More test cases for group ACLs

Author: kjetilk

test/integration/acl-oidc-test.js

@@ -529,16 +529,55 @@ describe('ACL with WebID+OIDC over HTTP', function () {
         done()
       })
     })
-    it('user2 should be able to access test directory',
+    it('user2 should be able to access test directory', function (done) {
+      var options = createOptions('/group/test-folder/', 'user2')
+
+      request.head(options, function (error, response, body) {
+        assert.equal(error, null)
+        assert.equal(response.statusCode, 200)
+        done()
+      })
+    })
+    it('user2 should be able to write a file in the test directory',
       function (done) {
-        var options = createOptions('/group/test-folder/', 'user2')
+        var options = createOptions('/group/test-folder/test.ttl', 'user2')
+        options.body = '<#Dahut> a <https://dbpedia.org/resource/Category:French_legendary_creatures>.\n'
 
-        request.head(options, function (error, response, body) {
+        request.put(options, function (error, response, body) {
           assert.equal(error, null)
-          assert.equal(response.statusCode, 200)
+          assert.equal(response.statusCode, 201)
           done()
         })
       })
+    it('user1 should be able to get the file', function (done) {
+      var options = createOptions('/group/test-folder/test.ttl', 'user1')
+
+      request.get(options, function (error, response, body) {
+        assert.equal(error, null)
+        assert.equal(response.statusCode, 200)
+        done()
+      })
+    })
+    it('user2 should not be able to write to the ACL',
+      function (done) {
+        var options = createOptions('/group/test-folder/.acl', 'user2')
+        options.body = '<#Dahut> a <https://dbpedia.org/resource/Category:French_legendary_creatures>.\n'
+
+        request.put(options, function (error, response, body) {
+          assert.equal(error, null)
+          assert.equal(response.statusCode, 403)
+          done()
+        })
+      })
+    it('user1 should be able to delete the file', function (done) {
+      var options = createOptions('/group/test-folder/test.ttl', 'user1')
+
+      request.delete(options, function (error, response, body) {
+        assert.equal(error, null)
+        assert.equal(response.statusCode, 200) // Should be 204, right?
+        done()
+      })
+    })
   })
 
   describe('Restricted', function () {

test/resources/accounts-acl/tim.localhost/group/test-folder/.acl

@@ -1,7 +1,7 @@
 @prefix : <#>.
 @prefix acl: <http://www.w3.org/ns/auth/acl#>.
 @prefix tes: <./>.
-@prefix c: </profile/card#>.
+@prefix c: <https://tim.localhost:7777/profile/card#>.
 @prefix foaf: <http://xmlns.com/foaf/0.1/>.
 
 :owner
@@ -13,4 +13,4 @@
     acl:accessTo tes:;
     acl:agentGroup <group-listing.ttl#folks>;
     acl:defaultForNew tes:;
-    acl:mode acl:Read.
+    acl:mode acl:Read, acl:Write.