kojac 0.9.1 → 0.11.0

data/spec/demo/Rakefile

@@ -1,7 +1,31 @@
-#!/usr/bin/env rake
 # Add your own tasks in files placed in lib/tasks ending in .rake,
 # for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
 
 require File.expand_path('../config/application', __FILE__)
 
 Demo::Application.load_tasks
+
+Rake::Task['db:test:prepare'].clear_prerequisites
+Rake::Task['db:test:prepare'].enhance [:environment, :load_config]
+
+Rake::Task['db:test:clone_structure'].clear
+Rake.application.instance_variable_get('@tasks').delete('db:test:clone_structure')
+namespace :db do
+  namespace :test do
+    desc "Prepare test db by migrating"
+    task :clone_structure => [:environment, :load_config] do
+	    ActiveRecord::Base.establish_connection(ActiveRecord::Base.configurations['test'])
+	    ActiveRecord::Migrator.migrate(ActiveRecord::Migrator.migrations_path)
+    end
+  end
+end
+
+namespace :db do
+  desc "Drop all tables"
+  task :drop_tables => :environment do
+    conn = ActiveRecord::Base.connection
+    tables = conn.execute("show tables").map { |r| r[0] }
+    #tables.delete "schema_migrations"
+    tables.each { |t| conn.execute("DROP TABLE #{t}") }
+  end
+end

data/spec/demo/app/assets/javascripts/application.js

@@ -5,10 +5,10 @@
 // or vendor/assets/javascripts of plugins, if any, can be referenced here using a relative path.
 //
 // It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
-// the compiled file.
+// compiled file.
 //
-// WARNING: THE FIRST BLANK LINE MARKS THE END OF WHAT'S TO BE PROCESSED, ANY BLANK LINE SHOULD
-// GO AFTER THE REQUIRES BELOW.
+// Read Sprockets README (https://github.com/sstephenson/sprockets#sprockets-directives) for details
+// about supported directives.
 //
 //= require jquery
 //= require jquery_ujs

data/spec/demo/app/controllers/application_controller.rb

@@ -1,3 +1,8 @@
 class ApplicationController < ActionController::Base
-  protect_from_forgery
+  # Prevent CSRF attacks by raising an exception.
+  # For APIs, you may want to use :null_session instead.
+  protect_from_forgery with: :exception
+
+  attr_accessor :current_user
+
 end

data/spec/demo/app/controllers/users_controller.rb

@@ -0,0 +1,5 @@
+class UsersController < ApplicationController
+
+	include Kojac::ControllerOpMethods
+
+end

data/spec/demo/app/models/user.rb

@@ -0,0 +1,36 @@
+class User < ActiveRecord::Base
+
+	include Concentric::Model
+	include ::Kojac::ModelMethods
+
+	PUBLIC_FIELDS = [
+		:first_name,
+		:last_name,
+	]
+
+	PRIVATE_FIELDS = [
+		:email,
+		:middle_names,
+		:dob
+	]
+
+	ADMIN_FIELDS = [
+		:ring
+	]
+
+	READ_ONLY_FIELDS = [
+		:id,
+		:owner_id,
+		:created_at,
+		:updated_at
+	]
+
+ 	ALL_FIELDS = PUBLIC_FIELDS + PRIVATE_FIELDS + ADMIN_FIELDS + READ_ONLY_FIELDS
+
+	ring :user, :read => PUBLIC_FIELDS
+	#ring :user, :write => []
+
+	ring :admin, :read => ALL_FIELDS
+	ring :admin, :write => PUBLIC_FIELDS + PRIVATE_FIELDS + ADMIN_FIELDS
+
+end

data/spec/demo/app/policies/user_policy.rb

@@ -0,0 +1,42 @@
+class UserPolicy < KojacBasePolicy
+
+	def is_self?
+		user.id == record.id
+	end
+
+	def query_ring
+		user.ring
+	end
+
+	def write?
+	  return user.ring <= ADMIN_RING if @record==User
+	  raise "Bad record given" unless record.is_a? User
+	  return ((user.ring <= SYSADMIN_RING) || is_self? || (
+		  (user.ring <= record.ring) && (
+				(user.ring <= ADMIN_RING) && (!user.owner_id || (record.owner_id == user.owner_id))
+			)
+	  ))
+  end
+
+	def permitted_attributes(aAbility=nil)
+		case aAbility
+			when :write
+				return [] unless write?
+			when :read
+				return [] unless read?
+		end
+
+		result = super(aAbility)
+
+		if is_self? && user.ring <= USER_RING
+			case aAbility
+				when :write
+					result = (result | (User::PUBLIC_FIELDS + User::PRIVATE_FIELDS)).sort
+				when :read
+					result = (result | (User::PRIVATE_FIELDS)).sort
+			end
+		end
+		result
+	end
+
+end

data/spec/demo/bin/bundle

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../../Gemfile', __FILE__)
+load Gem.bin_path('bundler', 'bundle')

data/spec/demo/bin/rails

@@ -0,0 +1,4 @@
+#!/usr/bin/env ruby
+APP_PATH = File.expand_path('../../config/application',  __FILE__)
+require_relative '../config/boot'
+require 'rails/commands'

data/spec/demo/bin/rake

@@ -0,0 +1,4 @@
+#!/usr/bin/env ruby
+require_relative '../config/boot'
+require 'rake'
+Rake.application.run

data/spec/demo/config.ru

@@ -1,4 +1,4 @@
 # This file is used by Rack-based servers to start the application.
 
 require ::File.expand_path('../config/environment',  __FILE__)
-run Demo::Application
+run Rails.application

data/spec/demo/config/application.rb

@@ -1,15 +1,20 @@
 require File.expand_path('../boot', __FILE__)
 
-# Pick the frameworks you want:
-require "active_record/railtie"
-require "action_controller/railtie"
-require "action_mailer/railtie"
-require "active_resource/railtie"
-require "sprockets/railtie"
-# require "rails/test_unit/railtie"
+require 'rails/all'
 
-Bundler.require(*Rails.groups)
-require "kojac"
+# Require the gems listed in Gemfile, including any gems
+# you've limited to :test, :development, or :production.
+Dir[File.expand_path('../../lib/*.rb', __FILE__)].each do |f|
+	require f
+end
+Bundler.require(:default, Rails.env)
+
+if appyml = YAML.load(File.read(File.expand_path('../application.yml', __FILE__))) rescue nil
+	appyml.merge! appyml.fetch(Rails.env, {})
+	CONFIG = appyml.symbolize_keys
+else
+	CONFIG = {}
+end
 
 module Demo
   class Application < Rails::Application
@@ -17,16 +22,6 @@ module Demo
     # Application configuration should go into files in config/initializers
     # -- all .rb files in that directory are automatically loaded.
 
-    # Custom directories with classes and modules you want to be autoloadable.
-    # config.autoload_paths += %W(#{config.root}/extras)
-
-    # Only load the plugins named here, in the order given (default is alphabetical).
-    # :all can be used as a placeholder for all plugins not explicitly named.
-    # config.plugins = [ :exception_notification, :ssl_requirement, :all ]
-
-    # Activate observers that should always be running.
-    # config.active_record.observers = :cacher, :garbage_collector, :forum_observer
-
     # Set Time.zone default to the specified zone and make Active Record auto-convert to this zone.
     # Run "rake -D time" for a list of tasks for finding time zone names. Default is UTC.
     # config.time_zone = 'Central Time (US & Canada)'
@@ -34,32 +29,5 @@ module Demo
     # The default locale is :en and all translations from config/locales/*.rb,yml are auto loaded.
     # config.i18n.load_path += Dir[Rails.root.join('my', 'locales', '*.{rb,yml}').to_s]
     # config.i18n.default_locale = :de
-
-    # Configure the default encoding used in templates for Ruby 1.9.
-    config.encoding = "utf-8"
-
-    # Configure sensitive parameters which will be filtered from the log file.
-    config.filter_parameters += [:password]
-
-    # Enable escaping HTML in JSON.
-    config.active_support.escape_html_entities_in_json = true
-
-    # Use SQL instead of Active Record's schema dumper when creating the database.
-    # This is necessary if your schema can't be completely dumped by the schema dumper,
-    # like if you have constraints or database-specific column types
-    # config.active_record.schema_format = :sql
-
-    # Enforce whitelist mode for mass assignment.
-    # This will create an empty whitelist of attributes available for mass-assignment for all models
-    # in your app. As such, your models will need to explicitly whitelist or blacklist accessible
-    # parameters by using an attr_accessible or attr_protected declaration.
-    config.active_record.whitelist_attributes = true
-
-    # Enable the asset pipeline
-    config.assets.enabled = true
-
-    # Version of your assets, change this if you want to expire all your assets
-    config.assets.version = '1.0'
   end
 end
-

data/spec/demo/config/application.yml

@@ -0,0 +1,4 @@
+log_db_to_stdout: true
+force_debug: true
+dont_send_real_emails: true
+host: localhost

data/spec/demo/config/boot.rb

@@ -1,10 +1,4 @@
-require 'rubygems'
-gemfile = File.expand_path('../../../../Gemfile', __FILE__)
+# Set up gems listed in the Gemfile.
+ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../../Gemfile', __FILE__)
 
-if File.exist?(gemfile)
-  ENV['BUNDLE_GEMFILE'] = gemfile
-  require 'bundler'
-  Bundler.setup
-end
-
-$:.unshift File.expand_path('../../../../lib', __FILE__)
+require 'bundler/setup' if File.exists?(ENV['BUNDLE_GEMFILE'])

data/spec/demo/config/database.yml

@@ -3,7 +3,7 @@
 #
 #   Ensure the SQLite 3 gem is defined in your Gemfile
 #   gem 'sqlite3'
-development:
+development: &development
   adapter: sqlite3
   database: db/development.sqlite3
   pool: 5
@@ -12,14 +12,14 @@ development:
 # Warning: The database defined as "test" will be erased and
 # re-generated from your development database when you run "rake".
 # Do not set this db to the same as development or production.
-test:
+test: &test
   adapter: sqlite3
   database: db/test.sqlite3
   pool: 5
   timeout: 5000
 
 production:
-  adapter: sqlite3
-  database: db/production.sqlite3
-  pool: 5
-  timeout: 5000
+  <<: *development
+  username: root
+  password:
+

data/spec/demo/config/environment.rb

@@ -1,5 +1,7 @@
-# Load the rails application
+# Load the Rails application.
 require File.expand_path('../application', __FILE__)
 
-# Initialize the rails application
+ActiveRecord::Base.logger=Logger.new($stdout) if CONFIG[:log_db_to_stdout]==true
+
+# Initialize the Rails application.
 Demo::Application.initialize!

data/spec/demo/config/environments/development.rb

@@ -1,37 +1,29 @@
 Demo::Application.configure do
-  # Settings specified here will take precedence over those in config/application.rb
+  # Settings specified here will take precedence over those in config/application.rb.
 
   # In the development environment your application's code is reloaded on
   # every request. This slows down response time but is perfect for development
   # since you don't have to restart the web server when you make code changes.
   config.cache_classes = false
 
-  # Log error messages when you accidentally call methods on nil.
-  config.whiny_nils = true
+  # Do not eager load code on boot.
+  config.eager_load = false
 
-  # Show full error reports and disable caching
+  # Show full error reports and disable caching.
   config.consider_all_requests_local       = true
   config.action_controller.perform_caching = false
 
-  # Don't care if the mailer can't send
+  # Don't care if the mailer can't send.
   config.action_mailer.raise_delivery_errors = false
 
-  # Print deprecation notices to the Rails logger
+  # Print deprecation notices to the Rails logger.
   config.active_support.deprecation = :log
 
-  # Only use best-standards-support built into browsers
-  config.action_dispatch.best_standards_support = :builtin
+  # Raise an error on page load if there are pending migrations
+  config.active_record.migration_error = :page_load
 
-  # Raise exception on mass assignment protection for Active Record models
-  config.active_record.mass_assignment_sanitizer = :strict
-
-  # Log the query plan for queries taking more than this (works
-  # with SQLite, MySQL, and PostgreSQL)
-  config.active_record.auto_explain_threshold_in_seconds = 0.5
-
-  # Do not compress assets
-  config.assets.compress = false
-
-  # Expands the lines which load the assets
+  # Debug mode disables concatenation and preprocessing of assets.
+  # This option may cause significant delays in view rendering with a large
+  # number of complex assets.
   config.assets.debug = true
 end

data/spec/demo/config/environments/production.rb

@@ -1,67 +1,80 @@
 Demo::Application.configure do
-  # Settings specified here will take precedence over those in config/application.rb
+  # Settings specified here will take precedence over those in config/application.rb.
 
-  # Code is not reloaded between requests
+  # Code is not reloaded between requests.
   config.cache_classes = true
 
-  # Full error reports are disabled and caching is turned on
+  # Eager load code on boot. This eager loads most of Rails and
+  # your application in memory, allowing both thread web servers
+  # and those relying on copy on write to perform better.
+  # Rake tasks automatically ignore this option for performance.
+  config.eager_load = true
+
+  # Full error reports are disabled and caching is turned on.
   config.consider_all_requests_local       = false
   config.action_controller.perform_caching = true
 
-  # Disable Rails's static asset server (Apache or nginx will already do this)
+  # Enable Rack::Cache to put a simple HTTP cache in front of your application
+  # Add `rack-cache` to your Gemfile before enabling this.
+  # For large-scale production use, consider using a caching reverse proxy like nginx, varnish or squid.
+  # config.action_dispatch.rack_cache = true
+
+  # Disable Rails's static asset server (Apache or nginx will already do this).
   config.serve_static_assets = false
 
-  # Compress JavaScripts and CSS
-  config.assets.compress = true
+  # Compress JavaScripts and CSS.
+  config.assets.js_compressor = :uglifier
+  # config.assets.css_compressor = :sass
 
-  # Don't fallback to assets pipeline if a precompiled asset is missed
+  # Do not fallback to assets pipeline if a precompiled asset is missed.
   config.assets.compile = false
 
-  # Generate digests for assets URLs
+  # Generate digests for assets URLs.
   config.assets.digest = true
 
-  # Defaults to nil and saved in location specified by config.assets.prefix
-  # config.assets.manifest = YOUR_PATH
+  # Version of your assets, change this if you want to expire all your assets.
+  config.assets.version = '1.0'
 
-  # Specifies the header that your server uses for sending files
+  # Specifies the header that your server uses for sending files.
   # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for apache
   # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
   # config.force_ssl = true
 
-  # See everything in the log (default is :info)
-  # config.log_level = :debug
+  # Set to :debug to see everything in the log.
+  config.log_level = :info
 
-  # Prepend all log lines with the following tags
+  # Prepend all log lines with the following tags.
   # config.log_tags = [ :subdomain, :uuid ]
 
-  # Use a different logger for distributed setups
+  # Use a different logger for distributed setups.
   # config.logger = ActiveSupport::TaggedLogging.new(SyslogLogger.new)
 
-  # Use a different cache store in production
+  # Use a different cache store in production.
   # config.cache_store = :mem_cache_store
 
-  # Enable serving of images, stylesheets, and JavaScripts from an asset server
+  # Enable serving of images, stylesheets, and JavaScripts from an asset server.
   # config.action_controller.asset_host = "http://assets.example.com"
 
-  # Precompile additional assets (application.js, application.css, and all non-JS/CSS are already added)
+  # Precompile additional assets.
+  # application.js, application.css, and all non-JS/CSS in app/assets folder are already added.
   # config.assets.precompile += %w( search.js )
 
-  # Disable delivery errors, bad email addresses will be ignored
+  # Ignore bad email addresses and do not raise email delivery errors.
+  # Set this to true and configure the email server for immediate delivery to raise delivery errors.
   # config.action_mailer.raise_delivery_errors = false
 
-  # Enable threaded mode
-  # config.threadsafe!
-
   # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
-  # the I18n.default_locale when a translation can not be found)
+  # the I18n.default_locale when a translation can not be found).
   config.i18n.fallbacks = true
 
-  # Send deprecation notices to registered listeners
+  # Send deprecation notices to registered listeners.
   config.active_support.deprecation = :notify
 
-  # Log the query plan for queries taking more than this (works
-  # with SQLite, MySQL, and PostgreSQL)
-  # config.active_record.auto_explain_threshold_in_seconds = 0.5
+  # Disable automatic flushing of the log to improve performance.
+  # config.autoflush_log = false
+
+  # Use default logging formatter so that PID and timestamp are not suppressed.
+  config.log_formatter = ::Logger::Formatter.new
 end