Group user accounts by role

Replaces the two-way admin/user split with four groups ordered by
capability: administration, Redaktion, editors, alumni. alumni takes
precedence over capability in role_group, so a retired admin appears at the
bottom rather than the top.

Forms now offer the three roles as checkboxes rather than a single admin
checkbox, with a trailing hidden blank so an empty set can be posted, and
user_params permits roles only for admins. Three create buttons prefill the
common combinations.

1 files changed, 18 insertions, 9 deletions

diff --git a/test/controllers/users_controller_test.rb b/test/controllers/users_controller_test.rb
index 67f7c053..1c5d16fc 100644
--- a/test/controllers/users_controller_test.rb
+++ b/test/controllers/users_controller_test.rb
@@ -9,12 +9,12 @@ class UsersControllerTest < ActionController::TestCase
     assert_select "a", { :count => 0, :text => "Destroy" }
   end
 
-  test "get index as admin user renders admin partial" do
+  test "get index as admin shows every group with per-row actions" do
     login_as :aaron
     get :index
     assert_response :success
     assert_select "button[type=submit]", I18n.t("admin.common.destroy")
-    assert_select "a", "show"
+    assert_select "a", I18n.t("admin.common.show")
   end
  
   test "get new when logged in as admin" do
@@ -60,7 +60,7 @@ class UsersControllerTest < ActionController::TestCase
           :email                  => "foo@bar.com",
           :password               => "xxxzzz",
           :password_confirmation  => "xxxzzz",
-          :admin                  => true
+          :roles                  => ["admin", "redaktion"]
         }
       }
     end
@@ -174,19 +174,17 @@ class UsersControllerTest < ActionController::TestCase
   test "admin user can promote regular users to admins" do
     login_as :aaron
     user = users(:quentin)
-    put :update, params: { :id => user.id, :user => {:admin => true} }
+    put :update, params: { :id => user.id, :user => {:roles => ["admin", "redaktion"]} }
     
-    user.reload
-    assert_equal true, user.is_admin?
+    assert_equal true, user.reload.is_admin?
   end
   
   test "regular users cannot promote themselves to admins" do
     login_as :quentin
     user = users(:quentin)
-    put :update, params: { :id => user.id, :user => {:admin => true} }
+    put :update, params: { :id => user.id, :user => {:roles => ["admin", "redaktion"]} }
     
-    user.reload
-    assert_equal false, user.is_admin?
+    assert_equal false, user.reload.is_admin?
   end
   
   test "reset_otp is admin-only and witnessed" do
@@ -202,4 +200,15 @@ class UsersControllerTest < ActionController::TestCase
     assert_not user.reload.otp_enrolled?
     assert_equal "otp_reset", NodeAction.last.action
   end
+
+  test "index groups a retired admin under alumni, not administration" do
+    login_as :aaron
+    user = users(:quentin)
+    user.update_column(:roles, ["admin", "alumni"])
+
+    get :index
+
+    assert_response :success
+    assert_select "h2", :text => /#{I18n.t("users.index.group_alumni")}/
+  end
 end