path: root/spec/features/groups/members/manage_members_spec.rb

# frozen_string_literal: true

require 'spec_helper'

RSpec.describe 'Groups > Members > Manage members' do
  include Spec::Support::Helpers::Features::MembersHelpers
  include Spec::Support::Helpers::Features::InviteMembersModalHelper

  let_it_be(:user1) { create(:user, name: 'John Doe') }
  let_it_be(:user2) { create(:user, name: 'Mary Jane') }
  let_it_be(:group) { create(:group) }

  before do
    sign_in(user1)
  end

  shared_examples 'includes the correct Invite link' do |should_include, should_not_include|
    it 'includes either the form or the modal trigger', :aggregate_failures do
      group.add_owner(user1)

      visit group_group_members_path(group)

      expect(page).to have_selector(should_include)
      expect(page).not_to have_selector(should_not_include)
    end
  end

  shared_examples 'does not include either invite modal or either invite form' do
    it 'does not include either of the invite members or invite group modal buttons', :aggregate_failures do
      expect(page).not_to have_selector '.js-invite-members-modal'
      expect(page).not_to have_selector '.js-invite-group-modal'
    end

    it 'does not include either of the invite users or invite group forms', :aggregate_failures do
      expect(page).not_to have_selector '.invite-users-form'
      expect(page).not_to have_selector '.invite-group-form'
    end
  end

  context 'when Invite Members modal is enabled' do
    it_behaves_like 'includes the correct Invite link', '.js-invite-members-trigger', '.invite-users-form'
    it_behaves_like 'includes the correct Invite link', '.js-invite-group-trigger', '.invite-group-form'
  end

  context 'when Invite Members modal is disabled' do
    before do
      stub_feature_flags(invite_members_group_modal: false)
    end

    it_behaves_like 'includes the correct Invite link', '.invite-users-form', '.js-invite-members-trigger'
    it_behaves_like 'includes the correct Invite link', '.invite-group-form', '.js-invite-group-trigger'
  end

  it 'update user to owner level', :js do
    group.add_owner(user1)
    group.add_developer(user2)

    visit group_group_members_path(group)

    page.within(second_row) do
      click_button('Developer')
      click_button('Owner')

      expect(page).to have_button('Owner')
    end
  end

  it 'add user to group', :js, :snowplow, :aggregate_failures do
    group.add_owner(user1)

    visit group_group_members_path(group)

    invite_member(user2.name, role: 'Reporter')

    page.within(second_row) do
      expect(page).to have_content(user2.name)
      expect(page).to have_button('Reporter')
    end

    expect_snowplow_event(
      category: 'Members::CreateService',
      action: 'create_member',
      label: 'unknown',
      property: 'existing_user',
      user: user1
    )
  end

  it 'do not disclose email addresses', :js do
    group.add_owner(user1)
    create(:user, email: 'undisclosed_email@gitlab.com', name: "Jane 'invisible' Doe")

    visit group_group_members_path(group)

    click_on 'Invite members'
    fill_in 'Select members or type email addresses', with: '@gitlab.com'

    wait_for_requests

    expect(page).to have_content('No matches found')

    fill_in 'Select members or type email addresses', with: 'undisclosed_email@gitlab.com'
    wait_for_requests

    expect(page).to have_content("Jane 'invisible' Doe")
  end

  context 'when Invite Members modal is disabled' do
    before do
      stub_feature_flags(invite_members_group_modal: false)
    end

    it 'do not disclose email addresses', :js do
      group.add_owner(user1)
      create(:user, email: 'undisclosed_email@gitlab.com', name: "Jane 'invisible' Doe")

      visit group_group_members_path(group)

      find('.select2-container').click
      select_input = find('.select2-input')

      select_input.send_keys('@gitlab.com')
      wait_for_requests

      expect(page).to have_content('No matches found')

      select_input.native.clear
      select_input.send_keys('undisclosed_email@gitlab.com')
      wait_for_requests

      expect(page).to have_content("Jane 'invisible' Doe")
    end
  end

  it 'remove user from group', :js do
    group.add_owner(user1)
    group.add_developer(user2)

    visit group_group_members_path(group)

    # Open modal
    page.within(second_row) do
      click_button 'Remove member'
    end

    page.within('[role="dialog"]') do
      expect(page).to have_unchecked_field 'Also unassign this user from related issues and merge requests'
      click_button('Remove member')
    end

    wait_for_requests

    aggregate_failures do
      expect(page).not_to have_content(user2.name)
      expect(group.users).not_to include(user2)
    end
  end

  it 'add yourself to group when already an owner', :js, :aggregate_failures do
    group.add_owner(user1)

    visit group_group_members_path(group)

    invite_member(user1.name, role: 'Reporter')

    page.within(first_row) do
      expect(page).to have_content(user1.name)
      expect(page).to have_content('Owner')
    end
  end

  it 'invite user to group', :js, :snowplow do
    group.add_owner(user1)

    visit group_group_members_path(group)

    invite_member('test@example.com', role: 'Reporter')

    expect(page).to have_link 'Invited'
    click_link 'Invited'

    aggregate_failures do
      page.within(members_table) do
        expect(page).to have_content('test@example.com')
        expect(page).to have_content('Invited')
        expect(page).to have_button('Reporter')
      end

      expect_snowplow_event(
        category: 'Members::InviteService',
        action: 'create_member',
        label: 'unknown',
        property: 'net_new_user',
        user: user1
      )
    end
  end

  context 'when user is a guest' do
    before do
      group.add_guest(user1)
      group.add_developer(user2)

      visit group_group_members_path(group)
    end

    it_behaves_like 'does not include either invite modal or either invite form'

    it 'does not include a button on the members page list to manage or remove the existing member', :js, :aggregate_failures do
      page.within(second_row) do
        # Can not modify user2 role
        expect(page).not_to have_button 'Developer'

        # Can not remove user2
        expect(page).not_to have_selector 'button[title="Remove member"]'
      end
    end
  end

  context 'when user is a guest and the :invite_members_group_modal feature flag is disabled' do
    before do
      stub_feature_flags(invite_members_group_modal: false)
      group.add_guest(user1)
      group.add_developer(user2)

      visit group_group_members_path(group)
    end

    it_behaves_like 'does not include either invite modal or either invite form'

    it 'does not include a button on the members page list to manage or remove the existing member', :js, :aggregate_failures do
      page.within(second_row) do
        # Can not modify user2 role
        expect(page).not_to have_button 'Developer'

        # Can not remove user2
        expect(page).not_to have_selector 'button[title="Remove member"]'
      end
    end
  end
end