ae_declarative_authorization 0.7.1 → 0.8.0

data/test/controller_test.rb

@@ -1,478 +1,478 @@
-require 'test_helper'
-
-
-class LoadMockObject < MockDataObject
-  def self.name
-    "LoadMockObject"
-  end
-end
-
-##################
-class SpecificMocksController < MocksController
-  filter_access_to :test_action, :require => :test, :context => :permissions
-  filter_access_to :test_action_2, :require => :test, :context => :permissions_2
-  filter_access_to :show
-  filter_access_to :edit, :create, :require => :test, :context => :permissions
-  filter_access_to :edit_2, :require => :test, :context => :permissions,
-    :attribute_check => true, :model => LoadMockObject
-  filter_access_to :new, :require => :test, :context => :permissions
-
-  filter_access_to [:action_group_action_1, :action_group_action_2]
-  define_action_methods :test_action, :test_action_2, :show, :edit, :create,
-    :edit_2, :new, :unprotected_action, :action_group_action_1, :action_group_action_2
-end
-
-class BasicControllerTest < ActionController::TestCase
-  tests SpecificMocksController
-
-  def test_filter_access_to_receiving_an_explicit_array
-    reader = Authorization::Reader::DSLReader.new
-
-    reader.parse %{
-      authorization do
-        role :test_action_group_2 do
-          has_permission_on :specific_mocks, :to => :action_group_action_2
-        end
-      end
-    }
-
-    request!(MockUser.new(:test_action_group_2), "action_group_action_2", reader)
-    assert @controller.authorized?
-    request!(MockUser.new(:test_action_group_2), "action_group_action_1", reader)
-    assert !@controller.authorized?
-    request!(nil, "action_group_action_2", reader)
-    assert !@controller.authorized?
-  end
-
-  def test_filter_access
-    assert !@controller.class._process_action_callbacks.find_all{|x| x.kind == :before}.map(&:filter).empty?
-
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :permissions, :to => :test
-          has_permission_on :specific_mocks, :to => :show
-        end
-      end
-    }
-
-    request!(MockUser.new(:test_role), "test_action", reader)
-    assert @controller.authorized?
-
-    request!(MockUser.new(:test_role), "test_action_2", reader)
-    assert !@controller.authorized?
-
-    request!(MockUser.new(:test_role_2), "test_action", reader)
-    assert_response :forbidden
-    assert !@controller.authorized?
-
-    request!(MockUser.new(:test_role), "show", reader)
-    assert @controller.authorized?
-  end
-
-  def test_filter_access_multi_actions
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :permissions, :to => :test
-        end
-      end
-    }
-    request!(MockUser.new(:test_role), "create", reader)
-    assert @controller.authorized?
-  end
-
-  def test_filter_access_unprotected_actions
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-        end
-      end
-    }
-    request!(MockUser.new(:test_role), "unprotected_action", reader)
-    assert @controller.authorized?
-  end
-
-  def test_filter_access_priv_hierarchy
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      privileges do
-        privilege :read do
-          includes :list, :show
-        end
-      end
-      authorization do
-        role :test_role do
-          has_permission_on :specific_mocks, :to => :read
-        end
-      end
-    }
-    request!(MockUser.new(:test_role), "show", reader)
-    assert @controller.authorized?
-  end
-
-  def test_filter_access_skip_attribute_test
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :permissions, :to => :test do
-            if_attribute :id => is { user }
-          end
-        end
-      end
-    }
-    request!(MockUser.new(:test_role), "new", reader)
-    assert @controller.authorized?
-  end
-
-  def test_existing_instance_var_remains_unchanged
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :permissions, :to => :test do
-            if_attribute :id => is { 5 }
-          end
-        end
-      end
-    }
-    mock_object = MockDataObject.new(:id => 5)
-    @controller.send(:instance_variable_set, :"@load_mock_object",
-        mock_object)
-    request!(MockUser.new(:test_role), "edit_2", reader)
-    assert_equal mock_object,
-      @controller.send(:instance_variable_get, :"@load_mock_object")
-    assert @controller.authorized?
-  end
-
-  def test_permitted_to_without_context
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :specific_mocks, :to => :test
-        end
-      end
-    }
-    @controller.current_user = MockUser.new(:test_role)
-    @controller.authorization_engine = Authorization::Engine.new(reader)
-    assert @controller.permitted_to?(:test)
-  end
-end
-
-
-##################
-class AllMocksController < MocksController
-  filter_access_to :all
-  filter_access_to :view, :require => :test, :context => :permissions
-  define_action_methods :show, :view
-end
-class AllActionsControllerTest < ActionController::TestCase
-  tests AllMocksController
-  def test_filter_access_all
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :permissions, :to => :test
-          has_permission_on :all_mocks, :to => :show
-        end
-      end
-    }
-
-    request!(MockUser.new(:test_role), "show", reader)
-    assert @controller.authorized?
-
-    request!(MockUser.new(:test_role), "view", reader)
-    assert @controller.authorized?
-
-    request!(MockUser.new(:test_role_2), "show", reader)
-    assert !@controller.authorized?
-  end
-end
-
-
-##################
-class LoadMockObjectsController < MocksController
-  before_action { @@load_method_call_count = 0 }
-  filter_access_to :show, :attribute_check => true, :model => LoadMockObject
-  filter_access_to :edit, :attribute_check => true
-  filter_access_to :update, :delete, :attribute_check => true,
-                   :load_method => proc {MockDataObject.new(:test => 1)}
-  filter_access_to :create do
-    permitted_to! :edit, :load_mock_objects
-  end
-  filter_access_to :view, :attribute_check => true, :load_method => :load_method
-  def load_method
-    self.class.load_method_called
-    MockDataObject.new(:test => 2)
-  end
-  define_action_methods :show, :edit, :update, :delete, :create, :view
-
-  def self.load_method_called
-    @@load_method_call_count ||= 0
-    @@load_method_call_count += 1
-  end
-  def self.load_method_call_count
-    @@load_method_call_count || 0
-  end
-end
-class LoadObjectControllerTest < ActionController::TestCase
-  tests LoadMockObjectsController
-
-  def test_filter_access_with_object_load
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :load_mock_objects, :to => [:show, :edit] do
-            if_attribute :id => 1
-            if_attribute :id => "1"
-          end
-        end
-      end
-    }
-
-    request!(MockUser.new(:test_role), "show", reader, :id => 2)
-    assert !@controller.authorized?
-
-    request!(MockUser.new(:test_role), "show", reader, :id => 1,
-      :clear => [:@load_mock_object])
-    assert @controller.authorized?
-
-    request!(MockUser.new(:test_role), "edit", reader, :id => 1,
-      :clear => [:@load_mock_object])
-    assert @controller.authorized?
-    assert @controller.instance_variable_defined?(:@load_mock_object)
-  end
-
-  def test_filter_access_object_load_without_param
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :load_mock_objects, :to => [:show, :edit] do
-            if_attribute :id => is {"1"}
-          end
-        end
-      end
-    }
-
-    assert_raise StandardError, "No id param supplied" do
-      request!(MockUser.new(:test_role), "show", reader)
-    end
-
-    Authorization::AuthorizationInController.failed_auto_loading_is_not_found = false
-    request!(MockUser.new(:test_role), "show", reader)
-    assert !@controller.authorized?
-    Authorization::AuthorizationInController.failed_auto_loading_is_not_found = true
-  end
-
-  def test_filter_access_with_object_load_custom
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :load_mock_objects, :to => :view do
-            if_attribute :test => is {2}
-          end
-          has_permission_on :load_mock_objects, :to => :update do
-            if_attribute :test => is {1}
-          end
-          has_permission_on :load_mock_objects, :to => :delete do
-            if_attribute :test => is {2}
-          end
-        end
-      end
-    }
-
-    request!(MockUser.new(:test_role), "delete", reader)
-    assert !@controller.authorized?
-
-    request!(MockUser.new(:test_role), "view", reader)
-    assert @controller.authorized?
-    assert_equal 1, @controller.class.load_method_call_count
-
-    request!(MockUser.new(:test_role_2), "view", reader)
-    assert !@controller.authorized?
-    assert_equal 1, @controller.class.load_method_call_count
-
-    request!(MockUser.new(:test_role), "update", reader)
-    assert @controller.authorized?
-  end
-
-  def test_filter_access_custom
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :load_mock_objects, :to => :edit
-        end
-        role :test_role_2 do
-          has_permission_on :load_mock_objects, :to => :create
-        end
-      end
-    }
-
-    request!(MockUser.new(:test_role), "create", reader)
-    assert @controller.authorized?
-
-    request!(MockUser.new(:test_role_2), "create", reader)
-    assert !@controller.authorized?
-  end
-end
-
-
-##################
-class AccessOverwritesController < MocksController
-  filter_access_to :test_action, :test_action_2,
-    :require => :test, :context => :permissions_2
-  filter_access_to :test_action, :require => :test, :context => :permissions
-  define_action_methods :test_action, :test_action_2
-end
-class AccessOverwritesControllerTest < ActionController::TestCase
-  def test_filter_access_overwrite
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :permissions, :to => :test
-        end
-      end
-    }
-    request!(MockUser.new(:test_role), "test_action_2", reader)
-    assert !@controller.authorized?
-
-    request!(MockUser.new(:test_role), "test_action", reader)
-    assert @controller.authorized?
-  end
-end
-
-
-##################
-class PeopleController < MocksController
-  filter_access_to :all
-  define_action_methods :show
-end
-class PluralizationControllerTest < ActionController::TestCase
-  tests PeopleController
-
-  def test_filter_access_people_controller
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :people, :to => :show
-        end
-      end
-    }
-    request!(MockUser.new(:test_role), "show", reader)
-    assert @controller.authorized?
-  end
-end
-
-
-##################
-class CommonController < MocksController
-  filter_access_to :delete, :context => :common
-  filter_access_to :all
-end
-class CommonChild1Controller < CommonController
-  filter_access_to :all, :context => :context_1
-end
-class CommonChild2Controller < CommonController
-  filter_access_to :delete
-  define_action_methods :show, :delete
-end
-class HierachicalControllerTest < ActionController::TestCase
-  tests CommonChild2Controller
-  def test_controller_hierarchy
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :test_role do
-          has_permission_on :mocks, :to => [:delete, :show]
-        end
-      end
-    }
-    request!(MockUser.new(:test_role), "show", reader)
-    assert !@controller.authorized?
-    request!(MockUser.new(:test_role), "delete", reader)
-    assert !@controller.authorized?
-  end
-end
-
-##################
-module Name
-  class SpacedThingsController < MocksController
-    filter_access_to :show
-    filter_access_to :update, :context => :spaced_things
-    define_action_methods :show, :update
-  end
-end
-class NameSpacedControllerTest < ActionController::TestCase
-  tests Name::SpacedThingsController
-  def test_context
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :permitted_role do
-          has_permission_on :name_spaced_things, :to => :show
-          has_permission_on :spaced_things, :to => :update
-        end
-        role :prohibited_role do
-          has_permission_on :name_spaced_things, :to => :update
-          has_permission_on :spaced_things, :to => :show
-        end
-      end
-    }
-    request!(MockUser.new(:permitted_role), "show", reader)
-    assert @controller.authorized?
-    request!(MockUser.new(:prohibited_role), "show", reader)
-    assert !@controller.authorized?
-    request!(MockUser.new(:permitted_role), "update", reader)
-    assert @controller.authorized?
-    request!(MockUser.new(:prohibited_role), "update", reader)
-    assert !@controller.authorized?
-  end
-end
-
-module Deep
-  module NameSpaced
-    class ThingsController < MocksController
-      filter_access_to :show
-      filter_access_to :update, :context => :things
-      define_action_methods :show, :update
-    end
-  end
-end
-class DeepNameSpacedControllerTest < ActionController::TestCase
-  tests Deep::NameSpaced::ThingsController
-  def test_context
-    reader = Authorization::Reader::DSLReader.new
-    reader.parse %{
-      authorization do
-        role :permitted_role do
-          has_permission_on :deep_name_spaced_things, :to => :show
-          has_permission_on :things, :to => :update
-        end
-        role :prohibited_role do
-          has_permission_on :deep_name_spaced_things, :to => :update
-          has_permission_on :things, :to => :show
-        end
-      end
-    }
-    request!(MockUser.new(:permitted_role), "show", reader)
-    assert @controller.authorized?
-    request!(MockUser.new(:prohibited_role), "show", reader)
-    assert !@controller.authorized?
-    request!(MockUser.new(:permitted_role), "update", reader)
-    assert @controller.authorized?
-    request!(MockUser.new(:prohibited_role), "update", reader)
-    assert !@controller.authorized?
-  end
-end
+require 'test_helper'
+
+
+class LoadMockObject < MockDataObject
+  def self.name
+    "LoadMockObject"
+  end
+end
+
+##################
+class SpecificMocksController < MocksController
+  filter_access_to :test_action, :require => :test, :context => :permissions
+  filter_access_to :test_action_2, :require => :test, :context => :permissions_2
+  filter_access_to :show
+  filter_access_to :edit, :create, :require => :test, :context => :permissions
+  filter_access_to :edit_2, :require => :test, :context => :permissions,
+    :attribute_check => true, :model => LoadMockObject
+  filter_access_to :new, :require => :test, :context => :permissions
+
+  filter_access_to [:action_group_action_1, :action_group_action_2]
+  define_action_methods :test_action, :test_action_2, :show, :edit, :create,
+    :edit_2, :new, :unprotected_action, :action_group_action_1, :action_group_action_2
+end
+
+class BasicControllerTest < ActionController::TestCase
+  tests SpecificMocksController
+
+  def test_filter_access_to_receiving_an_explicit_array
+    reader = Authorization::Reader::DSLReader.new
+
+    reader.parse %{
+      authorization do
+        role :test_action_group_2 do
+          has_permission_on :specific_mocks, :to => :action_group_action_2
+        end
+      end
+    }
+
+    request!(MockUser.new(:test_action_group_2), "action_group_action_2", reader)
+    assert @controller.authorized?
+    request!(MockUser.new(:test_action_group_2), "action_group_action_1", reader)
+    assert !@controller.authorized?
+    request!(nil, "action_group_action_2", reader)
+    assert !@controller.authorized?
+  end
+
+  def test_filter_access
+    assert !@controller.class._process_action_callbacks.find_all{|x| x.kind == :before}.map(&:filter).empty?
+
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :permissions, :to => :test
+          has_permission_on :specific_mocks, :to => :show
+        end
+      end
+    }
+
+    request!(MockUser.new(:test_role), "test_action", reader)
+    assert @controller.authorized?
+
+    request!(MockUser.new(:test_role), "test_action_2", reader)
+    assert !@controller.authorized?
+
+    request!(MockUser.new(:test_role_2), "test_action", reader)
+    assert_response :forbidden
+    assert !@controller.authorized?
+
+    request!(MockUser.new(:test_role), "show", reader)
+    assert @controller.authorized?
+  end
+
+  def test_filter_access_multi_actions
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :permissions, :to => :test
+        end
+      end
+    }
+    request!(MockUser.new(:test_role), "create", reader)
+    assert @controller.authorized?
+  end
+
+  def test_filter_access_unprotected_actions
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+        end
+      end
+    }
+    request!(MockUser.new(:test_role), "unprotected_action", reader)
+    assert @controller.authorized?
+  end
+
+  def test_filter_access_priv_hierarchy
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      privileges do
+        privilege :read do
+          includes :list, :show
+        end
+      end
+      authorization do
+        role :test_role do
+          has_permission_on :specific_mocks, :to => :read
+        end
+      end
+    }
+    request!(MockUser.new(:test_role), "show", reader)
+    assert @controller.authorized?
+  end
+
+  def test_filter_access_skip_attribute_test
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :permissions, :to => :test do
+            if_attribute :id => is { user }
+          end
+        end
+      end
+    }
+    request!(MockUser.new(:test_role), "new", reader)
+    assert @controller.authorized?
+  end
+
+  def test_existing_instance_var_remains_unchanged
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :permissions, :to => :test do
+            if_attribute :id => is { 5 }
+          end
+        end
+      end
+    }
+    mock_object = MockDataObject.new(:id => 5)
+    @controller.send(:instance_variable_set, :"@load_mock_object",
+        mock_object)
+    request!(MockUser.new(:test_role), "edit_2", reader)
+    assert_equal mock_object,
+      @controller.send(:instance_variable_get, :"@load_mock_object")
+    assert @controller.authorized?
+  end
+
+  def test_permitted_to_without_context
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :specific_mocks, :to => :test
+        end
+      end
+    }
+    @controller.current_user = MockUser.new(:test_role)
+    @controller.authorization_engine = Authorization::Engine.new(reader)
+    assert @controller.permitted_to?(:test)
+  end
+end
+
+
+##################
+class AllMocksController < MocksController
+  filter_access_to :all
+  filter_access_to :view, :require => :test, :context => :permissions
+  define_action_methods :show, :view
+end
+class AllActionsControllerTest < ActionController::TestCase
+  tests AllMocksController
+  def test_filter_access_all
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :permissions, :to => :test
+          has_permission_on :all_mocks, :to => :show
+        end
+      end
+    }
+
+    request!(MockUser.new(:test_role), "show", reader)
+    assert @controller.authorized?
+
+    request!(MockUser.new(:test_role), "view", reader)
+    assert @controller.authorized?
+
+    request!(MockUser.new(:test_role_2), "show", reader)
+    assert !@controller.authorized?
+  end
+end
+
+
+##################
+class LoadMockObjectsController < MocksController
+  before_action { @@load_method_call_count = 0 }
+  filter_access_to :show, :attribute_check => true, :model => LoadMockObject
+  filter_access_to :edit, :attribute_check => true
+  filter_access_to :update, :delete, :attribute_check => true,
+                   :load_method => proc {MockDataObject.new(:test => 1)}
+  filter_access_to :create do
+    permitted_to! :edit, :load_mock_objects
+  end
+  filter_access_to :view, :attribute_check => true, :load_method => :load_method
+  def load_method
+    self.class.load_method_called
+    MockDataObject.new(:test => 2)
+  end
+  define_action_methods :show, :edit, :update, :delete, :create, :view
+
+  def self.load_method_called
+    @@load_method_call_count ||= 0
+    @@load_method_call_count += 1
+  end
+  def self.load_method_call_count
+    @@load_method_call_count || 0
+  end
+end
+class LoadObjectControllerTest < ActionController::TestCase
+  tests LoadMockObjectsController
+
+  def test_filter_access_with_object_load
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :load_mock_objects, :to => [:show, :edit] do
+            if_attribute :id => 1
+            if_attribute :id => "1"
+          end
+        end
+      end
+    }
+
+    request!(MockUser.new(:test_role), "show", reader, :id => 2)
+    assert !@controller.authorized?
+
+    request!(MockUser.new(:test_role), "show", reader, :id => 1,
+      :clear => [:@load_mock_object])
+    assert @controller.authorized?
+
+    request!(MockUser.new(:test_role), "edit", reader, :id => 1,
+      :clear => [:@load_mock_object])
+    assert @controller.authorized?
+    assert @controller.instance_variable_defined?(:@load_mock_object)
+  end
+
+  def test_filter_access_object_load_without_param
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :load_mock_objects, :to => [:show, :edit] do
+            if_attribute :id => is {"1"}
+          end
+        end
+      end
+    }
+
+    assert_raise StandardError, "No id param supplied" do
+      request!(MockUser.new(:test_role), "show", reader)
+    end
+
+    Authorization::AuthorizationInController.failed_auto_loading_is_not_found = false
+    request!(MockUser.new(:test_role), "show", reader)
+    assert !@controller.authorized?
+    Authorization::AuthorizationInController.failed_auto_loading_is_not_found = true
+  end
+
+  def test_filter_access_with_object_load_custom
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :load_mock_objects, :to => :view do
+            if_attribute :test => is {2}
+          end
+          has_permission_on :load_mock_objects, :to => :update do
+            if_attribute :test => is {1}
+          end
+          has_permission_on :load_mock_objects, :to => :delete do
+            if_attribute :test => is {2}
+          end
+        end
+      end
+    }
+
+    request!(MockUser.new(:test_role), "delete", reader)
+    assert !@controller.authorized?
+
+    request!(MockUser.new(:test_role), "view", reader)
+    assert @controller.authorized?
+    assert_equal 1, @controller.class.load_method_call_count
+
+    request!(MockUser.new(:test_role_2), "view", reader)
+    assert !@controller.authorized?
+    assert_equal 1, @controller.class.load_method_call_count
+
+    request!(MockUser.new(:test_role), "update", reader)
+    assert @controller.authorized?
+  end
+
+  def test_filter_access_custom
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :load_mock_objects, :to => :edit
+        end
+        role :test_role_2 do
+          has_permission_on :load_mock_objects, :to => :create
+        end
+      end
+    }
+
+    request!(MockUser.new(:test_role), "create", reader)
+    assert @controller.authorized?
+
+    request!(MockUser.new(:test_role_2), "create", reader)
+    assert !@controller.authorized?
+  end
+end
+
+
+##################
+class AccessOverwritesController < MocksController
+  filter_access_to :test_action, :test_action_2,
+    :require => :test, :context => :permissions_2
+  filter_access_to :test_action, :require => :test, :context => :permissions
+  define_action_methods :test_action, :test_action_2
+end
+class AccessOverwritesControllerTest < ActionController::TestCase
+  def test_filter_access_overwrite
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :permissions, :to => :test
+        end
+      end
+    }
+    request!(MockUser.new(:test_role), "test_action_2", reader)
+    assert !@controller.authorized?
+
+    request!(MockUser.new(:test_role), "test_action", reader)
+    assert @controller.authorized?
+  end
+end
+
+
+##################
+class PeopleController < MocksController
+  filter_access_to :all
+  define_action_methods :show
+end
+class PluralizationControllerTest < ActionController::TestCase
+  tests PeopleController
+
+  def test_filter_access_people_controller
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :people, :to => :show
+        end
+      end
+    }
+    request!(MockUser.new(:test_role), "show", reader)
+    assert @controller.authorized?
+  end
+end
+
+
+##################
+class CommonController < MocksController
+  filter_access_to :delete, :context => :common
+  filter_access_to :all
+end
+class CommonChild1Controller < CommonController
+  filter_access_to :all, :context => :context_1
+end
+class CommonChild2Controller < CommonController
+  filter_access_to :delete
+  define_action_methods :show, :delete
+end
+class HierachicalControllerTest < ActionController::TestCase
+  tests CommonChild2Controller
+  def test_controller_hierarchy
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :test_role do
+          has_permission_on :mocks, :to => [:delete, :show]
+        end
+      end
+    }
+    request!(MockUser.new(:test_role), "show", reader)
+    assert !@controller.authorized?
+    request!(MockUser.new(:test_role), "delete", reader)
+    assert !@controller.authorized?
+  end
+end
+
+##################
+module Name
+  class SpacedThingsController < MocksController
+    filter_access_to :show
+    filter_access_to :update, :context => :spaced_things
+    define_action_methods :show, :update
+  end
+end
+class NameSpacedControllerTest < ActionController::TestCase
+  tests Name::SpacedThingsController
+  def test_context
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :permitted_role do
+          has_permission_on :name_spaced_things, :to => :show
+          has_permission_on :spaced_things, :to => :update
+        end
+        role :prohibited_role do
+          has_permission_on :name_spaced_things, :to => :update
+          has_permission_on :spaced_things, :to => :show
+        end
+      end
+    }
+    request!(MockUser.new(:permitted_role), "show", reader)
+    assert @controller.authorized?
+    request!(MockUser.new(:prohibited_role), "show", reader)
+    assert !@controller.authorized?
+    request!(MockUser.new(:permitted_role), "update", reader)
+    assert @controller.authorized?
+    request!(MockUser.new(:prohibited_role), "update", reader)
+    assert !@controller.authorized?
+  end
+end
+
+module Deep
+  module NameSpaced
+    class ThingsController < MocksController
+      filter_access_to :show
+      filter_access_to :update, :context => :things
+      define_action_methods :show, :update
+    end
+  end
+end
+class DeepNameSpacedControllerTest < ActionController::TestCase
+  tests Deep::NameSpaced::ThingsController
+  def test_context
+    reader = Authorization::Reader::DSLReader.new
+    reader.parse %{
+      authorization do
+        role :permitted_role do
+          has_permission_on :deep_name_spaced_things, :to => :show
+          has_permission_on :things, :to => :update
+        end
+        role :prohibited_role do
+          has_permission_on :deep_name_spaced_things, :to => :update
+          has_permission_on :things, :to => :show
+        end
+      end
+    }
+    request!(MockUser.new(:permitted_role), "show", reader)
+    assert @controller.authorized?
+    request!(MockUser.new(:prohibited_role), "show", reader)
+    assert !@controller.authorized?
+    request!(MockUser.new(:permitted_role), "update", reader)
+    assert @controller.authorized?
+    request!(MockUser.new(:prohibited_role), "update", reader)
+    assert !@controller.authorized?
+  end
+end