cantango 0.8.0

data/spec/cantango/ability_filters_spec.rb

@@ -0,0 +1,128 @@
+
+require 'rspec'
+require 'cantango'
+require 'fixtures/models'
+require 'cantango/rspec'
+
+CanTango.configure do |config|
+  config.permissions.set :off
+  config.permits.set :on
+  config.categories.register :blog_items => [Article, Post]
+end
+
+class AdminsRoleGroupPermit < CanTango::RoleGroupPermit
+  def initialize ability
+    super
+  end
+
+  protected
+
+  def static_rules
+    can :publish, Post
+    can :write, Article
+    can :write, category(:blog_items)
+  end
+end
+
+class EditorsRoleGroupPermit < CanTango::RoleGroupPermit
+  def initialize ability
+    super
+  end
+
+  protected
+
+  def static_rules
+    can :publish, category(:blog_items)
+  end
+end
+
+
+
+class UserRolePermit < CanTango::RolePermit
+  def initialize ability
+    super
+  end
+
+  protected
+
+  def static_rules
+    can :read, Comment
+  end
+end
+
+class AdminRolePermit < CanTango::RolePermit
+  def initialize ability
+    super
+  end
+
+  protected
+
+  def static_rules
+    can :read, Post
+  end
+end
+
+describe CanTango::Ability do
+  describe 'roles filter on' do
+    let (:user) do
+      User.new 'stan', 'stan@gmail.com'
+    end
+
+    let (:user_account) do
+      ua = UserAccount.new user, :roles => [:user, :admin], :role_groups => [:admins]
+      user.account = ua
+    end
+
+    before do
+      CanTango.config.roles.exclude :user
+      CanTango.config.role_groups.exclude :admins
+      CanTango.config.categories.register :blog_items => [Article, Post]
+
+      @ability = CanTango::Ability.new user_account
+    end
+
+    after do
+      CanTango.config.clear!
+    end
+
+    subject { @ability }
+      its(:permit_class_names) { should include "AdminRolePermit" }
+
+      specify { @ability.should be_allowed_to(:read, Post)}
+
+      specify { @ability.should_not be_allowed_to(:read, Comment)}
+      specify { @ability.should_not be_allowed_to(:write, Article)}
+  end
+end
+
+describe CanTango::Ability do
+  describe 'roles :only filter on' do
+    let (:user) do
+      User.new 'stan', 'stan@gmail.com'
+    end
+
+    let (:user_account) do
+      ua = UserAccount.new user, :roles => [:user, :admin], :role_groups => [:admins, :editors]
+      user.account = ua
+    end
+
+    before do
+      CanTango.config.categories.register :blog_items => [Article, Post]
+      CanTango.config.roles.only :user
+      CanTango.config.role_groups.only :admins
+      @ability = CanTango::Ability.new user_account
+    end
+
+    after do
+      CanTango.config.clear!
+    end
+
+    subject { @ability }
+      its(:permit_class_names) { should include("UserRolePermit", "AdminsRoleGroupPermit") }
+
+      specify { @ability.should be_allowed_to(:read, Comment)}
+      specify { @ability.should be_allowed_to(:publish, Post)}
+
+      specify { @ability.should_not be_allowed_to(:publish, Article)}
+   end
+end

data/spec/cantango/ability_spec.rb

@@ -0,0 +1,74 @@
+require 'rspec'
+require 'cantango'
+require 'fixtures/models'
+require 'cantango/rspec'
+
+def config_folder 
+  File.dirname(__FILE__)+ "/../fixtures/config/"
+end
+
+CanTango.configure do |config|
+  config.clear!
+  # config.permissions.set :on
+  config.engines.all :on
+
+  config.permissions.config_path = config_folder
+  config.categories.register :blog_items => [Article, Post]
+end
+
+class PublishersRoleGroupPermit < CanTango::RoleGroupPermit
+  def initialize ability
+    super
+  end
+
+  protected
+
+  def static_rules
+    can :write, category(:blog_items)
+    cannot :write, Post
+  end
+end
+
+class EditorRolePermit < CanTango::RolePermit
+  def initialize ability
+    super
+  end
+
+  protected
+
+  def static_rules
+    can :read, Comment
+  end
+end
+
+
+describe CanTango::Ability do
+  let (:user) do
+    User.new 'krisy', 'krisy@gmail.com'
+  end
+
+  let (:user_account) do
+    ua = UserAccount.new user, :roles => [:editor], :role_groups => [:publishers]
+    user.account = ua
+  end
+
+  before do
+    CanTango.config.clear!
+    @ability = CanTango::Ability.new user_account
+  end
+
+  specify { CanTango.config.roles.excluded.should be_empty }
+  specify { CanTango.config.role_groups.excluded.should be_empty }
+
+  subject { @ability }
+    specify { @ability.should be_allowed_to(:read, Comment) }
+    specify { @ability.should be_allowed_to(:write, Article) }
+    specify { @ability.should_not be_allowed_to(:write, Post) }
+
+    its(:user_account)  { should be_a(UserAccount) }
+    its(:user)          { should be_a(User) }
+
+    its(:permits)       { should_not be_empty }
+    its(:roles)         { should_not be_empty }
+    its(:role_groups)   { should_not be_empty }
+end

data/spec/cantango/api/current_user_accounts.rb

@@ -0,0 +1,14 @@
+require 'cantango/api/current_users'
+
+module CurrentUserAccounts
+  include CurrentUsers 
+
+  def current_user_account
+    ::UserAccount.new(current_user, :roles => [:user])
+  end
+  
+  def current_admin_account
+    ::UserAccount.new(current_admin, :roles => [:admin])
+  end
+end
+

data/spec/cantango/api/current_users.rb

@@ -0,0 +1,10 @@
+module CurrentUsers
+  def current_user
+    @current_user ||= ::User.new 'stan', 'stan@mail.ru', :role => 'user'
+  end
+
+  def current_admin
+    @current_admin ||= ::User.new 'admin', 'admin@mail.ru', :role => 'admin'
+  end
+end
+

data/spec/cantango/api/user/ability_api_spec.rb

@@ -0,0 +1,44 @@
+require 'rspec'
+require 'cantango'
+require 'fixtures/models'
+require 'cantango/api/current_users'
+require 'cantango/configuration/engines/store_engine_shared'
+
+CanTango.config.users.register :user, :admin
+
+class Context
+  include CanTango::Api::User::Ability
+
+  include CurrentUsers
+  extend ::CurrentUsers
+end
+
+describe CanTango::Api::User::Ability do
+  subject { Context.new }
+
+  describe 'user_ability user' do
+    specify { subject.user_ability(subject.current_user).should be_a CanTango::Ability }
+  end
+
+  describe 'user_ability admin' do
+    specify { subject.user_ability(subject.current_admin).should be_a CanTango::Ability }
+  end
+
+  describe 'current_ability :user' do
+    specify { subject.current_ability(:user).should be_a CanTango::Ability }
+
+    it 'should set the :user user correctly on ability' do
+      subject.current_ability(:user).user.should == subject.current_user
+    end
+  end
+
+  describe 'current_ability :admin' do
+    specify { subject.current_ability(:admin).should be_a CanTango::Ability }
+
+    it 'should set the :admin user correctly on ability' do
+      subject.current_ability(:admin).user.should == subject.current_admin
+    end
+  end
+end
+
+

data/spec/cantango/api/user/can_api_spec.rb

@@ -0,0 +1,109 @@
+require 'rspec'
+require 'cantango'
+require 'simple_roles'
+require 'fixtures/models'
+require 'cantango/api/current_users'
+# require 'cantango/configuration/engines/store_engine_shared'
+
+class User
+  include CanTango::Users::Masquerade
+
+  include_and_extend SimpleRoles
+end
+
+CanTango.configure do |config|
+  config.users.register :user, :admin
+  config.cache.set :off
+  config.permits.set :on
+end
+
+
+class UserRolePermit < CanTango::RolePermit
+  def initialize ability
+    super
+  end
+
+  def permit_rules
+    can :edit, Article
+    cannot :edit, User
+  end
+end
+
+class AdminRolePermit < CanTango::RolePermit
+  def initialize ability
+    super
+  end
+
+  def permit_rules
+    can :edit, Article
+    cannot :edit, User
+  end
+end
+
+class Context
+  include CanTango::Api::User::Can
+
+  include ::CurrentUsers
+  extend ::CurrentUsers
+end
+
+describe CanTango::Api::User::Can do
+  subject { Context.new }
+
+  describe 'user_ability' do
+    specify { subject.user_ability(subject.current_user).should be_a CanTango::Ability }
+    specify { subject.user_ability(subject.current_admin).should be_a CanTango::Ability }
+  end
+
+  describe 'current_ability :user' do
+    specify { subject.current_ability(:user).should be_a CanTango::Ability }
+
+    it 'should set the :user user correctly on ability' do
+      subject.current_ability(:user).user.should == subject.current_user
+    end
+  end
+
+  describe 'current_ability :admin' do
+    specify { subject.current_ability(:admin).should be_a CanTango::Ability }
+
+    it 'should set the :admin user correctly on ability' do
+      subject.current_ability(:admin).user.should == subject.current_admin
+    end
+  end
+
+  describe 'user' do
+    specify { subject.current_user.role.should == 'user' }
+
+    # user can edit Article, not Admin
+    specify { subject.user_can?(:edit, Article).should be_true }
+    specify { subject.user_can?(:edit, User).should be_false }
+
+    specify { subject.user_cannot?(:edit, User).should be_true }
+    specify { subject.user_cannot?(:edit, Article).should be_false }
+  end
+
+  describe 'admin' do
+    specify { subject.current_admin.role.should == 'admin' }
+
+    specify { subject.admin_can?(:edit, Article).should be_true }
+    specify { subject.admin_can?(:edit, User).should be_false }
+
+    specify { subject.admin_cannot?(:edit, User).should be_true }
+    specify { subject.admin_cannot?(:edit, Article).should be_false }
+  end
+
+  describe 'admin masquerades as user' do
+    before do
+      Context.current_admin.masquerade_as Context.current_user
+    end
+
+    # admin masquerading as user can do same as user
+    specify { subject.admin_can?(:edit, Article).should be_true }
+
+    specify { subject.admin_can?(:edit, User).should be_false }
+
+    specify { subject.admin_cannot?(:edit, User).should be_true }
+    specify { subject.admin_cannot?(:edit, Article).should be_false }
+  end
+end
+

data/spec/cantango/api/user/scope_api_spec.rb

@@ -0,0 +1,65 @@
+require 'rspec'
+require 'cantango'
+require 'fixtures/models'
+require 'cantango/api/current_users'
+
+require 'cantango/configuration/engines/store_engine_shared'
+
+CanTango.config.users.register :user, :admin
+
+class User
+  include CanTango::Users::Masquerade
+end
+
+class Context
+  include CanTango::Api::User::Ability
+  include CanTango::Api::User::Scope
+
+  include ::CurrentUsers
+  extend ::CurrentUsers
+end
+
+describe CanTango::Api::User::Scope do
+  subject { Context.new }
+
+  describe 'scope_user' do
+    before do
+      Context.current_admin.masquerade_as Context.current_user
+    end
+
+    specify do
+      subject.scope_user(:admin) do |user|
+        user.should be_a CanTango::Ability::Scope
+        user.ability.user.name.should == 'admin'
+      end
+    end
+
+    specify do
+      admin = subject.scope_user(:user)
+      admin.should be_a CanTango::Ability::Scope
+      admin.ability.user.name.should == 'stan'
+    end
+  end
+
+  describe 'real_user' do
+    before do
+      Context.current_user.masquerade_as Context.current_admin
+    end
+
+    specify do
+      subject.real_user(:user) do |user|
+        user.should be_a CanTango::Ability::Scope
+        user.ability.user.name.should == 'stan'
+      end
+    end
+
+    specify do
+      admin = subject.real_user(:admin)
+      admin.should be_a CanTango::Ability::Scope
+      admin.ability.user.name.should == 'admin'
+    end
+  end
+end
+
+
+