diff --git a/app/controllers/organisations_controller.rb b/app/controllers/organisations_controller.rb index 4612e6bc9..dc5a36c9b 100644 --- a/app/controllers/organisations_controller.rb +++ b/app/controllers/organisations_controller.rb @@ -21,7 +21,7 @@ class OrganisationsController < ApplicationController end def schemes - organisation_schemes = Scheme.where(owning_organisation: [@organisation] + @organisation.parent_organisations) + organisation_schemes = Scheme.visible.where(owning_organisation: [@organisation] + @organisation.parent_organisations) @pagy, @schemes = pagy(filter_manager.filtered_schemes(organisation_schemes, search_term, session_filters)) @searched = search_term.presence diff --git a/app/controllers/schemes_controller.rb b/app/controllers/schemes_controller.rb index 5eec2a294..cfc6fe8a0 100644 --- a/app/controllers/schemes_controller.rb +++ b/app/controllers/schemes_controller.rb @@ -13,11 +13,11 @@ class SchemesController < ApplicationController def index redirect_to schemes_organisation_path(current_user.organisation) unless current_user.support? - all_schemes = Scheme.all + all_visible_schemes = Scheme.visible - @pagy, @schemes = pagy(filter_manager.filtered_schemes(all_schemes, search_term, session_filters)) + @pagy, @schemes = pagy(filter_manager.filtered_schemes(all_visible_schemes, search_term, session_filters)) @searched = search_term.presence - @total_count = all_schemes.size + @total_count = all_visible_schemes.size @filter_type = "schemes" end @@ -223,6 +223,11 @@ class SchemesController < ApplicationController def csv_confirmation; end + def delete + @scheme.discard! + redirect_to schemes_organisation_path(@scheme.owning_organisation), notice: I18n.t("notification.scheme_deleted", service_name: @scheme.service_name) + end + private def authorize_user diff --git a/app/helpers/schemes_helper.rb b/app/helpers/schemes_helper.rb index 078419619..1cc89d3d5 100644 --- a/app/helpers/schemes_helper.rb +++ b/app/helpers/schemes_helper.rb @@ -15,6 +15,10 @@ module SchemesHelper return govuk_button_link_to "Reactivate this scheme", scheme_new_reactivation_path(scheme) if scheme.deactivated? end + def delete_scheme_link(scheme) + govuk_button_link_to "Delete this scheme", scheme_delete_confirmation_path(scheme), warning: true + end + def owning_organisation_options(current_user) all_orgs = Organisation.all.map { |org| OpenStruct.new(id: org.id, name: org.name) } user_org = [OpenStruct.new(id: current_user.organisation_id, name: current_user.organisation.name)] diff --git a/app/models/form/lettings/questions/scheme_id.rb b/app/models/form/lettings/questions/scheme_id.rb index 4c533f43a..ef7904cc8 100644 --- a/app/models/form/lettings/questions/scheme_id.rb +++ b/app/models/form/lettings/questions/scheme_id.rb @@ -19,8 +19,8 @@ class Form::Lettings::Questions::SchemeId < ::Form::Question answer_opts = { "" => "Select an option" } return answer_opts unless ActiveRecord::Base.connected? - Scheme.select(:id, :service_name, :primary_client_group, - :secondary_client_group).each_with_object(answer_opts) do |scheme, hsh| + Scheme.visible.select(:id, :service_name, :primary_client_group, + :secondary_client_group).each_with_object(answer_opts) do |scheme, hsh| hsh[scheme.id.to_s] = scheme hsh end @@ -29,10 +29,10 @@ class Form::Lettings::Questions::SchemeId < ::Form::Question def displayed_answer_options(lettings_log, _user = nil) organisation = lettings_log.owning_organisation || lettings_log.created_by&.organisation schemes = if organisation - Scheme.includes(:locations).select(:id).where(owning_organisation_id: organisation.id, - confirmed: true) + Scheme.visible.includes(:locations).select(:id).where(owning_organisation_id: organisation.id, + confirmed: true) else - Scheme.includes(:locations).select(:id).where(confirmed: true) + Scheme.visible.includes(:locations).select(:id).where(confirmed: true) end filtered_scheme_ids = schemes.joins(:locations).merge(Location.started_in_2_weeks).map(&:id) answer_options.select do |k, _v| diff --git a/app/models/scheme.rb b/app/models/scheme.rb index 0bfd56373..2518293a0 100644 --- a/app/models/scheme.rb +++ b/app/models/scheme.rb @@ -77,6 +77,8 @@ class Scheme < ApplicationRecord .where.not(id: activating_soon.pluck(:id)) } + scope :visible, -> { where(discarded_at: nil) } + validate :validate_confirmed validate :validate_owning_organisation @@ -229,7 +231,7 @@ class Scheme < ApplicationRecord end def validate_confirmed - required_attributes = attribute_names - %w[id created_at updated_at old_id old_visible_id confirmed end_date sensitive secondary_client_group total_units deactivation_date deactivation_date_type startdate] + required_attributes = attribute_names - %w[id created_at updated_at old_id old_visible_id confirmed end_date sensitive secondary_client_group total_units deactivation_date deactivation_date_type startdate discarded_at] if confirmed == true required_attributes.any? do |attribute| @@ -264,6 +266,7 @@ class Scheme < ApplicationRecord end def status_at(date) + return :deleted if discarded_at.present? return :incomplete unless confirmed && locations.confirmed.any? return :deactivated if open_deactivation&.deactivation_date.present? && date >= open_deactivation.deactivation_date return :deactivating_soon if open_deactivation&.deactivation_date.present? && date < open_deactivation.deactivation_date @@ -288,4 +291,9 @@ class Scheme < ApplicationRecord def deactivates_in_a_long_time? status_at(6.months.from_now) == :deactivating_soon end + + def discard! + update!(discarded_at: Time.zone.now) + locations.each(&:discard!) + end end diff --git a/app/policies/scheme_policy.rb b/app/policies/scheme_policy.rb index f2710eb06..6b97a46de 100644 --- a/app/policies/scheme_policy.rb +++ b/app/policies/scheme_policy.rb @@ -65,9 +65,26 @@ class SchemePolicy end end + def delete_confirmation? + delete? + end + + def delete? + return false unless user.support? + return false unless scheme.status == :incomplete || scheme.status == :deactivated + + !has_any_logs_in_editable_collection_period + end + private def scheme_owned_by_user_org_or_stock_owner scheme&.owning_organisation == user.organisation || user.organisation.stock_owners.exists?(scheme&.owning_organisation_id) end + + def has_any_logs_in_editable_collection_period + editable_from_date = FormHandler.instance.earliest_open_for_editing_collection_start_date + + LettingsLog.where(scheme_id: scheme.id).after_date(editable_from_date).or(LettingsLog.where(startdate: nil, scheme_id: scheme.id)).any? + end end diff --git a/app/views/schemes/check_answers.html.erb b/app/views/schemes/check_answers.html.erb index 71e23b25c..a98c86a51 100644 --- a/app/views/schemes/check_answers.html.erb +++ b/app/views/schemes/check_answers.html.erb @@ -23,4 +23,8 @@ <% if SchemePolicy.new(current_user, @scheme).create? %> <%= f.govuk_submit button_label %> <% end %> + + <% if SchemePolicy.new(current_user, @scheme).delete? %> + <%= delete_scheme_link(@scheme) %> + <% end %> <% end %> diff --git a/app/views/schemes/delete_confirmation.html.erb b/app/views/schemes/delete_confirmation.html.erb new file mode 100644 index 000000000..d4b0dd5ea --- /dev/null +++ b/app/views/schemes/delete_confirmation.html.erb @@ -0,0 +1,24 @@ +<% content_for :before_content do %> + <% content_for :title, "Are you sure you want to delete this scheme?" %> + <%= govuk_back_link(href: :back) %> +<% end %> + +
+
+ Delete <%= @scheme.service_name %> +

+ <%= content_for(:title) %> +

+ + <%= govuk_warning_text(text: "You will not be able to undo this action.") %> + +
+ <%= govuk_button_to( + "Delete this scheme", + scheme_delete_path(@scheme), + method: :delete, + ) %> + <%= govuk_button_link_to "Cancel", scheme_path(@scheme), html: { method: :get }, secondary: true %> +
+
+
diff --git a/app/views/schemes/show.html.erb b/app/views/schemes/show.html.erb index c45cefb14..c926b69a6 100644 --- a/app/views/schemes/show.html.erb +++ b/app/views/schemes/show.html.erb @@ -29,6 +29,9 @@ <% if @scheme.confirmed? && @scheme.locations.confirmed.none? && LocationPolicy.new(current_user, @scheme.locations.new).create? %> Complete this scheme by adding a location using the <%= govuk_link_to("‘locations’ tab", scheme_locations_path(@scheme)) %>. <% end %> + <% if @scheme.deactivated? && current_user.support? && !SchemePolicy.new(current_user, @scheme).delete? %> + This scheme was active in an open or editable collection year, and cannot be deleted. + <% end %> <% elsif attr[:id] != "secondary_client_group" || @scheme.has_other_client_group == "Yes" %> @@ -49,3 +52,7 @@ <% if SchemePolicy.new(current_user, @scheme).deactivate? %> <%= toggle_scheme_link(@scheme) %> <% end %> + +<% if SchemePolicy.new(current_user, @scheme).delete? %> + <%= delete_scheme_link(@scheme) %> +<% end %> diff --git a/config/locales/en.yml b/config/locales/en.yml index 640dc6902..6a105b213 100644 --- a/config/locales/en.yml +++ b/config/locales/en.yml @@ -197,6 +197,7 @@ en: one: "There is %{count} set of duplicate logs" other: "There are %{count} sets of duplicate logs" location_deleted: "%{postcode} has been deleted." + scheme_deleted: "%{service_name} has been deleted." validations: organisation: diff --git a/config/routes.rb b/config/routes.rb index f7778f589..f0f497291 100644 --- a/config/routes.rb +++ b/config/routes.rb @@ -79,6 +79,8 @@ Rails.application.routes.draw do patch "new-deactivation", to: "schemes#new_deactivation" patch "deactivate", to: "schemes#deactivate" patch "reactivate", to: "schemes#reactivate" + get "delete-confirmation", to: "schemes#delete_confirmation" + delete "delete", to: "schemes#delete" collection do get "csv-download", to: "schemes#download_csv" diff --git a/db/migrate/20240304100017_add_discarded_at_column_to_schemes.rb b/db/migrate/20240304100017_add_discarded_at_column_to_schemes.rb new file mode 100644 index 000000000..57ced4dee --- /dev/null +++ b/db/migrate/20240304100017_add_discarded_at_column_to_schemes.rb @@ -0,0 +1,5 @@ +class AddDiscardedAtColumnToSchemes < ActiveRecord::Migration[7.0] + def change + add_column :schemes, :discarded_at, :datetime + end +end diff --git a/db/schema.rb b/db/schema.rb index e1e788d56..da9c4b0aa 100644 --- a/db/schema.rb +++ b/db/schema.rb @@ -723,6 +723,7 @@ ActiveRecord::Schema[7.0].define(version: 2024_03_19_122706) do t.integer "total_units" t.boolean "confirmed" t.datetime "startdate" + t.datetime "discarded_at" t.index ["owning_organisation_id"], name: "index_schemes_on_owning_organisation_id" end diff --git a/spec/models/form/lettings/questions/scheme_id_spec.rb b/spec/models/form/lettings/questions/scheme_id_spec.rb index c0cf6fa3b..ec9283113 100644 --- a/spec/models/form/lettings/questions/scheme_id_spec.rb +++ b/spec/models/form/lettings/questions/scheme_id_spec.rb @@ -147,6 +147,19 @@ RSpec.describe Form::Lettings::Questions::SchemeId, type: :model do expect(question.displayed_answer_options(lettings_log)).to eq(expected_answer) end end + + context "when the scheme is deleted" do + let(:scheme) { FactoryBot.create(:scheme, owning_organisation: organisation, discarded_at: Time.zone.yesterday) } + + before do + FactoryBot.create(:location, startdate: Time.zone.tomorrow, scheme:) + end + + it "has the correct answer_options based on the schemes the user's organisation owns or manages" do + expected_answer = { "" => "Select an option" } + expect(question.displayed_answer_options(lettings_log)).to eq(expected_answer) + end + end end context "when there are no schemes with locations" do diff --git a/spec/models/scheme_spec.rb b/spec/models/scheme_spec.rb index 2f1036c1a..9b663595c 100644 --- a/spec/models/scheme_spec.rb +++ b/spec/models/scheme_spec.rb @@ -304,6 +304,14 @@ RSpec.describe Scheme, type: :model do expect(scheme.status).to eq(:activating_soon) end end + + context "when scheme has discarded_at value" do + let(:scheme) { FactoryBot.create(:scheme, discarded_at: Time.zone.now) } + + it "returns deleted" do + expect(scheme.status).to eq(:deleted) + end + end end describe "status_at" do diff --git a/spec/policies/scheme_policy_spec.rb b/spec/policies/scheme_policy_spec.rb new file mode 100644 index 000000000..c22be81bb --- /dev/null +++ b/spec/policies/scheme_policy_spec.rb @@ -0,0 +1,94 @@ +require "rails_helper" + +RSpec.describe SchemePolicy do + subject(:policy) { described_class } + + let(:data_provider) { create(:user, :data_provider) } + let(:data_coordinator) { create(:user, :data_coordinator) } + let(:support) { create(:user, :support) } + + permissions :delete? do + let(:scheme) { create(:scheme) } + + before do + create(:location, scheme:) + end + + context "with active scheme" do + it "does not allow deleting a scheme as a provider" do + expect(policy).not_to permit(data_provider, scheme) + end + + it "does not allow allows deleting a scheme as a coordinator" do + expect(policy).not_to permit(data_coordinator, scheme) + end + + it "does not allow deleting a scheme as a support user" do + expect(policy).not_to permit(support, scheme) + end + end + + context "with incomplete scheme" do + let(:scheme) { create(:scheme, :incomplete) } + + it "does not allow deleting a scheme as a provider" do + expect(policy).not_to permit(data_provider, scheme) + end + + it "does not allow allows deleting a scheme as a coordinator" do + expect(policy).not_to permit(data_coordinator, scheme) + end + + it "allows deleting a scheme as a support user" do + expect(policy).to permit(support, scheme) + end + end + + context "with deactivated scheme" do + before do + scheme.scheme_deactivation_periods << create(:scheme_deactivation_period, deactivation_date: Time.zone.local(2024, 4, 10), scheme:) + scheme.save! + Timecop.freeze(Time.utc(2024, 4, 10)) + log = create(:lettings_log, :sh, owning_organisation: scheme.owning_organisation, scheme:) + log.startdate = Time.zone.local(2022, 10, 10) + log.save!(validate: false) + end + + after do + Timecop.unfreeze + end + + context "and associated logs in editable collection period" do + before do + create(:lettings_log, :sh, owning_organisation: scheme.owning_organisation, scheme:, startdate: Time.zone.local(2024, 4, 9)) + end + + it "does not allow deleting a scheme as a provider" do + expect(policy).not_to permit(data_provider, scheme) + end + + it "does not allow allows deleting a scheme as a coordinator" do + expect(policy).not_to permit(data_coordinator, scheme) + end + + it "does not allow deleting a scheme as a support user" do + expect(policy).not_to permit(support, scheme) + end + end + + context "and no associated logs in editable collection period" do + it "does not allow deleting a scheme as a provider" do + expect(policy).not_to permit(data_provider, scheme) + end + + it "does not allow allows deleting a scheme as a coordinator" do + expect(policy).not_to permit(data_coordinator, scheme) + end + + it "allows deleting a scheme as a support user" do + expect(policy).to permit(support, scheme) + end + end + end + end +end diff --git a/spec/requests/organisations_controller_spec.rb b/spec/requests/organisations_controller_spec.rb index 68de93c51..22d74470c 100644 --- a/spec/requests/organisations_controller_spec.rb +++ b/spec/requests/organisations_controller_spec.rb @@ -44,6 +44,7 @@ RSpec.describe OrganisationsController, type: :request do let(:user) { create(:user, :support) } let!(:schemes) { create_list(:scheme, 5) } let!(:same_org_scheme) { create(:scheme, owning_organisation: user.organisation) } + let!(:deleted_scheme) { create(:scheme, owning_organisation: user.organisation, discarded_at: Time.zone.yesterday) } before do allow(user).to receive(:need_two_factor_authentication?).and_return(false) @@ -131,6 +132,10 @@ RSpec.describe OrganisationsController, type: :request do end end + it "does not show deleted schemes" do + expect(page).not_to have_content(deleted_scheme.id_to_display) + end + context "when searching" do let!(:searched_scheme) { create(:scheme, owning_organisation: user.organisation) } let(:search_param) { searched_scheme.id } diff --git a/spec/requests/schemes_controller_spec.rb b/spec/requests/schemes_controller_spec.rb index 6e00eb733..c33397983 100644 --- a/spec/requests/schemes_controller_spec.rb +++ b/spec/requests/schemes_controller_spec.rb @@ -56,6 +56,19 @@ RSpec.describe SchemesController, type: :request do end end + context "when there are deleted schemes" do + let!(:deleted_scheme) { create(:scheme, service_name: "deleted", discarded_at: Time.zone.yesterday, owning_organisation: user.organisation) } + + before do + get "/schemes" + end + + it "does not show deleted schemes" do + follow_redirect! + expect(page).not_to have_content(deleted_scheme.id_to_display) + end + end + context "when parent organisation has schemes" do let(:parent_organisation) { create(:organisation) } let!(:parent_schemes) { create_list(:scheme, 5, owning_organisation: parent_organisation) } @@ -191,6 +204,18 @@ RSpec.describe SchemesController, type: :request do expect(page).to have_content("Schemes") end + context "when there are deleted schemes" do + let!(:deleted_scheme) { create(:scheme, service_name: "deleted", discarded_at: Time.zone.yesterday, owning_organisation: user.organisation) } + + before do + get "/schemes" + end + + it "does not show deleted schemes" do + expect(page).not_to have_content(deleted_scheme.id_to_display) + end + end + describe "scheme and location csv downloads" do let!(:same_org_scheme) { create(:scheme, owning_organisation: user.organisation) } let!(:specific_organisation) { create(:organisation) } @@ -577,6 +602,11 @@ RSpec.describe SchemesController, type: :request do expect(response).to have_http_status(:ok) expect(page).to have_link("Reactivate this scheme", href: "/schemes/#{scheme.id}/new-reactivation") end + + it "does not render delete this scheme" do + expect(response).to have_http_status(:ok) + expect(page).not_to have_link("Delete this scheme", href: "/schemes/#{scheme.id}/delete-confirmation") + end end context "with scheme that's deactivating soon" do @@ -712,6 +742,92 @@ RSpec.describe SchemesController, type: :request do expect(page).to have_content(specific_scheme.support_type) expect(page).to have_content(specific_scheme.intended_stay) end + + context "when looking at scheme details" do + let!(:scheme) { create(:scheme, owning_organisation: user.organisation) } + let(:add_deactivations) { scheme.scheme_deactivation_periods << scheme_deactivation_period } + + before do + create(:location, scheme:) + Timecop.freeze(Time.utc(2022, 10, 10)) + sign_in user + add_deactivations + scheme.save! + get "/schemes/#{scheme.id}" + end + + after do + Timecop.unfreeze + end + + context "with active scheme" do + let(:add_deactivations) {} + + it "does not render delete this scheme" do + expect(response).to have_http_status(:ok) + expect(page).not_to have_link("Delete this scheme", href: "/schemes/#{scheme.id}/delete-confirmation") + end + + it "does not render informative text about deleting the scheme" do + expect(response).to have_http_status(:ok) + expect(page).not_to have_content("This scheme was active in an open or editable collection year, and cannot be deleted.") + end + end + + context "with deactivated scheme" do + let(:scheme_deactivation_period) { create(:scheme_deactivation_period, deactivation_date: Time.zone.local(2022, 10, 9), scheme:) } + + it "renders delete this scheme" do + expect(response).to have_http_status(:ok) + expect(page).to have_link("Delete this scheme", href: "/schemes/#{scheme.id}/delete-confirmation") + end + + context "and associated logs in editable collection period" do + before do + create(:lettings_log, :sh, scheme:, startdate: Time.zone.local(2022, 9, 9), owning_organisation: user.organisation) + get "/schemes/#{scheme.id}" + end + + it "does not render delete this scheme" do + expect(response).to have_http_status(:ok) + expect(page).not_to have_link("Delete this scheme", href: "/schemes/#{scheme.id}/delete-confirmation") + end + + it "adds informative text about deleting the scheme" do + expect(response).to have_http_status(:ok) + expect(page).to have_content("This scheme was active in an open or editable collection year, and cannot be deleted.") + end + end + end + + context "with scheme that's deactivating soon" do + let(:scheme_deactivation_period) { create(:scheme_deactivation_period, deactivation_date: Time.zone.local(2022, 10, 12), scheme:) } + + it "does not render delete this scheme" do + expect(response).to have_http_status(:ok) + expect(page).not_to have_link("Delete this scheme", href: "/schemes/#{scheme.id}/delete-confirmation") + end + end + + context "with scheme that's deactivating in more than 6 months" do + let(:scheme_deactivation_period) { create(:scheme_deactivation_period, deactivation_date: Time.zone.local(2023, 5, 12), scheme:) } + + it "does not render delete this scheme" do + expect(response).to have_http_status(:ok) + expect(page).not_to have_link("Delete this scheme", href: "/schemes/#{scheme.id}/delete-confirmation") + end + end + + context "with incomplete scheme" do + let(:add_deactivations) {} + let!(:scheme) { create(:scheme, :incomplete, owning_organisation: user.organisation) } + + it "renders delete this scheme" do + expect(response).to have_http_status(:ok) + expect(page).to have_link("Delete this scheme", href: "/schemes/#{scheme.id}/delete-confirmation") + end + end + end end end @@ -2132,6 +2248,7 @@ RSpec.describe SchemesController, type: :request do let!(:scheme) { create(:scheme) } before do + create(:location, scheme:) allow(user).to receive(:need_two_factor_authentication?).and_return(false) sign_in user get "/schemes/#{scheme.id}/check-answers" @@ -2141,6 +2258,22 @@ RSpec.describe SchemesController, type: :request do expect(response).to have_http_status(:ok) expect(page).to have_content("Check your changes before creating this scheme") end + + context "with an active scheme" do + it "does not render delete this scheme" do + expect(scheme.status).to eq(:active) + expect(page).not_to have_link("Delete this scheme", href: "/schemes/#{scheme.id}/delete-confirmation") + end + end + + context "with an incomplete scheme" do + let(:scheme) { create(:scheme, :incomplete) } + + it "renders delete this scheme" do + expect(scheme.reload.status).to eq(:incomplete) + expect(page).to have_link("Delete this scheme", href: "/schemes/#{scheme.id}/delete-confirmation") + end + end end end @@ -2641,4 +2774,157 @@ RSpec.describe SchemesController, type: :request do end end end + + describe "#delete-confirmation" do + let(:scheme) { create(:scheme, owning_organisation: user.organisation) } + + before do + Timecop.freeze(Time.utc(2022, 10, 10)) + scheme.scheme_deactivation_periods << create(:scheme_deactivation_period, deactivation_date: Time.zone.local(2022, 10, 9), scheme:) + scheme.save! + get "/schemes/#{scheme.id}/delete-confirmation" + end + + after do + Timecop.unfreeze + end + + context "when not signed in" do + it "redirects to the sign in page" do + expect(response).to redirect_to("/account/sign-in") + end + end + + context "when signed in" do + before do + allow(user).to receive(:need_two_factor_authentication?).and_return(false) + sign_in user + get "/schemes/#{scheme.id}/delete-confirmation" + end + + context "with a data provider user" do + let(:user) { create(:user) } + + it "returns 401 unauthorized" do + expect(response).to have_http_status(:unauthorized) + end + end + + context "with a data coordinator user" do + let(:user) { create(:user, :data_coordinator) } + + it "returns 401 unauthorized" do + expect(response).to have_http_status(:unauthorized) + end + end + + context "with a support user user" do + let(:user) { create(:user, :support) } + + it "shows the correct title" do + expect(page.find("h1").text).to include "Are you sure you want to delete this scheme?" + end + + it "shows a warning to the user" do + expect(page).to have_selector(".govuk-warning-text", text: "You will not be able to undo this action") + end + + it "shows a button to delete the selected scheme" do + expect(page).to have_selector("form.button_to button", text: "Delete this scheme") + end + + it "the delete scheme button submits the correct data to the correct path" do + form_containing_button = page.find("form.button_to") + + expect(form_containing_button[:action]).to eq scheme_delete_path(scheme) + expect(form_containing_button).to have_field "_method", type: :hidden, with: "delete" + end + + it "shows a cancel link with the correct style" do + expect(page).to have_selector("a.govuk-button--secondary", text: "Cancel") + end + + it "shows cancel link that links back to the scheme page" do + expect(page).to have_link(text: "Cancel", href: scheme_path(scheme)) + end + end + end + end + + describe "#delete" do + let(:scheme) { create(:scheme, service_name: "Scheme to delete", owning_organisation: user.organisation) } + let!(:locations) { create_list(:location, 2, scheme:, created_at: Time.zone.local(2022, 4, 1)) } + + before do + delete "/schemes/#{scheme.id}/delete" + end + + context "when not signed in" do + it "redirects to the sign in page" do + expect(response).to redirect_to("/account/sign-in") + end + end + + context "when signed in" do + before do + Timecop.freeze(Time.utc(2022, 10, 10)) + scheme.scheme_deactivation_periods << create(:scheme_deactivation_period, deactivation_date: Time.zone.local(2022, 10, 9), scheme:) + scheme.save! + allow(user).to receive(:need_two_factor_authentication?).and_return(false) + sign_in user + delete "/schemes/#{scheme.id}/delete" + end + + after do + Timecop.unfreeze + end + + context "with a data provider user" do + let(:user) { create(:user) } + + it "returns 401 unauthorized" do + expect(response).to have_http_status(:unauthorized) + end + end + + context "with a data coordinator user" do + let(:user) { create(:user, :data_coordinator) } + + it "returns 401 unauthorized" do + expect(response).to have_http_status(:unauthorized) + end + end + + context "with a support user user" do + let(:user) { create(:user, :support) } + + it "deletes the scheme" do + scheme.reload + expect(scheme.status).to eq(:deleted) + expect(scheme.discarded_at).not_to be nil + end + + it "deletes associated locations" do + locations.each do |location| + location.reload + expect(location.status).to eq(:deleted) + expect(location.discarded_at).not_to be nil + end + end + + it "redirects to the schemes list and displays a notice that the scheme has been deleted" do + expect(response).to redirect_to schemes_organisation_path(scheme.owning_organisation) + follow_redirect! + expect(page).to have_selector(".govuk-notification-banner--success") + expect(page).to have_selector(".govuk-notification-banner--success", text: "Scheme to delete has been deleted.") + end + + it "does not display the deleted scheme" do + expect(response).to redirect_to schemes_organisation_path(scheme.owning_organisation) + follow_redirect! + expect(page).not_to have_link("Scheme to delete") + end + end + end + end end