blue_light_special 0.2.0

data/generators/blue_light_special/templates/blue_light_special.yml

@@ -0,0 +1,42 @@
+#
+# The mailer_sender is set as the reply address for all notification emails.
+#
+# Set madmimi_username and madmimi_api_key to your MadMimi account username
+# and API key.
+#
+# The impersonation_hash is used to secure user impersonations. Set it to
+# a long, random hash.
+#
+# To turn on Facebook Connect, set use_facebook_connect to true.
+#
+# If you are using Facebook Connect, you'll need to provide your
+# application's API and secret keys from your Facebook application
+# settings at http://facebook.com/developers.
+#
+
+development:
+  mailer_sender: donotreply@example.com
+  madmimi_username: 
+  madmimi_api_key: 
+  impersonation_hash: 
+  use_facebook_connect: false
+  facebook_api_key: 
+  facebook_secret_key: 
+
+test:
+  mailer_sender: donotreply@example.com
+  madmimi_username: 
+  madmimi_api_key: 
+  impersonation_hash: 
+  use_facebook_connect: false
+  facebook_api_key: 
+  facebook_secret_key: 
+
+production:
+  mailer_sender: donotreply@example.com
+  madmimi_username: 
+  madmimi_api_key: 
+  impersonation_hash: 
+  use_facebook_connect: false
+  facebook_api_key: 
+  facebook_secret_key: 

data/generators/blue_light_special/templates/factories.rb

@@ -0,0 +1,23 @@
+Factory.sequence :email do |n|
+  "user#{n}@example.com"
+end
+
+Factory.sequence :facebook_id do |n|
+  n
+end
+
+Factory.define :user do |user|
+  user.email                 { Factory.next :email }
+  user.first_name            { "Factory" }
+  user.last_name             { "User" }
+  user.password              { "password" }
+  user.password_confirmation { "password" }
+end
+
+Factory.define :admin_user, :parent => :user do |admin|
+  admin.role                 'admin'
+end
+
+Factory.define :facebook_user, :parent => :user do |user|
+  user.facebook_uid           { Factory.next :facebook_id }
+end

data/generators/blue_light_special/templates/migrations/create_users.rb

@@ -0,0 +1,24 @@
+class BlueLightSpecialCreateUsers < ActiveRecord::Migration
+  def self.up
+    create_table(:users) do |t|
+      t.string   :email,                :limit => 100
+      t.string   :first_name,           :limit => 50
+      t.string   :last_name,            :limit => 50
+      t.string   :role,                 :limit => 50
+      t.string   :encrypted_password,   :limit => 128
+      t.string   :salt,                 :limit => 128
+      t.string   :remember_token,       :limit => 128
+      t.string   :facebook_uid,         :limit => 50
+      t.string   :password_reset_token, :limit => 128
+      t.timestamps
+    end
+
+    add_index :users, :email
+    add_index :users, :remember_token
+    add_index :users, :facebook_uid
+  end
+
+  def self.down
+    drop_table :users
+  end
+end

data/generators/blue_light_special/templates/migrations/update_users.rb

@@ -0,0 +1,44 @@
+class BlueLightSpecialUpdateUsers<%= schema_version_constant %> < ActiveRecord::Migration
+  def self.up
+<%
+      existing_columns = ActiveRecord::Base.connection.columns(:users).collect { |each| each.name }
+      columns = [
+        [:email,                't.string :email, :limit => 100'],
+        [:first_name,           't.string :first_name, :limit => 50'],
+        [:last_name,            't.string :last_name, :limit => 50'],
+        [:role,                 't.string :role, :limit => 50'],
+        [:encrypted_password,   't.string :encrypted_password, :limit => 128'],
+        [:salt,                 't.string :salt, :limit => 128'],
+        [:remember_token,       't.string :remember_token, :limit => 128'],
+        [:facebook_uid,         't.string :facebook_uid, :limit => 50'],
+        [:password_reset_token, 't.string :password_reset_token, :limit => 128']
+      ].delete_if {|c| existing_columns.include?(c.first.to_s)}
+-%>
+    change_table(:users) do |t|
+<% columns.each do |c| -%>
+      <%= c.last %>
+<% end -%>
+    end
+
+<%
+    existing_indexes = ActiveRecord::Base.connection.indexes(:users)
+    index_names = existing_indexes.collect { |each| each.name }
+    new_indexes = [
+      [:index_users_on_email,                     'add_index :users, :email'],
+      [:index_users_on_remember_token,            'add_index :users, :remember_token'],
+      [:index_users_on_facebook_uid,              'add_index :users, :facebook_uid']
+    ].delete_if { |each| index_names.include?(each.first.to_s) }
+-%>
+<% new_indexes.each do |each| -%>
+    <%= each.last %>
+<% end -%>
+  end
+
+  def self.down
+    change_table(:users) do |t|
+<% unless columns.empty? -%>
+      t.remove <%= columns.collect { |each| ":#{each.first}" }.join(',') %>
+<% end -%>
+    end
+  end
+end

data/generators/blue_light_special/templates/style.css

@@ -0,0 +1,31 @@
+/* Flash messages */
+
+.notice_flash,
+.failure_flash, 
+.success_flash {
+	border: 1px solid;
+	padding: 3px;
+	padding:15px 10px;
+	background-repeat: no-repeat;
+	background-position: 10px center;
+	margin-bottom: 10px;
+	font-weight: bold;
+	width: 60%;
+	margin-left: auto;
+	margin-right: auto;
+}
+
+.notice_flash {
+	color: #00529B;
+	background-color: #BDE5F8;
+}
+
+.failure_flash {
+	color: #D8000C;
+	background-color: #FFBABA;
+}
+
+.success_flash {
+	color: #4F8A10;
+	background-color: #DFF2BF;
+}

data/generators/blue_light_special/templates/user.rb

@@ -0,0 +1,3 @@
+class User < ActiveRecord::Base
+  include BlueLightSpecial::User
+end

data/generators/blue_light_special/templates/xd_receiver.html

@@ -0,0 +1,10 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+   "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" >
+<head>
+    <title>Cross-Domain Receiver Page</title>
+</head>
+<body>
+    <script src="http://static.ak.connect.facebook.com/js/api_lib/v0.4/XdCommReceiver.debug.js" type="text/javascript"></script>
+</body>
+</html>

data/generators/blue_light_special/templates/xd_receiver_ssl.html

@@ -0,0 +1,10 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" >
+<head>
+    <title>Cross-Domain Receiver Page</title>
+</head>
+<body>
+    <script src="https://ssl.connect.facebook.com/js/api_lib/v0.4/XdCommReceiver.js" type="text/javascript"></script>
+</body>
+</html>

data/generators/blue_light_special_admin/USAGE

@@ -0,0 +1 @@
+script/generate blue_light_special_admin

data/generators/blue_light_special_admin/blue_light_special_admin_generator.rb

@@ -0,0 +1,30 @@
+require File.expand_path(File.dirname(__FILE__) + "/lib/insert_commands.rb")
+
+class BlueLightSpecialAdminGenerator < Rails::Generator::Base
+
+  def manifest
+    record do |m|
+      m.directory File.join("app", "controllers", "admin")
+      m.file "app/controllers/admin/admin_controller.rb", "app/controllers/admin/admin_controller.rb"
+      m.file "app/controllers/admin/users_controller.rb", "app/controllers/admin/users_controller.rb"
+
+      m.directory File.join("app", "views", "admin", "users")
+      ["app/views/admin/users/_form.html.erb",
+       "app/views/admin/users/edit.html.erb",
+       "app/views/admin/users/index.html.erb",
+       "app/views/admin/users/new.html.erb",
+       "app/views/admin/users/show.html.erb"].each do |file|
+        m.file file, file
+      end
+      
+      m.directory File.join("test", "integration", "admin")
+      m.file "test/integration/admin/users_test.rb", "test/integration/admin/users_test.rb"      
+
+      m.insert_into "config/routes.rb",
+                    "map.namespace :admin do |admin|\n    admin.resources :users\n  end"
+      
+      m.readme "README"
+    end
+  end
+  
+end

data/generators/blue_light_special_admin/lib/insert_commands.rb

@@ -0,0 +1,33 @@
+# Mostly pinched from http://github.com/ryanb/nifty-generators/tree/master
+
+Rails::Generator::Commands::Base.class_eval do
+  def file_contains?(relative_destination, line)
+    File.read(destination_path(relative_destination)).include?(line)
+  end
+end
+
+Rails::Generator::Commands::Create.class_eval do
+  def insert_into(file, line)
+    logger.insert "#{line} into #{file}"
+    unless options[:pretend] || file_contains?(file, line)
+      gsub_file file, /^(class|module|.*Routing).*$/ do |match|
+        "#{match}\n  #{line}"
+      end
+    end
+  end
+end
+
+Rails::Generator::Commands::Destroy.class_eval do
+  def insert_into(file, line)
+    logger.remove "#{line} from #{file}"
+    unless options[:pretend]
+      gsub_file file, "\n  #{line}", ''
+    end
+  end
+end
+
+Rails::Generator::Commands::List.class_eval do
+  def insert_into(file, line)
+    logger.insert "#{line} into #{file}"
+  end
+end

data/generators/blue_light_special_admin/templates/README

@@ -0,0 +1,16 @@
+
+*******************************************************************************
+
+Next:
+
+1. Add a link somewhere in your app to /admin/users for admins to access the
+	 list of users.
+
+2. Any other admin controllers should inherit from Admin::AdminController.
+   This will ensure that only users who have the 'admin' role are allowed
+   to access the admin controllers.
+
+3. Manually set an 'admin' role on at least one user, or you won't be able
+   to access the admin area.
+
+*******************************************************************************

data/generators/blue_light_special_admin/templates/app/controllers/admin/admin_controller.rb

@@ -0,0 +1,14 @@
+class Admin::AdminController < ApplicationController
+  
+  before_filter :authenticate
+  before_filter :check_role
+  
+  
+  private
+  
+  
+  def check_role
+    redirect_to root_url unless current_user.admin?
+  end
+
+end

data/generators/blue_light_special_admin/templates/app/controllers/admin/users_controller.rb

@@ -0,0 +1,52 @@
+class Admin::UsersController < Admin::AdminController
+  
+  def index
+    @users = User.all
+  end
+  
+  def show
+    @user = User.find(params[:id])
+  end
+  
+  def new
+    @user = User.new
+  end
+  
+  def create
+    @user = User.new(params[:user])
+    @user.role = params[:user][:role]
+    if @user.save
+      flash[:notice] = "Created #{@user.name}"
+      redirect_to admin_user_url(@user)
+    else
+      render :action => 'new'
+    end
+  end
+  
+  def edit
+    @user = User.find(params[:id])
+  end
+  
+  def update
+    @user = User.find(params[:id])
+    @user.role = params[:user][:role]
+    if @user.update_attributes(params[:user])
+      flash[:notice] = "Updated #{@user.name}"
+      redirect_to admin_user_url(@user)
+    else
+      render :action => 'edit'
+    end
+  end
+  
+  def destroy
+    @user = User.find(params[:id])
+    if @user != current_user
+      @user.destroy
+      flash[:notice] = "Deleted #{@user.name}"
+    else
+      flash[:error] = "Cannot delete yourself"
+    end
+    redirect_to admin_users_url
+  end
+    
+end

data/generators/blue_light_special_admin/templates/app/views/admin/users/_form.html.erb

@@ -0,0 +1,25 @@
+<%= form.error_messages %>
+<p class="text_field">
+  <%= form.label :first_name %>
+  <%= form.text_field :first_name %>
+</p>
+<p class="text_field">
+  <%= form.label :last_name %>
+  <%= form.text_field :last_name %>
+</p>
+<p class="text_field">
+  <%= form.label :email %>
+  <%= form.text_field :email %>
+</p>
+<p class="password_field">
+  <%= form.label :password %>
+  <%= form.password_field :password %>
+</p>
+<p class="password_field">
+  <%= form.label :password_confirmation, "Confirm password" %>
+  <%= form.password_field :password_confirmation %>
+</p>
+<p>
+  <%= form.label :role %>
+  <%= form.collection_select :role, ['', 'admin'], :to_s, :to_s %>
+</p>

data/generators/blue_light_special_admin/templates/app/views/admin/users/edit.html.erb

@@ -0,0 +1,6 @@
+<h2>Edit User</h2>
+
+<% form_for @user, :url => admin_user_path(@user) do |form| %>
+  <%= render :partial => '/admin/users/form', :object => form %>
+  <%= form.submit 'Save', :disable_with => 'Please wait...' %>
+<% end %>

data/generators/blue_light_special_admin/templates/app/views/admin/users/index.html.erb

@@ -0,0 +1,7 @@
+<ul>
+  <%- @users.each do |user| -%>
+    <li><%= link_to user.name, admin_user_path(user) %> <%=h user.email %></li>
+  <%- end -%>
+</ul>
+
+<%= link_to 'New User', new_admin_user_path %>

data/generators/blue_light_special_admin/templates/app/views/admin/users/new.html.erb

@@ -0,0 +1,6 @@
+<h2>Create User</h2>
+
+<% form_for @user, :url => admin_users_path do |form| %>
+  <%= render :partial => '/admin/users/form', :object => form %>
+  <%= form.submit 'Save', :disable_with => 'Please wait...' %>
+<% end %>

data/generators/blue_light_special_admin/templates/app/views/admin/users/show.html.erb

@@ -0,0 +1,10 @@
+<h2>User Details</h2>
+
+<div id="user_profile">
+  <b>First Name:</b> <%=h @user.first_name %><br/>
+  <b>Last Name:</b> <%=h @user.last_name %><br/>
+  <b>Email:</b> <%=h @user.email %><br/>
+  <%= link_to 'Edit', edit_admin_user_path(@user) %><br/>
+  <%= link_to 'Delete', admin_user_path(@user), :method => :delete, :confirm => 'Are you sure?' %><br/>
+  <%= link_to 'Impersonate', impersonation_path(:user_id => @user.id), :method => :post, :id => "impersonate_#{@user.id}" %>
+</div>

data/generators/blue_light_special_admin/templates/test/integration/admin/users_test.rb

@@ -0,0 +1,201 @@
+require File.dirname(__FILE__) + "/../../test_helper"
+
+class Admin::UsersTest < ActionController::IntegrationTest
+
+  setup do
+    ActionMailer::Base.deliveries.clear
+  end
+
+  teardown do
+    ActionMailer::Base.deliveries.clear
+  end
+
+  context 'Signed in as an admin' do
+
+    setup do
+      @bob = Factory(:user, :email => 'bob@bob.bob', :first_name => 'Bob')
+      @joe = Factory(:user, :email => 'joe@joe.joe', :first_name => 'Joe')
+      @ted = Factory(:user, :email => 'ted@ted.ted', :first_name => 'Ted')
+      @admin_user = Factory(:admin_user, :email => 'admin@example.com')
+      sign_in_as(@admin_user.email, @admin_user.password)
+    end
+
+    context 'when listing users' do
+        
+      should 'show the list of users' do
+        visit admin_users_url
+        assert_contain(/bob@bob.bob/)
+        assert_contain(/joe@joe.joe/)
+        assert_contain(/ted@ted.ted/)
+      end
+    
+    end
+    
+    context 'when creating a new user' do
+      
+      context 'with valid data' do
+                  
+        should 'display "Created [name]"' do
+          create_user(:first_name => 'Tom', :last_name => 'Tom')
+          assert_contain(/Created Tom Tom/)
+        end
+
+        should 'redirect to the user show page' do
+          create_user(:email => 'tom@tom.tom')
+          user = User.find_by_email('tom@tom.tom')
+          assert_equal current_url, admin_user_url(user)
+        end
+
+        should 'be able to set the role' do
+          create_user(:email => 'tom@tom.tom', :role => 'admin')
+          user = User.find_by_email('tom@tom.tom')
+          assert user.admin?
+        end
+
+      end
+      
+      context 'with invalid data' do
+        
+        should 'display error messages' do
+          create_user(
+            :first_name => '',
+            :last_name => '',
+            :email => 'invalidemail',
+            :password_confirmation => 'bad')
+          assert_contain(/First name can't be blank/)
+          assert_contain(/Last name can't be blank/)
+          assert_contain(/Email is invalid/)
+          assert_contain(/Password doesn't match confirmation/)
+        end
+        
+        should 'redisplay the new user form' do
+          create_user(:first_name => '')
+          assert_have_selector 'form.new_user'
+        end
+        
+      end
+      
+    end
+  
+    context 'when editing a user' do
+
+      context 'with valid data' do
+      
+        should 'display "Updated [name]"' do
+          edit_user(@ted, :first_name => 'Tom', :last_name => 'Tom' )
+          assert_contain(/Updated Tom Tom/)
+        end
+      
+        should 'redirect to the user show page' do
+          edit_user(@ted, :email => 'tom@tom.tom')
+          user = User.find_by_email('tom@tom.tom')
+          assert_equal current_url, admin_user_url(user)
+        end
+        
+        should 'be able to change the role' do
+          edit_user(@ted, :role => 'admin')
+          @ted.reload
+          assert @ted.admin?
+        end
+        
+      end
+      
+      context 'with invalid data' do
+        
+        should 'display error messages' do
+          edit_user(@ted,
+            :first_name => '',
+            :last_name => '',
+            :email => 'invalidemail',
+            :password => 'good',
+            :password_confirmation => 'bad')
+          assert_contain(/First name can't be blank/)
+          assert_contain(/Last name can't be blank/)
+          assert_contain(/Email is invalid/)
+          assert_contain(/Password doesn't match confirmation/)
+        end
+        
+        should 'redisplay the edit form' do
+          edit_user(@ted, :first_name => '')
+          assert_have_selector 'form.edit_user'
+        end
+        
+      end
+      
+    end
+    
+    context 'when deleting a user' do
+
+      should 'display "Deleted [name]"' do
+        delete_user(@bob)
+        assert_contain(/Deleted Bob/)
+      end
+
+      should 'redirect to the user list' do
+        delete_user(@bob)
+        assert_equal current_url, admin_users_url
+      end
+      
+      should 'not display the deleted user in the list' do
+        delete_user(@bob)
+        assert_not_contain(/bob@bob.bob/)
+      end
+      
+      should 'not allow deleting currently logged in user' do
+        visit admin_user_url(@admin_user), :delete
+        assert_contain(/Cannot delete yourself/)
+        assert_contain(/admin@example.com/)
+      end
+
+    end
+               
+  end
+  
+  context 'Signed in as a non-admin user' do
+
+    setup do
+      @user = Factory(:user)
+      sign_in_as(@user.email, @user.password)
+    end
+    
+    should 'not give access' do
+      visit admin_users_url
+      assert_not_equal current_url, admin_users_url
+    end
+    
+  end
+  
+  
+  private
+  
+  
+  def create_user(options = {})
+    visit admin_users_url
+    click_link 'New User'
+    fill_in 'Email',            :with => options[:email]                  || 'tom@tom.tom'
+    fill_in 'Password',         :with => options[:password]               || 'password'
+    fill_in 'Confirm Password', :with => options[:password_confirmation]  || options[:password] || 'password'
+    fill_in 'First Name',       :with => options[:first_name]             || 'Tom'
+    fill_in 'Last Name',        :with => options[:last_name]              || 'Tom'
+    select options[:role] || '', :from => 'Role'
+    click_button 'Save'
+  end
+  
+  def edit_user(user, options = {})
+    visit admin_user_url(user)
+    click_link 'Edit'
+    fill_in 'Email',            :with => options[:email]                  || 'tom@tom.tom'
+    fill_in 'Password',         :with => options[:password]               || ''
+    fill_in 'Confirm Password', :with => options[:password_confirmation]  || options[:password] || ''
+    fill_in 'First Name',       :with => options[:first_name]             || 'Tom'
+    fill_in 'Last Name',        :with => options[:last_name]              || 'Tom'
+    select options[:role] || '', :from => 'Role'
+    click_button 'Save'
+  end
+  
+  def delete_user(user)
+    visit admin_user_url(user)
+    click_link 'Delete'
+  end
+    
+end