elucid-rails_admin 0.0.1

data/spec/lib/rails_admin_spec.rb

@@ -0,0 +1,153 @@
+require 'spec_helper'
+
+describe "RailsAdmin" do
+  describe ".associated_collection_cache_all" do
+    it "should default to true if associated collection count < 100" do
+      RailsAdmin.config(Team).edit.fields.find{|f| f.name == :players}.associated_collection_cache_all.should == true
+    end
+    
+    it "should default to false if associated collection count >= 100" do
+      @players = 100.times.map do
+        FactoryGirl.create :player
+      end
+      RailsAdmin.config(Team).edit.fields.find{|f| f.name == :players}.associated_collection_cache_all.should == false
+    end
+  end
+  
+  describe ".add_extension" do
+    it "registers the extension with RailsAdmin" do
+      RailsAdmin.add_extension(:example, ExampleModule)
+      RailsAdmin::EXTENSIONS.select { |name| name == :example }.length.should == 1
+    end
+
+    context "given an extension with an authorization adapter" do
+      it "registers the adapter" do
+        RailsAdmin.add_extension(:example, ExampleModule, {
+          :authorization => true
+        })
+        RailsAdmin::AUTHORIZATION_ADAPTERS[:example].should == ExampleModule::AuthorizationAdapter
+      end
+    end
+
+    context "given an extension with a configuration adapter" do
+      it "registers the adapter" do
+        RailsAdmin.add_extension(:example, ExampleModule, {
+          :configuration => true
+        })
+        RailsAdmin::CONFIGURATION_ADAPTERS[:example].should == ExampleModule::ConfigurationAdapter
+      end
+    end
+  end
+
+  describe ".attr_accessible_role" do
+    it "sould be :default by default" do
+      RailsAdmin.config.attr_accessible_role.call.should == :default
+    end
+
+    it "sould be configurable with user role for example" do
+      RailsAdmin.config do |config|
+        config.attr_accessible_role do
+          :admin
+        end
+      end
+
+      RailsAdmin.config.attr_accessible_role.call.should == :admin
+    end
+  end
+
+  describe ".main_app_name" do
+    
+    it "as a default meaningful dynamic value" do
+      RailsAdmin.config.main_app_name.call.should == ['Dummy App', 'Admin']
+    end
+    
+    it "can be configured" do
+      RailsAdmin.config do |config|
+        config.main_app_name = ['static','value']
+      end
+      RailsAdmin.config.main_app_name.should == ['static','value']
+    end
+  end
+
+  describe ".authorize_with" do
+    context "given a key for a extension with authorization" do
+      before do
+        RailsAdmin.add_extension(:example, ExampleModule, {
+          :authorization => true
+        })
+      end
+
+      it "initializes the authorization adapter" do
+        ExampleModule::AuthorizationAdapter.should_receive(:new).with(RailsAdmin::Config)
+        RailsAdmin.config do |config|
+          config.authorize_with(:example)
+        end
+        RailsAdmin.config.authorize_with.call
+      end
+
+      it "passes through any additional arguments to the initializer" do
+        options = { :option => true }
+        ExampleModule::AuthorizationAdapter.should_receive(:new).with(RailsAdmin::Config, options)
+        RailsAdmin.config do |config|
+          config.authorize_with(:example, options)
+        end
+        RailsAdmin.config.authorize_with.call
+      end
+    end
+  end
+
+  describe ".configure_with" do
+    context "given a key for a extension with configuration" do
+      before do
+        RailsAdmin.add_extension(:example, ExampleModule, {
+          :configuration => true
+        })
+      end
+
+      it "initializes configuration adapter" do
+        ExampleModule::ConfigurationAdapter.should_receive(:new)
+        RailsAdmin.config do |config|
+          config.configure_with(:example)
+        end
+      end
+
+      it "yields the (optionally) provided block, passing the initialized adapter" do
+        configurator = nil
+        RailsAdmin.config do |config|
+          config.configure_with(:example) do |configuration_adapter|
+            configurator = configuration_adapter
+          end
+        end
+        configurator.should be_a(ExampleModule::ConfigurationAdapter)
+      end
+    end
+  end
+
+  describe ".config" do
+    context ".default_search_operator" do
+      it "sets the default_search_operator" do
+        RailsAdmin.config do |config|
+          config.default_search_operator = 'starts_with'
+        end
+        RailsAdmin::Config.default_search_operator.should == 'starts_with'
+      end
+
+      it "errors on unrecognized search operator" do
+        expect do
+          RailsAdmin.config do |config|
+            config.default_search_operator = 'random'
+          end
+        end.to raise_error(ArgumentError, "Search operator 'random' not supported")
+      end
+
+      it "defaults to 'default'" do
+        RailsAdmin::Config.default_search_operator.should == 'default'
+      end
+    end
+  end
+end
+
+module ExampleModule
+  class AuthorizationAdapter ; end
+  class ConfigurationAdapter ; end
+end

data/spec/requests/authorization/cancan_spec.rb

@@ -0,0 +1,260 @@
+require 'spec_helper'
+
+class Ability
+  include CanCan::Ability
+  def initialize(user)
+    can :access, :rails_admin if user.roles.include? :admin
+    unless user.roles.include? :test_exception
+      can :manage, Player if user.roles.include? :manage_player
+      can :read, Player, :retired => false if user.roles.include? :read_player
+      can :create, Player, :suspended => true if user.roles.include? :create_player
+      can :update, Player, :retired => false if user.roles.include? :update_player
+      can :destroy, Player, :retired => false if user.roles.include? :destroy_player
+      can :history, Player, :retired => false if user.roles.include? :history_player
+    else
+      can :access, :rails_admin
+      can :manage, :all
+      cannot [:update, :destroy], Player, :retired => true
+    end
+  end
+end
+
+describe "RailsAdmin CanCan Authorization" do
+
+  subject { page }
+
+  before(:each) do
+    RailsAdmin.config{|c| c.authorize_with :cancan }
+    @user = FactoryGirl.create :user
+    login_as @user
+  end
+
+  describe "with no roles" do
+    before(:each) do
+      @user.update_attribute(:roles, [])
+    end
+
+    it "GET /admin should raise CanCan::AccessDenied" do
+      visit dashboard_path
+      should have_content('CanCan::AccessDenied')
+    end
+
+    it "GET /admin/player should raise CanCan::AccessDenied" do
+      visit index_path(:model_name => "player")
+      should have_content('CanCan::AccessDenied')
+    end
+  end
+
+  describe "with read player role" do
+    before(:each) do
+      @user.update_attribute(:roles, [:admin, :read_player])
+    end
+
+    it "GET /admin should show Player but not League" do
+      visit dashboard_path
+      body.should have_content("Player")
+      body.should_not have_content("League")
+      body.should_not have_content("Add new")
+    end
+
+    it "GET /admin/player should render successfully but not list retired players and not show new, edit, or delete actions" do
+      @players = [
+        FactoryGirl.create(:player, :retired => false),
+        FactoryGirl.create(:player, :retired => true),
+      ]
+
+      visit index_path(:model_name => "player")
+
+      should have_content(@players[0].name)
+      should_not have_content(@players[1].name)
+      should_not have_content("Add new")
+      should have_css('.show_object_link')
+      should_not have_css('.edit_object_link')
+      should_not have_css('.delete_object_link')
+      should_not have_css('.history_object_link')
+    end
+
+    it "GET /admin/team should raise CanCan::AccessDenied" do
+      visit index_path(:model_name => "team")
+      should have_content('CanCan::AccessDenied')
+    end
+
+    it "GET /admin/player/new should raise CanCan::AccessDenied" do
+      visit new_path(:model_name => "player")
+      should have_content('CanCan::AccessDenied')
+    end
+
+  end
+
+  describe "with create and read player role" do
+    before(:each) do
+      @user.update_attribute(:roles, [:admin, :read_player, :create_player])
+    end
+
+    it "GET /admin/player/new should render and create record upon submission" do
+      visit new_path(:model_name => "player")
+      
+      should_not have_content("Save and edit")
+      should_not have_content("Delete")
+      
+      should have_content("Save and add another")
+      fill_in "player[name]", :with => "Jackie Robinson"
+      fill_in "player[number]", :with => "42"
+      fill_in "player[position]", :with => "Second baseman"
+      click_button "Save"
+      should_not have_content("Edit")
+
+      @player = RailsAdmin::AbstractModel.new("Player").first
+      @player.name.should eql("Jackie Robinson")
+      @player.number.should eql(42)
+      @player.position.should eql("Second baseman")
+      @player.should be_suspended # suspended is inherited behavior based on permission
+    end
+
+    it "GET /admin/player/1/edit should raise access denied" do
+      @player = FactoryGirl.create :player
+      visit edit_path(:model_name => "player", :id => @player.id)
+      should have_content('CanCan::AccessDenied')
+    end
+
+  end
+
+  describe "with update and read player role" do
+    before(:each) do
+      @user.update_attribute(:roles, [:admin, :read_player, :update_player])
+    end
+
+    it "GET /admin/player/1/edit should render and update record upon submission" do
+      @player = FactoryGirl.create :player
+      visit edit_path(:model_name => "player", :id => @player.id)
+      
+      should have_content("Save and edit")
+      should_not have_content("Save and add another")
+      should_not have_content("Add new")
+      should_not have_content("Delete")
+      should_not have_content("History")
+      fill_in "player[name]", :with => "Jackie Robinson"
+      click_button "Save"
+      @player.reload
+      @player.name.should eql("Jackie Robinson")
+    end
+
+    it "GET /admin/player/1/edit with retired player should raise access denied" do
+      @player = FactoryGirl.create :player, :retired => true
+      visit edit_path(:model_name => "player", :id => @player.id)
+      should have_content('CanCan::AccessDenied')
+    end
+
+    it "GET /admin/player/1/delete should raise access denied" do
+      @player = FactoryGirl.create :player
+      visit delete_path(:model_name => "player", :id => @player.id)
+      should have_content('CanCan::AccessDenied')
+    end
+
+  end
+  
+  describe "with history role" do
+    it 'shows links to history action' do
+    
+      @user.update_attribute(:roles, [:admin, :read_player, :history_player])
+      @player = FactoryGirl.create :player
+      
+      visit index_path(:model_name => "player")
+        should have_css('.show_object_link')
+        should_not have_css('.edit_object_link')
+        should_not have_css('.delete_object_link')
+        should have_css('.history_object_link')
+      
+      visit show_path(:model_name => 'player', :id => @player.id)
+        should have_content("Show")
+        should_not have_content("Edit")
+        should_not have_content("Delete")
+        should have_content("History")
+      
+    end
+  end
+  
+  describe "with all roles" do
+    it 'shows links to all actions' do
+    
+      @user.update_attribute(:roles, [:admin, :manage_player])
+      @player = FactoryGirl.create :player
+      
+      visit index_path(:model_name => "player")
+        should have_css('.show_object_link')
+        should have_css('.edit_object_link')
+        should have_css('.delete_object_link')
+        should have_css('.history_object_link')
+      
+      visit show_path(:model_name => 'player', :id => @player.id)
+        should have_content("Show")
+        should have_content("Edit")
+        should have_content("Delete")
+        should have_content("History")
+      
+    end
+  end
+
+  describe "with destroy and read player role" do
+    before(:each) do
+      @user.update_attribute(:roles, [:admin, :read_player, :destroy_player])
+    end
+
+    it "GET /admin/player/1/delete should render and destroy record upon submission" do
+      @player = FactoryGirl.create :player
+      player_id = @player.id
+      visit delete_path(:model_name => "player", :id => player_id)
+
+      click_button "Yes, I'm sure"
+      Player.exists?(player_id).should be_false
+    end
+
+    it "GET /admin/player/1/delete with retired player should raise access denied" do
+      @player = FactoryGirl.create :player, :retired => true
+      visit delete_path(:model_name => "player", :id => @player.id)
+      should have_content('CanCan::AccessDenied')
+    end
+
+    it "GET /admin/player/bulk_delete should render records which are authorized to" do
+      active_player = FactoryGirl.create :player, :retired => false
+      retired_player = FactoryGirl.create :player, :retired => true
+      
+      page.driver.post(bulk_action_path(:bulk_action => 'delete', :model_name => "player", :bulk_ids => [active_player, retired_player].map(&:id)))
+      
+      should have_content(active_player.name)
+      should_not have_content(retired_player.name)
+    end
+
+    it "POST /admin/player/bulk_destroy should destroy records which are authorized to" do
+      active_player = FactoryGirl.create :player, :retired => false
+      retired_player = FactoryGirl.create :player, :retired => true
+      
+      page.driver.post(bulk_destroy_path(:model_name => "player", :bulk_ids => [active_player, retired_player].map(&:id)))
+      Player.exists?(active_player.id).should be_false
+      Player.exists?(retired_player.id).should be_true
+    end
+  end
+  
+  describe "with exception role" do
+    it "GET /admin/player/bulk_delete should render records which are authorized to" do
+      @user.update_attribute(:roles, [:admin, :test_exception])
+      active_player = FactoryGirl.create :player, :retired => false
+      retired_player = FactoryGirl.create :player, :retired => true
+      
+      page.driver.post(bulk_action_path(:bulk_action => 'delete', :model_name => "player", :bulk_ids => [active_player, retired_player].map(&:id)))
+            
+      should have_content(active_player.name)
+      should_not have_content(retired_player.name)
+    end
+    
+    it "POST /admin/player/bulk_destroy should destroy records which are authorized to" do
+      @user.update_attribute(:roles, [:admin, :test_exception])
+      active_player = FactoryGirl.create :player, :retired => false
+      retired_player = FactoryGirl.create :player, :retired => true
+      
+      page.driver.post(bulk_destroy_path(:model_name => "player", :bulk_ids => [active_player, retired_player].map(&:id)))
+      Player.exists?(active_player.id).should be_false
+      Player.exists?(retired_player.id).should be_true
+    end
+  end
+end

data/spec/requests/basic/bulk_action/rails_admin_basic_bulk_action_spec.rb

@@ -0,0 +1,25 @@
+require 'spec_helper'
+
+describe "RailsAdmin Basic Bulk Action" do
+
+  subject { page }
+
+  before(:each) do
+    @players = 2.times.map { FactoryGirl.create :player }
+  end
+
+  describe "bulk_delete" do
+    it 'should show names of to-be-deleted players' do
+      page.driver.post(bulk_action_path(:bulk_action => 'delete', :model_name => "player", :bulk_ids => @players.map(&:id)))
+      @players.each { |player| should have_content(player.name) }
+    end
+  end
+
+  describe "bulk_export" do
+    it 'should show form for export' do
+      visit index_path(:model_name => "player")
+      click_link "Export current view"
+      @players.each { |player| should have_content("Select fields to export") }
+    end
+  end
+end

data/spec/requests/basic/bulk_destroy/rails_admin_basic_bulk_destroy_spec.rb

@@ -0,0 +1,55 @@
+require 'spec_helper'
+
+describe "RailsAdmin Basic Bulk Destroy" do
+  subject { page }
+
+  describe "successful bulk delete of records" do
+    before(:each) do
+      RailsAdmin::History.destroy_all
+      @players = 3.times.map { FactoryGirl.create(:player) }
+      @delete_ids = @players[0..1].map(&:id)
+      page.driver.post(bulk_action_path(:bulk_action => 'delete', :model_name => "player", :bulk_ids => @delete_ids))
+
+      click_button "Yes, I'm sure"
+    end
+
+    it "should not contain deleted records" do
+      RailsAdmin::AbstractModel.new("Player").count.should == 1
+    end
+
+    it "history count should be equal to number of deleted records" do
+      RailsAdmin::History.count.should == @delete_ids.count
+    end
+
+    it "history items should be for proper table" do
+      RailsAdmin::History.all.each do |history|
+        history.table.should == "Player"
+      end
+    end
+
+    it "history items should be for proper items" do
+      RailsAdmin::History.all.each do |history|
+        @delete_ids.should include(history.item)
+      end
+    end
+
+    it "displays a flash notice stating the number of records destroyed" do
+      # 2 Players because @delete_ids.count == 2:
+      page.should have_selector(".alert-message", :text => "2 Players successfully deleted")
+    end
+  end
+
+  describe "cancelled bulk_deletion" do
+    before(:each) do
+      RailsAdmin::History.destroy_all
+      @players = 3.times.map { FactoryGirl.create(:player) }
+      @delete_ids = @players[0..1].map(&:id)
+      page.driver.post(bulk_action_path(:bulk_action => 'delete', :model_name => "player", :bulk_ids => @delete_ids))
+      click_button "Cancel"
+    end
+
+    it "should not delete records" do
+      RailsAdmin::AbstractModel.new("Player").count.should == 3
+    end
+  end
+end