nextcloud-server/cypress/e2e/files_versions/version_deletion.cy.ts

/**
 * SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
 * SPDX-License-Identifier: AGPL-3.0-or-later
 */

import type { User } from '@nextcloud/cypress'
import { doesNotHaveAction, openVersionsPanel, setupTestSharedFileFromUser, uploadThreeVersions, deleteVersion } from './filesVersionsUtils'
import { navigateToFolder, getRowForFile } from '../files/FilesUtils'

describe('Versions restoration', () => {
	const folderName = 'shared_folder'
	const randomFileName = Math.random().toString(36).replace(/[^a-z]+/g, '').substring(0, 10) + '.txt'
	const randomFilePath = `/${folderName}/${randomFileName}`
	let user: User
	let versionCount = 0

	before(() => {
		cy.createRandomUser()
			.then((_user) => {
				user = _user
				cy.mkdir(user, `/${folderName}`)
				uploadThreeVersions(user, randomFilePath)
				uploadThreeVersions(user, randomFilePath)
				versionCount = 6
				cy.login(user)
				cy.visit('/apps/files')
				navigateToFolder(folderName)
				openVersionsPanel(randomFilePath)
			})
	})

	it('Delete initial version', () => {
		cy.get('[data-files-versions-version]').should('have.length', versionCount)
		deleteVersion(2)
		versionCount--
		cy.get('[data-files-versions-version]').should('have.length', versionCount)
	})

	context('Delete versions of shared file', () => {
		it('Works with delete permission', () => {
			setupTestSharedFileFromUser(user, folderName, { delete: true })
			navigateToFolder(folderName)
			openVersionsPanel(randomFilePath)

			cy.get('[data-files-versions-version]').should('have.length', versionCount)
			deleteVersion(2)
			versionCount--
			cy.get('[data-files-versions-version]').should('have.length', versionCount)
		})

		it('Does not work without delete permission', () => {
			setupTestSharedFileFromUser(user, folderName, { delete: false })
			navigateToFolder(folderName)
			openVersionsPanel(randomFilePath)

			doesNotHaveAction(0, 'delete')
			doesNotHaveAction(1, 'delete')
			doesNotHaveAction(2, 'delete')
		})

		it('Does not work without delete permission through direct API access', () => {
			let hostname: string
			let fileId: string|undefined
			let versionId: string|undefined

			setupTestSharedFileFromUser(user, folderName, { delete: false })
				.then(recipient => {
					navigateToFolder(folderName)
					openVersionsPanel(randomFilePath)

					cy.url().then(url => { hostname = new URL(url).hostname })
					getRowForFile(randomFileName).invoke('attr', 'data-cy-files-list-row-fileid').then(_fileId => { fileId = _fileId })
					cy.get('[data-files-versions-version]').eq(1).invoke('attr', 'data-files-versions-version').then(_versionId => { versionId = _versionId })

					cy.then(() => {
						cy.logout()
						cy.request({
							method: 'DELETE',
							auth: { user: recipient.userId, pass: recipient.password },
							headers: {
								cookie: '',
							},
							url: `http://${hostname}/remote.php/dav/versions/${recipient.userId}/versions/${fileId}/${versionId}`,
							failOnStatusCode: false,
						})
							.then(({ status }) => {
								expect(status).to.equal(403)
							})
					})
				})
		})
	})
})