rails-acu 3.0.8 → 4.0.0

data/lib/acu/version.rb

@@ -1,3 +1,3 @@
 module Acu
-  VERSION = '3.0.8'
+  VERSION = '4.0.0'
 end

data/lib/generators/templates/rules.rb

@@ -1,10 +1,10 @@
 # This is an examble, modify it as well
 Acu::Rules.define do
   # anyone makes a request could be count as everyone!
-  whois :everyone { true }
+  whois(:everyone) { true }
 
-  # whois :admin, args: [:user] { |c| c and c.user_type.symbol == :ADMIN.to_s }
-  # whois :client, args: [:user] { |c| c and c.user_type.symbol == :PUBLIC.to_s }
+  # whois(:admin, args: [:user]) { |c| c and c.user_type.symbol == :ADMIN.to_s }
+  # whois(:client, args: [:user]) { |c| c and c.user_type.symbol == :PUBLIC.to_s }
 
   # admin can access anywhere
   # allow :admin
@@ -38,7 +38,7 @@ Acu::Rules.define do
   #   end
 
   #   controller :contact do
-  #     action :support {
+  #     action(:support) {
   #       allow :client
   #     }
   #   end

data/rails-acu.gemspec

@@ -19,5 +19,5 @@ Gem::Specification.new do |s|
 
   s.require_paths = ["lib"]
 
-  s.add_dependency "rails", "~> 5.0", ">= 5.0.0"
+  s.add_dependency "rails", "~> 6.0", ">= 6.0.0"
 end

data/spec/dummy/config/initializers/acu_rules.rb

@@ -1,21 +1,21 @@
 # This is an examble, modify it as well
 Acu::Rules.define do
   # anyone make a request could be count as everyone!
-  whois :everyone { true }
+  whois(:everyone) { true }
 
-  whois :admin, args: [:user] { |c| c and c.user_type.symbol == :ADMIN.to_s }
+  whois(:admin, args: [:user]) { |c| c and c.user_type.symbol == :ADMIN.to_s }
 
-  whois :client, args: [:user] { |c| c and c.user_type.symbol == :PUBLIC.to_s }
+  whois(:client, args: [:user]) { |c| c and c.user_type.symbol == :PUBLIC.to_s }
 
-  whois :pr, args: [:user] { |c| c and c.user_type.symbol == :PR.to_s }
+  whois(:pr, args: [:user]) { |c| c and c.user_type.symbol == :PR.to_s }
 
   allow :everyone
 
   # define how is admin?
-  # whois :admin, args: [:user] { |c| c and c.user_type  == :ADMIN.to_s }
+  # whois(:admin, args: [:user]) { |c| c and c.user_type  == :ADMIN.to_s }
 
   # define how is client?
-  # whois :client, args: [:user] { |c| c and c.user_type == :CLIENT.to_s }
+  # whois(:client, args: [:user]) { |c| c and c.user_type == :CLIENT.to_s }
 
   # controller :home, except: [:some_secret_action] do
   #   allow :everyone

data/spec/dummy/config/initializers/new_framework_defaults.rb

@@ -17,9 +17,6 @@ ActiveSupport.to_time_preserves_timezone = true
 # Require `belongs_to` associations by default. Previous versions had false.
 Rails.application.config.active_record.belongs_to_required_by_default = true
 
-# suppress depricating waring for sqlite3
-Rails.application.config.active_record.sqlite3.represent_boolean_as_integer = true
-
 # Do not halt callback chains when a callback returns false. Previous versions had true.
 # ActiveSupport.halt_callback_chains_on_return_false = false
 

data/spec/dummy/db/seeds.rb

@@ -1,3 +1,5 @@
+User.delete_all
+UserType.delete_all
 # This file should contain all the record creation needed to seed the database with its default values.
 # The data can then be loaded with the rails db:seed command (or created alongside the database with db:setup).
 #
@@ -6,34 +8,34 @@
 #   movies = Movie.create([{ name: 'Star Wars' }, { name: 'Lord of the Rings' }])
 #   Character.create(name: 'Luke', movie: movies.first)
 user_types_list = [
-  ['ادمین', 'ADMIN', 'ادمین سایت، دسترسی کامل به کل سایت' ,1001],
-  ['عموم', 'PUBLIC','دسترسی عمومی به محتویات سایت',1],
-  ['روکوب', 'ROKOB','موجودیت روکوب کار، امکان دسترسی به ارزیابی اطلاعات روکوبی مبلمان‌ها ',2],
-  ['خیاط', 'KHAYAT','موجودیت خیاط کار، امکان دسترسی به ارزیابی اطلاعات خیاطی مبلمان‌ها و مشخصات پارچه‌ ',2],
-  ['نجار', 'NAJAR','موجودیت نجار، امکان دسترسی به ارزیابی اطلاعات نجاری و کنده‌کاری مبلمان‌ها ',2],
-  ['نقاش', 'NAGASH','موجودیت نقاش کار، امکان دسترسی به ارزیابی اطلاعات نقاشی مبلمان‌ها ',2],
-  ['کارشناس گرافیک', 'GRAPHIC','بررسی گرافیکی و سلیقه‌ای محصولات و ثبت پیشنهادات مرتبط',2],
-  ['بازاریاب', 'MARKETER','بازاریاب‌ محصولات',2],
-  ['بازرس', 'PR','بازرسی کیفی فعالیت‌های بازاریاب‌ها، روابط عمومی مشتری‌ها',3],
-  ['بازارسنج', 'MARKLINE','مسئول بروز رسانی قیمت‌های کالاها و لوازم پیش‌نیاز محصولات خدماتی',2]
+  [1, 'ادمین', 'ADMIN', 'ادمین سایت، دسترسی کامل به کل سایت' ,1001],
+  [2, 'عموم', 'PUBLIC','دسترسی عمومی به محتویات سایت',1],
+  [3, 'روکوب', 'ROKOB','موجودیت روکوب کار، امکان دسترسی به ارزیابی اطلاعات روکوبی مبلمان‌ها ',2],
+  [4, 'خیاط', 'KHAYAT','موجودیت خیاط کار، امکان دسترسی به ارزیابی اطلاعات خیاطی مبلمان‌ها و مشخصات پارچه‌ ',2],
+  [5, 'نجار', 'NAJAR','موجودیت نجار، امکان دسترسی به ارزیابی اطلاعات نجاری و کنده‌کاری مبلمان‌ها ',2],
+  [6, 'نقاش', 'NAGASH','موجودیت نقاش کار، امکان دسترسی به ارزیابی اطلاعات نقاشی مبلمان‌ها ',2],
+  [7, 'کارشناس گرافیک', 'GRAPHIC','بررسی گرافیکی و سلیقه‌ای محصولات و ثبت پیشنهادات مرتبط',2],
+  [8, 'بازاریاب', 'MARKETER','بازاریاب‌ محصولات',2],
+  [9, 'بازرس', 'PR','بازرسی کیفی فعالیت‌های بازاریاب‌ها، روابط عمومی مشتری‌ها',3],
+  [10, 'بازارسنج', 'MARKLINE','مسئول بروز رسانی قیمت‌های کالاها و لوازم پیش‌نیاز محصولات خدماتی',2]
 ]
 
-user_types_list.each do |name, symbol, comment, auth_level|
-  UserType.create!(name: name, symbol: symbol, comment: comment, auth_level: auth_level)
+user_types_list.each do |id, name, symbol, comment, auth_level|
+  UserType.create!(id: id, name: name, symbol: symbol, comment: comment, auth_level: auth_level)
 end
 
 users_list = [
-  ['email1@gmail.com','123456',1],
-  ['email2@gmail.com','123456',2],
-  ['email3@gmail.com','123456',3],
-  ['email4@gmail.com','123456',4],
-  ['email5@gmail.com','123456',5],
-  ['email6@gmail.com','123456',6],
-  ['email7@gmail.com','123456',7],
-  ['email8@gmail.com','123456',8],
-  ['email9@gmail.com','123456',9],
-  ['email10@gmail.com','123456',10],
+  [1, 'email1@gmail.com','123456',1],
+  [2, 'email2@gmail.com','123456',2],
+  [3, 'email3@gmail.com','123456',3],
+  [4, 'email4@gmail.com','123456',4],
+  [5, 'email5@gmail.com','123456',5],
+  [6, 'email6@gmail.com','123456',6],
+  [7, 'email7@gmail.com','123456',7],
+  [8, 'email8@gmail.com','123456',8],
+  [9, 'email9@gmail.com','123456',9],
+  [10, 'email10@gmail.com','123456',10],
 ]
-users_list.each do |email, password, user_type_id|
-  User.create!(email: email, password: password, user_type_id: user_type_id)
+users_list.each do |id, email, password, user_type_id|
+  User.create!(id: id, email: email, password: password, user_type_id: user_type_id)
 end

data/spec/dummy/spec/controllers/admin/booking/lists_controller_spec.rb

@@ -30,8 +30,8 @@ RSpec.describe Admin::Booking::ListsController, type: :controller do
     end
 
     Acu::Rules.define do
-      whois :admin, args: [:c] { |c| c == :admin }
-      whois :client, args: [:c] { |c| c == :client }
+      whois(:admin, args: [:c]) { |c| c == :admin }
+      whois(:client, args: [:c]) { |c| c == :client }
     end
   }
 

data/spec/dummy/spec/controllers/admin/manage_controller_spec.rb

@@ -14,7 +14,7 @@ RSpec.describe Admin::ManageController, type: :controller do
 
   it "should work with namespaces" do
     Acu::Rules.define do
-      whois :everyone { true }
+      whois(:everyone) { true }
       allow :everyone
     end
     get :index
@@ -47,8 +47,8 @@ RSpec.describe Admin::ManageController, type: :controller do
   end
   it '[local-global & args]' do
     Acu::Rules.define do
-      whois :admin, args: [:c] { |c| c == :admin }
-      whois :client, args: [:c] { |c| c == :client }
+      whois(:admin, args: [:c]) { |c| c == :admin }
+      whois(:client, args: [:c]) { |c| c == :client }
       namespace :admin do
         allow :admin
         controller :manage, only: [:show] do

data/spec/dummy/spec/controllers/home_controller_spec.rb

@@ -23,6 +23,14 @@ RSpec.describe HomeController, type: :controller do
     end
   end
 
+  def enable_caching
+    caching = ActionController::Base.perform_caching
+    ActionController::Base.perform_caching = true
+    yield
+  ensure
+    ActionController::Base.perform_caching = caching
+  end
+  
   context 'Acu::Config' do
     it '.allow_by_default = false' do
       expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
@@ -50,37 +58,37 @@ RSpec.describe HomeController, type: :controller do
     context "[globals]" do
       it "[single rule]" do
         Acu::Rules.define do
-          whois :everyone { true }
+          whois(:everyone) { true }
           allow :everyone
         end
         get :index
       end
       it "[multiple rules]" do
         Acu::Rules.define do
-          whois :everyone { true }
-          whois :client { true }
+          whois(:everyone) { true }
+          whois(:client) { true }
           allow :everyone
           allow :client
         end
         expect(Acu::Rules.rules.length).to be 1
         expect(Acu::Rules.rules[{}].length).to be 2
         get :index
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:client, :everyone`/
       end
       it "{ one of rules failed = AccessDenied }" do
         Acu::Rules.define do
-          whois :everyone { true }
-          whois :client { true }
+          whois(:everyone) { true }
+          whois(:client) { true }
           # every request is :everyone
           allow :everyone
           # every reqyest is also :client
           deny :client
         end
         expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:client, :everyone`/
 
         Acu::Rules.define do
-          whois :client { false }
+          whois(:client) { false }
           # every reqyest is also :client
           deny :client
         end
@@ -92,8 +100,8 @@ RSpec.describe HomeController, type: :controller do
       context "[namespace]" do
         it "[default]" do
           Acu::Rules.define do
-            whois :everyone { true }
-            whois :client { false }
+            whois(:everyone) { true }
+            whois(:client) { false }
             namespace do
               allow :everyone
             end
@@ -118,8 +126,8 @@ RSpec.describe HomeController, type: :controller do
         end
         it "[default & global]" do
           Acu::Rules.define do
-            whois :everyone { true }
-            whois :client { false }
+            whois(:everyone) { true }
+            whois(:client) { false }
 
             namespace do
               allow :everyone
@@ -132,7 +140,7 @@ RSpec.describe HomeController, type: :controller do
         end
         it "[with only]" do
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             namespace only: [:home] do
               allow :everyone
             end
@@ -141,7 +149,7 @@ RSpec.describe HomeController, type: :controller do
           expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
 
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             # override previous one
             namespace only: [:home] do
               deny :everyone
@@ -156,7 +164,7 @@ RSpec.describe HomeController, type: :controller do
         end
         it "[with except]" do
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             namespace except: [:home] do
               allow :everyone
             end
@@ -166,7 +174,7 @@ RSpec.describe HomeController, type: :controller do
           expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to .* \[autherized by :allow_by_default\]/
 
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             namespace except: [:foobar] do
               allow :everyone
             end
@@ -179,7 +187,7 @@ RSpec.describe HomeController, type: :controller do
       context "[controller]" do
         it "[solo]" do
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             controller :home do
             end
           end
@@ -195,7 +203,7 @@ RSpec.describe HomeController, type: :controller do
         end
         it "[with only]" do
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             controller :home, only: [:contact] do
             end
           end
@@ -233,7 +241,7 @@ RSpec.describe HomeController, type: :controller do
         end
         it "[with except]" do
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             controller :home, except: [:contact] do
             end
           end
@@ -267,10 +275,10 @@ RSpec.describe HomeController, type: :controller do
       context "[action]" do
         it "[parent: namespace]" do
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             namespace do
-              action :index   { allow :everyone }
-              action :contact { allow :everyone }
+              action(:index) { allow :everyone }
+              action(:contact) { allow :everyone }
             end
           end
           get :index
@@ -280,8 +288,8 @@ RSpec.describe HomeController, type: :controller do
 
           Acu::Rules.define do
             namespace do
-              action :index   { allow :everyone }
-              action :contact { deny :everyone }
+              action(:index) { allow :everyone }
+              action(:contact) { deny :everyone }
             end
           end
           get :index
@@ -293,7 +301,7 @@ RSpec.describe HomeController, type: :controller do
 
         it "[parent: controller]" do
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             controller :home do
             end
           end
@@ -303,7 +311,7 @@ RSpec.describe HomeController, type: :controller do
 
           Acu::Rules.define do
             controller :home do
-              action :contact { allow :everyone }
+              action(:contact) { allow :everyone }
             end
           end
           get :contact
@@ -313,8 +321,8 @@ RSpec.describe HomeController, type: :controller do
 
           Acu::Rules.define do
             controller :home do
-              action :index { allow :everyone }
-              action :contact { deny :everyone }
+              action(:index) { allow :everyone }
+              action(:contact) { deny :everyone }
             end
           end
           get :index
@@ -323,7 +331,7 @@ RSpec.describe HomeController, type: :controller do
 
         it "[parent: namespace, controller]" do
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             namespace do
               controller :home do
               end
@@ -336,7 +344,7 @@ RSpec.describe HomeController, type: :controller do
           Acu::Rules.define do
             namespace do
               controller :home do
-                action :contact { allow :everyone }
+                action(:contact) { allow :everyone }
               end
             end
           end
@@ -348,8 +356,8 @@ RSpec.describe HomeController, type: :controller do
           Acu::Rules.define do
             namespace do
               controller :home do
-                action :index { allow :everyone }
-                action :contact { deny :everyone }
+                action(:index) { allow :everyone }
+                action(:contact) { deny :everyone }
               end
             end
           end
@@ -359,11 +367,11 @@ RSpec.describe HomeController, type: :controller do
           # reset to change namespace
           Acu::Rules.reset
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             namespace :foobar do
               controller :home do
-                action :index { allow :everyone }
-                action :contact { deny :everyone }
+                action(:index) { allow :everyone }
+                action(:contact) { deny :everyone }
               end
             end
           end
@@ -374,7 +382,7 @@ RSpec.describe HomeController, type: :controller do
         end
         it '[local-global]' do
           Acu::Rules.define do
-            whois :everyone { true }
+            whois(:everyone) { true }
             namespace do
               allow :everyone
               controller :home, only: [:index] do
@@ -397,7 +405,7 @@ RSpec.describe HomeController, type: :controller do
         expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*\[autherized by :allow_by_default\]/
 
         Acu::Rules.define do
-          whois :everyone { true }
+          whois(:everyone) { true }
           namespace do
             controller :home do
               allow :everyone, on: [:index, :contact]
@@ -409,14 +417,14 @@ RSpec.describe HomeController, type: :controller do
       end
       it "[deny]" do
         Acu::Rules.define do
-          whois :everyone { true }
+          whois(:everyone) { true }
           allow :everyone
         end
         get :index
         get :contact
 
         Acu::Rules.define do
-          whois :everyone { true }
+          whois(:everyone) { true }
           namespace do
             controller :home do
               deny :everyone, on: [:index, :contact]
@@ -430,8 +438,8 @@ RSpec.describe HomeController, type: :controller do
       end
       it "[negated entities]" do
         Acu::Rules.define do
-          whois :everyone { true }
-          whois :client { false }
+          whois(:everyone) { true }
+          whois(:client) { false }
           namespace do
             controller :home do
               deny :not_client, on: [:index, :contact]
@@ -458,8 +466,8 @@ RSpec.describe HomeController, type: :controller do
     context "[bulk settings]" do
       it "[allow/deny]" do
         Acu::Rules.define do
-          whois :everyone { true }
-          whois :client { false }
+          whois(:everyone) { true }
+          whois(:client) { false }
           namespace do
             controller :home do
               allow [:everyone, :client], on: [:index, :contact]
@@ -470,27 +478,27 @@ RSpec.describe HomeController, type: :controller do
         expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         get :contact
         expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
-        Acu::Rules.define { whois :client { true } }
+        Acu::Rules.define { whois(:client) { true } }
         get :index
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:client, :everyone`/
         get :contact
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:client, :everyone`/
         Acu::Rules.define do
           namespace do
             controller :home do
-              action :index { deny [:everyone, :client] }
+              action(:index) { deny [:everyone, :client] }
             end
           end
         end
         expect {get :index}.to raise_error(Acu::Errors::AccessDenied)
         # the first rule that failed is going to mention
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:client, :everyone`/
         get :contact
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone, :client`/
+        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:client, :everyone`/
       end
       it "[namespace/controller]" do
         Acu::Rules.define do
-          whois :everyone { true }
+          whois(:everyone) { true }
           namespace nil, :admin do
             allow :everyone
             controller :home, :manage, only: [:index] do
@@ -515,7 +523,10 @@ RSpec.describe HomeController, type: :controller do
       end
       it "[action]" do
         Acu::Rules.define do
-          whois :everyone { true }
+          whois(:pr) { false }
+          whois(:admin) { true }
+          whois(:client) { false }
+          whois(:everyone) { true }
           namespace do
             allow :everyone
           end
@@ -546,16 +557,16 @@ RSpec.describe HomeController, type: :controller do
   context "Acu::Helpers" do
     it "acu_is?" do
       Acu::Rules.define do
-        whois :everyone { true }
-        whois :client { false }
+        whois(:everyone) { true }
+        whois(:client) { false }
       end
       expect(acu_is? :everyone).to be true
       expect(acu_is? :client).to be false
     end
     it "acu_as" do
       Acu::Rules.define do
-        whois :everyone { true }
-        whois :client { false }
+        whois(:everyone) { true }
+        whois(:client) { false }
       end
       acu_as :everyone do
         # a valid syntax
@@ -572,8 +583,8 @@ RSpec.describe HomeController, type: :controller do
     end
     it "acu_except" do
       Acu::Rules.define do
-        whois :everyone { true }
-        whois :client { false }
+        whois(:everyone) { true }
+        whois(:client) { false }
       end
       acu_except :everyone do
         # an invalid syntax, this should never run
@@ -600,11 +611,14 @@ RSpec.describe HomeController, type: :controller do
     end
     it '[caches?]' do
       Acu::Rules.define do
-        whois :everyone { true }
+        whois(:pr) { false }
+        whois(:admin) { true }
+        whois(:client) { false }
+        whois(:everyone) { true }
         namespace do
           controller :home do
-            action :index { allow :everyone }
-            action :contact { deny :everyone }
+            action(:index) { allow :everyone }
+            action(:contact) { deny :everyone }
           end
         end
       end
@@ -616,32 +630,38 @@ RSpec.describe HomeController, type: :controller do
         expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[x\] access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
       end
 
-      setup use_cache: true
-      Acu::Monitor.clear_cache
-
-      # make intial accesses, and cache
-      get :index
-      expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
+      enable_caching do
+        setup use_cache: true
+        Acu::Monitor.clear_cache
 
-      # both request should be ruled by cache now!
-      5.times do
+        # make intial accesses, and cache
         get :index
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[-\]\[c\] access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
         expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
-        expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[x\]\[c\] access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
+
+        # both request should be ruled by cache now!
+        5.times do
+          get :index
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[-\]\[c\] access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/
+          expect {get :contact}.to raise_error(Acu::Errors::AccessDenied)
+          expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[x\]\[c\] access DENIED to.*namespace=\[nil\].*controller=\["home"\].*action=\["contact"\].*as `:everyone`/
+        end
       end
     end
     it '[maintains cache]' do
       setup use_cache: true
       Acu::Rules.define do
-        whois :everyone { true }
+        whois(:pr) { false }
+        whois(:admin) { true }
+        whois(:client) { false }
+        whois(:everyone) { true }
         namespace do
           controller :home do
-            action :index { allow :everyone }
-            action :contact { deny :everyone }
+            action(:index) { allow :everyone }
+            action(:contact) { deny :everyone }
           end
         end
       end
+      
       5.times do
         get :index
         expect(`tail -n 1 #{Acu::Configs.get :audit_log_file}`).to match /\[-\]\[c\] access GRANTED to.*namespace=\[nil\].*controller=\["home"\].*action=\["index"\].*as `:everyone`/