/** * Copyright (c) HashiCorp, Inc. * SPDX-License-Identifier: BUSL-1.1 */ import { module, test } from 'qunit'; import { visit, findAll, click, fillIn, waitUntil, focus, } from '@ember/test-helpers'; import { setupApplicationTest } from 'admin/tests/helpers'; import setupMirage from 'ember-cli-mirage/test-support/setup-mirage'; import { setupIndexedDb } from 'api/test-support/helpers/indexed-db'; import { authenticateSession } from 'ember-simple-auth/test-support'; import { GRANT_SCOPE_THIS } from 'api/models/role'; module('Acceptance | roles | list', function (hooks) { setupApplicationTest(hooks); setupMirage(hooks); setupIndexedDb(hooks); const ROLE_BADGE_SELECTOR = (id) => `tbody [data-test-role-row="${id}"] td:nth-child(2) .hds-badge__text`; const ROLE_TOOLTIP_BTN_SELECTOR = (id) => `tbody [data-test-role-row="${id}"] td:nth-child(2) .hds-tooltip-button`; const ROLE_TOOLTIP_CONTENT_SELECTOR = (id) => `tbody [data-test-role-row="${id}"] td:nth-child(2) [data-tippy-root]`; const SEARCH_INPUT_SELECTOR = '.search-filtering [type="search"]'; const NO_RESULTS_MSG_SELECTOR = '[data-test-no-role-results]'; const instances = { scopes: { global: null, org: null, }, role1: null, role2: null, }; const urls = { globalScope: null, orgScope: null, roles: null, role1: null, role2: null, }; hooks.beforeEach(async function () { instances.scopes.global = this.server.create('scope', { id: 'global' }); instances.scopes.org = this.server.create('scope', { type: 'org', scope: { id: 'global', type: 'global' }, }); instances.role1 = this.server.create('role', { scope: instances.scopes.org, }); instances.role2 = this.server.create('role', { scope: instances.scopes.org, }); urls.globalScope = `/scopes/global/scopes`; urls.orgScope = `/scopes/${instances.scopes.org.id}`; urls.roles = `/scopes/${instances.scopes.org.id}/roles`; urls.role1 = `${urls.roles}/${instances.role1.id}`; urls.role2 = `${urls.roles}/${instances.role2.id}`; await authenticateSession({}); }); test('users can navigate to roles with proper authorization', async function (assert) { await visit(urls.globalScope); await click(`[href="${urls.orgScope}"]`); assert.true( instances.scopes.org.authorized_collection_actions.roles.includes('list'), ); assert.dom(`[href="${urls.roles}"]`).exists(); }); test('users cannot navigate to index without either list or create actions', async function (assert) { instances.scopes.org.authorized_collection_actions.roles = []; await visit(urls.globalScope); await click(`[href="${urls.orgScope}"]`); assert.false( instances.scopes.org.authorized_collection_actions.roles.includes('list'), ); assert.dom(`[href="${urls.roles}"]`).doesNotExist(); }); test('users can navigate to index with only create action', async function (assert) { instances.scopes.org.authorized_collection_actions.roles = ['create']; await visit(urls.globalScope); await click(`[href="${urls.orgScope}"]`); assert.dom(`[href="${urls.roles}"]`).exists(); }); test('user can search for a specifc role by id', async function (assert) { await visit(urls.orgScope); await click(`[href="${urls.roles}"]`); assert.dom(`[href="${urls.role1}"]`).exists(); assert.dom(`[href="${urls.role2}"]`).exists(); await fillIn(SEARCH_INPUT_SELECTOR, instances.role1.id); await waitUntil(() => findAll(`[href="${urls.role2}"]`).length === 0); assert.dom(`[href="${urls.role1}"]`).exists(); assert.dom(`[href="${urls.role2}"]`).doesNotExist(); }); test('user can search for roles and get no results', async function (assert) { await visit(urls.orgScope); await click(`[href="${urls.roles}"]`); assert.dom(`[href="${urls.role1}"]`).exists(); assert.dom(`[href="${urls.role2}"]`).exists(); await fillIn(SEARCH_INPUT_SELECTOR, 'fake role that does not exist'); await waitUntil(() => findAll(NO_RESULTS_MSG_SELECTOR).length === 1); assert.dom(`[href="${urls.role1}"]`).doesNotExist(); assert.dom(`[href="${urls.role2}"]`).doesNotExist(); assert.dom(NO_RESULTS_MSG_SELECTOR).includesText('No results found'); }); test('correct badge in grants applied column is visible to user', async function (assert) { instances.role1.grant_scope_ids = instances.role1.grant_scope_ids.filter( (id) => id !== GRANT_SCOPE_THIS, ); await visit(urls.orgScope); await click(`[href="${urls.roles}"]`); assert.true(instances.role2.grant_scope_ids.includes(GRANT_SCOPE_THIS)); assert.dom(ROLE_BADGE_SELECTOR(instances.role1.id)).hasText('No'); assert.dom(ROLE_BADGE_SELECTOR(instances.role2.id)).hasText('Yes'); await focus(ROLE_TOOLTIP_BTN_SELECTOR(instances.role1.id)); assert .dom(ROLE_TOOLTIP_CONTENT_SELECTOR(instances.role1.id)) .hasText('The grants on this role have not been applied to this scope.'); await focus(ROLE_TOOLTIP_BTN_SELECTOR(instances.role2.id)); assert .dom(ROLE_TOOLTIP_CONTENT_SELECTOR(instances.role2.id)) .hasText('The grants on this role have been applied to this scope.'); }); });