cantango-permits 0.1.1

data/spec/fixtures/config/role_group.yml

@@ -0,0 +1,4 @@
+editors:
+  can:
+    manage:
+      - all

data/spec/fixtures/config/roles.yml

@@ -0,0 +1,4 @@
+admin:
+  can:
+    manage:
+      - all

data/spec/fixtures/config/test_permissions.yml

@@ -0,0 +1,55 @@
+---
+roles:
+  admin:
+    can:
+      manage:
+      - all
+  user:
+    can:
+      read:
+      - ^articles
+      - Post
+      write:
+      - Comment
+    cannot:
+      write:
+      - Article
+role_groups:
+  bloggers:
+    can:
+      read:
+      - Article
+      - Comment
+    cannot:
+      write:
+      - Article
+      - Post
+  editors:
+    can:
+      read:
+      - Article
+      - Comment
+    cannot:
+      write:
+      - Article
+      - Post
+licenses:
+  editors:
+    can:
+      manage:
+      - all
+users:
+  kris@gmail.com:
+    can:
+      read:
+      - Article
+user_types:
+  admin:
+    can:
+      manage:
+      - all
+account_types:
+  editor:
+    can:
+      manage:
+      - all

data/spec/fixtures/config/user_permissions.yml

@@ -0,0 +1,8 @@
+stan@theman.com:
+  can:
+    manage:
+      - all
+kris@thewiz.dk:
+  cannot:
+    read:
+      - Book

data/spec/fixtures/models.rb

@@ -0,0 +1,15 @@
+require 'require_all'
+require_all File.dirname(__FILE__) + '/models'
+
+class SimpleUser
+  attr_accessor :roles_list
+
+  def initialize
+    @roles_list = [:customer]
+  end
+
+  def role_groups_list
+    []
+  end
+end
+

data/spec/fixtures/models/admin.rb

@@ -0,0 +1,2 @@
+class Admin < User
+end

data/spec/fixtures/models/admin_account.rb

@@ -0,0 +1,22 @@
+class AdminAccount
+  attr_accessor :user, :roles, :role_groups
+
+  def initialize user, options = {}
+    @user = user
+    @roles = options[:roles]
+    @role_groups = options[:role_groups]
+  end
+
+  def has_role? name
+    true
+  end
+
+  def roles_list
+    roles
+  end
+
+  def role_groups_list
+    role_groups
+  end
+end
+

data/spec/fixtures/models/items.rb

@@ -0,0 +1,11 @@
+class Post
+end
+
+class Article
+end
+
+class Comment
+end
+
+class Project
+end

data/spec/fixtures/models/permission.rb

@@ -0,0 +1,12 @@
+class Permission
+  attr_accessor :thing, :thing_type, :action, :user
+
+  def initialize user, action, thing
+    @user, @action, @thing = [user, action, thing]
+    @thing_type = @thing.class.to_s
+  end
+
+  def thing_id
+    thing.id
+  end
+end

data/spec/fixtures/models/simple_roles.rb

@@ -0,0 +1,49 @@
+module SimpleRoles
+  def self.included(base)
+    base.send :include, InstanceMethods
+    base.extend ClassMethods
+  end
+
+  module ClassMethods
+    def is_role_in_group?(role, group)
+      raise "No group #{group} defined in User model" if !role_groups.has_key?(group)
+      role_groups[group].include?(role)
+    end
+
+    def role_groups
+      {:bloggers => [:editor]}
+    end
+
+    def roles
+      [:guest, :user, :admin, :editor]
+    end
+  end
+
+  module InstanceMethods
+
+    attr_accessor :role_groups_list
+
+    def has_role? role
+      roles_list.include? role
+    end
+
+    def has_any_role? roles
+      roles.include?(role.to_sym)
+    end
+
+    def roles_list
+      role.to_s.scan(/\w+/).map{|r| r.to_sym}
+    end
+
+    def is_in_group? group
+      role_groups_list.include? group
+    end
+    alias_method :in_role_group?, :is_in_group?
+
+    def role_groups_list
+      return role_groups.scan(/\w+/).map(&:to_sym) if respond_to?(:role_groups) && !role_groups.nil?
+      @role_groups_list || [] #[:bloggers]
+    end
+  end
+end
+

data/spec/fixtures/models/user.rb

@@ -0,0 +1,52 @@
+require 'fixtures/models/simple_roles'
+
+class User
+  attr_accessor :name, :account, :email, :roles, :role_groups
+
+  # tango_user # see macros
+
+  include ::SimpleRoles
+
+  def initialize name, email = nil, options = {}
+    @name = name
+    @email = email
+    set_option_vars options
+  end
+
+  def set_option_vars options = {}
+    options.each_pair do |name, value|
+      var = :"@#{name}"
+      self.instance_variable_set(var, value)
+    end
+  end
+
+  def email
+    @email ||= 'default@gmail.com'
+  end
+
+  def role
+    @role || ''
+  end
+
+  # This hash should be recalculated anytime the permissions collection changes
+  #
+
+  # after_update :recalculate_permissions_hash
+
+  def permissions_hash
+    @permissions_hash = permissions.hash
+  end
+
+  def permissions
+    @permissions ||= []
+  end
+
+  # allows implementation specific to ORM, fx using #all on some datastores such as Mongoid etc.
+  alias_method :all_permissions, :permissions
+
+  protected
+
+  def recalculate_permissions_hash
+    @permissions_hash = nil if self.permissions_changed?
+  end
+end

data/spec/fixtures/models/user_account.rb

@@ -0,0 +1,21 @@
+class UserAccount
+  attr_accessor :user, :roles, :role_groups
+
+  def initialize user, options = {}
+    @user = user
+    @roles = options[:roles]
+    @role_groups = options[:role_groups]
+  end
+
+  def has_role? name
+    true
+  end
+
+  def roles_list
+    roles
+  end
+
+  def role_groups_list
+    role_groups
+  end
+end

data/spec/fixtures/tango_fixtures.rb

@@ -0,0 +1,29 @@
+module CanTangoFixtures
+  def tango_permissions
+    {"roles"=>{
+      "admin"=>{
+       "can"=>{
+        "manage"=>["all"]
+       }},
+      "user"=>{
+       "can"=>{
+        "read"=>["^articles", "Post"],
+        "write"=>["Comment"]
+       },
+       "cannot"=>{
+        "write"=>["Post"],
+        "write"=>["Article"]
+       }
+      }
+     }, 
+     "role_groups"=>{"bloggers"=>{"can"=>{"read"=>["Article", "Comment"]}, 
+                                  "cannot"=>{"write"=>["Article", "Post"]}}, 
+                     "editors"=>{"can"=>{"read"=>["Article", "Comment"]}, 
+                                 "cannot"=>{"write"=>["Article", "Post"]}}}, 
+     "licenses"=>{"editors"=>{"can"=>{"manage"=>["all"]}}},
+     "users" => {"kris@gmail.com" => {"can" => {"read" =>["Article"] }}}
+    
+    }  
+  end
+end
+

data/spec/generators/cantango/account_role_permit_generator_spec.rb

@@ -0,0 +1,35 @@
+require 'spec_helper'
+require 'generator-spec'
+
+require_generator :cantango => :role_permit
+
+RSpec::Generator.configure do |config|
+  config.debug = true
+  config.remove_temp_dir = true #false
+  config.default_rails_root(__FILE__)
+  config.lib = File.dirname(__FILE__) + '/../lib'
+  config.logger = :stdout  # :file
+end
+
+
+describe Cantango::Generators::RolePermitGenerator do
+  use_helpers :special, :file
+
+  setup_generator :permit do
+    tests Cantango::Generators::RolePermitGenerator
+  end
+
+  describe 'Run Permit generator' do
+    before :each do
+      @generator = with_generator do |g|
+        g.run_generator "admin --account admin --reads all --licenses blogging user_admin".args
+      end
+    end
+
+    describe 'result of running Permit generator' do
+      it "should create Admin permit" do
+        @generator.should generate_permit :admin
+      end
+    end
+  end
+end

data/spec/generators/cantango/account_role_permits_generator_spec.rb

@@ -0,0 +1,59 @@
+require 'spec_helper'
+require 'generator-spec'
+
+require_generator :cantango => :role_permits
+
+RSpec::Generator.configure do |config|
+  config.debug = true
+  config.remove_temp_dir = true #false
+  config.default_rails_root(__FILE__)
+  config.lib = File.dirname(__FILE__) + '/../lib'
+  config.logger = :stdout  # :file
+end
+
+
+describe Cantango::Generators::RolePermitsGenerator do
+  use_helpers :controller, :special, :file
+
+  setup_generator :permits do
+    tests Cantango::Generators::RolePermitsGenerator
+  end
+
+  describe 'result of running generator with default profile' do
+    before :each do
+      @generator = with_generator do |g|
+        g.run_generator "--orm mongoid --account editor".args
+      end
+    end
+
+    describe 'result of running Permits generator' do
+      it "should create Admin permit" do
+        @generator.should generate_permit :admin
+      end
+
+      it "should generate a permits initializer file with orm set to mongoid" do
+        File.read(initializer_file(:cantango)).should match /config.orm = :mongoid/
+      end
+    end
+  end
+
+  describe 'result of running generator with option to create permit for each registered role' do
+    context "Registered roles :editor, :admin" do
+      before :each do
+        @generator = with_generator do |g|
+          g.run_generator "admin editor".args
+        end
+      end
+
+      it "should have created Guest and Admin permits" do
+        @generator.should have_permit_files :guest, :admin
+      end
+
+      it "should have created the Editor permit for the :editor role and the permit should not use licenses" do
+        @generator.should have_permit_file :editor do |editor_permit|
+          editor_permit.should_not have_licenses :user_admin, :blogging
+        end
+      end
+    end #ctx
+  end
+end

data/spec/generators/cantango/license_generator_spec.rb

@@ -0,0 +1,33 @@
+require 'spec_helper'
+require 'generator-spec'
+
+require_generator :cantango => :license
+
+RSpec::Generator.configure do |config|
+  config.debug = true
+  config.remove_temp_dir = true #false
+  config.default_rails_root(__FILE__)
+  config.lib = File.dirname(__FILE__) + '/../lib'
+  config.logger = :stdout  # :file
+end
+
+
+describe Cantango::Generators::LicenseGenerator  do
+  use_helpers :special, :file
+
+  setup_generator :license do
+    tests CanTango::Generators::LicenseGenerator
+  end
+
+  describe "License: Profile Administration" do
+    before :each do
+      @generator = with_generator do |g|
+        g.run_generator "profile_administration --reads all --licenses blogging".args
+      end
+    end
+
+    it "should have created license files" do
+      @generator.should have_license_file :profile_administration
+    end
+  end
+end

data/spec/generators/cantango/licenses_generator_spec.rb

@@ -0,0 +1,58 @@
+require 'spec_helper'
+require 'generator-spec'
+
+require_generator :cantango => :licenses
+
+RSpec::Generator.configure do |config|
+  config.debug = true
+  config.remove_temp_dir = true #false
+  config.default_rails_root(__FILE__) 
+  config.lib = File.dirname(__FILE__) + '/../lib'
+  config.logger = :stdout  # :file
+end
+
+
+describe Cantango::Generators::LicensesGenerator do
+  use_helpers :controller, :special, :file
+
+  setup_generator :licenses do
+    tests Cantango::Generators::LicensesGenerator
+  end
+
+  describe "Licenses: Profile Administration and Article Editing" do
+    before :each do
+      @generator = with_generator do |g|
+        g.run_generator "profile_administration article_editing".args
+      end
+    end
+
+    it "should have created license files" do
+      @generator.should have_license_files :profile_administration, :article_editing
+       @generator.should_not have_license_files :blogging, :user_admin
+    end
+  end
+
+  describe "Licenses: Profile Administration and Article Editing" do
+    before :each do
+      @generator = with_generator do |g|
+        g.run_generator "profile_administration article_editing".args
+      end
+    end
+
+    it "should have created license files" do
+      @generator.should have_license_files :profile_administration, :article_editing, :blogging, :user_admin
+    end
+
+    it "should have created license file :profile_administration with the right class" do
+      @generator.should have_license_file :profile_administration do |license|
+        license.should have_license_class :profile_administration
+      end
+    end
+
+    it "should have created license file :article_editing with the right class" do
+      @generator.should have_license_file :article_editing do |license|
+        license.should have_license_class :article_editing
+      end
+    end
+  end
+end