public void Cannot_View_Other_Users_Tasks()
{
Mock<ITaskRepository> mock = new Mock<ITaskRepository>();
UserProfile user1 = new UserProfile { UserId = 1, UserName = "******" };
UserProfile user2 = new UserProfile { UserId = 2, UserName = "******" };
var contextMock = new Mock<ControllerContext>(); //we mock an http context, so we can set our User Identity
mock.Setup(m => m.Tasks).Returns(new Task[] {
new Task {ID = 1, Description = "T1", UserProfile = user1 },
new Task {ID = 2, Description = "T2", UserProfile = user2 },
new Task {ID = 3, Description = "T3", UserProfile = user2 }
}.AsQueryable());
contextMock.SetupGet(p => p.HttpContext.User.Identity.Name).Returns("john-smith");
contextMock.SetupGet(p => p.HttpContext.Request.IsAuthenticated).Returns(true);
TaskController target = new TaskController(mock.Object);
target.ControllerContext = contextMock.Object;
Task[] result = ((IEnumerable<Task>)target.Index().
ViewData.Model).ToArray();
Assert.AreEqual(result.Length, 2);
Assert.AreEqual("T2", result[0].Description);
Assert.AreEqual("T3", result[1].Description);
}
public void Index_Contains_All_Tasks()
{
Mock<ITaskRepository> mock = new Mock<ITaskRepository>();
UserProfile testUser = new UserProfile { UserId = 1, UserName = "******" };
var contextMock = new Mock<ControllerContext>(); //we mock an http context, so we can set our User Identity
mock.Setup(m => m.Tasks).Returns(new Task[] {
new Task {ID = 1, Description = "T1", UserProfile = testUser },
new Task {ID = 2, Description = "T2", UserProfile = testUser },
new Task {ID = 3, Description = "T3", UserProfile = testUser }
}.AsQueryable());
contextMock.SetupGet(p => p.HttpContext.User.Identity.Name).Returns("brad-greene");
contextMock.SetupGet(p => p.HttpContext.Request.IsAuthenticated).Returns(true);
TaskController target = new TaskController(mock.Object);
target.ControllerContext = contextMock.Object; //this will authenticate a user named brad-greene
Task[] result = ((IEnumerable<Task>)target.Index().
ViewData.Model).ToArray();
// Assert
Assert.AreEqual(result.Length, 3);
Assert.AreEqual("T1", result[0].Description);
Assert.AreEqual("T2", result[1].Description);
Assert.AreEqual("T3", result[2].Description);
}