+# frozen_string_literal: true
+
require 'rails_helper'
require 'pundit/rspec'
expect(subject).to_not permit(nil, status)
end
end
+
+ permissions :favourite? do
+ it 'grants access when viewer is not blocked' do
+ follow = Fabricate(:follow)
+ status.account = follow.target_account
+
+ expect(subject).to permit(follow.account, status)
+ end
+
+ it 'denies when viewer is blocked' do
+ block = Fabricate(:block)
+ status.account = block.target_account
+
+ expect(subject).to_not permit(block.account, status)
+ end
+ end
+
+ permissions :index?, :update? do
+ it 'grants access if staff' do
+ expect(subject).to permit(admin.account)
+ end
+
+ it 'denies access unless staff' do
+ expect(subject).to_not permit(alice)
+ end
+ end
end