outline/server/policies/team.test.js

// @flow
import { buildUser, buildTeam, buildAdmin } from "../test/factories";
import { flushdb } from "../test/support";

import "./";
import serialize from "./serializer";

beforeEach(() => flushdb());

it("should allow reading only", async () => {
  const team = await buildTeam();
  const user = await buildUser({ teamId: team.id });
  const abilities = serialize(user, team);
  expect(abilities.read).toEqual(true);
  expect(abilities.manage).toEqual(false);

  expect(abilities.createAttachment).toEqual(true);
  expect(abilities.createCollection).toEqual(true);
  expect(abilities.createDocument).toEqual(true);
  expect(abilities.createGroup).toEqual(false);
  expect(abilities.createIntegration).toEqual(false);
});

it("should allow admins to manage", async () => {
  const team = await buildTeam();
  const admin = await buildAdmin({ teamId: team.id });
  const abilities = serialize(admin, team);
  expect(abilities.read).toEqual(true);
  expect(abilities.manage).toEqual(true);

  expect(abilities.createAttachment).toEqual(true);
  expect(abilities.createCollection).toEqual(true);
  expect(abilities.createDocument).toEqual(true);
  expect(abilities.createGroup).toEqual(true);
  expect(abilities.createIntegration).toEqual(true);
});