2024-04-18 07:56:51 -04:00
|
|
|
require "test_helper"
|
|
|
|
|
|
|
|
class Settings::ProfilesControllerTest < ActionDispatch::IntegrationTest
|
|
|
|
setup do
|
2025-01-30 13:13:37 -06:00
|
|
|
@admin = users(:family_admin)
|
|
|
|
@member = users(:family_member)
|
2024-04-18 07:56:51 -04:00
|
|
|
end
|
2024-04-30 16:40:31 +01:00
|
|
|
|
2025-01-30 13:13:37 -06:00
|
|
|
test "should get show" do
|
|
|
|
sign_in @admin
|
|
|
|
get settings_profile_path
|
2024-04-18 07:56:51 -04:00
|
|
|
assert_response :success
|
|
|
|
end
|
2025-01-30 13:13:37 -06:00
|
|
|
|
|
|
|
test "admin can remove a family member" do
|
|
|
|
sign_in @admin
|
|
|
|
assert_difference("User.count", -1) do
|
|
|
|
delete settings_profile_path(user_id: @member)
|
|
|
|
end
|
|
|
|
|
|
|
|
assert_redirected_to settings_profile_path
|
|
|
|
assert_equal I18n.t("settings.profiles.destroy.member_removed"), flash[:notice]
|
|
|
|
assert_raises(ActiveRecord::RecordNotFound) { User.find(@member.id) }
|
|
|
|
end
|
|
|
|
|
|
|
|
test "admin cannot remove themselves" do
|
|
|
|
sign_in @admin
|
|
|
|
assert_no_difference("User.count") do
|
|
|
|
delete settings_profile_path(user_id: @admin)
|
|
|
|
end
|
|
|
|
|
|
|
|
assert_redirected_to settings_profile_path
|
|
|
|
assert_equal I18n.t("settings.profiles.destroy.cannot_remove_self"), flash[:alert]
|
|
|
|
assert User.find(@admin.id)
|
|
|
|
end
|
|
|
|
|
|
|
|
test "non-admin cannot remove members" do
|
|
|
|
sign_in @member
|
|
|
|
assert_no_difference("User.count") do
|
|
|
|
delete settings_profile_path(user_id: @admin)
|
|
|
|
end
|
|
|
|
|
|
|
|
assert_redirected_to settings_profile_path
|
|
|
|
assert_equal I18n.t("settings.profiles.destroy.not_authorized"), flash[:alert]
|
|
|
|
assert User.find(@admin.id)
|
|
|
|
end
|
2024-04-18 07:56:51 -04:00
|
|
|
end
|