You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
265 lines
15 KiB
265 lines
15 KiB
2 years ago
|
@tool @tool_policy
|
||
|
Feature: Optional policies
|
||
|
In order to exercise my privacy rights
|
||
|
As a user
|
||
|
I should be able to decline policy statements and withdraw my previously given consent to them
|
||
|
|
||
|
Background:
|
||
|
Given the following config values are set as admin:
|
||
|
| sitepolicyhandler | tool_policy |
|
||
|
And the following "users" exist:
|
||
|
| username | firstname | lastname | email |
|
||
|
| user1 | User | One | one@example.com |
|
||
|
| user2 | User | Two | two@example.com |
|
||
|
| manager | Max | Manager | man@example.com |
|
||
|
And the following "role assigns" exist:
|
||
|
| user | role | contextlevel | reference |
|
||
|
| manager | manager | System | |
|
||
|
And the following "courses" exist:
|
||
|
| fullname | shortname |
|
||
|
| Course1 | C1 |
|
||
|
And the following "course enrolments" exist:
|
||
|
| user | course | role |
|
||
|
| user1 | C1 | student |
|
||
|
| user2 | C1 | student |
|
||
|
|
||
|
Scenario: Configuring a policy as optional
|
||
|
Given I log in as "manager"
|
||
|
And I navigate to "Users > Privacy and policies > Manage policies" in site administration
|
||
|
And I follow "New policy"
|
||
|
# Policies are compulsory by default.
|
||
|
And the field "Agreement optional" matches value "No"
|
||
|
# Optional status can be set when creating a new policy.
|
||
|
And I set the following fields to these values:
|
||
|
| Name | ConsentPageOptional1 |
|
||
|
| Version | v1 |
|
||
|
| Summary | Policy summary |
|
||
|
| Full policy | Full text |
|
||
|
| Active | 1 |
|
||
|
| Show policy before showing other policies | No |
|
||
|
| Agreement optional | Yes |
|
||
|
When I press "Save"
|
||
|
Then the following should exist in the "tool-policy-managedocs-wrapper" table:
|
||
|
| Name | Policy status | Version |
|
||
|
| ConsentPageOptional1 Site policy, All users, Optional | Active | v1 |
|
||
|
# Optional status can be edited.
|
||
|
And I open the action menu in "ConsentPageOptional1" "table_row"
|
||
|
And I click on "Edit" "link" in the "ConsentPageOptional1" "table_row"
|
||
|
And I set the field "Agreement optional" to "No"
|
||
|
And I set the field "Minor change" to "1"
|
||
|
And I press "Save"
|
||
|
And the following should exist in the "tool-policy-managedocs-wrapper" table:
|
||
|
| Name | Policy status | Version |
|
||
|
| ConsentPageOptional1 Site policy, All users, Compulsory | Active | v1 |
|
||
|
|
||
|
Scenario: Compulsory policies must be accepted prior signup, optional policies just after it
|
||
|
Given the following config values are set as admin:
|
||
|
| registerauth | email |
|
||
|
| passwordpolicy | 0 |
|
||
|
And the following policies exist:
|
||
|
| Name | Content | Summary | Agreementstyle | Optional |
|
||
|
| ConsentPageOptional1 | full text1 | short text1 | 0 | 1 |
|
||
|
| ConsentPageOptional2 | full text2 | short text2 | 0 | 1 |
|
||
|
| ConsentPageCompulsory1 | full text3 | short text3 | 0 | 0 |
|
||
|
| OwnPageCompulsory1 | full text4 | short text4 | 1 | 0 |
|
||
|
| OwnPageOptional1 | full text5 | short text5 | 1 | 1 |
|
||
|
And I am on site homepage
|
||
|
And I follow "Log in"
|
||
|
And I press "Create new account"
|
||
|
# Compulsory policies displayed on own page are shown first and must be agreed.
|
||
|
And I should see "OwnPageCompulsory1" in the "region-main" "region"
|
||
|
And I should see "short text4" in the "region-main" "region"
|
||
|
And I should see "full text4" in the "region-main" "region"
|
||
|
And I press "I agree to the OwnPageCompulsory1"
|
||
|
# Compulsory policies displayed on the consent page are shown next and must be agreed.
|
||
|
And I should see "ConsentPageCompulsory1"
|
||
|
And I should see "short text3" in the "region-main" "region"
|
||
|
And I should see "full text3" in the "region-main" "region"
|
||
|
And I press "Next"
|
||
|
And I should see "Please agree to the following policies"
|
||
|
And I set the field "I agree to the ConsentPageCompulsory1" to "1"
|
||
|
And I press "Next"
|
||
|
# The signup form can be submitted and a new account created.
|
||
|
And I set the following fields to these values:
|
||
|
| Username | user3 |
|
||
|
| Password | user3 |
|
||
|
| Email address | user3@address.invalid |
|
||
|
| Email (again) | user3@address.invalid |
|
||
|
| First name | User3 |
|
||
|
| Surname | L3 |
|
||
|
And I press "Create my new account"
|
||
|
And I should see "Confirm your account"
|
||
|
And I should see "An email should have been sent to your address at user3@address.invalid"
|
||
|
And I confirm email for "user3"
|
||
|
And I should see "Thanks, User3 L3"
|
||
|
And I should see "Your registration has been confirmed"
|
||
|
When I press "Continue"
|
||
|
# After confirming the new account, the user is logged in and asked to accept or decline the optional policies.
|
||
|
# First come policies displayed on their own page.
|
||
|
Then I should see "OwnPageOptional1"
|
||
|
And I should see "short text5" in the "region-main" "region"
|
||
|
And I should see "full text5" in the "region-main" "region"
|
||
|
And I press "No thanks, I decline OwnPageOptional1"
|
||
|
# Then come policies displayed on the consent page.
|
||
|
And I should see "ConsentPageOptional1" in the "region-main" "region"
|
||
|
And I should see "short text1" in the "region-main" "region"
|
||
|
And I should see "full text1" in the "region-main" "region"
|
||
|
And I press "Next"
|
||
|
And I should see "ConsentPageOptional2" in the "region-main" "region"
|
||
|
And I should see "short text2" in the "region-main" "region"
|
||
|
And I should see "full text2" in the "region-main" "region"
|
||
|
And I press "Next"
|
||
|
And I should see "Please agree to the following policies"
|
||
|
And I set the field "I agree to the ConsentPageOptional1" to "1"
|
||
|
And I set the field "No thanks, I decline ConsentPageOptional2" to "0"
|
||
|
And I press "Next"
|
||
|
# Accepted and declined policies are shown in the profile.
|
||
|
And I follow "Profile" in the user menu
|
||
|
And I follow "Policies and agreements"
|
||
|
And "Accepted" "text" should exist in the "ConsentPageCompulsory1" "table_row"
|
||
|
And "Accepted" "text" should exist in the "ConsentPageOptional1" "table_row"
|
||
|
And "Accepted" "text" should exist in the "OwnPageCompulsory1" "table_row"
|
||
|
And "Declined" "text" should exist in the "OwnPageOptional1" "table_row"
|
||
|
And "Declined" "text" should exist in the "ConsentPageOptional2" "table_row"
|
||
|
|
||
|
Scenario: When a new optional policy is added, users are asked to accept/decline it on their next login
|
||
|
Given the following policies exist:
|
||
|
| Name | Content | Summary | Agreementstyle | Optional |
|
||
|
| ConsentPageOptional1 | full text1 | short text1 | 0 | 1 |
|
||
|
| OwnPageOptional1 | full text5 | short text5 | 1 | 1 |
|
||
|
When I log in as "user1"
|
||
|
# First come policies displayed on their own page.
|
||
|
Then I should see "OwnPageOptional1"
|
||
|
And I should see "short text5" in the "region-main" "region"
|
||
|
And I should see "full text5" in the "region-main" "region"
|
||
|
And I press "I agree to the OwnPageOptional1"
|
||
|
# Then come policies displayed on the consent page.
|
||
|
And I should see "ConsentPageOptional1" in the "region-main" "region"
|
||
|
And I should see "short text1" in the "region-main" "region"
|
||
|
And I should see "full text1" in the "region-main" "region"
|
||
|
And I press "Next"
|
||
|
And I should see "Please agree to the following policies"
|
||
|
And I set the field "No thanks, I decline ConsentPageOptional1" to "0"
|
||
|
And I press "Next"
|
||
|
# Accepted and declined policies are shown in the profile.
|
||
|
And I follow "Profile" in the user menu
|
||
|
And I follow "Policies and agreements"
|
||
|
And "Accepted" "text" should exist in the "OwnPageOptional1" "table_row"
|
||
|
And "Declined" "text" should exist in the "ConsentPageOptional1" "table_row"
|
||
|
|
||
|
Scenario: Users can withdraw an accepted optional policy and re-accept it again (js off)
|
||
|
Given the following policies exist:
|
||
|
| Name | Content | Summary | Agreementstyle | Optional |
|
||
|
| OwnPageOptional1 | full text1 | short text1 | 1 | 1 |
|
||
|
And I log in as "user1"
|
||
|
And I press "I agree to the OwnPageOptional1"
|
||
|
And I follow "Profile" in the user menu
|
||
|
And I follow "Policies and agreements"
|
||
|
And "Accepted" "text" should exist in the "OwnPageOptional1" "table_row"
|
||
|
And "Withdraw" "link" should exist in the "OwnPageOptional1" "table_row"
|
||
|
When I click on "Withdraw acceptance of OwnPageOptional1" "link" in the "OwnPageOptional1" "table_row"
|
||
|
Then I should see "Withdrawing policy"
|
||
|
And I should see "User One"
|
||
|
And I should see "OwnPageOptional1"
|
||
|
And I press "Withdraw user consent"
|
||
|
And "Declined" "text" should exist in the "OwnPageOptional1" "table_row"
|
||
|
And "Accept" "link" should exist in the "OwnPageOptional1" "table_row"
|
||
|
And I click on "Accept OwnPageOptional1" "link" in the "OwnPageOptional1" "table_row"
|
||
|
And I should see "Accepting policy"
|
||
|
And I should see "User One"
|
||
|
And I should see "OwnPageOptional1"
|
||
|
And I press "Give consent"
|
||
|
And "Accepted" "text" should exist in the "OwnPageOptional1" "table_row"
|
||
|
|
||
|
@javascript
|
||
|
Scenario: Users can withdraw an accepted optional policy and re-accept it again (js on)
|
||
|
Given the following policies exist:
|
||
|
| Name | Content | Summary | Agreementstyle | Optional |
|
||
|
| OwnPageOptional1 | full text1 | short text1 | 1 | 1 |
|
||
|
And I log in as "user1"
|
||
|
And I press "I agree to the OwnPageOptional1"
|
||
|
And I follow "Profile" in the user menu
|
||
|
And I follow "Policies and agreements"
|
||
|
And "Accepted" "text" should exist in the "OwnPageOptional1" "table_row"
|
||
|
And "Withdraw" "link" should exist in the "OwnPageOptional1" "table_row"
|
||
|
When I click on "Withdraw acceptance of OwnPageOptional1" "link" in the "OwnPageOptional1" "table_row"
|
||
|
Then I should see "Withdrawing policy"
|
||
|
And I should see "User One"
|
||
|
And I should see "OwnPageOptional1"
|
||
|
And I press "Withdraw user consent"
|
||
|
And "Declined" "text" should exist in the "OwnPageOptional1" "table_row"
|
||
|
And "Accept" "link" should exist in the "OwnPageOptional1" "table_row"
|
||
|
And I click on "Accept OwnPageOptional1" "link" in the "OwnPageOptional1" "table_row"
|
||
|
And I should see "Accepting policy"
|
||
|
And I should see "User One"
|
||
|
And I should see "OwnPageOptional1"
|
||
|
And I press "Give consent"
|
||
|
And "Accepted" "text" should exist in the "OwnPageOptional1" "table_row"
|
||
|
|
||
|
Scenario: Managers can see accepted, declined and pending acceptances of optional policies
|
||
|
Given the following policies exist:
|
||
|
| Name | Content | Summary | Agreementstyle | Optional |
|
||
|
| OwnPageOptional1 | full text1 | short text1 | 1 | 1 |
|
||
|
| OwnPageOptional2 | full text2 | short text2 | 1 | 1 |
|
||
|
And I log in as "user1"
|
||
|
And I press "I agree to the OwnPageOptional1"
|
||
|
And I press "No thanks, I decline OwnPageOptional2"
|
||
|
And I log out
|
||
|
And I log in as "manager"
|
||
|
And I press "I agree to the OwnPageOptional1"
|
||
|
And I press "I agree to the OwnPageOptional2"
|
||
|
When I navigate to "Users > Privacy and policies > User agreements" in site administration
|
||
|
# User One has accepted just some policies.
|
||
|
Then "Partially accepted" "text" should exist in the "User One" "table_row"
|
||
|
And "Details" "link" should exist in the "User One" "table_row"
|
||
|
# User Two did not have a chance to respond to the new policies yet.
|
||
|
And "Pending" "text" should exist in the "User Two" "table_row"
|
||
|
And "Details" "link" should exist in the "User Two" "table_row"
|
||
|
# Max Manager accepted all and can also change status of own acceptances.
|
||
|
And "Accepted" "text" should exist in the "Max Manager" "table_row"
|
||
|
And "Details" "link" should exist in the "Max Manager" "table_row"
|
||
|
And "Withdraw accepted policies" "link" should exist in the "Max Manager" "table_row"
|
||
|
And "Withdraw acceptance of OwnPageOptional1" "link" should exist in the "Max Manager" "table_row"
|
||
|
And "Withdraw acceptance of OwnPageOptional2" "link" should exist in the "Max Manager" "table_row"
|
||
|
|
||
|
Scenario: Administrators can see accepted, declined and pending acceptances of optional policies and also change them on behalf of other users
|
||
|
Given the following policies exist:
|
||
|
| Name | Content | Summary | Agreementstyle | Optional |
|
||
|
| OwnPageOptional1 | full text1 | short text1 | 1 | 1 |
|
||
|
| OwnPageOptional2 | full text2 | short text2 | 1 | 1 |
|
||
|
And I log in as "user1"
|
||
|
And I press "I agree to the OwnPageOptional1"
|
||
|
And I press "No thanks, I decline OwnPageOptional2"
|
||
|
And I log out
|
||
|
And I log in as "admin"
|
||
|
When I navigate to "Users > Privacy and policies > User agreements" in site administration
|
||
|
# User One has accepted just some policies.
|
||
|
Then "Partially accepted" "text" should exist in the "User One" "table_row"
|
||
|
And "Details" "link" should exist in the "User One" "table_row"
|
||
|
And "Withdraw acceptance of OwnPageOptional1" "link" should exist in the "User One" "table_row"
|
||
|
And "Accept OwnPageOptional2" "link" should exist in the "User One" "table_row"
|
||
|
# User Two did not have a chance to respond to the new policies yet.
|
||
|
And "Pending" "text" should exist in the "User Two" "table_row"
|
||
|
And "Accept pending policies" "link" should exist in the "User Two" "table_row"
|
||
|
And "Decline pending policies" "link" should exist in the "User Two" "table_row"
|
||
|
And "Accept OwnPageOptional1" "link" should exist in the "User Two" "table_row"
|
||
|
And "Decline OwnPageOptional1" "link" should exist in the "User Two" "table_row"
|
||
|
And "Accept OwnPageOptional2" "link" should exist in the "User Two" "table_row"
|
||
|
And "Decline OwnPageOptional2" "link" should exist in the "User Two" "table_row"
|
||
|
# Accept all policies on Max Manager's behalf.
|
||
|
And I click on "Accept pending policies" "link" in the "Max Manager" "table_row"
|
||
|
And I press "Give consent"
|
||
|
And "Accepted" "text" should exist in the "Max Manager" "table_row"
|
||
|
# Decline all policies on User Two's behalf.
|
||
|
And I click on "Decline pending policies" "link" in the "User Two" "table_row"
|
||
|
And I press "Decline user consent"
|
||
|
And "Declined on user's behalf" "text" should exist in the "User Two" "table_row"
|
||
|
And "Accepted" "text" should not exist in the "User Two" "table_row"
|
||
|
And "Pending" "text" should not exist in the "User Two" "table_row"
|
||
|
# Accept policy on User One's behalf.
|
||
|
And I click on "Accept OwnPageOptional2" "link" in the "User One" "table_row"
|
||
|
And I press "Give consent"
|
||
|
And "Accepted on user's behalf" "text" should exist in the "User One" "table_row"
|
||
|
And "Declined" "text" should not exist in the "User One" "table_row"
|
||
|
And "Pending" "text" should not exist in the "User One" "table_row"
|