成绩评论

tests/Jiaowu.Api.Tests/GradeAnalyticsCommentsControllerTests.cs

@@ -0,0 +1,125 @@
+using Jiaowu.Api.Controllers;
+using Jiaowu.Api.Domain.Academic;
+using Jiaowu.Api.Domain.Identity;
+using Jiaowu.Api.Infrastructure.Auth;
+using Jiaowu.Api.Infrastructure.OfficialDocuments;
+using Jiaowu.Api.Infrastructure.Persistence;
+using Microsoft.AspNetCore.Mvc;
+using Microsoft.Data.Sqlite;
+using Microsoft.EntityFrameworkCore;
+
+namespace Jiaowu.Api.Tests;
+
+public sealed class GradeAnalyticsCommentsControllerTests
+{
+    [Fact]
+    public async Task AnonymousComment_HidesAuthorButKeepsOwnerForModeration()
+    {
+        await using var connection = new SqliteConnection("Data Source=:memory:");
+        await connection.OpenAsync();
+        await using var db = new AppDbContext(new DbContextOptionsBuilder<AppDbContext>()
+            .UseSqlite(connection).Options);
+        await db.Database.EnsureCreatedAsync();
+
+        var author = new ApplicationUser { UserName = "teacher", DisplayName = "王老师" };
+        var otherUser = new ApplicationUser { UserName = "other", DisplayName = "李老师" };
+        var college = new College { Code = "CS", Name = "计算机学院" };
+        var term = new AcademicTerm
+        {
+            Code = "2026-1", Name = "2026-2027 学年第一学期", AcademicYear = "2026-2027",
+            Season = TermSeason.Autumn, StartDate = new DateOnly(2026, 9, 1),
+            EndDate = new DateOnly(2027, 1, 20)
+        };
+        var course = new Course
+        {
+            Code = "CS101", Name = "程序设计基础", CollegeId = college.Id, Credits = 4,
+            TotalHours = 64, LectureHours = 48, PracticeHours = 16,
+            Nature = CourseNature.MajorRequired, AssessmentMethod = AssessmentMethod.Examination
+        };
+        var task = new TeachingTask
+        {
+            TaskNumber = "2026-1-CS101-01", Name = "程序设计基础教学班", CourseId = course.Id,
+            AcademicTermId = term.Id, Capacity = 60, Status = TeachingTaskStatus.Published
+        };
+        var sheet = new GradeSheet { TeachingTaskId = task.Id, Status = GradeSheetStatus.Published };
+        var statistic = new TeachingTaskGradeStatistic
+        {
+            GradeSheetId = sheet.Id, TeachingTaskId = task.Id, CourseId = course.Id,
+            AcademicTermId = term.Id, StudentCount = 1, PassedCount = 1, ExcellentCount = 0,
+            HighestScore = 80, AverageScore = 80, MedianScore = 80, LowestScore = 80,
+            StandardDeviation = 0, PassRate = 100, ExcellentRate = 0, CalculatedAt = DateTime.UtcNow
+        };
+        db.Users.AddRange(author, otherUser);
+        db.AddRange(college, term, course, task, sheet, statistic);
+        await db.SaveChangesAsync();
+        Assert.True(await db.TeachingTaskGradeStatistics.AnyAsync(x => x.CourseId == course.Id));
+
+        var authorController = CreateController(db, author.Id, SystemRoles.AcademicAdmin);
+        var create = await authorController.CreateComment(
+            course.Id, new CreateGradeAnalyticsCommentRequest("建议关注低分段的变化。", true), default);
+        Assert.IsType<CreatedAtActionResult>(create);
+
+        var stored = await db.GradeAnalyticsComments.SingleAsync();
+        Assert.Equal(course.Id, stored.CourseId);
+        Assert.Equal(author.Id, stored.AuthorUserId);
+        Assert.True(stored.IsAnonymous);
+
+        var otherController = CreateController(db, otherUser.Id, SystemRoles.Leader);
+        var list = await otherController.GetComments(course.Id, null, null, 30, default);
+        using var document = System.Text.Json.JsonDocument.Parse(
+            System.Text.Json.JsonSerializer.Serialize(((OkObjectResult)list).Value));
+        var item = document.RootElement.GetProperty("Items")[0];
+        Assert.Equal("匿名用户", item.GetProperty("AuthorName").GetString());
+
+        stored.CreatedAt = new DateTime(2026, 8, 22, 8, 0, 0, DateTimeKind.Utc);
+        await db.SaveChangesAsync();
+        await authorController.CreateComment(
+            course.Id, new CreateGradeAnalyticsCommentRequest("建议持续跟踪课程改进。", false), default);
+        var newer = await db.GradeAnalyticsComments
+            .SingleAsync(x => x.Id != stored.Id);
+        newer.CreatedAt = stored.CreatedAt;
+        await db.SaveChangesAsync();
+
+        var firstPage = await otherController.GetComments(course.Id, null, null, 1, default);
+        using var firstPageDocument = System.Text.Json.JsonDocument.Parse(
+            System.Text.Json.JsonSerializer.Serialize(((OkObjectResult)firstPage).Value));
+        Assert.True(firstPageDocument.RootElement.GetProperty("HasMore").GetBoolean());
+        var cursor = firstPageDocument.RootElement.GetProperty("NextCursor");
+        var secondPage = await otherController.GetComments(
+            course.Id,
+            cursor.GetProperty("CreatedAt").GetDateTime(),
+            cursor.GetProperty("Id").GetGuid(),
+            1,
+            default);
+        using var secondPageDocument = System.Text.Json.JsonDocument.Parse(
+            System.Text.Json.JsonSerializer.Serialize(((OkObjectResult)secondPage).Value));
+        Assert.Single(secondPageDocument.RootElement.GetProperty("Items").EnumerateArray());
+
+        var forbidden = await otherController.DeleteComment(stored.Id, default);
+        Assert.IsType<ForbidResult>(forbidden);
+
+        var adminController = CreateController(db, otherUser.Id, SystemRoles.AcademicAdmin);
+        var deleted = await adminController.DeleteComment(stored.Id, default);
+        Assert.IsType<NoContentResult>(deleted);
+        await adminController.DeleteComment(newer.Id, default);
+        Assert.Empty(await db.GradeAnalyticsComments.ToListAsync());
+    }
+
+    private static GradeAnalyticsController CreateController(
+        AppDbContext db, Guid userId, params string[] roles) =>
+        new(db, new TestDataScope(userId, roles), new OfficialDocumentOptions());
+
+    private sealed class TestDataScope(Guid userId, params string[] roles)
+        : ICurrentUserDataScope
+    {
+        public CurrentUserScope Current { get; } = new(
+            userId,
+            null,
+            null,
+            roles.Contains(SystemRoles.AcademicAdmin, StringComparer.OrdinalIgnoreCase) ||
+            roles.Contains(SystemRoles.Leader, StringComparer.OrdinalIgnoreCase)
+                ? DataScope.All
+                : DataScope.Self,
+            new HashSet<string>(roles, StringComparer.OrdinalIgnoreCase));
+    }
+}