page.test.js 18 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523
  1. const mongoose = require('mongoose');
  2. const { getInstance } = require('../setup-crowi');
  3. let testUser0;
  4. let testUser1;
  5. let testUser2;
  6. let testGroup0;
  7. let parentPage;
  8. describe('Page', () => {
  9. // eslint-disable-next-line no-unused-vars
  10. let crowi;
  11. let Page;
  12. let PageQueryBuilder;
  13. let User;
  14. let UserGroup;
  15. let UserGroupRelation;
  16. beforeAll(async(done) => {
  17. crowi = await getInstance();
  18. User = mongoose.model('User');
  19. UserGroup = mongoose.model('UserGroup');
  20. UserGroupRelation = mongoose.model('UserGroupRelation');
  21. Page = mongoose.model('Page');
  22. PageQueryBuilder = Page.PageQueryBuilder;
  23. await User.insertMany([
  24. { name: 'Anon 0', username: 'anonymous0', email: 'anonymous0@example.com' },
  25. { name: 'Anon 1', username: 'anonymous1', email: 'anonymous1@example.com' },
  26. { name: 'Anon 2', username: 'anonymous2', email: 'anonymous2@example.com' },
  27. ]);
  28. await UserGroup.insertMany([
  29. { name: 'TestGroup0' },
  30. { name: 'TestGroup1' },
  31. ]);
  32. testUser0 = await User.findOne({ username: 'anonymous0' });
  33. testUser1 = await User.findOne({ username: 'anonymous1' });
  34. testUser2 = await User.findOne({ username: 'anonymous2' });
  35. testGroup0 = await UserGroup.findOne({ name: 'TestGroup0' });
  36. await UserGroupRelation.insertMany([
  37. {
  38. relatedGroup: testGroup0,
  39. relatedUser: testUser0,
  40. },
  41. {
  42. relatedGroup: testGroup0,
  43. relatedUser: testUser1,
  44. },
  45. ]);
  46. await Page.insertMany([
  47. {
  48. path: '/user/anonymous0/memo',
  49. grant: Page.GRANT_RESTRICTED,
  50. grantedUsers: [testUser0],
  51. creator: testUser0,
  52. },
  53. {
  54. path: '/grant',
  55. grant: Page.GRANT_PUBLIC,
  56. grantedUsers: [testUser0],
  57. creator: testUser0,
  58. },
  59. {
  60. path: '/grant/public',
  61. grant: Page.GRANT_PUBLIC,
  62. grantedUsers: [testUser0],
  63. creator: testUser0,
  64. },
  65. {
  66. path: '/grant/restricted',
  67. grant: Page.GRANT_RESTRICTED,
  68. grantedUsers: [testUser0],
  69. creator: testUser0,
  70. },
  71. {
  72. path: '/grant/specified',
  73. grant: Page.GRANT_SPECIFIED,
  74. grantedUsers: [testUser0],
  75. creator: testUser0,
  76. },
  77. {
  78. path: '/grant/owner',
  79. grant: Page.GRANT_OWNER,
  80. grantedUsers: [testUser0],
  81. creator: testUser0,
  82. },
  83. {
  84. path: '/page/for/extended',
  85. grant: Page.GRANT_PUBLIC,
  86. creator: testUser0,
  87. extended: { hoge: 1 },
  88. },
  89. {
  90. path: '/grant/groupacl',
  91. grant: Page.GRANT_USER_GROUP,
  92. grantedUsers: [],
  93. grantedGroup: testGroup0,
  94. creator: testUser1,
  95. },
  96. {
  97. path: '/page1',
  98. grant: Page.GRANT_PUBLIC,
  99. creator: testUser0,
  100. },
  101. {
  102. path: '/page1/child1',
  103. grant: Page.GRANT_PUBLIC,
  104. creator: testUser0,
  105. },
  106. {
  107. path: '/page2',
  108. grant: Page.GRANT_PUBLIC,
  109. creator: testUser0,
  110. },
  111. ]);
  112. parentPage = await Page.findOne({ path: '/grant' });
  113. done();
  114. });
  115. describe('.isPublic', () => {
  116. describe('with a public page', () => {
  117. test('should return true', async() => {
  118. const page = await Page.findOne({ path: '/grant/public' });
  119. expect(page.isPublic()).toEqual(true);
  120. });
  121. });
  122. ['restricted', 'specified', 'owner'].forEach((grant) => {
  123. describe(`with a ${grant} page`, () => {
  124. test('should return false', async() => {
  125. const page = await Page.findOne({ path: `/grant/${grant}` });
  126. expect(page.isPublic()).toEqual(false);
  127. });
  128. });
  129. });
  130. });
  131. describe('.getDeletedPageName', () => {
  132. test('should return trash page name', () => {
  133. expect(Page.getDeletedPageName('/hoge')).toEqual('/trash/hoge');
  134. expect(Page.getDeletedPageName('hoge')).toEqual('/trash/hoge');
  135. });
  136. });
  137. describe('.getRevertDeletedPageName', () => {
  138. test('should return reverted trash page name', () => {
  139. expect(Page.getRevertDeletedPageName('/hoge')).toEqual('/hoge');
  140. expect(Page.getRevertDeletedPageName('/trash/hoge')).toEqual('/hoge');
  141. expect(Page.getRevertDeletedPageName('/trash/hoge/trash')).toEqual('/hoge/trash');
  142. });
  143. });
  144. describe('.isDeletableName', () => {
  145. test('should decide deletable or not', () => {
  146. expect(Page.isDeletableName('/hoge')).toBeTruthy();
  147. expect(Page.isDeletableName('/user/xxx')).toBeFalsy();
  148. expect(Page.isDeletableName('/user/xxx123')).toBeFalsy();
  149. expect(Page.isDeletableName('/user/xxx/')).toBeTruthy();
  150. expect(Page.isDeletableName('/user/xxx/hoge')).toBeTruthy();
  151. });
  152. });
  153. describe('.isCreatableName', () => {
  154. test('should decide creatable or not', () => {
  155. expect(Page.isCreatableName('/hoge')).toBeTruthy();
  156. // edge cases
  157. expect(Page.isCreatableName('/me')).toBeFalsy();
  158. expect(Page.isCreatableName('/me/')).toBeFalsy();
  159. expect(Page.isCreatableName('/me/x')).toBeFalsy();
  160. expect(Page.isCreatableName('/meeting')).toBeTruthy();
  161. expect(Page.isCreatableName('/meeting/x')).toBeTruthy();
  162. // end with "edit"
  163. expect(Page.isCreatableName('/meeting/edit')).toBeFalsy();
  164. // under score
  165. expect(Page.isCreatableName('/_')).toBeTruthy();
  166. expect(Page.isCreatableName('/_template')).toBeTruthy();
  167. expect(Page.isCreatableName('/__template')).toBeTruthy();
  168. expect(Page.isCreatableName('/_r/x')).toBeFalsy();
  169. expect(Page.isCreatableName('/_api')).toBeFalsy();
  170. expect(Page.isCreatableName('/_apix')).toBeFalsy();
  171. expect(Page.isCreatableName('/_api/x')).toBeFalsy();
  172. expect(Page.isCreatableName('/hoge/xx.md')).toBeFalsy();
  173. // start with https?
  174. expect(Page.isCreatableName('/http://demo.growi.org/hoge')).toBeFalsy();
  175. expect(Page.isCreatableName('/https://demo.growi.org/hoge')).toBeFalsy();
  176. expect(Page.isCreatableName('http://demo.growi.org/hoge')).toBeFalsy();
  177. expect(Page.isCreatableName('https://demo.growi.org/hoge')).toBeFalsy();
  178. expect(Page.isCreatableName('/ the / path / with / space')).toBeFalsy();
  179. const forbidden = ['installer', 'register', 'login', 'logout',
  180. 'admin', 'files', 'trash', 'paste', 'comments'];
  181. for (let i = 0; i < forbidden.length; i++) {
  182. const pn = forbidden[i];
  183. expect(Page.isCreatableName(`/${pn}`)).toBeFalsy();
  184. expect(Page.isCreatableName(`/${pn}/`)).toBeFalsy();
  185. expect(Page.isCreatableName(`/${pn}/abc`)).toBeFalsy();
  186. }
  187. });
  188. });
  189. describe('.isAccessiblePageByViewer', () => {
  190. describe('with a granted page', () => {
  191. test('should return true with granted user', async() => {
  192. const user = await User.findOne({ email: 'anonymous0@example.com' });
  193. const page = await Page.findOne({ path: '/user/anonymous0/memo' });
  194. const bool = await Page.isAccessiblePageByViewer(page.id, user);
  195. expect(bool).toEqual(true);
  196. });
  197. test('should return false without user', async() => {
  198. const user = null;
  199. const page = await Page.findOne({ path: '/user/anonymous0/memo' });
  200. const bool = await Page.isAccessiblePageByViewer(page.id, user);
  201. expect(bool).toEqual(true);
  202. });
  203. });
  204. describe('with a public page', () => {
  205. test('should return true with user', async() => {
  206. const user = await User.findOne({ email: 'anonymous1@example.com' });
  207. const page = await Page.findOne({ path: '/grant/public' });
  208. const bool = await Page.isAccessiblePageByViewer(page.id, user);
  209. expect(bool).toEqual(true);
  210. });
  211. test('should return true with out', async() => {
  212. const user = null;
  213. const page = await Page.findOne({ path: '/grant/public' });
  214. const bool = await Page.isAccessiblePageByViewer(page.id, user);
  215. expect(bool).toEqual(true);
  216. });
  217. });
  218. describe('with a restricted page', () => {
  219. test('should return false with user who has no grant', async() => {
  220. const user = await User.findOne({ email: 'anonymous1@example.com' });
  221. const page = await Page.findOne({ path: '/grant/owner' });
  222. const bool = await Page.isAccessiblePageByViewer(page.id, user);
  223. expect(bool).toEqual(false);
  224. });
  225. test('should return false without user', async() => {
  226. const user = null;
  227. const page = await Page.findOne({ path: '/grant/owner' });
  228. const bool = await Page.isAccessiblePageByViewer(page.id, user);
  229. expect(bool).toEqual(false);
  230. });
  231. });
  232. });
  233. describe('Extended field', () => {
  234. describe('Slack Channel.', () => {
  235. test('should be empty', async() => {
  236. const page = await Page.findOne({ path: '/page/for/extended' });
  237. expect(page.extended.hoge).toEqual(1);
  238. expect(page.getSlackChannel()).toEqual('');
  239. });
  240. test('set slack channel and should get it and should keep hoge ', async() => {
  241. let page = await Page.findOne({ path: '/page/for/extended' });
  242. await page.updateSlackChannel('slack-channel1');
  243. page = await Page.findOne({ path: '/page/for/extended' });
  244. expect(page.extended.hoge).toEqual(1);
  245. expect(page.getSlackChannel()).toEqual('slack-channel1');
  246. });
  247. });
  248. });
  249. describe('.findPage', () => {
  250. describe('findByIdAndViewer', () => {
  251. test('should find page (public)', async() => {
  252. const expectedPage = await Page.findOne({ path: '/grant/public' });
  253. const page = await Page.findByIdAndViewer(expectedPage.id, testUser0);
  254. expect(page).not.toBeNull();
  255. expect(page.path).toEqual(expectedPage.path);
  256. });
  257. test('should find page (anyone knows link)', async() => {
  258. const expectedPage = await Page.findOne({ path: '/grant/restricted' });
  259. const page = await Page.findByIdAndViewer(expectedPage.id, testUser1);
  260. expect(page).not.toBeNull();
  261. expect(page.path).toEqual(expectedPage.path);
  262. });
  263. test('should find page (only me)', async() => {
  264. const expectedPage = await Page.findOne({ path: '/grant/owner' });
  265. const page = await Page.findByIdAndViewer(expectedPage.id, testUser0);
  266. expect(page).not.toBeNull();
  267. expect(page.path).toEqual(expectedPage.path);
  268. });
  269. test('should not be found by grant (only me)', async() => {
  270. const expectedPage = await Page.findOne({ path: '/grant/owner' });
  271. const page = await Page.findByIdAndViewer(expectedPage.id, testUser1);
  272. expect(page).toBeNull();
  273. });
  274. });
  275. describe('findByIdAndViewer granted userGroup', () => {
  276. test('should find page', async() => {
  277. const expectedPage = await Page.findOne({ path: '/grant/groupacl' });
  278. const page = await Page.findByIdAndViewer(expectedPage.id, testUser0);
  279. expect(page).not.toBeNull();
  280. expect(page.path).toEqual(expectedPage.path);
  281. });
  282. test('should not be found by grant', async() => {
  283. const expectedPage = await Page.findOne({ path: '/grant/groupacl' });
  284. const page = await Page.findByIdAndViewer(expectedPage.id, testUser2);
  285. expect(page).toBeNull();
  286. });
  287. });
  288. });
  289. describe('PageQueryBuilder.addConditionToListWithDescendants', () => {
  290. test('can retrieve descendants of /page', async() => {
  291. const builder = new PageQueryBuilder(Page.find());
  292. builder.addConditionToListWithDescendants('/page');
  293. const result = await builder.query.exec();
  294. // assert totalCount
  295. expect(result.length).toEqual(1);
  296. // assert paths
  297. const pagePaths = result.map((page) => { return page.path });
  298. expect(pagePaths).toContainEqual('/page/for/extended');
  299. });
  300. test('can retrieve descendants of /page1', async() => {
  301. const builder = new PageQueryBuilder(Page.find());
  302. builder.addConditionToListWithDescendants('/page1/');
  303. const result = await builder.query.exec();
  304. // assert totalCount
  305. expect(result.length).toEqual(2);
  306. // assert paths
  307. const pagePaths = result.map((page) => { return page.path });
  308. expect(pagePaths).toContainEqual('/page1');
  309. expect(pagePaths).toContainEqual('/page1/child1');
  310. });
  311. });
  312. describe('PageQueryBuilder.addConditionToListOnlyDescendants', () => {
  313. test('can retrieve only descendants of /page', async() => {
  314. const builder = new PageQueryBuilder(Page.find());
  315. builder.addConditionToListOnlyDescendants('/page');
  316. const result = await builder.query.exec();
  317. // assert totalCount
  318. expect(result.length).toEqual(1);
  319. // assert paths
  320. const pagePaths = result.map((page) => { return page.path });
  321. expect(pagePaths).toContainEqual('/page/for/extended');
  322. });
  323. test('can retrieve only descendants of /page1', async() => {
  324. const builder = new PageQueryBuilder(Page.find());
  325. builder.addConditionToListOnlyDescendants('/page1');
  326. const result = await builder.query.exec();
  327. // assert totalCount
  328. expect(result.length).toEqual(1);
  329. // assert paths
  330. const pagePaths = result.map((page) => { return page.path });
  331. expect(pagePaths).toContainEqual('/page1/child1');
  332. });
  333. });
  334. describe('PageQueryBuilder.addConditionToListByStartWith', () => {
  335. test('can retrieve pages which starts with /page', async() => {
  336. const builder = new PageQueryBuilder(Page.find());
  337. builder.addConditionToListByStartWith('/page');
  338. const result = await builder.query.exec();
  339. // assert totalCount
  340. expect(result.length).toEqual(4);
  341. // assert paths
  342. const pagePaths = result.map((page) => { return page.path });
  343. expect(pagePaths).toContainEqual('/page/for/extended');
  344. expect(pagePaths).toContainEqual('/page1');
  345. expect(pagePaths).toContainEqual('/page1/child1');
  346. expect(pagePaths).toContainEqual('/page2');
  347. });
  348. });
  349. describe('.findListWithDescendants', () => {
  350. test('can retrieve all pages with testUser0', async() => {
  351. const result = await Page.findListWithDescendants('/grant', testUser0);
  352. const { pages } = result;
  353. // assert totalCount
  354. expect(pages.length).toEqual(5);
  355. // assert paths
  356. const pagePaths = await pages.map((page) => { return page.path });
  357. expect(pagePaths).toContainEqual('/grant/groupacl');
  358. expect(pagePaths).toContainEqual('/grant/specified');
  359. expect(pagePaths).toContainEqual('/grant/owner');
  360. expect(pagePaths).toContainEqual('/grant/public');
  361. expect(pagePaths).toContainEqual('/grant');
  362. });
  363. test('can retrieve all pages with testUser1', async() => {
  364. const result = await Page.findListWithDescendants('/grant', testUser1);
  365. const { pages } = result;
  366. // assert totalCount
  367. expect(pages.length).toEqual(5);
  368. // assert paths
  369. const pagePaths = await pages.map((page) => { return page.path });
  370. expect(pagePaths).toContainEqual('/grant/groupacl');
  371. expect(pagePaths).toContainEqual('/grant/specified');
  372. expect(pagePaths).toContainEqual('/grant/owner');
  373. expect(pagePaths).toContainEqual('/grant/public');
  374. expect(pagePaths).toContainEqual('/grant');
  375. });
  376. test('can retrieve all pages with testUser2', async() => {
  377. const result = await Page.findListWithDescendants('/grant', testUser2);
  378. const { pages } = result;
  379. // assert totalCount
  380. expect(pages.length).toEqual(5);
  381. // assert paths
  382. const pagePaths = await pages.map((page) => { return page.path });
  383. expect(pagePaths).toContainEqual('/grant/groupacl');
  384. expect(pagePaths).toContainEqual('/grant/specified');
  385. expect(pagePaths).toContainEqual('/grant/owner');
  386. expect(pagePaths).toContainEqual('/grant/public');
  387. expect(pagePaths).toContainEqual('/grant');
  388. });
  389. test('can retrieve all pages without user', async() => {
  390. const result = await Page.findListWithDescendants('/grant', null);
  391. const { pages } = result;
  392. // assert totalCount
  393. expect(pages.length).toEqual(5);
  394. // assert paths
  395. const pagePaths = await pages.map((page) => { return page.path });
  396. expect(pagePaths).toContainEqual('/grant/groupacl');
  397. expect(pagePaths).toContainEqual('/grant/specified');
  398. expect(pagePaths).toContainEqual('/grant/owner');
  399. expect(pagePaths).toContainEqual('/grant/public');
  400. expect(pagePaths).toContainEqual('/grant');
  401. });
  402. });
  403. describe('.findManageableListWithDescendants', () => {
  404. test('can retrieve all pages with testUser0', async() => {
  405. const pages = await Page.findManageableListWithDescendants(parentPage, testUser0);
  406. // assert totalCount
  407. expect(pages.length).toEqual(5);
  408. // assert paths
  409. const pagePaths = await pages.map((page) => { return page.path });
  410. expect(pagePaths).toContainEqual('/grant/groupacl');
  411. expect(pagePaths).toContainEqual('/grant/specified');
  412. expect(pagePaths).toContainEqual('/grant/owner');
  413. expect(pagePaths).toContainEqual('/grant/public');
  414. expect(pagePaths).toContainEqual('/grant');
  415. });
  416. test('can retrieve group page and public page which starts with testUser1', async() => {
  417. const pages = await Page.findManageableListWithDescendants(parentPage, testUser1);
  418. // assert totalCount
  419. expect(pages.length).toEqual(3);
  420. // assert paths
  421. const pagePaths = await pages.map((page) => { return page.path });
  422. expect(pagePaths).toContainEqual('/grant/groupacl');
  423. expect(pagePaths).toContainEqual('/grant/public');
  424. expect(pagePaths).toContainEqual('/grant');
  425. });
  426. test('can retrieve only public page which starts with testUser2', async() => {
  427. const pages = await Page.findManageableListWithDescendants(parentPage, testUser2);
  428. // assert totalCount
  429. expect(pages.length).toEqual(2);
  430. // assert paths
  431. const pagePaths = await pages.map((page) => { return page.path });
  432. expect(pagePaths).toContainEqual('/grant/public');
  433. expect(pagePaths).toContainEqual('/grant');
  434. });
  435. test('can retrieve only public page which starts without user', async() => {
  436. const pages = await Page.findManageableListWithDescendants(parentPage, null);
  437. // assert totalCount
  438. expect(pages).toBeNull();
  439. });
  440. });
  441. });