cancan-permits 0.2.5 → 0.2.7

data/spec/data_mapper/permits_spec.rb

@@ -1,37 +1,2 @@
 require 'data_mapper/spec_helper'
-
-Permits::Ability.orm = :data_mapper
-
-describe Permits::Ability do
-  context "Guest user" do
-    before :each do
-      @guest    = User.create(:name => "Kristian", :role => "guest")
-      @ability  = Permits::Ability.new(@guest)
-
-      @comment  = Comment.create(:user_id => @guest.id)
-
-      @post     = Post.create(:writer => @guest.id)
-
-      @article  = Article.create(:author => @guest.id)
-    end
-
-    it "should be able to :read Comment and Post but NOT Article" do
-      @ability.can?(:read, Comment).should be_true
-      @ability.can?(:read, @comment).should be_true
-      
-      @ability.can?(:read, Post).should be_true      
-      @ability.can?(:read, @post).should be_true      
-      
-      @ability.can?(:read, Article).should be_false
-      @ability.can?(:read, @article).should be_false      
-    end
-
-    it "should be not able to :update only Comment" do
-      @ability.can?(:update, Comment).should be_true
-      @ability.can?(:update, @comment).should be_true      
-      
-      @ability.can?(:update, Post).should be_false
-      @ability.can?(:update, @post).should be_false
-    end
-  end
-end
+require 'generic/api/basic/xgroup_orm'

data/spec/data_mapper/spec_helper.rb

@@ -7,6 +7,8 @@ require 'dm-migrations'
 DataMapper::Logger.new($stdout, :debug)                 
 DataMapper.setup(:default, 'sqlite::memory:')
 
+Permits::Ability.orm = :data_mapper
+
 RSpec.configure do |config|
   config.mock_with :mocha
 end

data/spec/fixtures/permits/any_permit.rb

@@ -0,0 +1,9 @@
+class AnyPermit < Permit::Base
+  def initialize(ability, options = {})
+    super
+  end
+
+  def permit?(user, options = {})    
+    super
+  end  
+end

data/spec/fixtures/permits/super_admin_permit.rb

@@ -0,0 +1,12 @@
+class SuperAdminPermit < Permit::Base
+  def initialize(ability, options = {})
+    super
+  end
+
+  def permit?(user, options = {})    
+    super
+    return if !role_match? user
+    
+    can :manage, :all    
+  end  
+end

data/spec/fixtures/permits/system_permit.rb

@@ -0,0 +1,9 @@
+class SystemPermit < Permit::Base
+  def initialize(ability, options = {})
+    super
+  end
+
+  def permit?(user, options = {})    
+    super
+  end  
+end

data/spec/generic/api/basic/config.rb

@@ -0,0 +1,15 @@
+def basic_config context
+  send :"#{context}_config"
+end
+
+def guest_config
+  @guest    = User.new(1, :guest)
+  @ability  = Permits::Ability.new @guest 
+  @comment  = Comment.new(1)
+  @post     = Post.new(1)
+end
+
+def admin_config
+  @admin = User.new(1, :admin, 'kristian')
+  @ability = Permits::Ability.new(@admin)
+end

data/spec/generic/api/basic/xgroup.rb

@@ -0,0 +1,55 @@
+require 'generic/api/basic/config'
+
+describe Permits::Ability do
+  context "Guest user" do
+    before :each do
+      basic_config :guest
+    end
+
+    it "should be able to :read Comment and Post but NOT Article" do
+      @ability.can?(:read, Comment).should be_true
+      @ability.can?(:read, @comment).should be_true
+      
+      @ability.can?(:read, Post).should be_true      
+      @ability.can?(:read, @post).should be_true      
+      
+      @ability.can?(:read, Article).should be_false
+      @ability.can?(:read, @article).should be_false      
+    end
+
+    it "should be not able to :update only Comment" do
+      @ability.can?(:update, Comment).should be_true
+      @ability.can?(:update, @comment).should be_true      
+      
+      @ability.can?(:update, Post).should be_false
+      @ability.can?(:update, @post).should be_false
+    end
+  end
+  
+  context "Admin user" do
+    before do
+      basic_config :admin
+    end
+
+    it "should be able to :read anything" do
+      @ability.can?(:read, Comment).should be_true
+      @ability.can?(:read, Post).should be_true      
+    end
+  
+    it "should be not able to :update everything" do
+      @ability.can?(:update, Comment).should be_true
+      @ability.can?(:update, Post).should be_true
+    end
+  
+    it "should be not able to :create everything" do
+      @ability.can?(:create, Comment).should be_true
+      @ability.can?(:create, Post).should be_true      
+    end
+  
+    it "should be not able to :update everything" do
+      @ability.can?(:destroy, Comment).should be_true
+      @ability.can?(:destroy, Post).should be_true
+    end
+  end
+      
+end

data/spec/generic/api/basic/xgroup_orm.rb

@@ -0,0 +1,20 @@
+require 'generic/api/basic/xgroup'
+
+# override some key methods to ensure it works with ORM object instantiation
+def basic_config context
+  send :"#{context}_config"
+end
+
+def guest_config  
+  @guest   = User.create(:name => "Kristian", :role => "guest")
+  @ability  = Permits::Ability.new(@guest)
+  @comment  = Comment.create(:user_id => @guest.id)
+  @post     = Post.create(:writer => @guest.id)
+  @article  = Article.create(:author => @guest.id)
+end
+
+def admin_config
+  @admin = User.create(:role => 'admin')
+  @ability = Permits::Ability.new(@admin)
+end
+

data/spec/generic/api/owner/config.rb

@@ -0,0 +1,25 @@
+def owner_config context
+  send :"#{context}_config"
+end
+
+def editor_config
+  puts "editor config"
+  
+  @editor   = User.new(1, :editor, 'kristian')
+  @ability  = Permits::Ability.new @editor
+  @own_comment  = Comment.new(1)
+  @other_comment  = Comment.new(2)
+  @post     = Post.new(1)
+  @article  = Article.new('kristian')      
+end
+
+def two_users_config 
+  @editor         = User.new(1, :editor, "kristian")
+  @other_guy      = User.new(1, :admin, "other")
+
+  @ability        = Permits::Ability.new @editor
+
+  @own_post       = Post.new(1)
+  @other_post     = Post.new(2)      
+end
+

data/spec/generic/api/owner/xgroup.rb

@@ -0,0 +1,59 @@
+require 'generic/api/owner/config'
+
+describe Permits::Ability do
+  context "Editor user" do
+    context "using default :user_id relation - foreign key to User.id" do   
+      before :each do                  
+        owner_config :editor
+      end      
+      
+      it "should be able to :read Comment he owns" do
+        @ability.should be_able_to(:read, Comment)
+        @ability.should be_able_to(:read, @own_comment)      
+      end
+
+      it "should be able to :update Comment he owns" do
+        @ability.should be_able_to(:update, @own_comment)      
+      end
+
+      it "should NOT be able to :update Comment he does NOT own" do
+        @ability.should_not be_able_to(:update, @other_comment)      
+      end
+      
+      it "should be able to :delete Comment he owns" do
+        @ability.should be_able_to(:delete, @own_comment)      
+      end
+      
+      it "should NOT be able to :update Comment he does NOT own" do
+        @ability.should_not be_able_to(:delete, @other_comment)      
+      end
+    end 
+    
+    context "using custom :writer relation - foreign key to User.id" do   
+      before :each do
+        owner_config :two_users
+      end      
+      
+      it "should be able to :read Post he owns" do
+        @ability.should be_able_to(:read, Post)
+        @ability.should be_able_to(:read, @own_post)      
+      end
+
+      it "should be able to :update Post he owns" do
+        @ability.should be_able_to(:update, @own_post)      
+      end
+
+      it "should NOT be able to :update Post he does NOT own" do
+        @ability.should_not be_able_to(:update, @other_post)      
+      end
+      
+      it "should be able to :delete Post he owns" do
+        @ability.should be_able_to(:delete, @own_post)      
+      end
+      
+      it "should NOT be able to :update Post he does NOT own" do
+        @ability.should_not be_able_to(:delete, @other_post)      
+      end
+    end    
+  end        
+end

data/spec/generic/api/owner/xgroup_orm.rb

@@ -0,0 +1,23 @@
+require 'generic/api/owner/xgroup'
+
+def two_users_config 
+  @editor         = User.create(:name => "Kristian", :role => "editor")
+  @other_guy      = User.create(:name => "Random dude", :role => "admin")
+
+  @ability        = Permits::Ability.new(@editor)
+
+  @own_post       = Post.create(:writer => @editor.id)
+  @other_post     = Post.create(:writer => @other_guy.id)      
+end
+
+def editor_config
+  @editor         = User.create(:name => "Kristian", :role => "editor")
+  @other_guy      = User.create(:name => "Random dude", :role => "admin")
+
+  @ability        = Permits::Ability.new(@editor)
+
+  @own_comment    = Comment.create(:user_id => @editor.id)
+  @other_comment  = Comment.create(:user_id => @other_guy.id)      
+  # @post     = Post.create(:writer => @editor.id)
+  # @article  = Article.create(:author => @editor.id)
+end  

data/spec/generic/owner_permits_spec.rb

@@ -1,28 +1,2 @@
 require 'generic/spec_helper'
-
-describe Permits::Ability do
-  context "Editor user" do
-    before :each do
-      @editor = User.new(1, :editor, 'kristian')
-      @ability = Permits::Ability.new @editor
-      @comment  = Comment.new(1)
-      @post     = Post.new(1)
-      @article  = Article.new('kristian')      
-    end
-   
-    it "should be able to :read Comment he owns, using default :user_id relation - foreign key to User.id" do
-      @ability.should be_able_to(:read, Comment)
-      @ability.should be_able_to(:read, @comment)      
-    end
-
-    it "should be able to :read Post he owns, using :owner relation - foreign key to User.id" do
-      @ability.should be_able_to(:read, Post)
-      @ability.should be_able_to(:read, @post)      
-    end
-    
-    it "should be able to :read Article he owns, using :author relation - foreign key to User.name" do
-      @ability.should be_able_to(:read, Article)
-      @ability.should be_able_to(:read, @article)
-    end 
-  end        
-end
+require 'generic/api/owner/xgroup'

data/spec/generic/permits_spec.rb

@@ -1,66 +1,2 @@
 require 'generic/spec_helper'
-
-describe Permits::Ability do
-  context "Guest user" do
-    before :each do
-      @guest = User.new(1, :guest)
-      @ability = Permits::Ability.new @guest 
-      @comment  = Comment.new(1)
-      @post     = Post.new(1)
-    end
-
-    # can :read, [Comment, Post]
-    # can [:update, :destroy], [Comment]
-    # can :create, Article
-
-    it "should be able to :read Comment and Post but NOT Article" do
-      @ability.can?(:read, Comment).should be_true
-      @ability.can?(:read, @comment).should be_true
-      
-      @ability.can?(:read, Post).should be_true      
-      @ability.can?(:read, @post).should be_true      
-      
-      @ability.can?(:read, Article).should be_false
-      @ability.can?(:read, @article).should be_false      
-    end
-
-    it "should be not able to :update only Comment" do
-      @ability.can?(:update, Comment).should be_true
-      @ability.can?(:update, @comment).should be_true      
-      
-      @ability.can?(:update, Post).should be_false
-      @ability.can?(:update, @post).should be_false
-    end
-
-  end
-  
-  context "Admin user" do
-    before do
-      admin = User.new(2, :admin)
-      @ability = Permits::Ability.new admin
-    end
-  # 
-  #   # can :manage, :all    
-  # 
-    it "should be able to :read anything" do
-      @ability.can?(:read, Comment).should be_true
-      @ability.can?(:read, Post).should be_true      
-    end
-  
-    it "should be not able to :update everything" do
-      @ability.can?(:update, Comment).should be_true
-      @ability.can?(:update, Post).should be_true
-    end
-  
-    it "should be not able to :create everything" do
-      @ability.can?(:create, Comment).should be_true
-      @ability.can?(:create, Post).should be_true      
-    end
-  
-    it "should be not able to :update everything" do
-      @ability.can?(:destroy, Comment).should be_true
-      @ability.can?(:destroy, Post).should be_true
-    end
-  end
-      
-end
+require 'generic/api/basic/xgroup'

data/spec/generic/spec_helper.rb

@@ -12,11 +12,25 @@ module Permits::Roles
   end
 end
 
+class Guest
+  class << self
+    attr_accessor :id_counter
+
+    def next_id
+      @id_counter += 1      
+    end
+      
+    def create
+      User.new next_id, :guest, 'Guest'
+    end
+  end
+end
+
 class User
   attr_accessor :id, :role, :name
 
   def self.roles
-    [:guest, :admin, :editor]
+    [:guest, :admin, :editor, :super_admin]
   end    
 
   def initialize id, role, name = nil

data/spec/mongo_mapper/owner_permits_spec.rb

@@ -1,75 +1,2 @@
 require 'mongo_mapper/spec_helper'
-
-Permits::Ability.orm = :mongo_mapper
-
-describe Permits::Ability do
-  context "Editor user" do
-    context "using default :user_id relation - foreign key to User.id" do   
-      before :each do                  
-        @editor         = User.create(:name => "Kristian", :role => "editor")
-        @other_guy      = User.create(:name => "Random dude", :role => "admin")
-
-        @ability        = Permits::Ability.new(@editor)
-
-        @own_comment    = Comment.create(:user_id => @editor.id)
-        @other_comment  = Comment.create(:user_id => @other_guy.id)      
-        # @post     = Post.create(:writer => @editor.id)
-        # @article  = Article.create(:author => @editor.id)
-      end      
-      
-      it "should be able to :read Comment he owns" do
-        @ability.should be_able_to(:read, Comment)
-        @ability.should be_able_to(:read, @own_comment)      
-      end
-
-      it "should be able to :update Comment he owns" do
-        @ability.should be_able_to(:update, @own_comment)      
-      end
-      
-      it "should NOT be able to :update Comment he does NOT own" do
-        @ability.should_not be_able_to(:update, @other_comment)      
-      end
-      
-      it "should be able to :delete Comment he owns" do
-        @ability.should be_able_to(:delete, @own_comment)      
-      end
-      
-      it "should NOT be able to :update Comment he does NOT own" do
-        @ability.should_not be_able_to(:delete, @other_comment)      
-      end
-    end 
-    
-    context "using custom :writer relation - foreign key to User.id" do   
-      before :each do                  
-        @editor         = User.create(:name => "Kristian", :role => "editor")
-        @other_guy      = User.create(:name => "Random dude", :role => "admin")
-    
-        @ability        = Permits::Ability.new(@editor)
-    
-        @own_post       = Post.create(:writer => @editor.id)
-        @other_post     = Post.create(:writer => @other_guy.id)      
-      end      
-      
-      it "should be able to :read Post he owns" do
-        @ability.should be_able_to(:read, Post)
-        @ability.should be_able_to(:read, @own_post)      
-      end
-    
-      it "should be able to :update Post he owns" do
-        @ability.should be_able_to(:update, @own_post)      
-      end
-    
-      it "should NOT be able to :update Post he does NOT own" do
-        @ability.should_not be_able_to(:update, @other_post)      
-      end
-      
-      it "should be able to :delete Post he owns" do
-        @ability.should be_able_to(:delete, @own_post)      
-      end
-      
-      it "should NOT be able to :update Post he does NOT own" do
-        @ability.should_not be_able_to(:delete, @other_post)      
-      end
-    end    
-  end        
-end
+require 'generic/api/owner/xgroup_orm'