cantango 0.8.0

data/spec/dummy/public/javascripts/rails.js

@@ -0,0 +1,191 @@
+(function() {
+  // Technique from Juriy Zaytsev
+  // http://thinkweb2.com/projects/prototype/detecting-event-support-without-browser-sniffing/
+  function isEventSupported(eventName) {
+    var el = document.createElement('div');
+    eventName = 'on' + eventName;
+    var isSupported = (eventName in el);
+    if (!isSupported) {
+      el.setAttribute(eventName, 'return;');
+      isSupported = typeof el[eventName] == 'function';
+    }
+    el = null;
+    return isSupported;
+  }
+
+  function isForm(element) {
+    return Object.isElement(element) && element.nodeName.toUpperCase() == 'FORM'
+  }
+
+  function isInput(element) {
+    if (Object.isElement(element)) {
+      var name = element.nodeName.toUpperCase()
+      return name == 'INPUT' || name == 'SELECT' || name == 'TEXTAREA'
+    }
+    else return false
+  }
+
+  var submitBubbles = isEventSupported('submit'),
+      changeBubbles = isEventSupported('change')
+
+  if (!submitBubbles || !changeBubbles) {
+    // augment the Event.Handler class to observe custom events when needed
+    Event.Handler.prototype.initialize = Event.Handler.prototype.initialize.wrap(
+      function(init, element, eventName, selector, callback) {
+        init(element, eventName, selector, callback)
+        // is the handler being attached to an element that doesn't support this event?
+        if ( (!submitBubbles && this.eventName == 'submit' && !isForm(this.element)) ||
+             (!changeBubbles && this.eventName == 'change' && !isInput(this.element)) ) {
+          // "submit" => "emulated:submit"
+          this.eventName = 'emulated:' + this.eventName
+        }
+      }
+    )
+  }
+
+  if (!submitBubbles) {
+    // discover forms on the page by observing focus events which always bubble
+    document.on('focusin', 'form', function(focusEvent, form) {
+      // special handler for the real "submit" event (one-time operation)
+      if (!form.retrieve('emulated:submit')) {
+        form.on('submit', function(submitEvent) {
+          var emulated = form.fire('emulated:submit', submitEvent, true)
+          // if custom event received preventDefault, cancel the real one too
+          if (emulated.returnValue === false) submitEvent.preventDefault()
+        })
+        form.store('emulated:submit', true)
+      }
+    })
+  }
+
+  if (!changeBubbles) {
+    // discover form inputs on the page
+    document.on('focusin', 'input, select, texarea', function(focusEvent, input) {
+      // special handler for real "change" events
+      if (!input.retrieve('emulated:change')) {
+        input.on('change', function(changeEvent) {
+          input.fire('emulated:change', changeEvent, true)
+        })
+        input.store('emulated:change', true)
+      }
+    })
+  }
+
+  function handleRemote(element) {
+    var method, url, params;
+
+    var event = element.fire("ajax:before");
+    if (event.stopped) return false;
+
+    if (element.tagName.toLowerCase() === 'form') {
+      method = element.readAttribute('method') || 'post';
+      url    = element.readAttribute('action');
+      params = element.serialize();
+    } else {
+      method = element.readAttribute('data-method') || 'get';
+      url    = element.readAttribute('href');
+      params = {};
+    }
+
+    new Ajax.Request(url, {
+      method: method,
+      parameters: params,
+      evalScripts: true,
+
+      onComplete:    function(request) { element.fire("ajax:complete", request); },
+      onSuccess:     function(request) { element.fire("ajax:success",  request); },
+      onFailure:     function(request) { element.fire("ajax:failure",  request); }
+    });
+
+    element.fire("ajax:after");
+  }
+
+  function handleMethod(element) {
+    var method = element.readAttribute('data-method'),
+        url = element.readAttribute('href'),
+        csrf_param = $$('meta[name=csrf-param]')[0],
+        csrf_token = $$('meta[name=csrf-token]')[0];
+
+    var form = new Element('form', { method: "POST", action: url, style: "display: none;" });
+    element.parentNode.insert(form);
+
+    if (method !== 'post') {
+      var field = new Element('input', { type: 'hidden', name: '_method', value: method });
+      form.insert(field);
+    }
+
+    if (csrf_param) {
+      var param = csrf_param.readAttribute('content'),
+          token = csrf_token.readAttribute('content'),
+          field = new Element('input', { type: 'hidden', name: param, value: token });
+      form.insert(field);
+    }
+
+    form.submit();
+  }
+
+
+  document.on("click", "*[data-confirm]", function(event, element) {
+    var message = element.readAttribute('data-confirm');
+    if (!confirm(message)) event.stop();
+  });
+
+  document.on("click", "a[data-remote]", function(event, element) {
+    if (event.stopped) return;
+    handleRemote(element);
+    event.stop();
+  });
+
+  document.on("click", "a[data-method]", function(event, element) {
+    if (event.stopped) return;
+    handleMethod(element);
+    event.stop();
+  });
+
+  document.on("submit", function(event) {
+    var element = event.findElement(),
+        message = element.readAttribute('data-confirm');
+    if (message && !confirm(message)) {
+      event.stop();
+      return false;
+    }
+
+    var inputs = element.select("input[type=submit][data-disable-with]");
+    inputs.each(function(input) {
+      input.disabled = true;
+      input.writeAttribute('data-original-value', input.value);
+      input.value = input.readAttribute('data-disable-with');
+    });
+
+    var element = event.findElement("form[data-remote]");
+    if (element) {
+      handleRemote(element);
+      event.stop();
+    }
+  });
+
+  document.on("ajax:after", "form", function(event, element) {
+    var inputs = element.select("input[type=submit][disabled=true][data-disable-with]");
+    inputs.each(function(input) {
+      input.value = input.readAttribute('data-original-value');
+      input.removeAttribute('data-original-value');
+      input.disabled = false;
+    });
+  });
+
+  Ajax.Responders.register({
+    onCreate: function(request) {
+      var csrf_meta_tag = $$('meta[name=csrf-token]')[0];
+
+      if (csrf_meta_tag) {
+        var header = 'X-CSRF-Token',
+            token = csrf_meta_tag.readAttribute('content');
+
+        if (!request.options.requestHeaders) {
+          request.options.requestHeaders = {};
+        }
+        request.options.requestHeaders[header] = token;
+      }
+    }
+  });
+})();

data/spec/dummy/script/rails

@@ -0,0 +1,6 @@
+#!/usr/bin/env ruby
+# This command will automatically be run when you run "rails" with Rails 3 gems installed from the root of your application.
+
+APP_PATH = File.expand_path('../../config/application',  __FILE__)
+require File.expand_path('../../config/boot',  __FILE__)
+require 'rails/commands'

data/spec/dummy/tmp/pids/server.pid

@@ -0,0 +1 @@
+26342

data/spec/dummy_spec_helper.rb

@@ -0,0 +1,43 @@
+require 'rubygems'
+
+ENV["RAILS_ENV"] ||= 'test'
+require File.expand_path("../dummy/config/environment", __FILE__)
+
+require 'require_all'
+require 'rspec/rails'
+require 'cancan/matchers'
+require 'database_cleaner'
+require 'cutter'
+require 'capybara/rails'
+require 'capybara/rspec'
+#require 'cantango/rspec'
+#require 'factory_girl'
+#require 'mocha'
+#require 'factories'
+#require 'controller_macros'
+#Dir["#{File.dirname(__FILE__)}/support/**/*.rb"].each { |f| require f }
+
+#ActiveRecord::Base.logger = Logger.new(STDERR)
+DatabaseCleaner.strategy = :truncation
+def migration_folder(name)
+  migrations_path = File.dirname(__FILE__)
+  name ? File.join("#{migrations_path}" "#{name}") : "#{migrations_path}/migrations"
+end
+
+def migrate(name = nil)
+  mig_folder = migration_folder(name)
+  ActiveRecord::Migrator.migrate mig_folder
+end
+
+RSpec.configure do |config|
+  config.mock_with :rspec
+  config.before(:suite) do
+    DatabaseCleaner.strategy = :drop, {:include => ['migrations']}
+    DatabaseCleaner.clean
+    migrate("/dummy/db/migrate")
+  end
+end
+
+# Overriden variant of Ability exposes some extra methods 
+# to test caching:
+require 'helpers/dummy_app_ability'

data/spec/entire_suite_spec.rb

@@ -0,0 +1,15 @@
+# Spec accumulating entire suite of working specs
+require 'spec_helper'
+
+dir = File.dirname(__FILE__) 
+
+require_all "#{dir}/cantango/ability"
+
+require_all "#{dir}/cantango/api"
+require_all "#{dir}/cantango/permit_engine"
+
+require "#{dir}/cantango/configuration_spec"
+require "#{dir}/cantango/rules_spec"
+require_all "#{dir}/cantango/configuration"
+
+require_all "#{dir}/cantango/permission_engine"

data/spec/factories.rb

@@ -0,0 +1,8 @@
+Factory.define :user do |u|
+  u.name 'kris'
+end
+
+Factory.define :user_account do |u|
+  u.name 'susan'
+end
+

data/spec/fixtures/config/cantango_permissions.yml

@@ -0,0 +1,48 @@
+roles:
+  admin:
+    can:
+      manage:
+      - all
+
+  user:
+    can:
+      read:
+      - Comment
+      - Post
+      - Article
+      - User
+      write:
+      - Article
+      manage:
+      - Comment
+      - Post
+
+role_groups:
+  bloggers: 
+    can: 
+      read: 
+      - Article
+      - Comment
+    cannot: 
+      write: 
+      - Article
+      - Post
+  editors: 
+    can: 
+      read: 
+      - Article
+      - Comment
+    cannot: 
+      write: 
+      - Article
+      - Post
+
+licenses:
+  editors:
+    can:
+      manage:
+      - all
+users:
+  kris@gmail.com:
+    can:
+    cannot:

data/spec/fixtures/config/categories.yml

@@ -0,0 +1,6 @@
+another_articles:
+  [Post, Article]
+articles: 
+  [Article, Post, Comment]
+user_models: 
+  [Admin, Guest, User]

data/spec/fixtures/config/evaluator_fixtures.yml

@@ -0,0 +1,18 @@
+bloggers: 
+  can: 
+    read: 
+    - Article
+    - Comment
+  cannot: 
+    write: 
+    - Article
+    - Post
+editors: 
+  can: 
+    read: 
+    - Article
+    - Comment
+  cannot: 
+    write: 
+    - Article
+    - Post

data/spec/fixtures/config/licenses.yml

@@ -0,0 +1,4 @@
+bloggers:
+  can:
+    manage:
+      - Comment

data/spec/fixtures/config/permissions.yml

@@ -0,0 +1,19 @@
+--- 
+bloggers: 
+  can: 
+    read: 
+    - Article
+    - Comment
+  cannot: 
+    write: 
+    - Article
+    - Post
+editors: 
+  can: 
+    read: 
+    - Article
+    - Comment
+  cannot: 
+    write: 
+    - Article
+    - Post

data/spec/fixtures/config/role_group.yml

@@ -0,0 +1,4 @@
+editors:
+  can:
+    manage:
+      - all

data/spec/fixtures/config/roles.yml

@@ -0,0 +1,4 @@
+admin:
+  can:
+    manage:
+      - all

data/spec/fixtures/config/user_permissions.yml

@@ -0,0 +1,8 @@
+stan@theman.com:
+  can:
+    manage:
+      - all
+kris@thewiz.dk:
+  cannot:
+    read:
+      - Book

data/spec/fixtures/models.rb

@@ -0,0 +1,2 @@
+require 'require_all'
+require_all File.dirname(__FILE__) + '/models'

data/spec/fixtures/models/items.rb

@@ -0,0 +1,8 @@
+class Post
+end
+
+class Article
+end
+
+class Comment
+end

data/spec/fixtures/models/simple_roles.rb

@@ -0,0 +1,44 @@
+module SimpleRoles
+  module ClassMethods
+    def is_role_in_group?(role, group)
+      raise "No group #{group} defined in User model" if !role_groups.has_key?(group)
+      role_groups[group].include?(role)
+    end
+
+    def role_groups
+      {:bloggers => [:editor]}
+    end
+
+    def roles
+      [:guest, :user, :admin, :editor]
+    end
+  end
+
+  module InstanceMethods
+
+    attr_accessor :role_groups_list
+
+    def has_role? role
+      roles_list.include? role
+    end
+
+    def has_any_role? roles
+      roles.include?(role.to_sym)
+    end
+
+    def roles_list
+      role.to_s.scan(/\w+/).map{|r| r.to_sym}
+    end
+
+    def is_in_group? group
+      role_groups_list.include? group
+    end
+    alias_method :in_role_group?, :is_in_group?
+
+    def role_groups_list
+      return role_groups.scan(/\w+/).map(&:to_sym) if respond_to?(:role_groups) && !role_groups.nil?
+      @role_groups_list || [] #[:bloggers]
+    end
+  end
+end
+