Allow producer to edit their products on hubs' orders

app/services/search_orders.rb

@@ -28,8 +28,7 @@
   end
 
   def search_query
-    base_query = ::Permissions::Order.new(current_user).editable_orders.not_empty
-      .or(::Permissions::Order.new(current_user).editable_orders.finalized)
+    base_query = ::Permissions::Order.new(current_user).editable_orders.not_empty.or(::Permissions::Order.new(current_user).editable_orders.finalized)
 
     return base_query if params[:shipping_method_id].blank?
 

app/views/spree/admin/orders/index.html.haml

@@ -3,7 +3,7 @@
 
 - content_for :minimal_js, true
 
-- if can?(:create, Spree::Order)
+- if can?(:create, Spree::Order) && spree_current_user.can_manage_orders?
   - content_for :page_actions do
     %li
       = button_link_to t('.new_order'), spree.new_admin_order_url, icon: 'icon-plus', id: 'admin_new_order'

spec/lib/open_food_network/scope_variants_for_search_spec.rb

@@ -190,6 +190,22 @@
           to eq(["Product 1", "Product a", "Product b", "Product c"])
       end
     end
+
+    context "when search is done by the producer allowing to edit orders" do
+      let(:params) { { q: "product" } }
+      let(:producer) { create(:supplier_enterprise) }
+      let(:spree_current_user) { instance_double('Spree::User', enterprises: Enterprise.where(id: producer.id), can_manage_line_items_in_orders_only?: true) }
+
+      it "returns all products distributed through distributors allowing producers to edit orders" do
+        v1.supplier_id = producer.id
+        v2.supplier_id = producer.id
+        v1.save!
+        v2.save!
+
+        expect(result).to include v1, v2
+        expect(result).not_to include v3, v4
+      end
+    end
   end
 
   private

spec/models/enterprise_spec.rb

@@ -1012,6 +1012,29 @@ def should_have_enterprise_relationship(opts = {})
       expect(expected).to include(sender)
     end
   end
+
+  describe "#is_producer" do
+    context "when enterprise is_primary_producer and sells none" do
+      it "returns true" do
+        enterprise = build(:supplier_enterprise)
+        expect(enterprise.is_producer).to be true
+      end
+    end
+
+    context "when enterprise is_primary_producer and sells any" do
+      it "returns false" do
+        enterprise = build(:enterprise, is_primary_producer: true, sells: "any")
+        expect(enterprise.is_producer).to be false
+      end
+    end
+
+    context "when enterprise is_primary_producer and sells own" do
+      it "returns false" do
+        enterprise = build(:enterprise, is_primary_producer: true, sells: "own")
+        expect(enterprise.is_producer).to be false
+      end
+    end
+  end
 end
 
 def enterprise_name_error(owner_email)

spec/models/spree/user_spec.rb

@@ -298,4 +298,39 @@
       end
     end
   end
+
+  describe "#can_manage_line_items_in_orders_only?" do
+    let(:producer) { create(:supplier_enterprise) }
+    let(:order) { create(:order, distributor: distributor) }
+
+    subject { user.can_manage_line_items_in_orders_only? }
+
+    context "when user has producer" do
+      let(:user) { create(:user, enterprises: [producer]) }
+
+      context "order containing their product" do
+        before do
+          order.line_items << create(:line_item, product: create(:product, supplier_id: producer.id))
+        end
+        context "order distributor allow producer to edit orders" do
+          let(:distributor) do
+            create(:distributor_enterprise, enable_producers_to_edit_orders: true)
+          end
+
+          it { is_expected.to be_truthy }
+        end
+
+        context "order distributor doesn't allow producer to edit orders" do
+          let(:distributor) { create(:distributor_enterprise) }
+          it { is_expected.to be_falsey }
+        end
+      end
+    end
+
+    context "no order containing their product" do
+      let(:user) { create(:user, enterprises: [create(:distributor_enterprise)]) }
+
+      it { is_expected.to be_falsey }
+    end
+  end
 end