bf4-browsercms 3.1.0

data/test/custom_assertions.rb

@@ -0,0 +1,68 @@
+module CustomAssertions
+  def assert_file_exists(file_name, message=nil)
+    assert File.exists?(file_name), 
+      (message || "Expected File '#{file_name}' to exist, but it does not")
+  end  
+
+  def assert_valid(object, message=nil)
+    assert object.valid?, 
+      (message || 
+        "#{object.class.name.titleize} is not valid, but it should be")
+  end
+
+  def assert_not_valid(object, message=nil)
+    assert !object.valid?, 
+      (message || 
+        "#{object.class.name.titleize} is valid, but it should not be")
+  end
+
+  def assert_has_error_on_base(object, error_message=nil, message=nil)
+    assert_has_error_on(object, :base, error_message, message)
+  end
+
+  def assert_has_error_on(object, field, error_message=nil, message=nil)
+    e = object.errors.on(field.to_sym)
+    if e.is_a?(String)
+      e = [e]
+    elsif e.nil?
+      e = []
+    end
+    if error_message
+      assert e.include?(error_message), 
+        "Expected errors on #{field} to include '#{error_message}', but it is [#{e.map{|err| "'#{err}'"}.join(", ")}]"
+    else
+      assert !e.empty?, "Expected errors on #{field}, but there are none"
+    end
+  end
+
+  def assert_properties(object, properties)
+    properties.each do |property, expected_value|
+      assert_equal expected_value, object.send(property), "Expected '#{property}' to be '#{expected_value}'"
+    end
+  end
+
+  def assert_incremented(original_value, new_value)
+    assert_equal original_value + 1, new_value, "Expected value to be incremented"
+  end
+
+  def assert_decremented(original_value, new_value)
+    assert_equal original_value - 1, new_value, "Expected value to be decremented"
+  end
+
+  # We are overriding the regular assert_raise because we want
+  # a string to check the error message, and a class to check the type
+  def assert_raise(exception_class_or_message, &block)
+    begin
+      yield
+    rescue Exception => e
+      if exception_class_or_message.is_a?(String)
+        assert_equal exception_class_or_message, e.message
+      else
+        assert exception_class_or_message === e, 
+          "Expected exception to be #{exception_class_or_message}, but is is #{e.class}"
+      end
+      return
+    end
+    flunk "Expected exception #{exception_class_or_message.is_a?(String) ? "'#{exception_class_or_message}'" : exception_class_or_message} to be raised, but nothing was raised"
+  end    
+end

data/test/factories.rb

@@ -0,0 +1,109 @@
+# m is for model, I felt the need to document that for some reason
+
+Factory.define :category do |m|
+  m.association :category_type
+  m.sequence(:name) {|n| "TestCategory#{n}"}
+end
+
+Factory.define :category_type do |m|
+  m.sequence(:name) {|n| "TestCategoryType#{n}"}
+end
+
+Factory.define :connector do |m|
+  m.association :page
+  m.page_version 1
+  m.container "main"
+  m.association :connectable, :factory => :html_block
+  m.connectable_version 1
+end
+
+Factory.define :file_block do |m|
+  m.sequence(:name) {|n| "TestFileBlock#{n}"}
+end
+
+Factory.define :group do |m|
+  m.sequence(:name) {|n| "TestGroup#{n}" }
+end
+
+Factory.define :group_type do |m|
+  m.sequence(:name) {|n| "TestGroupType#{n}" }
+end
+
+Factory.define :html_block do |m|
+  m.name "About Us"
+  m.content "<h1>About Us</h1>\n<p>Lorem ipsum dolor sit amet...</p>"
+end
+
+Factory.define :image_block do |m|
+  m.sequence(:name) {|n| "TestImageBlock#{n}"}
+end
+
+Factory.define :link do |m|
+  m.sequence(:name) {|n| "Link #{n}"}
+end
+
+Factory.define :page do |m|
+  m.sequence(:name) {|n| "Page #{n}" }
+  m.path {|a| "/#{a.name.gsub(/\s/,'_').downcase}" }
+  m.template_file_name "default.html.erb"
+  m.association :section
+end
+
+Factory.define :page_partial do |m|
+  m.sequence(:name) {|n| "_page_partial_#{n}" }
+  m.format "html"
+  m.handler "erb"
+end
+
+Factory.define :page_routes do |m|
+  m.sequence(:pattern) {|n| "/page_route_#{n}"}
+  m.association :page
+end
+
+Factory.define :page_template do |m|
+  m.sequence(:name) {|n| "page_template_#{n}" }
+  m.format "html"
+  m.handler "erb"
+  m.body %q{<html>
+  <head>
+    <title>
+      <%= page_title %>
+    </title>
+    <%= yield :html_head %>
+  </head>
+  <body>
+    <%= cms_toolbar %>
+    <%= container :main %>
+  </body>
+</html>}
+end
+
+Factory.define :permission do |m|
+  m.sequence(:name) {|n| "TestPermission#{n}" }
+end
+
+Factory.define :section do |m|
+  m.name "Test"
+  m.path "/"
+  m.parent { Section.root.first }
+end
+
+Factory.define :site do |m|
+  m.sequence(:name) {|n| "Test #{n}"}
+  m.domain {|a| "#{a.name.gsub(/\s/,"_").downcase}.com" }
+end
+
+Factory.define :task_item do |m|
+  m.association :assigned_by, :factory => :user
+  m.association :assigned_to, :factory => :user
+  m.association :page
+end
+
+Factory.define :user do |m|
+  m.first_name "Test"
+  m.last_name "User"
+  m.sequence(:login) {|n| "test_#{n}" }
+  m.email {|a| "#{a.login}@example.com" }
+  m.password "password"
+  m.password_confirmation {|a| a.password }
+end

data/test/functional/cms/cache_controller_test.rb

@@ -0,0 +1,14 @@
+require File.join(File.dirname(__FILE__), '/../../test_helper')
+
+class Cms::CacheControllerTest < ActionController::TestCase
+  include Cms::ControllerTestHelper
+  
+  def setup
+    login_as_cms_admin
+  end
+  
+  def test_expire_cache
+    #TODO: Implement Cache Expiration
+  end
+  
+end

data/test/functional/cms/categories_controller_test.rb

@@ -0,0 +1,25 @@
+require File.join(File.dirname(__FILE__), '/../../test_helper')
+
+class Cms::CategoriesControllerTest < ActionController::TestCase
+  include Cms::ControllerTestHelper
+  
+  def setup
+    login_as_cms_admin
+  end
+  
+  def test_new_with_no_category_types
+    assert_equal 0, CategoryType.count, "This test depends on there being no category types"
+    get :new
+    assert_response :success
+    assert_select "title", "Please Create A Category Type"
+  end
+  
+  def test_new_with_category_types
+    Factory(:category_type, :name => "FooCategoryType")
+    get :new
+    assert_response :success
+    assert_select "title", "Content Library / Add New Category"
+    assert_select "option", "FooCategoryType"
+  end
+  
+end

data/test/functional/cms/connectors_controller_test.rb

@@ -0,0 +1,60 @@
+require File.join(File.dirname(__FILE__), '/../../test_helper')
+
+class Cms::ConnectorsControllerTest < ActionController::TestCase
+  include Cms::ControllerTestHelper
+  
+  def setup
+    login_as_cms_admin
+  end
+  
+  def test_new
+    @page = Factory(:page, :section => root_section, :name => "Test Page")
+    @block = Factory(:html_block)
+    
+    get :new, :page_id => @page, :container => "main"
+
+    assert_response :success
+    assert_select "title", "Add Existing Content to 'Test Page' Page"
+  end
+  
+  def test_new_portlet
+    @page = Factory(:page, :section => root_section, :name => "Test Page")
+    @portlet = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main")    
+    reset(:page)
+    
+    get :new, :page_id => @page, :container => "main", :block_type => "portlets"
+
+    assert_response :success
+    assert_select "title", "Add Existing Content to 'Test Page' Page"
+  end
+  
+  def test_new_with_deleted_portlet
+    @page = Factory(:page, :section => root_section, :name => "Test Page")
+    @portlet = DynamicPortlet.create!(:name => "Test Portlet")
+    @portlet.destroy
+    
+    get :new, :page_id => @page, :container => "main", :block_type => "portlets"
+
+    assert_response :success
+    assert_select "#dynamic_portlet_#{@portlet.id}", :count => 0
+  end
+  
+  def test_destroy
+    @page = Factory(:page, :section => root_section)
+    @block = Factory(:html_block, :connect_to_page_id => @page.id, :connect_to_container => "main")
+    reset(:page)
+    
+    page_version_count = Page::Version.count
+    
+    assert_equal 2, @page.draft.version
+    
+    delete :destroy, :id => @page.connectors.for_page_version(@page.draft.version).first.id
+    reset(:page)
+    
+    assert_redirected_to @page.path
+    assert_incremented page_version_count, Page::Version.count
+    assert_equal 3, @page.draft.version
+    assert @page.connectors.for_page_version(@page.draft.version).empty?
+  end
+    
+end

data/test/functional/cms/content_block_controller_test.rb

@@ -0,0 +1,120 @@
+require File.join(File.dirname(__FILE__), '/../../test_helper')
+
+class PermissionsForContentBlockControllerTest < ActionController::TestCase
+  include Cms::ControllerTestHelper
+  tests Cms::ContentBlockController
+  
+  # We're stubbing a lot because we *just* want to isolate the behaviour for checking permissions
+  def setup
+    login_as_cms_admin
+    @user = User.first
+    @controller.stubs(:current_user).returns(@user)
+    @controller.stubs(:render)
+    @controller.stubs(:model_class).returns(ContentBlock)
+    @controller.stubs(:set_default_category)
+    @controller.stubs(:blocks_path).returns("/cms/content_block")
+    @controller.stubs(:redirect_to_first).returns("/cms/content_block")
+    
+    @block = stub_everything("block")
+    @block.stubs(:as_of_draft_version).returns(@block)
+    @block.stubs(:as_of_version).returns(@block)
+    @block.stubs(:connected_pages).returns(stub(:all => stub))
+    
+    ContentBlock.stubs(:find).returns(@block)
+    ContentBlock.stubs(:new).returns(@block)
+    ContentBlock.stubs(:paginate)
+  end
+  
+  def expect_access_denied
+    @controller.expects(:render).with(has_entry(:status => 403))
+  end
+  
+  def expect_success
+    expect_access_denied.never
+  end
+  
+  test "GET index allows any user" do
+    expect_success
+    get :index
+  end
+  
+  test "GET show allows any user" do
+    expect_success
+    get :show, :id => 5
+  end
+  
+  test "GET new allows any user" do
+    expect_success
+    get :new
+  end
+  
+  test "POST create allows any user" do
+    expect_success
+    post :create
+  end
+  
+  test "GET version allows any user" do
+    expect_success
+    get :version, :id => 5, :version => 3
+  end
+  
+  test "GET versions allows any user" do
+    expect_success
+    get :versions, :id => 5
+  end
+  
+  test "GET usages allows any user" do
+    expect_success
+    get :usages, :id => 5
+  end
+  
+  test "GET edit allows only users who are able to edit the block" do
+    @user.stubs(:able_to_edit?).with(@block).returns(false)
+    expect_access_denied
+    get :edit, :id => 5
+    
+    @user.stubs(:able_to_edit?).with(@block).returns(true)
+    expect_success
+    get :edit, :id => 5
+  end
+  
+  test "PUT update allows only users who are able to edit the block" do
+    @user.stubs(:able_to_edit?).with(@block).returns(false)
+    expect_access_denied
+    put :update, :id => 5
+    
+    @user.stubs(:able_to_edit?).with(@block).returns(true)
+    expect_success
+    put :update, :id => 5
+  end
+  
+  test "DELETE destroy allows only users who are able to publish the block" do
+    @user.stubs(:able_to_publish?).with(@block).returns(false)
+    expect_access_denied
+    delete :destroy, :id => 5
+    
+    @user.stubs(:able_to_publish?).with(@block).returns(true)
+    expect_success
+    delete :destroy, :id => 5
+  end
+  
+  test "PUT publish allows only users who are able to publish the block" do
+    @user.stubs(:able_to_publish?).with(@block).returns(false)
+    expect_access_denied
+    put :publish, :id => 5
+    
+    @user.stubs(:able_to_publish?).with(@block).returns(true)
+    expect_success
+    put :publish, :id => 5
+  end
+  
+  test "PUT revert_to allows only users who are able to publish the block" do
+    @user.stubs(:able_to_publish?).with(@block).returns(false)
+    expect_access_denied
+    put :revert_to, :id => 5, :version => 1
+    
+    @user.stubs(:able_to_publish?).with(@block).returns(true)
+    expect_success
+    put :revert_to, :id => 5, :version => 1
+  end
+end

data/test/functional/cms/content_controller_test.rb

@@ -0,0 +1,434 @@
+require File.join(File.dirname(__FILE__), '/../../test_helper')
+
+class Cms::ContentControllerTest < ActionController::TestCase
+  include Cms::ControllerTestHelper
+
+  def test_show_home_page
+    get :show
+    assert_response :success
+    assert_select "title", "Home"
+  end
+
+  def test_show_another_page
+    @page = Factory(:page, :section => root_section, :path => "/about", :name => "Test About", :template_file_name => "default.html.erb", :publish_on_save => true)
+    get :show, :path => ["about"]
+    assert_select "title", "Test About"
+  end
+
+  def test_page_not_found_to_guest
+    get :show, :path => ["foo"]
+    assert_response :not_found
+    assert_select "title", "Not Found"
+    assert_select "h1", "Page Not Found"
+  end
+
+  def test_page_not_found_to_cms_admin
+    login_as_cms_admin
+    get :show, :path => ["foo"]
+    assert_response :not_found
+    assert_select "title", "Page Not Found"
+    assert_select "h2", "There is no page at /foo"
+  end
+
+  def test_show_protected_page_to_guest
+    create_protected_page
+
+    get :show, :path => ["secret"]
+    assert_response :forbidden
+    assert_select "title", "Access Denied"
+  end
+
+  def test_show_protected_page_to_privileged_user
+    create_protected_page
+
+    login_as @privileged_user
+
+    get :show, :path => ["secret"]
+    assert_response :success
+    assert_select "title", "Shhh... It's a Secret"
+  end
+
+  def test_show_archived_page_to_guest
+    create_archived_page
+
+    get :show, :path => ["archived"]
+    assert_response :not_found
+    assert_select "title", "Not Found"
+  end
+
+  def test_show_archived_page_to_user
+    create_archived_page
+    login_as_cms_admin
+
+    get :show, :path => ["archived"]
+    assert_response :success
+    assert_select "title", "Archived"
+  end
+
+  def test_show_file
+    create_file
+
+    get :show, :path => ["test.txt"]
+
+    assert_response :success
+    assert_equal "text/plain", @response.content_type
+    assert_equal "This is a test", streaming_file_contents
+  end
+
+  def test_show_archived_file
+    create_file
+
+    reset(:file_block)
+    @file_block.update_attributes(:archived => true, :publish_on_save => true)
+    reset(:file_block)
+    assert @file_block.attachment.archived?
+
+    get :show, :path => ["test.txt"]
+
+    assert_response :not_found
+    assert_select "title", "Not Found"
+  end
+
+  def test_show_protected_file_to_guest
+    create_protected_file
+
+    get :show, :path => ["test.txt"]
+
+    assert_response :forbidden
+    assert_select "title", "Access Denied"
+  end
+
+  def test_show_protected_file_to_privileged_user
+    create_protected_file
+    login_as @privileged_user
+
+    get :show, :path => ["test.txt"]
+
+    assert_response :success
+    assert_equal "text/plain", @response.content_type
+    assert_equal "This is a test", streaming_file_contents
+  end
+
+  def test_show_page_route
+    @page_template = Factory(:page_template, :name => "test_show_page_route")
+    @page = Factory(:page,
+      :section => root_section,
+      :template_file_name => "test_show_page_route.html.erb")
+    @portlet = DynamicPortlet.create!(:name => "Test",
+      :template => "<h1><%= @foo %></h1>",
+      :connect_to_page_id => @page.id, :connect_to_container => "main")
+    @page_route = @page.page_routes.create(:pattern => "/foo", :code => "@foo = params[:foo]")
+
+    reset(:page)
+    @page.publish!
+
+    get :show_page_route, :foo => "42", :_page_route_id => @page_route.id
+    assert_response :success
+    assert_select "h1", "42"
+  end
+
+  def test_show_page_with_content
+    create_page_with_content
+    get :show, :path => ["page_with_content"]
+    assert_response :success
+    assert_select "h3", "TEST"
+  end
+
+  def test_show_draft_page_with_content_as_editor
+    login_as_cms_admin
+    create_page_with_content
+
+    @block.update_attributes(:content => "<h3>I've been edited</h3>")
+    reset(:page, :block)
+
+    get :show, :path => ["page_with_content"]
+    assert_response :success
+    assert_select "h3", "I've been edited"
+  end
+
+
+
+  protected
+    def create_protected_user_section_group
+      @protected_section = Factory(:section, :parent => root_section)
+      @secret_group = Factory(:group, :name => "Secret")
+      @secret_group.sections << @protected_section
+      @privileged_user = Factory(:user, :login => "privileged")
+      @privileged_user.groups << @secret_group
+    end
+
+    def create_protected_page
+      create_protected_user_section_group
+      @page = Factory(:page,
+        :section => @protected_section,
+        :path => "/secret",
+        :name => "Shhh... It's a Secret",
+        :template_file_name => "default.html.erb",
+        :publish_on_save => true)
+    end
+
+    def create_file
+      @file = mock_file(:read => "This is a test", :content_type => "text/plain")
+      @file_block = Factory(:file_block, :attachment_section => root_section, :attachment_file => @file, :attachment_file_path => "/test.txt", :publish_on_save => true)
+    end
+
+    def create_protected_file
+      create_protected_user_section_group
+      create_file
+      reset(:file_block)
+      @file_block.update_attributes(:attachment_section => @protected_section)
+      reset(:file_block)
+    end
+
+    def create_archived_page
+      @page = Factory(:page,
+        :section => root_section,
+        :path => "/archived",
+        :name => "Archived",
+        :archived => true,
+        :template_file_name => "default.html.erb",
+        :publish_on_save => true)
+    end
+
+    def create_page_with_content
+      @page_template = Factory(:page_template, :name => "testing_editting_content")
+
+      @page = Factory(:page,
+        :section => root_section,
+        :path => "/page_with_content",
+        :template_file_name => "testing_editting_content.html.erb")
+
+      @block = HtmlBlock.create!(:name => "Test",
+        :content => "<h3>TEST</h3>",
+        :connect_to_page_id => @page.id,
+        :connect_to_container => "main")
+
+      reset(:page)
+      @page.publish!
+
+    end
+
+end
+
+# CMS Page Caching Enabled (Production Mode)
+#   Logged in as guest
+#         mysite.com/page         -> serves cached page
+#     cms.mysite.com/page         -> redirect to mysite.com/page
+#
+#   Logged in as a registered user
+#         mysite.com/page         -> serves cached page
+#     cms.mysite.com/page         -> redirect to mysite.com/page
+#
+#   Logged in as cms user
+#         mysite.com/page         -> serves cached page
+#     cms.mysite.com/page         -> renders cms page editor
+class Cms::ContentCachingEnabledControllerTest < ActionController::TestCase
+  tests Cms::ContentController
+  include Cms::ControllerTestHelper
+
+  def setup
+    ActionController::Base.perform_caching = true
+    @page = Factory(:page, :section => root_section, :name => "Test Page", :path => "/page", :publish_on_save => true)
+    @registered_user = Factory(:user)
+    @registered_user.groups << Group.guest
+  end
+
+  def teardown
+    ActionController::Base.perform_caching = false
+  end
+
+  def test_guest_user_views_page_on_public_site
+    @request.host = "mysite.com"
+    get :show, :path => ["page"]
+    assert_response :success
+    assert_select "title", "Test Page"
+  end
+
+  def test_guest_user_views_page_on_cms_site
+    @request.host = "cms.mysite.com"
+    get :show, :path => ["page"]
+    assert_redirected_to "http://mysite.com/page"
+  end
+
+  def test_registered_user_views_page_on_public_site
+    login_as @registered_user
+    @request.host = "mysite.com"
+
+    get :show, :path => ["page"]
+
+    assert_response :success
+    assert_select "title", "Test Page"
+  end
+
+  def test_registered_user_views_page_on_cms_site
+    login_as @registered_user
+    @request.host = "cms.mysite.com"
+
+    get :show, :path => ["page"]
+
+    assert_redirected_to "http://mysite.com/page"
+  end
+
+  def test_cms_user_views_page_on_public_site
+    login_as_cms_admin
+    @request.session[:page_mode] = "edit"
+    @request.host = "mysite.com"
+
+    get :show, :path => ["page"]
+
+    assert_response :success
+    assert_select "title", "Test Page"
+    assert_select "iframe", {:count => 0}
+  end
+
+  def test_cms_user_views_page_on_cms_site
+    login_as_cms_admin
+    @request.session[:page_mode] = "edit"
+    @request.host = "cms.mysite.com"
+
+    get :show, :path => ["page"]
+
+    assert_response :success
+    assert_select "title", "Test Page"
+    assert_select "iframe"
+  end
+
+end
+
+# CMS Page Caching Disabled (Development Mode)
+#   Logged in as guest
+#         mysite.com/page         -> renders page
+#     cms.mysite.com/page         -> renders page
+#
+#   Logged in as a registered user
+#         mysite.com/page         -> renders page
+#     cms.mysite.com/page         -> renders page
+#
+#   Logged in as cms user
+#         mysite.com/page         -> renders cms page editor
+#     cms.mysite.com/page         -> renders cms page editor
+class Cms::ContentCachingDisabledControllerTest < ActionController::TestCase
+  tests Cms::ContentController
+  include Cms::ControllerTestHelper
+
+  def setup
+    ActionController::Base.perform_caching = false
+    @page = Factory(:page, :section => root_section, :name => "Test Page", :path => "/page", :publish_on_save => true)
+    @registered_user = Factory(:user)
+    @registered_user.groups << Group.guest
+  end
+
+  def test_guest_user_views_page_on_public_site
+    @request.host = "mysite.com"
+    get :show, :path => ["page"]
+    assert_response :success
+    assert_select "title", "Test Page"
+  end
+
+  def test_guest_user_views_page_on_cms_site
+    @request.host = "mysite.com"
+    get :show, :path => ["page"]
+    assert_response :success
+    assert_select "title", "Test Page"
+  end
+
+  def test_registered_user_views_page_on_public_site
+    login_as @registered_user
+    @request.host = "mysite.com"
+
+    get :show, :path => ["page"]
+
+    assert_response :success
+    assert_select "title", "Test Page"
+  end
+
+  def test_registered_user_views_page_on_cms_site
+    login_as @registered_user
+    @request.host = "mysite.com"
+
+    get :show, :path => ["page"]
+
+    assert_response :success
+    assert_select "title", "Test Page"
+  end
+
+  def test_cms_user_views_page_on_public_site
+    login_as_cms_admin
+    @request.session[:page_mode] = "edit"
+    @request.host = "mysite.com"
+
+    get :show, :path => ["page"]
+
+    assert_response :success
+    assert_select "title", "Test Page"
+    assert_select "iframe"
+  end
+
+  def test_cms_user_views_page_on_cms_site
+    login_as_cms_admin
+    @request.session[:page_mode] = "edit"
+    @request.host = "cms.mysite.com"
+
+    get :show, :path => ["page"]
+
+    assert_response :success
+    assert_select "title", "Test Page"
+    assert_select "iframe"
+  end
+
+  def test_portlet_throw_access_denied_goes_to_access_denied_page
+    @page = Factory(:page, :section => root_section, :path => "/about", :name => "Test About", :template_file_name => "default.html.erb", :publish_on_save => true)
+    @portlet_render = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :template => '<p id="hi">hello</p>')
+    @portlet_raise_access_denied = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :code => 'raise Cms::Errors::AccessDenied')
+    reset(:page)
+
+    get :show, :path => ["about"]
+    assert_response :forbidden
+    assert_select "title", "Access Denied"
+  end
+  def test_portlet_throw_not_found_goes_to_not_found_page
+    @page = Factory(:page, :section => root_section, :path => "/about", :name => "Test About", :template_file_name => "default.html.erb", :publish_on_save => true)
+    @portlet_render = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :template => '<p id="hi">hello</p>')
+    @portlet_raise_not_found = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :code => 'raise ActiveRecord::RecordNotFound')
+    reset(:page)
+
+    get :show, :path => ["about"]
+    assert_response :not_found
+    assert_select "title", "Not Found"
+  end
+
+  def test_portlets_throw_multiple_goes_to_not_found
+    @page = Factory(:page, :section => root_section, :path => "/about", :name => "Test About", :template_file_name => "default.html.erb", :publish_on_save => true)
+    @portlet_render = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :template => '<p id="hi">hello</p>')
+    @portlet_raise_not_found = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :code => 'raise ActiveRecord::RecordNotFound')
+    @portlet_raise_access_denied = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :code => 'raise Cms::Errors::AccessDenied')   
+    @portlet_raise_generic = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :code => 'raise')
+    reset(:page)
+
+    get :show, :path => ["about"]
+    assert_response :not_found
+    assert_select "title", "Not Found"
+  end
+
+  def test_portlets_throw_multiple_goes_to_access_denied
+    @page = Factory(:page, :section => root_section, :path => "/about", :name => "Test About", :template_file_name => "default.html.erb", :publish_on_save => true)
+    @portlet_render = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :template => '<p id="hi">hello</p>')
+    @portlet_raise_access_denied = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :code => 'raise Cms::Errors::AccessDenied')   
+    @portlet_raise_generic = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :code => 'raise')
+    reset(:page)
+
+    get :show, :path => ["about"]
+    assert_response :forbidden
+    assert_select "title", "Access Denied"
+  end
+  def test_portlet_throw_generic_exception_still_render_page
+    @page = Factory(:page, :section => root_section, :path => "/about", :name => "Test About", :template_file_name => "default.html.erb", :publish_on_save => true)
+    @portlet_render = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :template => '<p id="hi">hello</p>')
+    @portlet_raise_generic = DynamicPortlet.create!(:name => "Test", :connect_to_page_id => @page.id, :connect_to_container => "main", :code => 'raise')
+    reset(:page)
+
+    get :show, :path => ["about"]
+    assert_select "#hi", "hello"
+
+  end
+end