tap/spec/models/ability_spec.rb

require 'cancan/matchers'

describe User do
  describe 'abilities' do
    subject(:ability){ Ability.new(user) }
    let(:user) { nil}

    describe 'as admin' do
      let(:user) { create :admin }

      it{ should be_able_to(:manage, Product.new) }
      it{ should be_able_to(:manage, Order.new) }
      it{ should be_able_to(:manage, Stock.new) }
      it{ should be_able_to(:manage, User.new) }
    end

    describe 'as normal user' do
      let(:user) { create :user }

      it{ should be_able_to(:read, Product.new) }
      it{ should_not be_able_to(:manage, Product.new) }

      it{ should be_able_to(:create, Order.new(user: user)) }
      it{ should be_able_to(:delete, Order.new(user: user, created_at: (Rails.application.config.call_api_after - 1.minutes).ago)) }
      it{ should_not be_able_to(:delete, Order.new(user: user, created_at: 10.minutes.ago)) }
      it{ should_not be_able_to(:manage, Order.new) }

      it{ should_not be_able_to(:manage, Stock.new) }

      it{ should be_able_to(:manage, user) }
      it{ should_not be_able_to(:manage, User.new) }
    end

    describe 'as koelkast' do
      let(:user) { create :koelkast }

      it{ should_not be_able_to(:manage, Product.new) }
      it{ should be_able_to(:manage, Order.new) }
      it{ should_not be_able_to(:manage, Stock.new) }
      it{ should_not be_able_to(:manage, User.new) }
    end
  end
end