test(reference_timeline): add ability tests

Author: purfectliterature

app/models/components/course/course_ability_component.rb

@@ -63,11 +63,6 @@ def define_owners_course_permissions
   def allow_owners_managing_course
     can :manage, Course, id: course.id
     can :manage, CourseUser, course_id: course.id
-    can :manage, Course::EnrolRequest,  course_id: course.id
-  end
-
-  def allow_owners_managing_reference_timelines
-    can :manage, Course::ReferenceTimeline, course_id: course.id
-    can :manage, Course::ReferenceTime, reference_timeline: { course_id: course.id }
+    can :manage, Course::EnrolRequest, course_id: course.id
   end
 end

app/models/components/course/timelines_ability_component.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+module Course::TimelinesAbilityComponent
+  include AbilityHost::Component
+
+  def define_permissions
+    allow_owners_managing_reference_timelines if course_user&.manager_or_owner?
+
+    super
+  end
+
+  private
+
+  def allow_owners_managing_reference_timelines
+    can :manage, Course::ReferenceTimeline, course_id: course.id
+    can :manage, Course::ReferenceTime, reference_timeline: { course_id: course.id }
+  end
+end

spec/models/course/reference_timeline_ability_spec.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+require 'rails_helper'
+
+RSpec.describe Course::ReferenceTimeline, type: :model do
+  let(:instance) { create(:instance) }
+
+  with_tenant(:instance) do
+    subject { Ability.new(user, course, course_user) }
+    let(:course) { create(:course) }
+    let(:timeline) { create(:course_reference_timeline, course: course) }
+    let(:item) { create(:course_lesson_plan_item, course: course) }
+    let!(:time) { create(:course_reference_time, reference_timeline: timeline, lesson_plan_item: item) }
+
+    context 'when the user is a Course Student' do
+      let(:course_user) { create(:course_student, course: course) }
+      let(:user) { course_user.user }
+
+      it { is_expected.not_to be_able_to(:manage, timeline) }
+      it { is_expected.not_to be_able_to(:manage, time) }
+    end
+
+    context 'when the user is a Course Teaching Assistant' do
+      let(:course_user) { create(:course_teaching_assistant, course: course) }
+      let(:user) { course_user.user }
+
+      it { is_expected.not_to be_able_to(:manage, timeline) }
+      it { is_expected.not_to be_able_to(:manage, time) }
+    end
+
+    context 'when the user is a Course Observer' do
+      let(:course_user) { create(:course_observer, course: course) }
+      let(:user) { course_user.user }
+
+      it { is_expected.not_to be_able_to(:manage, timeline) }
+      it { is_expected.not_to be_able_to(:manage, time) }
+    end
+
+    context 'when the user is a Course Manager' do
+      let(:course_user) { create(:course_manager, course: course) }
+      let(:user) { course_user.user }
+
+      it { is_expected.to be_able_to(:manage, timeline) }
+      it { is_expected.to be_able_to(:manage, time) }
+    end
+  end
+end