cantango 0.8.0

data/spec/fixtures/models/user.rb

@@ -0,0 +1,22 @@
+class User
+  attr_accessor :name, :account, :email
+
+  # tango_user # see macros
+
+  def initialize name, email = nil, options = {}
+    @name = name
+    @email = email
+    set_option_vars options
+  end
+
+  def set_option_vars options = {}
+    options.each_pair do |name, value|
+      var = :"@#{name}"
+      self.instance_variable_set(var, value)
+    end
+  end
+
+  def email
+    @email ||= 'default@gmail.com'
+  end
+end

data/spec/fixtures/models/user_account.rb

@@ -0,0 +1,21 @@
+class UserAccount
+  attr_accessor :user, :roles, :role_groups
+
+  def initialize user, options = {}
+    @user = user
+    @roles = options[:roles]
+    @role_groups = options[:role_groups]
+  end
+
+  def has_role? name
+    true
+  end
+
+  def roles_list
+    roles
+  end
+
+  def role_groups_list
+    role_groups
+  end
+end

data/spec/fixtures/tango_fixtures.rb

@@ -0,0 +1,29 @@
+module CanTangoFixtures
+  def tango_permissions
+    {"roles"=>{
+      "admin"=>{
+       "can"=>{
+        "manage"=>["all"]
+       }},
+      "user"=>{
+       "can"=>{
+        "read"=>["^articles", "Post"],
+        "write"=>["Comment"]
+       },
+       "cannot"=>{
+        "write"=>["Post"],
+        "write"=>["Article"]
+       }
+      }
+     }, 
+     "role_groups"=>{"bloggers"=>{"can"=>{"read"=>["Article", "Comment"]}, 
+                                  "cannot"=>{"write"=>["Article", "Post"]}}, 
+                     "editors"=>{"can"=>{"read"=>["Article", "Comment"]}, 
+                                 "cannot"=>{"write"=>["Article", "Post"]}}}, 
+     "licenses"=>{"editors"=>{"can"=>{"manage"=>["all"]}}},
+     "users" => {"kris@gmail.com" => {"can" => {"read" =>["Article"] }}}
+    
+    }  
+  end
+end
+

data/spec/generators/cantango/account_role_permit_generator_spec.rb

@@ -0,0 +1,35 @@
+require 'spec_helper' 
+require 'generator-spec'
+
+require_generator :cantango => :role_permit
+
+RSpec::Generator.configure do |config|
+  config.debug = true
+  config.remove_temp_dir = true #false
+  config.default_rails_root(__FILE__)
+  config.lib = File.dirname(__FILE__) + '/../lib'
+  config.logger = :stdout  # :file
+end
+
+
+describe CanTango::Generators::RolePermitGenerator do
+  use_helpers :special, :file
+
+  setup_generator :permit do
+    tests CanTango::Generators::RolePermitGenerator 
+  end
+
+  describe 'Run Permit generator' do
+    before :each do
+      @generator = with_generator do |g|
+        g.run_generator "admin --account admin --reads all --licenses blogging user_admin".args
+      end
+    end
+
+    describe 'result of running Permit generator' do
+      it "should create Admin permit" do
+        @generator.should generate_permit :admin
+      end
+    end
+  end
+end

data/spec/generators/cantango/account_role_permits_generator_spec.rb

@@ -0,0 +1,59 @@
+require 'spec_helper' 
+require 'generator-spec'
+
+require_generator :cantango => :role_permits
+
+RSpec::Generator.configure do |config|
+  config.debug = true
+  config.remove_temp_dir = true #false
+  config.default_rails_root(__FILE__) 
+  config.lib = File.dirname(__FILE__) + '/../lib'
+  config.logger = :stdout  # :file
+end
+
+
+describe CanTango::Generators::RolePermitsGenerator do
+  use_helpers :controller, :special, :file
+
+  setup_generator :permits do
+    tests CanTango::Generators::RolePermitsGenerator
+  end
+
+  describe 'result of running generator with default profile' do
+    before :each do
+      @generator = with_generator do |g|    
+        g.run_generator "--orm mongoid --account editor".args
+      end
+    end
+
+    describe 'result of running Permits generator' do
+      it "should create Admin permit" do
+        @generator.should generate_permit :admin
+      end
+
+      it "should generate a permits initializer file with orm set to mongoid" do      
+        File.read(initializer_file(:cantango)).should match /config.orm = :mongoid/
+      end      
+    end
+  end
+
+  describe 'result of running generator with option to create permit for each registered role' do
+    context "Registered roles :editor, :admin" do
+      before :each do
+        @generator = with_generator do |g|    
+          g.run_generator "admin editor".args
+        end
+      end
+  
+      it "should have created Guest and Admin permits" do
+        @generator.should have_permit_files :guest, :admin
+      end
+      
+      it "should have created the Editor permit for the :editor role and the permit should not use licenses" do      
+        @generator.should have_permit_file :editor do |editor_permit|
+          editor_permit.should_not have_licenses :user_admin, :blogging 
+        end
+      end
+    end #ctx
+  end    
+end

data/spec/generators/cantango/license_generator_spec.rb

@@ -0,0 +1,33 @@
+require 'spec_helper' 
+require 'generator-spec'
+
+require_generator :cantango => :license
+
+RSpec::Generator.configure do |config|
+  config.debug = true
+  config.remove_temp_dir = true #false
+  config.default_rails_root(__FILE__) 
+  config.lib = File.dirname(__FILE__) + '/../lib'
+  config.logger = :stdout  # :file
+end
+
+
+describe CanTango::Generators::LicenseGenerator  do
+  use_helpers :special, :file
+
+  setup_generator :license do
+    tests CanTango::Generators::LicenseGenerator
+  end
+
+  describe "License: Profile Administration" do
+    before :each do
+      @generator = with_generator do |g|
+        g.run_generator "profile_administration --reads all --licenses blogging".args
+      end
+    end
+
+    it "should have created license files" do
+      @generator.should have_license_file :profile_administration
+    end
+  end
+end

data/spec/generators/cantango/licenses_generator_spec.rb

@@ -0,0 +1,58 @@
+require 'spec_helper' 
+require 'generator-spec'
+
+require_generator :cantango => :licenses
+
+RSpec::Generator.configure do |config|
+  config.debug = true
+  config.remove_temp_dir = true #false
+  config.default_rails_root(__FILE__) 
+  config.lib = File.dirname(__FILE__) + '/../lib'
+  config.logger = :stdout  # :file
+end
+
+
+describe CanTango::Generators::LicensesGenerator do
+  use_helpers :controller, :special, :file
+
+  setup_generator :licenses do
+    tests CanTango::Generators::LicensesGenerator
+  end
+
+  describe "Licenses: Profile Administration and Article Editing" do
+    before :each do
+      @generator = with_generator do |g|
+        g.run_generator "profile_administration article_editing".args
+      end
+    end
+
+    it "should have created license files" do
+      @generator.should have_license_files :profile_administration, :article_editing
+       @generator.should_not have_license_files :blogging, :user_admin
+    end
+  end
+
+  describe "Licenses: Profile Administration and Article Editing" do
+    before :each do
+      @generator = with_generator do |g|
+        g.run_generator "profile_administration article_editing".args
+      end
+    end
+
+    it "should have created license files" do
+      @generator.should have_license_files :profile_administration, :article_editing, :blogging, :user_admin
+    end
+
+    it "should have created license file :profile_administration with the right class" do
+      @generator.should have_license_file :profile_administration do |license|
+        license.should have_license_class :profile_administration
+      end
+    end
+
+    it "should have created license file :article_editing with the right class" do
+      @generator.should have_license_file :article_editing do |license|
+        license.should have_license_class :article_editing
+      end
+    end
+  end
+end

data/spec/generators/cantango/role_permit_generator_spec.rb

@@ -0,0 +1,35 @@
+require 'spec_helper' 
+require 'generator-spec'
+
+require_generator :cantango => :role_permit
+
+RSpec::Generator.configure do |config|
+  config.debug = true
+  config.remove_temp_dir = true #false
+  config.default_rails_root(__FILE__) 
+  config.lib = File.dirname(__FILE__) + '/../lib'
+  config.logger = :stdout  # :file
+end
+
+
+describe CanTango::Generators::RolePermitGenerator do
+  use_helpers :special, :file
+
+  setup_generator :permit do
+    tests CanTango::Generators::RolePermitGenerator
+  end
+
+  describe 'Run Permit generator' do
+    before :each do
+      @generator = with_generator do |g|
+        g.run_generator "admin --reads all --licenses blogging user_admin".args
+      end
+    end
+
+    describe 'result of running Permit generator' do
+      it "should create Admin permit" do
+        @generator.should generate_permit :admin
+      end
+    end
+  end
+end

data/spec/generators/cantango/role_permits_generator_spec.rb

@@ -0,0 +1,58 @@
+require 'spec_helper' 
+require 'generator-spec'
+
+require_generator :cantango => :role_permits
+
+RSpec::Generator.configure do |config|
+  config.debug = true
+  config.remove_temp_dir = true #false
+  config.default_rails_root(__FILE__) 
+  config.lib = File.dirname(__FILE__) + '/../lib'
+  config.logger = :stdout  # :file
+end
+
+
+describe CanTango::Generators::RolePermitsGenerator do
+  use_helpers :controller, :special, :file
+    setup_generator :permits do
+    tests CanTango::Generators::RolePermitsGenerator
+  end
+
+  describe 'result of running generator with default profile' do
+    before :each do
+      @generator = with_generator do |g|
+        g.run_generator "--orm mongoid".args
+      end
+    end
+
+    describe 'result of running Permits generator' do
+      it "should create Admin permit" do
+        @generator.should generate_permit :admin
+      end
+
+      it "should generate a permits initializer file with orm set to mongoid" do
+        File.read(initializer_file(:permits)).should match /config.orm = :mongoid/
+      end
+    end
+  end
+
+  describe 'result of running generator with option to create permit for each registered role' do
+    context "Registered roles :editor, :admin" do
+      before :each do
+        @generator = with_generator do |g|
+          g.run_generator "admin editor".args
+        end
+      end
+  
+      it "should have created Guest and Admin permits" do
+        @generator.should have_permit_files :guest, :admin
+      end
+      
+      it "should have created the Editor permit for the :editor role and the permit should not use licenses" do      
+        @generator.should have_permit_file :editor do |editor_permit|
+          editor_permit.should_not have_licenses :user_admin, :blogging 
+        end
+      end
+    end #ctx
+  end    
+end

data/spec/helpers/dummy_app_ability.rb

@@ -0,0 +1,26 @@
+require 'cantango'
+require 'cantango/permit_engine/util'
+
+module CanTango
+  class Ability
+    def initialize candidate, options = {}
+      puts "\n\n! Using test variant of CanTango::Ability from spec/helpers !\n\n"
+      raise "Candidate must be something!" if !candidate
+      @candidate, @options = candidate, options
+      @session = options[:session] || {} # seperate session cache for each type of user?
+
+      @rules_cached = true and return if cached_rules?
+
+      # run permission evaluators
+      with(:permissions)  {|permission| permission.evaluate! user }
+      with(:permits)      {|permit| break if permit.execute == :break }
+
+      cache_rules!
+    end
+  
+    def rules_cached?
+      @rules_cached || false
+    end
+  end
+  
+end

data/spec/integration/Design_notes.textile

@@ -0,0 +1,30 @@
+h1. Dummy app test design
+
+The dummy app should reflect many of the same tests as in the AR scenarios.
+
+h2. Setup
+
+The following is a description of essential files for the dummy app the are used to configure the test environment for cantango
+in a Rails 3 app.
+
+config/application.rb         - includes the 'cantango' gem
+config/simple_roles.rb        - Stubs for Role API (in place of troles gem or similar)
+config/tango_permissions.yml  - permission rules
+
+dummy_spec_helper             - sets up enviromennt for running tests on dummy app
+
+
+
+
+Users:
+* Normal
+* Guest
+* Admin
+
+User Accounts:
+* Normal
+* Guest
+* Admin
+
+Role API:
+* Only accounts or users in certain roles or role groups can see a given view block

data/spec/integration/admin_user/masquerade_spec.rb

@@ -0,0 +1,22 @@
+require 'dummy_spec_helper'
+
+feature "Articles", %q{
+  In order to have an awesome blog
+  As an admin masquerading as a user
+  I want to read and edit articles
+  but not be able to create articles
+} do
+
+  background do
+    Article.create!(:title => 'One')
+    Article.create!(:title => 'Two')
+   end
+
+  scenario "Article index" do
+    visit '/articles/admin'
+    page.should have_content('One')
+    page.should_not have_content('New article')
+    #page.should have_content('Edit')
+  end
+end
+