ncs_navigator_authority 0.0.2

data/spec/fixtures/vcr_cassettes/staff_portal/psc/users_by_last_name.yml

@@ -0,0 +1,34 @@
+--- 
+- !ruby/struct:VCR::HTTPInteraction 
+  request: !ruby/struct:VCR::Request 
+    method: :get
+    uri: https://psc_application:psc_application@staffportal.local/users.json?last_name=Palbo
+    body: 
+    headers: 
+      authorization: 
+      - Basic cHNjX2FwcGxpY2F0aW9uOnBzY19hcHBsaWNhdGlvbg==
+  response: !ruby/struct:VCR::Response 
+    status: !ruby/struct:VCR::ResponseStatus 
+      code: 200
+      message: OK
+    headers: 
+      x-ua-compatible: 
+      - IE=Edge
+      etag: 
+      - "\"33bac0b7c6ebd02d6dafec00470c8b01\""
+      content-type: 
+      - application/json; charset=utf-8
+      x-runtime: 
+      - "0.164258"
+      server: 
+      - WEBrick/1.3.1 (Ruby/1.8.7/2011-02-18)
+      date: 
+      - Tue, 13 Mar 2012 21:35:32 GMT
+      content-length: 
+      - "505"
+      set-cookie: 
+      - _OMA_session=BAh7ByIZYWtlci5sYXN0X3JlcXVlc3RfYXRsKwekvV9PIg9zZXNzaW9uX2lkIiU0ZWJjOTIxNTY0OGI5YTgzMDdkNTJhNGNhYjRhM2M3OA%3D%3D--27298574ac00c0e2f59c215c49a2c2b6b74faebb; path=/; HttpOnly
+      cache-control: 
+      - max-age=0, private, must-revalidate
+    body: "[{\"notify\":true,\"study_center\":20000029,\"roles\":[{\"name\":\"Field Staff\"},{\"name\":\"Outreach Staff\"}],\"ncs_inactive_date\":null,\"staff_type_other\":null,\"ethnicity\":null,\"staff_id\":\"5de404f5-9c37-4d92-8f2a-30041400ba06\",\"zipcode\":null,\"numeric_id\":1885042269,\"race_other\":null,\"username\":\"outreach\",\"gender\":null,\"external\":false,\"staff_type\":null,\"languages\":[],\"last_name\":\"Palbo\",\"subcontractor\":null,\"race\":null,\"experience\":null,\"email\":\"nolan_palbo@test.com\",\"first_name\":\"Nolan\",\"ncs_active_date\":null}]"
+    http_version: "1.1"

data/spec/fixtures/vcr_cassettes/staff_portal/psc/users_by_last_or_user_name.yml

@@ -0,0 +1,34 @@
+--- 
+- !ruby/struct:VCR::HTTPInteraction 
+  request: !ruby/struct:VCR::Request 
+    method: :get
+    uri: https://psc_application:psc_application@staffportal.local/users.json?username=gd123&operator=OR&last_name=Palbo
+    body: 
+    headers: 
+      authorization: 
+      - Basic cHNjX2FwcGxpY2F0aW9uOnBzY19hcHBsaWNhdGlvbg==
+  response: !ruby/struct:VCR::Response 
+    status: !ruby/struct:VCR::ResponseStatus 
+      code: 200
+      message: OK
+    headers: 
+      x-ua-compatible: 
+      - IE=Edge
+      etag: 
+      - "\"9480eca2433582026080ff7c71e9fc0a\""
+      content-type: 
+      - application/json; charset=utf-8
+      x-runtime: 
+      - "0.083331"
+      server: 
+      - WEBrick/1.3.1 (Ruby/1.8.7/2011-02-18)
+      date: 
+      - Wed, 14 Mar 2012 17:53:56 GMT
+      content-length: 
+      - "996"
+      set-cookie: 
+      - _OMA_session=BAh7ByIZYWtlci5sYXN0X3JlcXVlc3RfYXRsKwc022BPIg9zZXNzaW9uX2lkIiUxNmVlZDk4OGZlYzlmZGVhMTdhNzQyYTA2MTAyNjU2Mw%3D%3D--cc07514dceefc84282085682a1c32f227f7f0af6; path=/; HttpOnly
+      cache-control: 
+      - max-age=0, private, must-revalidate
+    body: "[{\"notify\":true,\"study_center\":20000029,\"roles\":[{\"name\":\"Field Staff\"},{\"name\":\"Outreach Staff\"}],\"ncs_inactive_date\":null,\"staff_type_other\":null,\"ethnicity\":null,\"staff_id\":\"5de404f5-9c37-4d92-8f2a-30041400ba06\",\"zipcode\":null,\"numeric_id\":1885042269,\"race_other\":null,\"username\":\"outreach\",\"gender\":null,\"external\":false,\"staff_type\":null,\"languages\":[],\"last_name\":\"Palbo\",\"subcontractor\":null,\"race\":null,\"experience\":null,\"email\":\"nolan_palbo@test.com\",\"first_name\":\"Nolan\",\"ncs_active_date\":null},{\"notify\":true,\"study_center\":20000029,\"roles\":[{\"name\":\"Administrative Staff\"}],\"ncs_inactive_date\":\"2011-12-21\",\"staff_type_other\":null,\"ethnicity\":null,\"staff_id\":\"c1b46c80-0c24-460d-ae89-343aadc7ac68\",\"zipcode\":null,\"numeric_id\":1000943389,\"race_other\":null,\"username\":\"gd123\",\"gender\":null,\"external\":true,\"staff_type\":null,\"languages\":[],\"last_name\":\"Devan\",\"subcontractor\":null,\"race\":null,\"experience\":null,\"email\":\"grace_devan@test.com\",\"first_name\":\"Grace\",\"ncs_active_date\":null}]"
+    http_version: "1.1"

data/spec/fixtures/vcr_cassettes/staff_portal/psc/users_by_role.yml

@@ -0,0 +1,34 @@
+--- 
+- !ruby/struct:VCR::HTTPInteraction 
+  request: !ruby/struct:VCR::Request 
+    method: :get
+    uri: https://psc_application:psc_application@staffportal.local/users.json?role%5B%5D=Field%20Staff&role%5B%5D=Phone%20Staff
+    body: 
+    headers: 
+      authorization: 
+      - Basic cHNjX2FwcGxpY2F0aW9uOnBzY19hcHBsaWNhdGlvbg==
+  response: !ruby/struct:VCR::Response 
+    status: !ruby/struct:VCR::ResponseStatus 
+      code: 200
+      message: OK
+    headers: 
+      x-ua-compatible: 
+      - IE=Edge
+      etag: 
+      - "\"59c92e159922355929ebc5d1e6250f07\""
+      content-type: 
+      - application/json; charset=utf-8
+      x-runtime: 
+      - "0.163889"
+      server: 
+      - WEBrick/1.3.1 (Ruby/1.8.7/2011-02-18)
+      date: 
+      - Tue, 06 Mar 2012 19:28:46 GMT
+      content-length: 
+      - "1005"
+      set-cookie: 
+      - _OMA_session=BAh7ByIZYWtlci5sYXN0X3JlcXVlc3RfYXRsKwduZVZPIg9zZXNzaW9uX2lkIiU0YzBmZWYxMzU3NDljYmI0OTRhMTg1Nzg4ZTc1YzFkMg%3D%3D--74de3cd65976130dd9df4118f7ba156d94661db8; path=/; HttpOnly
+      cache-control: 
+      - max-age=0, private, must-revalidate
+    body: "[{\"notify\":true,\"study_center\":20000029,\"ncs_inactive_date\":null,\"staff_type_other\":null,\"roles\":[{\"name\":\"Field Staff\"},{\"name\":\"Outreach Staff\"}],\"ethnicity\":null,\"staff_id\":\"5de404f5-9c37-4d92-8f2a-30041400ba06\",\"zipcode\":null,\"numeric_id\":1885042269,\"race_other\":null,\"username\":\"outreach\",\"gender\":null,\"external\":false,\"staff_type\":null,\"languages\":[],\"last_name\":\"Palbo\",\"subcontractor\":null,\"race\":null,\"experience\":null,\"email\":\"nolan_palbo@test.com\",\"first_name\":\"Nolan\",\"ncs_active_date\":null},{\"notify\":true,\"study_center\":20000029,\"ncs_inactive_date\":null,\"staff_type_other\":null,\"roles\":[{\"name\":\"Field Staff\"},{\"name\":\"Phone Staff\"},{\"name\":\"System Administrator\"},{\"name\":\"User Administrator\"},{\"name\":\"Staff Supervisor\"},{\"name\":\"Biological Specimen Collector\"}],\"ethnicity\":null,\"staff_id\":\"16912345-ba05-481d-aa80-96e71e1ac9d9\",\"zipcode\":null,\"numeric_id\":960833693,\"race_other\":null,\"username\":\"testuser\",\"gender\":null,\"external\":false,\"staff_type\":null,\"languages\":[],\"last_name\":\"Grant\",\"subcontractor\":null,\"race\":null,\"experience\":null,\"email\":\"perry_grant@test.com\",\"first_name\":\"Perry\",\"ncs_active_date\":null}]"
+    http_version: "1.1"

data/spec/fixtures/vcr_cassettes/staff_portal/psc/users_by_username.yml

@@ -0,0 +1,34 @@
+--- 
+- !ruby/struct:VCR::HTTPInteraction 
+  request: !ruby/struct:VCR::Request 
+    method: :get
+    uri: https://psc_application:psc_application@staffportal.local/users.json?username=gd123
+    body: 
+    headers: 
+      authorization: 
+      - Basic cHNjX2FwcGxpY2F0aW9uOnBzY19hcHBsaWNhdGlvbg==
+  response: !ruby/struct:VCR::Response 
+    status: !ruby/struct:VCR::ResponseStatus 
+      code: 200
+      message: OK
+    headers: 
+      x-ua-compatible: 
+      - IE=Edge
+      etag: 
+      - "\"99d918e8fb17027c7b0740a347ea326c\""
+      content-type: 
+      - application/json; charset=utf-8
+      x-runtime: 
+      - "0.162940"
+      server: 
+      - WEBrick/1.3.1 (Ruby/1.8.7/2011-02-18)
+      date: 
+      - Tue, 13 Mar 2012 21:40:39 GMT
+      content-length: 
+      - "492"
+      set-cookie: 
+      - _OMA_session=BAh7ByIZYWtlci5sYXN0X3JlcXVlc3RfYXRsKwfXvl9PIg9zZXNzaW9uX2lkIiU3MjgwZmI4MDlkMzliM2RhZTdiNDkwY2YwZjk5ZGZjNg%3D%3D--166a76eaed18538e9cf0320da8523bcae5dc6a57; path=/; HttpOnly
+      cache-control: 
+      - max-age=0, private, must-revalidate
+    body: "[{\"notify\":true,\"study_center\":20000029,\"roles\":[{\"name\":\"Administrative Staff\"}],\"ncs_inactive_date\":\"2011-12-21\",\"staff_type_other\":null,\"ethnicity\":null,\"staff_id\":\"c1b46c80-0c24-460d-ae89-343aadc7ac68\",\"zipcode\":null,\"numeric_id\":1000943389,\"race_other\":null,\"username\":\"gd123\",\"gender\":null,\"external\":true,\"staff_type\":null,\"languages\":[],\"last_name\":\"Devan\",\"subcontractor\":null,\"race\":null,\"experience\":null,\"email\":\"grace_devan@test.com\",\"first_name\":\"Grace\",\"ncs_active_date\":null}]"
+    http_version: "1.1"

data/spec/navigator.ini

@@ -0,0 +1,118 @@
+# Sample common configuration for NCS Navigator. By default the suite
+# applications will expect to find a customized version of this file
+# in /etc/nubic/ncs/navigator.ini.
+
+[Study Center]
+# Information about the study center which is using this deployment of
+# NCS Navigator. Each NCS Navigator instance is only for one study
+# center.
+
+# The ID for the study center from the MDES
+sc_id = "20000029"
+
+recruitment_type_id = "3"
+
+# A pointer to a CSV describing the sampling units for this study
+# center.  If the path is not absolute it will be resolved relative to
+# this file.
+#
+# The CSV must have the following header (along with the contents it
+# implies):
+#
+#   PSU_ID, AREA, SSU_ID, SSU_NAME, TSU_ID, TSU_NAME
+#
+# While this format allows for multiple PSUs, NCS Navigator currently
+# only supports one per deployment. This will change in the future
+# when multiple PSUs are active per center.
+#
+# TSU_ID and TSU_NAME may be omitted for centers that are not on
+# Hi-Lo.
+#
+# AREA is an intermediate concept introduced by NCS Navigator. It
+# allows the grouping of one or more SSUs for ease of reporting
+# something (e.g., outreach events) across all of them. If a center
+# doesn't wish to make use of this concept, the AREA should be made
+# the same as the SSU_NAME.
+sampling_units_file = "spec_ssus.csv"
+
+# The name of the institutional user identity used in NCS
+# Navigator. E.g., for the Greater Chicago Study Center, this is the
+# Northwestern NetID. The default is "Username" if nothing is
+# specifed.
+#username = "NetID"
+
+# The absolute path to local files containing logos that should appear
+# on either end of the footer in Staff Portal and Core.
+#footer_logo_left = "/etc/nubic/ncs/logos/sc_20000000L.png"
+#footer_logo_right = "/etc/nubic/ncs/logos/sc_20000000R.png"
+
+# The text that should appear in the center of the footer in Staff
+# Portal and Core. Line breaks in this text will be preserved.
+footer_text = "National Children's Study - Greater Chicago Study Center
+Institute for Healthcare Studies, Feinberg School of Medicine
+Northwestern University
+420 East Superior, 10th Floor
+Chicago, IL 60611"
+
+[Staff Portal]
+# Configuration options which are used by or which describe Staff
+# Portal in this instance of the suite.
+
+# The root URI for Staff Portal.
+uri = "https://staffportal.local/"
+#uri = "http://localhost:3000/"
+
+# The e-mail address from which mail sent by Staff Pportal will
+# appear to come.
+mail_from = "staffportal@greaterchicagoncs.org"
+
+bootstrap_user = test_user
+psc_user_password = "psc_application"
+
+[Core]
+# Configuration options which are used by or which describe NCS
+# Navigator Core in this instance of the suite.
+
+# The root URI for NCS Navigator Core.
+uri = "https://ncsnavigator.local/"
+
+# TODO: add to README
+recruitment_type = "HILI"
+with_specimens = "false"
+
+[PSC]
+# Configuration options which describe PSC as used by this instance of
+# the suite. (For now, PSC's own configuration options must be set
+# through its configuration interfaces.)
+
+# The root URI for PSC.
+uri = "https://ncsn-psc.local/"
+
+[SMTP]
+# Configuration for the SMTP server for MDES Warehouse, Staff Portal,
+# and NCS Navigator Core.
+
+# The hostname or IP of the SMTP server to use to send mail from the
+# suite. Default is localhost.
+#host = "ns.northwestern.edu"
+
+# The port to use to communicate with the SMTP server. Default is 25.
+#port = "25"
+
+# The domain to use in SMTP HELO, if necessary. Default is none.
+#domain =
+
+# The type of authentication your SMTP server uses. Default is
+# none. Legal values are "plain", "login", or "cram_md5".
+#authentication =
+
+# The username to use to authenticate to the SMTP server, if
+# necessary. Default is none.
+#username =
+
+# The password to use to authenticate to the SMTP server, if
+# necessary. Default is none.
+#password =
+
+# Whether to use STARTTLS if your SMTP server supports it. Default is false.
+#starttls = false

data/spec/ncs_navigator/authorization/core/authority_spec.rb

@@ -0,0 +1,69 @@
+require 'spec_helper'
+require 'aker'
+require 'vcr'
+require 'faraday'
+require 'faraday_stack'
+describe NcsNavigator::Authorization::Core::Authority do
+ 
+  before do
+    @ncs_navigator_authority = NcsNavigator::Authorization::Core::Authority.new
+    @user = mock(:username => "lee", :cas_proxy_ticket => "PT-cas-ticket")
+  end
+  
+  describe "user" do
+    before do
+      VCR.use_cassette('staff_portal/core/user') do
+        @return_user = @ncs_navigator_authority.user(@user)
+      end
+    end
+    
+    it "copies first name from staff portal user" do
+      @return_user.first_name.should == "Lee"
+    end
+    
+    it "copies last name from staff portal user" do
+      @return_user.last_name.should == "Peterson"
+    end
+    
+    it "copies email from staff portal user" do
+      @return_user.email.should == "lee@test.com"
+    end
+    
+    it "copies staff_id as identifiers from staff portal staff_id" do
+      @return_user.identifiers[:staff_id].should == "test_staff_id"
+    end
+    
+    it "generate group membership from staff role" do
+      @return_user.group_memberships(:NCSNavigator).include?("Staff Supervisor").should be_true
+    end
+  end
+  
+  
+  describe "#amplify!" do
+    before do
+      @lee = mock(Aker::User, :username => "lee", :cas_proxy_ticket => "PT-cas-ticket",:first_name => "Lee", :portals => [:NCSNavigator])
+      @before_lee = mock(Aker::User, :username => "lee", :cas_proxy_ticket => "PT-cas-ticket", :merge! => @lee)
+    end
+  
+    def actual
+      VCR.use_cassette('staff_portal/core/user') do
+        @ncs_navigator_authority.amplify!(@before_lee)
+      end
+    end
+
+    it "copies simple attributes" do
+      actual.first_name.should == "Lee"
+    end
+    
+    it "copies portal" do
+      actual.portals.should == [:NCSNavigator]
+    end
+    
+    it "does nothing for an unknown user" do
+      VCR.use_cassette('staff_portal/core/unknown_user') do
+        lambda { @ncs_navigator_authority.amplify!(mock(Aker::User, :username => "lees", :cas_proxy_ticket => "PT-cas-ticket"))}.should_not raise_error
+      end
+    end
+  end
+  
+end

data/spec/ncs_navigator/authorization/psc/authority_spec.rb

@@ -0,0 +1,292 @@
+require 'spec_helper'
+require 'aker'
+require 'vcr'
+require 'faraday'
+require 'faraday_stack'
+
+describe NcsNavigator::Authorization::Psc::Authority do
+  before do
+    @psc_authority = NcsNavigator::Authorization::Psc::Authority.new
+  end
+
+  describe "user" do
+    before do
+      VCR.use_cassette('staff_portal/psc/user_by_numeric_id') do
+        @return_user = @psc_authority.user(1234)
+      end
+    end
+    
+    it "has id" do
+      @return_user[:id].should == 1234
+    end
+    
+    it "has username" do
+      @return_user[:username].should == "testuser"
+    end
+    
+    it "has email_address" do
+      @return_user[:email_address].should == "testuser@test.com"
+    end
+    
+    it "has first_name" do
+      @return_user[:first_name].should == "TestFirstName"
+    end
+    
+    it "has last_name" do
+      @return_user[:last_name].should == "TestLastName"
+    end
+    
+    it "has roles" do
+      @return_user[:roles].should_not be_empty
+      @return_user[:roles].count.should == 13
+    end
+    
+    it "does nothing for an unknown user and return nil" do
+      VCR.use_cassette('staff_portal/psc/unknown_user') do
+        @return_user = @psc_authority.user("unknown")
+      end
+      @return_user.should == nil
+    end
+  end
+  
+  describe "get_user_by_username" do
+    describe "for valid username" do
+      before do
+        VCR.use_cassette('staff_portal/psc/user_by_username') do
+          @return_user = @psc_authority.get_user_by_username("testuser", nil)
+        end
+      end
+      it "return user_hash for user with known username" do
+        @return_user.should_not == nil
+      end
+    
+      [:username, :id, :first_name, :email_address, :first_name, :last_name, :roles].each do |key|
+        it "has #{key}" do
+          @return_user.has_key?(key).should == true
+        end
+      end
+    end
+    
+    it "returns nil for unknown username" do
+      VCR.use_cassette('staff_portal/psc/unknown_user') do
+        @return_user = @psc_authority.get_user_by_username("unknown", nil)
+      end
+      @return_user.should == nil
+    end
+  end
+  
+  describe "get_user_by_id" do
+    describe "for valid id" do
+      before do
+        VCR.use_cassette('staff_portal/psc/user_by_numeric_id') do
+          @return_user = @psc_authority.get_user_by_id(1234, nil)
+        end
+      end
+    
+      it "return user_hash for user with known username" do
+        @return_user.should_not == nil
+      end
+    
+      [:username, :id, :first_name, :email_address, :first_name, :last_name, :roles].each do |key|
+        it "has #{key}" do
+          @return_user.has_key?(key).should == true
+        end
+      end
+    end
+    
+    it "returns nil for unknown username" do
+      VCR.use_cassette('staff_portal/psc/unknown_user') do
+        @return_user = @psc_authority.get_user_by_id("unknown", nil)
+      end
+      @return_user.should == nil
+    end
+  end
+  
+  describe "get_users_by_role" do
+    it "returns empty array for unknown role" do
+      return_users = @psc_authority.get_users_by_role(:unknown)
+      return_users.should be_empty
+    end
+    
+    describe "for valid role" do
+      before do
+        VCR.use_cassette('staff_portal/psc/users_by_role') do
+          @return_users = @psc_authority.get_users_by_role(:subject_manager)
+        end
+      end
+    
+      it "returns users with roles" do
+        @return_users.count.should == 2
+      end
+    
+      [:username, :id, :first_name, :email_address, :last_name, :roles].each do |key|
+        it "has #{key}" do
+          @return_users[0].has_key?(key).should == true
+        end
+      end
+      
+      it "returns empty array if no users with role" do
+        VCR.use_cassette('staff_portal/psc/empty_users_by_role') do
+          @return_users = @psc_authority.get_users_by_role(:subject_manager)
+        end
+        @return_users.should be_empty
+      end
+    end    
+  end
+  
+  describe "search_users" do
+    it "returns all the users for empty hash" do
+      VCR.use_cassette('staff_portal/psc/all_users') do
+        @return_users = @psc_authority.search_users({})
+      end
+      @return_users.count.should == 6
+    end
+    
+    describe "with first_name" do
+      before do
+        VCR.use_cassette('staff_portal/psc/users_by_first_name') do
+          @return_users = @psc_authority.search_users({:first_name_substring => "an"})
+        end
+      end
+      
+      it "returns all the users with first_name criteria match" do
+        @return_users.count.should == 2
+      end
+      
+      it "has user with first_name match with criteria" do
+        @return_users[0][:first_name].should == "Nolan"
+        @return_users[1][:first_name].should == "Lithan"
+      end
+      
+      [:username, :id, :first_name, :email_address, :first_name, :last_name, :roles].each do |key|
+        it "user has #{key}" do
+          @return_users[0].has_key?(key).should == true
+        end
+      end
+    end
+    
+    describe "with last_name" do
+      before do
+        VCR.use_cassette('staff_portal/psc/users_by_last_name') do
+          @return_users = @psc_authority.search_users({:last_name_substring => "Palbo"})
+        end
+      end
+      
+      it "returns all the users with last_name criteria match" do
+        @return_users.count.should == 1
+      end
+      
+      it "has user with last_name match with criteria" do
+        @return_users[0][:last_name].should == "Palbo"
+      end
+    end
+    
+    describe "with username" do
+      before do
+        VCR.use_cassette('staff_portal/psc/users_by_username') do
+          @return_users = @psc_authority.search_users({:username_substring => "gd123"})
+        end
+      end
+      
+      it "returns all the users with username criteria match" do
+        @return_users.count.should == 1
+      end
+      
+      it "has user with username match with criteria" do
+        @return_users[0][:username].should == "gd123"
+      end
+    end
+    
+    describe "with first_name or last_name" do
+      before do
+        VCR.use_cassette('staff_portal/psc/users_by_first_or_last_name') do
+          @return_users = @psc_authority.search_users({:first_name_substring => "Lithan", :last_name_substring => "Palbo"})
+        end
+      end
+      
+      it "returns all the users with first_name or last_name criteria match" do
+        @return_users.count.should == 2
+      end
+      
+      it "has user with first_name match with criteria" do
+        @return_users[1][:first_name].should == "Lithan"
+      end
+      
+      it "has user with last_name match with criteria" do
+        @return_users[0][:last_name].should == "Palbo"
+      end
+    end
+    
+    describe "with first_name or username" do
+      before do
+        VCR.use_cassette('staff_portal/psc/users_by_first_or_user_name') do
+          @return_users = @psc_authority.search_users({:first_name_substring => "Lithan", :username_substring => "gd123"})
+        end
+      end
+      
+      it "returns all the users with first_name or username criteria match" do
+        @return_users.count.should == 2
+      end
+      
+      it "has user with username match with criteria" do
+        @return_users[0][:username].should == "gd123"
+      end
+      
+      it "has user with first_name match with criteria" do
+        @return_users[1][:first_name].should == "Lithan"
+      end
+    end
+    
+    describe "with last_name or username" do
+      before do
+        VCR.use_cassette('staff_portal/psc/users_by_last_or_user_name') do
+          @return_users = @psc_authority.search_users({:last_name_substring => "Palbo", :username_substring => "gd123"})
+        end
+      end
+      
+      it "returns all the users with last_name or username criteria match" do
+        @return_users.count.should == 2
+      end
+      
+      it "has user with username match with criteria" do
+        @return_users[1][:username].should == "gd123"
+      end
+      
+      it "has user with last_name match with criteria" do
+        @return_users[0][:last_name].should == "Palbo"
+      end
+    end
+    
+    describe "with first_name or last_name or username" do
+      before do
+        VCR.use_cassette('staff_portal/psc/users_by_first_or_last_or_user_name') do
+          @return_users = @psc_authority.search_users({:first_name_substring => "Lithan", :last_name_substring => "Palbo", :username_substring => "gd123"})
+        end
+      end
+      
+      it "returns all the users with first_name or last_name or username criteria match" do
+        @return_users.count.should == 3
+      end
+      
+      it "has user with username match with criteria" do
+        @return_users[1][:username].should == "gd123"
+      end
+      
+      it "has user with last_name match with criteria" do
+        @return_users[0][:last_name].should == "Palbo"
+      end
+      
+      it "has user with first_name match with criteria" do
+        @return_users[2][:first_name].should == "Lithan"
+      end
+    end
+    
+    it "returns empty array if no users with match with search criteria" do
+      VCR.use_cassette('staff_portal/psc/empty_users_by_search_criteria') do
+        @return_users = @psc_authority.search_users({:first_name_substring => "unknown", :last_name_substring => "unknown", :username_substring => "unknown"})
+      end
+      @return_users.should be_empty
+    end
+
+  end
+end