1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
require File.expand_path(File.dirname(__FILE__) + '/../spec_helper')
describe "When creating requests" do
it "should associate the request with the requestor, even if it is approved by an admin" do
# This is a test for https://github.com/sebbacon/alaveteli/issues/446
params = { :info_request => { :public_body_id => public_bodies(:geraldine_public_body).id,
:title => "Why is your quango called Geraldine?", :tag_string => "" },
:outgoing_message => { :body => "This is a silly letter. It is too short to be interesting." },
:submitted_new_request => 1, :preview => 0
}
# Initially we are not logged in. Try to create a new request.
post "/new", params
# We expect to be redirected to the login page
post_redirect = PostRedirect.get_last_post_redirect
response.should redirect_to(:controller => 'user', :action => 'signin', :token => post_redirect.token)
follow_redirect!
response.should render_template("user/sign")
# Now log in as an unconfirmed user.
post "/profile/sign_in", :user_signin => {:email => users(:unconfirmed_user).email, :password => "jonespassword"}, :token => post_redirect.token
# This will trigger a confirmation mail. Get the PostRedirect for later.
response.should render_template("user/confirm")
post_redirect = PostRedirect.get_last_post_redirect
# Now log in as an admin user, then follow the confirmation link in the email that was sent to the unconfirmed user
admin_user = users(:admin_user)
admin_user.email_confirmed = true
admin_user.save!
post_via_redirect "/profile/sign_in", :user_signin => {:email => admin_user.email, :password => "jonespassword"}
response.should be_success
get "/c/" + post_redirect.email_token
follow_redirect!
response.location.should =~ %r(/request/(.+)/new)
response.location =~ %r(/request/(.+)/new)
url_title = $1
info_request = InfoRequest.find_by_url_title(url_title)
info_request.should_not be_nil
# Make sure the request is still owned by the user who made it, not the admin who confirmed it
info_request.user_id.should == users(:unconfirmed_user).id
end
end
|
