import { visit, find, click } from '@ember/test-helpers';
import { setupApplicationTest } from 'ember-qunit';
import setupMirage from 'ember-cli-mirage/test-support/setup-mirage';
import { Response } from 'miragejs';
import { resolve, reject } from 'rsvp';
import sinon from 'sinon';
import {
authenticateSession,
// These are left here intentionally for future reference.
//currentSession,
//invalidateSession,
} from 'ember-simple-auth/test-support';
module('Acceptance | scopes | delete', function (hooks) {
setupApplicationTest(hooks);
setupMirage(hooks);
let getScopeCount;
const instances = {
scopes: {
global: null,
org: null,
org2: null,
project: null,
project2: null,
},
};
const urls = {
globalScope: null,
orgScope: null,
org2Scope: null,
orgScopeEdit: null,
org2ScopeEdit: null,
projectScope: null,
project2Scope: null,
projectScopeEdit: null,
project2ScopeEdit: null,
};
hooks.beforeEach(function () {
// Generate resources
instances.scopes.global = this.server.create('scope', { id: 'global' });
instances.scopes.org = this.server.create('scope', {
type: 'org',
scope: { id: 'global', type: 'global' },
});
instances.scopes.org2 = this.server.create('scope', {
type: 'org',
scope: { id: 'global', type: 'global' },
});
instances.scopes.project = this.server.create('scope', {
type: 'project',
scope: { id: instances.scopes.org.id, type: 'org' },
});
instances.scopes.project2 = this.server.create('scope', {
type: 'project',
scope: { id: instances.scopes.org.id, type: 'org' },
});
// Generate route URLs for resources
urls.globalScope = `/scopes/global/scopes`;
urls.newOrgScope = `/scopes/global/new`;
urls.orgScope = `/scopes/${instances.scopes.org.id}/scopes`;
urls.org2Scope = `/scopes/${instances.scopes.org2.id}/scopes`;
urls.orgScopeEdit = `/scopes/${instances.scopes.org.id}/edit`;
urls.org2ScopeEdit = `/scopes/${instances.scopes.org2.id}/edit`;
urls.newProjectScope = `/scopes/${instances.scopes.org.id}/new`;
urls.projectScope = `/scopes/${instances.scopes.project.id}`;
urls.project2Scope = `/scopes/${instances.scopes.project2.id}`;
urls.projectScopeEdit = `/scopes/${instances.scopes.project.id}/edit`;
urls.project2ScopeEdit = `/scopes/${instances.scopes.project2.id}/edit`;
// Generate resource couner
getScopeCount = (type) => this.server.schema.scopes.where({ type }).length;
authenticateSession({});
});
test('can delete scope', async function (assert) {
assert.expect(1);
const orgScopeCount = getScopeCount('org');
await visit(urls.orgScopeEdit);
await click('.rose-layout-page-actions .rose-dropdown-button-danger');
assert.equal(getScopeCount('org'), orgScopeCount - 1);
});
test('cannot delete scope without proper authorization', async function (assert) {
assert.expect(1);
instances.scopes.org.update({ authorized_actions: [] });
await visit(urls.orgScopeEdit);
assert.notOk(
find('.rose-layout-page-actions .rose-dropdown-button-danger')
);
});
test('can accept delete scope via dialog', async function (assert) {
assert.expect(2);
const confirmService = this.owner.lookup('service:confirm');
confirmService.enabled = true;
confirmService.confirm = sinon.fake.returns(resolve());
const orgScopeCount = getScopeCount('org');
await visit(urls.orgScopeEdit);
await click('.rose-layout-page-actions .rose-dropdown-button-danger');
assert.equal(getScopeCount('org'), orgScopeCount - 1);
assert.ok(confirmService.confirm.calledOnce);
});
test('cannot cancel delete scope via dialog', async function (assert) {
assert.expect(2);
const confirmService = this.owner.lookup('service:confirm');
confirmService.enabled = true;
confirmService.confirm = sinon.fake.returns(reject());
const orgScopeCount = getScopeCount('org');
await visit(urls.orgScopeEdit);
await click('.rose-layout-page-actions .rose-dropdown-button-danger');
assert.equal(getScopeCount('org'), orgScopeCount);
assert.ok(confirmService.confirm.calledOnce);
});
test('deleting a scope which errors displays error messages', async function (assert) {
assert.expect(1);
this.server.del('/scopes/:id', () => {
return new Response(
490,
{},
{
status: 490,
code: 'error',
message: 'Oops.',
}
);
});
await visit(urls.orgScopeEdit);
await click('.rose-layout-page-actions .rose-dropdown-button-danger');
assert.ok(find('[role="alert"]').textContent.trim(), 'Oops.');
});
});
@@ -0,0 +1,55 @@
import { module, test } from 'qunit';
import { visit, currentURL, find } from '@ember/test-helpers';
import { setupApplicationTest } from 'ember-qunit';
import setupMirage from 'ember-cli-mirage/test-support/setup-mirage';
import a11yAudit from 'ember-a11y-testing/test-support/audit';
import {
authenticateSession,
// These are left here intentionally for future reference.
//currentSession,
//invalidateSession,
} from 'ember-simple-auth/test-support';
module('Acceptance | scopes | read', function (hooks) {
setupApplicationTest(hooks);
setupMirage(hooks);
const instances = {
scopes: {
global: null,
org: null,
},
};
const urls = {
orgScopeEdit: null,
};
hooks.beforeEach(function () {
// Generate resources
instances.scopes.global = this.server.create('scope', { id: 'global' });
instances.scopes.org = this.server.create('scope', {
type: 'org',
scope: { id: 'global', type: 'global' },
});
// Generate route URLs for resources
urls.orgScopeEdit = `/scopes/${instances.scopes.org.id}/edit`;
// Generate resource couner
authenticateSession({});
});
test('visiting org scope edit', async function (assert) {
assert.expect(2);
await visit(urls.orgScopeEdit);
await a11yAudit();
assert.equal(currentURL(), urls.orgScopeEdit);
assert.ok(find('main .rose-form'));
});
test('visiting org scope edit without read permission results in no form displayed', async function (assert) {
assert.expect(2);
instances.scopes.org.update({ authorized_actions: [] });
await visit(urls.orgScopeEdit);
assert.equal(currentURL(), urls.orgScopeEdit);
assert.notOk(find('main .rose-form'));
});
});
@@ -0,0 +1,181 @@
import { module, test } from 'qunit';
import { visit, currentURL, find, click, fillIn } from '@ember/test-helpers';
import { setupApplicationTest } from 'ember-qunit';
import setupMirage from 'ember-cli-mirage/test-support/setup-mirage';
import { Response } from 'miragejs';
import {
authenticateSession,
// These are left here intentionally for future reference.
//currentSession,
//invalidateSession,
} from 'ember-simple-auth/test-support';
module('Acceptance | scopes | update', function (hooks) {
setupApplicationTest(hooks);
setupMirage(hooks);
const instances = {
scopes: {
global: null,
org: null,
org2: null,
project: null,
project2: null,
},
};
const urls = {
globalScope: null,
orgScope: null,
org2Scope: null,
orgScopeEdit: null,
org2ScopeEdit: null,
projectScope: null,
project2Scope: null,
projectScopeEdit: null,
project2ScopeEdit: null,
};
hooks.beforeEach(function () {
// Generate resources
instances.scopes.global = this.server.create('scope', { id: 'global' });
instances.scopes.org = this.server.create('scope', {
type: 'org',
scope: { id: 'global', type: 'global' },
});
instances.scopes.org2 = this.server.create('scope', {
type: 'org',
scope: { id: 'global', type: 'global' },
});
instances.scopes.project = this.server.create('scope', {
type: 'project',
scope: { id: instances.scopes.org.id, type: 'org' },
});
instances.scopes.project2 = this.server.create('scope', {
type: 'project',
scope: { id: instances.scopes.org.id, type: 'org' },
});
// Generate route URLs for resources
urls.globalScope = `/scopes/global/scopes`;
urls.newOrgScope = `/scopes/global/new`;
urls.orgScope = `/scopes/${instances.scopes.org.id}/scopes`;
urls.org2Scope = `/scopes/${instances.scopes.org2.id}/scopes`;
urls.orgScopeEdit = `/scopes/${instances.scopes.org.id}/edit`;
urls.org2ScopeEdit = `/scopes/${instances.scopes.org2.id}/edit`;
urls.newProjectScope = `/scopes/${instances.scopes.org.id}/new`;
urls.projectScope = `/scopes/${instances.scopes.project.id}`;
urls.project2Scope = `/scopes/${instances.scopes.project2.id}`;
urls.projectScopeEdit = `/scopes/${instances.scopes.project.id}/edit`;
urls.project2ScopeEdit = `/scopes/${instances.scopes.project2.id}/edit`;
authenticateSession({});
});
test('can save changes to existing scope', async function (assert) {
assert.expect(3);
assert.notEqual(instances.scopes.org.name, 'random string');
await visit(urls.orgScopeEdit);
await click('form [type="button"]', 'Activate edit mode');
await fillIn('[name="name"]', 'random string');
await click('.rose-form-actions [type="submit"]');
assert.equal(currentURL(), urls.orgScopeEdit);
assert.equal(
this.server.schema.scopes.where({ type: 'org' }).models[0].name,
'random string'
);
});
test('cannot save changes to without proper authorization', async function (assert) {
assert.expect(1);
instances.scopes.org.update({ authorized_actions: [] });
await visit(urls.orgScopeEdit);
assert.notOk(find('form [type="button"]'));
});
test('can cancel changes to existing scope', async function (assert) {
assert.expect(2);
await visit(urls.orgScopeEdit);
await click('form [type="button"]', 'Activate edit mode');
await fillIn('[name="name"]', 'random string');
await click('.rose-form-actions [type="button"]');
assert.notEqual(instances.scopes.org.name, 'random string');
assert.equal(find('[name="name"]').value, instances.scopes.org.name);
});
test('saving an existing scope with invalid fields displays error messages', async function (assert) {
assert.expect(2);
this.server.patch('/scopes/:id', () => {
return new Response(
400,
{},
{
status: 400,
code: 'invalid_argument',
message: 'The request was invalid.',
details: {
request_fields: [
{
name: 'name',
description: 'Name is required.',
},
],
},
}
);
});
await visit(urls.orgScopeEdit);
await click('form [type="button"]', 'Activate edit mode');
await fillIn('[name="name"]', 'random string');
await click('[type="submit"]');
assert.ok(
find('[role="alert"]').textContent.trim(),
'The request was invalid.'
);
assert.ok(
find('.rose-form-error-message').textContent.trim(),
'Name is required.'
);
});
test('can discard unsaved scope changes via dialog', async function (assert) {
assert.expect(5);
const confirmService = this.owner.lookup('service:confirm');
confirmService.enabled = true;
assert.notEqual(instances.scopes.org.name, 'random string');
await visit(urls.orgScopeEdit);
await click('form [type="button"]', 'Activate edit mode');
await fillIn('[name="name"]', 'random string');
assert.equal(currentURL(), urls.orgScopeEdit);
try {
await visit(urls.globalScope);
} catch (e) {
assert.ok(find('.rose-dialog'));
await click('.rose-dialog-footer button:first-child');
assert.equal(currentURL(), urls.globalScope);
assert.notEqual(
this.server.schema.scopes.where({ type: 'org' }).models[0].name,
'random string'
);
}
});
test('can cancel discard unsaved scope changes via dialog', async function (assert) {
assert.expect(5);
const confirmService = this.owner.lookup('service:confirm');
confirmService.enabled = true;
assert.notEqual(instances.scopes.org.name, 'random string');
await visit(urls.orgScopeEdit);
await click('form [type="button"]', 'Activate edit mode');
await fillIn('[name="name"]', 'random string');
assert.equal(currentURL(), urls.orgScopeEdit);
try {
await visit(urls.globalScope);
} catch (e) {
assert.ok(find('.rose-dialog'));
await click('.rose-dialog-footer button:last-child');
assert.equal(currentURL(), urls.orgScopeEdit);
assert.notEqual(
this.server.schema.scopes.where({ type: 'org' }).models[0].name,
'random string'
);
}
});
});
@@ -20,6 +20,7 @@ module('Acceptance | users | create', function (hooks) {
let newUserURL;
hooks.beforeEach(function () {
this.server.create('scope', { id: 'global' });
orgScope = this.server.create(
'scope',
{
@@ -19,7 +19,6 @@ module('Acceptance | users | list', function (hooks) {
global: null,
org: null,
},
orgScope: null,
};
const urls = {