reduced_fat_crm 0.14.0

data/public/robots.txt

@@ -0,0 +1,5 @@
+# See http://www.robotstxt.org/wc/norobots.html for documentation on how to use the robots.txt file
+#
+# To ban all spiders from the entire site uncomment the next two lines:
+# User-Agent: *
+# Disallow: /

data/script/rails

@@ -0,0 +1,6 @@
+#!/usr/bin/env ruby
+# This command will automatically be run when you run "rails" with Rails 3 gems installed from the root of your application.
+
+APP_PATH = File.expand_path('../../config/application',  __FILE__)
+require File.expand_path('../../config/boot',  __FILE__)
+require 'rails/commands'

data/spec/controllers/admin/groups_controller_spec.rb

@@ -0,0 +1,9 @@
+# Copyright (c) 2008-2013 Michael Dvorkin and contributors.
+#
+# Fat Free CRM is freely distributable under the terms of MIT license.
+# See MIT-LICENSE file or http://www.opensource.org/licenses/mit-license.php
+#------------------------------------------------------------------------------
+require File.expand_path(File.dirname(__FILE__) + '/../../spec_helper')
+
+describe Admin::GroupsController do
+end

data/spec/controllers/admin/users_controller_spec.rb

@@ -0,0 +1,305 @@
+# Copyright (c) 2008-2013 Michael Dvorkin and contributors.
+#
+# Fat Free CRM is freely distributable under the terms of MIT license.
+# See MIT-LICENSE file or http://www.opensource.org/licenses/mit-license.php
+#------------------------------------------------------------------------------
+require File.expand_path(File.dirname(__FILE__) + '/../../spec_helper')
+
+describe Admin::UsersController do
+  before(:each) do
+    require_user(admin: true)
+    set_current_tab(:users)
+  end
+
+  # GET /admin/users
+  # GET /admin/users.xml                                                   HTML
+  #----------------------------------------------------------------------------
+  describe "GET index" do
+    it "assigns all users as @users and renders [index] template" do
+      @users = [current_user, FactoryGirl.create(:user)]
+
+      get :index
+      expect(assigns[:users].first).to eq(@users.last) # get_users() sorts by id DESC
+      expect(assigns[:users].last).to eq(@users.first)
+      expect(response).to render_template("admin/users/index")
+    end
+
+    it "performs lookup using query string" do
+      @amy = FactoryGirl.create(:user, username: "amy_anderson")
+      @bob = FactoryGirl.create(:user, username: "bob_builder")
+
+      get :index, query: "amy_anderson"
+      expect(assigns[:users]).to eq([@amy])
+      expect(assigns[:current_query]).to eq("amy_anderson")
+      expect(session[:users_current_query]).to eq("amy_anderson")
+    end
+  end
+
+  # GET /admin/users/1
+  # GET /admin/users/1.xml
+  #----------------------------------------------------------------------------
+  describe "GET show" do
+    it "assigns the requested user as @user and renders [show] template" do
+      @user = FactoryGirl.create(:user)
+
+      get :show, id: @user.id
+      expect(assigns[:user]).to eq(@user)
+      expect(response).to render_template("admin/users/show")
+    end
+  end
+
+  # GET /admin/users/new
+  # GET /admin/users/new.xml                                               AJAX
+  #----------------------------------------------------------------------------
+  describe "GET new" do
+    it "assigns a new user as @user and renders [new] template" do
+      xhr :get, :new
+      expect(assigns[:user]).to be_new_record
+      expect(response).to render_template("admin/users/new")
+    end
+  end
+
+  # GET /admin/users/1/edit                                                AJAX
+  #----------------------------------------------------------------------------
+  describe "GET edit" do
+    it "assigns the requested user as @user and renders [edit] template" do
+      @user = FactoryGirl.create(:user)
+
+      xhr :get, :edit, id: @user.id
+      expect(assigns[:user]).to eq(@user)
+      expect(assigns[:previous]).to eq(nil)
+      expect(response).to render_template("admin/users/edit")
+    end
+
+    it "assigns the previous user as @previous when necessary" do
+      @user = FactoryGirl.create(:user)
+      @previous = FactoryGirl.create(:user)
+
+      xhr :get, :edit, id: @user.id, previous: @previous.id
+      expect(assigns[:previous]).to eq(@previous)
+    end
+
+    it "reloads current page with the flash message if user got deleted" do
+      @user = FactoryGirl.create(:user)
+      @user.destroy
+
+      xhr :get, :edit, id: @user.id
+      expect(flash[:warning]).not_to eq(nil)
+      expect(response.body).to eq("window.location.reload();")
+    end
+
+    it "notifies the view if previous user got deleted" do
+      @user = FactoryGirl.create(:user)
+      @previous = FactoryGirl.create(:user)
+      @previous.destroy
+
+      xhr :get, :edit, id: @user.id, previous: @previous.id
+      expect(flash[:warning]).to eq(nil) # no warning, just silently remove the div
+      expect(assigns[:previous]).to eq(@previous.id)
+      expect(response).to render_template("admin/users/edit")
+    end
+  end
+
+  # POST /admin/users
+  # POST /admin/users.xml                                                  AJAX
+  #----------------------------------------------------------------------------
+  describe "POST create" do
+    describe "with valid params" do
+      before(:each) do
+        @username = "none"
+        @email = @username + "@example.com"
+        @password = "secret"
+      end
+
+      it "assigns a newly created user as @user and renders [create] template" do
+        @user = FactoryGirl.build(:user, username: @username, email: @email)
+        allow(User).to receive(:new).and_return(@user)
+
+        xhr :post, :create, user: { username: @username, email: @email, password: @password, password_confirmation: @password }
+        expect(assigns[:user]).to eq(@user)
+        expect(response).to render_template("admin/users/create")
+      end
+
+      it "creates admin user when requested so" do
+        xhr :post, :create, user: { username: @username, email: @email, admin: "1", password: @password, password_confirmation: @password }
+        expect(assigns[:user].admin).to eq(true)
+        expect(response).to render_template("admin/users/create")
+      end
+
+      it "doesn't create admin user unless requested so" do
+        xhr :post, :create, user: { username: @username, email: @email, admin: "0", password: @password, password_confirmation: @password }
+        expect(assigns[:user].admin).to eq(false)
+        expect(response).to render_template("admin/users/create")
+      end
+    end
+
+    describe "with invalid params" do
+      it "assigns a newly created but unsaved user as @user and re-renders [create] template" do
+        @user = FactoryGirl.build(:user, username: "", email: "")
+        allow(User).to receive(:new).and_return(@user)
+
+        xhr :post, :create, user: {}
+        expect(assigns[:user]).to eq(@user)
+        expect(response).to render_template("admin/users/create")
+      end
+    end
+  end
+
+  # PUT /admin/users/1
+  # PUT /admin/users/1.xml                                                 AJAX
+  #----------------------------------------------------------------------------
+  describe "PUT update" do
+    describe "with valid params" do
+      it "updates the requested user, assigns it to @user, and renders [update] template" do
+        @user = FactoryGirl.create(:user, username: "flip", email: "flip@example.com")
+
+        xhr :put, :update, id: @user.id, user: { username: "flop", email: "flop@example.com" }
+        expect(assigns[:user]).to eq(@user.reload)
+        expect(assigns[:user].username).to eq("flop")
+        expect(response).to render_template("admin/users/update")
+      end
+
+      it "reloads current page is the user got deleted" do
+        @user = FactoryGirl.create(:user)
+        @user.destroy
+
+        xhr :put, :update, id: @user.id, user: { username: "flop", email: "flop@example.com" }
+        expect(flash[:warning]).not_to eq(nil)
+        expect(response.body).to eq("window.location.reload();")
+      end
+
+      it "assigns admin rights when requested so" do
+        @user = FactoryGirl.create(:user, admin: false)
+        xhr :put, :update, id: @user.id, user: { admin: "1", username: @user.username, email: @user.email }
+        expect(assigns[:user]).to eq(@user.reload)
+        expect(assigns[:user].admin).to eq(true)
+        expect(response).to render_template("admin/users/update")
+      end
+
+      it "revokes admin rights when requested so" do
+        @user = FactoryGirl.create(:user, admin: true)
+        xhr :put, :update, id: @user.id, user: { admin: "0", username: @user.username, email: @user.email }
+        expect(assigns[:user]).to eq(@user.reload)
+        expect(assigns[:user].admin).to eq(false)
+        expect(response).to render_template("admin/users/update")
+      end
+    end
+
+    describe "with invalid params" do
+      it "doesn't update the requested user, but assigns it to @user and renders [update] template" do
+        @user = FactoryGirl.create(:user, username: "flip", email: "flip@example.com")
+
+        xhr :put, :update, id: @user.id, user: {}
+        expect(assigns[:user]).to eq(@user.reload)
+        expect(assigns[:user].username).to eq("flip")
+        expect(response).to render_template("admin/users/update")
+      end
+    end
+  end
+
+  # GET /admin/users/1/confirm                                             AJAX
+  #----------------------------------------------------------------------------
+  describe "GET confirm" do
+    it "assigns the requested user as @user and renders [confirm] template" do
+      @user = FactoryGirl.create(:user)
+
+      xhr :get, :confirm, id: @user.id
+      expect(assigns[:user]).to eq(@user)
+      expect(response).to render_template("admin/users/confirm")
+    end
+
+    it "reloads current page is the user got deleted" do
+      @user = FactoryGirl.create(:user)
+      @user.destroy
+
+      xhr :get, :confirm, id: @user.id
+      expect(flash[:warning]).not_to eq(nil)
+      expect(response.body).to eq("window.location.reload();")
+    end
+  end
+
+  # DELETE /admin/users/1
+  # DELETE /admin/users/1.xml                                              AJAX
+  #----------------------------------------------------------------------------
+  describe "DELETE destroy" do
+    it "destroys the requested user and renders [destroy] template" do
+      @user = FactoryGirl.create(:user)
+
+      xhr :delete, :destroy, id: @user.id
+      expect { User.find(@user.id) }.to raise_error(ActiveRecord::RecordNotFound)
+      expect(response).to render_template("admin/users/destroy")
+    end
+
+    it "handles the case when the requested user can't be deleted" do
+      @user = FactoryGirl.create(:user)
+      @account = FactoryGirl.create(:account, user: @user) # Plant artifact to prevent the user from being deleted.
+
+      xhr :delete, :destroy, id: @user.id
+      expect(flash[:warning]).not_to eq(nil)
+      expect { User.find(@user.id) }.not_to raise_error
+      expect(response).to render_template("admin/users/destroy")
+    end
+  end
+
+  # POST /users/auto_complete/query                                        AJAX
+  #----------------------------------------------------------------------------
+  describe "POST auto_complete" do
+    before(:each) do
+      @auto_complete_matches = [FactoryGirl.create(:user, first_name: "Hello")]
+    end
+
+    it_should_behave_like("auto complete")
+  end
+
+  # PUT /admin/users/1/suspend
+  # PUT /admin/users/1/suspend.xml                                         AJAX
+  #----------------------------------------------------------------------------
+  describe "PUT suspend" do
+    it "suspends the requested user" do
+      @user = FactoryGirl.create(:user)
+
+      xhr :put, :suspend, id: @user.id
+      expect(assigns[:user].suspended?).to eq(true)
+      expect(response).to render_template("admin/users/suspend")
+    end
+
+    it "doesn't suspend current user" do
+      @user = current_user
+
+      xhr :put, :suspend, id: @user.id
+      expect(assigns[:user].suspended?).to eq(false)
+      expect(response).to render_template("admin/users/suspend")
+    end
+
+    it "reloads current page is the user got deleted" do
+      @user = FactoryGirl.create(:user)
+      @user.destroy
+
+      xhr :put, :suspend, id: @user.id
+      expect(flash[:warning]).not_to eq(nil)
+      expect(response.body).to eq("window.location.reload();")
+    end
+  end
+
+  # PUT /admin/users/1/reactivate
+  # PUT /admin/users/1/reactivate.xml                                      AJAX
+  #----------------------------------------------------------------------------
+  describe "PUT reactivate" do
+    it "re-activates the requested user" do
+      @user = FactoryGirl.create(:user, suspended_at: Time.now.yesterday)
+
+      xhr :put, :reactivate, id: @user.id
+      expect(assigns[:user].suspended?).to eq(false)
+      expect(response).to render_template("admin/users/reactivate")
+    end
+
+    it "reloads current page is the user got deleted" do
+      @user = FactoryGirl.create(:user)
+      @user.destroy
+
+      xhr :put, :reactivate, id: @user.id
+      expect(flash[:warning]).not_to eq(nil)
+      expect(response.body).to eq("window.location.reload();")
+    end
+  end
+end

data/spec/controllers/applications_controller_spec.rb

@@ -0,0 +1,41 @@
+# Copyright (c) 2008-2013 Michael Dvorkin and contributors.
+#
+# Fat Free CRM is freely distributable under the terms of MIT license.
+# See MIT-LICENSE file or http://www.opensource.org/licenses/mit-license.php
+#------------------------------------------------------------------------------
+require 'spec_helper'
+
+describe ApplicationController do
+  describe "auto_complete_ids_to_exclude" do
+    it "should return [] when related is nil" do
+      expect(controller.send(:auto_complete_ids_to_exclude, nil)).to eq([])
+    end
+
+    it "should return [] when related is ''" do
+      expect(controller.send(:auto_complete_ids_to_exclude, '')).to eq([])
+    end
+
+    it "should return campaign id 5 when related is '5' and controller is campaigns" do
+      expect(controller.send(:auto_complete_ids_to_exclude, '5').sort).to eq([5])
+    end
+
+    it "should return [6, 9] when related is 'campaigns/7'" do
+      allow(controller).to receive(:controller_name).and_return('opportunities')
+      campaign = double(Campaign, opportunities: [double(id: 6), double(id: 9)])
+      expect(Campaign).to receive(:find_by_id).with('7').and_return(campaign)
+      expect(controller.send(:auto_complete_ids_to_exclude, 'campaigns/7').sort).to eq([6, 9])
+    end
+
+    it "should return [] when related object is not found" do
+      expect(Campaign).to receive(:find_by_id).with('7').and_return(nil)
+      expect(controller.send(:auto_complete_ids_to_exclude, 'campaigns/7')).to eq([])
+    end
+
+    it "should return [] when related object association is not found" do
+      allow(controller).to receive(:controller_name).and_return('not_a_method_that_exists')
+      campaign = double(Campaign)
+      expect(Campaign).to receive(:find_by_id).with('7').and_return(campaign)
+      expect(controller.send(:auto_complete_ids_to_exclude, 'campaigns/7')).to eq([])
+    end
+  end
+end

data/spec/controllers/authentications_controller_spec.rb

@@ -0,0 +1,148 @@
+# Copyright (c) 2008-2013 Michael Dvorkin and contributors.
+#
+# Fat Free CRM is freely distributable under the terms of MIT license.
+# See MIT-LICENSE file or http://www.opensource.org/licenses/mit-license.php
+#------------------------------------------------------------------------------
+require File.expand_path(File.dirname(__FILE__) + '/../spec_helper')
+
+describe AuthenticationsController do
+  before(:each) do
+    activate_authlogic
+    logout
+  end
+
+  # Authentication filters
+  #----------------------------------------------------------------------------
+  describe "authentication filters" do
+    describe "user must not be logged" do
+      describe "DELETE authentication (logout form)" do
+        it "displays 'must be logged out message' and redirects to login page" do
+          delete :destroy
+          expect(flash[:notice]).not_to eq(nil)
+          expect(flash[:notice]).to match(/^You must be logged in/)
+          expect(response).to redirect_to(login_path)
+        end
+
+        it "redirects to login page" do
+          get :show
+          expect(response).to redirect_to(login_path)
+        end
+      end
+    end
+
+    describe "user must not be logged in" do
+      before(:each) do
+        @user = FactoryGirl.create(:user, username: "user", password: "pass", password_confirmation: "pass")
+        allow(@controller).to receive(:current_user).and_return(@user)
+      end
+
+      describe "GET authentication (login form)" do
+        it "displays 'must be logged out message' and redirects to profile page" do
+          get :new
+          expect(flash[:notice]).not_to eq(nil)
+          expect(flash[:notice]).to match(/^You must be logged out/)
+          expect(response).to redirect_to(profile_path)
+        end
+      end
+
+      describe "POST authentication" do
+        it "displays 'must be logged out message' and redirects to profile page" do
+          post :create, authentication: @login
+          expect(flash[:notice]).not_to eq(nil)
+          expect(flash[:notice]).to match(/^You must be logged out/)
+          expect(response).to redirect_to(profile_path)
+        end
+      end
+    end
+  end
+
+  # POST /authentications
+  # POST /authentications.xml                                              HTML
+  #----------------------------------------------------------------------------
+  describe "POST authentications" do
+    before(:each) do
+      @login = { username: "user", password: "pass", remember_me: "0" }
+      @authentication = double(Authentication, @login)
+    end
+
+    describe "successful authentication " do
+      before(:each) do
+        allow(@authentication).to receive(:save).and_return(true)
+        allow(Authentication).to receive(:new).and_return(@authentication)
+      end
+
+      it "displays welcome message and redirects to the home page" do
+        @user = FactoryGirl.create(:user, username: "user", password: "pass", password_confirmation: "pass", login_count: 0)
+        allow(@authentication).to receive(:user).and_return(@user)
+
+        post :create, authentication: @login
+        expect(flash[:notice]).not_to eq(nil)
+        expect(flash[:notice]).not_to match(/last login/)
+        expect(response).to redirect_to(root_path)
+      end
+
+      it "displays last login time if it's not the first login" do
+        @user = FactoryGirl.create(:user, username: "user", password: "pass", password_confirmation: "pass", login_count: 42)
+        allow(@authentication).to receive(:user).and_return(@user)
+
+        post :create, authentication: @login
+        expect(flash[:notice]).to match(/last login/)
+        expect(response).to redirect_to(root_path)
+      end
+    end
+
+    describe "authenticaion failure" do
+      describe "user is not suspended" do
+        it "redirects to login page if username or password are invalid" do
+          @user = FactoryGirl.create(:user, username: "user", password: "pass", password_confirmation: "pass")
+          allow(@authentication).to receive(:user).and_return(@user)
+          allow(@authentication).to receive(:save).and_return(false) # <--- Authentication failure.
+          allow(Authentication).to receive(:new).and_return(@authentication)
+
+          post :create, authentication: @login
+          expect(flash[:warning]).not_to eq(nil)
+          expect(response).to redirect_to(action: :new)
+        end
+      end
+
+      describe "user has been suspended" do
+        before(:each) do
+          allow(@authentication).to receive(:save).and_return(true)
+          allow(Authentication).to receive(:new).and_return(@authentication)
+        end
+
+        # This tests :before_save update_info callback in Authentication model.
+        it "keeps user login attributes intact" do
+          @user = FactoryGirl.create(:user, username: "user", password: "pass", password_confirmation: "pass", suspended_at: Date.yesterday, login_count: 0, last_login_at: nil, last_login_ip: nil)
+          allow(@authentication).to receive(:user).and_return(@user)
+
+          post :create, authentication: @login
+          expect(@authentication.user.login_count).to eq(0)
+          expect(@authentication.user.last_login_at).to be_nil
+          expect(@authentication.user.last_login_ip).to be_nil
+        end
+
+        it "redirects to login page if user is suspended" do
+          @user = FactoryGirl.create(:user, username: "user", password: "pass", password_confirmation: "pass", suspended_at: Date.yesterday)
+          allow(@authentication).to receive(:user).and_return(@user)
+
+          post :create, authentication: @login
+          expect(flash[:warning]).not_to eq(nil) # Invalid username/password.
+          expect(flash[:notice]).to eq(nil)      # Not approved yet.
+          expect(response).to redirect_to(action: :new)
+        end
+
+        it "redirects to login page with the message if signup needs approval and user hasn't been activated yet" do
+          allow(Setting).to receive(:user_signup).and_return(:needs_approval)
+          @user = FactoryGirl.create(:user, username: "user", password: "pass", password_confirmation: "pass", suspended_at: Date.yesterday, login_count: 0)
+          allow(@authentication).to receive(:user).and_return(@user)
+
+          post :create, authentication: @login
+          expect(flash[:warning]).to eq(nil)     # Invalid username/password.
+          expect(flash[:notice]).not_to eq(nil)  # Not approved yet.
+          expect(response).to redirect_to(action: :new)
+        end
+      end
+    end # authentication failure
+  end # POST authenticate
+end