require "spec_helper"

describe UsersController do
  include ActionController::AuthenticationTestHelper
  
  render_views
  
  describe "responding to GET index" do
    
    describe " when you are logged in" do
      
      describe " as SuperAdmin" do
        
        before do
          login_as Factory(:superuser)
        end
        
        describe "in a private space" do
          
          before(:each) do
            @space = Factory(:private_space)
          end
          
          it "should let the Super Admin to see the users" do
            get :index , :space_id => @space.to_param
            assert_response 200
          end         
        end
        
        describe "in the public space" do
          
          before(:each) do
            @space = Factory(:public_space)
          end
          
          it "should let the Super Admin to see the users" do
            get :index , :space_id => @space.to_param
            assert_response 200            
          end
        end
      end
      
=begin
      
      describe "as a normal user" do
        
        before(:each) do
          login_as Factory(:user)
        end

        describe "in a private space" do

          describe " where the user has the role Admin" do
            
            before do
              @space = spaces(:private_admin)  
            end
            
            it "should let the user to see the users" do
              get :index , :space_id => @space.name
              assert_response 200
            end
          end
          
          describe " where the user has the role User" do
            
            before(:each) do
              @space = spaces(:private_user)  
            end
            
            it "should let the user to see the users" do
              get :index , :space_id => @space.name
              assert_response 200
            end
          end
          
          describe " where the user has the role Invited" do
            before(:each) do
              @space = spaces(:private_invited)  
            end
            
            it "should let the user to see the users" do
              get :index , :space_id => @space.name
              assert_response 200
            end
          end
          
          describe " where the user has no roles" do
            before(:each) do
              @space = spaces(:private_no_roles)  
            end
            
            it "should NOT let the user to see the users" do
              get :index , :space_id => @space.name
              assert_response 403
            end
          end
        end
        
        describe "in the public space" do
          before(:each) do
            @space = spaces(:public)  
          end
          
          it "should let the user to see the users" do
            get :index , :space_id => @space.name
            assert_response 200
          end
        end
      end
=end

    end
    
    describe " If you are not logged in" do
      describe "in a private space" do
        before(:each) do
          @space = Factory(:private_space)
        end
        it "should NOT let the user to see the users" do
          get :index , :space_id => @space.to_param
          assert_response 302
          response.should redirect_to(new_session_path)
        end
      end

      describe "in the public space" do
        before(:each) do
          @space = Factory(:public_space)
        end

        it "should let the user to see the users " do
          get :index , :space_id => @space.to_param
          assert_response 200
        end
      end
    end
  end

  it "should show user" do
    get :show, :id => Factory(:user).to_param

    assert_response 200
  end
  
  #####################
  
=begin
  
  describe "responding to GET show" do
    
    describe "when you are logged in" do
      describe "as SuperAdmin" do
        before(:each) do
          login_as(:user_admin)
        end
        describe "in a private space" do
          before(:each) do
            @space = spaces(:private_no_roles)
            @user = users(:user_normal2)
          end
          
          it "should let the user to see the account information of a user of this space" do
            get :show, :id => @user.id
            assert_response 200
          end
          
          it "should redirect to the associated user view" do
            get :show , :id => @user.id
            response.should render_template("show")
          end
          
        end
        
        describe "in the public space" do
          before(:each) do
            @space = spaces(:public)
            @user = users(:user_normal2)
          end
          
          it "should let the user to see the account information of a user of this space" do
            get :show, :id => @user.id
            assert_response 200
          end
          
          it "should redirect to the associated user view" do
            get :show, :id => @user.id
            response.should render_template("show")
          end    
        end
    
      end
      describe "as normal_user" do
        before(:each) do
          login_as(:user_normal)
        end
        describe "in a private space where the user has the role Admin " do
          before(:each) do
            @space = spaces(:private_admin)
            @user = users(:user_normal2)
          end
          
          it "should not let the user to see the account information of a user of this space" do
            get :show , :id => @user.id
            assert_response 403
          end
          
        end
        
        describe "in a private space where the user has the role User" do
          before(:each) do
            @space = spaces(:private_user)
            @user = users(:user_normal2)
          end
          
          it "should not let the user to see the account information of a user of this space" do
            get :show, :id => @user.id
            assert_response 403
          end
          
        end
        describe "in a private space where the user has the role Invited " do
          before(:each) do
            @space = spaces(:private_invited)
            @user = users(:user_normal2)
          end
          
          it "should not let the user to see the account information of a user of this space" do
            get :show, :id => @user.id
            assert_response 403
          end
          
        end
        
        describe "in a private space where the user has not any roles" do
          before(:each) do
            @space = spaces(:private_no_roles)
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to see the account information of a user of this space" do
            get :show , :id => @user.id
            assert_response 403
          end       
        end
        
        describe "without space" do
          before(:each) do
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to see the account information of a user of this space" do
            get :show, :id => @user.id
            assert_response 403
          end     
        end
        
        
        describe "in the public space" do
          
          before(:each) do
            @space = spaces(:public)
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to see the account information of a user of this space" do
            get :show, :id => @user.id
            assert_response 403
          end   
        end 
      end 
    end
    
    describe "if you are not logged in" do
      describe "in a private space" do
        before(:each) do
          @space = spaces(:private_no_roles)
          @user = users(:user_normal2)
        end
        
        it "should NOT let the user to see the account information of a user of this space" do
          get :show, :id => @user.id
          assert_response 403
        end
      end
      
      describe "in the public space" do
        before(:each) do
          @space = spaces(:public)
          @user = users(:user_normal2)
        end
        
        it "should NOT let the user to see the account information of a user of this space" do
          get :show,  :id => @user.id
          assert_response 403
        end  
      end 
    end   
  end
  
  ##########################
  
=end

  describe "responding to GET new" do
    describe "when you are logged in" do
      describe "as super Admin" do
        before(:each)do
          login_as Factory(:superuser)
        end
        
        it "should let the user to create a new account" do
          get :new
          assert_response 200
        end    
      end
      
      describe "as a normal user" do
        before(:each)do
          login_as Factory(:user)
        end
        
        it "should let the user to create a new account" do
          get :new
          assert_response 200
        end
        
      end
    end
    describe "if you are not logged in" do
      it "should let the user to create a new account" do
        get :new
        assert_response 200
      end
    end
  end
  
=begin
  
  ##########################
  describe "responding to GET edit" do
    describe "when you are logged in" do
      describe "as SuperAdmin" do
        before(:each) do
          login_as(:user_admin)
        end
        describe "in a private space" do
          before(:each) do
            @space = spaces(:private_no_roles)
            @user = users(:user_normal2)
          end
          
          it "should let the user to edit the account information of a user of this space" do
            get :edit, :id => @user.id
            assert_response 200
          end
          
          it "should redirect to the associated user view" do
            get :edit , :id => @user.id
            response.should render_template("edit")
          end
          
        end
        
        describe "in the public space" do
          before(:each) do
            @space = spaces(:public)
            @user = users(:user_normal2)
          end
          
          it "should let the user to edit the account information of a user of this space" do
            get :edit, :id => @user.id
            assert_response 200
          end
          
          it "should redirect to the associated user view" do
            get :edit, :id => @user.id
            response.should render_template("edit")
          end    
        end
    
      end
      describe "as normal_user" do
        before(:each) do
          login_as(:user_normal)
        end
        describe "in a private space where the user has the role Admin " do
          before(:each) do
            @space = spaces(:private_admin)
            @user = users(:user_normal2)
          end
          
          it "should not let the user to edit the account information of a user of this space" do
            get :edit , :id => @user.id
            assert_response 403
          end
          
          it "should let the user to edit his account information" do
            get :edit , :id => users(:user_normal).id
            assert_response 200
          end
          
        end
        
        describe "in a private space where the user has the role User" do
          before(:each) do
            @space = spaces(:private_user)
            @user = users(:user_normal2)
          end
          
          it "should not let the user to edit the account information of a user of this space" do
            get :edit, :id => @user.id
            assert_response 403
          end
          
          it "should let the user to edit his account information" do
            get :edit , :id => users(:user_normal).id
            assert_response 200
          end
          
        end
        describe "in a private space where the user has the role Invited " do
          before(:each) do
            @space = spaces(:private_invited)
            @user = users(:user_normal2)
          end
          
          it "should not let the user to edit the account information of a user of this space" do
            get :edit, :id => @user.id
            assert_response 403
          end
          
          it "should let the user to edit his account information" do
            get :edit , :id => users(:user_normal).id
            assert_response 200
          end
          
        end
        
        describe "in a private space where the user has not any roles" do
          before(:each) do
            @space = spaces(:private_no_roles)
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to edit the account information of a user of this space" do
            get :edit , :id => @user.id
            assert_response 403
          end
          
          it "should let the user to edit his account information" do
            get :edit , :id => users(:user_normal).id
            assert_response 200
          end
        end
        
        describe "without space" do
          before(:each) do
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to edit the account information of a user of this space" do
            get :edit, :id => @user.id
            assert_response 403
          end
          
          it "should let the user to edit his account information" do
            get :edit , :id => users(:user_normal).id
            assert_response 200
          end
          
        end
        
        
        describe "in the public space" do
          
          before(:each) do
            @space = spaces(:public)
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to edit the account information of a user of this space" do
            get :edit, :id => @user.id
            assert_response 403
          end
          
          it "should let the user to edit his account information" do
            get :edit , :id => users(:user_normal).id
            assert_response 200
          end
          
        end 
      end 
    end
    
    describe "if you are not logged in" do
      describe "in a private space" do
        before(:each) do
          @space = spaces(:private_no_roles)
          @user = users(:user_normal2)
        end
        
        it "should NOT let the user to edit the account information of a user of this space" do
          get :edit, :id => @user.id
          assert_response 401
        end
      end
      
      describe "in the public space" do
        before(:each) do
          @space = spaces(:public)
          @user = users(:user_normal2)
        end
        
        it "should NOT let the user to edit the account information of a user of this space" do
          get :edit,  :id => @user.id
           assert_response 401
        end  
      end 
    end            
  end
  
  #################
  
  describe "responding to POST create" do
    
    describe "with valid params" do
      before(:each)do
        @valid_attributes = {:login => 'pepe',:password => '1234', :password_confirmation => '1234',:email => 'pepe@gmail.com'}
      end
      describe "when you are logged in" do
        describe "as super Admin" do
          before(:each)do
            login_as(:user_admin)
          end
        
          it "should let the user to create a new account and redirect to the root path" do
            assert_difference 'User.count' do
              post :create, :user=> @valid_attributes
              response.should redirect_to(root_path())
            end
          end    
        end
      
        describe "as a normal user" do
          before(:each)do
            login_as(:user_normal)
          end
        
          it "should let the user to create a new account and redirect to the root path" do
            assert_difference 'User.count' do
              post :create, :user=> @valid_attributes
              response.should redirect_to(root_path())
            end
          end        
        end
      end
      describe "if you are not logged in" do
        it "should let the user to create a new account and redirect to the root path" do
          assert_difference 'User.count' do
            post :create, :user => @valid_attributes
            response.should redirect_to(root_path())
          end
        end
      end              
    end
    
    describe "with invalid params" do
      
      before(:each)do
        @invalid_attributes = {}
      end
      
      describe "when you are logged in" do
        describe "as super Admin" do
          before(:each)do
            login_as(:user_admin)
          end
        
          it "should NOT let the user to create a new account" do
            assert_no_difference 'User.count' do
              post :create, :user=> @invalid_attributes
              response.should render_template("new")
            end
          end    
        end
      
        describe "as a normal user" do
          before(:each)do
            login_as(:user_normal)
          end
        
          it "should NOT let the user to create a new account" do
            assert_no_difference 'User.count' do
              post :create, :user=> @invalid_attributes
              response.should render_template("new")
            end
          end        
        end
      end
      describe "if you are not logged in" do
        it "should NOT let the user to create a new account" do
          assert_no_difference 'User.count' do
            post :create, :user => @invalid_attributes
            response.should render_template("new")            
          end
        end
      end                  
    end
  end
  
  
  ####################
  
  describe "responding to PUT udpate" do
    
    describe "with valid params" do
      before(:each)do
        @valid_attributes = {:email => 'pepe@gmail.com', :login => 'antonio'}
      end      
      describe "when you are logged in" do
        describe "as SuperAdmin" do
          before(:each) do
            login_as(:user_admin)
          end
          describe "in a private space" do
            before(:each) do
              @space = spaces(:private_no_roles)
              @user = users(:user_normal2)
              session[:space_id] = @space.name
            end
          
            it "should let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @valid_attributes              
              response.should redirect_to(space_users_path(@space))
            end
          end
        
          describe "in the public space" do
            before(:each) do
              @space = spaces(:public)
              @user = users(:user_normal2)
              session[:space_id] = @space.name
            end
          
            it "should let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @valid_attributes
              response.should redirect_to(space_users_path(@space))
            end
          end
    
        end
        describe "as normal_user" do
          before(:each) do
            login_as(:user_normal)
          end
          describe "in a private space where the user has the role Admin " do
            before(:each) do
              @space = spaces(:private_admin)
              @user = users(:user_normal2)
              session[:space_id] = @space.name
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update , :id => @user.id, :user => @valid_attributes
              assert_response 403
            end
            
            it "should let the user to UPDATE his account information" do
              put :update , :id => users(:user_normal).id, :user => @valid_attributes
              response.should redirect_to(space_user_profile_path(@space,users(:user_normal)))
            end
          end
        
          describe "in a private space where the user has the role User" do
            before(:each) do
              @space = spaces(:private_user)
              @user = users(:user_normal2)
              session[:space_id] = @space.name
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @valid_attributes
              assert_response 403
            end
            it "should let the user to UPDATE his account information" do
              put :update , :id => users(:user_normal).id, :user => @valid_attributes
              response.should redirect_to(space_user_profile_path(@space,users(:user_normal)))
            end
          
          end
          describe "in a private space where the user has the role Invited " do
            before(:each) do
              @space = spaces(:private_invited)
              @user = users(:user_normal2)
              session[:space_id] = @space.name
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @valid_attributes
              assert_response 403
            end
            
            it "should let the user to UPDATE his account information" do
              put :update , :id => users(:user_normal).id, :user => @valid_attributes
              response.should redirect_to(space_user_profile_path(@space,users(:user_normal)))
            end
          
          end
        
          describe "in a private space where the user has not any roles" do
            before(:each) do
              @space = spaces(:private_no_roles)
              @user = users(:user_normal2)
              session[:space_id] = @space.name
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update , :id => @user.id, :user => @valid_attributes
              assert_response 403
            end
            
            it "should let the user to UPDATE his account information" do
              put :update , :id => users(:user_normal).id, :user => @valid_attributes
              response.should redirect_to(space_user_profile_path(@space,users(:user_normal)))
            end
            
          end
        
          describe "without space" do
            before(:each) do
              @user = users(:user_normal2)                          
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @valid_attributes
              assert_response 403
            end
            
            it "should let the user to UPDATE his account information" do
              put :update , :id => users(:user_normal).id, :user => @valid_attributes
              #no tiene mucho sentido este test
              response.should redirect_to(space_user_profile_path(nil,users(:user_normal)))
            end
          end
        
        
          describe "in the public space" do
          
            before(:each) do
              @space = spaces(:public)
              @user = users(:user_normal2)
              session[:space_id] = @space.name
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @valid_attributes
              assert_response 403
            end
            
            it "should let the user to UPDATE his account information" do
              put :update , :id => users(:user_normal).id, :user => @valid_attributes
              response.should redirect_to(space_user_profile_path(@space,users(:user_normal)))
            end
            
          end 
        end 
      end
    
      describe "if you are not logged in" do
        describe "in a private space" do
          before(:each) do
            @space = spaces(:private_no_roles)
            @user = users(:user_normal2)
          end
        
          it "should NOT let the user to UPDATE the account information of a user of this space" do
            put :update, :id => @user.id, :user => @valid_attributes
            assert_response 401
          end
        end
      
        describe "in the public space" do
          before(:each) do
            @space = spaces(:public)
            @user = users(:user_normal2)
          end
        
          it "should NOT let the user to UDATE the account information of a user of this space" do
            put :update,  :id => @user.id, :user => @valid_attributes
            assert_response 401
          end  
        end 
      end            
    end
    
    describe "with invalid params" do
      before(:each)do
         @invalid_attributes = {:email => ''}
      end
      describe "when you are logged in" do
        describe "as SuperAdmin" do
          before(:each) do
            login_as(:user_admin)
          end
          describe "in a private space" do
            before(:each) do
              @space = spaces(:private_no_roles)
              @user = users(:user_normal2)
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @invalid_attributes
              response.should render_template("edit")
            end
          end
        
          describe "in the public space" do
            before(:each) do
              @space = spaces(:public)
              @user = users(:user_normal2)
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @invalid_attributes
              response.should render_template("edit")
            end  
          end
    
        end
        describe "as normal_user" do
          before(:each) do
            login_as(:user_normal)
          end
          describe "in a private space where the user has the role Admin " do
            before(:each) do
              @space = spaces(:private_admin)
              @user = users(:user_normal2)
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update , :id => @user.id, :user => @invalid_attributes
              assert_response 403
            end
          
          end
        
          describe "in a private space where the user has the role User" do
            before(:each) do
              @space = spaces(:private_user)
              @user = users(:user_normal2)
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @invalid_attributes
              assert_response 403
            end
          
          end
          describe "in a private space where the user has the role Invited " do
            before(:each) do
              @space = spaces(:private_invited)
              @user = users(:user_normal2)
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @invalid_attributes
              assert_response 403
            end
          
          end
        
          describe "in a private space where the user has not any roles" do
            before(:each) do
              @space = spaces(:private_no_roles)
              @user = users(:user_normal2)
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update , :id => @user.id, :user => @invalid_attributes
              assert_response 403
            end       
          end
        
          describe "without space" do
            before(:each) do
              @user = users(:user_normal2)
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @invalid_attributes
              assert_response 403
            end     
          end
        
        
          describe "in the public space" do
          
            before(:each) do
              @space = spaces(:public)
              @user = users(:user_normal2)
            end
          
            it "should NOT let the user to UPDATE the account information of a user of this space" do
              put :update, :id => @user.id, :user => @invalid_attributes
              assert_response 403
            end   
          end 
        end 
      end
    
      describe "if you are not logged in" do
        describe "in a private space" do
          before(:each) do
            @space = spaces(:private_no_roles)
            @user = users(:user_normal2)
          end
        
          it "should NOT let the user to UPDATE the account information of a user of this space" do
            put :update, :id => @user.id, :user => @invalid_attributes
            assert_response 401
          end
        end
      
        describe "in the public space" do
          before(:each) do
            @space = spaces(:public)
            @user = users(:user_normal2)
          end
        
          it "should NOT let the user to UDATE the account information of a user of this space" do
            put :update,  :id => @user.id, :user => @invalid_attributes
            assert_response 401
          end  
        end 
      end            
    end
  end
  
  ##################################
  
  describe "responding to DELETE destroy" do
    describe "when you are logged in" do
      describe "as SuperAdmin" do
        before(:each) do
          login_as(:user_admin)
        end
        describe "in a private space" do
          before(:each) do
            @space = spaces(:private_no_roles)
            @user = users(:user_normal2)
            session[:space_id] = @space.name
          end
          
          it "should let the user to DELETE the account information of a user of this space and redirect to the user list" do
            assert_difference 'User.count', -1 do
              delete :destroy, :id => @user.id
              response.should redirect_to(space_users_path(@space))
            end
          end        
        end
        
        describe "in the public space" do
          before(:each) do
            @space = spaces(:public)
            @user = users(:user_normal2)
            session[:space_id] = @space.name
          end
          
          it "should let the user to DELETE the account information of a user of this space and redirect to the user list" do
            assert_difference 'User.count', -1 do
              delete :destroy, :id => @user.id
              response.should redirect_to(space_users_path(@space))
            end
          end           
        end    
      end
      describe "as normal_user" do
        before(:each) do
          login_as(:user_normal)
        end
        describe "in a private space where the user has the role Admin " do
          before(:each) do
            @space = spaces(:private_admin)
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to DELETE the account information of a user of this space" do
            assert_no_difference 'User.count' do
              delete :destroy , :id => @user.id
              assert_response 403
            end
          end          
        end
        
        describe "in a private space where the user has the role User" do
          before(:each) do
            @space = spaces(:private_user)
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to DELETE the account information of a user of this space" do
            assert_no_difference 'User.count' do
              delete :destroy, :id => @user.id
              assert_response 403
            end
          end
          
        end
        describe "in a private space where the user has the role Invited " do
          before(:each) do
            @space = spaces(:private_invited)
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to DELETE the account information of a user of this space" do
            assert_no_difference 'User.count' do
              delete :destroy, :id => @user.id
              assert_response 403
            end
          end
          
        end
        
        describe "in a private space where the user has not any roles" do
          before(:each) do
            @space = spaces(:private_no_roles)
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to DELETE the account information of a user of this space" do
            assert_no_difference 'User.count' do
              delete :destroy , :id => @user.id
              assert_response 403
            end
          end       
        end
        
        describe "without space" do
          before(:each) do
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to DELETE the account information of a user of this space" do
            assert_no_difference 'User.count' do
              delete :destroy, :id => @user.id
              assert_response 403
            end
          end     
        end
        
        
        describe "in the public space" do
          
          before(:each) do
            @space = spaces(:public)
            @user = users(:user_normal2)
          end
          
          it "should NOT let the user to DELETE the account information of a user of this space" do
            assert_no_difference 'User.count' do
              delete :destroy, :id => @user.id
              assert_response 403
            end
          end   
        end 
      end 
    end
    
    describe "if you are not logged in" do
      describe "in a private space" do
        before(:each) do
          @space = spaces(:private_no_roles)
          @user = users(:user_normal2)
        end
        
        it "should NOT let the user to DELETE the account information of a user of this space" do
          assert_no_difference 'User.count' do
            delete :destroy, :id => @user.id
            assert_response 401
          end
        end
      end
      
      describe "in the public space" do
        before(:each) do
          @space = spaces(:public)
          @user = users(:user_normal2)
        end
        
        it "should NOT let the user to DELETE the account information of a user of this space" do
          assert_no_difference 'User.count' do
            delete :destroy,  :id => @user.id
            assert_response 401
          end
        end  
      end 
    end         
  end   
=end
end