# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
#
# This Source Code Form is "Incompatible With Secondary Licenses", as
# defined by the Mozilla Public License, v. 2.0.

use strict;
use warnings;
use lib qw(lib ../../lib ../../local/lib/perl5);

use Test::More "no_plan";

use QA::Util;

my ($sel, $config) = get_selenium();

# First make sure the 'My QA query' saved search is gone.

log_in($sel, $config, 'admin');
$sel->click_ok('quicksearch_top');
if ($sel->is_element_present(
  '//a[normalize-space(text())="My QA query" and @role="option"]'))
{
  $sel->click_ok('//a[normalize-space(text())="My QA query" and @role="option"]');
  $sel->wait_for_page_to_load_ok(WAIT_TIME);
  $sel->click_ok('forget-search', 'Forget search');
  $sel->wait_for_page_to_load_ok(WAIT_TIME);
  $sel->title_is("Search is gone");
  my $text = trim($sel->get_text("message"));
  ok(
    $text =~ /OK, the My QA query search is gone/,
    "Removed the 'My QA query' saved search"
  );
}

# Enable the QA contact field and file a new bug restricted to the 'Master' group
# with a powerless user as the QA contact. They should only be able to access the
# bug if the QA contact field is enabled, else they loose this privilege.

set_parameters($sel, {"Bug Fields" => {"useqacontact-on" => undef}});
file_bug_in_product($sel, 'TestProduct');
$sel->type_ok(
  "qa_contact",
  $config->{unprivileged_user_login},
  "Set the powerless user as QA contact"
);
$sel->type_ok("short_desc", "Test for QA contact");
$sel->type_ok("comment",    "This is a test to check QA contact privs.");
$sel->check_ok('//input[@name="groups" and @value="Master"]');
$sel->click_ok("commit");
$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->is_text_present_ok('has been added to the database', 'Bug created');
my $bug1_id = $sel->get_value('//input[@name="id" and @type="hidden"]');

# Create a saved search querying for all bugs with the powerless user
# as QA contact.

open_advanced_search_page($sel);
$sel->remove_all_selections_ok("product");
$sel->select_ok("product", "label=TestProduct");
$sel->remove_all_selections("bug_status");
$sel->select_ok("f1", "value=qa_contact");
$sel->select_ok("o1", "value=equals");
$sel->type_ok(
  "v1",
  $config->{unprivileged_user_login},
  "Look for the powerless user as QA contact"
);
$sel->click_ok("Search");
$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->title_is("Bug List");
$sel->is_element_present_ok("b$bug1_id", undef, "Bug $bug1_id is on the list");
$sel->is_text_present_ok("Test for QA contact");
$sel->type_ok("save_newqueryname", "My QA query");
$sel->click_ok("remember");
$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->title_is("Search created");
my $text = trim($sel->get_text("message"));
ok($text =~ /OK, you have a new search named My QA query/,
  "New saved search 'My QA query'");
$sel->click_ok(
  '//a[normalize-space(text())="My QA query" and not(@role="option")]');
$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->title_is("Bug List: My QA query");
$sel->is_element_present_ok("b$bug1_id", undef, "Bug $bug1_id is on the list");
$sel->is_text_present_ok("Test for QA contact");

# The saved search should still work, even with the QA contact field disabled.
# ("work" doesn't mean you should still see all bugs, depending on your role
# and privs!)

set_parameters($sel, {"Bug Fields" => {"useqacontact-off" => undef}});
$sel->click_ok('quicksearch_top');
$sel->click_ok('//a[normalize-space(text())="My QA query" and @role="option"]');
$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->title_is("Bug List: My QA query");
$sel->is_text_present_ok("One bug found");
$sel->is_element_present_ok("b$bug1_id", undef, "Bug $bug1_id is on the list");

# The 'QA Contact' label must not be displayed.
go_to_bug($sel, $bug1_id);
ok(!$sel->is_element_present('//label[@for="qa_contact"]'));
logout($sel);

# You cannot access the bug when being logged out, as it's restricted
# to the Master group.

go_to_home($sel);
$sel->type_ok('quicksearch_top', $bug1_id);
$sel->submit('header-search');
$sel->wait_for_page_to_load_ok(WAIT_TIME);
sleep(1);    # FIXME
$sel->title_is("Access Denied");
$sel->is_text_present_ok("You are not authorized to access bug");

# You are still not allowed to access the bug when logged in as the
# powerless user, as the QA contact field is disabled.
# Don't use it log_in() as we want to follow this specific link.

$sel->click_ok("//a[contains(text(),'log\n    in to an account')]",
  undef, "Log in");
$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->title_is("Log in to Bugzilla");
$sel->is_text_present_ok("I need an email address and password to continue.");
$sel->type_ok(
  "Bugzilla_login",
  $config->{unprivileged_user_login},
  "Enter login name"
);
$sel->type_ok(
  "Bugzilla_password",
  $config->{unprivileged_user_passwd},
  "Enter password"
);
$sel->click_ok("log_in", undef, "Submit credentials");
$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->title_is("Access Denied");
$sel->is_text_present_ok("You are not authorized to access bug");
logout($sel);

# Re-enable the QA contact field.

log_in($sel, $config, 'admin');
set_parameters($sel, {"Bug Fields" => {"useqacontact-on" => undef}});
logout($sel);

# Log in as the powerless user. As the QA contact field is enabled again,
# you can now access the restricted bug. Before doing that, we need to set
# some user prefs correctly to not interfere with our test.

log_in($sel, $config, 'unprivileged');
$sel->click_ok('header-account-menu-button');
$sel->click_ok("link=Preferences");
$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->title_is("User Preferences");
$sel->click_ok("link=General Preferences");
$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->title_is("User Preferences");
$sel->select_ok("state_addselfcc",        "value=never");
$sel->select_ok("post_bug_submit_action", "value=same_bug");
$sel->click_ok("update");
$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->title_is("User Preferences");

open_advanced_search_page($sel);
$sel->remove_all_selections_ok("product");
$sel->select_ok("product", "label=TestProduct");
$sel->remove_all_selections_ok("bug_status");
$sel->select_ok("f1", "value=qa_contact");
$sel->select_ok("o1", "value=equals");
$sel->type_ok(
  "v1",
  $config->{unprivileged_user_login},
  "Look for the powerless user as QA contact"
);
$sel->click_ok("Search");
$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->title_is("Bug List");
$sel->is_text_present_ok("One bug found");
$sel->is_element_present_ok("b$bug1_id", undef, "Bug $bug1_id is on the list");
$sel->is_text_present_ok("Test for QA contact");
go_to_bug($sel, $bug1_id);
$sel->value_is(
  "qa_contact",
  $config->{unprivileged_user_login},
  "The powerless user is the current QA contact"
);
$sel->type_ok("qa_contact", " ");
$sel->click_ok('bottom-save-btn');

# The user is no longer the QA contact, and they have no other role
# with the bug. They can no longer see it.

$sel->wait_for_page_to_load_ok(WAIT_TIME);
$sel->title_is("Access Denied");
logout($sel);