test(salix): refs #7648 #7648 getBuys.filter

modules/entry/back/methods/entry/specs/getBuys.spec.js

@@ -1,31 +1,82 @@
+const UserError = require('vn-loopback/util/user-error');
 const models = require('vn-loopback/server/server').models;
 
-describe('entry getBuys()', () => {
+fdescribe('entry getBuys()', () => {
     const entryId = 4;
-    it('should get the buys and items of an entry', async() => {
-        const tx = await models.Entry.beginTransaction({});
-        const options = {transaction: tx};
+    describe('should get the buys and items of an entry ', () => {
+        it('when is supplier and entry owner', async() => {
+            const tx = await models.Entry.beginTransaction({});
+            const options = {transaction: tx};
 
-        try {
-            const ctx = {
-                args: {
-                    search: 1
-                },
-                req: {accessToken: {userId: 2}}
-            };
+            try {
+                const ctx = {
+                    args: {
+                        search: 1
+                    },
+                    req: {accessToken: {userId: 2}}
+                };
 
-            const result = await models.Entry.getBuys(ctx, entryId, options);
+                const result = await models.Entry.getBuys(ctx, entryId, options);
 
-            const length = result.length;
-            const anyResult = result[Math.floor(Math.random() * Math.floor(length))];
+                const length = result.length;
+                const anyResult = result[Math.floor(Math.random() * Math.floor(length))];
 
-            expect(result.length).toEqual(4);
-            expect(anyResult.item).toBeDefined();
+                expect(result.length).toEqual(4);
+                expect(anyResult.item).toBeDefined();
 
-            await tx.rollback();
-        } catch (e) {
-            await tx.rollback();
-            throw e;
-        }
+                await tx.rollback();
+            } catch (e) {
+                await tx.rollback();
+                throw e;
+            }
+        });
+
+        it('when is supplier but not entry owner', async() => {
+            const tx = await models.Entry.beginTransaction({});
+            const options = {transaction: tx};
+            const entryId = 1;
+            try {
+                const ctx = {
+                    args: {
+                        search: 1
+                    },
+                    req: {accessToken: {userId: 2}}
+                };
+
+                const result = await models.Entry.getBuys(ctx, entryId, options);
+
+                expect(result).toBeUndefined();
+            } catch (error) {
+                expect(error).toBeInstanceOf(UserError);
+                expect(error.message).toBe('Access Denied');
+            }
+        });
+
+        it('when is not supplier', async() => {
+            const tx = await models.Entry.beginTransaction({});
+            const options = {transaction: tx};
+
+            try {
+                const ctx = {
+                    args: {
+                        search: 1
+                    },
+                    req: {accessToken: {userId: 9}}
+                };
+
+                const result = await models.Entry.getBuys(ctx, entryId, options);
+
+                const length = result.length;
+                const anyResult = result[Math.floor(Math.random() * Math.floor(length))];
+
+                expect(result.length).toEqual(4);
+                expect(anyResult.item).toBeDefined();
+
+                await tx.rollback();
+            } catch (e) {
+                await tx.rollback();
+                throw e;
+            }
+        });
     });
 });