96 lines
4.2 KiB
Gherkin
96 lines
4.2 KiB
Gherkin
|
@admin
|
||
|
|
Feature: Admin email blacklist
|
||
|
|
In order to prevent the use of certain email addresses in guest comments
|
||
|
|
As an an admin
|
||
|
|
I want to be able to manage a list of banned email addresses
|
||
|
|
|
||
|
|
Scenario: Ban email address
|
||
|
|
Given I am logged in as a "policy_and_abuse" admin
|
||
|
|
Then I should see "Banned Emails"
|
||
|
|
When I follow "Banned Emails"
|
||
|
|
Then I should see "Find banned emails"
|
||
|
|
And I should see "Ban email address"
|
||
|
|
And I should see "Email to ban"
|
||
|
|
And I should see "Email to find"
|
||
|
|
When I fill in "Email to ban" with "foo@bar.com"
|
||
|
|
And I press "Ban Email"
|
||
|
|
Then I should see "Email address foo@bar.com banned."
|
||
|
|
And the address "foo@bar.com" should be banned
|
||
|
|
|
||
|
|
Scenario: Remove email address from banned emails list
|
||
|
|
Given I am logged in as a "policy_and_abuse" admin
|
||
|
|
And I have banned the address "foo@bar.com"
|
||
|
|
When I follow "Banned Emails"
|
||
|
|
And I fill in "Email to find" with "bar"
|
||
|
|
And I press "Search Banned Emails"
|
||
|
|
Then I should see "email found"
|
||
|
|
And I should see "foo@bar.com"
|
||
|
|
When I follow "Remove"
|
||
|
|
Then I should see "Email address foo@bar.com removed from banned emails list."
|
||
|
|
And the address "foo@bar.com" should not be banned
|
||
|
|
|
||
|
|
Scenario: Banned email addresses should not be usable in guest comments
|
||
|
|
Given I am logged in as a "policy_and_abuse" admin
|
||
|
|
And I have banned the address "foo@bar.com"
|
||
|
|
And I am logged in as "author"
|
||
|
|
And I post the work "New Work"
|
||
|
|
When I post the comment "I loved this" on the work "New Work" as a guest with email "foo@bar.com"
|
||
|
|
Then I should see "has been blocked at the owner's request"
|
||
|
|
And I should not see "Comments (1)"
|
||
|
|
When I fill in "Guest email" with "someone@bar.com"
|
||
|
|
And I press "Comment"
|
||
|
|
Then I should see "Comments (1)"
|
||
|
|
|
||
|
|
Scenario: Variants of banned email addresses should not be usable
|
||
|
|
Given I am logged in as a "policy_and_abuse" admin
|
||
|
|
When I have banned the address "foo.bar+gloop@googlemail.com"
|
||
|
|
Then the address "foobar@gmail.com" should be banned
|
||
|
|
When I am logged out
|
||
|
|
Then I should not be able to comment with the address "foobar@gmail.com"
|
||
|
|
And I should not be able to comment with the address "foobar+baz@gmail.com"
|
||
|
|
And I should not be able to comment with the address "foo.bar@gmail.com"
|
||
|
|
And I should be able to comment with the address "whee@gmail.com"
|
||
|
|
|
||
|
|
Scenario: Banning a user's email should not affect their ability to post comments
|
||
|
|
Given the user "author" exists and is activated
|
||
|
|
And I am logged in as a "policy_and_abuse" admin
|
||
|
|
And I have banned the address for user "author"
|
||
|
|
When I am logged in as "author"
|
||
|
|
And I post the work "New Work"
|
||
|
|
And I post a comment "here's a great comment"
|
||
|
|
Then I should see "Comment created!"
|
||
|
|
|
||
|
|
Scenario: Banning a user's email should prevent requesting invites
|
||
|
|
Given I am logged in as a "policy_and_abuse" admin
|
||
|
|
When I have banned the address "foo@bar.com"
|
||
|
|
And I log out
|
||
|
|
And account creation requires an invitation
|
||
|
|
And the invitation queue is enabled
|
||
|
|
Then I should not be able to add the email "foo@bar.com" to the invite queue
|
||
|
|
|
||
|
|
Scenario: Banning a user's email should prevent aliases requesting invites
|
||
|
|
Given I am logged in as a "policy_and_abuse" admin
|
||
|
|
When I have banned the address "foo+bar@gmail.com"
|
||
|
|
And I log out
|
||
|
|
And account creation requires an invitation
|
||
|
|
And the invitation queue is enabled
|
||
|
|
Then I should not be able to add the email "foo@gmail.com" to the invite queue
|
||
|
|
And I should not be able to add the email "fo.o@gmail.com" to the invite queue
|
||
|
|
And I should not be able to add the email "foo+baz@gmail.com" to the invite queue
|
||
|
|
And I should not be able to add the email "foo@googlemail.com" to the invite queue
|
||
|
|
|
||
|
|
Scenario: User's email banned after joining invite queue should remove their email
|
||
|
|
Given I am a visitor
|
||
|
|
When I am on the homepage
|
||
|
|
And I follow "Get an Invitation"
|
||
|
|
And I fill in "Email" with "foo+bar@baz.com"
|
||
|
|
And I press "Add me to the list"
|
||
|
|
Then I should see "You've been added to our queue"
|
||
|
|
When I am logged in as a "policy_and_abuse" admin
|
||
|
|
And I go to the manage invite queue page
|
||
|
|
Then I should see "foo+bar@baz.com"
|
||
|
|
And I should not see "foo@baz.com"
|
||
|
|
When I have banned the address "foo+qux@baz.com"
|
||
|
|
And I go to the manage invite queue page
|
||
|
|
Then I should not see "foo+bar@baz.com"
|