cantango-permits 0.1.1

data/spec/cantango/permit/helper/host_spec.rb

@@ -0,0 +1,29 @@
+require 'spec_helper'
+require 'fixtures/models'
+
+class MyOwnPermit < CanTango::Permit::Base
+  include CanTango::Permit::Helper::Host
+end
+
+class RequestHost
+  attr_accessor :host
+  
+  def initialize host
+    @host = host
+  end
+end
+
+describe CanTango::Permit::Helper::Naming do  
+  before do
+    @localhost_req = RequestHost.new 'localhost'
+    @user = SimpleUser.new
+    @ability = CanTango::Ability::Base.new @user, :request => @localhost_req
+  end
+  
+  subject { MyOwnPermit.new @ability }  
+  
+  context 'localhost' do
+    specify { subject.local_host?.should be_true }
+    specify { subject.public_host?.should be_false }
+  end
+end

data/spec/cantango/permit/helper/license_spec.rb

@@ -0,0 +1,37 @@
+require 'spec_helper'
+require 'fixtures/models'
+
+class MyOwnPermit < CanTango::Ability::Base
+  include CanTango::Permit::Helper::License
+end
+
+class BloggingLicense < CanTango::License
+  def initialize ability
+    super
+  end
+  
+  def calc_rules
+    can :edit, Project
+  end
+end
+
+describe CanTango::Permit::Helper::License do
+  before do
+    @user = User.new 'kris', 'kris@mail.ru', :roles => [:editor]
+  end
+  subject { MyOwnPermit.new @user }
+
+  describe 'license name' do
+    before do
+      subject.license(:blogging)
+    end
+    specify { subject.rules.should_not be_empty }
+  end
+
+  describe 'licenses *names' do
+    before do
+      subject.licenses(:blogging)
+    end
+    specify { subject.rules.should_not be_empty }
+  end
+end

data/spec/cantango/permit/helper/naming_spec.rb

@@ -0,0 +1,56 @@
+require 'spec_helper'
+require 'fixtures/models'
+
+class MyOwnPermit
+  include CanTango::Permit::Helper::Naming
+  extend CanTango::Permit::Helper::Naming
+end
+
+class CanTango::Permit::Mine
+  include CanTango::Permit::Helper::Naming
+  extend CanTango::Permit::Helper::Naming
+end
+
+module AdminPermits
+  class MyOwnPermit
+    include CanTango::Permit::Helper::Naming
+    extend CanTango::Permit::Helper::Naming    
+  end
+end
+
+describe CanTango::Permit::Helper::Naming do
+  subject { MyOwnPermit.new }
+  describe '#permit_name' do
+    describe 'permit_name clazz' do
+      specify { subject.permit_name(MyOwnPermit).should == :my_own }    
+    end
+
+    describe 'permit_name clazz' do
+      specify { CanTango::Permit::Mine.permit_name.should == :mine }    
+    end
+
+    describe 'clazz.permit_name' do
+      specify { MyOwnPermit.permit_name.should == :my_own }    
+    end
+  end
+  
+  describe '#account_name' do   
+    describe 'account_name clazz' do 
+      specify { subject.account_name(MyOwnPermit).should == nil }
+    end
+
+    describe 'account_name clazz' do 
+      specify { MyOwnPermit.account_name.should == nil }
+    end
+
+    describe 'account_name clazz' do 
+      specify { CanTango::Permit::Mine.account_name.should == nil }
+    end
+    
+    context 'wrapped in valid account namespace' do
+      describe 'account_name clazz' do 
+        specify { AdminPermits::MyOwnPermit.account_name.should == :admin }
+      end
+    end
+  end
+end

data/spec/cantango/permit/helper/state_spec.rb

@@ -0,0 +1,24 @@
+require 'spec_helper'
+
+class MyOwnPermit
+  include CanTango::Permit::Helper::State
+end
+
+describe CanTango::Permit::Helper::Naming do
+  subject { MyOwnPermit.new }
+  describe '#enable!' do
+    before do
+      subject.enable!
+    end
+    specify { subject.enabled?.should be_true }    
+    specify { subject.disabled?.should be_false }    
+  end
+
+  describe '#disable!' do
+    before do
+      subject.disable!
+    end
+    specify { subject.enabled?.should be_false }    
+    specify { subject.disabled?.should be_true }    
+  end
+end

data/spec/cantango/permit/special_default_spec.rb

@@ -0,0 +1,2 @@
+# The special Default permit which will be executed last for any candidate regardless unless break-out 
+# has occured

data/spec/cantango/permit/special_first_spec.rb

@@ -0,0 +1,2 @@
+# The special First permit to be executed which has the potential to break out of the 
+# execution loop on some specific condition

data/spec/cantango/permit/user_type_spec.rb

@@ -0,0 +1,78 @@
+require 'spec_helper'
+require 'fixtures/models'
+
+class AdminPermit < CanTango::Permit::UserType
+  def initialize ability
+    super
+  end
+
+  protected
+
+  def static_rules
+    can :read, Article
+  end
+end
+
+
+describe CanTango::Permit::UserType do
+  before do
+    @user = SimpleUser.new
+    @ability = CanTango::Ability::Base.new @user
+    @permit = AdminPermit.new @ability
+  end
+
+  subject { @permit }
+
+  describe 'registration' do
+    describe 'permit types' do
+      specify { CanTango.config.permits.types.registered.should include(:user_type) }
+    end
+
+    describe 'permits of type' do    
+      specify { CanTango.config.permits.registered_for(:user_type, :admin).should == AdminPermit }
+    end
+  end
+
+  describe 'attributes' do
+    it "should be the permit for the :admin user" do
+      subject.permit_name.should == :admin
+    end
+
+    it "should have a user candidate" do
+      subject.candidate.should be_a(SimpleUser)
+    end
+
+    it "should have a user subject" do
+      subject.send(:user).should be_a(SimpleUser)
+    end
+
+    it "should have an ability" do
+      subject.ability.should be_a(CanTango::Ability::Base)
+    end
+  end
+
+  context 'config permits' do
+    let(:permits) { CanTango.config.permits }
+
+    describe 'disable Admin Permit' do
+      before do
+        permits.disable_for :user_type, [:admin, :editor]
+      end
+
+      it "should have an ability" do
+        subject.disabled?.should be_true
+      end
+    end
+
+    describe 'enable all Permits' do
+      before do
+        permits.enable_all!
+      end
+
+      it "should be disabled" do
+        permits.disabled.should be_empty
+        subject.disabled?.should be_false
+      end
+    end
+  end
+end

data/spec/cantango/registry/permit_spec.rb

@@ -0,0 +1,67 @@
+require 'spec_helper'
+
+class AdminUserPermit
+end
+
+class PermitReg
+  include CanTango::Registry::Permit
+end
+
+describe CanTango::Registry::Permit do
+  before do
+    @reg = PermitReg.new
+
+    CanTango.config.permits.types.register :user_type
+    
+    # puts CanTango.config.permits.types.inspect
+    
+    permit_registry = @reg.registry_for(:user_type)
+    permit_registry[:admin] = AdminUserPermit    
+  end
+  subject { @reg }
+  
+  describe 'registry_for type' do
+    context 'existing type' do
+      specify { subject.registry_for(:user_type).should be_a CanTango::Registry::Hash }
+    end
+
+    context 'non-existing type' do
+      specify do
+        lambda { subject.registry_for(:unknown) }.should raise_error
+      end
+    end
+  end
+
+  describe 'registered_for type, name = nil' do
+    context 'existing permit' do
+      specify { subject.registered_for(:user_type, :admin).should == AdminUserPermit }
+    end
+
+    context 'non-existing permit type' do
+      specify do
+        lambda { subject.registered_for(:not_there, :unknown) }.should raise_error
+      end
+    end
+
+    context 'non-existing permit' do
+      specify do
+        subject.registered_for(:user_type, :unknown).should be_nil
+      end
+    end
+  end
+
+  describe 'all' do
+    specify do
+      subject.all.first.registered.admin.should be_true
+    end
+  end
+
+  describe 'show_all' do
+    before do
+      puts subject.show_all
+    end
+    specify do
+      subject.show_all.should match(/admin/)
+    end
+  end
+end

data/spec/fixtures/config/cantango_permissions.yml

@@ -0,0 +1,49 @@
+--- 
+roles: 
+  admin: 
+    can: 
+      manage: 
+      - all
+  user: 
+    can: 
+      read: 
+      - ^articles
+      - Post
+      write: 
+      - Comment
+    cannot: 
+      write: 
+      - Article
+role_groups: 
+  bloggers: 
+    can: 
+      read: 
+      - Article
+      - Comment
+    cannot: 
+      write: 
+      - Article
+      - Post
+  editors: 
+    can: 
+      read: 
+      - Article
+      - Comment
+    cannot: 
+      write: 
+      - Article
+      - Post
+licenses: 
+  editors: 
+    can: 
+      manage: 
+      - all
+users: 
+  kris@gmail.com: 
+    can: 
+      read: 
+      - Article
+user_types: {}
+
+account_types: {}
+

data/spec/fixtures/config/categories.yml

@@ -0,0 +1,6 @@
+another_articles:
+  [Post, Article]
+articles: 
+  [Article, Post, Comment]
+user_models: 
+  [Admin, Guest, User]

data/spec/fixtures/config/evaluator_fixtures.yml

@@ -0,0 +1,18 @@
+bloggers: 
+  can: 
+    read: 
+    - Article
+    - Comment
+  cannot: 
+    write: 
+    - Article
+    - Post
+editors: 
+  can: 
+    read: 
+    - Article
+    - Comment
+  cannot: 
+    write: 
+    - Article
+    - Post

data/spec/fixtures/config/licenses.yml

@@ -0,0 +1,4 @@
+bloggers:
+  can:
+    manage:
+      - Comment

data/spec/fixtures/config/permissions.yml

@@ -0,0 +1,60 @@
+user_types:
+  admin:
+    can:
+      manage:
+        - all
+
+account_types:
+  editor:
+    can:
+      manage:
+        - all
+
+roles:
+  admin:
+    can:
+      manage:
+      - all
+
+  user:
+    can:
+      read:
+      - Comment
+      - Post
+      - Article
+      - User
+      write:
+      - Article
+      manage:
+      - Comment
+      - Post
+
+role_groups:
+  bloggers: 
+    can: 
+      read: 
+      - Article
+      - Comment
+    cannot: 
+      write: 
+      - Article
+      - Post
+  editors: 
+    can: 
+      read: 
+      - Article
+      - Comment
+    cannot: 
+      write: 
+      - Article
+      - Post
+
+licenses:
+  editors:
+    can:
+      manage:
+      - all
+users:
+  kris@gmail.com:
+    can:
+    cannot: