v5.page.test.js 52 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394
  1. import mongoose from 'mongoose';
  2. import { PageGrant } from '~/interfaces/page';
  3. import { getInstance } from '../setup-crowi';
  4. describe('Page', () => {
  5. let crowi;
  6. let pageGrantService;
  7. let pageService;
  8. let Page;
  9. let Revision;
  10. let User;
  11. let PageTagRelation;
  12. let Bookmark;
  13. let Comment;
  14. let ShareLink;
  15. let PageRedirect;
  16. let UserGroup;
  17. let UserGroupRelation;
  18. let xssSpy;
  19. let rootPage;
  20. let dummyUser1;
  21. let pModelUser1;
  22. let pModelUser2;
  23. let pModelUser3;
  24. let userGroupIdPModelIsolate;
  25. let userGroupIdPModelA;
  26. let userGroupIdPModelB;
  27. let userGroupIdPModelC;
  28. // To test updatePage overwriting descendants (prefix `upod`)
  29. let upodUserA;
  30. let upodUserB;
  31. let upodUserC;
  32. let upodGroupAB;
  33. let upodGroupA;
  34. let upodGroupAIsolated;
  35. let upodGroupB;
  36. let upodGroupC;
  37. const upodUserGroupIdA = new mongoose.Types.ObjectId();
  38. const upodUserGroupIdAIsolated = new mongoose.Types.ObjectId();
  39. const upodUserGroupIdB = new mongoose.Types.ObjectId();
  40. const upodUserGroupIdC = new mongoose.Types.ObjectId();
  41. const upodUserGroupIdAB = new mongoose.Types.ObjectId();
  42. const upodPageIdgAB1 = new mongoose.Types.ObjectId();
  43. const upodPageIdPublic2 = new mongoose.Types.ObjectId();
  44. const upodPageIdPublic3 = new mongoose.Types.ObjectId();
  45. const upodPageIdPublic4 = new mongoose.Types.ObjectId();
  46. const upodPageIdPublic5 = new mongoose.Types.ObjectId();
  47. const upodPageIdPublic6 = new mongoose.Types.ObjectId();
  48. const updatePage = async(page, newRevisionBody, oldRevisionBody, user, options = {}) => {
  49. const mockedUpdatePageSubOperation = jest.spyOn(pageService, 'updatePageSubOperation').mockReturnValue(null);
  50. const savedPage = await pageService.updatePage(page, newRevisionBody, oldRevisionBody, user, options);
  51. const argsForUpdatePageSubOperation = mockedUpdatePageSubOperation.mock.calls[0];
  52. mockedUpdatePageSubOperation.mockRestore();
  53. await pageService.updatePageSubOperation(...argsForUpdatePageSubOperation);
  54. return savedPage;
  55. };
  56. const createDocumentsToTestUpdatePageOverwritingDescendants = async() => {
  57. // Users
  58. await User.insertMany([
  59. { name: 'upodUserA', username: 'upodUserA', email: 'upoduserA@example.com' },
  60. { name: 'upodUserB', username: 'upodUserB', email: 'upoduserB@example.com' },
  61. { name: 'upodUserC', username: 'upodUserC', email: 'upodUserC@example.com' },
  62. ]);
  63. upodUserA = await User.findOne({ username: 'upodUserA' });
  64. upodUserB = await User.findOne({ username: 'upodUserB' });
  65. upodUserC = await User.findOne({ username: 'upodUserC' });
  66. await UserGroup.insertMany([
  67. {
  68. _id: upodUserGroupIdAB,
  69. name: 'upodGroupAB',
  70. parent: null,
  71. },
  72. {
  73. _id: upodUserGroupIdA,
  74. name: 'upodGroupA',
  75. parent: upodUserGroupIdAB,
  76. },
  77. {
  78. _id: upodUserGroupIdAIsolated,
  79. name: 'upodGroupAIsolated',
  80. parent: null,
  81. },
  82. {
  83. _id: upodUserGroupIdB,
  84. name: 'upodGroupB',
  85. parent: upodUserGroupIdAB,
  86. },
  87. {
  88. _id: upodUserGroupIdC,
  89. name: 'upodGroupC',
  90. parent: null,
  91. },
  92. ]);
  93. upodGroupAB = await UserGroup.findOne({ name: 'upodGroupAB' });
  94. upodGroupA = await UserGroup.findOne({ name: 'upodGroupA' });
  95. upodGroupAIsolated = await UserGroup.findOne({ name: 'upodGroupAIsolated' });
  96. upodGroupB = await UserGroup.findOne({ name: 'upodGroupB' });
  97. upodGroupC = await UserGroup.findOne({ name: 'upodGroupC' });
  98. // UserGroupRelations
  99. await UserGroupRelation.insertMany([
  100. {
  101. relatedGroup: upodUserGroupIdAB,
  102. relatedUser: upodUserA._id,
  103. },
  104. {
  105. relatedGroup: upodUserGroupIdAB,
  106. relatedUser: upodUserB._id,
  107. },
  108. {
  109. relatedGroup: upodUserGroupIdA,
  110. relatedUser: upodUserA._id,
  111. },
  112. {
  113. relatedGroup: upodUserGroupIdAIsolated,
  114. relatedUser: upodUserA._id,
  115. },
  116. {
  117. relatedGroup: upodUserGroupIdB,
  118. relatedUser: upodUserB._id,
  119. },
  120. {
  121. relatedGroup: upodUserGroupIdC,
  122. relatedUser: upodUserC._id,
  123. },
  124. ]);
  125. // Pages
  126. await Page.insertMany([
  127. // case 1
  128. {
  129. _id: upodPageIdgAB1,
  130. path: '/gAB_upod_1', // to GRANT_PUBLIC
  131. grant: PageGrant.GRANT_USER_GROUP,
  132. creator: upodUserA,
  133. lastUpdateUser: upodUserA,
  134. grantedUsers: null,
  135. grantedGroup: upodUserGroupIdAB,
  136. parent: rootPage._id,
  137. },
  138. {
  139. path: '/gAB_upod_1/gB_upod_1',
  140. grant: PageGrant.GRANT_USER_GROUP,
  141. creator: upodUserB,
  142. lastUpdateUser: upodUserB,
  143. grantedUsers: null,
  144. grantedGroup: upodUserGroupIdB,
  145. parent: upodPageIdgAB1,
  146. },
  147. {
  148. path: '/gAB_upod_1/onlyB_upod_1',
  149. grant: PageGrant.GRANT_OWNER,
  150. creator: upodUserB,
  151. lastUpdateUser: upodUserB,
  152. grantedUsers: [upodUserB._id],
  153. grantedGroup: null,
  154. parent: upodPageIdgAB1,
  155. },
  156. // case 2
  157. {
  158. _id: upodPageIdPublic2,
  159. path: '/public_upod_2', // to Anything
  160. grant: PageGrant.GRANT_PUBLIC,
  161. creator: upodUserA,
  162. lastUpdateUser: upodUserA,
  163. grantedUsers: null,
  164. grantedGroup: null,
  165. parent: rootPage._id,
  166. },
  167. {
  168. path: '/public_upod_2/gA_upod_2',
  169. grant: PageGrant.GRANT_USER_GROUP,
  170. creator: upodUserA,
  171. lastUpdateUser: upodUserA,
  172. grantedUsers: null,
  173. grantedGroup: upodUserGroupIdA,
  174. parent: upodPageIdPublic2,
  175. },
  176. {
  177. path: '/public_upod_2/gAIsolated_upod_2',
  178. grant: PageGrant.GRANT_USER_GROUP,
  179. creator: upodUserA,
  180. lastUpdateUser: upodUserA,
  181. grantedUsers: null,
  182. grantedGroup: upodUserGroupIdAIsolated,
  183. parent: upodPageIdPublic2,
  184. },
  185. {
  186. path: '/public_upod_2/onlyA_upod_2',
  187. grant: PageGrant.GRANT_OWNER,
  188. creator: upodUserA,
  189. lastUpdateUser: upodUserA,
  190. grantedUsers: [upodUserA._id],
  191. grantedGroup: null,
  192. parent: upodPageIdPublic2,
  193. },
  194. // case 3
  195. {
  196. _id: upodPageIdPublic3,
  197. path: '/public_upod_3', // to GRANT_USER_GROUP with upodGroupAB
  198. grant: PageGrant.GRANT_PUBLIC,
  199. creator: upodUserA,
  200. lastUpdateUser: upodUserA,
  201. grantedUsers: null,
  202. grantedGroup: null,
  203. parent: rootPage._id,
  204. },
  205. {
  206. path: '/public_upod_3/gAB_upod_3',
  207. grant: PageGrant.GRANT_USER_GROUP,
  208. creator: upodUserA,
  209. lastUpdateUser: upodUserA,
  210. grantedUsers: null,
  211. grantedGroup: upodUserGroupIdAB,
  212. parent: upodPageIdPublic3,
  213. },
  214. {
  215. path: '/public_upod_3/gB_upod_3',
  216. grant: PageGrant.GRANT_USER_GROUP,
  217. creator: upodUserB,
  218. lastUpdateUser: upodUserB,
  219. grantedUsers: null,
  220. grantedGroup: upodUserGroupIdB,
  221. parent: upodPageIdPublic3,
  222. },
  223. {
  224. path: '/public_upod_3/onlyB_upod_3',
  225. grant: PageGrant.GRANT_OWNER,
  226. creator: upodUserB,
  227. lastUpdateUser: upodUserB,
  228. grantedUsers: [upodUserB._id],
  229. grantedGroup: null,
  230. parent: upodPageIdPublic3,
  231. },
  232. // case 4
  233. {
  234. _id: upodPageIdPublic4,
  235. path: '/public_upod_4', // to GRANT_USER_GROUP with upodGroupAB
  236. grant: PageGrant.GRANT_PUBLIC,
  237. creator: upodUserA,
  238. lastUpdateUser: upodUserA,
  239. grantedUsers: null,
  240. grantedGroup: null,
  241. parent: rootPage._id,
  242. },
  243. {
  244. path: '/public_upod_4/gA_upod_4',
  245. grant: PageGrant.GRANT_USER_GROUP,
  246. creator: upodUserA,
  247. lastUpdateUser: upodUserA,
  248. grantedUsers: null,
  249. grantedGroup: upodUserGroupIdA,
  250. parent: upodPageIdPublic4,
  251. },
  252. {
  253. path: '/public_upod_4/gC_upod_4',
  254. grant: PageGrant.GRANT_USER_GROUP,
  255. creator: upodUserC,
  256. lastUpdateUser: upodUserC,
  257. grantedUsers: null,
  258. grantedGroup: upodUserGroupIdC,
  259. parent: upodPageIdPublic4,
  260. },
  261. // case 5
  262. {
  263. _id: upodPageIdPublic5,
  264. path: '/public_upod_5', // to GRANT_USER_GROUP with upodGroupAB
  265. grant: PageGrant.GRANT_PUBLIC,
  266. creator: upodUserA,
  267. lastUpdateUser: upodUserA,
  268. grantedUsers: null,
  269. grantedGroup: null,
  270. parent: rootPage._id,
  271. },
  272. {
  273. path: '/public_upod_5/gA_upod_5',
  274. grant: PageGrant.GRANT_USER_GROUP,
  275. creator: upodUserA,
  276. lastUpdateUser: upodUserA,
  277. grantedUsers: null,
  278. grantedGroup: upodUserGroupIdA,
  279. parent: upodPageIdPublic5,
  280. },
  281. {
  282. path: '/public_upod_5/onlyC_upod_5',
  283. grant: PageGrant.GRANT_OWNER,
  284. creator: upodUserC,
  285. lastUpdateUser: upodUserC,
  286. grantedUsers: [upodUserC._id],
  287. grantedGroup: null,
  288. parent: upodPageIdPublic5,
  289. },
  290. // case 6
  291. {
  292. _id: upodPageIdPublic6,
  293. path: '/public_upod_6', // to GRANT_USER_GROUP with upodGroupAB
  294. grant: PageGrant.GRANT_PUBLIC,
  295. creator: upodUserA,
  296. lastUpdateUser: upodUserA,
  297. grantedUsers: null,
  298. grantedGroup: null,
  299. parent: rootPage._id,
  300. },
  301. {
  302. path: '/public_upod_6/onlyC_upod_6',
  303. grant: PageGrant.GRANT_OWNER,
  304. creator: upodUserC,
  305. lastUpdateUser: upodUserC,
  306. grantedUsers: [upodUserC._id],
  307. grantedGroup: null,
  308. parent: upodPageIdPublic6,
  309. },
  310. ]);
  311. };
  312. beforeAll(async() => {
  313. crowi = await getInstance();
  314. pageGrantService = crowi.pageGrantService;
  315. pageService = crowi.pageService;
  316. await crowi.configManager.updateConfigsInTheSameNamespace('crowi', { 'app:isV5Compatible': true });
  317. jest.restoreAllMocks();
  318. User = mongoose.model('User');
  319. Page = mongoose.model('Page');
  320. Revision = mongoose.model('Revision');
  321. PageTagRelation = mongoose.model('PageTagRelation');
  322. Bookmark = mongoose.model('Bookmark');
  323. Comment = mongoose.model('Comment');
  324. ShareLink = mongoose.model('ShareLink');
  325. PageRedirect = mongoose.model('PageRedirect');
  326. UserGroup = mongoose.model('UserGroup');
  327. UserGroupRelation = mongoose.model('UserGroupRelation');
  328. dummyUser1 = await User.findOne({ username: 'v5DummyUser1' });
  329. rootPage = await Page.findOne({ path: '/' });
  330. const pModelUserId1 = new mongoose.Types.ObjectId();
  331. const pModelUserId2 = new mongoose.Types.ObjectId();
  332. const pModelUserId3 = new mongoose.Types.ObjectId();
  333. await User.insertMany([
  334. {
  335. _id: pModelUserId1,
  336. name: 'pmodelUser1',
  337. username: 'pmodelUser1',
  338. email: 'pmodelUser1@example.com',
  339. },
  340. {
  341. _id: pModelUserId2,
  342. name: 'pmodelUser2',
  343. username: 'pmodelUser2',
  344. email: 'pmodelUser2@example.com',
  345. },
  346. {
  347. _id: pModelUserId3,
  348. name: 'pModelUser3',
  349. username: 'pModelUser3',
  350. email: 'pModelUser3@example.com',
  351. },
  352. ]);
  353. pModelUser1 = await User.findOne({ _id: pModelUserId1 });
  354. pModelUser2 = await User.findOne({ _id: pModelUserId2 });
  355. pModelUser3 = await User.findOne({ _id: pModelUserId3 });
  356. userGroupIdPModelIsolate = new mongoose.Types.ObjectId();
  357. userGroupIdPModelA = new mongoose.Types.ObjectId();
  358. userGroupIdPModelB = new mongoose.Types.ObjectId();
  359. userGroupIdPModelC = new mongoose.Types.ObjectId();
  360. await UserGroup.insertMany([
  361. {
  362. _id: userGroupIdPModelIsolate,
  363. name: 'pModel_groupIsolate',
  364. },
  365. {
  366. _id: userGroupIdPModelA,
  367. name: 'pModel_groupA',
  368. },
  369. {
  370. _id: userGroupIdPModelB,
  371. name: 'pModel_groupB',
  372. parent: userGroupIdPModelA,
  373. },
  374. {
  375. _id: userGroupIdPModelC,
  376. name: 'pModel_groupC',
  377. parent: userGroupIdPModelB,
  378. },
  379. ]);
  380. await UserGroupRelation.insertMany([
  381. {
  382. relatedGroup: userGroupIdPModelIsolate,
  383. relatedUser: pModelUserId1,
  384. createdAt: new Date(),
  385. },
  386. {
  387. relatedGroup: userGroupIdPModelIsolate,
  388. relatedUser: pModelUserId2,
  389. createdAt: new Date(),
  390. },
  391. {
  392. relatedGroup: userGroupIdPModelA,
  393. relatedUser: pModelUserId1,
  394. createdAt: new Date(),
  395. },
  396. {
  397. relatedGroup: userGroupIdPModelA,
  398. relatedUser: pModelUserId2,
  399. createdAt: new Date(),
  400. },
  401. {
  402. relatedGroup: userGroupIdPModelA,
  403. relatedUser: pModelUserId3,
  404. createdAt: new Date(),
  405. },
  406. {
  407. relatedGroup: userGroupIdPModelB,
  408. relatedUser: pModelUserId2,
  409. createdAt: new Date(),
  410. },
  411. {
  412. relatedGroup: userGroupIdPModelB,
  413. relatedUser: pModelUserId3,
  414. createdAt: new Date(),
  415. },
  416. {
  417. relatedGroup: userGroupIdPModelC,
  418. relatedUser: pModelUserId3,
  419. createdAt: new Date(),
  420. },
  421. ]);
  422. /**
  423. * update
  424. * mup_ => model update
  425. * emp => empty => page with isEmpty: true
  426. * pub => public => GRANT_PUBLIC
  427. * awl => Anyone with the link => GRANT_RESTRICTED
  428. */
  429. const pageIdUpd1 = new mongoose.Types.ObjectId();
  430. const pageIdUpd2 = new mongoose.Types.ObjectId();
  431. const pageIdUpd3 = new mongoose.Types.ObjectId();
  432. const pageIdUpd4 = new mongoose.Types.ObjectId();
  433. const pageIdUpd5 = new mongoose.Types.ObjectId();
  434. const pageIdUpd6 = new mongoose.Types.ObjectId();
  435. const pageIdUpd7 = new mongoose.Types.ObjectId();
  436. const pageIdUpd8 = new mongoose.Types.ObjectId();
  437. const pageIdUpd9 = new mongoose.Types.ObjectId();
  438. const pageIdUpd10 = new mongoose.Types.ObjectId();
  439. const pageIdUpd11 = new mongoose.Types.ObjectId();
  440. const pageIdUpd12 = new mongoose.Types.ObjectId();
  441. const pageIdUpd13 = new mongoose.Types.ObjectId();
  442. const pageIdUpd14 = new mongoose.Types.ObjectId();
  443. const pageIdUpd15 = new mongoose.Types.ObjectId();
  444. const pageIdUpd16 = new mongoose.Types.ObjectId();
  445. const pageIdUpd17 = new mongoose.Types.ObjectId();
  446. const pageIdUpd18 = new mongoose.Types.ObjectId();
  447. const pageIdUpd19 = new mongoose.Types.ObjectId();
  448. await Page.insertMany([
  449. {
  450. _id: pageIdUpd1,
  451. path: '/mup13_top/mup1_emp',
  452. grant: Page.GRANT_PUBLIC,
  453. parent: pageIdUpd8._id,
  454. isEmpty: true,
  455. },
  456. {
  457. _id: pageIdUpd2,
  458. path: '/mup13_top/mup1_emp/mup2_pub',
  459. grant: Page.GRANT_PUBLIC,
  460. parent: pageIdUpd1._id,
  461. creator: dummyUser1,
  462. lastUpdateUser: dummyUser1._id,
  463. isEmpty: false,
  464. },
  465. {
  466. _id: pageIdUpd3,
  467. path: '/mup14_top/mup6_pub',
  468. grant: Page.GRANT_PUBLIC,
  469. creator: dummyUser1,
  470. lastUpdateUser: dummyUser1._id,
  471. parent: pageIdUpd9,
  472. isEmpty: false,
  473. descendantCount: 1,
  474. },
  475. {
  476. path: '/mup14_top/mup6_pub/mup7_pub',
  477. grant: Page.GRANT_PUBLIC,
  478. creator: dummyUser1,
  479. lastUpdateUser: dummyUser1._id,
  480. parent: pageIdUpd3,
  481. isEmpty: false,
  482. descendantCount: 0,
  483. },
  484. {
  485. _id: pageIdUpd4,
  486. path: '/mup15_top/mup8_pub',
  487. grant: Page.GRANT_PUBLIC,
  488. creator: dummyUser1,
  489. lastUpdateUser: dummyUser1._id,
  490. parent: pageIdUpd10._id,
  491. isEmpty: false,
  492. },
  493. {
  494. _id: pageIdUpd5,
  495. path: '/mup16_top/mup9_pub/mup10_pub/mup11_awl',
  496. grant: Page.GRANT_RESTRICTED,
  497. creator: dummyUser1,
  498. lastUpdateUser: dummyUser1._id,
  499. isEmpty: false,
  500. },
  501. {
  502. _id: pageIdUpd6,
  503. path: '/mup17_top/mup12_emp',
  504. isEmpty: true,
  505. parent: pageIdUpd12._id,
  506. descendantCount: 1,
  507. },
  508. {
  509. _id: pageIdUpd7,
  510. path: '/mup17_top/mup12_emp',
  511. grant: Page.GRANT_RESTRICTED,
  512. creator: dummyUser1,
  513. lastUpdateUser: dummyUser1._id,
  514. isEmpty: false,
  515. },
  516. {
  517. path: '/mup17_top/mup12_emp/mup18_pub',
  518. isEmpty: false,
  519. creator: dummyUser1,
  520. lastUpdateUser: dummyUser1._id,
  521. parent: pageIdUpd6._id,
  522. },
  523. {
  524. _id: pageIdUpd8,
  525. path: '/mup13_top',
  526. grant: Page.GRANT_PUBLIC,
  527. creator: dummyUser1,
  528. lastUpdateUser: dummyUser1._id,
  529. isEmpty: false,
  530. parent: rootPage._id,
  531. descendantCount: 2,
  532. },
  533. {
  534. _id: pageIdUpd9,
  535. path: '/mup14_top',
  536. grant: Page.GRANT_PUBLIC,
  537. creator: dummyUser1,
  538. lastUpdateUser: dummyUser1._id,
  539. isEmpty: false,
  540. parent: rootPage._id,
  541. descendantCount: 2,
  542. },
  543. {
  544. _id: pageIdUpd10,
  545. path: '/mup15_top',
  546. grant: Page.GRANT_PUBLIC,
  547. creator: dummyUser1,
  548. lastUpdateUser: dummyUser1._id,
  549. isEmpty: false,
  550. parent: rootPage._id,
  551. descendantCount: 1,
  552. },
  553. {
  554. _id: pageIdUpd11,
  555. path: '/mup16_top',
  556. grant: Page.GRANT_PUBLIC,
  557. creator: dummyUser1,
  558. lastUpdateUser: dummyUser1._id,
  559. isEmpty: false,
  560. parent: rootPage._id,
  561. descendantCount: 0,
  562. },
  563. {
  564. _id: pageIdUpd12,
  565. path: '/mup17_top',
  566. grant: Page.GRANT_PUBLIC,
  567. creator: dummyUser1,
  568. lastUpdateUser: dummyUser1._id,
  569. isEmpty: false,
  570. parent: rootPage._id,
  571. descendantCount: 1,
  572. },
  573. {
  574. path: '/mup19',
  575. grant: Page.GRANT_PUBLIC,
  576. creator: dummyUser1,
  577. lastUpdateUser: dummyUser1._id,
  578. isEmpty: false,
  579. parent: rootPage._id,
  580. descendantCount: 0,
  581. },
  582. {
  583. path: '/mup20',
  584. grant: Page.GRANT_USER_GROUP,
  585. grantedGroup: userGroupIdPModelA,
  586. creator: pModelUserId1,
  587. lastUpdateUser: pModelUserId1,
  588. isEmpty: false,
  589. parent: rootPage._id,
  590. descendantCount: 0,
  591. },
  592. {
  593. path: '/mup21',
  594. grant: Page.GRANT_RESTRICTED,
  595. creator: dummyUser1,
  596. lastUpdateUser: dummyUser1._id,
  597. isEmpty: false,
  598. descendantCount: 0,
  599. },
  600. {
  601. _id: pageIdUpd13,
  602. path: '/mup22',
  603. grant: Page.GRANT_PUBLIC,
  604. creator: pModelUser1,
  605. lastUpdateUser: pModelUser1._id,
  606. isEmpty: false,
  607. parent: rootPage._id,
  608. descendantCount: 1,
  609. },
  610. {
  611. path: '/mup22/mup23',
  612. grant: Page.GRANT_USER_GROUP,
  613. grantedGroup: userGroupIdPModelA,
  614. creator: pModelUserId1,
  615. lastUpdateUser: pModelUserId1,
  616. isEmpty: false,
  617. parent: pageIdUpd13,
  618. descendantCount: 0,
  619. },
  620. {
  621. _id: pageIdUpd14,
  622. path: '/mup24_pub',
  623. grant: Page.GRANT_PUBLIC,
  624. creator: pModelUserId1,
  625. lastUpdateUser: pModelUserId1,
  626. isEmpty: false,
  627. parent: rootPage,
  628. descendantCount: 1,
  629. },
  630. {
  631. path: '/mup24_pub/mup25_pub',
  632. grant: Page.GRANT_PUBLIC,
  633. creator: pModelUserId1,
  634. lastUpdateUser: pModelUserId1,
  635. isEmpty: false,
  636. parent: pageIdUpd14,
  637. descendantCount: 0,
  638. },
  639. {
  640. path: '/mup26_awl',
  641. grant: Page.GRANT_RESTRICTED,
  642. creator: pModelUserId1,
  643. lastUpdateUser: pModelUserId1,
  644. isEmpty: false,
  645. descendantCount: 0,
  646. },
  647. {
  648. _id: pageIdUpd15,
  649. path: '/mup27_pub',
  650. grant: Page.GRANT_PUBLIC,
  651. creator: pModelUserId1,
  652. lastUpdateUser: pModelUserId1,
  653. isEmpty: false,
  654. parent: rootPage,
  655. descendantCount: 1,
  656. },
  657. {
  658. path: '/mup27_pub/mup28_owner',
  659. grant: Page.GRANT_OWNER,
  660. creator: pModelUserId1,
  661. lastUpdateUser: pModelUserId1,
  662. isEmpty: false,
  663. parent: pageIdUpd15,
  664. grantedUsers: [pModelUserId1],
  665. descendantCount: 0,
  666. },
  667. {
  668. _id: pageIdUpd16,
  669. path: '/mup29_A',
  670. grant: Page.GRANT_USER_GROUP,
  671. grantedGroup: userGroupIdPModelA,
  672. creator: pModelUserId1,
  673. lastUpdateUser: pModelUserId1,
  674. isEmpty: false,
  675. parent: rootPage,
  676. descendantCount: 1,
  677. },
  678. {
  679. path: '/mup29_A/mup30_owner',
  680. grant: Page.GRANT_OWNER,
  681. grantedUsers: [pModelUserId1],
  682. creator: pModelUserId1,
  683. lastUpdateUser: pModelUserId1,
  684. isEmpty: false,
  685. parent: pageIdUpd16,
  686. descendantCount: 0,
  687. },
  688. {
  689. _id: pageIdUpd17,
  690. path: '/mup31_A',
  691. grant: Page.GRANT_USER_GROUP,
  692. grantedGroup: userGroupIdPModelA,
  693. creator: pModelUserId1,
  694. lastUpdateUser: pModelUserId1,
  695. isEmpty: false,
  696. parent: rootPage,
  697. descendantCount: 1,
  698. },
  699. {
  700. path: '/mup31_A/mup32_owner',
  701. grant: Page.GRANT_OWNER,
  702. grantedUsers: [pModelUserId1],
  703. creator: pModelUserId1,
  704. lastUpdateUser: pModelUserId1,
  705. isEmpty: false,
  706. parent: pageIdUpd17,
  707. descendantCount: 0,
  708. },
  709. {
  710. _id: pageIdUpd18,
  711. path: '/mup33_C',
  712. grant: Page.GRANT_USER_GROUP,
  713. grantedGroup: userGroupIdPModelC,
  714. creator: pModelUserId3,
  715. lastUpdateUser: pModelUserId3,
  716. isEmpty: false,
  717. parent: rootPage,
  718. descendantCount: 1,
  719. },
  720. {
  721. path: '/mup33_C/mup34_owner',
  722. grant: Page.GRANT_OWNER,
  723. grantedUsers: [pModelUserId3],
  724. creator: pModelUserId3,
  725. lastUpdateUser: pModelUserId3,
  726. isEmpty: false,
  727. parent: pageIdUpd18,
  728. descendantCount: 0,
  729. },
  730. {
  731. _id: pageIdUpd19,
  732. path: '/mup35_owner',
  733. grant: Page.GRANT_OWNER,
  734. grantedUsers: [pModelUserId1],
  735. creator: pModelUserId1,
  736. lastUpdateUser: pModelUserId1,
  737. isEmpty: false,
  738. parent: rootPage,
  739. descendantCount: 1,
  740. },
  741. {
  742. path: '/mup35_owner/mup36_owner',
  743. grant: Page.GRANT_OWNER,
  744. grantedUsers: [pModelUserId1],
  745. creator: pModelUserId1,
  746. lastUpdateUser: pModelUserId1,
  747. isEmpty: false,
  748. parent: pageIdUpd19,
  749. descendantCount: 0,
  750. },
  751. {
  752. path: '/mup40', // used this number to resolve conflict
  753. grant: Page.GRANT_OWNER,
  754. grantedUsers: [dummyUser1._id],
  755. creator: dummyUser1,
  756. lastUpdateUser: dummyUser1._id,
  757. isEmpty: false,
  758. parent: rootPage._id,
  759. descendantCount: 0,
  760. },
  761. ]);
  762. await createDocumentsToTestUpdatePageOverwritingDescendants();
  763. });
  764. describe('update', () => {
  765. describe('Changing grant from PUBLIC to RESTRICTED of', () => {
  766. test('an only-child page will delete its empty parent page', async() => {
  767. const pathT = '/mup13_top';
  768. const path1 = '/mup13_top/mup1_emp';
  769. const path2 = '/mup13_top/mup1_emp/mup2_pub';
  770. const pageT = await Page.findOne({ path: pathT, descendantCount: 2 });
  771. const page1 = await Page.findOne({ path: path1, isEmpty: true });
  772. const page2 = await Page.findOne({ path: path2, grant: Page.GRANT_PUBLIC });
  773. expect(pageT).toBeTruthy();
  774. expect(page1).toBeTruthy();
  775. expect(page2).toBeTruthy();
  776. const options = { grant: Page.GRANT_RESTRICTED, grantUserGroupId: null };
  777. await updatePage(page2, 'newRevisionBody', 'oldRevisionBody', dummyUser1, options);
  778. const _pageT = await Page.findOne({ path: pathT });
  779. const _page1 = await Page.findOne({ path: path1 });
  780. const _page2 = await Page.findOne({ path: path2, grant: Page.GRANT_RESTRICTED });
  781. expect(_pageT).toBeTruthy();
  782. expect(_page1).toBeNull();
  783. expect(_page2).toBeTruthy();
  784. expect(_pageT.descendantCount).toBe(1);
  785. });
  786. test('a page that has children will create an empty page with the same path and it becomes a new parent', async() => {
  787. const pathT = '/mup14_top';
  788. const path1 = '/mup14_top/mup6_pub';
  789. const path2 = '/mup14_top/mup6_pub/mup7_pub';
  790. const top = await Page.findOne({ path: pathT, descendantCount: 2 });
  791. const page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
  792. const page2 = await Page.findOne({ path: path2, grant: Page.GRANT_PUBLIC });
  793. expect(top).toBeTruthy();
  794. expect(page1).toBeTruthy();
  795. expect(page2).toBeTruthy();
  796. await updatePage(page1, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_RESTRICTED });
  797. const _top = await Page.findOne({ path: pathT });
  798. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_RESTRICTED });
  799. const _page2 = await Page.findOne({ path: path2 });
  800. const _pageN = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
  801. expect(_page1).toBeTruthy();
  802. expect(_page2).toBeTruthy();
  803. expect(_pageN).toBeTruthy();
  804. expect(_page1.parent).toBeNull();
  805. expect(_page2.parent).toStrictEqual(_pageN._id);
  806. expect(_pageN.parent).toStrictEqual(top._id);
  807. expect(_pageN.isEmpty).toBe(true);
  808. expect(_pageN.descendantCount).toBe(1);
  809. expect(_top.descendantCount).toBe(1);
  810. });
  811. test('of a leaf page will NOT have an empty page with the same path', async() => {
  812. const pathT = '/mup15_top';
  813. const path1 = '/mup15_top/mup8_pub';
  814. const pageT = await Page.findOne({ path: pathT, descendantCount: 1 });
  815. const page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
  816. const count = await Page.count({ path: path1 });
  817. expect(pageT).toBeTruthy();
  818. expect(page1).toBeTruthy();
  819. expect(count).toBe(1);
  820. await updatePage(page1, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_RESTRICTED });
  821. const _pageT = await Page.findOne({ path: pathT });
  822. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_RESTRICTED });
  823. const _pageNotExist = await Page.findOne({ path: path1, isEmpty: true });
  824. expect(_pageT).toBeTruthy();
  825. expect(_page1).toBeTruthy();
  826. expect(_pageNotExist).toBeNull();
  827. expect(_pageT.descendantCount).toBe(0);
  828. });
  829. });
  830. describe('Changing grant to GRANT_RESTRICTED', () => {
  831. test('successfully change to GRANT_RESTRICTED from GRANT_OWNER', async() => {
  832. const path = '/mup40';
  833. const _page = await Page.findOne({ path, grant: Page.GRANT_OWNER, grantedUsers: [dummyUser1._id] });
  834. expect(_page).toBeTruthy();
  835. await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_RESTRICTED });
  836. const page = await Page.findOne({ path });
  837. expect(page).toBeTruthy();
  838. expect(page.grant).toBe(Page.GRANT_RESTRICTED);
  839. expect(page.grantedUsers).toStrictEqual([]);
  840. });
  841. });
  842. describe('Changing grant from RESTRICTED to PUBLIC of', () => {
  843. test('a page will create ancestors if they do not exist', async() => {
  844. const pathT = '/mup16_top';
  845. const path1 = '/mup16_top/mup9_pub';
  846. const path2 = '/mup16_top/mup9_pub/mup10_pub';
  847. const path3 = '/mup16_top/mup9_pub/mup10_pub/mup11_awl';
  848. const top = await Page.findOne({ path: pathT });
  849. const page1 = await Page.findOne({ path: path1 });
  850. const page2 = await Page.findOne({ path: path2 });
  851. const page3 = await Page.findOne({ path: path3, grant: Page.GRANT_RESTRICTED });
  852. expect(top).toBeTruthy();
  853. expect(page3).toBeTruthy();
  854. expect(page1).toBeNull();
  855. expect(page2).toBeNull();
  856. await updatePage(page3, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_PUBLIC });
  857. const _pageT = await Page.findOne({ path: pathT });
  858. const _page1 = await Page.findOne({ path: path1, isEmpty: true });
  859. const _page2 = await Page.findOne({ path: path2, isEmpty: true });
  860. const _page3 = await Page.findOne({ path: path3, grant: Page.GRANT_PUBLIC });
  861. expect(_page1).toBeTruthy();
  862. expect(_page2).toBeTruthy();
  863. expect(_page3).toBeTruthy();
  864. expect(_page1.parent).toStrictEqual(top._id);
  865. expect(_page2.parent).toStrictEqual(_page1._id);
  866. expect(_page3.parent).toStrictEqual(_page2._id);
  867. expect(_pageT.descendantCount).toBe(1);
  868. });
  869. test('a page will replace an empty page with the same path if any', async() => {
  870. const pathT = '/mup17_top';
  871. const path1 = '/mup17_top/mup12_emp';
  872. const path2 = '/mup17_top/mup12_emp/mup18_pub';
  873. const pageT = await Page.findOne({ path: pathT, descendantCount: 1 });
  874. const page1 = await Page.findOne({ path: path1, isEmpty: true });
  875. const page2 = await Page.findOne({ path: path1, grant: Page.GRANT_RESTRICTED, isEmpty: false });
  876. const page3 = await Page.findOne({ path: path2 });
  877. expect(pageT).toBeTruthy();
  878. expect(page1).toBeTruthy();
  879. expect(page2).toBeTruthy();
  880. expect(page3).toBeTruthy();
  881. await updatePage(page2, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_PUBLIC });
  882. const _pageT = await Page.findOne({ path: pathT });
  883. const _page1 = await Page.findOne({ path: path1, isEmpty: true }); // should be replaced
  884. const _page2 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
  885. const _page3 = await Page.findOne({ path: path2 });
  886. expect(_pageT).toBeTruthy();
  887. expect(_page1).toBeNull();
  888. expect(_page2).toBeTruthy();
  889. expect(_page3).toBeTruthy();
  890. expect(_page2.grant).toBe(Page.GRANT_PUBLIC);
  891. expect(_page2.parent).toStrictEqual(_pageT._id);
  892. expect(_page3.parent).toStrictEqual(_page2._id);
  893. expect(_pageT.descendantCount).toBe(2);
  894. });
  895. });
  896. describe('Changing grant to GRANT_OWNER(onlyme)', () => {
  897. test('successfully change to GRANT_OWNER from GRANT_PUBLIC', async() => {
  898. const path = '/mup19';
  899. const _page = await Page.findOne({ path, grant: Page.GRANT_PUBLIC });
  900. expect(_page).toBeTruthy();
  901. await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_OWNER });
  902. const page = await Page.findOne({ path });
  903. expect(page.grant).toBe(Page.GRANT_OWNER);
  904. expect(page.grantedUsers).toStrictEqual([dummyUser1._id]);
  905. });
  906. test('successfully change to GRANT_OWNER from GRANT_USER_GROUP', async() => {
  907. const path = '/mup20';
  908. const _page = await Page.findOne({ path, grant: Page.GRANT_USER_GROUP, grantedGroup: userGroupIdPModelA });
  909. expect(_page).toBeTruthy();
  910. await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', pModelUser1, { grant: Page.GRANT_OWNER });
  911. const page = await Page.findOne({ path });
  912. expect(page.grant).toBe(Page.GRANT_OWNER);
  913. expect(page.grantedUsers).toStrictEqual([pModelUser1._id]);
  914. expect(page.grantedGroup).toBeNull();
  915. });
  916. test('successfully change to GRANT_OWNER from GRANT_RESTRICTED', async() => {
  917. const path = '/mup21';
  918. const _page = await Page.findOne({ path, grant: Page.GRANT_RESTRICTED });
  919. expect(_page).toBeTruthy();
  920. await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_OWNER });
  921. const page = await Page.findOne({ path });
  922. expect(page.grant).toBe(Page.GRANT_OWNER);
  923. expect(page.grantedUsers).toStrictEqual([dummyUser1._id]);
  924. });
  925. test('Failed to change to GRANT_OWNER if one of the ancestors is GRANT_USER_GROUP page', async() => {
  926. const path1 = '/mup22';
  927. const path2 = '/mup22/mup23';
  928. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
  929. const _page2 = await Page.findOne({ path: path2, grant: Page.GRANT_USER_GROUP, grantedGroup: userGroupIdPModelA });
  930. expect(_page1).toBeTruthy();
  931. expect(_page2).toBeTruthy();
  932. await expect(updatePage(_page1, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_OWNER }))
  933. .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
  934. const page1 = await Page.findOne({ path1 });
  935. expect(page1).toBeTruthy();
  936. expect(page1.grant).toBe(Page.GRANT_PUBLIC);
  937. expect(page1.grantedUsers).not.toStrictEqual([dummyUser1._id]);
  938. });
  939. });
  940. describe('Changing grant to GRANT_USER_GROUP', () => {
  941. describe('update grant of a page under a page with GRANT_PUBLIC', () => {
  942. test('successfully change to GRANT_USER_GROUP from GRANT_PUBLIC if parent page is GRANT_PUBLIC', async() => {
  943. // path
  944. const path1 = '/mup24_pub';
  945. const path2 = '/mup24_pub/mup25_pub';
  946. // page
  947. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC }); // out of update scope
  948. const _page2 = await Page.findOne({ path: path2, grant: Page.GRANT_PUBLIC, parent: _page1._id }); // update target
  949. expect(_page1).toBeTruthy();
  950. expect(_page2).toBeTruthy();
  951. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelA };
  952. const updatedPage = await updatePage(_page2, 'new', 'old', pModelUser1, options); // from GRANT_PUBLIC to GRANT_USER_GROUP(userGroupIdPModelA)
  953. const page1 = await Page.findById(_page1._id);
  954. const page2 = await Page.findById(_page2._id);
  955. expect(page1).toBeTruthy();
  956. expect(page2).toBeTruthy();
  957. expect(updatedPage).toBeTruthy();
  958. expect(updatedPage._id).toStrictEqual(page2._id);
  959. // check page2 grant and group
  960. expect(page2.grant).toBe(Page.GRANT_USER_GROUP);
  961. expect(page2.grantedGroup._id).toStrictEqual(userGroupIdPModelA);
  962. });
  963. test('successfully change to GRANT_USER_GROUP from GRANT_RESTRICTED if parent page is GRANT_PUBLIC', async() => {
  964. // path
  965. const _path1 = '/mup26_awl';
  966. // page
  967. const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_RESTRICTED });
  968. expect(_page1).toBeTruthy();
  969. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelA };
  970. const updatedPage = await updatePage(_page1, 'new', 'old', pModelUser1, options); // from GRANT_RESTRICTED to GRANT_USER_GROUP(userGroupIdPModelA)
  971. const page1 = await Page.findById(_page1._id);
  972. expect(page1).toBeTruthy();
  973. expect(updatedPage).toBeTruthy();
  974. expect(updatedPage._id).toStrictEqual(page1._id);
  975. // updated page
  976. expect(page1.grant).toBe(Page.GRANT_USER_GROUP);
  977. expect(page1.grantedGroup._id).toStrictEqual(userGroupIdPModelA);
  978. // parent's grant check
  979. const parent = await Page.findById(page1.parent);
  980. expect(parent.grant).toBe(Page.GRANT_PUBLIC);
  981. });
  982. test('successfully change to GRANT_USER_GROUP from GRANT_OWNER if parent page is GRANT_PUBLIC', async() => {
  983. // path
  984. const path1 = '/mup27_pub';
  985. const path2 = '/mup27_pub/mup28_owner';
  986. // page
  987. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC }); // out of update scope
  988. const _page2 = await Page.findOne({
  989. path: path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1], parent: _page1._id,
  990. }); // update target
  991. expect(_page1).toBeTruthy();
  992. expect(_page2).toBeTruthy();
  993. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelA };
  994. const updatedPage = await updatePage(_page2, 'new', 'old', pModelUser1, options); // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelA)
  995. const page1 = await Page.findById(_page1._id);
  996. const page2 = await Page.findById(_page2._id);
  997. expect(page1).toBeTruthy();
  998. expect(page2).toBeTruthy();
  999. expect(updatedPage).toBeTruthy();
  1000. expect(updatedPage._id).toStrictEqual(page2._id);
  1001. // grant check
  1002. expect(page2.grant).toBe(Page.GRANT_USER_GROUP);
  1003. expect(page2.grantedGroup._id).toStrictEqual(userGroupIdPModelA);
  1004. expect(page2.grantedUsers.length).toBe(0);
  1005. });
  1006. });
  1007. describe('update grant of a page under a page with GRANT_USER_GROUP', () => {
  1008. test('successfully change to GRANT_USER_GROUP if the group to set is the child or descendant of the parent page group', async() => {
  1009. // path
  1010. const _path1 = '/mup29_A';
  1011. const _path2 = '/mup29_A/mup30_owner';
  1012. // page
  1013. const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_USER_GROUP, grantedGroup: userGroupIdPModelA }); // out of update scope
  1014. const _page2 = await Page.findOne({ // update target
  1015. path: _path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1], parent: _page1._id,
  1016. });
  1017. expect(_page1).toBeTruthy();
  1018. expect(_page2).toBeTruthy();
  1019. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelB };
  1020. // First round
  1021. // Group relation(parent -> child): userGroupIdPModelA -> userGroupIdPModelB -> userGroupIdPModelC
  1022. const updatedPage = await updatePage(_page2, 'new', 'old', pModelUser3, options); // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelB)
  1023. const page1 = await Page.findById(_page1._id);
  1024. const page2 = await Page.findById(_page2._id);
  1025. expect(page1).toBeTruthy();
  1026. expect(page2).toBeTruthy();
  1027. expect(updatedPage).toBeTruthy();
  1028. expect(updatedPage._id).toStrictEqual(page2._id);
  1029. expect(page2.grant).toBe(Page.GRANT_USER_GROUP);
  1030. expect(page2.grantedGroup._id).toStrictEqual(userGroupIdPModelB);
  1031. expect(page2.grantedUsers.length).toBe(0);
  1032. // Second round
  1033. // Update group to groupC which is a grandchild from pageA's point of view
  1034. const secondRoundOptions = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelC }; // from GRANT_USER_GROUP(userGroupIdPModelB) to GRANT_USER_GROUP(userGroupIdPModelC)
  1035. const secondRoundUpdatedPage = await updatePage(_page2, 'new', 'new', pModelUser3, secondRoundOptions);
  1036. expect(secondRoundUpdatedPage).toBeTruthy();
  1037. expect(secondRoundUpdatedPage.grant).toBe(Page.GRANT_USER_GROUP);
  1038. expect(secondRoundUpdatedPage.grantedGroup._id).toStrictEqual(userGroupIdPModelC);
  1039. });
  1040. test('Fail to change to GRANT_USER_GROUP if the group to set is NOT the child or descendant of the parent page group', async() => {
  1041. // path
  1042. const _path1 = '/mup31_A';
  1043. const _path2 = '/mup31_A/mup32_owner';
  1044. // page
  1045. const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_USER_GROUP, grantedGroup: userGroupIdPModelA });
  1046. const _page2 = await Page.findOne({ // update target
  1047. path: _path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1._id], parent: _page1._id,
  1048. });
  1049. expect(_page1).toBeTruthy();
  1050. expect(_page2).toBeTruthy();
  1051. // group
  1052. const _groupIsolated = await UserGroup.findById(userGroupIdPModelIsolate);
  1053. expect(_groupIsolated).toBeTruthy();
  1054. // group parent check
  1055. expect(_groupIsolated.parent).toBeUndefined(); // should have no parent
  1056. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelIsolate };
  1057. await expect(updatePage(_page2, 'new', 'old', pModelUser1, options)) // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelIsolate)
  1058. .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
  1059. const page1 = await Page.findById(_page1._id);
  1060. const page2 = await Page.findById(_page2._id);
  1061. expect(page1).toBeTruthy();
  1062. expect(page1).toBeTruthy();
  1063. expect(page2.grant).toBe(Page.GRANT_OWNER); // should be the same before the update
  1064. expect(page2.grantedUsers).toStrictEqual([pModelUser1._id]); // should be the same before the update
  1065. expect(page2.grantedGroup).toBeUndefined(); // no group should be set
  1066. });
  1067. test('Fail to change to GRANT_USER_GROUP if the group to set is an ancestor of the parent page group', async() => {
  1068. // path
  1069. const _path1 = '/mup33_C';
  1070. const _path2 = '/mup33_C/mup34_owner';
  1071. // page
  1072. const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_USER_GROUP, grantedGroup: userGroupIdPModelC }); // groupC
  1073. const _page2 = await Page.findOne({ // update target
  1074. path: _path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser3], parent: _page1._id,
  1075. });
  1076. expect(_page1).toBeTruthy();
  1077. expect(_page2).toBeTruthy();
  1078. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelA };
  1079. // Group relation(parent -> child): userGroupIdPModelA -> userGroupIdPModelB -> userGroupIdPModelC
  1080. // this should fail because the groupC is a descendant of groupA
  1081. await expect(updatePage(_page2, 'new', 'old', pModelUser3, options)) // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelA)
  1082. .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
  1083. const page1 = await Page.findById(_page1._id);
  1084. const page2 = await Page.findById(_page2._id);
  1085. expect(page1).toBeTruthy();
  1086. expect(page2).toBeTruthy();
  1087. expect(page2.grant).toBe(Page.GRANT_OWNER); // should be the same before the update
  1088. expect(page2.grantedUsers).toStrictEqual([pModelUser3._id]); // should be the same before the update
  1089. expect(page2.grantedGroup).toBeUndefined(); // no group should be set
  1090. });
  1091. });
  1092. describe('update grant of a page under a page with GRANT_OWNER', () => {
  1093. test('Fail to change from GRNAT_OWNER', async() => {
  1094. // path
  1095. const path1 = '/mup35_owner';
  1096. const path2 = '/mup35_owner/mup36_owner';
  1097. // page
  1098. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1] });
  1099. const _page2 = await Page.findOne({ // update target
  1100. path: path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1], parent: _page1._id,
  1101. });
  1102. expect(_page1).toBeTruthy();
  1103. expect(_page2).toBeTruthy();
  1104. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelA };
  1105. await expect(updatePage(_page2, 'new', 'old', pModelUser1, options)) // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelA)
  1106. .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
  1107. const page1 = await Page.findById(_page1.id);
  1108. const page2 = await Page.findById(_page2.id);
  1109. expect(page1).toBeTruthy();
  1110. expect(page2).toBeTruthy();
  1111. expect(page2.grant).toBe(Page.GRANT_OWNER); // should be the same before the update
  1112. expect(page2.grantedUsers).toStrictEqual([pModelUser1._id]); // should be the same before the update
  1113. expect(page2.grantedGroup).toBeUndefined(); // no group should be set
  1114. });
  1115. });
  1116. });
  1117. });
  1118. // see: https://dev.growi.org/635a314eac6bcd85cbf359fc about the specification
  1119. describe('updatePage with overwriteScopesOfDescendants true', () => {
  1120. test('(case 1) it should update all granted descendant pages when update grant is GRANT_PUBLIC', async() => {
  1121. const upodPagegAB = await Page.findOne({ path: '/gAB_upod_1' });
  1122. const upodPagegB = await Page.findOne({ path: '/gAB_upod_1/gB_upod_1' });
  1123. const upodPageonlyB = await Page.findOne({ path: '/gAB_upod_1/onlyB_upod_1' });
  1124. expect(upodPagegAB).not.toBeNull();
  1125. expect(upodPagegB).not.toBeNull();
  1126. expect(upodPageonlyB).not.toBeNull();
  1127. expect(upodPagegAB.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1128. expect(upodPagegB.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1129. expect(upodPageonlyB.grant).toBe(PageGrant.GRANT_OWNER);
  1130. // Update
  1131. const options = {
  1132. grant: PageGrant.GRANT_PUBLIC,
  1133. overwriteScopesOfDescendants: true,
  1134. };
  1135. const updatedPage = await updatePage(upodPagegAB, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1136. const upodPagegBUpdated = await Page.findOne({ path: '/gAB_upod_1/gB_upod_1' });
  1137. const upodPageonlyBUpdated = await Page.findOne({ path: '/gAB_upod_1/onlyB_upod_1' });
  1138. // Changed
  1139. const newGrant = PageGrant.GRANT_PUBLIC;
  1140. expect(updatedPage.grant).toBe(newGrant);
  1141. // Not changed
  1142. expect(upodPagegBUpdated.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1143. expect(upodPagegBUpdated.grantedGroup).toStrictEqual(upodPagegB.grantedGroup);
  1144. expect(upodPageonlyBUpdated.grant).toBe(PageGrant.GRANT_OWNER);
  1145. expect(upodPageonlyBUpdated.grantedUsers).toStrictEqual(upodPageonlyB.grantedUsers);
  1146. });
  1147. test('(case 2) it should update all granted descendant pages when all descendant pages are granted by the operator', async() => {
  1148. const upodPagePublic = await Page.findOne({ path: '/public_upod_2' });
  1149. const upodPagegA = await Page.findOne({ path: '/public_upod_2/gA_upod_2' });
  1150. const upodPagegAIsolated = await Page.findOne({ path: '/public_upod_2/gAIsolated_upod_2' });
  1151. const upodPageonlyA = await Page.findOne({ path: '/public_upod_2/onlyA_upod_2' });
  1152. expect(upodPagePublic).not.toBeNull();
  1153. expect(upodPagegA).not.toBeNull();
  1154. expect(upodPagegAIsolated).not.toBeNull();
  1155. expect(upodPageonlyA).not.toBeNull();
  1156. expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
  1157. expect(upodPagegA.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1158. expect(upodPagegAIsolated.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1159. expect(upodPageonlyA.grant).toBe(PageGrant.GRANT_OWNER);
  1160. // Update
  1161. const options = {
  1162. grant: PageGrant.GRANT_OWNER,
  1163. overwriteScopesOfDescendants: true,
  1164. };
  1165. const updatedPage = await updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1166. const upodPagegAUpdated = await Page.findOne({ path: '/public_upod_2/gA_upod_2' });
  1167. const upodPagegAIsolatedUpdated = await Page.findOne({ path: '/public_upod_2/gAIsolated_upod_2' });
  1168. const upodPageonlyAUpdated = await Page.findOne({ path: '/public_upod_2/onlyA_upod_2' });
  1169. // Changed
  1170. const newGrant = PageGrant.GRANT_OWNER;
  1171. const newGrantedUsers = [upodUserA._id];
  1172. expect(updatedPage.grant).toBe(newGrant);
  1173. expect(updatedPage.grantedUsers).toStrictEqual(newGrantedUsers);
  1174. expect(upodPagegAUpdated.grant).toBe(newGrant);
  1175. expect(upodPagegAUpdated.grantedUsers).toStrictEqual(newGrantedUsers);
  1176. expect(upodPagegAIsolatedUpdated.grant).toBe(newGrant);
  1177. expect(upodPagegAIsolatedUpdated.grantedUsers).toStrictEqual(newGrantedUsers);
  1178. expect(upodPageonlyAUpdated.grant).toBe(newGrant);
  1179. expect(upodPageonlyAUpdated.grantedUsers).toStrictEqual(newGrantedUsers);
  1180. });
  1181. test(`(case 3) it should update all granted descendant pages when update grant is GRANT_USER_GROUP
  1182. , all user groups of descendants are the children or itself of the update user group
  1183. , and all users of descendants belong to the update user group`, async() => {
  1184. const upodPagePublic = await Page.findOne({ path: '/public_upod_3' });
  1185. const upodPagegAB = await Page.findOne({ path: '/public_upod_3/gAB_upod_3' });
  1186. const upodPagegB = await Page.findOne({ path: '/public_upod_3/gB_upod_3' });
  1187. const upodPageonlyB = await Page.findOne({ path: '/public_upod_3/onlyB_upod_3' });
  1188. expect(upodPagePublic).not.toBeNull();
  1189. expect(upodPagegAB).not.toBeNull();
  1190. expect(upodPagegB).not.toBeNull();
  1191. expect(upodPageonlyB).not.toBeNull();
  1192. expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
  1193. expect(upodPagegAB.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1194. expect(upodPagegB.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1195. expect(upodPageonlyB.grant).toBe(PageGrant.GRANT_OWNER);
  1196. // Update
  1197. const options = {
  1198. grant: PageGrant.GRANT_USER_GROUP,
  1199. grantUserGroupId: upodUserGroupIdAB,
  1200. overwriteScopesOfDescendants: true,
  1201. };
  1202. const updatedPage = await updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1203. const upodPagegABUpdated = await Page.findOne({ path: '/public_upod_3/gAB_upod_3' });
  1204. const upodPagegBUpdated = await Page.findOne({ path: '/public_upod_3/gB_upod_3' });
  1205. const upodPageonlyBUpdated = await Page.findOne({ path: '/public_upod_3/onlyB_upod_3' });
  1206. // Changed
  1207. const newGrant = PageGrant.GRANT_USER_GROUP;
  1208. const newGrantedGroup = upodUserGroupIdAB;
  1209. expect(updatedPage.grant).toBe(newGrant);
  1210. expect(updatedPage.grantedGroup._id).toStrictEqual(newGrantedGroup);
  1211. expect(upodPagegABUpdated.grant).toBe(newGrant);
  1212. expect(upodPagegABUpdated.grantedGroup._id).toStrictEqual(newGrantedGroup);
  1213. // Not changed
  1214. expect(upodPagegBUpdated.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1215. expect(upodPagegBUpdated.grantedGroup._id).toStrictEqual(upodPagegB.grantedGroup);
  1216. expect(upodPageonlyBUpdated.grant).toBe(PageGrant.GRANT_OWNER);
  1217. expect(upodPageonlyBUpdated.grantedUsers).toStrictEqual(upodPageonlyB.grantedUsers);
  1218. });
  1219. test(`(case 4) it should throw when some of descendants is not granted
  1220. , update grant is GRANT_USER_GROUP
  1221. , and some of user groups of descendants are not children or itself of the update user group`, async() => {
  1222. const upodPagePublic = await Page.findOne({ path: '/public_upod_4' });
  1223. const upodPagegA = await Page.findOne({ path: '/public_upod_4/gA_upod_4' });
  1224. const upodPagegC = await Page.findOne({ path: '/public_upod_4/gC_upod_4' });
  1225. expect(upodPagePublic).not.toBeNull();
  1226. expect(upodPagegA).not.toBeNull();
  1227. expect(upodPagegC).not.toBeNull();
  1228. expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
  1229. expect(upodPagegA.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1230. expect(upodPagegC.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1231. // Update
  1232. const options = {
  1233. grant: PageGrant.GRANT_USER_GROUP,
  1234. grantUserGroupId: upodUserGroupIdAB,
  1235. overwriteScopesOfDescendants: true,
  1236. };
  1237. const updatedPagePromise = updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1238. await expect(updatedPagePromise).rejects.toThrowError();
  1239. });
  1240. test(`(case 5) it should throw when some of descendants is not granted
  1241. , update grant is GRANT_USER_GROUP
  1242. , and some of users of descendants does NOT belong to the update user group`, async() => {
  1243. const upodPagePublic = await Page.findOne({ path: '/public_upod_5' });
  1244. const upodPagegA = await Page.findOne({ path: '/public_upod_5/gA_upod_5' });
  1245. const upodPageonlyC = await Page.findOne({ path: '/public_upod_5/onlyC_upod_5' });
  1246. expect(upodPagePublic).not.toBeNull();
  1247. expect(upodPagegA).not.toBeNull();
  1248. expect(upodPageonlyC).not.toBeNull();
  1249. expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
  1250. expect(upodPagegA.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1251. expect(upodPageonlyC.grant).toBe(PageGrant.GRANT_OWNER);
  1252. // Update
  1253. const options = {
  1254. grant: PageGrant.GRANT_USER_GROUP,
  1255. grantUserGroupId: upodUserGroupIdAB,
  1256. overwriteScopesOfDescendants: true,
  1257. };
  1258. const updatedPagePromise = updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1259. await expect(updatedPagePromise).rejects.toThrowError();
  1260. });
  1261. test('(case 6) it should throw when some of descendants is not granted and update grant is GRANT_OWNER', async() => {
  1262. const upodPagePublic = await Page.findOne({ path: '/public_upod_6' });
  1263. const upodPageonlyC = await Page.findOne({ path: '/public_upod_6/onlyC_upod_6' });
  1264. expect(upodPagePublic).not.toBeNull();
  1265. expect(upodPageonlyC).not.toBeNull();
  1266. expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
  1267. expect(upodPageonlyC.grant).toBe(PageGrant.GRANT_OWNER);
  1268. // Update
  1269. const options = {
  1270. grant: PageGrant.GRANT_USER_GROUP,
  1271. grantUserGroupId: upodUserGroupIdAB,
  1272. overwriteScopesOfDescendants: true,
  1273. };
  1274. const updatedPagePromise = updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1275. await expect(updatedPagePromise).rejects.toThrowError();
  1276. });
  1277. });
  1278. });