RubyGems - rails-prg - Versions diffs - 0.1.0 - Mend

rails-prg 0.1.0

Files changed (89) hide show

checksums.yaml +7 -0
data/.cane +4 -0
data/.gitignore +19 -0
data/.rspec +3 -0
data/Gemfile +4 -0
data/LICENSE.txt +22 -0
data/README.md +44 -0
data/Rakefile +38 -0
data/lib/rails-prg.rb +5 -0
data/lib/rails/prg.rb +8 -0
data/lib/rails/prg/railtie.rb +13 -0
data/lib/rails/prg/redirected_object_controller.rb +84 -0
data/lib/rails/prg/version.rb +5 -0
data/lib/tasks/quality.rake +15 -0
data/rails-prg.gemspec +43 -0
data/script/spec +22 -0
data/spec/dummy/README.rdoc +28 -0
data/spec/dummy/Rakefile +6 -0
data/spec/dummy/app/assets/images/.keep +0 -0
data/spec/dummy/app/assets/javascripts/application.js +13 -0
data/spec/dummy/app/assets/javascripts/error_duplicator.js +2 -0
data/spec/dummy/app/assets/javascripts/error_duplicators.js +2 -0
data/spec/dummy/app/assets/javascripts/example_prgs.js +2 -0
data/spec/dummy/app/assets/javascripts/post_redirect_gets.js +2 -0
data/spec/dummy/app/assets/javascripts/test_objects.js +2 -0
data/spec/dummy/app/assets/stylesheets/application.css +13 -0
data/spec/dummy/app/assets/stylesheets/error_duplicator.css +4 -0
data/spec/dummy/app/assets/stylesheets/error_duplicators.css +4 -0
data/spec/dummy/app/assets/stylesheets/example_prgs.css +4 -0
data/spec/dummy/app/assets/stylesheets/post_redirect_gets.css +4 -0
data/spec/dummy/app/assets/stylesheets/scaffold.css +56 -0
data/spec/dummy/app/assets/stylesheets/test_objects.css +4 -0
data/spec/dummy/app/controllers/application_controller.rb +19 -0
data/spec/dummy/app/controllers/concerns/.keep +0 -0
data/spec/dummy/app/controllers/error_duplicators_controller.rb +64 -0
data/spec/dummy/app/controllers/example_prgs_controller.rb +74 -0
data/spec/dummy/app/helpers/application_helper.rb +2 -0
data/spec/dummy/app/helpers/error_duplicators_helper.rb +2 -0
data/spec/dummy/app/helpers/example_prgs_helper.rb +2 -0
data/spec/dummy/app/mailers/.keep +0 -0
data/spec/dummy/app/models/.keep +0 -0
data/spec/dummy/app/models/concerns/.keep +0 -0
data/spec/dummy/app/models/error_duplicator.rb +3 -0
data/spec/dummy/app/models/example_prg.rb +3 -0
data/spec/dummy/app/views/error_duplicators/_form.html.erb +29 -0
data/spec/dummy/app/views/error_duplicators/edit.html.erb +6 -0
data/spec/dummy/app/views/error_duplicators/index.html.erb +31 -0
data/spec/dummy/app/views/error_duplicators/new.html.erb +5 -0
data/spec/dummy/app/views/error_duplicators/show.html.erb +19 -0
data/spec/dummy/app/views/example_prgs/_form.html.erb +29 -0
data/spec/dummy/app/views/example_prgs/edit.html.erb +6 -0
data/spec/dummy/app/views/example_prgs/index.html.erb +31 -0
data/spec/dummy/app/views/example_prgs/new.html.erb +5 -0
data/spec/dummy/app/views/example_prgs/show.html.erb +19 -0
data/spec/dummy/app/views/layouts/application.html.erb +14 -0
data/spec/dummy/config.ru +4 -0
data/spec/dummy/config/application.rb +29 -0
data/spec/dummy/config/boot.rb +5 -0
data/spec/dummy/config/database.yml +25 -0
data/spec/dummy/config/environment.rb +5 -0
data/spec/dummy/config/environments/development.rb +29 -0
data/spec/dummy/config/environments/production.rb +80 -0
data/spec/dummy/config/environments/test.rb +36 -0
data/spec/dummy/config/initializers/backtrace_silencers.rb +7 -0
data/spec/dummy/config/initializers/filter_parameter_logging.rb +4 -0
data/spec/dummy/config/initializers/inflections.rb +16 -0
data/spec/dummy/config/initializers/mime_types.rb +5 -0
data/spec/dummy/config/initializers/secret_token.rb +12 -0
data/spec/dummy/config/initializers/session_store.rb +3 -0
data/spec/dummy/config/initializers/wrap_parameters.rb +14 -0
data/spec/dummy/config/locales/en.yml +23 -0
data/spec/dummy/config/routes.rb +4 -0
data/spec/dummy/db/migrate/20140225004609_create_error_duplicators.rb +12 -0
data/spec/dummy/db/migrate/20140225070319_create_example_prgs.rb +12 -0
data/spec/dummy/db/schema.rb +36 -0
data/spec/dummy/db/structure.sql +9 -0
data/spec/dummy/lib/assets/.keep +0 -0
data/spec/dummy/public/404.html +58 -0
data/spec/dummy/public/422.html +58 -0
data/spec/dummy/public/500.html +57 -0
data/spec/dummy/public/favicon.ico +0 -0
data/spec/rails/prg/features/error_duplication_spec.rb +100 -0
data/spec/rails/prg/features/redirected_objects_spec.rb +92 -0
data/spec/rails/prg/redirected_object_controller_spec.rb +282 -0
data/spec/spec_helper.rb +36 -0
data/spec/support/selenium_display.rb +78 -0
data/spec/support/use_selenium_display.rb +13 -0
data/spec/support/use_simplecov.rb +30 -0
metadata +392 -0

File without changes

@@ -0,0 +1,58 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>The page you were looking for doesn't exist (404)</title>
+  <style>
+  body {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+  }
+  div.dialog {
+    width: 25em;
+    margin: 4em auto 0 auto;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 4em 0 4em;
+  }
+  h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+  body > p {
+    width: 33em;
+    margin: 0 auto 1em;
+    padding: 1em 0;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow:0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+<body>
+  <!-- This file lives in public/404.html -->
+  <div class="dialog">
+    <h1>The page you were looking for doesn't exist.</h1>
+    <p>You may have mistyped the address or the page may have moved.</p>
+  </div>
+  <p>If you are the application owner check the logs for more information.</p>
+</body>
+</html>

data/spec/dummy/public/422.html ADDED

@@ -0,0 +1,58 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>The change you wanted was rejected (422)</title>
+  <style>
+  body {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+  }
+  div.dialog {
+    width: 25em;
+    margin: 4em auto 0 auto;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 4em 0 4em;
+  }
+  h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+  body > p {
+    width: 33em;
+    margin: 0 auto 1em;
+    padding: 1em 0;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow:0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+<body>
+  <!-- This file lives in public/422.html -->
+  <div class="dialog">
+    <h1>The change you wanted was rejected.</h1>
+    <p>Maybe you tried to change something you didn't have access to.</p>
+  </div>
+  <p>If you are the application owner check the logs for more information.</p>
+</body>
+</html>

data/spec/dummy/public/500.html ADDED

@@ -0,0 +1,57 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>We're sorry, but something went wrong (500)</title>
+  <style>
+  body {
+    background-color: #EFEFEF;
+    color: #2E2F30;
+    text-align: center;
+    font-family: arial, sans-serif;
+  }
+  div.dialog {
+    width: 25em;
+    margin: 4em auto 0 auto;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-left-color: #999;
+    border-bottom-color: #BBB;
+    border-top: #B00100 solid 4px;
+    border-top-left-radius: 9px;
+    border-top-right-radius: 9px;
+    background-color: white;
+    padding: 7px 4em 0 4em;
+  }
+  h1 {
+    font-size: 100%;
+    color: #730E15;
+    line-height: 1.5em;
+  }
+  body > p {
+    width: 33em;
+    margin: 0 auto 1em;
+    padding: 1em 0;
+    background-color: #F7F7F7;
+    border: 1px solid #CCC;
+    border-right-color: #999;
+    border-bottom-color: #999;
+    border-bottom-left-radius: 4px;
+    border-bottom-right-radius: 4px;
+    border-top-color: #DADADA;
+    color: #666;
+    box-shadow:0 3px 8px rgba(50, 50, 50, 0.17);
+  }
+  </style>
+</head>
+<body>
+  <!-- This file lives in public/500.html -->
+  <div class="dialog">
+    <h1>We're sorry, but something went wrong.</h1>
+  </div>
+  <p>If you are the application owner check the logs for more information.</p>
+</body>
+</html>

data/spec/dummy/public/favicon.ico ADDED

File without changes

data/spec/rails/prg/features/error_duplication_spec.rb ADDED

@@ -0,0 +1,100 @@
+require "spec_helper"
+feature "Standard Rails render on errors" do
+  let(:existing_example) { ErrorDuplicator.create(subject: 'anything', body: 'test body', published: true) }
+  scenario "ensure secure environment for accurate test" do
+    # Check that environment tested is actually secure (without selenium)
+    visit new_error_duplicator_path
+    expect(page.response_headers["Cache-Control"]).to include("no-cache, no-store")
+  end
+  scenario "triggering browser cache error in secure environment with browser history disabled", js: true do
+    ErrorDuplicator.count.should eq(0)
+    # Create new with an error
+    visit new_error_duplicator_path
+    fill_in "Subject", :with => existing_example.subject
+    click_button "Create Error duplicator"
+    expect(page).to have_text("Subject has already been taken")
+    # Should have set the error on the object
+    expect(page).to have_field('Subject', with: existing_example.subject)
+    # Should *not* have redirected back
+    expect(page.current_path).to eq(error_duplicators_path)
+    # Should create successfully following an error
+    fill_in "Subject", :with => "testing NEW input"
+    click_button "Create Error duplicator"
+    expect(page).to have_text("Error duplicator was successfully created.")
+    ErrorDuplicator.count.should eq(2)
+    # On click of back button
+    page.execute_script("window.history.back();")
+    # Cache miss error displayed for specific browser
+    case $selenium_display.browser.to_sym
+    when :firefox
+      expect(page.find("h1#errorTitleText")).to have_text("Document Expired")
+      expect(page.find("p#errorShortDescText")).to have_text("This document is no longer available.")
+      expect(page.find("div#errorLongDesc")).to have_text("The requested document is not available in Firefox's cache")
+      expect(page.current_path).to eq(error_duplicators_path)
+    when :chrome
+      within "div#main-frame-error" do
+        expect(page.find("h1")).to have_text("Confirm Form Resubmission")
+        click_button "More" #triggers chrome to load error code
+        expect(page.find("div.error-code")).to have_text("Error code: ERR_CACHE_MISS")
+      end
+    else
+      raise "Error - Unhandled browser"
+    end
+  end
+  scenario "ensure non-secure environment for accurate test" do
+    # Check that environment tested is not secure (without selenium)
+    visit edit_error_duplicator_path(existing_example)
+    expect(page.response_headers["Cache-Control"]).not_to include("no-cache, no-store")
+  end
+  scenario "working normally in non-secure environment with browser history", js: true do
+    # Edit page has no secure headers set
+    visit edit_error_duplicator_path(existing_example)
+    fill_in "Subject", :with => ""
+    click_button "Update Error duplicator"
+    expect(page).to have_text("Subject can't be blank")
+    expect(page).to have_field('Subject', with: "")
+    expect(page.current_path).to eq(error_duplicator_path(existing_example))
+    # Edit successfully
+    fill_in "Subject", :with => "updated test input"
+    click_button "Update Error duplicator"
+    expect(page).to have_text("Error duplicator was successfully updated.")
+    # Should *not* have redirected back
+    expect(page.current_path).to eq(error_duplicator_path(existing_example))
+    # On click of back button
+    page.execute_script("window.history.back();")
+    # Browser specific way of handling 'back' with errors in non-secure environment
+    case $selenium_display.browser.to_sym
+    when :firefox
+      # Backs all the way back to edit page without errors (pre-post)
+      expect(page.current_path).to eq(edit_error_duplicator_path(existing_example))
+      page.should have_content("Editing error_duplicator")
+      expect(page).to_not have_text("Subject can't be blank")
+      expect(page).to have_field('Subject', with: "") #Posted value
+    when :chrome
+      # Backs all the way back to show page with errors (post -> rendered error)
+      expect(page.current_path).to eq(error_duplicator_path(existing_example))
+      page.should have_content("Editing error_duplicator")
+      expect(page).to have_text("Subject can't be blank")
+      expect(page).to have_field('Subject', with: "updated test input") #updated value
+    else
+      raise "Error - Unhandled browser"
+    end
+  end
+end

data/spec/rails/prg/features/redirected_objects_spec.rb ADDED

@@ -0,0 +1,92 @@
+require "spec_helper"
+feature "Use full post-redirect-get displaying original params and errors on redirect" do
+  let(:existing_example) { ExamplePrg.create(subject: 'existing test input', body: 'test body', published: true) }
+  scenario "ensure secure environment for accurate test" do
+    # Check that environment tested is actually secure (without selenium)
+    visit new_error_duplicator_path
+    expect(page.response_headers["Cache-Control"]).to include("no-cache, no-store")
+  end
+  scenario "within a secure environment with browser history disallowed", js: true do
+    ExamplePrg.count.should eq(0)
+    # Create error
+    visit new_example_prg_path
+    fill_in "Subject", :with => existing_example.subject
+    click_button "Create Example prg"
+    expect(page).to have_text("Subject has already been taken")
+    # Should have set the error on the object
+    expect(page).to have_field('Subject', with: existing_example.subject)
+    # Should have redirected back
+    expect(page.current_path).to eq(new_example_prg_path)
+    # Should create successfully following error
+    fill_in "Subject", :with => "testing NEW input"
+    click_button "Create Example prg"
+    expect(page).to have_text("Example prg was successfully created.")
+    ExamplePrg.count.should eq(2)
+    # On click of back button
+    page.execute_script("window.history.back();")
+    # Should go back to a blank 'new' page
+    expect(page).to have_text("New example_prg")
+    expect(page.current_path).to eq(new_example_prg_path)
+    expect(page).not_to have_text("Subject has already been taken") #no errors
+    # Browser specific redirection
+    case $selenium_display.browser.to_sym
+    when :firefox
+      # Backs to the new page being completely empty
+      expect(page).to have_field('Subject', with: "")
+    when :chrome
+      # Backs to the new page with original entries already loaded
+      expect(page).to have_field('Subject', with: "testing NEW input")
+    else
+      raise "Error - Unhandled browser"
+    end
+  end
+  scenario "ensure normal browser history environment for accurate test" do
+    # Check that environment tested is not secure
+    #  -> Selenium driver cannot check response headers
+    visit edit_example_prg_path(existing_example)
+    expect(page.response_headers["Cache-Control"]).not_to include("no-cache, no-store")
+  end
+  scenario "within a normal browser history environment", js: true do
+    # Edit page has no secure headers set
+    visit edit_example_prg_path(existing_example)
+    # Create error
+    fill_in "Subject", :with => ""
+    click_button "Update Example prg"
+    # Should redirect back to edit page with errors
+    expect(page.current_path).to eq(edit_example_prg_path(existing_example))
+    expect(page).to have_text("Subject can't be blank")
+    expect(page).to have_field('Subject', with: "")
+    # Edit successfully
+    fill_in "Subject", :with => "updated test input"
+    click_button "Update Example prg"
+    expect(page).to have_text("Example prg was successfully updated.")
+    # Should have redirected back
+    expect(page.current_path).to eq(example_prg_path(existing_example))
+    # On click of back button
+    page.execute_script("window.history.back();")
+    # Should have redirected back to edit page with errors
+    expect(page.current_path).to eq(edit_example_prg_path(existing_example))
+    expect(page).to have_text("Subject can't be blank")
+    expect(page).to have_field('Subject', with: "updated test input")
+    expect(page).to have_field('Published', with: 1)
+  end
+end

data/spec/rails/prg/redirected_object_controller_spec.rb ADDED

@@ -0,0 +1,282 @@
+require "spec_helper"
+#require "action_controller"
+describe ExamplePrgsController, type: :controller do
+  describe "post redirect get with error conditions" do
+    # Example Post-Redirect-Get on error conditions
+    # without Rails error->render pattern
+    class TestObject
+      include ActiveModel::Validations
+      attr_accessor :some_field
+      attr_reader :protected_field, :private_field
+      def initialize(passed_attributes = {})
+        self.some_field = passed_attributes[:some_field] if passed_attributes
+      end
+      protected
+      def protected_field=(value)
+        @protected_field = value #Shouldn't allow this
+      end
+      private
+      def private_field=(value)
+        @private_field = value #Shouldn't allow this
+      end
+    end
+    controller(ExamplePrgsController) do
+      def new
+        safe_params = [
+          :some_field, :set_redirected_flash,
+          :protected_field, :private_field
+        ]
+        fake_flash_for_test(safe_params)
+        @object = TestObject.new(params.permit(*safe_params))
+        load_redirected_objects!
+        render text: 'successful load'
+      end
+      def create
+        @object = TestObject.new(create_params)
+        if params.delete(:error)
+          @object.errors.add(:some_field, "not present")
+          set_redirected_object!('@object', @object, create_params)
+          redirect_to '/back_to_new_page'
+        else
+          redirect_to '/successful_result'
+        end
+      end
+      private
+      def create_params
+        @create_params ||= begin
+          if params.delete(:with_strong_parameters)
+            params.require(:object).permit(:some_field)
+          else
+            #Unsafe parameters
+            params[:object]
+          end
+        end
+      end
+      # As request hasn't happened in test yet,
+      # we must set flash manually that would handle redirected objects
+      # This duplicates the behaviour for unit testing 'after' a redirect
+      def fake_flash_for_test(allowed_params)
+        if params[:set_redirected_flash]
+          content_for_flash = JSON.parse(params[:set_redirected_flash], symbolize_names: true)
+          flash[:redirected_objects] = if params.delete(:raw_hash)
+            # Checking if a developer has passed raw hashes instead
+            # of full parameters hash with permitted attributes
+            content_for_flash
+          else
+            object_params = content_for_flash[:@object][:params]
+            if object_params
+              # Ensure params are set as proper parameters object like they
+              # should be in controller before
+              controller_params = ActionController::Parameters.new(object_params).permit(*allowed_params)
+              content_for_flash[:@object][:params] = controller_params
+            end
+            content_for_flash
+          end
+        end
+      end
+    end
+    context "on change" do
+      context "when error occurs with unpermitted params" do
+        let(:params) do
+          {
+            error: true,
+            object: {
+              unknown_field: 'scary unsafe value',
+              another_unknown: 'field'
+            }
+          }
+        end
+        context "with submission" do
+          it "should raise error with descriptive error message for faster debugging" do
+            expect { post :create, params }.to raise_error { |exception_received|
+              exception_received.should be_a(RuntimeError)
+              exception_received.to_s.should eq(
+                '[Rails::Prg] Error - Must use permitted strong parameters. Unsafe: unknown_field, another_unknown'
+              )
+            }
+            # Must use curly braces https://github.com/rspec/rspec-expectations/commit/dd5ee3aba1eb33b3dacc56a12964e48a0d2c84f5
+            # Until rspec-expectations 3+ is used
+          end
+        end
+      end
+      context "when error occurs for permitted params" do
+        let(:params) { { error: true, with_strong_parameters: true, object: { some_field: 'input value'} } }
+        before do
+          post :create, params
+        end
+        subject { response }
+        it { should redirect_to '/back_to_new_page' }
+        context "flash for redirected objects" do
+          subject { flash[:redirected_objects] }
+          it "should set required attributes" do
+            subject.should eq(
+              {
+                '@object' => {
+                  errors: { some_field: ["not present"] },
+                  params: { "some_field" => "input value" }
+                }
+              }
+            )
+          end
+        end
+      end
+      context "when no error has occured" do
+        let(:params) { {} }
+        before do
+          post :create, params
+        end
+        subject { response }
+        it { should redirect_to '/successful_result' }
+        context "flash error" do
+          subject { flash[:redirected_objects] }
+          it { should_not be_present }
+        end
+      end
+    end
+    context "after a redirect" do
+      context "after an error has occured" do
+        before do
+          get :new, params
+        end
+        subject { controller.instance_variable_get(:@object) }
+        let(:object_errors)    { { some_field: ["not present"] } }
+        let(:object_params)    { { some_field: "inputted value" } }
+        let(:redirected_flash) do
+          {
+            '@object' => {
+              errors: object_errors,
+              params: object_params
+            }
+          }
+        end
+        let(:params) { { set_redirected_flash: redirected_flash.to_json } }
+        its(:errors) { should be_an_instance_of(ActiveModel::Errors) }
+        it "should have applied the errors to the object for display" do
+          subject.errors.messages.should eq(object_errors)
+        end
+        it "should have applied any values passed in previous form" do
+          subject.some_field.should eq("inputted value")
+        end
+        it "should have removed the collection from the flash object" do
+          flash[:redirected_objects].should be_blank
+        end
+      end
+      context "when a developer sends unsafe parameters" do
+        let(:object_errors) { { some_field: ["not present"] } }
+        let(:object_params) { { some_field: "inputted value" } }
+        let(:params)        { { raw_hash: true, set_redirected_flash: redirected_flash.to_json } }
+        let(:redirected_flash) do
+          {
+            '@object' => {
+              errors: object_errors,
+              params: object_params
+            }
+          }
+        end
+        it 'should raise an error' do
+          # Must be curly braces https://github.com/rspec/rspec-expectations/commit/dd5ee3aba1eb33b3dacc56a12964e48a0d2c84f5
+          # do...end blocks for raise_error are ignored...
+          # Until rspec-expectations 3+ is used
+          expect { get :new, params }.to raise_error { |exception_received|
+            exception_received.should be_a(RuntimeError)
+            exception_received.to_s.should eq('[Rails::Prg] Error - Must pass strong parameters.')
+          }
+        end
+        it 'should always clear the flash' do
+          expect { get :new, params }.to raise_error
+          flash[:redirected_objects].should be_blank
+        end
+        it "should set errors on to the object" do
+          expect { get :new, params }.to raise_error
+          controller.instance_variable_get(:@object).errors.should be_an_instance_of(ActiveModel::Errors)
+        end
+      end
+      context "when attempting to assign illegal fields" do
+        let(:params)        { { set_redirected_flash: redirected_flash.to_json } }
+        let(:redirected_flash) do
+          {
+            '@object' => {
+              errors: {},
+              params: object_params
+            }
+          }
+        end
+        context "assigning on to object" do
+          context "protected fields" do
+            let(:object_params) { { protected_field: 'protected value' } }
+            it "should raise an error on assignment" do
+              expect {  get :new, params }.to raise_error { |exception_received|
+                exception_received.should be_a(NoMethodError)
+                exception_received.to_s.should include("protected method `protected_field=' called for")
+              }
+            end
+          end
+          context "private fields" do
+            let(:object_params) { { private_field: 'private value' } }
+            it "should raise an error on assignment" do
+              expect {  get :new, params }.to raise_error { |exception_received|
+                exception_received.should be_a(NoMethodError)
+                exception_received.to_s.should include("private method `private_field=' called for")
+              }
+            end
+          end
+        end
+      end
+    end
+    context "when no error has occured" do
+      let(:redirected_flash) { nil }
+      let(:params)           { nil }
+      before do
+        get :new, params
+      end
+      subject { controller.instance_variable_get(:@object) }
+      its(:errors) { should be_empty }
+    end
+  end
+end