| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668 |
- import { PageGrant, GroupType } from '@growi/core';
- import mongoose from 'mongoose';
- import { ExternalGroupProviderType } from '../../../src/features/external-user-group/interfaces/external-user-group';
- import ExternalUserGroup from '../../../src/features/external-user-group/server/models/external-user-group';
- import ExternalUserGroupRelation from '../../../src/features/external-user-group/server/models/external-user-group-relation';
- import UserGroup from '../../../src/server/models/user-group';
- import UserGroupRelation from '../../../src/server/models/user-group-relation';
- import { getInstance } from '../setup-crowi';
- describe('Page', () => {
- let crowi;
- let pageGrantService;
- let pageService;
- let Page;
- let Revision;
- let User;
- let PageTagRelation;
- let Bookmark;
- let Comment;
- let ShareLink;
- let PageRedirect;
- let xssSpy;
- let rootPage;
- let dummyUser1;
- let pModelUser1;
- let pModelUser2;
- let pModelUser3;
- let userGroupIdPModelIsolate;
- let userGroupIdPModelA;
- let userGroupIdPModelB;
- let userGroupIdPModelC;
- let externalUserGroupIdPModelIsolate;
- let externalUserGroupIdPModelA;
- let externalUserGroupIdPModelB;
- let externalUserGroupIdPModelC;
- // To test updatePage overwriting descendants (prefix `upod`)
- let upodUserA;
- let upodUserB;
- let upodUserC;
- let upodGroupAB;
- let upodGroupA;
- let upodGroupAIsolated;
- let upodGroupB;
- let upodGroupC;
- const upodUserGroupIdA = new mongoose.Types.ObjectId();
- const upodUserGroupIdAIsolated = new mongoose.Types.ObjectId();
- const upodUserGroupIdB = new mongoose.Types.ObjectId();
- const upodUserGroupIdC = new mongoose.Types.ObjectId();
- const upodUserGroupIdAB = new mongoose.Types.ObjectId();
- const upodExternalUserGroupIdA = new mongoose.Types.ObjectId();
- const upodExternalUserGroupIdAIsolated = new mongoose.Types.ObjectId();
- const upodExternalUserGroupIdB = new mongoose.Types.ObjectId();
- const upodExternalUserGroupIdC = new mongoose.Types.ObjectId();
- const upodExternalUserGroupIdAB = new mongoose.Types.ObjectId();
- const upodPageIdgAB1 = new mongoose.Types.ObjectId();
- const upodPageIdPublic2 = new mongoose.Types.ObjectId();
- const upodPageIdPublic3 = new mongoose.Types.ObjectId();
- const upodPageIdPublic4 = new mongoose.Types.ObjectId();
- const upodPageIdPublic5 = new mongoose.Types.ObjectId();
- const upodPageIdPublic6 = new mongoose.Types.ObjectId();
- const updatePage = async(page, newRevisionBody, oldRevisionBody, user, options = {}) => {
- const mockedUpdatePageSubOperation = jest.spyOn(pageService, 'updatePageSubOperation').mockReturnValue(null);
- const savedPage = await pageService.updatePage(page, newRevisionBody, oldRevisionBody, user, options);
- const argsForUpdatePageSubOperation = mockedUpdatePageSubOperation.mock.calls[0];
- mockedUpdatePageSubOperation.mockRestore();
- await pageService.updatePageSubOperation(...argsForUpdatePageSubOperation);
- return savedPage;
- };
- const createDocumentsToTestUpdatePageOverwritingDescendants = async() => {
- // Users
- await User.insertMany([
- { name: 'upodUserA', username: 'upodUserA', email: 'upoduserA@example.com' },
- { name: 'upodUserB', username: 'upodUserB', email: 'upoduserB@example.com' },
- { name: 'upodUserC', username: 'upodUserC', email: 'upodUserC@example.com' },
- ]);
- upodUserA = await User.findOne({ username: 'upodUserA' });
- upodUserB = await User.findOne({ username: 'upodUserB' });
- upodUserC = await User.findOne({ username: 'upodUserC' });
- await UserGroup.insertMany([
- {
- _id: upodUserGroupIdAB,
- name: 'upodGroupAB',
- parent: null,
- },
- {
- _id: upodUserGroupIdA,
- name: 'upodGroupA',
- parent: upodUserGroupIdAB,
- },
- {
- _id: upodUserGroupIdAIsolated,
- name: 'upodGroupAIsolated',
- parent: null,
- },
- {
- _id: upodUserGroupIdB,
- name: 'upodGroupB',
- parent: upodUserGroupIdAB,
- },
- {
- _id: upodUserGroupIdC,
- name: 'upodGroupC',
- parent: null,
- },
- ]);
- upodGroupAB = await UserGroup.findOne({ name: 'upodGroupAB' });
- upodGroupA = await UserGroup.findOne({ name: 'upodGroupA' });
- upodGroupAIsolated = await UserGroup.findOne({ name: 'upodGroupAIsolated' });
- upodGroupB = await UserGroup.findOne({ name: 'upodGroupB' });
- upodGroupC = await UserGroup.findOne({ name: 'upodGroupC' });
- // UserGroupRelations
- await UserGroupRelation.insertMany([
- {
- relatedGroup: upodUserGroupIdAB,
- relatedUser: upodUserA._id,
- },
- {
- relatedGroup: upodUserGroupIdAB,
- relatedUser: upodUserB._id,
- },
- {
- relatedGroup: upodUserGroupIdA,
- relatedUser: upodUserA._id,
- },
- {
- relatedGroup: upodUserGroupIdAIsolated,
- relatedUser: upodUserA._id,
- },
- {
- relatedGroup: upodUserGroupIdB,
- relatedUser: upodUserB._id,
- },
- {
- relatedGroup: upodUserGroupIdC,
- relatedUser: upodUserC._id,
- },
- ]);
- // Insert ExternalUserGroups with the same group structure as UserGroups
- // Use to test
- // - ExternalUserGroup
- // - Case of multiple grantedGroups for Page
- await ExternalUserGroup.insertMany([
- {
- _id: upodExternalUserGroupIdAB,
- name: 'upodExternalGroupAB',
- parent: null,
- externalId: 'upodExternalGroupAB',
- provider: ExternalGroupProviderType.ldap,
- },
- {
- _id: upodExternalUserGroupIdA,
- name: 'upodExternalGroupA',
- parent: upodExternalUserGroupIdAB,
- externalId: 'upodExternalGroupA',
- provider: ExternalGroupProviderType.ldap,
- },
- {
- _id: upodExternalUserGroupIdAIsolated,
- name: 'upodExternalGroupAIsolated',
- parent: null,
- externalId: 'upodExternalGroupAIsolated',
- provider: ExternalGroupProviderType.ldap,
- },
- {
- _id: upodExternalUserGroupIdB,
- name: 'upodExternalGroupB',
- parent: upodExternalUserGroupIdAB,
- externalId: 'upodExternalGroupB',
- provider: ExternalGroupProviderType.ldap,
- },
- {
- _id: upodExternalUserGroupIdC,
- name: 'upodExternalGroupC',
- parent: null,
- externalId: 'upodExternalGroupC',
- provider: ExternalGroupProviderType.ldap,
- },
- ]);
- // ExternalUserGroupRelations
- await ExternalUserGroupRelation.insertMany([
- {
- relatedGroup: upodExternalUserGroupIdAB,
- relatedUser: upodUserA._id,
- },
- {
- relatedGroup: upodExternalUserGroupIdAB,
- relatedUser: upodUserB._id,
- },
- {
- relatedGroup: upodExternalUserGroupIdA,
- relatedUser: upodUserA._id,
- },
- {
- relatedGroup: upodExternalUserGroupIdAIsolated,
- relatedUser: upodUserA._id,
- },
- {
- relatedGroup: upodExternalUserGroupIdB,
- relatedUser: upodUserB._id,
- },
- {
- relatedGroup: upodExternalUserGroupIdC,
- relatedUser: upodUserC._id,
- },
- ]);
- // Pages
- await Page.insertMany([
- // case 1
- {
- _id: upodPageIdgAB1,
- path: '/gAB_upod_1', // to GRANT_PUBLIC
- grant: PageGrant.GRANT_USER_GROUP,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: null,
- grantedGroups: [
- { item: upodUserGroupIdAB, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdAB, type: GroupType.externalUserGroup },
- ],
- parent: rootPage._id,
- },
- {
- path: '/gAB_upod_1/gB_upod_1',
- grant: PageGrant.GRANT_USER_GROUP,
- creator: upodUserB,
- lastUpdateUser: upodUserB,
- grantedUsers: null,
- grantedGroups: [
- { item: upodUserGroupIdB, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdB, type: GroupType.externalUserGroup },
- ],
- parent: upodPageIdgAB1,
- },
- {
- path: '/gAB_upod_1/onlyB_upod_1',
- grant: PageGrant.GRANT_OWNER,
- creator: upodUserB,
- lastUpdateUser: upodUserB,
- grantedUsers: [upodUserB._id],
- grantedGroups: null,
- parent: upodPageIdgAB1,
- },
- // case 2
- {
- _id: upodPageIdPublic2,
- path: '/public_upod_2', // to Anything
- grant: PageGrant.GRANT_PUBLIC,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: null,
- grantedGroups: null,
- parent: rootPage._id,
- },
- {
- path: '/public_upod_2/gA_upod_2',
- grant: PageGrant.GRANT_USER_GROUP,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: null,
- grantedGroups: [
- { item: upodUserGroupIdA, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdA, type: GroupType.externalUserGroup },
- ],
- parent: upodPageIdPublic2,
- },
- {
- path: '/public_upod_2/gAIsolated_upod_2',
- grant: PageGrant.GRANT_USER_GROUP,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: null,
- grantedGroups: [
- { item: upodUserGroupIdAIsolated, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdAIsolated, type: GroupType.externalUserGroup },
- ],
- parent: upodPageIdPublic2,
- },
- {
- path: '/public_upod_2/onlyA_upod_2',
- grant: PageGrant.GRANT_OWNER,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: [upodUserA._id],
- grantedGroups: null,
- parent: upodPageIdPublic2,
- },
- // case 3
- {
- _id: upodPageIdPublic3,
- path: '/public_upod_3', // to GRANT_USER_GROUP with upodGroupAB
- grant: PageGrant.GRANT_PUBLIC,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: null,
- grantedGroups: null,
- parent: rootPage._id,
- },
- {
- path: '/public_upod_3/gAB_upod_3',
- grant: PageGrant.GRANT_USER_GROUP,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: null,
- grantedGroups: [
- { item: upodUserGroupIdAB, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdAB, type: GroupType.externalUserGroup },
- ],
- parent: upodPageIdPublic3,
- },
- {
- path: '/public_upod_3/gB_upod_3',
- grant: PageGrant.GRANT_USER_GROUP,
- creator: upodUserB,
- lastUpdateUser: upodUserB,
- grantedUsers: null,
- grantedGroups: [
- { item: upodUserGroupIdB, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdB, type: GroupType.externalUserGroup },
- ],
- parent: upodPageIdPublic3,
- },
- {
- path: '/public_upod_3/onlyB_upod_3',
- grant: PageGrant.GRANT_OWNER,
- creator: upodUserB,
- lastUpdateUser: upodUserB,
- grantedUsers: [upodUserB._id],
- grantedGroups: null,
- parent: upodPageIdPublic3,
- },
- // case 4
- {
- _id: upodPageIdPublic4,
- path: '/public_upod_4', // to GRANT_USER_GROUP with upodGroupAB
- grant: PageGrant.GRANT_PUBLIC,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: null,
- grantedGroups: null,
- parent: rootPage._id,
- },
- {
- path: '/public_upod_4/gA_upod_4',
- grant: PageGrant.GRANT_USER_GROUP,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: null,
- grantedGroups: [
- { item: upodUserGroupIdA, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdA, type: GroupType.externalUserGroup },
- ],
- parent: upodPageIdPublic4,
- },
- {
- path: '/public_upod_4/gC_upod_4',
- grant: PageGrant.GRANT_USER_GROUP,
- creator: upodUserC,
- lastUpdateUser: upodUserC,
- grantedUsers: null,
- grantedGroups: [
- { item: upodUserGroupIdC, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdC, type: GroupType.externalUserGroup },
- ],
- parent: upodPageIdPublic4,
- },
- // case 5
- {
- _id: upodPageIdPublic5,
- path: '/public_upod_5', // to GRANT_USER_GROUP with upodGroupAB
- grant: PageGrant.GRANT_PUBLIC,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: null,
- grantedGroups: null,
- parent: rootPage._id,
- },
- {
- path: '/public_upod_5/gA_upod_5',
- grant: PageGrant.GRANT_USER_GROUP,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: null,
- grantedGroups: [
- { item: upodUserGroupIdA, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdA, type: GroupType.externalUserGroup },
- ],
- parent: upodPageIdPublic5,
- },
- {
- path: '/public_upod_5/onlyC_upod_5',
- grant: PageGrant.GRANT_OWNER,
- creator: upodUserC,
- lastUpdateUser: upodUserC,
- grantedUsers: [upodUserC._id],
- grantedGroups: null,
- parent: upodPageIdPublic5,
- },
- // case 6
- {
- _id: upodPageIdPublic6,
- path: '/public_upod_6', // to GRANT_USER_GROUP with upodGroupAB
- grant: PageGrant.GRANT_PUBLIC,
- creator: upodUserA,
- lastUpdateUser: upodUserA,
- grantedUsers: null,
- grantedGroups: null,
- parent: rootPage._id,
- },
- {
- path: '/public_upod_6/onlyC_upod_6',
- grant: PageGrant.GRANT_OWNER,
- creator: upodUserC,
- lastUpdateUser: upodUserC,
- grantedUsers: [upodUserC._id],
- grantedGroups: null,
- parent: upodPageIdPublic6,
- },
- ]);
- };
- // normalize for result comparison
- const normalizeGrantedGroups = (grantedGroups) => {
- return grantedGroups.map((group) => {
- const itemId = typeof group.item === 'string' ? group.item : group.item._id;
- return { item: itemId, type: group.type };
- });
- };
- beforeAll(async() => {
- crowi = await getInstance();
- pageGrantService = crowi.pageGrantService;
- pageService = crowi.pageService;
- await crowi.configManager.updateConfigsInTheSameNamespace('crowi', { 'app:isV5Compatible': true });
- jest.restoreAllMocks();
- User = mongoose.model('User');
- Page = mongoose.model('Page');
- Revision = mongoose.model('Revision');
- PageTagRelation = mongoose.model('PageTagRelation');
- Bookmark = mongoose.model('Bookmark');
- Comment = mongoose.model('Comment');
- ShareLink = mongoose.model('ShareLink');
- PageRedirect = mongoose.model('PageRedirect');
- dummyUser1 = await User.findOne({ username: 'v5DummyUser1' });
- rootPage = await Page.findOne({ path: '/' });
- const pModelUserId1 = new mongoose.Types.ObjectId();
- const pModelUserId2 = new mongoose.Types.ObjectId();
- const pModelUserId3 = new mongoose.Types.ObjectId();
- await User.insertMany([
- {
- _id: pModelUserId1,
- name: 'pmodelUser1',
- username: 'pmodelUser1',
- email: 'pmodelUser1@example.com',
- },
- {
- _id: pModelUserId2,
- name: 'pmodelUser2',
- username: 'pmodelUser2',
- email: 'pmodelUser2@example.com',
- },
- {
- _id: pModelUserId3,
- name: 'pModelUser3',
- username: 'pModelUser3',
- email: 'pModelUser3@example.com',
- },
- ]);
- pModelUser1 = await User.findOne({ _id: pModelUserId1 });
- pModelUser2 = await User.findOne({ _id: pModelUserId2 });
- pModelUser3 = await User.findOne({ _id: pModelUserId3 });
- userGroupIdPModelIsolate = new mongoose.Types.ObjectId();
- userGroupIdPModelA = new mongoose.Types.ObjectId();
- userGroupIdPModelB = new mongoose.Types.ObjectId();
- userGroupIdPModelC = new mongoose.Types.ObjectId();
- await UserGroup.insertMany([
- {
- _id: userGroupIdPModelIsolate,
- name: 'pModel_groupIsolate',
- },
- {
- _id: userGroupIdPModelA,
- name: 'pModel_groupA',
- },
- {
- _id: userGroupIdPModelB,
- name: 'pModel_groupB',
- parent: userGroupIdPModelA,
- },
- {
- _id: userGroupIdPModelC,
- name: 'pModel_groupC',
- parent: userGroupIdPModelB,
- },
- ]);
- await UserGroupRelation.insertMany([
- {
- relatedGroup: userGroupIdPModelIsolate,
- relatedUser: pModelUserId1,
- createdAt: new Date(),
- },
- {
- relatedGroup: userGroupIdPModelIsolate,
- relatedUser: pModelUserId2,
- createdAt: new Date(),
- },
- {
- relatedGroup: userGroupIdPModelA,
- relatedUser: pModelUserId1,
- createdAt: new Date(),
- },
- {
- relatedGroup: userGroupIdPModelA,
- relatedUser: pModelUserId2,
- createdAt: new Date(),
- },
- {
- relatedGroup: userGroupIdPModelA,
- relatedUser: pModelUserId3,
- createdAt: new Date(),
- },
- {
- relatedGroup: userGroupIdPModelB,
- relatedUser: pModelUserId2,
- createdAt: new Date(),
- },
- {
- relatedGroup: userGroupIdPModelB,
- relatedUser: pModelUserId3,
- createdAt: new Date(),
- },
- {
- relatedGroup: userGroupIdPModelC,
- relatedUser: pModelUserId3,
- createdAt: new Date(),
- },
- ]);
- // Insert ExternalUserGroups with the same group structure as UserGroups
- // Use to test
- // - ExternalUserGroup
- // - Case of multiple grantedGroups for Page
- externalUserGroupIdPModelIsolate = new mongoose.Types.ObjectId();
- externalUserGroupIdPModelA = new mongoose.Types.ObjectId();
- externalUserGroupIdPModelB = new mongoose.Types.ObjectId();
- externalUserGroupIdPModelC = new mongoose.Types.ObjectId();
- await ExternalUserGroup.insertMany([
- {
- _id: externalUserGroupIdPModelIsolate,
- name: 'pModel_externalGroupIsolate',
- externalId: 'pModel_externalGroupIsolate',
- provider: ExternalGroupProviderType.ldap,
- },
- {
- _id: externalUserGroupIdPModelA,
- name: 'pModel_externalGroupA',
- externalId: 'pModel_externalGroupA',
- provider: ExternalGroupProviderType.ldap,
- },
- {
- _id: externalUserGroupIdPModelB,
- name: 'pModel_externalGroupB',
- parent: externalUserGroupIdPModelA,
- externalId: 'pModel_externalGroupB',
- provider: ExternalGroupProviderType.ldap,
- },
- {
- _id: externalUserGroupIdPModelC,
- name: 'pModel_externalGroupC',
- parent: externalUserGroupIdPModelB,
- externalId: 'pModel_externalGroupC',
- provider: ExternalGroupProviderType.ldap,
- },
- ]);
- await ExternalUserGroupRelation.insertMany([
- {
- relatedGroup: externalUserGroupIdPModelIsolate,
- relatedUser: pModelUserId1,
- createdAt: new Date(),
- },
- {
- relatedGroup: externalUserGroupIdPModelIsolate,
- relatedUser: pModelUserId2,
- createdAt: new Date(),
- },
- {
- relatedGroup: externalUserGroupIdPModelA,
- relatedUser: pModelUserId1,
- createdAt: new Date(),
- },
- {
- relatedGroup: externalUserGroupIdPModelA,
- relatedUser: pModelUserId2,
- createdAt: new Date(),
- },
- {
- relatedGroup: externalUserGroupIdPModelA,
- relatedUser: pModelUserId3,
- createdAt: new Date(),
- },
- {
- relatedGroup: externalUserGroupIdPModelB,
- relatedUser: pModelUserId2,
- createdAt: new Date(),
- },
- {
- relatedGroup: externalUserGroupIdPModelB,
- relatedUser: pModelUserId3,
- createdAt: new Date(),
- },
- {
- relatedGroup: externalUserGroupIdPModelC,
- relatedUser: pModelUserId3,
- createdAt: new Date(),
- },
- ]);
- /**
- * update
- * mup_ => model update
- * emp => empty => page with isEmpty: true
- * pub => public => GRANT_PUBLIC
- * awl => Anyone with the link => GRANT_RESTRICTED
- */
- const pageIdUpd1 = new mongoose.Types.ObjectId();
- const pageIdUpd2 = new mongoose.Types.ObjectId();
- const pageIdUpd3 = new mongoose.Types.ObjectId();
- const pageIdUpd4 = new mongoose.Types.ObjectId();
- const pageIdUpd5 = new mongoose.Types.ObjectId();
- const pageIdUpd6 = new mongoose.Types.ObjectId();
- const pageIdUpd7 = new mongoose.Types.ObjectId();
- const pageIdUpd8 = new mongoose.Types.ObjectId();
- const pageIdUpd9 = new mongoose.Types.ObjectId();
- const pageIdUpd10 = new mongoose.Types.ObjectId();
- const pageIdUpd11 = new mongoose.Types.ObjectId();
- const pageIdUpd12 = new mongoose.Types.ObjectId();
- const pageIdUpd13 = new mongoose.Types.ObjectId();
- const pageIdUpd14 = new mongoose.Types.ObjectId();
- const pageIdUpd15 = new mongoose.Types.ObjectId();
- const pageIdUpd16 = new mongoose.Types.ObjectId();
- const pageIdUpd17 = new mongoose.Types.ObjectId();
- const pageIdUpd18 = new mongoose.Types.ObjectId();
- const pageIdUpd19 = new mongoose.Types.ObjectId();
- await Page.insertMany([
- {
- _id: pageIdUpd1,
- path: '/mup13_top/mup1_emp',
- grant: Page.GRANT_PUBLIC,
- parent: pageIdUpd8._id,
- isEmpty: true,
- },
- {
- _id: pageIdUpd2,
- path: '/mup13_top/mup1_emp/mup2_pub',
- grant: Page.GRANT_PUBLIC,
- parent: pageIdUpd1._id,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- isEmpty: false,
- },
- {
- _id: pageIdUpd3,
- path: '/mup14_top/mup6_pub',
- grant: Page.GRANT_PUBLIC,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- parent: pageIdUpd9,
- isEmpty: false,
- descendantCount: 1,
- },
- {
- path: '/mup14_top/mup6_pub/mup7_pub',
- grant: Page.GRANT_PUBLIC,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- parent: pageIdUpd3,
- isEmpty: false,
- descendantCount: 0,
- },
- {
- _id: pageIdUpd4,
- path: '/mup15_top/mup8_pub',
- grant: Page.GRANT_PUBLIC,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- parent: pageIdUpd10._id,
- isEmpty: false,
- },
- {
- _id: pageIdUpd5,
- path: '/mup16_top/mup9_pub/mup10_pub/mup11_awl',
- grant: Page.GRANT_RESTRICTED,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- isEmpty: false,
- },
- {
- _id: pageIdUpd6,
- path: '/mup17_top/mup12_emp',
- isEmpty: true,
- parent: pageIdUpd12._id,
- descendantCount: 1,
- },
- {
- _id: pageIdUpd7,
- path: '/mup17_top/mup12_emp',
- grant: Page.GRANT_RESTRICTED,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- isEmpty: false,
- },
- {
- path: '/mup17_top/mup12_emp/mup18_pub',
- isEmpty: false,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- parent: pageIdUpd6._id,
- },
- {
- _id: pageIdUpd8,
- path: '/mup13_top',
- grant: Page.GRANT_PUBLIC,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- isEmpty: false,
- parent: rootPage._id,
- descendantCount: 2,
- },
- {
- _id: pageIdUpd9,
- path: '/mup14_top',
- grant: Page.GRANT_PUBLIC,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- isEmpty: false,
- parent: rootPage._id,
- descendantCount: 2,
- },
- {
- _id: pageIdUpd10,
- path: '/mup15_top',
- grant: Page.GRANT_PUBLIC,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- isEmpty: false,
- parent: rootPage._id,
- descendantCount: 1,
- },
- {
- _id: pageIdUpd11,
- path: '/mup16_top',
- grant: Page.GRANT_PUBLIC,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- isEmpty: false,
- parent: rootPage._id,
- descendantCount: 0,
- },
- {
- _id: pageIdUpd12,
- path: '/mup17_top',
- grant: Page.GRANT_PUBLIC,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- isEmpty: false,
- parent: rootPage._id,
- descendantCount: 1,
- },
- {
- path: '/mup19',
- grant: Page.GRANT_PUBLIC,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- isEmpty: false,
- parent: rootPage._id,
- descendantCount: 0,
- },
- {
- path: '/mup20',
- grant: Page.GRANT_USER_GROUP,
- grantedGroups: [
- { item: userGroupIdPModelA, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelA, type: GroupType.externalUserGroup },
- ],
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: rootPage._id,
- descendantCount: 0,
- },
- {
- path: '/mup21',
- grant: Page.GRANT_RESTRICTED,
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- isEmpty: false,
- descendantCount: 0,
- },
- {
- _id: pageIdUpd13,
- path: '/mup22',
- grant: Page.GRANT_PUBLIC,
- creator: pModelUser1,
- lastUpdateUser: pModelUser1._id,
- isEmpty: false,
- parent: rootPage._id,
- descendantCount: 1,
- },
- {
- path: '/mup22/mup23',
- grant: Page.GRANT_USER_GROUP,
- grantedGroups: [
- { item: userGroupIdPModelA, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelA, type: GroupType.externalUserGroup },
- ],
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: pageIdUpd13,
- descendantCount: 0,
- },
- {
- _id: pageIdUpd14,
- path: '/mup24_pub',
- grant: Page.GRANT_PUBLIC,
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: rootPage,
- descendantCount: 1,
- },
- {
- path: '/mup24_pub/mup25_pub',
- grant: Page.GRANT_PUBLIC,
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: pageIdUpd14,
- descendantCount: 0,
- },
- {
- path: '/mup26_awl',
- grant: Page.GRANT_RESTRICTED,
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- descendantCount: 0,
- },
- {
- _id: pageIdUpd15,
- path: '/mup27_pub',
- grant: Page.GRANT_PUBLIC,
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: rootPage,
- descendantCount: 1,
- },
- {
- path: '/mup27_pub/mup28_owner',
- grant: Page.GRANT_OWNER,
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: pageIdUpd15,
- grantedUsers: [pModelUserId1],
- descendantCount: 0,
- },
- {
- _id: pageIdUpd16,
- path: '/mup29_A',
- grant: Page.GRANT_USER_GROUP,
- grantedGroups: [
- { item: userGroupIdPModelA, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelA, type: GroupType.externalUserGroup },
- ],
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: rootPage,
- descendantCount: 1,
- },
- {
- path: '/mup29_A/mup30_owner',
- grant: Page.GRANT_OWNER,
- grantedUsers: [pModelUserId1],
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: pageIdUpd16,
- descendantCount: 0,
- },
- {
- _id: pageIdUpd17,
- path: '/mup31_A',
- grant: Page.GRANT_USER_GROUP,
- grantedGroups: [
- { item: userGroupIdPModelA, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelA, type: GroupType.externalUserGroup },
- ],
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: rootPage,
- descendantCount: 1,
- },
- {
- path: '/mup31_A/mup32_owner',
- grant: Page.GRANT_OWNER,
- grantedUsers: [pModelUserId1],
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: pageIdUpd17,
- descendantCount: 0,
- },
- {
- _id: pageIdUpd18,
- path: '/mup33_C',
- grant: Page.GRANT_USER_GROUP,
- grantedGroups: [
- { item: userGroupIdPModelC, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelC, type: GroupType.externalUserGroup },
- ],
- creator: pModelUserId3,
- lastUpdateUser: pModelUserId3,
- isEmpty: false,
- parent: rootPage,
- descendantCount: 1,
- },
- {
- path: '/mup33_C/mup34_owner',
- grant: Page.GRANT_OWNER,
- grantedUsers: [pModelUserId3],
- creator: pModelUserId3,
- lastUpdateUser: pModelUserId3,
- isEmpty: false,
- parent: pageIdUpd18,
- descendantCount: 0,
- },
- {
- _id: pageIdUpd19,
- path: '/mup35_owner',
- grant: Page.GRANT_OWNER,
- grantedUsers: [pModelUserId1],
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: rootPage,
- descendantCount: 1,
- },
- {
- path: '/mup35_owner/mup36_owner',
- grant: Page.GRANT_OWNER,
- grantedUsers: [pModelUserId1],
- creator: pModelUserId1,
- lastUpdateUser: pModelUserId1,
- isEmpty: false,
- parent: pageIdUpd19,
- descendantCount: 0,
- },
- {
- path: '/mup40', // used this number to resolve conflict
- grant: Page.GRANT_OWNER,
- grantedUsers: [dummyUser1._id],
- creator: dummyUser1,
- lastUpdateUser: dummyUser1._id,
- isEmpty: false,
- parent: rootPage._id,
- descendantCount: 0,
- },
- ]);
- await createDocumentsToTestUpdatePageOverwritingDescendants();
- });
- describe('update', () => {
- describe('Changing grant from PUBLIC to RESTRICTED of', () => {
- test('an only-child page will delete its empty parent page', async() => {
- const pathT = '/mup13_top';
- const path1 = '/mup13_top/mup1_emp';
- const path2 = '/mup13_top/mup1_emp/mup2_pub';
- const pageT = await Page.findOne({ path: pathT, descendantCount: 2 });
- const page1 = await Page.findOne({ path: path1, isEmpty: true });
- const page2 = await Page.findOne({ path: path2, grant: Page.GRANT_PUBLIC });
- expect(pageT).toBeTruthy();
- expect(page1).toBeTruthy();
- expect(page2).toBeTruthy();
- const options = { grant: Page.GRANT_RESTRICTED, grantUserGroupIds: null };
- await updatePage(page2, 'newRevisionBody', 'oldRevisionBody', dummyUser1, options);
- const _pageT = await Page.findOne({ path: pathT });
- const _page1 = await Page.findOne({ path: path1 });
- const _page2 = await Page.findOne({ path: path2, grant: Page.GRANT_RESTRICTED });
- expect(_pageT).toBeTruthy();
- expect(_page1).toBeNull();
- expect(_page2).toBeTruthy();
- expect(_pageT.descendantCount).toBe(1);
- });
- test('a page that has children will create an empty page with the same path and it becomes a new parent', async() => {
- const pathT = '/mup14_top';
- const path1 = '/mup14_top/mup6_pub';
- const path2 = '/mup14_top/mup6_pub/mup7_pub';
- const top = await Page.findOne({ path: pathT, descendantCount: 2 });
- const page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
- const page2 = await Page.findOne({ path: path2, grant: Page.GRANT_PUBLIC });
- expect(top).toBeTruthy();
- expect(page1).toBeTruthy();
- expect(page2).toBeTruthy();
- await updatePage(page1, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_RESTRICTED });
- const _top = await Page.findOne({ path: pathT });
- const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_RESTRICTED });
- const _page2 = await Page.findOne({ path: path2 });
- const _pageN = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
- expect(_page1).toBeTruthy();
- expect(_page2).toBeTruthy();
- expect(_pageN).toBeTruthy();
- expect(_page1.parent).toBeNull();
- expect(_page2.parent).toStrictEqual(_pageN._id);
- expect(_pageN.parent).toStrictEqual(top._id);
- expect(_pageN.isEmpty).toBe(true);
- expect(_pageN.descendantCount).toBe(1);
- expect(_top.descendantCount).toBe(1);
- });
- test('of a leaf page will NOT have an empty page with the same path', async() => {
- const pathT = '/mup15_top';
- const path1 = '/mup15_top/mup8_pub';
- const pageT = await Page.findOne({ path: pathT, descendantCount: 1 });
- const page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
- const count = await Page.count({ path: path1 });
- expect(pageT).toBeTruthy();
- expect(page1).toBeTruthy();
- expect(count).toBe(1);
- await updatePage(page1, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_RESTRICTED });
- const _pageT = await Page.findOne({ path: pathT });
- const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_RESTRICTED });
- const _pageNotExist = await Page.findOne({ path: path1, isEmpty: true });
- expect(_pageT).toBeTruthy();
- expect(_page1).toBeTruthy();
- expect(_pageNotExist).toBeNull();
- expect(_pageT.descendantCount).toBe(0);
- });
- });
- describe('Changing grant to GRANT_RESTRICTED', () => {
- test('successfully change to GRANT_RESTRICTED from GRANT_OWNER', async() => {
- const path = '/mup40';
- const _page = await Page.findOne({ path, grant: Page.GRANT_OWNER, grantedUsers: [dummyUser1._id] });
- expect(_page).toBeTruthy();
- await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_RESTRICTED });
- const page = await Page.findOne({ path });
- expect(page).toBeTruthy();
- expect(page.grant).toBe(Page.GRANT_RESTRICTED);
- expect(page.grantedUsers).toStrictEqual([]);
- });
- });
- describe('Changing grant from RESTRICTED to PUBLIC of', () => {
- test('a page will create ancestors if they do not exist', async() => {
- const pathT = '/mup16_top';
- const path1 = '/mup16_top/mup9_pub';
- const path2 = '/mup16_top/mup9_pub/mup10_pub';
- const path3 = '/mup16_top/mup9_pub/mup10_pub/mup11_awl';
- const top = await Page.findOne({ path: pathT });
- const page1 = await Page.findOne({ path: path1 });
- const page2 = await Page.findOne({ path: path2 });
- const page3 = await Page.findOne({ path: path3, grant: Page.GRANT_RESTRICTED });
- expect(top).toBeTruthy();
- expect(page3).toBeTruthy();
- expect(page1).toBeNull();
- expect(page2).toBeNull();
- await updatePage(page3, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_PUBLIC });
- const _pageT = await Page.findOne({ path: pathT });
- const _page1 = await Page.findOne({ path: path1, isEmpty: true });
- const _page2 = await Page.findOne({ path: path2, isEmpty: true });
- const _page3 = await Page.findOne({ path: path3, grant: Page.GRANT_PUBLIC });
- expect(_page1).toBeTruthy();
- expect(_page2).toBeTruthy();
- expect(_page3).toBeTruthy();
- expect(_page1.parent).toStrictEqual(top._id);
- expect(_page2.parent).toStrictEqual(_page1._id);
- expect(_page3.parent).toStrictEqual(_page2._id);
- expect(_pageT.descendantCount).toBe(1);
- });
- test('a page will replace an empty page with the same path if any', async() => {
- const pathT = '/mup17_top';
- const path1 = '/mup17_top/mup12_emp';
- const path2 = '/mup17_top/mup12_emp/mup18_pub';
- const pageT = await Page.findOne({ path: pathT, descendantCount: 1 });
- const page1 = await Page.findOne({ path: path1, isEmpty: true });
- const page2 = await Page.findOne({ path: path1, grant: Page.GRANT_RESTRICTED, isEmpty: false });
- const page3 = await Page.findOne({ path: path2 });
- expect(pageT).toBeTruthy();
- expect(page1).toBeTruthy();
- expect(page2).toBeTruthy();
- expect(page3).toBeTruthy();
- await updatePage(page2, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_PUBLIC });
- const _pageT = await Page.findOne({ path: pathT });
- const _page1 = await Page.findOne({ path: path1, isEmpty: true }); // should be replaced
- const _page2 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
- const _page3 = await Page.findOne({ path: path2 });
- expect(_pageT).toBeTruthy();
- expect(_page1).toBeNull();
- expect(_page2).toBeTruthy();
- expect(_page3).toBeTruthy();
- expect(_page2.grant).toBe(Page.GRANT_PUBLIC);
- expect(_page2.parent).toStrictEqual(_pageT._id);
- expect(_page3.parent).toStrictEqual(_page2._id);
- expect(_pageT.descendantCount).toBe(2);
- });
- });
- describe('Changing grant to GRANT_OWNER(onlyme)', () => {
- test('successfully change to GRANT_OWNER from GRANT_PUBLIC', async() => {
- const path = '/mup19';
- const _page = await Page.findOne({ path, grant: Page.GRANT_PUBLIC });
- expect(_page).toBeTruthy();
- await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_OWNER });
- const page = await Page.findOne({ path });
- expect(page.grant).toBe(Page.GRANT_OWNER);
- expect(page.grantedUsers).toStrictEqual([dummyUser1._id]);
- });
- test('successfully change to GRANT_OWNER from GRANT_USER_GROUP', async() => {
- const path = '/mup20';
- const _page = await Page.findOne({ path, grant: Page.GRANT_USER_GROUP, grantedGroups: { $elemMatch: { item: userGroupIdPModelA } } });
- expect(_page).toBeTruthy();
- await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', pModelUser1, { grant: Page.GRANT_OWNER });
- const page = await Page.findOne({ path });
- expect(page.grant).toBe(Page.GRANT_OWNER);
- expect(page.grantedUsers).toStrictEqual([pModelUser1._id]);
- expect(page.grantedGroups.length).toBe(0);
- });
- test('successfully change to GRANT_OWNER from GRANT_RESTRICTED', async() => {
- const path = '/mup21';
- const _page = await Page.findOne({ path, grant: Page.GRANT_RESTRICTED });
- expect(_page).toBeTruthy();
- await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_OWNER });
- const page = await Page.findOne({ path });
- expect(page.grant).toBe(Page.GRANT_OWNER);
- expect(page.grantedUsers).toStrictEqual([dummyUser1._id]);
- });
- test('Failed to change to GRANT_OWNER if one of the ancestors is GRANT_USER_GROUP page', async() => {
- const path1 = '/mup22';
- const path2 = '/mup22/mup23';
- const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
- const _page2 = await Page.findOne({ path: path2, grant: Page.GRANT_USER_GROUP, grantedGroups: { $elemMatch: { item: userGroupIdPModelA } } });
- expect(_page1).toBeTruthy();
- expect(_page2).toBeTruthy();
- await expect(updatePage(_page1, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_OWNER }))
- .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
- const page1 = await Page.findOne({ path1 });
- expect(page1).toBeTruthy();
- expect(page1.grant).toBe(Page.GRANT_PUBLIC);
- expect(page1.grantedUsers).not.toStrictEqual([dummyUser1._id]);
- });
- });
- describe('Changing grant to GRANT_USER_GROUP', () => {
- describe('update grant of a page under a page with GRANT_PUBLIC', () => {
- test('successfully change to GRANT_USER_GROUP from GRANT_PUBLIC if parent page is GRANT_PUBLIC', async() => {
- // path
- const path1 = '/mup24_pub';
- const path2 = '/mup24_pub/mup25_pub';
- // page
- const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC }); // out of update scope
- const _page2 = await Page.findOne({ path: path2, grant: Page.GRANT_PUBLIC, parent: _page1._id }); // update target
- expect(_page1).toBeTruthy();
- expect(_page2).toBeTruthy();
- const newGrantedGroups = [
- { item: userGroupIdPModelA, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelA, type: GroupType.externalUserGroup },
- ];
- const options = {
- grant: Page.GRANT_USER_GROUP,
- grantUserGroupIds: newGrantedGroups,
- };
- const updatedPage = await updatePage(_page2, 'new', 'old', pModelUser1, options); // from GRANT_PUBLIC to GRANT_USER_GROUP(userGroupIdPModelA)
- const page1 = await Page.findById(_page1._id);
- const page2 = await Page.findById(_page2._id);
- expect(page1).toBeTruthy();
- expect(page2).toBeTruthy();
- expect(updatedPage).toBeTruthy();
- expect(updatedPage._id).toStrictEqual(page2._id);
- // check page2 grant and group
- expect(page2.grant).toBe(Page.GRANT_USER_GROUP);
- expect(normalizeGrantedGroups(page2.grantedGroups)).toStrictEqual(newGrantedGroups);
- });
- test('successfully change to GRANT_USER_GROUP from GRANT_RESTRICTED if parent page is GRANT_PUBLIC', async() => {
- // path
- const _path1 = '/mup26_awl';
- // page
- const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_RESTRICTED });
- expect(_page1).toBeTruthy();
- const newGrantedGroups = [
- { item: userGroupIdPModelA, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelA, type: GroupType.externalUserGroup },
- ];
- const options = {
- grant: Page.GRANT_USER_GROUP,
- grantUserGroupIds: newGrantedGroups,
- };
- const updatedPage = await updatePage(_page1, 'new', 'old', pModelUser1, options); // from GRANT_RESTRICTED to GRANT_USER_GROUP(userGroupIdPModelA)
- const page1 = await Page.findById(_page1._id);
- expect(page1).toBeTruthy();
- expect(updatedPage).toBeTruthy();
- expect(updatedPage._id).toStrictEqual(page1._id);
- // updated page
- expect(page1.grant).toBe(Page.GRANT_USER_GROUP);
- expect(normalizeGrantedGroups(page1.grantedGroups)).toStrictEqual(newGrantedGroups);
- // parent's grant check
- const parent = await Page.findById(page1.parent);
- expect(parent.grant).toBe(Page.GRANT_PUBLIC);
- });
- test('successfully change to GRANT_USER_GROUP from GRANT_OWNER if parent page is GRANT_PUBLIC', async() => {
- // path
- const path1 = '/mup27_pub';
- const path2 = '/mup27_pub/mup28_owner';
- // page
- const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC }); // out of update scope
- const _page2 = await Page.findOne({
- path: path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1], parent: _page1._id,
- }); // update target
- expect(_page1).toBeTruthy();
- expect(_page2).toBeTruthy();
- const newGrantedGroups = [
- { item: userGroupIdPModelA, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelA, type: GroupType.externalUserGroup },
- ];
- const options = {
- grant: Page.GRANT_USER_GROUP,
- grantUserGroupIds: newGrantedGroups,
- };
- const updatedPage = await updatePage(_page2, 'new', 'old', pModelUser1, options); // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelA)
- const page1 = await Page.findById(_page1._id);
- const page2 = await Page.findById(_page2._id);
- expect(page1).toBeTruthy();
- expect(page2).toBeTruthy();
- expect(updatedPage).toBeTruthy();
- expect(updatedPage._id).toStrictEqual(page2._id);
- // grant check
- expect(page2.grant).toBe(Page.GRANT_USER_GROUP);
- expect(normalizeGrantedGroups(page2.grantedGroups)).toStrictEqual(newGrantedGroups);
- expect(page2.grantedUsers.length).toBe(0);
- });
- });
- describe('update grant of a page under a page with GRANT_USER_GROUP', () => {
- test('successfully change to GRANT_USER_GROUP if the group to set is the child or descendant of the parent page group', async() => {
- // path
- const _path1 = '/mup29_A';
- const _path2 = '/mup29_A/mup30_owner';
- // page
- const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_USER_GROUP, grantedGroups: { $elemMatch: { item: userGroupIdPModelA } } }); // out of update scope
- const _page2 = await Page.findOne({ // update target
- path: _path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1], parent: _page1._id,
- });
- expect(_page1).toBeTruthy();
- expect(_page2).toBeTruthy();
- // First round
- // Group relation(parent -> child): userGroupIdPModelA -> userGroupIdPModelB -> userGroupIdPModelC
- const newGrantedGroups = [
- { item: userGroupIdPModelB, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelB, type: GroupType.externalUserGroup },
- ];
- const options = {
- grant: Page.GRANT_USER_GROUP,
- grantUserGroupIds: newGrantedGroups,
- };
- const updatedPage = await updatePage(_page2, 'new', 'old', pModelUser3, options); // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelB)
- const page1 = await Page.findById(_page1._id);
- const page2 = await Page.findById(_page2._id);
- expect(page1).toBeTruthy();
- expect(page2).toBeTruthy();
- expect(updatedPage).toBeTruthy();
- expect(updatedPage._id).toStrictEqual(page2._id);
- expect(page2.grant).toBe(Page.GRANT_USER_GROUP);
- expect(normalizeGrantedGroups(page2.grantedGroups)).toStrictEqual(newGrantedGroups);
- expect(page2.grantedUsers.length).toBe(0);
- // Second round
- // Update group to groupC which is a grandchild from pageA's point of view
- const secondRoundNewGrantedGroups = [
- { item: userGroupIdPModelC, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelC, type: GroupType.externalUserGroup },
- ];
- const secondRoundOptions = { grant: Page.GRANT_USER_GROUP, grantUserGroupIds: secondRoundNewGrantedGroups }; // from GRANT_USER_GROUP(userGroupIdPModelB) to GRANT_USER_GROUP(userGroupIdPModelC)
- // undo grantedGroups populate to prevent Page.hydrate error
- _page2.grantedGroups.forEach((group) => {
- group.item = group.item._id;
- });
- const secondRoundUpdatedPage = await updatePage(_page2, 'new', 'new', pModelUser3, secondRoundOptions);
- expect(secondRoundUpdatedPage).toBeTruthy();
- expect(secondRoundUpdatedPage.grant).toBe(Page.GRANT_USER_GROUP);
- expect(normalizeGrantedGroups(secondRoundUpdatedPage.grantedGroups)).toStrictEqual(secondRoundNewGrantedGroups);
- });
- test('Fail to change to GRANT_USER_GROUP if the group to set is NOT the child or descendant of the parent page group', async() => {
- // path
- const _path1 = '/mup31_A';
- const _path2 = '/mup31_A/mup32_owner';
- // page
- const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_USER_GROUP, grantedGroups: { $elemMatch: { item: userGroupIdPModelA } } });
- const _page2 = await Page.findOne({ // update target
- path: _path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1._id], parent: _page1._id,
- });
- expect(_page1).toBeTruthy();
- expect(_page2).toBeTruthy();
- // group
- const _groupIsolated = await UserGroup.findById(userGroupIdPModelIsolate);
- expect(_groupIsolated).toBeTruthy();
- // group parent check
- expect(_groupIsolated.parent).toBeUndefined(); // should have no parent
- const options = {
- grant: Page.GRANT_USER_GROUP,
- grantUserGroupIds: [
- { item: userGroupIdPModelIsolate, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelIsolate, type: GroupType.externalUserGroup },
- ],
- };
- await expect(updatePage(_page2, 'new', 'old', pModelUser1, options)) // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelIsolate)
- .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
- const page1 = await Page.findById(_page1._id);
- const page2 = await Page.findById(_page2._id);
- expect(page1).toBeTruthy();
- expect(page1).toBeTruthy();
- expect(page2.grant).toBe(Page.GRANT_OWNER); // should be the same before the update
- expect(page2.grantedUsers).toStrictEqual([pModelUser1._id]); // should be the same before the update
- expect(page2.grantedGroups.length).toBe(0); // no group should be set
- });
- test('Fail to change to GRANT_USER_GROUP if the group to set is an ancestor of the parent page group', async() => {
- // path
- const _path1 = '/mup33_C';
- const _path2 = '/mup33_C/mup34_owner';
- // page
- const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_USER_GROUP, grantedGroups: { $elemMatch: { item: userGroupIdPModelC } } }); // groupC
- const _page2 = await Page.findOne({ // update target
- path: _path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser3], parent: _page1._id,
- });
- expect(_page1).toBeTruthy();
- expect(_page2).toBeTruthy();
- const options = {
- grant: Page.GRANT_USER_GROUP,
- grantUserGroupIds: [
- { item: userGroupIdPModelA, type: GroupType.userGroup },
- { item: externalUserGroupIdPModelA, type: GroupType.externalUserGroup },
- ],
- };
- // Group relation(parent -> child): userGroupIdPModelA -> userGroupIdPModelB -> userGroupIdPModelC
- // this should fail because the groupC is a descendant of groupA
- await expect(updatePage(_page2, 'new', 'old', pModelUser3, options)) // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelA)
- .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
- const page1 = await Page.findById(_page1._id);
- const page2 = await Page.findById(_page2._id);
- expect(page1).toBeTruthy();
- expect(page2).toBeTruthy();
- expect(page2.grant).toBe(Page.GRANT_OWNER); // should be the same before the update
- expect(page2.grantedUsers).toStrictEqual([pModelUser3._id]); // should be the same before the update
- expect(page2.grantedGroups.length).toBe(0); // no group should be set
- });
- });
- describe('update grant of a page under a page with GRANT_OWNER', () => {
- test('Fail to change from GRNAT_OWNER', async() => {
- // path
- const path1 = '/mup35_owner';
- const path2 = '/mup35_owner/mup36_owner';
- // page
- const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1] });
- const _page2 = await Page.findOne({ // update target
- path: path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1], parent: _page1._id,
- });
- expect(_page1).toBeTruthy();
- expect(_page2).toBeTruthy();
- const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupIds: [{ item: userGroupIdPModelA, type: GroupType.userGroup }] };
- await expect(updatePage(_page2, 'new', 'old', pModelUser1, options)) // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelA)
- .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
- const page1 = await Page.findById(_page1.id);
- const page2 = await Page.findById(_page2.id);
- expect(page1).toBeTruthy();
- expect(page2).toBeTruthy();
- expect(page2.grant).toBe(Page.GRANT_OWNER); // should be the same before the update
- expect(page2.grantedUsers).toStrictEqual([pModelUser1._id]); // should be the same before the update
- expect(page2.grantedGroups.length).toBe(0); // no group should be set
- });
- });
- });
- });
- // see: https://dev.growi.org/635a314eac6bcd85cbf359fc about the specification
- describe('updatePage with overwriteScopesOfDescendants true', () => {
- test('(case 1) it should update all granted descendant pages when update grant is GRANT_PUBLIC', async() => {
- const upodPagegAB = await Page.findOne({ path: '/gAB_upod_1' });
- const upodPagegB = await Page.findOne({ path: '/gAB_upod_1/gB_upod_1' });
- const upodPageonlyB = await Page.findOne({ path: '/gAB_upod_1/onlyB_upod_1' });
- expect(upodPagegAB).not.toBeNull();
- expect(upodPagegB).not.toBeNull();
- expect(upodPageonlyB).not.toBeNull();
- expect(upodPagegAB.grant).toBe(PageGrant.GRANT_USER_GROUP);
- expect(upodPagegB.grant).toBe(PageGrant.GRANT_USER_GROUP);
- expect(upodPageonlyB.grant).toBe(PageGrant.GRANT_OWNER);
- // Update
- const options = {
- grant: PageGrant.GRANT_PUBLIC,
- overwriteScopesOfDescendants: true,
- };
- const updatedPage = await updatePage(upodPagegAB, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
- const upodPagegBUpdated = await Page.findOne({ path: '/gAB_upod_1/gB_upod_1' });
- const upodPageonlyBUpdated = await Page.findOne({ path: '/gAB_upod_1/onlyB_upod_1' });
- // Changed
- const newGrant = PageGrant.GRANT_PUBLIC;
- expect(updatedPage.grant).toBe(newGrant);
- // Not changed
- expect(upodPagegBUpdated.grant).toBe(PageGrant.GRANT_USER_GROUP);
- expect(upodPagegBUpdated.grantedGroups).toStrictEqual(upodPagegB.grantedGroups);
- expect(upodPageonlyBUpdated.grant).toBe(PageGrant.GRANT_OWNER);
- expect(upodPageonlyBUpdated.grantedUsers).toStrictEqual(upodPageonlyB.grantedUsers);
- });
- test('(case 2) it should update all granted descendant pages when all descendant pages are granted by the operator', async() => {
- const upodPagePublic = await Page.findOne({ path: '/public_upod_2' });
- const upodPagegA = await Page.findOne({ path: '/public_upod_2/gA_upod_2' });
- const upodPagegAIsolated = await Page.findOne({ path: '/public_upod_2/gAIsolated_upod_2' });
- const upodPageonlyA = await Page.findOne({ path: '/public_upod_2/onlyA_upod_2' });
- expect(upodPagePublic).not.toBeNull();
- expect(upodPagegA).not.toBeNull();
- expect(upodPagegAIsolated).not.toBeNull();
- expect(upodPageonlyA).not.toBeNull();
- expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
- expect(upodPagegA.grant).toBe(PageGrant.GRANT_USER_GROUP);
- expect(upodPagegAIsolated.grant).toBe(PageGrant.GRANT_USER_GROUP);
- expect(upodPageonlyA.grant).toBe(PageGrant.GRANT_OWNER);
- // Update
- const options = {
- grant: PageGrant.GRANT_OWNER,
- overwriteScopesOfDescendants: true,
- };
- const updatedPage = await updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
- const upodPagegAUpdated = await Page.findOne({ path: '/public_upod_2/gA_upod_2' });
- const upodPagegAIsolatedUpdated = await Page.findOne({ path: '/public_upod_2/gAIsolated_upod_2' });
- const upodPageonlyAUpdated = await Page.findOne({ path: '/public_upod_2/onlyA_upod_2' });
- // Changed
- const newGrant = PageGrant.GRANT_OWNER;
- const newGrantedUsers = [upodUserA._id];
- expect(updatedPage.grant).toBe(newGrant);
- expect(updatedPage.grantedUsers).toStrictEqual(newGrantedUsers);
- expect(upodPagegAUpdated.grant).toBe(newGrant);
- expect(upodPagegAUpdated.grantedUsers).toStrictEqual(newGrantedUsers);
- expect(upodPagegAIsolatedUpdated.grant).toBe(newGrant);
- expect(upodPagegAIsolatedUpdated.grantedUsers).toStrictEqual(newGrantedUsers);
- expect(upodPageonlyAUpdated.grant).toBe(newGrant);
- expect(upodPageonlyAUpdated.grantedUsers).toStrictEqual(newGrantedUsers);
- });
- test(`(case 3) it should update all granted descendant pages when update grant is GRANT_USER_GROUP
- , all user groups of descendants are the children or itself of the update user group
- , and all users of descendants belong to the update user group`, async() => {
- const upodPagePublic = await Page.findOne({ path: '/public_upod_3' });
- const upodPagegAB = await Page.findOne({ path: '/public_upod_3/gAB_upod_3' });
- const upodPagegB = await Page.findOne({ path: '/public_upod_3/gB_upod_3' });
- const upodPageonlyB = await Page.findOne({ path: '/public_upod_3/onlyB_upod_3' });
- expect(upodPagePublic).not.toBeNull();
- expect(upodPagegAB).not.toBeNull();
- expect(upodPagegB).not.toBeNull();
- expect(upodPageonlyB).not.toBeNull();
- expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
- expect(upodPagegAB.grant).toBe(PageGrant.GRANT_USER_GROUP);
- expect(upodPagegB.grant).toBe(PageGrant.GRANT_USER_GROUP);
- expect(upodPageonlyB.grant).toBe(PageGrant.GRANT_OWNER);
- // Update
- const options = {
- grant: PageGrant.GRANT_USER_GROUP,
- grantUserGroupIds: [
- { item: upodUserGroupIdAB, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdAB, type: GroupType.externalUserGroup },
- ],
- overwriteScopesOfDescendants: true,
- };
- const updatedPage = await updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
- const upodPagegABUpdated = await Page.findOne({ path: '/public_upod_3/gAB_upod_3' });
- const upodPagegBUpdated = await Page.findOne({ path: '/public_upod_3/gB_upod_3' });
- const upodPageonlyBUpdated = await Page.findOne({ path: '/public_upod_3/onlyB_upod_3' });
- // Changed
- const newGrant = PageGrant.GRANT_USER_GROUP;
- const newGrantedGroups = [
- { item: upodUserGroupIdAB, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdAB, type: GroupType.externalUserGroup },
- ];
- expect(updatedPage.grant).toBe(newGrant);
- expect(normalizeGrantedGroups(updatedPage.grantedGroups)).toStrictEqual(newGrantedGroups);
- expect(upodPagegABUpdated.grant).toBe(newGrant);
- expect(normalizeGrantedGroups(upodPagegABUpdated.grantedGroups)).toStrictEqual(newGrantedGroups);
- // Not changed
- expect(upodPagegBUpdated.grant).toBe(PageGrant.GRANT_USER_GROUP);
- expect(upodPagegBUpdated.grantedGroups).toStrictEqual(upodPagegB.grantedGroups);
- expect(upodPageonlyBUpdated.grant).toBe(PageGrant.GRANT_OWNER);
- expect(upodPageonlyBUpdated.grantedUsers).toStrictEqual(upodPageonlyB.grantedUsers);
- });
- test(`(case 4) it should throw when some of descendants is not granted
- , update grant is GRANT_USER_GROUP
- , and some of user groups of descendants are not children or itself of the update user group`, async() => {
- const upodPagePublic = await Page.findOne({ path: '/public_upod_4' });
- const upodPagegA = await Page.findOne({ path: '/public_upod_4/gA_upod_4' });
- const upodPagegC = await Page.findOne({ path: '/public_upod_4/gC_upod_4' });
- expect(upodPagePublic).not.toBeNull();
- expect(upodPagegA).not.toBeNull();
- expect(upodPagegC).not.toBeNull();
- expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
- expect(upodPagegA.grant).toBe(PageGrant.GRANT_USER_GROUP);
- expect(upodPagegC.grant).toBe(PageGrant.GRANT_USER_GROUP);
- // Update
- const options = {
- grant: PageGrant.GRANT_USER_GROUP,
- grantUserGroupIds: [
- { item: upodUserGroupIdAB, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdAB, type: GroupType.externalUserGroup },
- ],
- overwriteScopesOfDescendants: true,
- };
- const updatedPagePromise = updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
- await expect(updatedPagePromise).rejects.toThrowError();
- });
- test(`(case 5) it should throw when some of descendants is not granted
- , update grant is GRANT_USER_GROUP
- , and some of users of descendants does NOT belong to the update user group`, async() => {
- const upodPagePublic = await Page.findOne({ path: '/public_upod_5' });
- const upodPagegA = await Page.findOne({ path: '/public_upod_5/gA_upod_5' });
- const upodPageonlyC = await Page.findOne({ path: '/public_upod_5/onlyC_upod_5' });
- expect(upodPagePublic).not.toBeNull();
- expect(upodPagegA).not.toBeNull();
- expect(upodPageonlyC).not.toBeNull();
- expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
- expect(upodPagegA.grant).toBe(PageGrant.GRANT_USER_GROUP);
- expect(upodPageonlyC.grant).toBe(PageGrant.GRANT_OWNER);
- // Update
- const options = {
- grant: PageGrant.GRANT_USER_GROUP,
- grantUserGroupIds: [
- { item: upodUserGroupIdAB, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdAB, type: GroupType.externalUserGroup },
- ],
- overwriteScopesOfDescendants: true,
- };
- const updatedPagePromise = updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
- await expect(updatedPagePromise).rejects.toThrowError();
- });
- test('(case 6) it should throw when some of descendants is not granted and update grant is GRANT_OWNER', async() => {
- const upodPagePublic = await Page.findOne({ path: '/public_upod_6' });
- const upodPageonlyC = await Page.findOne({ path: '/public_upod_6/onlyC_upod_6' });
- expect(upodPagePublic).not.toBeNull();
- expect(upodPageonlyC).not.toBeNull();
- expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
- expect(upodPageonlyC.grant).toBe(PageGrant.GRANT_OWNER);
- // Update
- const options = {
- grant: PageGrant.GRANT_USER_GROUP,
- grantUserGroupIds: [
- { item: upodUserGroupIdAB, type: GroupType.userGroup },
- { item: upodExternalUserGroupIdAB, type: GroupType.externalUserGroup },
- ],
- overwriteScopesOfDescendants: true,
- };
- const updatedPagePromise = updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
- await expect(updatedPagePromise).rejects.toThrowError();
- });
- });
- });
|