gitlabhq/spec/controllers/projects/todo_controller_spec.rb

require('spec_helper')

describe Projects::TodosController do
  let(:user)    { create(:user) }
  let(:project) { create(:project) }
  let(:issue)   { create(:issue, project: project) }

  describe 'POST #create' do
    before do
      sign_in(user)
      project.team << [user, :developer]
    end

    it 'should create todo for issue' do
      expect do
        post(:create, namespace_id: project.namespace.path,
                      project_id: project.path,
                      issuable_id: issue.id,
                      issuable_type: "issue")
      end.to change { user.todos.count }.by(1)

      expect(response.status).to eq(200)
    end
  end

  describe 'POST #create when not authorized' do
    before do
      sign_in(user)
    end

    it 'should create todo for issue' do
      expect do
        post(:create, namespace_id: project.namespace.path,
                      project_id: project.path,
                      issuable_id: issue.id,
                      issuable_type: "issue")
      end.to change { user.todos.count }.by(0)

      expect(response.status).to eq(404)
    end
  end
end