muck-profiles 0.1.0

data/test/rails_root/public/stylesheets/styles.css

@@ -0,0 +1,79 @@
+/* forms */
+input{margin:0 10px 5px 0;padding:4px;font-size:1.3em;}
+input[type="text"],input[type="password"]{border:1px solid #8f8685;}
+input[type="checkbox"]{border:none;margin-bottom:0px;}
+input[type="radio"]{border:none;}
+textarea{font-size:1.4em;margin:0 10px 0 0;padding:4px;border:1px solid #8f8685;}
+label{font-size:1.5em;font-weight:bold;margin:0 10px 5px 0;padding:0px;display:block;}
+form em{color:#b61e12;font-style:normal;font-size:90%;}
+form hr{border:1px solid #e3e0c3;height:1px;margin:15px 0;}
+fieldset span.var{margin:2px 5px 5px 18px;display:block;}
+fieldset{border:none;margin:0;padding:0;}
+form fieldset{margin:0 0 2px;padding:0px;}
+form fieldset input[type="text"],form fieldset input[type="password"]{width:500px;}
+.common-form{width:500px;margin:40px auto;}
+.common-form h1{font-size:1.8em;}
+.form-item{float:left;}
+.common-content{width:500px;margin:40px auto;font-size:1.2em;color:#555;}
+.button-link {background-color:transparent;border-top-width: 0px;border-left-width: 0px;border-right-width: 0px;border-bottom-width: 0px;}
+
+/*images*/
+.icon{width:50px;height:50px;}
+.thumb{width:100px;height:100px;}
+.medium{width:300px;height:300px;}
+
+/* tips */
+.availability{color:#b61e12;}
+.hidden-tips{display:none;}
+.required-tip{color:#555555;font-size:1.2em;margin:0pt;font-weight:bolder;height:0px;}
+.tip{position:absolute;z-index:100;border:2px solid #CCCCCC;background-color:#fff;width:400px;}
+#tip-title{font-size:1.1em;background-color:#CCCCCC;text-align:left;padding:2px 0px 5px 8px;font-weight:bold;}
+#tip-main{padding:10px;color:#333333;}
+#tip-main p,#tip-main ul{font-size:1.3em;}
+#tip-main p{margin:3px 0;}
+#tip-header{position:absolute;z-index:101;background-repeat:no-repeat;}
+.tip-content{width:100%;}
+.top-tip{margin:0px 0px 12px 0px;}
+.top-tip #tip-header{background-image:url(/images/arrow_down.gif);height:10px;width:23px;}
+.left-tip{margin-right:12px;}
+.left-tip #tip-header{background-image:url(/images/arrow_right.gif);height:23px;width:11px;top:-2px;left:12px;background-position:right top;width:100%;}
+.bottom-tip{margin:12px 0px 0px 0px;}
+.bottom-tip #tip-header{background-image:url(/images/arrow_up.gif);left:0px;height:10px;width:23px;top:-12px;}
+.right-tip{margin:1px 0px 0px 12px;}
+.right-tip #tip-header{background-image:url(/images/arrow_left.gif);left:-12px;height:23px;width:10px;top:-3px;}
+.bottom-tip #tip-header, .right-tip #tip-header{background-position:left top;}
+
+/*jGrowl*/
+div.jGrowl{padding:10px;z-index:9999;}
+/** Special IE6 Style Positioning **/
+div.ie6{position:absolute;}
+div.ie6.top-right{right:auto;bottom:auto;left:expression( ( 0 - jGrowl.offsetWidth + ( document.documentElement.clientWidth ? document.documentElement.clientWidth :document.body.clientWidth ) + ( ignoreMe2 = document.documentElement.scrollLeft ? document.documentElement.scrollLeft :document.body.scrollLeft ) ) + 'px' );top:expression( ( 0 + ( ignoreMe = document.documentElement.scrollTop ? document.documentElement.scrollTop :document.body.scrollTop ) ) + 'px' );}
+div.ie6.top-left{left:expression( ( 0 + ( ignoreMe2 = document.documentElement.scrollLeft ? document.documentElement.scrollLeft :document.body.scrollLeft ) ) + 'px' );top:expression( ( 0 + ( ignoreMe = document.documentElement.scrollTop ? document.documentElement.scrollTop :document.body.scrollTop ) ) + 'px' );}
+div.ie6.bottom-right{left:expression( ( 0 - jGrowl.offsetWidth + ( document.documentElement.clientWidth ? document.documentElement.clientWidth :document.body.clientWidth ) + ( ignoreMe2 = document.documentElement.scrollLeft ? document.documentElement.scrollLeft :document.body.scrollLeft ) ) + 'px' );top:expression( ( 0 - jGrowl.offsetHeight + ( document.documentElement.clientHeight ? document.documentElement.clientHeight :document.body.clientHeight ) + ( ignoreMe = document.documentElement.scrollTop ? document.documentElement.scrollTop :document.body.scrollTop ) ) + 'px' );}
+div.ie6.bottom-left{left:expression( ( 0 + ( ignoreMe2 = document.documentElement.scrollLeft ? document.documentElement.scrollLeft :document.body.scrollLeft ) ) + 'px' );top:expression( ( 0 - jGrowl.offsetHeight + ( document.documentElement.clientHeight ? document.documentElement.clientHeight :document.body.clientHeight ) + ( ignoreMe = document.documentElement.scrollTop ? document.documentElement.scrollTop :document.body.scrollTop ) ) + 'px' );}
+div.ie6.center{left:expression( ( 0 + ( ignoreMe2 = document.documentElement.scrollLeft ? document.documentElement.scrollLeft :document.body.scrollLeft ) ) + 'px' );top:expression( ( 0 + ( ignoreMe = document.documentElement.scrollTop ? document.documentElement.scrollTop :document.body.scrollTop ) ) + 'px' );width:100%;}
+/** Normal Style Positions **/
+body > div.jGrowl{position:fixed;}
+body > div.jGrowl.top-left{left:0px;top:0px;}
+body > div.jGrowl.top-right{right:0px;top:0px;}
+body > div.jGrowl.bottom-left{left:0px;bottom:0px;}
+body > div.jGrowl.bottom-right{right:0px;bottom:0px;}
+body > div.jGrowl.center{top:0px;width:50%;left:25%;}
+/** Cross Browser Styling **/
+div.center div.jGrowl-notification,div.center div.jGrowl-closer{margin-left:auto;margin-right:auto;}
+div.jGrowl div.jGrowl-notification,div.jGrowl div.jGrowl-closer{background-color:#F0F7F9;color:#000;opacity:.95;filter:alpha(opacity = 95);zoom:1;width:550px;padding:10px;margin-top:5px;margin-bottom:5px;font-size:1.5em;text-align:left;display:none;-moz-border-radius:5px;-webkit-border-radius:5px;border:solid 3px #555;}
+div.jGrowl div.jGrowl-notification{min-height:40px;}
+div.jGrowl div.jGrowl-notification div.header{font-weight:bold;font-size:1.6em;}
+div.jGrowl div.jGrowl-notification div.close{float:right;font-weight:bold;font-size:2em;cursor:pointer;color:#555;}
+div.jGrowl div.jGrowl-notification div.close:hover{color:#ccc;}
+div.jGrowl div.jGrowl-closer{height:15px;padding-top:4px;padding-bottom:4px;cursor:pointer;font-size:11px;font-weight:bold;text-align:center;}
+div.jGrowl div.jGrowl-notification .notice, div.jGrowl div.jGrowl-notification .error, div.jGrowl div.jGrowl-notification .success{background:none;border:none;}
+div.jGrowl div.jGrowl-notification h2{text-align:left;font-weight:bold;padding:5px 5px 5px 15px;font-size:1.1em;}
+
+/* Errors */
+.help-box{font-size:1.2em;color:#555;}
+.fieldWithErrors input{border:solid 2px #B61E12;}
+#errorExplanation{padding:7px;padding-bottom:12px;margin-bottom:20px;}
+#errorExplanation h2{text-align:left;font-weight:bold;padding:5px 5px 5px 15px;font-size:16px;background-color:#B61E12;color:#fff;}
+#errorExplanation p{color:#333;margin-bottom:0;padding:5px;}
+#errorExplanation ul li{list-style:square;}

data/test/rails_root/public/stylesheets/themes/blue/styles.css

@@ -0,0 +1 @@
+/*Add styles specific to your theme here*/

data/test/rails_root/public/stylesheets/themes/red/styles.css

@@ -0,0 +1 @@
+/*Add styles specific to your theme here*/

data/test/rails_root/script/about

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../config/boot'
+require 'commands/about'

data/test/rails_root/script/breakpointer

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../config/boot'
+require 'commands/breakpointer'

data/test/rails_root/script/console

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../config/boot'
+require 'commands/console'

data/test/rails_root/script/create_project.rb

@@ -0,0 +1,52 @@
+#!/usr/bin/env ruby
+require 'rubygems'
+require 'activesupport'
+require 'pathname'
+
+project_name = ARGV[0]
+fail("Usage:  #{File.basename(__FILE__)} new_project_name")     unless project_name
+fail("Project name must only contain [a-z0-9_]")                unless project_name =~ /^[a-z0-9_]+$/
+
+base_directory = Pathname.new(File.join(File.dirname(__FILE__), '..', '..')).realpath
+project_directory = base_directory + project_name
+fail("Project directory (#{project_directory}) already exists") if project_directory.exist?
+
+template_url = "git@github.com:thoughtbot/rails-template.git"
+changeme = "CHANGEME"
+
+def run(cmd)
+  puts "Running '#{cmd}'"
+  out = `#{cmd}`
+  if $? != 0 
+    fail "Command #{cmd} failed: #$?\n#{out}" 
+  end
+  out
+end
+
+def search_and_replace(file, search, replace)
+  if File.file?(file)
+    contents = File.read(file)
+    if contents[search]
+      puts "Replacing #{search} with #{replace} in #{file}"
+      contents.gsub!(search, replace)
+      File.open(file, "w") { |f| f << contents }
+    end
+  end
+end
+
+run("mkdir #{project_directory}")
+Dir.chdir(project_directory) or fail("Couldn't change to #{project_directory}")
+run("git init")
+run("git remote add template #{template_url}")
+run("git pull template master")
+
+Dir.glob("#{project_directory}/**/*").each do |file|
+  search_and_replace(file, changeme, project_name)
+end
+
+run("git commit -a -m 'Initial commit'")
+
+puts
+puts "Now login to github and add a new project named '#{project_name.humanize.titleize}'"
+
+

data/test/rails_root/script/cucumber

@@ -0,0 +1,7 @@
+#!/usr/bin/env ruby
+begin
+  load File.expand_path(File.dirname(__FILE__) + "/../vendor/plugins/cucumber/bin/cucumber")
+rescue LoadError
+  require "rubygems"
+  load File.join(Gem.bindir, "cucumber")
+end

data/test/rails_root/script/dbconsole

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../config/boot'
+require 'commands/dbconsole'

data/test/rails_root/script/destroy

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../config/boot'
+require 'commands/destroy'

data/test/rails_root/script/generate

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../config/boot'
+require 'commands/generate'

data/test/rails_root/script/performance/benchmarker

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../../config/boot'
+require 'commands/performance/benchmarker'

data/test/rails_root/script/performance/profiler

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../../config/boot'
+require 'commands/performance/profiler'

data/test/rails_root/script/performance/request

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../../config/boot'
+require 'commands/performance/request'

data/test/rails_root/script/plugin

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../config/boot'
+require 'commands/plugin'

data/test/rails_root/script/process/inspector

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../../config/boot'
+require 'commands/process/inspector'

data/test/rails_root/script/process/reaper

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../../config/boot'
+require 'commands/process/reaper'

data/test/rails_root/script/process/spawner

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../../config/boot'
+require 'commands/process/spawner'

data/test/rails_root/script/runner

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../config/boot'
+require 'commands/runner'

data/test/rails_root/script/server

@@ -0,0 +1,3 @@
+#!/usr/bin/env ruby
+require File.dirname(__FILE__) + '/../config/boot'
+require 'commands/server'

data/test/rails_root/test/factories.rb

@@ -0,0 +1,56 @@
+Factory.sequence :email do |n|
+  "somebody#{n}@example.com"
+end
+
+Factory.sequence :login do |n|
+  "inquire#{n}"
+end
+
+Factory.sequence :name do |n|
+  "a_name#{n}"
+end
+
+Factory.sequence :abbr do |n|
+  "abbr#{n}"
+end
+
+Factory.sequence :description do |n|
+  "This is the description: #{n}"
+end
+
+Factory.define :state do |f|
+  f.name { Factory.next(:name) }
+  f.abbreviation { Factory.next(:abbr) }
+  f.country {|a| a.association(:country) }
+end
+
+Factory.define :country do |f|
+  f.name { Factory.next(:name) }
+  f.abbreviation { Factory.next(:abbr) }
+end
+
+Factory.define :user do |f|
+  f.login { Factory.next(:login) }
+  f.email { Factory.next(:email) }
+  f.password 'inquire_pass'
+  f.password_confirmation 'inquire_pass'
+  f.first_name 'test'
+  f.last_name 'guy'
+  f.terms_of_service true
+  f.activated_at DateTime.now
+end
+
+Factory.define :content_page do |f|
+  f.creator {|a| a.association(:user)}
+  f.title { Factory.next(:name) }
+  f.body_raw { Factory.next(:description) }
+end
+
+Factory.define :permission do |f|
+  f.role {|a| a.association(:role)}
+  f.user {|a| a.association(:user)}
+end
+
+Factory.define :role do |f|
+  f.rolename 'administrator'
+end

data/test/rails_root/test/functional/admin/profiles_controller_test.rb

@@ -0,0 +1,30 @@
+require File.dirname(__FILE__) + '/../../test_helper'
+
+class Admin::Muck::ProfilesControllerTest < ActionController::TestCase
+
+  tests Admin::Muck::ProfilesController
+
+  should_require_login :edit => :get
+  should_require_role(:admin, '/login', :index)
+  
+  context "logged in as admin" do
+    
+    setup do
+      @admin = Factory(:user)
+      @admin_role = Factory(:role, :rolename => 'administrator')
+      @admin.roles << @admin_role
+      activate_authlogic
+      login_as @admin
+    end
+    
+    context "GET edit" do
+      setup do
+        get :edit
+      end
+      should_respond_with :success
+      should_render_template :edit
+    end
+
+  end
+
+end

data/test/rails_root/test/functional/profiles_controller_test.rb

@@ -0,0 +1,16 @@
+require File.dirname(__FILE__) + '/../test_helper'
+
+class Muck::ProfilesControllerTest < ActionController::TestCase
+
+  tests Muck::ProfilesController
+
+  context "GET show" do
+    setup do
+      @user = Factory(:user)
+      get :show, :id => @user.to_param
+    end
+    should_respond_with :success
+    should_render_template :show
+  end
+
+end

data/test/rails_root/test/shoulda_macros/controller.rb

@@ -0,0 +1,45 @@
+module MuckControllerMacros
+
+  def should_require_login(*args)
+    args = Hash[*args]
+    login_url = args.delete :login_url
+    args.each do |action, verb|
+      should "Require login for '#{action}' action" do
+        send(verb, action)
+        assert_redirected_to(login_url)
+      end
+    end
+  end
+
+  def should_require_role(role, redirect_url, *actions)
+    actions.each do |action|
+      should "require role for '#{action}' action" do
+        get(action)
+        ensure_flash(/permission/i)
+        assert_response :redirect
+      end
+    end
+  end
+  
+  #from: http://blog.internautdesign.com/2008/9/11/more-on-custom-shoulda-macros-scoping-of-instance-variables
+  def should_not_allow action, object, url= "/login", msg=nil
+    msg ||= "a #{object.class.to_s.downcase}" 
+    should "not be able to #{action} #{msg}" do
+      object = eval(object, self.send(:binding), __FILE__, __LINE__)
+      get action, :id => object.id
+      assert_redirected_to url
+    end
+  end
+
+  def should_allow action, object, msg=nil
+    msg ||= "a #{object.class.to_s.downcase}" 
+    should "be able to #{action} #{msg}" do
+      object = eval(object, self.send(:binding), __FILE__, __LINE__)
+      get action, :id => object.id
+      assert_response :success
+    end
+  end
+
+end
+
+ActionController::TestCase.extend(MuckControllerMacros)

data/test/rails_root/test/shoulda_macros/models.rb

@@ -0,0 +1,50 @@
+module ShouldaModelMacros
+
+  def self.should_whitelist(*attributes)
+    bad_scripts = [
+      %|';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>|,
+      %|'';!--"<XSS>=&{()}|,
+      %|<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>|,
+      %|<IMG SRC="javascript:alert('XSS');">|,
+      %|<IMG SRC=javascript:alert('XSS')>|,
+      %|<IMG SRC=JaVaScRiPt:alert('XSS')>|,
+      %|<IMG SRC=JaVaScRiPt:alert('XSS')>|,
+      %|<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>|,
+      %|<IMG """><SCRIPT>alert("XSS")</SCRIPT>">|,
+      %|<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>|,
+      %|<A HREF="h
+      tt	p://6&#9;6.000146.0x7.147/">XSS</A>|,
+      %|<script>alert('message');</script>| ]
+      
+    klass = model_class
+    attributes.each do |attribute|
+      attribute = attribute.to_sym
+      should "white list #{attribute}" do
+        assert object = klass.find(:first), "Can't find first #{klass}"
+        bad_scripts.each do |bad_value|
+          object.send("#{attribute}=", bad_value)
+          object.save
+          clean_value = object.send("#{attribute}")
+          assert !clean_value.include?(bad_value), "#{attribute} is not white listed. #{bad_value} made it through"
+        end
+      end
+    end
+  end
+
+  def should_accept_nested_attributes_for(*attr_names)
+    klass = self.name.gsub(/Test$/, '').constantize
+ 
+    context "#{klass}" do
+      attr_names.each do |association_name|
+        should "accept nested attrs for #{association_name}" do
+          assert  klass.instance_methods.include?("#{association_name}_attributes="),
+                  "#{klass} does not accept nested attributes for #{association_name}"
+        end
+      end
+    end
+  end
+end
+
+class ActiveSupport::TestCase
+  extend ShouldaModelMacros
+end