Feature: Share spaces As the owner of a space I want to be able to add members to a space, and to remove access for them So that I can manage the access to the space Background: Given these users have been created with default attributes: | username | | Alice | | Brian | | Bob | And the administrator has assigned the role "Space Admin" to user "Alice" using the Graph API And user "Alice" has created a space "share space" with the default quota using the Graph API And using spaces DAV path Scenario Outline: space admin can share a space to another user When user "Alice" shares a space "share space" with settings: | shareWith | Brian | | role | | Then the HTTP status code should be "200" And the OCS status code should be "200" And the OCS status message should be "OK" And the user "Brian" should have a space called "share space" Examples: | space-role | | manager | | editor | | viewer | Scenario: user can see who has been granted access When user "Alice" shares a space "share space" with settings: | shareWith | Brian | | role | viewer | Then the user "Alice" should have a space called "share space" granted to user "Brian" with role "viewer" Scenario: user can see that the group has been granted access Given group "sales" has been created When user "Alice" shares a space "share space" with settings: | shareWith | sales | | shareType | 8 | | role | viewer | Then the HTTP status code should be "200" And the OCS status code should be "200" And the user "Alice" should have a space called "share space" granted to group "sales" with role "viewer" Scenario: user can see a file in a received shared space Given user "Alice" has uploaded a file inside space "share space" with content "Test" to "test.txt" And user "Alice" has created a folder "Folder Main" in space "share space" When user "Alice" shares a space "share space" with settings: | shareWith | Brian | | role | viewer | Then for user "Brian" the space "share space" should contain these entries: | test.txt | | Folder Main | Scenario: user unshares a space Given user "Alice" has sent the following space share invitation: | space | share space | | sharee | Brian | | shareType | user | | permissionsRole | Space Viewer | When user "Alice" unshares a space "share space" to user "Brian" Then the HTTP status code should be "200" But the user "Brian" should not have a space called "share space" Scenario Outline: owner of a space cannot see the space after removing his access to the space Given user "Alice" has sent the following space share invitation: | space | share space | | sharee | Brian | | shareType | user | | permissionsRole | Manager | When user "" unshares a space "share space" to user "Alice" Then the HTTP status code should be "200" But the user "Alice" should not have a space called "share space" Examples: | user | | Alice | | Brian | Scenario: user can add another user to the space managers to enable him Given user "Alice" has uploaded a file inside space "share space" with content "Test" to "test.txt" When user "Alice" shares a space "share space" with settings: | shareWith | Brian | | role | manager | Then the user "Brian" should have a space called "share space" granted to "Brian" with role "manager" When user "Brian" shares a space "share space" with settings: | shareWith | Bob | | role | viewer | Then the user "Bob" should have a space called "share space" granted to "Bob" with role "viewer" And for user "Bob" the space "share space" should contain these entries: | test.txt | Scenario Outline: user cannot share a disabled space to another user Given user "Alice" has disabled a space "share space" When user "Alice" shares a space "share space" with settings: | shareWith | Brian | | role | | Then the HTTP status code should be "404" And the OCS status code should be "404" And the OCS status message should be "Wrong path, file/folder doesn't exist" But the user "Brian" should not have a space called "share space" Examples: | space-role | | manager | | editor | | viewer | Scenario Outline: user with manager role can share a space to another user Given user "Alice" has sent the following space share invitation: | space | share space | | sharee | Brian | | shareType | user | | permissionsRole | Manager | When user "Brian" shares a space "share space" with settings: | shareWith | Bob | | role | | Then the HTTP status code should be "200" And the OCS status code should be "200" And the OCS status message should be "OK" And the user "Bob" should have a space called "share space" Examples: | space-role | | manager | | editor | | viewer | Scenario Outline: user with editor or viewer role cannot share a space to another user Given user "Alice" has sent the following space share invitation: | space | share space | | sharee | Brian | | shareType | user | | permissionsRole | | When user "Brian" shares a space "share space" with settings: | shareWith | Bob | | role | | Then the HTTP status code should be "403" And the OCS status code should be "403" And the OCS status message should be "No share permission" And the user "Bob" should not have a space called "share space" Examples: | space-role | share-space-role | | Space Editor | manager | | Space Editor | editor | | Space Editor | viewer | | Space Viewer | manager | | Space Viewer | editor | | Space Viewer | viewer | Scenario Outline: space manager can change the role of space members Given user "Alice" has sent the following space share invitation: | space | share space | | sharee | Brian | | shareType | user | | permissionsRole | | When user "Alice" shares a space "share space" with settings: | shareWith | Brian | | role | | Then the HTTP status code should be "200" And the OCS status code should be "200" And the user "Alice" should have a space called "share space" granted to "Brian" with role "" Examples: | space-role | share-space-role | | Space Editor | manager | | Space Editor | viewer | | Space Viewer | manager | | Space Viewer | editor | | Manager | editor | | Manager | viewer | Scenario Outline: user without manager role cannot change the role of space members Given user "Alice" has sent the following space share invitation: | space | share space | | sharee | Brian | | shareType | user | | permissionsRole | | And user "Alice" has sent the following space share invitation: | space | share space | | sharee | Bob | | shareType | user | | permissionsRole | Space Viewer | When user "Brian" updates the space "share space" with settings: | shareWith | Bob | | role | | Then the HTTP status code should be "403" And the OCS status code should be "403" And the user "Alice" should have a space called "share space" granted to "Bob" with role "viewer" Examples: | space-role | share-space-role | | Space Editor | manager | | Space Editor | viewer | | Space Viewer | manager | | Space Viewer | editor | Scenario Outline: user shares a space with a group Given group "group2" has been created And the administrator has added a user "Brian" to the group "group2" using the Graph API And the administrator has added a user "Bob" to the group "group2" using the Graph API When user "Alice" shares a space "share space" with settings: | shareWith | group2 | | shareType | 8 | | role | | Then the HTTP status code should be "200" And the user "Brian" should have a space called "share space" And the user "Bob" should have a space called "share space" Examples: | space-role | | manager | | editor | | viewer | Scenario Outline: user has no access to the space if access for the group has been removed Given group "group2" has been created And the administrator has added a user "Brian" to the group "group2" using the Graph API And user "Alice" has sent the following space share invitation: | space | share space | | sharee | group2 | | shareType | group | | permissionsRole | | When user "Alice" unshares a space "share space" to group "group2" Then the HTTP status code should be "200" And the user "Brian" should not have a space called "share space" Examples: | space-role | | Manager | | Space Editor | | Space Viewer | Scenario: user has no access to the space if he has been removed from the group Given group "group2" has been created And the administrator has added a user "Brian" to the group "group2" using the Graph API And the administrator has added a user "Bob" to the group "group2" using the Graph API And user "Alice" has sent the following space share invitation: | space | share space | | sharee | group2 | | shareType | group | | permissionsRole | Space Editor | When the administrator removes the following users from the following groups using the Graph API | username | groupname | | Brian | group2 | Then the HTTP status code of responses on all endpoints should be "204" And the user "Brian" should not have a space called "share space" But the user "Bob" should have a space called "share space" Scenario: users don't have access to the space if the group has been deleted Given group "group2" has been created And the administrator has added a user "Brian" to the group "group2" using the Graph API And the administrator has added a user "Bob" to the group "group2" using the Graph API And user "Alice" has sent the following space share invitation: | space | share space | | sharee | group2 | | shareType | group | | permissionsRole | Space Editor | When the administrator deletes group "group2" using the Graph API Then the HTTP status code should be "204" And the user "Bob" should not have a space called "share space" And the user "Brian" should not have a space called "share space" Scenario: user increases permissions for one member of the group or for the entire group Given group "sales" has been created And the administrator has added a user "Brian" to the group "sales" using the Graph API And user "Alice" has sent the following space share invitation: | space | share space | | sharee | sales | | shareType | group | | permissionsRole | Space Viewer | When user "Brian" uploads a file inside space "share space" with content "Test" to "test.txt" using the WebDAV API Then the HTTP status code should be "403" When user "Alice" shares a space "share space" with settings: | shareWith | Brian | | role | editor | Then the HTTP status code should be "200" When user "Brian" uploads a file inside space "share space" with content "Test" to "test.txt" using the WebDAV API Then the HTTP status code should be "201" Scenario: user increases permissions for the group, so the user's permissions are increased Given group "sales" has been created And the administrator has added a user "Brian" to the group "sales" using the Graph API And user "Alice" has sent the following space share invitation: | space | share space | | sharee | Brian | | shareType | user | | permissionsRole | Space Viewer | When user "Brian" uploads a file inside space "share space" with content "Test" to "test.txt" using the WebDAV API Then the HTTP status code should be "403" When user "Alice" shares a space "share space" with settings: | shareWith | sales | | shareType | 8 | | role | editor | Then the HTTP status code should be "200" When user "Brian" uploads a file inside space "share space" with content "Test" to "test.txt" using the WebDAV API Then the HTTP status code should be "201" Scenario Outline: space Admin can share a space to the user with an expiration date When user "Alice" shares a space "share space" with settings: | shareWith | Brian | | role | | | expireDate | 2042-03-25T23:59:59+0100 | Then the HTTP status code should be "200" And the user "Brian" should have a space called "share space" granted to user "Brian" with role "" and expiration date "2042-03-25" Examples: | space-role | | manager | | editor | | viewer | Scenario Outline: space Admin can share a space to the group with an expiration date Given group "sales" has been created And the administrator has added a user "Brian" to the group "sales" using the Graph API When user "Alice" shares a space "share space" with settings: | shareWith | sales | | shareType | 8 | | role | | | expireDate | 2042-03-25T23:59:59+0100 | Then the HTTP status code should be "200" And the user "Brian" should have a space called "share space" granted to group "sales" with role "" and expiration date "2042-03-25" Examples: | space-role | | manager | | editor | | viewer | Scenario Outline: update the expiration date of a space in user share Given user "Alice" has sent the following space share invitation: | space | share space | | sharee | Brian | | shareType | user | | permissionsRole | | | expirationDateTime | 2042-03-25T23:59:59.000Z | When user "Alice" updates the space "share space" with settings: | shareWith | Brian | | expireDate | 2044-01-01T23:59:59.999+01:00 | | role | | Then the HTTP status code should be "200" And the user "Brian" should have a space called "share space" granted to user "Brian" with role "" and expiration date "2044-01-01" Examples: | space-role | share-space-role | | Manager | manager | | Space Editor | editor | | Space Viewer | viewer | Scenario Outline: update the expiration date of a space in group share Given group "sales" has been created And the administrator has added a user "Brian" to the group "sales" using the Graph API And user "Alice" has sent the following space share invitation: | space | share space | | sharee | sales | | shareType | group | | permissionsRole | | | expirationDateTime | 2042-03-25T23:59:59.000Z | When user "Alice" updates the space "share space" with settings: | shareWith | sales | | shareType | 8 | | expireDate | 2044-01-01T23:59:59.999+01:00 | | role | | Then the HTTP status code should be "200" And the user "Brian" should have a space called "share space" granted to group "sales" with role "" and expiration date "2044-01-01" Examples: | space-role | share-space-role | | Manager | manager | | Space Editor | editor | | Space Viewer | viewer | Scenario Outline: delete the expiration date of a space in user share Given user "Alice" has sent the following space share invitation: | space | share space | | sharee | Brian | | shareType | user | | permissionsRole | | | expirationDateTime | 2042-03-25T23:59:59.000Z | When user "Alice" updates the space "share space" with settings: | shareWith | Brian | | expireDate | | | role | | Then the HTTP status code should be "200" And the user "Brian" should have a space called "share space" granted to user "Brian" with role "" and expiration date "" Examples: | space-role | share-space-role | | Manager | manager | | Space Editor | editor | | Space Viewer | viewer | Scenario Outline: delete the expiration date of a space in group share Given group "sales" has been created And the administrator has added a user "Brian" to the group "sales" using the Graph API And user "Alice" has sent the following space share invitation: | space | share space | | sharee | sales | | shareType | group | | permissionsRole | | | expirationDateTime | 2042-03-25T23:59:59.000Z | When user "Alice" updates the space "share space" with settings: | shareWith | sales | | shareType | 8 | | expireDate | | | role | | Then the HTTP status code should be "200" And the user "Brian" should have a space called "share space" granted to group "sales" with role "" and expiration date "" Examples: | space-role | share-space-role | | Manager | manager | | Space Editor | editor | | Space Viewer | viewer | Scenario Outline: check the end of expiration of a space in user share Given user "Alice" has sent the following space share invitation: | space | share space | | sharee | Brian | | shareType | user | | permissionsRole | | | expirationDateTime | 2042-03-25T23:59:59.000Z | When user "Alice" expires the user share of space "share space" for user "Brian" Then the HTTP status code should be "200" And the user "Brian" should not have a space called "share space" Examples: | space-role | | Manager | | Space Editor | | Space Viewer | Scenario Outline: check the end of expiration of a space in group share Given group "sales" has been created And the administrator has added a user "Brian" to the group "sales" using the Graph API And user "Alice" has sent the following space share invitation: | space | share space | | sharee | sales | | shareType | group | | permissionsRole | | | expirationDateTime | 2042-03-25T23:59:59.000Z | When user "Alice" expires the group share of space "share space" for group "sales" Then the HTTP status code should be "200" And the user "Brian" should not have a space called "share space" Examples: | space-role | | Manager | | Space Editor | | Space Viewer | Scenario Outline: user cannot share the personal space to an other user Given the administrator has assigned the role "" to user "Brian" using the Graph API When user "Brian" shares a space "Brian Murphy" with settings: | shareWith | Bob | | role | viewer | Then the HTTP status code should be "400" And the OCS status message should be "can not add members to personal spaces" And the user "Bob" should not have a space called "Brian Murphy" Examples: | user-role | | Space Admin | | Admin | | User | Scenario: user cannot share the personal space to a group Given group "sales" has been created And the administrator has added a user "Brian" to the group "sales" using the Graph API When user "Alice" shares a space "Alice Hansen" with settings: | shareWith | sales | | shareType | 8 | | role | manager | Then the HTTP status code should be "400" And the OCS status message should be "can not add members to personal spaces" And the user "Brian" should not have a space called "Alice Hansen" Scenario: last space manager cannot change his role Given user "Alice" has sent the following space share invitation: | space | share space | | sharee | Brian | | shareType | user | | permissionsRole | Manager | When user "Alice" updates the space "share space" with settings: | shareWith | Alice | | role | editor | Then the HTTP status code should be "200" And the OCS status code should be "200" When user "Brian" updates the space "share space" with settings: | shareWith | Brian | | role | editor | Then the HTTP status code should be "403" And the OCS status code should be "403" And the user "Alice" should have a space called "share space" granted to "Brian" with role "manager" And the user "Alice" should have a space called "share space" granted to "Alice" with role "editor"