cantango-permits 0.1.1

data/spec/cantango/builder/permit/base_spec.rb

@@ -0,0 +1,30 @@
+require 'spec_helper'
+
+CanTango.config.permits.types.register :user_type
+CanTango.config.debug.set :on
+
+class EditorPermit < CanTango::Permit::UserType
+end
+
+class UserTypePermitBuilder < CanTango::Builder::Permit::Base
+end
+
+describe CanTango::Builder::Permit::Base do
+  before do 
+    @user = User.new 'kris', 'kris@mail.ru'
+    @ability = CanTango::Ability::Base.new @user
+    @finder = CanTango::Finder::Permit::Base.new :editor, :type => :user_type
+  end
+
+  subject do
+    UserTypePermitBuilder.new @ability, @finder
+  end
+  
+  its(:permit_type) { should == :user_type }
+
+  specify { UserTypePermitBuilder.permit_type.should == :user_type }
+  
+  specify do
+    lambda { subject.build }.should raise_error NotImplementedError
+  end
+end

data/spec/cantango/builder/permit/special_spec.rb

@@ -0,0 +1,25 @@
+require 'spec_helper'
+require 'fixtures/models'
+
+class MySystemPermitBuilder < CanTango::Builder::Permit::Special
+end
+
+describe CanTango::Builder::Permit::Special do
+  before do
+    @user = User.new 'kris', 'kris@mail.ru', :roles => [:editor]
+  end
+  
+  subject { MySystemPermitBuilder.new }
+  
+  describe 'attributes' do
+    it "should have an ability" do
+      subject.ability.should be_a(CanTango::Ability::Base)
+    end
+  end
+
+  describe '#build' do
+    it 'should build a permit' do
+      subject.build.should be_a(CanTango::Permit::Special)
+    end
+  end
+end

data/spec/cantango/builder/permit/user_type_spec.rb

@@ -0,0 +1,27 @@
+require 'spec_helper'
+
+class AdminUserPermitBuilder < CanTango::Builder::Permit::UserType
+end
+
+describe CanTango::Builder::Permit::UserType do
+  before do 
+    @user = User.new 'kris', 'kris@mail.ru', :roles => [:editor]
+    @ability = CanTango::Ability::Base.new @user
+  end
+
+  subject do
+    AdminUserPermitBuilder.new @ability
+  end
+  
+  its(:permit_type) { should == :user_type }
+
+  describe 'build' do
+    it 'should build permits' do
+      its(:build) { should be_a CanTango::Permit::UserType }
+    end
+  end
+
+  describe 'self.permit_type' do
+    specify { AdminUserPermitBuilder.permit_type.should == :user_type }
+  end
+end

data/spec/cantango/config/engines/permit_spec.rb

@@ -0,0 +1,14 @@
+require 'rspec'
+require 'cantango'
+require 'fixtures/models'
+
+describe CanTango::Config::Engines::Permit do
+    subject { CanTango.config.permit_engine }
+
+    describe 'SpecialPermits' do
+      describe 'default settings' do
+        its(:special_permits) { should include(:any, :system) }
+        its(:types)           { should include(:roles, :role_groups, :licenses, :users) }
+      end
+    end
+end

data/spec/cantango/config/engines_spec.rb

@@ -0,0 +1,142 @@
+require 'rspec'
+require 'cantango'
+require 'fixtures/models'
+
+require 'cantango/configuration/engines/engine_shared'
+
+class InvalidPerformanceTool
+end
+
+class PerformanceTool
+  attr_reader :ability
+
+  def execute!
+  end
+end
+
+describe CanTango::Config::Engines do
+  subject { CanTango.config.engines }
+
+  describe 'default settings' do
+    describe 'default_available' do
+      its(:default_available) { should include(:permission, :permit, :cache) }
+    end
+
+    describe 'available' do
+      %w(permit permission).each do |engine|
+        specify { subject.available?(engine).should be_true }
+        specify { subject.available?(engine.to_sym).should be_true }
+      end
+    end
+
+    specify { subject.registered.keys.should include(:permit, :permission) }
+
+    # TODO: should it be empty?
+    describe 'active' do
+      its(:active) { should == [] }
+    end
+
+    describe 'execution_order' do
+      its(:execution_order) { should == [:permission, :permit] }
+    end
+  end
+
+  describe 'Permission engine' do
+    it_should_behave_like 'Engine' do
+      subject { CanTango.config.engine(:permission) }
+    end
+  end
+
+  describe 'Permit engine' do
+    it_should_behave_like 'Engine' do
+      subject { CanTango.config.engine(:permit) }
+    end
+  end
+
+  describe 'Cache engine' do
+    it_should_behave_like 'Engine' do
+      subject { CanTango.config.engine(:cache) }
+    end
+  end
+
+  context 'all on' do
+    subject { CanTango.config.engines }
+
+    before do
+      subject.all :on
+    end
+
+    specify do
+      [:permit, :permission, :cache].each do |engine|
+        CanTango.config.send("#{engine}_engine").on?.should be_true
+      end
+    end
+
+    describe 'active' do
+      its(:active) { should include(:permit, :permission) }
+    end
+  end
+
+  describe 'register' do
+    describe 'invalid engine registration' do
+      specify do
+        lambda { subject.register :performance => InvalidPerformanceTool }.should raise_error 
+      end
+    end
+
+    describe 'valid engine registration' do
+      before do
+        subject.register :performance => PerformanceTool
+      end
+
+      specify { subject.registered.keys.should include(:performance) }
+    end
+  end
+
+  describe 'execution' do
+    context 'reverse execution order' do
+      before do
+        subject.execution_order = :permit, :permission
+      end
+
+      its(:execution_order) { should == [:permit, :permission] }
+    end
+
+    describe 'execute_before' do
+      before do
+        subject.execute_before :permit, :non_existing
+      end
+
+      its(:execution_order) { should == [:non_existing, :permit, :permission] }
+    end
+
+    describe 'execute_after' do
+      before do
+        subject.execute_after :permit, :performance
+        subject.execute_after :permission, :last
+      end
+
+      its(:execution_order) { should == [:non_existing, :permit, :performance, :permission, :last] }
+    end
+
+    describe 'execute_after' do
+      before do
+        subject.execute_last :very_last
+      end
+
+      its(:execution_order) { should == [:non_existing, :permit, :performance, :permission, :last, :very_last] }
+    end
+
+    describe 'execute_first' do
+      before do
+        subject.execute_first :very_first
+      end
+
+      after do
+        CanTango.config.engines.clear!
+      end
+
+      its(:execution_order) { should == [:very_first, :non_existing, :permit, :performance, :permission, :last, :very_last] }
+    end
+  end
+end

data/spec/cantango/config/permit_registry_ex.rb

@@ -0,0 +1,9 @@
+require 'spec_helper'
+
+shared_examples_for CanTango::Config::PermitRegistry do
+  it "#get_registry_for should work for default permit types" do
+    [:user_type, :account_type, :role, :role_group].each do |type|
+      subject.get_registry_for(type).should_not be_nil 
+    end
+  end
+end

data/spec/cantango/config/permit_registry_spec.rb

@@ -0,0 +1,8 @@
+require 'spec_helper'
+require 'cantango/configuration/permit_registry_ex'
+
+describe CanTango::Config::PermitRegistry do
+  subject { CanTango::Config::Permits.instance }
+
+  it_should_behave_like CanTango::Config::PermitRegistry
+end

data/spec/cantango/config/permits/accounts_spec.rb

@@ -0,0 +1,23 @@
+require 'spec_helper'
+
+class Accounts
+  include Singleton
+  
+  include CanTango::Config::Permits::Accounts
+end
+
+describe CanTango::Config::Permits::Accounts do
+  subject { Accounts.new }
+  
+  describe 'accounts=' do
+    pending
+  end
+
+  describe 'accounts' do
+    pending
+  end
+
+  describe 'account_hash name' do
+    pending
+  end
+end

data/spec/cantango/config/permits/disabling_spec.rb

@@ -0,0 +1,38 @@
+require 'spec_helper'
+
+class Disabling
+  include Singleton
+  
+  include CanTango::Config::Permits::Disabling
+end
+
+class CanTango::Permit::Mine < CanTango::Permit::UserType
+end
+
+CanTango.config do |c|
+  c.permits.register_permit CanTango::Permit::Mine
+end
+
+describe CanTango::Config::Permits::Disabling do
+  subject { Disabling.new }
+  
+  describe 'disable_for :type, [name1, name2]' do
+    before do
+      Disabling.disable_for :user_type, [:mine]
+    end
+  end
+
+  describe 'disable_for :type => [name1, name2]' do
+    before do
+      Disabling.disable_for :user_type => [:mine]
+    end
+  end
+
+  describe 'disabled_for type' do
+    pending
+  end
+
+  describe 'disabled' do
+    pending
+  end
+end

data/spec/cantango/config/permits/enabling_spec.rb

@@ -0,0 +1,19 @@
+require 'spec_helper'
+
+class Enabling
+  include Singleton
+  
+  include CanTango::Config::Permits::Enabling
+end
+
+describe CanTango::Config::Permits::Enabling do
+  subject { Enabling.new }
+
+  describe 'enabled_all_for' do
+    pending
+  end
+  
+  describe 'enable_all!' do
+    pending
+  end
+end

data/spec/cantango/config/permits/execution_spec.rb

@@ -0,0 +1,27 @@
+require 'spec_helper'
+
+class Execution
+  include Singleton
+  
+  include CanTango::Config::Permits::Execution
+end
+
+describe CanTango::Config::Permits::Execution do
+  subject { Execution.new }
+  
+  describe 'was_executed(permit, ability)' do
+    pending
+  end
+
+  describe 'executed_for(ability)' do
+    pending
+  end
+
+  describe 'executed' do
+    pending
+  end
+
+  describe 'clear_executed!' do
+    pending
+  end
+end

data/spec/cantango/config/permits/registration_spec.rb

@@ -0,0 +1,15 @@
+require 'spec_helper'
+
+class Registration
+  include Singleton
+  
+  include CanTango::Config::Permits::Registration
+end
+
+describe CanTango::Config::Permits::Registration do
+  subject { Registration.new }
+  
+  describe '' do
+    pending
+  end
+end

data/spec/cantango/config/permits/tracking_spec.rb

@@ -0,0 +1,19 @@
+require 'spec_helper'
+
+class Tracking
+  include Singleton
+  
+  include CanTango::Config::Permits::Tracking
+end
+
+describe CanTango::Config::Permits::Tracking do
+  subject { Tracking.new }
+  
+  describe 'allowed(candidate, actions, subjects)' do
+    pending
+  end
+
+  describe 'denied(candidate, actions, subjects)' do
+    pending
+  end
+end

data/spec/cantango/config/permits/types_spec.rb

@@ -0,0 +1,27 @@
+require 'spec_helper'
+
+class Types
+  include Singleton
+  
+  include CanTango::Config::Permits::Types
+end
+
+describe CanTango::Config::Permits::Types do
+  subject { Types.new }
+  
+  describe 'available' do
+    pending
+  end
+
+  describe 'enabled' do
+    pending
+  end
+
+  describe 'disable *types' do
+    pending
+  end
+
+  describe 'enable_all!' do
+    pending
+  end
+end

data/spec/cantango/config/permits_spec.rb

@@ -0,0 +1,76 @@
+require 'spec_helper'
+require 'cantango/configuration/permit_registry_ex'
+
+class Menu
+end
+
+class WaiterPermit < CanTango::Permit::UserType
+  def initialize ability
+    super
+  end
+
+  protected
+
+  def calc_rules
+    can :read, Menu
+    cannot :write, Menu
+  end
+end
+
+class ChefPermit < CanTango::Permit::UserType
+  def initialize ability
+    super
+  end
+
+  protected
+
+  def calc_rules
+    can :publish, Menu
+    can :write, Menu
+  end
+end
+
+class Context
+  include CanTango::Api::Ability::User
+end
+
+describe CanTango::Config::Permits do
+  subject { CanTango::Config::Permits.instance }
+
+  it_should_behave_like CanTango::Config::PermitRegistry
+
+  describe 'clear_permits_executed!' do
+    specify { CanTango.config.permits.executed.should be_empty }
+    
+    before do
+      CanTango.config.permits.executed[:x] = 1
+      subject.clear_permits_executed!
+    end
+    
+    specify { CanTango.config.permits.executed.should be_empty }
+  end
+
+  describe 'debugging permits' do
+    let(:context) { Context.new }
+    let (:user) do
+      User.new 'kris', 'kris@gmail.com', :role => :waiter
+    end
+
+    before do
+      CanTango.config.debug.set :on
+      # context.user_ability(user).can? :read, Menu
+    end
+
+    describe 'should tell which permits allowe :read' do
+      it 'should show WaiterRolePermit as the permit that allowed :read of Menu' do
+        CanTango.permits_allowed(user, :read, Menu).should include(WaiterPermit)
+      end
+    end
+
+    describe 'should tell which permits denied :write' do
+      it 'should show WaiterRolePermit as the permit that denied :write of Menu' do
+        CanTango.permits_denied(user, :write, Menu).should include(WaiterPermit)
+      end
+    end
+  end
+end