v5.page.test.js 51 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385
  1. import mongoose from 'mongoose';
  2. import { PageGrant } from '~/interfaces/page';
  3. import { getInstance } from '../setup-crowi';
  4. describe('Page', () => {
  5. let crowi;
  6. let pageGrantService;
  7. let Page;
  8. let Revision;
  9. let User;
  10. let PageTagRelation;
  11. let Bookmark;
  12. let Comment;
  13. let ShareLink;
  14. let PageRedirect;
  15. let UserGroup;
  16. let UserGroupRelation;
  17. let xssSpy;
  18. let rootPage;
  19. let dummyUser1;
  20. let pModelUser1;
  21. let pModelUser2;
  22. let pModelUser3;
  23. let userGroupIdPModelIsolate;
  24. let userGroupIdPModelA;
  25. let userGroupIdPModelB;
  26. let userGroupIdPModelC;
  27. // To test updatePage overwriting descendants (prefix `upod`)
  28. let upodUserA;
  29. let upodUserB;
  30. let upodUserC;
  31. let upodGroupAB;
  32. let upodGroupA;
  33. let upodGroupAIsolated;
  34. let upodGroupB;
  35. let upodGroupC;
  36. const upodUserGroupIdA = new mongoose.Types.ObjectId();
  37. const upodUserGroupIdAIsolated = new mongoose.Types.ObjectId();
  38. const upodUserGroupIdB = new mongoose.Types.ObjectId();
  39. const upodUserGroupIdC = new mongoose.Types.ObjectId();
  40. const upodUserGroupIdAB = new mongoose.Types.ObjectId();
  41. const upodPageIdgAB1 = new mongoose.Types.ObjectId();
  42. const upodPageIdPublic2 = new mongoose.Types.ObjectId();
  43. const upodPageIdPublic3 = new mongoose.Types.ObjectId();
  44. const upodPageIdPublic4 = new mongoose.Types.ObjectId();
  45. const upodPageIdPublic5 = new mongoose.Types.ObjectId();
  46. const upodPageIdPublic6 = new mongoose.Types.ObjectId();
  47. const createDocumentsToTestUpdatePageOverwritingDescendants = async() => {
  48. // Users
  49. await User.insertMany([
  50. { name: 'upodUserA', username: 'upodUserA', email: 'upoduserA@example.com' },
  51. { name: 'upodUserB', username: 'upodUserB', email: 'upoduserB@example.com' },
  52. { name: 'upodUserC', username: 'upodUserC', email: 'upodUserC@example.com' },
  53. ]);
  54. upodUserA = await User.findOne({ username: 'upodUserA' });
  55. upodUserB = await User.findOne({ username: 'upodUserB' });
  56. upodUserC = await User.findOne({ username: 'upodUserC' });
  57. await UserGroup.insertMany([
  58. {
  59. _id: upodUserGroupIdAB,
  60. name: 'upodGroupAB',
  61. parent: null,
  62. },
  63. {
  64. _id: upodUserGroupIdA,
  65. name: 'upodGroupA',
  66. parent: upodUserGroupIdAB,
  67. },
  68. {
  69. _id: upodUserGroupIdAIsolated,
  70. name: 'upodGroupAIsolated',
  71. parent: null,
  72. },
  73. {
  74. _id: upodUserGroupIdB,
  75. name: 'upodGroupB',
  76. parent: upodUserGroupIdAB,
  77. },
  78. {
  79. _id: upodUserGroupIdC,
  80. name: 'upodGroupC',
  81. parent: null,
  82. },
  83. ]);
  84. upodGroupAB = await UserGroup.findOne({ name: 'upodGroupAB' });
  85. upodGroupA = await UserGroup.findOne({ name: 'upodGroupA' });
  86. upodGroupAIsolated = await UserGroup.findOne({ name: 'upodGroupAIsolated' });
  87. upodGroupB = await UserGroup.findOne({ name: 'upodGroupB' });
  88. upodGroupC = await UserGroup.findOne({ name: 'upodGroupC' });
  89. // UserGroupRelations
  90. await UserGroupRelation.insertMany([
  91. {
  92. relatedGroup: upodUserGroupIdAB,
  93. relatedUser: upodUserA._id,
  94. },
  95. {
  96. relatedGroup: upodUserGroupIdAB,
  97. relatedUser: upodUserB._id,
  98. },
  99. {
  100. relatedGroup: upodUserGroupIdA,
  101. relatedUser: upodUserA._id,
  102. },
  103. {
  104. relatedGroup: upodUserGroupIdAIsolated,
  105. relatedUser: upodUserA._id,
  106. },
  107. {
  108. relatedGroup: upodUserGroupIdB,
  109. relatedUser: upodUserB._id,
  110. },
  111. {
  112. relatedGroup: upodUserGroupIdC,
  113. relatedUser: upodUserC._id,
  114. },
  115. ]);
  116. // Pages
  117. await Page.insertMany([
  118. // case 1
  119. {
  120. _id: upodPageIdgAB1,
  121. path: '/gAB_upod_1', // to GRANT_PUBLIC
  122. grant: PageGrant.GRANT_USER_GROUP,
  123. creator: upodUserA,
  124. lastUpdateUser: upodUserA,
  125. grantedUsers: null,
  126. grantedGroup: upodUserGroupIdAB,
  127. parent: rootPage._id,
  128. },
  129. {
  130. path: '/gB_upod_1',
  131. grant: PageGrant.GRANT_USER_GROUP,
  132. creator: upodUserB,
  133. lastUpdateUser: upodUserB,
  134. grantedUsers: null,
  135. grantedGroup: upodUserGroupIdB,
  136. parent: upodPageIdgAB1,
  137. },
  138. {
  139. path: '/onlyB_upod_1',
  140. grant: PageGrant.GRANT_OWNER,
  141. creator: upodUserB,
  142. lastUpdateUser: upodUserB,
  143. grantedUsers: [upodUserB._id],
  144. grantedGroup: null,
  145. parent: upodPageIdgAB1,
  146. },
  147. // case 2
  148. {
  149. _id: upodPageIdPublic2,
  150. path: '/public_upod_2', // to Anything
  151. grant: PageGrant.GRANT_PUBLIC,
  152. creator: upodUserA,
  153. lastUpdateUser: upodUserA,
  154. grantedUsers: null,
  155. grantedGroup: null,
  156. parent: rootPage._id,
  157. },
  158. {
  159. path: '/gA_upod_2',
  160. grant: PageGrant.GRANT_USER_GROUP,
  161. creator: upodUserA,
  162. lastUpdateUser: upodUserA,
  163. grantedUsers: null,
  164. grantedGroup: upodUserGroupIdA,
  165. parent: upodPageIdPublic2,
  166. },
  167. {
  168. path: '/gAIsolated_upod_2',
  169. grant: PageGrant.GRANT_USER_GROUP,
  170. creator: upodUserA,
  171. lastUpdateUser: upodUserA,
  172. grantedUsers: null,
  173. grantedGroup: upodUserGroupIdAIsolated,
  174. parent: upodPageIdPublic2,
  175. },
  176. {
  177. path: '/onlyA_upod_2',
  178. grant: PageGrant.GRANT_OWNER,
  179. creator: upodUserA,
  180. lastUpdateUser: upodUserA,
  181. grantedUsers: [upodUserA._id],
  182. grantedGroup: null,
  183. parent: upodPageIdPublic2,
  184. },
  185. // case 3
  186. {
  187. _id: upodPageIdPublic3,
  188. path: '/public_upod_3', // to GRANT_USER_GROUP with upodGroupAB
  189. grant: PageGrant.GRANT_PUBLIC,
  190. creator: upodUserA,
  191. lastUpdateUser: upodUserA,
  192. grantedUsers: null,
  193. grantedGroup: null,
  194. parent: rootPage._id,
  195. },
  196. {
  197. path: '/gAB_upod_3',
  198. grant: PageGrant.GRANT_USER_GROUP,
  199. creator: upodUserA,
  200. lastUpdateUser: upodUserA,
  201. grantedUsers: null,
  202. grantedGroup: upodUserGroupIdAB,
  203. parent: upodPageIdPublic3,
  204. },
  205. {
  206. path: '/gB_upod_3',
  207. grant: PageGrant.GRANT_USER_GROUP,
  208. creator: upodUserB,
  209. lastUpdateUser: upodUserB,
  210. grantedUsers: null,
  211. grantedGroup: upodUserGroupIdB,
  212. parent: upodPageIdPublic3,
  213. },
  214. {
  215. path: '/onlyB_upod_3',
  216. grant: PageGrant.GRANT_OWNER,
  217. creator: upodUserB,
  218. lastUpdateUser: upodUserB,
  219. grantedUsers: [upodUserB._id],
  220. grantedGroup: null,
  221. parent: upodPageIdPublic3,
  222. },
  223. // case 4
  224. {
  225. _id: upodPageIdPublic4,
  226. path: '/public_upod_4', // to GRANT_USER_GROUP with upodGroupAB
  227. grant: PageGrant.GRANT_PUBLIC,
  228. creator: upodUserA,
  229. lastUpdateUser: upodUserA,
  230. grantedUsers: null,
  231. grantedGroup: null,
  232. parent: rootPage._id,
  233. },
  234. {
  235. path: '/gA_upod_4',
  236. grant: PageGrant.GRANT_USER_GROUP,
  237. creator: upodUserA,
  238. lastUpdateUser: upodUserA,
  239. grantedUsers: null,
  240. grantedGroup: upodUserGroupIdA,
  241. parent: upodPageIdPublic4,
  242. },
  243. {
  244. path: '/gC_upod_4',
  245. grant: PageGrant.GRANT_USER_GROUP,
  246. creator: upodUserC,
  247. lastUpdateUser: upodUserC,
  248. grantedUsers: null,
  249. grantedGroup: upodUserGroupIdC,
  250. parent: upodPageIdPublic4,
  251. },
  252. // case 5
  253. {
  254. _id: upodPageIdPublic5,
  255. path: '/public_upod_5', // to GRANT_USER_GROUP with upodGroupAB
  256. grant: PageGrant.GRANT_PUBLIC,
  257. creator: upodUserA,
  258. lastUpdateUser: upodUserA,
  259. grantedUsers: null,
  260. grantedGroup: null,
  261. parent: rootPage._id,
  262. },
  263. {
  264. path: '/gA_upod_5',
  265. grant: PageGrant.GRANT_USER_GROUP,
  266. creator: upodUserA,
  267. lastUpdateUser: upodUserA,
  268. grantedUsers: null,
  269. grantedGroup: upodUserGroupIdA,
  270. parent: upodPageIdPublic5,
  271. },
  272. {
  273. path: '/onlyC_upod_5',
  274. grant: PageGrant.GRANT_OWNER,
  275. creator: upodUserC,
  276. lastUpdateUser: upodUserC,
  277. grantedUsers: [upodUserC._id],
  278. grantedGroup: null,
  279. parent: upodPageIdPublic5,
  280. },
  281. // case 6
  282. {
  283. _id: upodPageIdPublic6,
  284. path: '/public_upod_6', // to GRANT_USER_GROUP with upodGroupAB
  285. grant: PageGrant.GRANT_PUBLIC,
  286. creator: upodUserA,
  287. lastUpdateUser: upodUserA,
  288. grantedUsers: null,
  289. grantedGroup: null,
  290. parent: rootPage._id,
  291. },
  292. {
  293. path: '/onlyC_upod_6',
  294. grant: PageGrant.GRANT_OWNER,
  295. creator: upodUserC,
  296. lastUpdateUser: upodUserC,
  297. grantedUsers: [upodUserC._id],
  298. grantedGroup: null,
  299. parent: upodPageIdPublic6,
  300. },
  301. ]);
  302. };
  303. beforeAll(async() => {
  304. crowi = await getInstance();
  305. pageGrantService = crowi.pageGrantService;
  306. await crowi.configManager.updateConfigsInTheSameNamespace('crowi', { 'app:isV5Compatible': true });
  307. jest.restoreAllMocks();
  308. User = mongoose.model('User');
  309. Page = mongoose.model('Page');
  310. Revision = mongoose.model('Revision');
  311. PageTagRelation = mongoose.model('PageTagRelation');
  312. Bookmark = mongoose.model('Bookmark');
  313. Comment = mongoose.model('Comment');
  314. ShareLink = mongoose.model('ShareLink');
  315. PageRedirect = mongoose.model('PageRedirect');
  316. UserGroup = mongoose.model('UserGroup');
  317. UserGroupRelation = mongoose.model('UserGroupRelation');
  318. dummyUser1 = await User.findOne({ username: 'v5DummyUser1' });
  319. rootPage = await Page.findOne({ path: '/' });
  320. const pModelUserId1 = new mongoose.Types.ObjectId();
  321. const pModelUserId2 = new mongoose.Types.ObjectId();
  322. const pModelUserId3 = new mongoose.Types.ObjectId();
  323. await User.insertMany([
  324. {
  325. _id: pModelUserId1,
  326. name: 'pmodelUser1',
  327. username: 'pmodelUser1',
  328. email: 'pmodelUser1@example.com',
  329. },
  330. {
  331. _id: pModelUserId2,
  332. name: 'pmodelUser2',
  333. username: 'pmodelUser2',
  334. email: 'pmodelUser2@example.com',
  335. },
  336. {
  337. _id: pModelUserId3,
  338. name: 'pModelUser3',
  339. username: 'pModelUser3',
  340. email: 'pModelUser3@example.com',
  341. },
  342. ]);
  343. pModelUser1 = await User.findOne({ _id: pModelUserId1 });
  344. pModelUser2 = await User.findOne({ _id: pModelUserId2 });
  345. pModelUser3 = await User.findOne({ _id: pModelUserId3 });
  346. userGroupIdPModelIsolate = new mongoose.Types.ObjectId();
  347. userGroupIdPModelA = new mongoose.Types.ObjectId();
  348. userGroupIdPModelB = new mongoose.Types.ObjectId();
  349. userGroupIdPModelC = new mongoose.Types.ObjectId();
  350. await UserGroup.insertMany([
  351. {
  352. _id: userGroupIdPModelIsolate,
  353. name: 'pModel_groupIsolate',
  354. },
  355. {
  356. _id: userGroupIdPModelA,
  357. name: 'pModel_groupA',
  358. },
  359. {
  360. _id: userGroupIdPModelB,
  361. name: 'pModel_groupB',
  362. parent: userGroupIdPModelA,
  363. },
  364. {
  365. _id: userGroupIdPModelC,
  366. name: 'pModel_groupC',
  367. parent: userGroupIdPModelB,
  368. },
  369. ]);
  370. await UserGroupRelation.insertMany([
  371. {
  372. relatedGroup: userGroupIdPModelIsolate,
  373. relatedUser: pModelUserId1,
  374. createdAt: new Date(),
  375. },
  376. {
  377. relatedGroup: userGroupIdPModelIsolate,
  378. relatedUser: pModelUserId2,
  379. createdAt: new Date(),
  380. },
  381. {
  382. relatedGroup: userGroupIdPModelA,
  383. relatedUser: pModelUserId1,
  384. createdAt: new Date(),
  385. },
  386. {
  387. relatedGroup: userGroupIdPModelA,
  388. relatedUser: pModelUserId2,
  389. createdAt: new Date(),
  390. },
  391. {
  392. relatedGroup: userGroupIdPModelA,
  393. relatedUser: pModelUserId3,
  394. createdAt: new Date(),
  395. },
  396. {
  397. relatedGroup: userGroupIdPModelB,
  398. relatedUser: pModelUserId2,
  399. createdAt: new Date(),
  400. },
  401. {
  402. relatedGroup: userGroupIdPModelB,
  403. relatedUser: pModelUserId3,
  404. createdAt: new Date(),
  405. },
  406. {
  407. relatedGroup: userGroupIdPModelC,
  408. relatedUser: pModelUserId3,
  409. createdAt: new Date(),
  410. },
  411. ]);
  412. /**
  413. * update
  414. * mup_ => model update
  415. * emp => empty => page with isEmpty: true
  416. * pub => public => GRANT_PUBLIC
  417. * awl => Anyone with the link => GRANT_RESTRICTED
  418. */
  419. const pageIdUpd1 = new mongoose.Types.ObjectId();
  420. const pageIdUpd2 = new mongoose.Types.ObjectId();
  421. const pageIdUpd3 = new mongoose.Types.ObjectId();
  422. const pageIdUpd4 = new mongoose.Types.ObjectId();
  423. const pageIdUpd5 = new mongoose.Types.ObjectId();
  424. const pageIdUpd6 = new mongoose.Types.ObjectId();
  425. const pageIdUpd7 = new mongoose.Types.ObjectId();
  426. const pageIdUpd8 = new mongoose.Types.ObjectId();
  427. const pageIdUpd9 = new mongoose.Types.ObjectId();
  428. const pageIdUpd10 = new mongoose.Types.ObjectId();
  429. const pageIdUpd11 = new mongoose.Types.ObjectId();
  430. const pageIdUpd12 = new mongoose.Types.ObjectId();
  431. const pageIdUpd13 = new mongoose.Types.ObjectId();
  432. const pageIdUpd14 = new mongoose.Types.ObjectId();
  433. const pageIdUpd15 = new mongoose.Types.ObjectId();
  434. const pageIdUpd16 = new mongoose.Types.ObjectId();
  435. const pageIdUpd17 = new mongoose.Types.ObjectId();
  436. const pageIdUpd18 = new mongoose.Types.ObjectId();
  437. const pageIdUpd19 = new mongoose.Types.ObjectId();
  438. await Page.insertMany([
  439. {
  440. _id: pageIdUpd1,
  441. path: '/mup13_top/mup1_emp',
  442. grant: Page.GRANT_PUBLIC,
  443. parent: pageIdUpd8._id,
  444. isEmpty: true,
  445. },
  446. {
  447. _id: pageIdUpd2,
  448. path: '/mup13_top/mup1_emp/mup2_pub',
  449. grant: Page.GRANT_PUBLIC,
  450. parent: pageIdUpd1._id,
  451. creator: dummyUser1,
  452. lastUpdateUser: dummyUser1._id,
  453. isEmpty: false,
  454. },
  455. {
  456. _id: pageIdUpd3,
  457. path: '/mup14_top/mup6_pub',
  458. grant: Page.GRANT_PUBLIC,
  459. creator: dummyUser1,
  460. lastUpdateUser: dummyUser1._id,
  461. parent: pageIdUpd9,
  462. isEmpty: false,
  463. descendantCount: 1,
  464. },
  465. {
  466. path: '/mup14_top/mup6_pub/mup7_pub',
  467. grant: Page.GRANT_PUBLIC,
  468. creator: dummyUser1,
  469. lastUpdateUser: dummyUser1._id,
  470. parent: pageIdUpd3,
  471. isEmpty: false,
  472. descendantCount: 0,
  473. },
  474. {
  475. _id: pageIdUpd4,
  476. path: '/mup15_top/mup8_pub',
  477. grant: Page.GRANT_PUBLIC,
  478. creator: dummyUser1,
  479. lastUpdateUser: dummyUser1._id,
  480. parent: pageIdUpd10._id,
  481. isEmpty: false,
  482. },
  483. {
  484. _id: pageIdUpd5,
  485. path: '/mup16_top/mup9_pub/mup10_pub/mup11_awl',
  486. grant: Page.GRANT_RESTRICTED,
  487. creator: dummyUser1,
  488. lastUpdateUser: dummyUser1._id,
  489. isEmpty: false,
  490. },
  491. {
  492. _id: pageIdUpd6,
  493. path: '/mup17_top/mup12_emp',
  494. isEmpty: true,
  495. parent: pageIdUpd12._id,
  496. descendantCount: 1,
  497. },
  498. {
  499. _id: pageIdUpd7,
  500. path: '/mup17_top/mup12_emp',
  501. grant: Page.GRANT_RESTRICTED,
  502. creator: dummyUser1,
  503. lastUpdateUser: dummyUser1._id,
  504. isEmpty: false,
  505. },
  506. {
  507. path: '/mup17_top/mup12_emp/mup18_pub',
  508. isEmpty: false,
  509. creator: dummyUser1,
  510. lastUpdateUser: dummyUser1._id,
  511. parent: pageIdUpd6._id,
  512. },
  513. {
  514. _id: pageIdUpd8,
  515. path: '/mup13_top',
  516. grant: Page.GRANT_PUBLIC,
  517. creator: dummyUser1,
  518. lastUpdateUser: dummyUser1._id,
  519. isEmpty: false,
  520. parent: rootPage._id,
  521. descendantCount: 2,
  522. },
  523. {
  524. _id: pageIdUpd9,
  525. path: '/mup14_top',
  526. grant: Page.GRANT_PUBLIC,
  527. creator: dummyUser1,
  528. lastUpdateUser: dummyUser1._id,
  529. isEmpty: false,
  530. parent: rootPage._id,
  531. descendantCount: 2,
  532. },
  533. {
  534. _id: pageIdUpd10,
  535. path: '/mup15_top',
  536. grant: Page.GRANT_PUBLIC,
  537. creator: dummyUser1,
  538. lastUpdateUser: dummyUser1._id,
  539. isEmpty: false,
  540. parent: rootPage._id,
  541. descendantCount: 1,
  542. },
  543. {
  544. _id: pageIdUpd11,
  545. path: '/mup16_top',
  546. grant: Page.GRANT_PUBLIC,
  547. creator: dummyUser1,
  548. lastUpdateUser: dummyUser1._id,
  549. isEmpty: false,
  550. parent: rootPage._id,
  551. descendantCount: 0,
  552. },
  553. {
  554. _id: pageIdUpd12,
  555. path: '/mup17_top',
  556. grant: Page.GRANT_PUBLIC,
  557. creator: dummyUser1,
  558. lastUpdateUser: dummyUser1._id,
  559. isEmpty: false,
  560. parent: rootPage._id,
  561. descendantCount: 1,
  562. },
  563. {
  564. path: '/mup19',
  565. grant: Page.GRANT_PUBLIC,
  566. creator: dummyUser1,
  567. lastUpdateUser: dummyUser1._id,
  568. isEmpty: false,
  569. parent: rootPage._id,
  570. descendantCount: 0,
  571. },
  572. {
  573. path: '/mup20',
  574. grant: Page.GRANT_USER_GROUP,
  575. grantedGroup: userGroupIdPModelA,
  576. creator: pModelUserId1,
  577. lastUpdateUser: pModelUserId1,
  578. isEmpty: false,
  579. parent: rootPage._id,
  580. descendantCount: 0,
  581. },
  582. {
  583. path: '/mup21',
  584. grant: Page.GRANT_RESTRICTED,
  585. creator: dummyUser1,
  586. lastUpdateUser: dummyUser1._id,
  587. isEmpty: false,
  588. descendantCount: 0,
  589. },
  590. {
  591. _id: pageIdUpd13,
  592. path: '/mup22',
  593. grant: Page.GRANT_PUBLIC,
  594. creator: pModelUser1,
  595. lastUpdateUser: pModelUser1._id,
  596. isEmpty: false,
  597. parent: rootPage._id,
  598. descendantCount: 1,
  599. },
  600. {
  601. path: '/mup22/mup23',
  602. grant: Page.GRANT_USER_GROUP,
  603. grantedGroup: userGroupIdPModelA,
  604. creator: pModelUserId1,
  605. lastUpdateUser: pModelUserId1,
  606. isEmpty: false,
  607. parent: pageIdUpd13,
  608. descendantCount: 0,
  609. },
  610. {
  611. _id: pageIdUpd14,
  612. path: '/mup24_pub',
  613. grant: Page.GRANT_PUBLIC,
  614. creator: pModelUserId1,
  615. lastUpdateUser: pModelUserId1,
  616. isEmpty: false,
  617. parent: rootPage,
  618. descendantCount: 1,
  619. },
  620. {
  621. path: '/mup24_pub/mup25_pub',
  622. grant: Page.GRANT_PUBLIC,
  623. creator: pModelUserId1,
  624. lastUpdateUser: pModelUserId1,
  625. isEmpty: false,
  626. parent: pageIdUpd14,
  627. descendantCount: 0,
  628. },
  629. {
  630. path: '/mup26_awl',
  631. grant: Page.GRANT_RESTRICTED,
  632. creator: pModelUserId1,
  633. lastUpdateUser: pModelUserId1,
  634. isEmpty: false,
  635. descendantCount: 0,
  636. },
  637. {
  638. _id: pageIdUpd15,
  639. path: '/mup27_pub',
  640. grant: Page.GRANT_PUBLIC,
  641. creator: pModelUserId1,
  642. lastUpdateUser: pModelUserId1,
  643. isEmpty: false,
  644. parent: rootPage,
  645. descendantCount: 1,
  646. },
  647. {
  648. path: '/mup27_pub/mup28_owner',
  649. grant: Page.GRANT_OWNER,
  650. creator: pModelUserId1,
  651. lastUpdateUser: pModelUserId1,
  652. isEmpty: false,
  653. parent: pageIdUpd15,
  654. grantedUsers: [pModelUserId1],
  655. descendantCount: 0,
  656. },
  657. {
  658. _id: pageIdUpd16,
  659. path: '/mup29_A',
  660. grant: Page.GRANT_USER_GROUP,
  661. grantedGroup: userGroupIdPModelA,
  662. creator: pModelUserId1,
  663. lastUpdateUser: pModelUserId1,
  664. isEmpty: false,
  665. parent: rootPage,
  666. descendantCount: 1,
  667. },
  668. {
  669. path: '/mup29_A/mup30_owner',
  670. grant: Page.GRANT_OWNER,
  671. grantedUsers: [pModelUserId1],
  672. creator: pModelUserId1,
  673. lastUpdateUser: pModelUserId1,
  674. isEmpty: false,
  675. parent: pageIdUpd16,
  676. descendantCount: 0,
  677. },
  678. {
  679. _id: pageIdUpd17,
  680. path: '/mup31_A',
  681. grant: Page.GRANT_USER_GROUP,
  682. grantedGroup: userGroupIdPModelA,
  683. creator: pModelUserId1,
  684. lastUpdateUser: pModelUserId1,
  685. isEmpty: false,
  686. parent: rootPage,
  687. descendantCount: 1,
  688. },
  689. {
  690. path: '/mup31_A/mup32_owner',
  691. grant: Page.GRANT_OWNER,
  692. grantedUsers: [pModelUserId1],
  693. creator: pModelUserId1,
  694. lastUpdateUser: pModelUserId1,
  695. isEmpty: false,
  696. parent: pageIdUpd17,
  697. descendantCount: 0,
  698. },
  699. {
  700. _id: pageIdUpd18,
  701. path: '/mup33_C',
  702. grant: Page.GRANT_USER_GROUP,
  703. grantedGroup: userGroupIdPModelC,
  704. creator: pModelUserId3,
  705. lastUpdateUser: pModelUserId3,
  706. isEmpty: false,
  707. parent: rootPage,
  708. descendantCount: 1,
  709. },
  710. {
  711. path: '/mup33_C/mup34_owner',
  712. grant: Page.GRANT_OWNER,
  713. grantedUsers: [pModelUserId3],
  714. creator: pModelUserId3,
  715. lastUpdateUser: pModelUserId3,
  716. isEmpty: false,
  717. parent: pageIdUpd18,
  718. descendantCount: 0,
  719. },
  720. {
  721. _id: pageIdUpd19,
  722. path: '/mup35_owner',
  723. grant: Page.GRANT_OWNER,
  724. grantedUsers: [pModelUserId1],
  725. creator: pModelUserId1,
  726. lastUpdateUser: pModelUserId1,
  727. isEmpty: false,
  728. parent: rootPage,
  729. descendantCount: 1,
  730. },
  731. {
  732. path: '/mup35_owner/mup36_owner',
  733. grant: Page.GRANT_OWNER,
  734. grantedUsers: [pModelUserId1],
  735. creator: pModelUserId1,
  736. lastUpdateUser: pModelUserId1,
  737. isEmpty: false,
  738. parent: pageIdUpd19,
  739. descendantCount: 0,
  740. },
  741. {
  742. path: '/mup40', // used this number to resolve conflict
  743. grant: Page.GRANT_OWNER,
  744. grantedUsers: [dummyUser1._id],
  745. creator: dummyUser1,
  746. lastUpdateUser: dummyUser1._id,
  747. isEmpty: false,
  748. parent: rootPage._id,
  749. descendantCount: 0,
  750. },
  751. ]);
  752. await createDocumentsToTestUpdatePageOverwritingDescendants();
  753. });
  754. describe('update', () => {
  755. const updatePage = async(page, newRevisionBody, oldRevisionBody, user, options = {}) => {
  756. const mockedEmitPageEventUpdate = jest.spyOn(Page, 'emitPageEventUpdate').mockReturnValue(null);
  757. const savedPage = await Page.updatePage(page, newRevisionBody, oldRevisionBody, user, options);
  758. mockedEmitPageEventUpdate.mockRestore();
  759. return savedPage;
  760. };
  761. describe('Changing grant from PUBLIC to RESTRICTED of', () => {
  762. test('an only-child page will delete its empty parent page', async() => {
  763. const pathT = '/mup13_top';
  764. const path1 = '/mup13_top/mup1_emp';
  765. const path2 = '/mup13_top/mup1_emp/mup2_pub';
  766. const pageT = await Page.findOne({ path: pathT, descendantCount: 2 });
  767. const page1 = await Page.findOne({ path: path1, isEmpty: true });
  768. const page2 = await Page.findOne({ path: path2, grant: Page.GRANT_PUBLIC });
  769. expect(pageT).toBeTruthy();
  770. expect(page1).toBeTruthy();
  771. expect(page2).toBeTruthy();
  772. const options = { grant: Page.GRANT_RESTRICTED, grantUserGroupId: null };
  773. await Page.updatePage(page2, 'newRevisionBody', 'oldRevisionBody', dummyUser1, options);
  774. const _pageT = await Page.findOne({ path: pathT });
  775. const _page1 = await Page.findOne({ path: path1 });
  776. const _page2 = await Page.findOne({ path: path2, grant: Page.GRANT_RESTRICTED });
  777. expect(_pageT).toBeTruthy();
  778. expect(_page1).toBeNull();
  779. expect(_page2).toBeTruthy();
  780. expect(_pageT.descendantCount).toBe(1);
  781. });
  782. test('a page that has children will create an empty page with the same path and it becomes a new parent', async() => {
  783. const pathT = '/mup14_top';
  784. const path1 = '/mup14_top/mup6_pub';
  785. const path2 = '/mup14_top/mup6_pub/mup7_pub';
  786. const top = await Page.findOne({ path: pathT, descendantCount: 2 });
  787. const page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
  788. const page2 = await Page.findOne({ path: path2, grant: Page.GRANT_PUBLIC });
  789. expect(top).toBeTruthy();
  790. expect(page1).toBeTruthy();
  791. expect(page2).toBeTruthy();
  792. await Page.updatePage(page1, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_RESTRICTED });
  793. const _top = await Page.findOne({ path: pathT });
  794. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_RESTRICTED });
  795. const _page2 = await Page.findOne({ path: path2 });
  796. const _pageN = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
  797. expect(_page1).toBeTruthy();
  798. expect(_page2).toBeTruthy();
  799. expect(_pageN).toBeTruthy();
  800. expect(_page1.parent).toBeNull();
  801. expect(_page2.parent).toStrictEqual(_pageN._id);
  802. expect(_pageN.parent).toStrictEqual(top._id);
  803. expect(_pageN.isEmpty).toBe(true);
  804. expect(_pageN.descendantCount).toBe(1);
  805. expect(_top.descendantCount).toBe(1);
  806. });
  807. test('of a leaf page will NOT have an empty page with the same path', async() => {
  808. const pathT = '/mup15_top';
  809. const path1 = '/mup15_top/mup8_pub';
  810. const pageT = await Page.findOne({ path: pathT, descendantCount: 1 });
  811. const page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
  812. const count = await Page.count({ path: path1 });
  813. expect(pageT).toBeTruthy();
  814. expect(page1).toBeTruthy();
  815. expect(count).toBe(1);
  816. await Page.updatePage(page1, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_RESTRICTED });
  817. const _pageT = await Page.findOne({ path: pathT });
  818. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_RESTRICTED });
  819. const _pageNotExist = await Page.findOne({ path: path1, isEmpty: true });
  820. expect(_pageT).toBeTruthy();
  821. expect(_page1).toBeTruthy();
  822. expect(_pageNotExist).toBeNull();
  823. expect(_pageT.descendantCount).toBe(0);
  824. });
  825. });
  826. describe('Changing grant to GRANT_RESTRICTED', () => {
  827. test('successfully change to GRANT_RESTRICTED from GRANT_OWNER', async() => {
  828. const path = '/mup40';
  829. const _page = await Page.findOne({ path, grant: Page.GRANT_OWNER, grantedUsers: [dummyUser1._id] });
  830. expect(_page).toBeTruthy();
  831. await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_RESTRICTED });
  832. const page = await Page.findOne({ path });
  833. expect(page).toBeTruthy();
  834. expect(page.grant).toBe(Page.GRANT_RESTRICTED);
  835. expect(page.grantedUsers).toStrictEqual([]);
  836. });
  837. });
  838. describe('Changing grant from RESTRICTED to PUBLIC of', () => {
  839. test('a page will create ancestors if they do not exist', async() => {
  840. const pathT = '/mup16_top';
  841. const path1 = '/mup16_top/mup9_pub';
  842. const path2 = '/mup16_top/mup9_pub/mup10_pub';
  843. const path3 = '/mup16_top/mup9_pub/mup10_pub/mup11_awl';
  844. const top = await Page.findOne({ path: pathT });
  845. const page1 = await Page.findOne({ path: path1 });
  846. const page2 = await Page.findOne({ path: path2 });
  847. const page3 = await Page.findOne({ path: path3, grant: Page.GRANT_RESTRICTED });
  848. expect(top).toBeTruthy();
  849. expect(page3).toBeTruthy();
  850. expect(page1).toBeNull();
  851. expect(page2).toBeNull();
  852. await Page.updatePage(page3, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_PUBLIC });
  853. const _pageT = await Page.findOne({ path: pathT });
  854. const _page1 = await Page.findOne({ path: path1, isEmpty: true });
  855. const _page2 = await Page.findOne({ path: path2, isEmpty: true });
  856. const _page3 = await Page.findOne({ path: path3, grant: Page.GRANT_PUBLIC });
  857. expect(_page1).toBeTruthy();
  858. expect(_page2).toBeTruthy();
  859. expect(_page3).toBeTruthy();
  860. expect(_page1.parent).toStrictEqual(top._id);
  861. expect(_page2.parent).toStrictEqual(_page1._id);
  862. expect(_page3.parent).toStrictEqual(_page2._id);
  863. expect(_pageT.descendantCount).toBe(1);
  864. });
  865. test('a page will replace an empty page with the same path if any', async() => {
  866. const pathT = '/mup17_top';
  867. const path1 = '/mup17_top/mup12_emp';
  868. const path2 = '/mup17_top/mup12_emp/mup18_pub';
  869. const pageT = await Page.findOne({ path: pathT, descendantCount: 1 });
  870. const page1 = await Page.findOne({ path: path1, isEmpty: true });
  871. const page2 = await Page.findOne({ path: path1, grant: Page.GRANT_RESTRICTED, isEmpty: false });
  872. const page3 = await Page.findOne({ path: path2 });
  873. expect(pageT).toBeTruthy();
  874. expect(page1).toBeTruthy();
  875. expect(page2).toBeTruthy();
  876. expect(page3).toBeTruthy();
  877. await Page.updatePage(page2, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_PUBLIC });
  878. const _pageT = await Page.findOne({ path: pathT });
  879. const _page1 = await Page.findOne({ path: path1, isEmpty: true }); // should be replaced
  880. const _page2 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
  881. const _page3 = await Page.findOne({ path: path2 });
  882. expect(_pageT).toBeTruthy();
  883. expect(_page1).toBeNull();
  884. expect(_page2).toBeTruthy();
  885. expect(_page3).toBeTruthy();
  886. expect(_page2.grant).toBe(Page.GRANT_PUBLIC);
  887. expect(_page2.parent).toStrictEqual(_pageT._id);
  888. expect(_page3.parent).toStrictEqual(_page2._id);
  889. expect(_pageT.descendantCount).toBe(2);
  890. });
  891. });
  892. describe('Changing grant to GRANT_OWNER(onlyme)', () => {
  893. test('successfully change to GRANT_OWNER from GRANT_PUBLIC', async() => {
  894. const path = '/mup19';
  895. const _page = await Page.findOne({ path, grant: Page.GRANT_PUBLIC });
  896. expect(_page).toBeTruthy();
  897. await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_OWNER });
  898. const page = await Page.findOne({ path });
  899. expect(page.grant).toBe(Page.GRANT_OWNER);
  900. expect(page.grantedUsers).toStrictEqual([dummyUser1._id]);
  901. });
  902. test('successfully change to GRANT_OWNER from GRANT_USER_GROUP', async() => {
  903. const path = '/mup20';
  904. const _page = await Page.findOne({ path, grant: Page.GRANT_USER_GROUP, grantedGroup: userGroupIdPModelA });
  905. expect(_page).toBeTruthy();
  906. await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', pModelUser1, { grant: Page.GRANT_OWNER });
  907. const page = await Page.findOne({ path });
  908. expect(page.grant).toBe(Page.GRANT_OWNER);
  909. expect(page.grantedUsers).toStrictEqual([pModelUser1._id]);
  910. expect(page.grantedGroup).toBeNull();
  911. });
  912. test('successfully change to GRANT_OWNER from GRANT_RESTRICTED', async() => {
  913. const path = '/mup21';
  914. const _page = await Page.findOne({ path, grant: Page.GRANT_RESTRICTED });
  915. expect(_page).toBeTruthy();
  916. await updatePage(_page, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_OWNER });
  917. const page = await Page.findOne({ path });
  918. expect(page.grant).toBe(Page.GRANT_OWNER);
  919. expect(page.grantedUsers).toStrictEqual([dummyUser1._id]);
  920. });
  921. test('Failed to change to GRANT_OWNER if one of the ancestors is GRANT_USER_GROUP page', async() => {
  922. const path1 = '/mup22';
  923. const path2 = '/mup22/mup23';
  924. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC });
  925. const _page2 = await Page.findOne({ path: path2, grant: Page.GRANT_USER_GROUP, grantedGroup: userGroupIdPModelA });
  926. expect(_page1).toBeTruthy();
  927. expect(_page2).toBeTruthy();
  928. await expect(updatePage(_page1, 'newRevisionBody', 'oldRevisionBody', dummyUser1, { grant: Page.GRANT_OWNER }))
  929. .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
  930. const page1 = await Page.findOne({ path1 });
  931. expect(page1).toBeTruthy();
  932. expect(page1.grant).toBe(Page.GRANT_PUBLIC);
  933. expect(page1.grantedUsers).not.toStrictEqual([dummyUser1._id]);
  934. });
  935. });
  936. describe('Changing grant to GRANT_USER_GROUP', () => {
  937. describe('update grant of a page under a page with GRANT_PUBLIC', () => {
  938. test('successfully change to GRANT_USER_GROUP from GRANT_PUBLIC if parent page is GRANT_PUBLIC', async() => {
  939. // path
  940. const path1 = '/mup24_pub';
  941. const path2 = '/mup24_pub/mup25_pub';
  942. // page
  943. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC }); // out of update scope
  944. const _page2 = await Page.findOne({ path: path2, grant: Page.GRANT_PUBLIC, parent: _page1._id }); // update target
  945. expect(_page1).toBeTruthy();
  946. expect(_page2).toBeTruthy();
  947. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelA };
  948. const updatedPage = await updatePage(_page2, 'new', 'old', pModelUser1, options); // from GRANT_PUBLIC to GRANT_USER_GROUP(userGroupIdPModelA)
  949. const page1 = await Page.findById(_page1._id);
  950. const page2 = await Page.findById(_page2._id);
  951. expect(page1).toBeTruthy();
  952. expect(page2).toBeTruthy();
  953. expect(updatedPage).toBeTruthy();
  954. expect(updatedPage._id).toStrictEqual(page2._id);
  955. // check page2 grant and group
  956. expect(page2.grant).toBe(Page.GRANT_USER_GROUP);
  957. expect(page2.grantedGroup._id).toStrictEqual(userGroupIdPModelA);
  958. });
  959. test('successfully change to GRANT_USER_GROUP from GRANT_RESTRICTED if parent page is GRANT_PUBLIC', async() => {
  960. // path
  961. const _path1 = '/mup26_awl';
  962. // page
  963. const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_RESTRICTED });
  964. expect(_page1).toBeTruthy();
  965. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelA };
  966. const updatedPage = await updatePage(_page1, 'new', 'old', pModelUser1, options); // from GRANT_RESTRICTED to GRANT_USER_GROUP(userGroupIdPModelA)
  967. const page1 = await Page.findById(_page1._id);
  968. expect(page1).toBeTruthy();
  969. expect(updatedPage).toBeTruthy();
  970. expect(updatedPage._id).toStrictEqual(page1._id);
  971. // updated page
  972. expect(page1.grant).toBe(Page.GRANT_USER_GROUP);
  973. expect(page1.grantedGroup._id).toStrictEqual(userGroupIdPModelA);
  974. // parent's grant check
  975. const parent = await Page.findById(page1.parent);
  976. expect(parent.grant).toBe(Page.GRANT_PUBLIC);
  977. });
  978. test('successfully change to GRANT_USER_GROUP from GRANT_OWNER if parent page is GRANT_PUBLIC', async() => {
  979. // path
  980. const path1 = '/mup27_pub';
  981. const path2 = '/mup27_pub/mup28_owner';
  982. // page
  983. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_PUBLIC }); // out of update scope
  984. const _page2 = await Page.findOne({
  985. path: path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1], parent: _page1._id,
  986. }); // update target
  987. expect(_page1).toBeTruthy();
  988. expect(_page2).toBeTruthy();
  989. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelA };
  990. const updatedPage = await updatePage(_page2, 'new', 'old', pModelUser1, options); // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelA)
  991. const page1 = await Page.findById(_page1._id);
  992. const page2 = await Page.findById(_page2._id);
  993. expect(page1).toBeTruthy();
  994. expect(page2).toBeTruthy();
  995. expect(updatedPage).toBeTruthy();
  996. expect(updatedPage._id).toStrictEqual(page2._id);
  997. // grant check
  998. expect(page2.grant).toBe(Page.GRANT_USER_GROUP);
  999. expect(page2.grantedGroup._id).toStrictEqual(userGroupIdPModelA);
  1000. expect(page2.grantedUsers.length).toBe(0);
  1001. });
  1002. });
  1003. describe('update grant of a page under a page with GRANT_USER_GROUP', () => {
  1004. test('successfully change to GRANT_USER_GROUP if the group to set is the child or descendant of the parent page group', async() => {
  1005. // path
  1006. const _path1 = '/mup29_A';
  1007. const _path2 = '/mup29_A/mup30_owner';
  1008. // page
  1009. const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_USER_GROUP, grantedGroup: userGroupIdPModelA }); // out of update scope
  1010. const _page2 = await Page.findOne({ // update target
  1011. path: _path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1], parent: _page1._id,
  1012. });
  1013. expect(_page1).toBeTruthy();
  1014. expect(_page2).toBeTruthy();
  1015. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelB };
  1016. // First round
  1017. // Group relation(parent -> child): userGroupIdPModelA -> userGroupIdPModelB -> userGroupIdPModelC
  1018. const updatedPage = await updatePage(_page2, 'new', 'old', pModelUser3, options); // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelB)
  1019. const page1 = await Page.findById(_page1._id);
  1020. const page2 = await Page.findById(_page2._id);
  1021. expect(page1).toBeTruthy();
  1022. expect(page2).toBeTruthy();
  1023. expect(updatedPage).toBeTruthy();
  1024. expect(updatedPage._id).toStrictEqual(page2._id);
  1025. expect(page2.grant).toBe(Page.GRANT_USER_GROUP);
  1026. expect(page2.grantedGroup._id).toStrictEqual(userGroupIdPModelB);
  1027. expect(page2.grantedUsers.length).toBe(0);
  1028. // Second round
  1029. // Update group to groupC which is a grandchild from pageA's point of view
  1030. const secondRoundOptions = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelC }; // from GRANT_USER_GROUP(userGroupIdPModelB) to GRANT_USER_GROUP(userGroupIdPModelC)
  1031. const secondRoundUpdatedPage = await updatePage(_page2, 'new', 'new', pModelUser3, secondRoundOptions);
  1032. expect(secondRoundUpdatedPage).toBeTruthy();
  1033. expect(secondRoundUpdatedPage.grant).toBe(Page.GRANT_USER_GROUP);
  1034. expect(secondRoundUpdatedPage.grantedGroup._id).toStrictEqual(userGroupIdPModelC);
  1035. });
  1036. test('Fail to change to GRANT_USER_GROUP if the group to set is NOT the child or descendant of the parent page group', async() => {
  1037. // path
  1038. const _path1 = '/mup31_A';
  1039. const _path2 = '/mup31_A/mup32_owner';
  1040. // page
  1041. const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_USER_GROUP, grantedGroup: userGroupIdPModelA });
  1042. const _page2 = await Page.findOne({ // update target
  1043. path: _path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1._id], parent: _page1._id,
  1044. });
  1045. expect(_page1).toBeTruthy();
  1046. expect(_page2).toBeTruthy();
  1047. // group
  1048. const _groupIsolated = await UserGroup.findById(userGroupIdPModelIsolate);
  1049. expect(_groupIsolated).toBeTruthy();
  1050. // group parent check
  1051. expect(_groupIsolated.parent).toBeUndefined(); // should have no parent
  1052. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelIsolate };
  1053. await expect(updatePage(_page2, 'new', 'old', pModelUser1, options)) // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelIsolate)
  1054. .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
  1055. const page1 = await Page.findById(_page1._id);
  1056. const page2 = await Page.findById(_page2._id);
  1057. expect(page1).toBeTruthy();
  1058. expect(page1).toBeTruthy();
  1059. expect(page2.grant).toBe(Page.GRANT_OWNER); // should be the same before the update
  1060. expect(page2.grantedUsers).toStrictEqual([pModelUser1._id]); // should be the same before the update
  1061. expect(page2.grantedGroup).toBeUndefined(); // no group should be set
  1062. });
  1063. test('Fail to change to GRANT_USER_GROUP if the group to set is an ancestor of the parent page group', async() => {
  1064. // path
  1065. const _path1 = '/mup33_C';
  1066. const _path2 = '/mup33_C/mup34_owner';
  1067. // page
  1068. const _page1 = await Page.findOne({ path: _path1, grant: Page.GRANT_USER_GROUP, grantedGroup: userGroupIdPModelC }); // groupC
  1069. const _page2 = await Page.findOne({ // update target
  1070. path: _path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser3], parent: _page1._id,
  1071. });
  1072. expect(_page1).toBeTruthy();
  1073. expect(_page2).toBeTruthy();
  1074. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelA };
  1075. // Group relation(parent -> child): userGroupIdPModelA -> userGroupIdPModelB -> userGroupIdPModelC
  1076. // this should fail because the groupC is a descendant of groupA
  1077. await expect(updatePage(_page2, 'new', 'old', pModelUser3, options)) // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelA)
  1078. .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
  1079. const page1 = await Page.findById(_page1._id);
  1080. const page2 = await Page.findById(_page2._id);
  1081. expect(page1).toBeTruthy();
  1082. expect(page2).toBeTruthy();
  1083. expect(page2.grant).toBe(Page.GRANT_OWNER); // should be the same before the update
  1084. expect(page2.grantedUsers).toStrictEqual([pModelUser3._id]); // should be the same before the update
  1085. expect(page2.grantedGroup).toBeUndefined(); // no group should be set
  1086. });
  1087. });
  1088. describe('update grant of a page under a page with GRANT_OWNER', () => {
  1089. test('Fail to change from GRNAT_OWNER', async() => {
  1090. // path
  1091. const path1 = '/mup35_owner';
  1092. const path2 = '/mup35_owner/mup36_owner';
  1093. // page
  1094. const _page1 = await Page.findOne({ path: path1, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1] });
  1095. const _page2 = await Page.findOne({ // update target
  1096. path: path2, grant: Page.GRANT_OWNER, grantedUsers: [pModelUser1], parent: _page1._id,
  1097. });
  1098. expect(_page1).toBeTruthy();
  1099. expect(_page2).toBeTruthy();
  1100. const options = { grant: Page.GRANT_USER_GROUP, grantUserGroupId: userGroupIdPModelA };
  1101. await expect(updatePage(_page2, 'new', 'old', pModelUser1, options)) // from GRANT_OWNER to GRANT_USER_GROUP(userGroupIdPModelA)
  1102. .rejects.toThrow(new Error('The selected grant or grantedGroup is not assignable to this page.'));
  1103. const page1 = await Page.findById(_page1.id);
  1104. const page2 = await Page.findById(_page2.id);
  1105. expect(page1).toBeTruthy();
  1106. expect(page2).toBeTruthy();
  1107. expect(page2.grant).toBe(Page.GRANT_OWNER); // should be the same before the update
  1108. expect(page2.grantedUsers).toStrictEqual([pModelUser1._id]); // should be the same before the update
  1109. expect(page2.grantedGroup).toBeUndefined(); // no group should be set
  1110. });
  1111. });
  1112. });
  1113. });
  1114. // see: https://dev.growi.org/635a314eac6bcd85cbf359fc about the specification
  1115. describe('updatePage with overwriteScopesOfDescendants true', () => {
  1116. test('(case 1) it should update all granted descendant pages when update grant is GRANT_PUBLIC', async() => {
  1117. const upodPagegAB = await Page.findOne({ path: '/gAB_upod_1' });
  1118. const upodPagegB = await Page.findOne({ path: '/gB_upod_1' });
  1119. const upodPageonlyB = await Page.findOne({ path: '/onlyB_upod_1' });
  1120. expect(upodPagegAB).not.toBeNull();
  1121. expect(upodPagegB).not.toBeNull();
  1122. expect(upodPageonlyB).not.toBeNull();
  1123. expect(upodPagegAB.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1124. expect(upodPagegB.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1125. expect(upodPageonlyB.grant).toBe(PageGrant.GRANT_OWNER);
  1126. // Update
  1127. const options = {
  1128. grant: PageGrant.GRANT_PUBLIC,
  1129. overwriteScopesOfDescendants: true,
  1130. };
  1131. const updatedPage = await Page.updatePage(upodPagegAB, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1132. const upodPagegBUpdated = await Page.findOne({ path: '/gB_upod_1' });
  1133. const upodPageonlyBUpdated = await Page.findOne({ path: '/onlyB_upod_1' });
  1134. // Changed
  1135. const newGrant = PageGrant.GRANT_PUBLIC;
  1136. expect(updatedPage.grant).toBeNull(newGrant);
  1137. // Not changed
  1138. expect(upodPagegBUpdated.grant).toBeNull(PageGrant.GRANT_USER_GROUP);
  1139. expect(upodPagegBUpdated.grantedGroup).toStrictEqual(upodPagegB.grantedGroup);
  1140. expect(upodPageonlyBUpdated.grant).toBeNull(PageGrant.GRANT_OWNER);
  1141. expect(upodPageonlyBUpdated.grantedUsers).toStrictEqual(upodPageonlyB.grantedUsers);
  1142. });
  1143. test('(case 2) it should update all granted descendant pages when all descendant pages are granted by the operator', async() => {
  1144. const upodPagePublic = await Page.findOne({ path: '/public_upod_2' });
  1145. const upodPagegA = await Page.findOne({ path: '/gA_upod_2' });
  1146. const upodPagegAIsolated = await Page.findOne({ path: '/gAIsolated_upod_2' });
  1147. const upodPageonlyA = await Page.findOne({ path: '/onlyA_upod_2' });
  1148. expect(upodPagePublic).not.toBeNull();
  1149. expect(upodPagegA).not.toBeNull();
  1150. expect(upodPagegAIsolated).not.toBeNull();
  1151. expect(upodPageonlyA).not.toBeNull();
  1152. expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
  1153. expect(upodPagegA.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1154. expect(upodPagegAIsolated.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1155. expect(upodPageonlyA.grant).toBe(PageGrant.GRANT_OWNER);
  1156. // Update
  1157. const options = {
  1158. grant: PageGrant.GRANT_OWNER,
  1159. overwriteScopesOfDescendants: true,
  1160. };
  1161. const updatedPage = await Page.updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1162. const upodPagegAUpdated = await Page.findOne({ path: '/gA_upod_2' });
  1163. const upodPagegAIsolatedUpdated = await Page.findOne({ path: '/gAIsolated_upod_2' });
  1164. const upodPageonlyAUpdated = await Page.findOne({ path: '/onlyA_upod_2' });
  1165. // Changed
  1166. const newGrant = PageGrant.GRANT_OWNER;
  1167. const newGrantedUsers = [upodUserA._id];
  1168. expect(updatedPage.grant).toBe(newGrant);
  1169. expect(updatedPage.grantedUsers).toStrictEqual(newGrantedUsers);
  1170. expect(upodPagegAUpdated.grant).toBe(newGrant);
  1171. expect(upodPagegAUpdated.grantedGroup).toStrictEqual(newGrantedUsers);
  1172. expect(upodPagegAIsolatedUpdated.grant).toBe(newGrant);
  1173. expect(upodPagegAIsolatedUpdated.grantedGroup).toStrictEqual(newGrantedUsers);
  1174. expect(upodPageonlyAUpdated.grant).toBe(newGrant);
  1175. expect(upodPageonlyAUpdated.grantedGroup).toStrictEqual(newGrantedUsers);
  1176. });
  1177. test(`(case 3) it should update all granted descendant pages when update grant is GRANT_USER_GROUP
  1178. , all user groups of descendants are the children or itself of the update user group
  1179. , and all users of descendants belong to the update user group`, async() => {
  1180. const upodPagePublic = await Page.findOne({ path: '/public_upod_3' });
  1181. const upodPagegAB = await Page.findOne({ path: '/gAB_upod_3' });
  1182. const upodPagegB = await Page.findOne({ path: '/gB_upod_3' });
  1183. const upodPageonlyB = await Page.findOne({ path: '/onlyB_upod_3' });
  1184. expect(upodPagePublic).not.toBeNull();
  1185. expect(upodPagegAB).not.toBeNull();
  1186. expect(upodPagegB).not.toBeNull();
  1187. expect(upodPageonlyB).not.toBeNull();
  1188. expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
  1189. expect(upodPagegAB.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1190. expect(upodPagegB.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1191. expect(upodPageonlyB.grant).toBe(PageGrant.GRANT_OWNER);
  1192. // Update
  1193. const options = {
  1194. grant: PageGrant.GRANT_USER_GROUP,
  1195. grantUserGroupId: upodUserGroupIdAB,
  1196. overwriteScopesOfDescendants: true,
  1197. };
  1198. const updatedPage = await Page.updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1199. const upodPagegABUpdated = await Page.findOne({ path: '/gAB_upod_3' });
  1200. const upodPagegBUpdated = await Page.findOne({ path: '/gB_upod_3' });
  1201. const upodPageonlyBUpdated = await Page.findOne({ path: '/onlyB_upod_3' });
  1202. // Changed
  1203. const newGrant = PageGrant.GRANT_USER_GROUP;
  1204. const newGrantedGroup = upodUserGroupIdAB;
  1205. expect(updatedPage.grant).toBe(newGrant);
  1206. expect(updatedPage.grantedGroup).toStrictEqual(newGrantedGroup);
  1207. expect(upodPagegABUpdated.grant).toBe(newGrant);
  1208. expect(upodPagegABUpdated.grantedGroup).toStrictEqual(newGrantedGroup);
  1209. // Not changed
  1210. expect(upodPagegBUpdated.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1211. expect(upodPagegBUpdated.grantedGroup).toStrictEqual(upodPagegB.grantedGroup);
  1212. expect(upodPageonlyBUpdated.grant).toBe(PageGrant.GRANT_OWNER);
  1213. expect(upodPageonlyBUpdated.grantedUsers).toStrictEqual(upodPageonlyB.grantedUsers);
  1214. });
  1215. test(`(case 4) it should throw when some of descendants is not granted
  1216. , update grant is GRANT_USER_GROUP
  1217. , and some of user groups of descendants are not children or itself of the update user group`, async() => {
  1218. const upodPagePublic = await Page.findOne({ path: '/public_upod_4' });
  1219. const upodPagegA = await Page.findOne({ path: '/gA_upod_4' });
  1220. const upodPagegC = await Page.findOne({ path: '/gC_upod_4' });
  1221. expect(upodPagePublic).not.toBeNull();
  1222. expect(upodPagegA).not.toBeNull();
  1223. expect(upodPagegC).not.toBeNull();
  1224. expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
  1225. expect(upodPagegA.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1226. expect(upodPagegC.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1227. // Update
  1228. const options = {
  1229. grant: PageGrant.GRANT_USER_GROUP,
  1230. grantUserGroupId: upodUserGroupIdAB,
  1231. overwriteScopesOfDescendants: true,
  1232. };
  1233. const updatedPagePromise = Page.updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1234. await expect(updatedPagePromise).toThrowError();
  1235. });
  1236. test(`(case 5) it should throw when some of descendants is not granted
  1237. , update grant is GRANT_USER_GROUP
  1238. , and some of users of descendants does NOT belong to the update user group`, async() => {
  1239. const upodPagePublic = await Page.findOne({ path: '/public_upod_5' });
  1240. const upodPagegA = await Page.findOne({ path: '/gA_upod_5' });
  1241. const upodPageonlyC = await Page.findOne({ path: '/onlyC_upod_5' });
  1242. expect(upodPagePublic).not.toBeNull();
  1243. expect(upodPagegA).not.toBeNull();
  1244. expect(upodPageonlyC).not.toBeNull();
  1245. expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
  1246. expect(upodPagegA.grant).toBe(PageGrant.GRANT_USER_GROUP);
  1247. expect(upodPageonlyC.grant).toBe(PageGrant.GRANT_OWNER);
  1248. // Update
  1249. const options = {
  1250. grant: PageGrant.GRANT_USER_GROUP,
  1251. grantUserGroupId: upodUserGroupIdAB,
  1252. overwriteScopesOfDescendants: true,
  1253. };
  1254. const updatedPagePromise = Page.updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1255. await expect(updatedPagePromise).toThrowError();
  1256. });
  1257. test('(case 6) it should throw when some of descendants is not granted and update grant is GRANT_OWNER', async() => {
  1258. const upodPagePublic = await Page.findOne({ path: '/public_upod_6' });
  1259. const upodPageonlyC = await Page.findOne({ path: '/onlyC_upod_6' });
  1260. expect(upodPagePublic).not.toBeNull();
  1261. expect(upodPageonlyC).not.toBeNull();
  1262. expect(upodPagePublic.grant).toBe(PageGrant.GRANT_PUBLIC);
  1263. expect(upodPageonlyC.grant).toBe(PageGrant.GRANT_OWNER);
  1264. // Update
  1265. const options = {
  1266. grant: PageGrant.GRANT_USER_GROUP,
  1267. grantUserGroupId: upodUserGroupIdAB,
  1268. overwriteScopesOfDescendants: true,
  1269. };
  1270. const updatedPagePromise = Page.updatePage(upodPagePublic, 'newRevisionBody', 'oldRevisionBody', upodUserA, options);
  1271. await expect(updatedPagePromise).toThrowError();
  1272. });
  1273. });
  1274. });