1 files changed, 571 insertions, 0 deletions
diff --git a/app/src/test/java/org/onap/portal/history/actions/ActionsControllerIntegrationTest.java b/app/src/test/java/org/onap/portal/history/actions/ActionsControllerIntegrationTest.java
new file mode 100644
index 0000000..c5fa17b
--- /dev/null
+++ b/app/src/test/java/org/onap/portal/history/actions/ActionsControllerIntegrationTest.java
@@ -0,0 +1,571 @@
+/*
+ *
+ * Copyright (c) 2022. Deutsche Telekom AG
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ *
+ */
+
+package org.onap.portal.history.actions;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+
+import java.time.LocalDateTime;
+import java.time.OffsetDateTime;
+import java.time.ZoneOffset;
+import java.time.format.DateTimeFormatter;
+import java.time.temporal.ChronoUnit;
+import java.util.List;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.onap.portal.history.BaseIntegrationTest;
+import org.onap.portal.history.entities.ActionsDao;
+import org.onap.portal.history.openapi.model.ActionResponse;
+import org.onap.portal.history.openapi.model.ActionsListResponse;
+import org.onap.portal.history.openapi.model.CreateActionRequest;
+import org.onap.portal.history.openapi.model.Problem;
+import org.onap.portal.history.repository.ActionsRepository;
+import org.onap.portal.history.services.ActionsService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.MediaType;
+
+import com.fasterxml.jackson.core.JsonProcessingException;
+
+import io.restassured.http.Header;
+
+class ActionsControllerIntegrationTest extends BaseIntegrationTest {
+
+  protected static final String X_REQUEST_ID = "addf6005-3075-4c80-b7bc-2c70b7d42b57";
+  protected static final String X_REQUEST_ID2 = "addf6005-3075-4c80-b7bc-2c70b7d42b22";
+
+  @Autowired
+	ActionsService actionsService;
+
+  @Autowired
+  private ActionsRepository repository;
+
+  // @Value("${portal-history.save-interval}")
+  protected Integer saveInterval = 72;
+
+  @BeforeEach
+  void deleteMongoDataBase(){
+    repository.deleteAll().block();
+  }
+
+  @Test
+  void thatUserCanHaveNoHistoryYet() throws JsonProcessingException {
+    ActionsListResponse response = requestSpecification()
+      .given()
+      .accept(MediaType.APPLICATION_JSON_VALUE)
+      .contentType(MediaType.APPLICATION_JSON_VALUE)
+      .header(new Header("X-Request-Id", X_REQUEST_ID ))
+      .when()
+      .get( "/v1/actions/test-user")
+      .then()
+      .header("X-Request-Id", X_REQUEST_ID)
+      .statusCode(HttpStatus.OK.value())
+      .extract()
+      .body()
+      .as(ActionsListResponse.class);
+
+    assertNotNull(response);
+    assertThat(response.getTotalCount()).isEqualTo(0);
+  }
+
+  @Test
+  void thatActionCanBeSaved() throws Exception{
+    ActionDto actionDto = new ActionDto();
+    actionDto.setType("instantiation");
+    actionDto.setAction("create");
+    actionDto.setDownStreamId("1234");
+    actionDto.setDownStreamSystem("SO");
+    actionDto.setMessage("no details");
+
+    CreateActionRequest actionRequest = new CreateActionRequest()
+        .actionCreatedAt(OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS))
+        .userId("test-user")
+        .action(actionDto);
+
+    ActionResponse response = requestSpecification()
+        .given()
+        .accept(MediaType.APPLICATION_JSON_VALUE)
+        .contentType(MediaType.APPLICATION_JSON_VALUE)
+        .header(new Header("X-Request-Id", X_REQUEST_ID ))
+        .body(actionRequest)
+        .when()
+        .post( "/v1/actions/test-user")
+        .then()
+        .header("X-Request-Id", X_REQUEST_ID)
+        .statusCode(HttpStatus.OK.value())
+        .extract()
+        .body()
+        .as(ActionResponse.class);
+
+    assertThat(response.getActionCreatedAt()).isEqualTo(actionRequest.getActionCreatedAt().truncatedTo(ChronoUnit.SECONDS).format(DateTimeFormatter.ISO_DATE_TIME));
+    assertThat(response.getSaveInterval()).isEqualTo(saveInterval);
+    assertThat(objectMapper.writeValueAsString(response.getAction())).isEqualTo(objectMapper.writeValueAsString(actionRequest.getAction()));
+  }
+
+  @Test
+  void thatActionsCanBeListedWithoutParameter() throws JsonProcessingException {
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoList(500, "test-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+    ActionsListResponse response = requestSpecification()
+      .given()
+      .accept(MediaType.APPLICATION_JSON_VALUE)
+      .contentType(MediaType.APPLICATION_JSON_VALUE)
+      .header(new Header("X-Request-Id", X_REQUEST_ID ))
+      .when()
+      .get( "/v1/actions")
+      .then()
+      .header("X-Request-Id", X_REQUEST_ID)
+      .statusCode(HttpStatus.OK.value())
+      .extract()
+      .body()
+      .as(ActionsListResponse.class);
+
+    assertThat(response.getTotalCount()).isEqualTo(10);
+    assertThat(response.getActionsList().get(0).getSaveInterval()).isEqualTo(saveInterval);
+    assertThat(response.getActionsList().get(9).getSaveInterval()).isEqualTo(saveInterval);
+    assertThat(objectMapper.writeValueAsString(response.getActionsList().get(0).getAction())).isEqualTo(objectMapper.writeValueAsString(actionsDaoList.get(0).getAction()));
+    assertThat(objectMapper.writeValueAsString(response.getActionsList().get(9).getAction())).isEqualTo(objectMapper.writeValueAsString(actionsDaoList.get(9).getAction()));
+  }
+
+  @Test
+  void thatActionsCanBeListedWithParameter() throws JsonProcessingException {
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoList(20, "test-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+    ActionsListResponse response = requestSpecification()
+      .given()
+      .accept(MediaType.APPLICATION_JSON_VALUE)
+      .contentType(MediaType.APPLICATION_JSON_VALUE)
+      .header(new Header("X-Request-Id", X_REQUEST_ID ))
+      .when()
+      .get( "/v1/actions?page=1&pageSize=5")
+      .then()
+      .header("X-Request-Id", X_REQUEST_ID)
+      .statusCode(HttpStatus.OK.value())
+      .extract()
+      .body()
+      .as(ActionsListResponse.class);
+
+    assertThat(response.getTotalCount()).isEqualTo(5);
+    assertThat(response.getActionsList().get(0).getSaveInterval()).isEqualTo(saveInterval);
+    assertThat(response.getActionsList().get(4).getSaveInterval()).isEqualTo(saveInterval);
+    assertThat(objectMapper.writeValueAsString(response.getActionsList().get(0).getAction())).isEqualTo(objectMapper.writeValueAsString(actionsDaoList.get(0).getAction()));
+    assertThat(objectMapper.writeValueAsString(response.getActionsList().get(4).getAction())).isEqualTo(objectMapper.writeValueAsString(actionsDaoList.get(4).getAction()));
+  }
+
+  @Test
+  void thatActionsCanBeListedWithParameterInOrderByActionCreatedAt() {
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoList(5, "test-user", OffsetDateTime.of(LocalDateTime.now().minusDays(2), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    actionsDaoList.addAll(ActionFixtures.actionsDaoList(5, "test-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS)));
+    actionsDaoList.addAll(ActionFixtures.actionsDaoList(5, "test-user", OffsetDateTime.of(LocalDateTime.now().minusHours(6), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS)));
+    actionsDaoList.addAll(ActionFixtures.actionsDaoList(5, "test-user", OffsetDateTime.of(LocalDateTime.now().minusHours(12), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS)));
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+
+    ActionsListResponse response = requestSpecification()
+        .given()
+        .accept(MediaType.APPLICATION_JSON_VALUE)
+        .contentType(MediaType.APPLICATION_JSON_VALUE)
+        .header(new Header("X-Request-Id", X_REQUEST_ID ))
+        .when()
+        .get( "/v1/actions?page=1&pageSize=5")
+        .then()
+        .header("X-Request-Id", X_REQUEST_ID)
+        .statusCode(HttpStatus.OK.value())
+        .extract()
+        .body()
+        .as(ActionsListResponse.class);
+
+    assertThat(response.getTotalCount()).isEqualTo(5);
+    assertThat(response.getActionsList().get(0).getSaveInterval()).isEqualTo(saveInterval);
+    assertThat(response.getActionsList().get(4).getSaveInterval()).isEqualTo(saveInterval);
+    assertThat(response.getActionsList().get(0).getActionCreatedAt()).isEqualTo(actionsDaoList.get(5).getActionCreatedAt().toInstant().atOffset(ZoneOffset.UTC));
+    assertThat(response.getActionsList().get(4).getActionCreatedAt()).isEqualTo(actionsDaoList.get(9).getActionCreatedAt().toInstant().atOffset(ZoneOffset.UTC));
+  }
+
+  @Test
+  void thatActionsCanBeListedWithShowLastHours() throws JsonProcessingException {
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoListHourOffsetOnly(20, "test-user", OffsetDateTime.now().plusMinutes(30).truncatedTo(ChronoUnit.SECONDS));
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+
+      ActionsListResponse response = requestSpecification()
+        .given()
+        .accept(MediaType.APPLICATION_JSON_VALUE)
+        .contentType(MediaType.APPLICATION_JSON_VALUE)
+        .header(new Header("X-Request-Id", X_REQUEST_ID ))
+        .when()
+        .get( "/v1/actions?page=1&pageSize=20&showLastHours=12")
+        .then()
+        .header("X-Request-Id", X_REQUEST_ID)
+        .statusCode(HttpStatus.OK.value())
+        .extract()
+        .body()
+        .as(ActionsListResponse.class);
+        
+        assertThat(response.getTotalCount()).isEqualTo(12);
+        assertThat(response.getActionsList().get(0).getSaveInterval()).isEqualTo(saveInterval);
+        assertThat(objectMapper.writeValueAsString(response.getActionsList().get(0).getAction())).isEqualTo(objectMapper.writeValueAsString(actionsDaoList.get(0).getAction()));
+        assertThat(objectMapper.writeValueAsString(response.getActionsList().get(11).getAction())).isEqualTo(objectMapper.writeValueAsString(actionsDaoList.get(11).getAction()));
+  }
+
+  @Test
+  void thatActionsCanNotBeListedWithWrongPageParameter() {
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoList(5, "test-user", OffsetDateTime.of(LocalDateTime.now().minusDays(2), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+
+    Problem response = requestSpecification()
+        .given()
+        .accept(MediaType.APPLICATION_JSON_VALUE)
+        .contentType(MediaType.APPLICATION_JSON_VALUE)
+        .header(new Header("X-Request-Id", X_REQUEST_ID ))
+        .when()
+        .get( "/v1/actions?page=0&pageSize=5")
+        .then()
+        .header("X-Request-Id", X_REQUEST_ID)
+        .statusCode(HttpStatus.BAD_REQUEST.value())
+        .extract()
+        .body()
+        .as(Problem.class);
+
+    assertThat(response.getStatus()).isEqualTo(500);
+  }
+
+  @Test
+  void thatActionsCanBeGetForUserWithShowLastHours(){
+    // First mixed user actions for different users
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.now().plusMinutes(30).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList2 = ActionFixtures.actionsDaoList(10, "test2-user", OffsetDateTime.now().truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList3 = ActionFixtures.actionsDaoList(10, "test3-user", OffsetDateTime.now().truncatedTo(ChronoUnit.SECONDS));
+
+    actionsDaoList.addAll(actionsDaoList2);
+    actionsDaoList.addAll(actionsDaoList3);
+
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+
+    ActionsListResponse response = requestSpecification()
+      .given()
+      .accept(MediaType.APPLICATION_JSON_VALUE)
+      .contentType(MediaType.APPLICATION_JSON_VALUE)
+      .header(new Header("X-Request-Id", X_REQUEST_ID ))
+      .when()
+      .get( "/v1/actions/test-user?page=1&pageSize=20&showLastHours=2")
+      .then()
+      .header("X-Request-Id", X_REQUEST_ID)
+      .statusCode(HttpStatus.OK.value())
+      .extract()
+      .body()
+      .as(ActionsListResponse.class);
+
+    assertThat(response.getTotalCount()).isEqualTo(2);
+    assertThat(response.getActionsList().get(0).getSaveInterval()).isEqualTo(saveInterval);
+  }
+
+  @Test
+  void thatActionsCanBeGottenForUserWithShowLastHoursWithMinusValue(){
+    // First mixed user actions for different users
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList2 = ActionFixtures.actionsDaoList(10, "test2-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList3 = ActionFixtures.actionsDaoList(10, "test3-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList4 = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.of(LocalDateTime.now().plusHours(48), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    actionsDaoList.addAll(actionsDaoList2);
+    actionsDaoList.addAll(actionsDaoList3);
+    actionsDaoList.addAll(actionsDaoList4);
+
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+
+    ActionsListResponse response = requestSpecification()
+      .given()
+      .accept(MediaType.APPLICATION_JSON_VALUE)
+      .contentType(MediaType.APPLICATION_JSON_VALUE)
+      .header(new Header("X-Request-Id", X_REQUEST_ID ))
+      .when()
+      .get( "/v1/actions/test-user?page=1&pageSize=20&showLastHours=-2")
+      .then()
+      .header("X-Request-Id", X_REQUEST_ID)
+      .statusCode(HttpStatus.OK.value())
+      .extract()
+      .body()
+      .as(ActionsListResponse.class);
+
+    assertThat(response.getTotalCount()).isEqualTo(10);
+  }
+
+  @Test
+  void thatActionsCanBeGottenForUserWithoutParameter(){
+    // First mixed user actions for different users
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList2 = ActionFixtures.actionsDaoList(10, "test2-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList3 = ActionFixtures.actionsDaoList(10, "test3-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList4 = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    actionsDaoList.addAll(actionsDaoList2);
+    actionsDaoList.addAll(actionsDaoList3);
+    actionsDaoList.addAll(actionsDaoList4);
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+
+    ActionsListResponse response = requestSpecification()
+        .given()
+        .accept(MediaType.APPLICATION_JSON_VALUE)
+        .contentType(MediaType.APPLICATION_JSON_VALUE)
+        .header(new Header("X-Request-Id", X_REQUEST_ID ))
+        .when()
+        .get( "/v1/actions/test-user")
+        .then()
+        .header("X-Request-Id", X_REQUEST_ID)
+        .statusCode(HttpStatus.OK.value())
+        .extract()
+        .body()
+        .as(ActionsListResponse.class);
+
+    assertThat(response.getTotalCount()).isEqualTo(10);
+    assertThat(response.getActionsList().get(0).getSaveInterval()).isEqualTo(saveInterval);
+  }
+
+  @Test
+  void thatActionsCanBeGottenForUserWithShowLastHoursWithEmptyList() {
+    // First mixed user actions for different users
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList2 = ActionFixtures.actionsDaoList(10, "test2-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList3 = ActionFixtures.actionsDaoList(10, "test3-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList4 = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    actionsDaoList.addAll(actionsDaoList2);
+    actionsDaoList.addAll(actionsDaoList3);
+    actionsDaoList.addAll(actionsDaoList4);
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+
+    ActionsListResponse response = requestSpecification("test4-user")
+      .given()
+      .accept(MediaType.APPLICATION_JSON_VALUE)
+      .contentType(MediaType.APPLICATION_JSON_VALUE)
+      .header(new Header("X-Request-Id", X_REQUEST_ID ))
+      .when()
+      .get( "/v1/actions/test4-user?page=1&pageSize=20&showLastHours=2")
+      .then()
+      .header("X-Request-Id", X_REQUEST_ID)
+      .statusCode(HttpStatus.OK.value())
+      .extract()
+      .body()
+      .as(ActionsListResponse.class);
+
+    assertThat(response.getTotalCount()).isZero();
+  }
+
+  @Test
+  void thatActionsCanBeDeleted(){
+    // First mixed user actions for different users
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.now().plusMinutes(30).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList2 = ActionFixtures.actionsDaoList(5, "test2-user", OffsetDateTime.now().truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList3 = ActionFixtures.actionsDaoList(3, "test3-user", OffsetDateTime.now().truncatedTo(ChronoUnit.SECONDS));
+    actionsDaoList.addAll(actionsDaoList2);
+    actionsDaoList.addAll(actionsDaoList3);
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+
+    requestSpecification()
+      .given()
+      .accept(MediaType.APPLICATION_JSON_VALUE)
+      .contentType(MediaType.APPLICATION_JSON_VALUE)
+      .header(new Header("X-Request-Id", X_REQUEST_ID ))
+      .when()
+      .delete( "/v1/actions/test-user?deleteAfterHours=2")
+      .then()
+      .header("X-Request-Id", X_REQUEST_ID)
+      .statusCode(HttpStatus.OK.value())
+      .extract()
+      .body()
+      .as(ActionsListResponse.class);
+
+    ActionsListResponse responseGetUser = requestSpecification()
+      .given()
+      .accept(MediaType.APPLICATION_JSON_VALUE)
+      .contentType(MediaType.APPLICATION_JSON_VALUE)
+      .header(new Header("X-Request-Id", X_REQUEST_ID2 ))
+      .when()
+      .get( "/v1/actions/test-user?page=1&pageSize=20")
+      .then()
+      .header("X-Request-Id", X_REQUEST_ID2)
+      .statusCode(HttpStatus.OK.value())
+      .extract()
+      .body()
+      .as(ActionsListResponse.class);
+
+    ActionsListResponse responseGetUser2 = requestSpecification("test2-user")
+        .given()
+        .accept(MediaType.APPLICATION_JSON_VALUE)
+        .contentType(MediaType.APPLICATION_JSON_VALUE)
+        .header(new Header("X-Request-Id", X_REQUEST_ID2 ))
+        .when()
+        .get( "/v1/actions/test2-user")
+        .then()
+        .header("X-Request-Id", X_REQUEST_ID2)
+        .statusCode(HttpStatus.OK.value())
+        .extract()
+        .body()
+        .as(ActionsListResponse.class);
+
+    ActionsListResponse responseGetUser3 = requestSpecification("test3-user")
+        .given()
+        .accept(MediaType.APPLICATION_JSON_VALUE)
+        .contentType(MediaType.APPLICATION_JSON_VALUE)
+        .header(new Header("X-Request-Id", X_REQUEST_ID2 ))
+        .when()
+        .get( "/v1/actions/test3-user")
+        .then()
+        .header("X-Request-Id", X_REQUEST_ID2)
+        .statusCode(HttpStatus.OK.value())
+        .extract()
+        .body()
+        .as(ActionsListResponse.class);
+
+    assertThat(responseGetUser.getTotalCount()).isEqualTo(2);
+    assertThat(responseGetUser2.getTotalCount()).isEqualTo(5);
+    assertThat(responseGetUser3.getTotalCount()).isEqualTo(3);
+  }
+
+  @Test
+  void thatActionsCanNotBeGetForUserBecauseOfWrongUserIdInToken(){
+    // First mixed user actions for different users
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+
+    Problem response = requestSpecification("wrong-userId")
+        .given()
+        .accept(MediaType.APPLICATION_PROBLEM_JSON_VALUE)
+        .header(new Header("X-Request-Id", X_REQUEST_ID ))
+        .when()
+        .get( "/v1/actions/test-user")
+        .then()
+        .header("X-Request-Id", X_REQUEST_ID)
+        .statusCode(HttpStatus.BAD_REQUEST.value())
+        .extract()
+        .body()
+        .as(Problem.class);
+
+    assertThat(response).isNotNull();
+    assertThat(response.getStatus()).isEqualTo(HttpStatus.FORBIDDEN.value());
+  }
+
+  @Test
+  void thatActionsCanNotBeGetForUserBecauseOfWrongHeader(){
+    // First mixed user actions for different users
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+
+    Problem response = wrongHeaderRequestSpecification("test-user")
+      .given()
+      .accept(MediaType.APPLICATION_PROBLEM_JSON_VALUE)
+      .header(new Header("X-Request-Id", X_REQUEST_ID ))
+      .when()
+      .get( "/v1/actions/test-user")
+      .then()
+      .header("X-Request-Id", X_REQUEST_ID)
+      .statusCode(HttpStatus.BAD_REQUEST.value())
+      .extract()
+      .body()
+      .as(Problem.class);
+
+    assertThat(response).isNotNull();
+    assertThat(response.getStatus()).isEqualTo(HttpStatus.FORBIDDEN.value());
+  }
+
+  @Test
+  void thatActionsCanBeDeletedForAllUsers(){
+    // First mixed user actions for different users
+    List<ActionsDao> actionsDaoList = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.of(LocalDateTime.now().minusHours(96), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList2 = ActionFixtures.actionsDaoList(8, "test2-user", OffsetDateTime.of(LocalDateTime.now().minusHours(24), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList3 = ActionFixtures.actionsDaoList(5, "test3-user", OffsetDateTime.of(LocalDateTime.now(), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+    List<ActionsDao> actionsDaoList4 = ActionFixtures.actionsDaoListHourOffsetOnly(10, "test-user", OffsetDateTime.of(LocalDateTime.now().minusHours(48), ZoneOffset.UTC).truncatedTo(ChronoUnit.SECONDS));
+
+    actionsDaoList.addAll(actionsDaoList2);
+    actionsDaoList.addAll(actionsDaoList3);
+    actionsDaoList.addAll(actionsDaoList4);
+    repository
+      .saveAll(actionsDaoList)
+      .blockLast();
+
+    actionsService.deleteActions(72).block();
+
+    ActionsListResponse responseGetUser = requestSpecification()
+        .given()
+        .accept(MediaType.APPLICATION_JSON_VALUE)
+        .contentType(MediaType.APPLICATION_JSON_VALUE)
+        .header(new Header("X-Request-Id", X_REQUEST_ID2 ))
+        .when()
+        .get( "/v1/actions/test-user?page=1&pageSize=20")
+        .then()
+        .statusCode(HttpStatus.OK.value())
+        .extract()
+        .body()
+        .as(ActionsListResponse.class);
+
+    ActionsListResponse responseGetUser2 = requestSpecification("test2-user")
+        .given()
+        .accept(MediaType.APPLICATION_JSON_VALUE)
+        .contentType(MediaType.APPLICATION_JSON_VALUE)
+        .header(new Header("X-Request-Id", X_REQUEST_ID2 ))
+        .when()
+        .get( "/v1/actions/test2-user")
+        .then()
+        .statusCode(HttpStatus.OK.value())
+        .extract()
+        .body()
+        .as(ActionsListResponse.class);
+
+    ActionsListResponse responseGetUser3 = requestSpecification("test3-user")
+        .given()
+        .accept(MediaType.APPLICATION_JSON_VALUE)
+        .contentType(MediaType.APPLICATION_JSON_VALUE)
+        .header(new Header("X-Request-Id", X_REQUEST_ID2 ))
+        .when()
+        .get( "/v1/actions/test3-user")
+        .then()
+        .statusCode(HttpStatus.OK.value())
+        .extract()
+        .body()
+        .as(ActionsListResponse.class);
+
+    assertThat(responseGetUser.getTotalCount()).isEqualTo(10);
+    assertThat(responseGetUser2.getTotalCount()).isEqualTo(8);
+    assertThat(responseGetUser3.getTotalCount()).isEqualTo(5);
+  }
+}