Allow ExCS admin to update starter projects

This gives users with the "experience-cs-admin" role permission to
update starter (or "public") projects (i.e. projects with no `user_id`
set). I've added an example to the "Updating a project" feature spec to
check this works as intended.

Author: floehopper

app/models/ability.rb

@@ -106,6 +106,7 @@ def define_experience_cs_admin_abilities(user)
     return unless user&.experience_cs_admin?
 
     can :create, Project
+    can :update, Project
   end
 
   def school_teacher_can_manage_lesson?(user:, school:, lesson:)

spec/features/project/updating_a_project_spec.rb

@@ -5,7 +5,8 @@
 RSpec.describe 'Updating a project', type: :request do
   let(:headers) { { Authorization: UserProfileMock::TOKEN } }
   let(:locale) { 'en' }
-  let!(:project) { create(:project, name: 'Test Project', user_id: owner.id, locale:) }
+  let(:project_type) { Project::Types::PYTHON }
+  let!(:project) { create(:project, name: 'Test Project', user_id: owner.id, locale:, project_type:) }
   let(:owner) { create(:owner, school:) }
   let(:school) { create(:school) }
 
@@ -77,4 +78,37 @@
       expect(response).to have_http_status(:not_found)
     end
   end
+
+  context 'when the user is an Experience CS admin and project type is scratch' do
+    let(:experience_cs_admin) { create(:experience_cs_admin_user) }
+    let(:project_type) { Project::Types::SCRATCH }
+    let(:params) do
+      {
+        project: {
+          identifier: 'test-project',
+          name: 'Test Project',
+          locale: 'fr',
+          project_type: Project::Types::SCRATCH,
+          user_id: nil,
+          components: []
+        }
+      }
+    end
+
+    before do
+      authenticated_in_hydra_as(experience_cs_admin)
+    end
+
+    it 'responds 200 OK' do
+      put("/api/projects/#{project.identifier}?project_type=scratch", headers:, params:)
+      expect(response).to have_http_status(:success)
+    end
+
+    it 'sets the project name to the specified value' do
+      put("/api/projects/#{project.identifier}?project_type=scratch", headers:, params:)
+      data = JSON.parse(response.body, symbolize_names: true)
+
+      expect(data[:name]).to eq('Test Project')
+    end
+  end
 end

spec/models/ability_spec.rb

@@ -143,6 +143,7 @@
       let(:user) { build(:experience_cs_admin_user) }
 
       it { is_expected.to be_able_to(:create, starter_project) }
+      it { is_expected.to be_able_to(:update, starter_project) }
     end
 
     # rubocop:disable RSpec/MultipleMemoizedHelpers