cantango 0.8.0

data/spec/active_record/scenarios/engines/permission_engine/users.rb

@@ -0,0 +1,88 @@
+shared_examples_for "Guest role" do
+  
+  it 'should allow :read of all Articles' do
+    user.should be_allowed_to(:read, Article)
+  end
+  
+  it 'should allow :read of all Posts' do
+    user.should be_allowed_to(:read, Post)
+  end
+
+  it 'should allow :read of all Comments' do
+    user.should be_allowed_to(:read, Comment)
+  end
+end
+
+shared_examples_for "User role" do
+  it_should_behave_like "Guest role" do
+  end
+
+  it 'should allow :management of own Articles' do
+    user.should be_allowed_to(:manage, own_article)
+  end
+
+  it 'should allow :management of own Posts' do
+    user.should be_allowed_to(:manage, own_post)
+  end
+
+  it 'should allow :management of own Comments' do
+    user.should be_allowed_to(:manage, own_comment)
+  end
+  
+  it 'should not allow :management not-own Articles' do
+    user.should_not be_allowed_to(:manage, Article.create!)
+  end
+
+  it 'should allow :write of not-own Articles' do
+    user.should be_allowed_to(:write, Article.create!)
+  end
+
+
+end
+
+shared_examples_for "Editor role" do
+  it_should_behave_like "Guest role" do
+  end
+
+  it 'should allow :write of Comments' do
+    user.should be_allowed_to(:write, Comment)
+  end
+
+  it 'should allow :write of Article' do
+    user.should be_allowed_to(:write, Article)
+  end
+ 
+  it 'should allow :write of Post' do
+    user.should be_allowed_to(:write, Post)
+  end
+
+end
+
+
+shared_examples_for "User + Editor roles" do
+  it_should_behave_like "User role" do
+  end
+  
+  it_should_behave_like "Editor role" do
+  end
+end
+
+shared_examples_for "Admin role" do
+  
+  it 'should allow :management of everything' do
+    user.should be_allowed_to(:manage, :all)
+  end
+  
+  it 'should allow :management of all Articles' do
+    user.should be_allowed_to(:manage, Article)
+  end
+
+  it 'should allow :management of all Posts' do
+    user.should be_allowed_to(:manage, Post)
+  end
+
+  it 'should allow :management of all Comments' do
+    user.should be_allowed_to(:manage, Comment)
+  end
+end
+

data/spec/active_record/scenarios/engines/permit_engine/licenses_spec.rb

@@ -0,0 +1,37 @@
+require 'active_record/spec_helper'
+require_all File.dirname(__FILE__) + "/../../shared/" 
+
+def preconfigure
+  CanTango.configure do |config|
+    config.permits.set :on
+    config.permissions.set :off
+  end
+end
+
+describe 'Licenses usage' do
+  context 'Musicianslicense applied to UserRolePermit' do
+    before(:each) {
+      preconfigure
+      @user = User.create!(:email => "kris@gmail.com", :role => 'user')
+    }
+
+    let(:current_user) { @user }
+    let(:ability) { current_ability(:user) }
+
+    it "should be allowed to read Song" do
+      ability.should be_allowed_to(:read, Song)
+    end
+    
+    it "should be allowed to write Tune" do
+      ability.should be_allowed_to(:write, Tune)
+    end
+
+    it "should be allowed to manage Concerto" do
+      ability.should be_allowed_to(:read, Concerto)
+    end
+    
+    it "should be allowed to write Tune" do
+      ability.should_not be_allowed_to(:manage, Improvisation)
+    end
+  end
+end

data/spec/active_record/scenarios/engines/permit_engine/role_groups_permits_spec.rb

@@ -0,0 +1,35 @@
+require 'active_record/spec_helper'
+require_all File.dirname(__FILE__) + "/../../shared/"
+
+def preconfigure
+  CanTango.configure do |config|
+    config.permits.set :on
+    config.permissions.set :off
+  end
+end
+
+describe 'RoleGroupPermit usage' do
+  before(:each) {
+    preconfigure
+    @user = User.create!(:email => "kris@gmail.com", :role_groups_list => [:musicians])
+  }
+
+  let(:current_user) { @user }
+  let(:ability) { current_ability(:user) }
+
+  it "should be allowed to read Song" do
+    ability.should be_allowed_to(:read, Song)
+  end
+  
+  it "should be allowed to write Tune" do
+    ability.should be_allowed_to(:write, Tune)
+  end
+
+  it "should be allowed to manage Concerto" do
+    ability.should be_allowed_to(:read, Concerto)
+  end
+  
+  it "should be allowed to write Tune" do
+    ability.should_not be_allowed_to(:manage, Improvisation)
+  end
+end

data/spec/active_record/scenarios/guest_user_admin/admin_user_spec.rb

@@ -0,0 +1,19 @@
+require 'active_record/spec_helper'
+
+require_all File.dirname(__FILE__) + "/../shared/" 
+
+describe 'Scenario: users - :guest, :user, :admin' do
+  context 'Admin User' do
+    before(:all) do
+      @user = User.create!(:role => "admin")
+    end
+
+    it_should_behave_like "Admin role" do
+      let(:current_admin) { @user }
+      let(:user) { current_ability(:admin) }
+      let(:own_article) { Article.create!(:user_id => @user.id) }
+      let(:own_post)    { Post.create(:user_id => @user.id) }
+      let(:own_comment) { Comment.create(:user_id => @user.id) }
+    end
+  end
+end

data/spec/active_record/scenarios/guest_user_admin/docs/GUEST_ADMIN_USER_SCENARIO.textile

@@ -0,0 +1,20 @@
+h1. Guest, Admin, User Scenario
+
+Blog model:
+* Article
+* Post
+* Comment
+* User
+
+Guest Permissions:
+* Read all articles, posts and comments
+* No access to User
+
+User Permissions:
+* Read all articles, posts and comments
+* Manage all owned articles, posts and comments
+* Manage own User
+
+Admin Permissions:
+* Manage all
+

data/spec/active_record/scenarios/guest_user_admin/editor_spec.rb

@@ -0,0 +1,19 @@
+require 'active_record/spec_helper'
+
+require_all File.dirname(__FILE__) + "/../shared/" 
+
+describe 'Scenario: users - :guest, :user, :admin' do
+  context 'Editor user (normal user)' do
+    before(:each) do
+      @user = User.create!(:role => "editor")
+    end
+
+    it_should_behave_like "Editor role" do
+      let(:current_user) { @user }
+      let(:user) { current_ability(:user) }
+      let(:own_article) { Article.create!(:user_id => @user.id) }
+      let(:own_post)    { Post.create(:user_id => @user.id) }
+      let(:own_comment) { Comment.create(:user_id => @user.id) }
+    end
+  end
+end

data/spec/active_record/scenarios/guest_user_admin/guest_user_spec.rb

@@ -0,0 +1,16 @@
+require 'active_record/spec_helper'
+
+require_all File.dirname(__FILE__) + "/../shared/" 
+
+describe 'Scenario: users - :guest, :user, :admin' do
+  context 'Guest user' do
+    before(:each) do
+      @guest ||= Guest.new
+    end
+
+    it_should_behave_like "Guest role" do
+      let(:current_guest ) { @guest }
+      let(:user) { current_ability(:guest) }
+    end
+  end
+end

data/spec/active_record/scenarios/guest_user_admin/user_having_user_and_editor_roles_spec.rb

@@ -0,0 +1,19 @@
+require 'active_record/spec_helper'
+
+require_all File.dirname(__FILE__) + "/../shared/" 
+
+describe 'Scenario: users - :guest, :user, :admin' do
+  context 'User having both user and editor roles (normal user)' do
+    before(:each) do
+      @user = User.create!(:role => "user, editor")
+    end
+
+    it_should_behave_like "User + Editor roles" do
+      let(:current_user) { @user }
+      let(:user) { current_ability(:user) }
+      let(:own_article) { Article.create!(:user_id => @user.id) }
+      let(:own_post)    { Post.create(:user_id => @user.id) }
+      let(:own_comment) { Comment.create(:user_id => @user.id) }
+    end
+  end
+end

data/spec/active_record/scenarios/guest_user_admin/user_spec.rb

@@ -0,0 +1,32 @@
+require 'active_record/spec_helper'
+
+require_all File.dirname(__FILE__) + "/../shared/" 
+
+describe 'Scenario: users - :guest, :user, :admin' do
+  context 'User user (normal user)' do
+    before(:each) do
+      @user = User.create!(:role => "user")
+      @own_todo = Todo.create!
+      @own_todo.authors << @user
+      @own_todo.save!
+
+    end
+  
+    it_should_behave_like "User role" do
+      let(:current_user) { @user }
+      let(:user) { current_ability(:user) }
+      let(:own_article) { Article.create!(:user_id => @user.id) }
+      let(:own_post)    { Post.create(:user_id => @user.id) }
+      let(:own_comment) { Comment.create(:user_id => @user.id) }
+      let(:own_todo) { @own_todo }
+    end
+ 
+    it "should allow :write of own Todos" do
+      @user.should be_allowed_to(:write, @own_todo)
+    end
+
+    it "should not allow :write of not-own Todos" do
+      @user.should_not be_allowed_to(:write, Todo.new)
+    end
+  end
+end

data/spec/active_record/scenarios/masquerading/masquerading_for_admin_account_spec.rb

@@ -0,0 +1,41 @@
+require 'active_record/spec_helper'
+require 'active_record/scenarios/user_accounts/helpers'
+
+require_all File.dirname(__FILE__) + "/../shared/" 
+
+describe 'Scenario: masquerading for admin account' do
+  include UserFactory
+
+  let(:user_profile) { @u ||= User.create(:name => 'kris', :role => 'user') }
+  let(:admin_account) { create_user_account user_profile, :admin }
+
+  context "Masquerading as user" do 
+    before(:each) do
+      admin_account.masquerade_as user_profile
+    end
+    
+    it_should_behave_like "User role" do
+      let(:current_admin) { admin_account }
+      let(:user) { current_ability(:admin) }
+      let(:own_article) { Article.create!(:user_id => user_profile.id) }
+      let(:own_post)    { Post.create(:user_id => user_profile.id) }
+      let(:own_comment) { Comment.create(:user_id => user_profile.id) }
+    end
+  end
+  
+  context "Masquerading as editor" do 
+    before(:each) do
+      @user = User.create!(:role => "editor")
+      @admin = Admin.create!(:name => "kris")
+      @admin.masquerade_as @user
+    end
+    
+    it_should_behave_like "Editor role" do
+      let(:current_user) { @admin }
+      let(:user) { current_ability(:user) }
+      let(:own_article) { Article.create!(:user_id => @user.id) }
+      let(:own_post)    { Post.create(:user_id => @user.id) }
+      let(:own_comment) { Comment.create(:user_id => @user.id) }
+    end
+  end
+end

data/spec/active_record/scenarios/masquerading/masquerading_for_admin_user_spec.rb

@@ -0,0 +1,38 @@
+require 'active_record/spec_helper'
+
+require_all File.dirname(__FILE__) + "/../shared/" 
+
+describe 'Scenario: masquerading for admin user' do
+
+  context "Masquerading as user" do
+    before(:each) do
+      @user = User.create!(:role => "user")
+      @admin = Admin.create!(:name => "kris")
+      @admin.masquerade_as @user
+    end
+
+    it_should_behave_like "User role" do
+      let(:current_user) { @admin }
+      let(:user) { current_ability(:user) }
+      let(:own_article) { Article.create!(:user_id => @user.id) }
+      let(:own_post)    { Post.create(:user_id => @user.id) }
+      let(:own_comment) { Comment.create(:user_id => @user.id) }
+    end
+  end
+
+  context "Masquerading as editor" do 
+    before(:each) do
+      @user = User.create!(:role => "editor")
+      @admin = Admin.create!(:name => "kris")
+      @admin.masquerade_as @user
+    end
+
+    it_should_behave_like "Editor role" do
+      let(:current_user) { @admin }
+      let(:user) { current_ability(:user) }
+      let(:own_article) { Article.create!(:user_id => @user.id) }
+      let(:own_post)    { Post.create(:user_id => @user.id) }
+      let(:own_comment) { Comment.create(:user_id => @user.id) }
+    end
+  end
+end

data/spec/active_record/scenarios/shared/api.rb

@@ -0,0 +1,4 @@
+include CanTango::Api::User::All
+include CanTango::Api::UserAccount::All
+
+

data/spec/active_record/scenarios/shared/can_tango.rb

@@ -0,0 +1,2 @@
+# Doing this because all AR suite for now is based on permit_engine
+CanTango.config.permissions.set :off

data/spec/active_record/scenarios/shared/examples/user_accounts.rb

@@ -0,0 +1,47 @@
+shared_examples_for "Guest account" do
+  it 'should allow :read of all Articles' do
+    user_account.should be_allowed_to(:read, article)
+  end
+
+  it 'should allow :read of all Posts' do
+    user_account.should be_allowed_to(:read, post)
+  end
+
+  it 'should allow :read of all Comments' do
+    user_account.should be_allowed_to(:read, comment)
+  end
+end
+
+shared_examples_for "User account" do
+  it_should_behave_like "Guest role" do
+  end
+
+  it 'should allow :management of own Articles' do
+    user_account.should be_allowed_to(:manage, own_article)
+  end
+
+  it 'should allow :management of own Posts' do
+    user_account.should be_allowed_to(:manage, own_post)
+  end
+
+  it 'should allow :management of own Comments' do
+    user_account.should be_allowed_to(:manage, own_comment)
+  end
+end
+
+shared_examples_for "Admin account" do
+  it_should_behave_like "User account" do
+  end
+
+  it 'should allow :management of all Articles' do
+    user_account.should be_allowed_to(:manage, article)
+  end
+
+  it 'should allow :management of all Posts' do
+    user_account.should be_allowed_to(:manage, post)
+  end
+
+  it 'should allow :management of all Comments' do
+    user_account.should be_allowed_to(:manage, comment)
+  end
+end

data/spec/active_record/scenarios/shared/examples/users.rb

@@ -0,0 +1,85 @@
+shared_examples_for "Guest role" do
+
+  it 'should allow :read of all Articles' do
+    user.should be_allowed_to(:read, Article)
+  end
+
+  it 'should allow :read of all Posts' do
+    user.should be_allowed_to(:read, Post)
+  end
+
+  it 'should allow :read of all Comments' do
+    user.should be_allowed_to(:read, Comment)
+  end
+end
+
+shared_examples_for "User role" do
+  it_should_behave_like "Guest role" do
+  end
+
+  it 'should allow :management of own Articles' do
+    user.should be_allowed_to(:manage, own_article)
+  end
+
+  it 'should allow :management of own Posts' do
+    user.should be_allowed_to(:manage, own_post)
+  end
+
+  it 'should allow :management of own Comments' do
+    user.should be_allowed_to(:manage, own_comment)
+  end
+
+  it 'should not allow :management not-own Articles' do
+    user.should_not be_allowed_to(:manage, Article.create!)
+  end
+
+  it 'should allow :write of not-own Articles' do
+    user.should be_allowed_to(:write, Article.create!)
+  end
+end
+
+shared_examples_for "Editor role" do
+  it_should_behave_like "Guest role" do
+  end
+
+  it 'should allow :write of Comments' do
+    user.should be_allowed_to(:write, Comment)
+  end
+
+  it 'should allow :write of Article' do
+    user.should be_allowed_to(:write, Article)
+  end
+
+  it 'should allow :write of Post' do
+    user.should be_allowed_to(:write, Post)
+  end
+end
+
+
+shared_examples_for "User + Editor roles" do
+  it_should_behave_like "User role" do
+  end
+
+  it_should_behave_like "Editor role" do
+  end
+end
+
+shared_examples_for "Admin role" do
+
+  it 'should allow :management of everything' do
+    user.should be_allowed_to(:manage, :all)
+  end
+
+  it 'should allow :management of all Articles' do
+    user.should be_allowed_to(:manage, Article)
+  end
+
+  it 'should allow :management of all Posts' do
+    user.should be_allowed_to(:manage, Post)
+  end
+
+  it 'should allow :management of all Comments' do
+    user.should be_allowed_to(:manage, Comment)
+  end
+end
+