Add page for listing a user's applications

This currently only includes the applications that the user would see on
their dashboard.

app/controllers/account/applications_controller.rb

@@ -0,0 +1,11 @@
+class Account::ApplicationsController < ApplicationController
+  layout "admin_layout"
+
+  before_action :authenticate_user!
+
+  def index
+    authorize :account_applications
+
+    @applications = ::Doorkeeper::Application.where(show_on_dashboard: true).can_signin(current_user)
+  end
+end

app/policies/account_applications_policy.rb

@@ -0,0 +1,5 @@
+class AccountApplicationsPolicy < BasePolicy
+  def index?
+    current_user.govuk_admin?
+  end
+end

app/views/account/applications/index.html.erb

@@ -0,0 +1,34 @@
+<% content_for :title, "GOV.UK apps" %>
+
+<% content_for :breadcrumbs,
+   render("govuk_publishing_components/components/breadcrumbs", {
+     collapse_on_mobile: true,
+     breadcrumbs: [
+       {
+         title: "Dashboard",
+         url: root_path,
+       },
+       {
+         title: "GOV.UK apps",
+       }
+     ]
+   })
+%>
+
+<table class="govuk-table">
+  <caption class="govuk-table__caption govuk-table__caption--m">Apps you have access to</caption>
+  <thead class="govuk-table__head">
+    <tr class="govuk-table__row">
+      <th scope="col" class="govuk-table__header">Name</th>
+      <th scope="col" class="govuk-table__header">Description</th>
+    </tr>
+  </thead>
+  <tbody class="govuk-table__body">
+    <% @applications.each do |application| %>
+      <tr class="govuk-table__row">
+        <td class="govuk-table__cell"><%= application.name %></td>
+        <td class="govuk-table__cell"><%= application.description %></td>
+      </tr>
+    <% end %>
+  </tbody>
+</table>

config/routes.rb

@@ -50,6 +50,9 @@
   resource :user, only: [:show]
 
   resource :account, only: [:show]
+  namespace :account do
+    resources :applications, only: [:index]
+  end
 
   resources :batch_invitations, only: %i[new create show]
   resources :bulk_grant_permission_sets, only: %i[new create show]

test/integration/account_applications_test.rb

@@ -0,0 +1,37 @@
+require "test_helper"
+
+class AccountApplicationsTest < ActionDispatch::IntegrationTest
+  context "#index" do
+    should "not be accessible to signed out users" do
+      visit account_applications_path
+
+      assert_current_url new_user_session_path
+    end
+
+    should "list the applications the user has access to" do
+      app = FactoryBot.create(:application, name: "app-name", description: "app-description")
+      user = FactoryBot.create(:admin_user)
+      user.supported_permissions << app.signin_permission
+
+      visit new_user_session_path
+      signin_with user
+
+      visit account_applications_path
+
+      assert page.has_content?("app-name")
+      assert page.has_content?("app-description")
+    end
+
+    should "not list the applications the user does not have access to" do
+      FactoryBot.create(:application, name: "app-name")
+      user = FactoryBot.create(:admin_user)
+
+      visit new_user_session_path
+      signin_with user
+
+      visit account_applications_path
+
+      assert_not page.has_content?("app-name")
+    end
+  end
+end

test/policies/account_applications_policy_test.rb

@@ -0,0 +1,30 @@
+require "test_helper"
+require "support/policy_helpers"
+
+class AccountApplicationsPolicyTest < ActiveSupport::TestCase
+  include PolicyHelpers
+
+  context "accessing index?" do
+    context "for govuk admins" do
+      setup do
+        @current_user = FactoryBot.build(:admin_user)
+      end
+
+      should "be permitted" do
+        assert permit?(@current_user, nil, :index)
+      end
+    end
+
+    %i[user super_organisation_admin_user organisation_admin_user].each do |user_role|
+      context "for #{user_role} users" do
+        setup do
+          @current_user = FactoryBot.build(user_role)
+        end
+
+        should "be denied" do
+          assert forbid?(@current_user, nil, :index)
+        end
+      end
+    end
+  end
+end