1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
# frozen_string_literal: true
require 'spec_helper'
RSpec.describe Users::DeactivateService, feature_category: :user_management do
let_it_be(:current_user) { build(:admin) }
let_it_be(:user) { build(:user) }
subject(:service) { described_class.new(current_user) }
describe '#execute' do
subject(:operation) { service.execute(user) }
context 'when successful', :enable_admin_mode do
let(:user) { create(:user) }
it 'returns success status' do
expect(operation[:status]).to eq(:success)
end
it "changes the user's state" do
expect { operation }.to change { user.state }.to('deactivated')
end
it 'creates a log entry' do
expect(Gitlab::AppLogger).to receive(:info).with(
message: "User deactivated",
username: user.username,
user_id: user.id,
email: user.email,
deactivated_by: current_user.username,
ip_address: current_user.current_sign_in_ip.to_s
)
operation
end
end
context 'when the user is already deactivated', :enable_admin_mode do
let(:user) { create(:user, :deactivated) }
it 'returns error result' do
aggregate_failures 'error result' do
expect(operation[:status]).to eq(:success)
expect(operation[:message]).to eq('User has already been deactivated')
end
end
it "does not change the user's state" do
expect { operation }.not_to change { user.state }
end
end
context 'when internal user', :enable_admin_mode do
let(:user) { create(:user, :bot) }
it 'returns an error message' do
expect(operation[:status]).to eq(:error)
expect(operation[:message]).to eq('Internal users cannot be deactivated')
expect(operation.reason).to eq :forbidden
end
end
context 'when user is blocked', :enable_admin_mode do
let(:user) { create(:user, :blocked) }
it 'returns an error message' do
expect(operation[:status]).to eq(:error)
expect(operation[:message]).to eq('Error occurred. A blocked user cannot be deactivated')
expect(operation.reason).to eq :forbidden
end
end
context 'when user is not an admin' do
it 'returns permissions error message' do
expect(operation[:status]).to eq(:error)
expect(operation[:message]).to eq("You are not authorized to perform this action")
expect(operation.reason).to eq :forbidden
end
end
context 'when skip_authorization is true' do
let(:non_admin_user) { create(:user) }
let(:user_to_deactivate) { create(:user) }
let(:skip_authorization_service) { described_class.new(non_admin_user, skip_authorization: true) }
it 'deactivates the user even if the current user is not an admin' do
expect(skip_authorization_service.execute(user_to_deactivate)[:status]).to eq(:success)
end
end
end
end
|
