rails-acu 2.2.0 → 3.0.0

data/spec/dummy/app/views/admin/booking/lists/edit.html.erb

@@ -0,0 +1,6 @@
+<h1>Editing Admin Booking List</h1>
+
+<%= render 'form', admin_booking_list: @admin_booking_list %>
+
+<%= link_to 'Show', @admin_booking_list %> |
+<%= link_to 'Back', admin_booking_lists_path %>

data/spec/dummy/app/views/admin/booking/lists/index.html.erb

@@ -0,0 +1,27 @@
+<p id="notice"><%= notice %></p>
+
+<h1>Admin Booking Lists</h1>
+
+<table>
+  <thead>
+    <tr>
+      <th>Name</th>
+      <th colspan="3"></th>
+    </tr>
+  </thead>
+
+  <tbody>
+    <% @admin_booking_lists.each do |admin_booking_list| %>
+      <tr>
+        <td><%= admin_booking_list.name %></td>
+        <td><%= link_to 'Show', admin_booking_list %></td>
+        <td><%= link_to 'Edit', edit_admin_booking_list_path(admin_booking_list) %></td>
+        <td><%= link_to 'Destroy', admin_booking_list, method: :delete, data: { confirm: 'Are you sure?' } %></td>
+      </tr>
+    <% end %>
+  </tbody>
+</table>
+
+<br>
+
+<%= link_to 'New Admin Booking List', new_admin_booking_list_path %>

data/spec/dummy/app/views/admin/booking/lists/new.html.erb

@@ -0,0 +1,5 @@
+<h1>New Admin Booking List</h1>
+
+<%= render 'form', admin_booking_list: @admin_booking_list %>
+
+<%= link_to 'Back', admin_booking_lists_path %>

data/spec/dummy/app/views/admin/booking/lists/show.html.erb

@@ -0,0 +1,9 @@
+<p id="notice"><%= notice %></p>
+
+<p>
+  <strong>Name:</strong>
+  <%= @admin_booking_list.name %>
+</p>
+
+<%= link_to 'Edit', edit_admin_booking_list_path(@admin_booking_list) %> |
+<%= link_to 'Back', admin_booking_lists_path %>

data/spec/dummy/config/routes.rb

@@ -1,5 +1,17 @@
 Rails.application.routes.draw do
 
+  namespace :admin do
+    namespace :booking do
+      resources :chats
+    end
+  end
+  namespace :admin do
+    namespace :booking do
+      get 'lists/index'
+      get 'lists/show'
+    end
+  end
+  
   namespace :admin do
     get 'manage/index'
     get 'manage/show'

data/spec/dummy/db/migrate/20170506054319_create_admin_booking_lists.rb

@@ -0,0 +1,9 @@
+class CreateAdminBookingLists < ActiveRecord::Migration[5.0]
+  def change
+    create_table :admin_booking_lists do |t|
+      t.string :name
+
+      t.timestamps
+    end
+  end
+end

data/spec/dummy/db/migrate/20170506081928_create_admin_booking_chats.rb

@@ -0,0 +1,9 @@
+class CreateAdminBookingChats < ActiveRecord::Migration[5.0]
+  def change
+    create_table :admin_booking_chats do |t|
+      t.string :name
+
+      t.timestamps
+    end
+  end
+end

data/spec/dummy/db/schema.rb

@@ -10,7 +10,13 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema.define(version: 20170329121612) do
+ActiveRecord::Schema.define(version: 20170506054319) do
+
+  create_table "admin_booking_lists", force: :cascade do |t|
+    t.string   "name"
+    t.datetime "created_at", null: false
+    t.datetime "updated_at", null: false
+  end
 
   create_table "books", force: :cascade do |t|
     t.string   "name"

data/spec/dummy/spec/controllers/admin/booking/chats_controller_spec.rb

@@ -0,0 +1,23 @@
+require 'rails_helper'
+
+# This spec was generated by rspec-rails when you ran the scaffold generator.
+# It demonstrates how one might use RSpec to specify the controller code that
+# was generated by Rails when you ran the scaffold generator.
+#
+# It assumes that the implementation code is generated by the rails scaffold
+# generator.  If you are using any extension libraries to generate different
+# controller code, this generated spec may or may not pass.
+#
+# It only uses APIs available in rails and/or rspec-rails.  There are a number
+# of tools you can use to make these specs even more expressive, but we're
+# sticking to rails and rspec-rails APIs to keep things simple and stable.
+#
+# Compared to earlier versions of this generator, there is very limited use of
+# stubs and message expectations in this spec.  Stubs are only used when there
+# is no simpler way to get a handle on the object needed for the example.
+# Message expectations are only used when there is no simpler way to specify
+# that an instance is receiving a specific message.
+
+RSpec.describe Admin::Booking::ChatsController, type: :controller do
+
+end

data/spec/dummy/spec/controllers/admin/booking/lists_controller_spec.rb

@@ -0,0 +1,215 @@
+require 'rails_helper'
+
+# This spec was generated by rspec-rails when you ran the scaffold generator.
+# It demonstrates how one might use RSpec to specify the controller code that
+# was generated by Rails when you ran the scaffold generator.
+#
+# It assumes that the implementation code is generated by the rails scaffold
+# generator.  If you are using any extension libraries to generate different
+# controller code, this generated spec may or may not pass.
+#
+# It only uses APIs available in rails and/or rspec-rails.  There are a number
+# of tools you can use to make these specs even more expressive, but we're
+# sticking to rails and rspec-rails APIs to keep things simple and stable.
+#
+# Compared to earlier versions of this generator, there is very limited use of
+# stubs and message expectations in this spec.  Stubs are only used when there
+# is no simpler way to get a handle on the object needed for the example.
+# Message expectations are only used when there is no simpler way to specify
+# that an instance is receiving a specific message.
+
+RSpec.describe Admin::Booking::ListsController, type: :controller do
+
+  before(:each) {
+    # reset rules
+    Acu::Rules.reset
+    # reset configs
+    Acu.setup do |config|
+      config.allow_by_default = false
+      config.audit_log_file   = '/tmp/acu-rspec.log'
+    end
+
+    Acu::Rules.define do
+      whois :admin, args: [:c] { |c| c == :admin }
+      whois :client, args: [:c] { |c| c == :client }
+    end
+  }
+
+  def as e, &block
+    Acu::Monitor.args c: e
+    block.call()
+    Acu::Monitor.args c: nil
+  end
+
+  def as_admin &block
+    as :admin, &block
+  end
+
+  def as_client &block
+    as :client, &block
+  end
+
+  it "should work with top-level namespace rules" do
+    Acu::Rules.define do
+      namespace :admin do
+        allow :admin
+        controller :lists, only: [:show] do
+          allow :client
+        end
+      end
+    end
+    as_admin do 
+      get :index
+      expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\["admin", "booking"\].*controller=\["lists"\].*action=\["index"\].*as `:admin`/
+    end
+    as_client do
+      expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
+      expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\["admin", "booking"\].*controller=\["lists"\].*action=\["index"\].*\[autherized by :allow_by_default\]/
+    end
+
+    [:client, :admin].each do |cc|
+      as cc do 
+        get :show 
+      end
+    end
+  end
+
+
+  it "should work with nested namespace rules" do
+    Acu::Rules.define do
+      namespace :admin do
+        allow :admin
+        namespace :booking do
+          controller :lists, only: [:show] do
+            allow :client
+          end
+        end
+      end
+    end
+    as_admin do 
+      get :index
+      expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\["admin", "booking"\].*controller=\["lists"\].*action=\["index"\].*as `:admin`/
+    end
+    as_client do
+      expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
+      expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\["admin", "booking"\].*controller=\["lists"\].*action=\["index"\].*\[autherized by :allow_by_default\]/
+    end
+
+    [:client, :admin].each do |cc|
+      as cc do 
+        get :show 
+      end
+    end
+  end
+
+  context "nested namespace only/expect tags" do
+    it 'should not allow nested `only` tags' do
+      expect {
+        Acu::Rules.define do
+          namespace :admin, only: [:index] do
+            allow :admin
+            namespace :booking, only: [:show] do
+              allow :client
+            end
+          end
+        end 
+      }.to raise_error(Acu::Errors::AmbiguousRule)
+    end
+    it 'should not allow nested `except` tags' do
+      expect {
+        Acu::Rules.define do
+          namespace :admin, except: [:index] do
+            allow :admin
+            namespace :booking, except: [:show] do
+              allow :client
+            end
+          end
+        end 
+      }.to raise_error(Acu::Errors::AmbiguousRule)
+    end
+    it 'should not allow nested `except/only` tags' do
+      expect {
+        Acu::Rules.define do
+          namespace :admin, except: [:index] do
+            allow :admin
+            namespace :booking, only: [:show] do
+              allow :client
+            end
+          end
+        end 
+      }.to raise_error(Acu::Errors::AmbiguousRule)
+      expect {
+        Acu::Rules.define do
+          namespace :admin, except: [:index], only: [:show] do
+            allow :admin
+            namespace :booking do
+              allow :client
+            end
+          end
+        end 
+      }.to raise_error(Acu::Errors::AmbiguousRule)
+    end
+
+    it "nested namespaces should work with `only` tags" do
+      Acu::Rules.define do
+        namespace :admin, only: [:lists] do
+          allow :admin
+          namespace :booking do
+            allow :client
+          end
+        end
+      end
+      [:admin, :client].each do |_as|
+        as _as do 
+          [:index, :show].each do |a|
+            get a
+            expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\["admin", "booking"\].*controller=\["lists"\].*action=\["#{a.to_s}"\].*as `:#{_as.to_s}`/
+          end
+        end
+      end
+    end
+
+    it "nested namespaces should work with `expect` tags [1/2]" do
+      Acu::Rules.define do
+        namespace :admin do
+          allow :admin
+          namespace :booking, except: [:lists] do
+            allow :client
+          end
+        end
+      end
+      as_admin do 
+        [:index, :show].each do |a|
+          get a
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\["admin", "booking"\].*controller=\["lists"\].*action=\["#{a.to_s}"\].*as `:admin`/
+        end
+      end
+      as_client do 
+        [:index, :show].each do |a|
+          expect {get a}.to raise_error(Acu::Errors::AccessDenied)
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\["admin", "booking"\].*controller=\["lists"\].*action=\["#{a.to_s}"\].*\[autherized by :allow_by_default\]/
+        end
+      end
+    end
+
+    it "nested namespaces should work with `expect` tags [2/2]" do
+      Acu::Rules.define do
+        namespace :admin, except: [:lists] do
+          allow :admin
+          namespace :booking do
+            allow :client
+          end
+        end
+      end
+      [:admin, :client].each do |_as|
+        as _as do 
+          [:index, :show].each do |a|
+            expect {get a}.to raise_error(Acu::Errors::AccessDenied)
+            expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\["admin", "booking"\].*controller=\["lists"\].*action=\["#{a.to_s}"\].*\[autherized by :allow_by_default\]/
+          end
+        end
+      end
+    end
+  end
+
+end

data/spec/dummy/spec/controllers/admin/manage_controller_spec.rb

@@ -28,7 +28,7 @@ RSpec.describe Admin::ManageController, type: :controller do
     end
     # we filtered the default namespace not this
     get :index
-    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace="admin".*controller="manage".*action="index".*as `:everyone`/
+    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\["admin"\].*controller=\["manage"\].*action=\["index"\].*as `:everyone`/
 
     Acu::Rules.define do
       namespace :admin, except: [:posts] do
@@ -39,11 +39,11 @@ RSpec.describe Admin::ManageController, type: :controller do
       end
     end
     expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace="admin".*controller="manage".*action="index".*as `:everyone`/
+    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\["admin"\].*controller=\["manage"\].*action=\["index"\].*as `:everyone`/
     expect {get :show}.to raise_error(Acu::Errors::AccessDenied)
-    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace="admin".*controller="manage".*action="show".*as `:everyone`/
+    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\["admin"\].*controller=\["manage"\].*action=\["show"\].*as `:everyone`/
     expect {get :list}.to raise_error(Acu::Errors::AccessDenied)
-    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace="admin".*controller="manage".*action="list".*as `:everyone`/
+    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\["admin"\].*controller=\["manage"\].*action=\["list"\].*as `:everyone`/
   end
   it '[local-global & args]' do
     Acu::Rules.define do
@@ -58,10 +58,10 @@ RSpec.describe Admin::ManageController, type: :controller do
     end
     Acu::Monitor.args c: :admin
     get :index
-    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace="admin".*controller="manage".*action="index".*as `:admin`/
+    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\["admin"\].*controller=\["manage"\].*action=\["index"\].*as `:admin`/
     Acu::Monitor.args c: :client
     expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace="admin".*controller="manage".*action="index".*\[autherized by :allow_by_default\]/
+    expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\["admin"\].*controller=\["manage"\].*action=\["index"\].*\[autherized by :allow_by_default\]/
 
     [:client, :admin].each do |cc|
       Acu::Monitor.args c: cc

data/spec/dummy/spec/controllers/home_controller_spec.rb

@@ -65,7 +65,7 @@ RSpec.describe HomeController, type: :controller do
         expect(Acu::Rules.rules.length).to be 1
         expect(Acu::Rules.rules[{}].length).to be 2
         get :index
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="index".*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone, :client`/
       end
       it "{ one of rules failed = AccessDenied }" do
         Acu::Rules.define do
@@ -77,7 +77,7 @@ RSpec.describe HomeController, type: :controller do
           deny :client
         end
         expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone, :client`/
 
         Acu::Rules.define do
           whois :client { false }
@@ -85,7 +85,7 @@ RSpec.describe HomeController, type: :controller do
           deny :client
         end
         get :index
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
       end
     end
     context "[levels]" do
@@ -105,7 +105,7 @@ RSpec.describe HomeController, type: :controller do
             end
           end
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
           Acu::Rules.define do
             namespace do
               allow :everyone
@@ -128,7 +128,7 @@ RSpec.describe HomeController, type: :controller do
             deny :everyone
           end
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         end
         it "[with only]" do
           Acu::Rules.define do
@@ -138,7 +138,7 @@ RSpec.describe HomeController, type: :controller do
             end
           end
           get :index
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
 
           Acu::Rules.define do
             whois :everyone { true }
@@ -152,7 +152,7 @@ RSpec.describe HomeController, type: :controller do
           end
           # by override
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         end
         it "[with except]" do
           Acu::Rules.define do
@@ -172,7 +172,7 @@ RSpec.describe HomeController, type: :controller do
             end
           end
           get :index
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         end
       end
 
@@ -201,9 +201,9 @@ RSpec.describe HomeController, type: :controller do
           end
           # deny by default
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*\[autherized by :allow_by_default\]/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*\[autherized by :allow_by_default\]/
           expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="contact".*\[autherized by :allow_by_default\]/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*\[autherized by :allow_by_default\]/
 
           Acu::Rules.define do
             controller :home, only: [:contact] do
@@ -213,7 +213,7 @@ RSpec.describe HomeController, type: :controller do
           get :contact
           # deny by default
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*\[autherized by :allow_by_default\]/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*\[autherized by :allow_by_default\]/
 
           # the rules won't override with above, this will give us the needed flexibility for multi-dimentional rules
           Acu::Rules.define do
@@ -257,10 +257,10 @@ RSpec.describe HomeController, type: :controller do
           end
           # we have rule for this
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
           # and this is by detailt
           expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="contact".*\[autherized by :allow_by_default\]/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*\[autherized by :allow_by_default\]/
         end
       end
 
@@ -274,9 +274,9 @@ RSpec.describe HomeController, type: :controller do
             end
           end
           get :index
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
           get :contact
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="contact".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
 
           Acu::Rules.define do
             namespace do
@@ -285,9 +285,9 @@ RSpec.describe HomeController, type: :controller do
             end
           end
           get :index
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
           expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="contact".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
 
         end
 
@@ -299,7 +299,7 @@ RSpec.describe HomeController, type: :controller do
           end
           # deny by default
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*\[autherized by :allow_by_default\]/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*\[autherized by :allow_by_default\]/
 
           Acu::Rules.define do
             controller :home do
@@ -309,7 +309,7 @@ RSpec.describe HomeController, type: :controller do
           get :contact
           # deny by default
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*\[autherized by :allow_by_default\]/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*\[autherized by :allow_by_default\]/
 
           Acu::Rules.define do
             controller :home do
@@ -331,7 +331,7 @@ RSpec.describe HomeController, type: :controller do
           end
           # deny by default
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*\[autherized by :allow_by_default\]/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*\[autherized by :allow_by_default\]/
 
           Acu::Rules.define do
             namespace do
@@ -343,7 +343,7 @@ RSpec.describe HomeController, type: :controller do
           get :contact
           # deny by default
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*\[autherized by :allow_by_default\]/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*\[autherized by :allow_by_default\]/
 
           Acu::Rules.define do
             namespace do
@@ -368,9 +368,9 @@ RSpec.describe HomeController, type: :controller do
             end
           end
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*\[autherized by :allow_by_default\]/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*\[autherized by :allow_by_default\]/
           expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="contact".*\[autherized by :allow_by_default\]/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*\[autherized by :allow_by_default\]/
         end
         it '[local-global]' do
           Acu::Rules.define do
@@ -383,18 +383,18 @@ RSpec.describe HomeController, type: :controller do
             end
           end
           get :contact
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="contact".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
           expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         end
       end
     end
     context "[allow/deny]" do
       it "[allow]" do
         expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*\[autherized by :allow_by_default\]/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*\[autherized by :allow_by_default\]/
         expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="contact".*\[autherized by :allow_by_default\]/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*\[autherized by :allow_by_default\]/
 
         Acu::Rules.define do
           whois :everyone { true }
@@ -424,9 +424,9 @@ RSpec.describe HomeController, type: :controller do
           end
         end
         expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="contact".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
       end
     end
     context "[bulk settings]" do
@@ -441,14 +441,14 @@ RSpec.describe HomeController, type: :controller do
           end
         end
         get :index
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         get :contact
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="contact".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
         Acu::Rules.define { whois :client { true } }
         get :index
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="index".*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone, :client`/
         get :contact
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="contact".*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone, :client`/
         Acu::Rules.define do
           namespace do
             controller :home do
@@ -458,9 +458,9 @@ RSpec.describe HomeController, type: :controller do
         end
         expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
         # the first rule that failed is going to mention
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone, :client`/
         get :contact
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="contact".*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone, :client`/
       end
       it "[namespace/controller]" do
         Acu::Rules.define do
@@ -473,18 +473,18 @@ RSpec.describe HomeController, type: :controller do
           end
         end
         get :contact
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="contact".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
         expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         
         @controller = Admin::ManageController.new
 
         expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace="admin".*controller="manage".*action="index".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\["admin"\].*controller=\["manage"\].*action=\["index"\].*as `:everyone`/
 
         [:show, :list, :delete, :add, :prove].each do |action|
           get action
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace="admin".*controller="manage".*action="#{action.to_s}".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\["admin"\].*controller=\["manage"\].*action=\["#{action.to_s}"\].*as `:everyone`/
         end
       end
       it "[action]" do
@@ -496,7 +496,7 @@ RSpec.describe HomeController, type: :controller do
         end
         [:index, :contact].each do |action|
           get action
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=nil.*controller="home".*action="#{action.to_s}".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["#{action.to_s}"\].*as `:everyone`/
         end
 
         Acu::Rules.define do
@@ -511,7 +511,7 @@ RSpec.describe HomeController, type: :controller do
 
         [:index, :contact].each do |action|
           expect {get action}.to raise_error(Acu::Errors::AccessDenied)
-          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=nil.*controller="home".*action="#{action.to_s}".*as `:everyone`/
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["#{action.to_s}"\].*as `:everyone`/
         end
 
       end
@@ -585,9 +585,9 @@ RSpec.describe HomeController, type: :controller do
       # it shouldn't use cache because we haven't told it yet
       5.times do
         get :index
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[-\] access GRANTED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[-\] access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[x\] access DENIED to.*namespace=nil.*controller="home".*action="contact".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[x\] access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
       end
 
       setup use_cache: true
@@ -600,9 +600,9 @@ RSpec.describe HomeController, type: :controller do
       # both request should be ruled by cache now!
       5.times do
         get :index
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[-\]\[c\] access GRANTED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[-\]\[c\] access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[x\]\[c\] access DENIED to.*namespace=nil.*controller="home".*action="contact".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[x\]\[c\] access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
       end
     end
     it '[maintains cache]' do
@@ -618,9 +618,9 @@ RSpec.describe HomeController, type: :controller do
       end
       5.times do
         get :index
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[-\]\[c\] access GRANTED to.*namespace=nil.*controller="home".*action="index".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[-\]\[c\] access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[x\]\[c\] access DENIED to.*namespace=nil.*controller="home".*action="contact".*as `:everyone`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[x\]\[c\] access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
       end
     end
   end