Ghost/ghost/admin/tests/acceptance/team-test.js

/* jshint expr:true */
import {
  describe,
  it,
  beforeEach,
  afterEach
} from 'mocha';
import {expect} from 'chai';
import startApp from '../helpers/start-app';
import destroyApp from '../helpers/destroy-app';
import {invalidateSession, authenticateSession} from '../helpers/ember-simple-auth';
import {errorOverride, errorReset} from '../helpers/adapter-error';
import {enableGhostOAuth} from '../helpers/configuration';
import {Response} from 'ember-cli-mirage';
import testSelector from 'ember-test-selectors';
import moment from 'moment';
import ctrlOrCmd from 'ghost-admin/utils/ctrl-or-cmd';

describe('Acceptance: Team', function () {
    let application;

    beforeEach(function () {
        application = startApp();
    });

    afterEach(function () {
        destroyApp(application);
    });

    it('redirects to signin when not authenticated', async function () {
        invalidateSession(application);
        await visit('/team');

        expect(currentURL()).to.equal('/signin');
    });

    it('redirects correctly when authenticated as author', async function () {
        let role = server.create('role', {name: 'Author'});
        server.create('user', {roles: [role], slug: 'test-user'});

        server.create('user', {slug: 'no-access'});

        authenticateSession(application);
        await visit('/team/no-access');

        expect(currentURL(), 'currentURL').to.equal('/team/test-user');
    });

    it('redirects correctly when authenticated as editor', async function () {
        let role = server.create('role', {name: 'Editor'});
        server.create('user', {roles: [role], slug: 'test-user'});

        server.create('user', {slug: 'no-access'});

        authenticateSession(application);
        await visit('/team/no-access');

        expect(currentURL(), 'currentURL').to.equal('/team');
    });

    describe('when logged in as admin', function () {
        let admin, adminRole, suspendedUser;

        beforeEach(function () {
            server.loadFixtures('roles');
            adminRole = server.schema.roles.find(1);

            admin = server.create('user', {email: 'admin@example.com', roles: [adminRole]});

            // add an expired invite
            server.create('invite', {expires: moment.utc().subtract(1, 'day').valueOf()});

            // add a suspended user
            suspendedUser = server.create('user', {email: 'suspended@example.com', roles: [adminRole], status: 'inactive'});

            return authenticateSession(application);
        });

        it('it renders and navigates correctly', async function () {
            let user1 = server.create('user');
            let user2 = server.create('user');

            await visit('/team');

            // doesn't do any redirecting
            expect(currentURL(), 'currentURL').to.equal('/team');

            // it has correct page title
            expect(document.title, 'page title').to.equal('Team - Test Blog');

            // it shows active users in active section
            expect(
                find(`${testSelector('active-users')} ${testSelector('user-id')}`).length,
                'number of active users'
            ).to.equal(3);
            expect(
                find(`${testSelector('active-users')} ${testSelector('user-id', user1.id)}`)
            ).to.exist;
            expect(
                find(`${testSelector('active-users')} ${testSelector('user-id', user2.id)}`)
            ).to.exist;
            expect(
                find(`${testSelector('active-users')} ${testSelector('user-id', admin.id)}`)
            ).to.exist;

            // it shows suspended users in suspended section
            expect(
                find(`${testSelector('suspended-users')} ${testSelector('user-id')}`).length,
                'number of suspended users'
            ).to.equal(1);
            expect(
                find(`${testSelector('suspended-users')} ${testSelector('user-id', suspendedUser.id)}`)
            ).to.exist;

            await click(testSelector('user-id', user2.id));

            // url is correct
            expect(currentURL(), 'url after clicking user').to.equal(`/team/${user2.slug}`);

            // title is correct
            expect(document.title, 'title after clicking user').to.equal('Team - User - Test Blog');

            // view title should exist and be linkable and active
            expect(find('.view-title a[href="/ghost/team"]').hasClass('active'), 'has linkable url back to team main page')
                .to.be.true;

            await click('.view-title a');

            // url should be /team again
            expect(currentURL(), 'url after clicking back').to.equal('/team');
        });

        it('can manage invites', async function () {
            await visit('/team');

            // invite user button exists
            expect(
                find('.view-actions .gh-btn-green').text().trim(),
                'invite people button text'
            ).to.equal('Invite People');

            // existing users are listed
            expect(
                find(testSelector('user-id')).length,
                'initial number of active users'
            ).to.equal(2);

            expect(
                find(testSelector('user-id', '1')).find(testSelector('role-name')).text().trim(),
                'active user\'s role label'
            ).to.equal('Administrator');

            // existing invites are shown
            expect(
                find(testSelector('invite-id')).length,
                'initial number of invited users'
            ).to.equal(1);

            expect(
                find(testSelector('invite-id', '1')).find(testSelector('invite-description')).text(),
                'expired invite description'
            ).to.match(/expired/);

            // remove expired invite
            await click(`${testSelector('invite-id', '1')} ${testSelector('revoke-button')}`);

            expect(
                find(testSelector('invite-id')).length,
                'initial number of invited users'
            ).to.equal(0);

            // click the invite people button
            await click('.view-actions .gh-btn-green');

            let roleOptions = find('.fullscreen-modal select[name="role"] option');

            function checkOwnerExists() {
                for (let i in roleOptions) {
                    if (roleOptions[i].tagName === 'option' && roleOptions[i].text === 'Owner') {
                        return true;
                    }
                }
                return false;
            }

            function checkSelectedIsAuthor() {
                for (let i in roleOptions) {
                    if (roleOptions[i].selected) {
                        return roleOptions[i].text === 'Author';
                    }
                }
                return false;
            }

            // modal is displayed
            expect(
                find('.fullscreen-modal h1').text().trim(),
                'correct modal is displayed'
            ).to.equal('Invite a New User');

            // number of roles is correct
            expect(
                find('.fullscreen-modal select[name="role"] option').length,
                'number of selectable roles'
            ).to.equal(3);

            expect(checkOwnerExists(), 'owner role isn\'t available').to.be.false;
            expect(checkSelectedIsAuthor(), 'author role is selected initially').to.be.true;

            // submit valid invite form
            await fillIn('.fullscreen-modal input[name="email"]', 'invite1@example.com');
            await click('.fullscreen-modal .gh-btn-green');

            // modal closes
            expect(
                find('.fullscreen-modal').length,
                'number of modals after sending invite'
            ).to.equal(0);

            // invite is displayed, has correct e-mail + role
            expect(
                find(testSelector('invite-id')).length,
                'number of invites after first invite'
            ).to.equal(1);

            expect(
                find(testSelector('invite-id', '2')).find(testSelector('email')).text().trim(),
                'displayed email of first invite'
            ).to.equal('invite1@example.com');

            expect(
                find(testSelector('invite-id', '2')).find(testSelector('role-name')).text().trim(),
                'displayed role of first invite'
            ).to.equal('Author');

            expect(
                find(testSelector('invite-id', '2')).find(testSelector('invite-description')).text(),
                'new invite description'
            ).to.match(/expires/);

            // number of users is unchanged
            expect(
                find(testSelector('user-id')).length,
                'number of active users after first invite'
            ).to.equal(2);

            // submit new invite with different role
            await click('.view-actions .gh-btn-green');
            await fillIn('.fullscreen-modal input[name="email"]', 'invite2@example.com');
            await fillIn('.fullscreen-modal select[name="role"]', '2');
            await click('.fullscreen-modal .gh-btn-green');

            // number of invites increases
            expect(
                find(testSelector('invite-id')).length,
                'number of invites after second invite'
            ).to.equal(2);

            // invite has correct e-mail + role
            expect(
                find(testSelector('invite-id', '3')).find(testSelector('email')).text().trim(),
                'displayed email of second invite'
            ).to.equal('invite2@example.com');

            expect(
                find(testSelector('invite-id', '3')).find(testSelector('role-name')).text().trim(),
                'displayed role of second invite'
            ).to.equal('Editor');

            // submit invite form with existing user
            await click('.view-actions .gh-btn-green');
            await fillIn('.fullscreen-modal input[name="email"]', 'admin@example.com');
            await click('.fullscreen-modal .gh-btn-green');

            // validation message is displayed
            expect(
                find('.fullscreen-modal .error .response').text().trim(),
                'inviting existing user error'
            ).to.equal('A user with that email address already exists.');

            // submit invite form with existing invite
            await fillIn('.fullscreen-modal input[name="email"]', 'invite1@example.com');
            await click('.fullscreen-modal .gh-btn-green');

            // validation message is displayed
            expect(
                find('.fullscreen-modal .error .response').text().trim(),
                'inviting invited user error'
            ).to.equal('A user with that email address was already invited.');

            // submit invite form with an invalid email
            await fillIn('.fullscreen-modal input[name="email"]', 'test');
            await click('.fullscreen-modal .gh-btn-green');

            // validation message is displayed
            expect(
                find('.fullscreen-modal .error .response').text().trim(),
                'inviting invalid email error'
            ).to.equal('Invalid Email.');

            await click('.fullscreen-modal a.close');
            // revoke latest invite
            await click(`${testSelector('invite-id', '3')} ${testSelector('revoke-button')}`);

            // number of invites decreases
            expect(
                find(testSelector('invite-id')).length,
                'number of invites after revoke'
            ).to.equal(1);

            // notification is displayed
            expect(
                find('.gh-notification').text().trim(),
                'notifications contain revoke'
            ).to.match(/Invitation revoked\. \(invite2@example\.com\)/);

            // correct invite is removed
            expect(
                find(testSelector('invite-id')).find(testSelector('email')).text().trim(),
                'displayed email of remaining invite'
            ).to.equal('invite1@example.com');

            // add another invite to test ordering on resend
            await click('.view-actions .gh-btn-green');
            await fillIn('.fullscreen-modal input[name="email"]', 'invite3@example.com');
            await click('.fullscreen-modal .gh-btn-green');

            // new invite should be last in the list
            expect(
                find(`${testSelector('invite-id')}:last`).find(testSelector('email')).text().trim(),
                'last invite email in list'
            ).to.equal('invite3@example.com');

            // resend first invite
            await click(`${testSelector('invite-id', '2')} ${testSelector('resend-button')}`);

            // notification is displayed
            expect(
                find('.gh-notification').text().trim(),
                'notifications contain resend'
            ).to.match(/Invitation resent! \(invite1@example\.com\)/);

            // first invite is still at the top
            expect(
                find(`${testSelector('invite-id')}:first-of-type`).find(testSelector('email')).text().trim(),
                'first invite email in list'
            ).to.equal('invite1@example.com');

            // regression test: can revoke a resent invite
            await click(`${testSelector('invite-id')}:first-of-type ${testSelector('resend-button')}`);
            await click(`${testSelector('invite-id')}:first-of-type ${testSelector('revoke-button')}`);

            // number of invites decreases
            expect(
                find(testSelector('invite-id')).length,
                'number of invites after resend/revoke'
            ).to.equal(1);

            // notification is displayed
            expect(
                find('.gh-notification').text().trim(),
                'notifications contain revoke after resend/revoke'
            ).to.match(/Invitation revoked\. \(invite1@example\.com\)/);
        });

        it('can manage suspended users', async function () {
            await visit('/team');
            await click(testSelector('user-id', suspendedUser.id));

            expect(testSelector('suspended-badge')).to.exist;

            await click(testSelector('user-actions'));
            await click(testSelector('unsuspend-button'));
            await click(testSelector('modal-confirm'));

            // NOTE: there seems to be a timing issue with this test - pausing
            // here confirms that the badge is removed but the andThen is firing
            // before the page is updated
            // andThen(() => {
            //     expect(testSelector('suspended-badge')).to.not.exist;
            // });

            await click(testSelector('team-link'));

            // suspendedUser is now in active list
            expect(
                find(`${testSelector('active-users')} ${testSelector('user-id', suspendedUser.id)}`)
            ).to.exist;

            // no suspended users
            expect(
                find(`${testSelector('suspended-users')} ${testSelector('user-id')}`).length
            ).to.equal(0);

            await click(testSelector('user-id', suspendedUser.id));

            await click(testSelector('user-actions'));
            await click(testSelector('suspend-button'));
            await click(testSelector('modal-confirm'));

            expect(testSelector('suspended-badge')).to.exist;
        });

        it('can delete users', async function () {
            let user1 = server.create('user');
            let user2 = server.create('user');
            let post = server.create('post');

            user2.posts = [post];

            await visit('/team');
            await click(testSelector('user-id', user1.id));

            // user deletion displays modal
            await click('button.delete');
            expect(
                find('.fullscreen-modal .modal-content:contains("delete this user")').length,
                'user deletion modal displayed after button click'
            ).to.equal(1);

            // user has no posts so no warning about post deletion
            expect(
                find('.fullscreen-modal .modal-content:contains("is the author of")').length,
                'deleting user with no posts has no post count'
            ).to.equal(0);

            // cancelling user deletion closes modal
            await click('.fullscreen-modal button:contains("Cancel")');
            expect(
                find('.fullscreen-modal').length === 0,
                'delete user modal is closed when cancelling'
            ).to.be.true;

            // deleting a user with posts
            await visit('/team');
            await click(testSelector('user-id', user2.id));

            await click('button.delete');
            // user has  posts so should warn about post deletion
            expect(
                find('.fullscreen-modal .modal-content:contains("is the author of 1 post")').length,
                'deleting user with posts has post count'
            ).to.equal(1);

            await click('.fullscreen-modal button:contains("Delete")');
            // redirected to team page
            expect(currentURL()).to.equal('/team');

            // deleted user is not in list
            expect(
                find(testSelector('user-id', user2.id)).length,
                'deleted user is not in user list after deletion'
            ).to.equal(0);
        });

        describe('existing user', function () {
            let user;

            beforeEach(function () {
                user = server.create('user', {
                    slug: 'test-1',
                    name: 'Test User',
                    facebook: 'test',
                    twitter: '@test'
                });
            });

            it('input fields reset and validate correctly', async function () {
                // test user name
                await visit('/team/test-1');

                expect(currentURL(), 'currentURL').to.equal('/team/test-1');
                expect(find('.user-details-bottom .first-form-group input.user-name').val(), 'current user name').to.equal('Test User');

                expect(find(testSelector('save-button')).text().trim(), 'save button text').to.equal('Save');

                // test empty user name
                await fillIn('.user-details-bottom .first-form-group input.user-name', '');
                await triggerEvent('.user-details-bottom .first-form-group input.user-name', 'blur');

                expect(find('.user-details-bottom .first-form-group').hasClass('error'), 'username input is in error state with blank input').to.be.true;

                // test too long user name
                await fillIn('.user-details-bottom .first-form-group input.user-name', new Array(160).join('a'));
                await triggerEvent('.user-details-bottom .first-form-group input.user-name', 'blur');

                expect(find('.user-details-bottom .first-form-group').hasClass('error'), 'username input is in error state with too long input').to.be.true;

                // reset name field
                await fillIn('.user-details-bottom .first-form-group input.user-name', 'Test User');

                expect(find('.user-details-bottom input[name="user"]').val(), 'slug value is default').to.equal('test-1');

                await fillIn('.user-details-bottom input[name="user"]', '');
                await triggerEvent('.user-details-bottom input[name="user"]', 'blur');

                expect(find('.user-details-bottom input[name="user"]').val(), 'slug value is reset to original upon empty string').to.equal('test-1');

                // Save changes
                await click(testSelector('save-button'));

                expect(find(testSelector('save-button')).text().trim(), 'save button text').to.equal('Saved');

                // CMD-S shortcut works
                await fillIn('.user-details-bottom input[name="user"]', 'Test User');
                await triggerEvent('.gh-app', 'keydown', {
                    keyCode: 83, // s
                    metaKey: ctrlOrCmd === 'command',
                    ctrlKey: ctrlOrCmd === 'ctrl'
                });

                // we've already saved in this test so there's no on-screen indication
                // that we've had another save, check the request was fired instead
                let [lastRequest] = server.pretender.handledRequests.slice(-1);
                let params = JSON.parse(lastRequest.requestBody);

                expect(params.users[0].name).to.equal('Test User');

                await fillIn('.user-details-bottom input[name="user"]', 'white space');
                await triggerEvent('.user-details-bottom input[name="user"]', 'blur');

                expect(find('.user-details-bottom input[name="user"]').val(), 'slug value is correctly dasherized').to.equal('white-space');

                await fillIn('.user-details-bottom input[name="email"]', 'thisisnotanemail');
                await triggerEvent('.user-details-bottom input[name="email"]', 'blur');

                expect(find('.user-details-bottom .form-group:nth-of-type(3)').hasClass('error'), 'email input should be in error state with invalid email').to.be.true;

                await fillIn('.user-details-bottom input[name="email"]', 'test@example.com');
                await fillIn('#user-location', new Array(160).join('a'));
                await triggerEvent('#user-location', 'blur');

                expect(find('#user-location').closest('.form-group').hasClass('error'), 'location input should be in error state').to.be.true;

                await fillIn('#user-location', '');
                await fillIn('#user-website', 'thisisntawebsite');
                await triggerEvent('#user-website', 'blur');

                expect(find('#user-website').closest('.form-group').hasClass('error'), 'website input should be in error state').to.be.true;

                // Testing Facebook input

                // displays initial value
                expect(find('#user-facebook').val(), 'initial facebook value')
                    .to.equal('https://www.facebook.com/test');

                await triggerEvent('#user-facebook', 'focus');
                await triggerEvent('#user-facebook', 'blur');

                // regression test: we still have a value after the input is
                // focused and then blurred without any changes
                expect(find('#user-facebook').val(), 'facebook value after blur with no change')
                    .to.equal('https://www.facebook.com/test');

                await fillIn('#user-facebook', '');
                await fillIn('#user-facebook', ')(*&%^%)');
                await triggerEvent('#user-facebook', 'blur');

                expect(find('#user-facebook').closest('.form-group').hasClass('error'), 'facebook input should be in error state').to.be.true;

                await fillIn('#user-facebook', '');
                await fillIn('#user-facebook', 'pages/)(*&%^%)');
                await triggerEvent('#user-facebook', 'blur');

                expect(find('#user-facebook').val()).to.be.equal('https://www.facebook.com/pages/)(*&%^%)');
                expect(find('#user-facebook').closest('.form-group').hasClass('error'), 'facebook input should be in error state').to.be.false;

                await fillIn('#user-facebook', '');
                await fillIn('#user-facebook', 'testing');
                await triggerEvent('#user-facebook', 'blur');

                expect(find('#user-facebook').val()).to.be.equal('https://www.facebook.com/testing');
                expect(find('#user-facebook').closest('.form-group').hasClass('error'), 'facebook input should be in error state').to.be.false;

                await fillIn('#user-facebook', '');
                await fillIn('#user-facebook', 'somewebsite.com/pages/some-facebook-page/857469375913?ref=ts');
                await triggerEvent('#user-facebook', 'blur');

                expect(find('#user-facebook').val()).to.be.equal('https://www.facebook.com/pages/some-facebook-page/857469375913?ref=ts');
                expect(find('#user-facebook').closest('.form-group').hasClass('error'), 'facebook input should be in error state').to.be.false;

                await fillIn('#user-facebook', '');
                await fillIn('#user-facebook', 'test');
                await triggerEvent('#user-facebook', 'blur');

                expect(find('#user-facebook').val()).to.be.equal('https://www.facebook.com/test');
                expect(find('#user-facebook').closest('.form-group').hasClass('error'), 'facebook input should be in error state').to.be.false;

                await fillIn('#user-facebook', '');
                await fillIn('#user-facebook', 'http://twitter.com/testuser');
                await triggerEvent('#user-facebook', 'blur');

                expect(find('#user-facebook').val()).to.be.equal('https://www.facebook.com/testuser');
                expect(find('#user-facebook').closest('.form-group').hasClass('error'), 'facebook input should be in error state').to.be.false;

                await fillIn('#user-facebook', '');
                await fillIn('#user-facebook', 'facebook.com/testing');
                await triggerEvent('#user-facebook', 'blur');

                expect(find('#user-facebook').val()).to.be.equal('https://www.facebook.com/testing');
                expect(find('#user-facebook').closest('.form-group').hasClass('error'), 'facebook input should be in error state').to.be.false;

                // Testing Twitter input

                // loads fixtures and performs transform
                expect(find('#user-twitter').val(), 'initial twitter value')
                    .to.equal('https://twitter.com/test');

                await triggerEvent('#user-twitter', 'focus');
                await triggerEvent('#user-twitter', 'blur');

                // regression test: we still have a value after the input is
                // focused and then blurred without any changes
                expect(find('#user-twitter').val(), 'twitter value after blur with no change')
                    .to.equal('https://twitter.com/test');

                await fillIn('#user-twitter', '');
                await fillIn('#user-twitter', ')(*&%^%)');
                await triggerEvent('#user-twitter', 'blur');

                expect(find('#user-twitter').closest('.form-group').hasClass('error'), 'twitter input should be in error state').to.be.true;

                await fillIn('#user-twitter', '');
                await fillIn('#user-twitter', 'name');
                await triggerEvent('#user-twitter', 'blur');

                expect(find('#user-twitter').val()).to.be.equal('https://twitter.com/name');
                expect(find('#user-twitter').closest('.form-group').hasClass('error'), 'twitter input should be in error state').to.be.false;

                await fillIn('#user-twitter', '');
                await fillIn('#user-twitter', 'http://github.com/user');
                await triggerEvent('#user-twitter', 'blur');

                expect(find('#user-twitter').val()).to.be.equal('https://twitter.com/user');
                expect(find('#user-twitter').closest('.form-group').hasClass('error'), 'twitter input should be in error state').to.be.false;

                await fillIn('#user-twitter', '');
                await fillIn('#user-twitter', 'twitter.com/user');
                await triggerEvent('#user-twitter', 'blur');

                expect(find('#user-twitter').val()).to.be.equal('https://twitter.com/user');
                expect(find('#user-twitter').closest('.form-group').hasClass('error'), 'twitter input should be in error state').to.be.false;

                await fillIn('#user-website', '');
                await fillIn('#user-bio', new Array(210).join('a'));
                await triggerEvent('#user-bio', 'blur');

                expect(find('#user-bio').closest('.form-group').hasClass('error'), 'bio input should be in error state').to.be.true;

                // password reset ------

                // button triggers validation
                await click('.button-change-password');

                expect(
                    find('#user-password-new').closest('.form-group').hasClass('error'),
                    'new password has error class when blank'
                ).to.be.true;

                expect(
                    find('#user-password-new').siblings('.response').text(),
                    'new password error when blank'
                ).to.match(/can't be blank/);

                // typing in inputs clears validation
                await fillIn('#user-password-new', 'password');
                await triggerEvent('#user-password-new', 'input');

                expect(
                    find('#user-password-new').closest('.form-group').hasClass('error'),
                    'password validation is visible after typing'
                ).to.be.false;

                // enter key triggers action
                await keyEvent('#user-password-new', 'keyup', 13);

                expect(
                    find('#user-new-password-verification').closest('.form-group').hasClass('error'),
                    'confirm password has error class when it doesn\'t match'
                ).to.be.true;

                expect(
                    find('#user-new-password-verification').siblings('.response').text(),
                    'confirm password error when it doesn\'t match'
                ).to.match(/do not match/);

                // submits with correct details
                await fillIn('#user-new-password-verification', 'password');
                await click('.button-change-password');

                // hits the endpoint
                let [newRequest] = server.pretender.handledRequests.slice(-1);
                params = JSON.parse(newRequest.requestBody);

                expect(newRequest.url, 'password request URL')
                    .to.match(/\/users\/password/);

                // eslint-disable-next-line camelcase
                expect(params.password[0].user_id).to.equal(user.id.toString());
                expect(params.password[0].newPassword).to.equal('password');
                expect(params.password[0].ne2Password).to.equal('password');

                // clears the fields
                expect(
                    find('#user-password-new').val(),
                    'password field after submit'
                ).to.be.blank;

                expect(
                    find('#user-new-password-verification').val(),
                    'password verification field after submit'
                ).to.be.blank;

                // displays a notification
                expect(
                    find('.gh-notifications .gh-notification').length,
                    'password saved notification is displayed'
                ).to.equal(1);
            });
        });

        describe('using Ghost OAuth', function () {
            beforeEach(function () {
                enableGhostOAuth(server);
            });

            it('doesn\'t show the password reset form', async function () {
                await visit(`/team/${admin.slug}`);

                // ensure that the normal form is displayed so we don't get
                // false positives
                expect(
                    find('input#user-slug').length,
                    'profile form is displayed'
                ).to.equal(1);

                // check that the password form is hidden
                expect(
                    find('#password-reset').length,
                    'presence of password reset form'
                ).to.equal(0);

                expect(
                    find('#user-password-new').length,
                    'presence of new password field'
                ).to.equal(0);
            });
        });

        describe('own user', function () {
            it('requires current password when changing password', async function () {
                await visit(`/team/${admin.slug}`);

                // test the "old password" field is validated
                await click('.button-change-password');

                // old password has error
                expect(
                    find('#user-password-old').closest('.form-group').hasClass('error'),
                    'old password has error class when blank'
                ).to.be.true;

                expect(
                    find('#user-password-old').siblings('.response').text(),
                    'old password error when blank'
                ).to.match(/is required/);

                // new password has error
                expect(
                    find('#user-password-new').closest('.form-group').hasClass('error'),
                    'new password has error class when blank'
                ).to.be.true;

                expect(
                    find('#user-password-new').siblings('.response').text(),
                    'new password error when blank'
                ).to.match(/can't be blank/);

                // validation is cleared when typing
                await fillIn('#user-password-old', 'password');
                await triggerEvent('#user-password-old', 'input');

                expect(
                    find('#user-password-old').closest('.form-group').hasClass('error'),
                    'old password validation is in error state after typing'
                ).to.be.false;
            });
        });

        it('redirects to 404 when user does not exist', async function () {
            server.get('/users/slug/unknown/', function () {
                return new Response(404, {'Content-Type': 'application/json'}, {errors: [{message: 'User not found.', errorType: 'NotFoundError'}]});
            });

            errorOverride();

            await visit('/team/unknown');

            errorReset();
            expect(currentPath()).to.equal('error404');
            expect(currentURL()).to.equal('/team/unknown');
        });
    });

    describe('when logged in as author', function () {
        let adminRole, authorRole;

        beforeEach(function () {
            adminRole = server.create('role', {name: 'Administrator'});
            authorRole = server.create('role', {name: 'Author'});
            server.create('user', {roles: [authorRole]});

            server.get('/invites/', function () {
                return new Response(403, {}, {
                    errors: [{
                        errorType: 'NoPermissionError',
                        message: 'You do not have permission to perform this action'
                    }]
                });
            });

            return authenticateSession(application);
        });

        it('can access the team page', async function () {
            server.create('user', {roles: [adminRole]});
            server.create('invite', {roles: [authorRole]});

            errorOverride();

            await visit('/team');

            errorReset();
            expect(currentPath()).to.equal('team.index');
            expect(find('.gh-alert').length).to.equal(0);
        });
    });
});