refinerycms 0.9.8.9 → 0.9.9

data/authentication/features/step_definitions/lost_password.rb

@@ -0,0 +1,8 @@
+Given /^I have a user with email "(.*)"$/ do |email|
+  Factory(:refinery_user, :email => email)
+end
+
+Given /^I am (not )?requesting password reset$/ do |action|
+  @user = Factory(:refinery_user, :updated_at => 11.minutes.ago)
+  @user.send(:generate_reset_password_token!) if action.nil?
+end

data/authentication/features/step_definitions/user_steps.rb

@@ -0,0 +1,36 @@
+def login
+  visit new_user_session_path
+  fill_in("user_login", :with => @user.email)
+  fill_in("user_password", :with => 'greenandjuicy')
+  click_button("submit_button")
+end
+
+Given /^I am a logged in refinery user$/ do
+  @user ||= Factory(:refinery_user)
+  login
+end
+
+Given /^I am a logged in customer$/ do
+  @user ||= Factory(:user)
+  login
+end
+
+Given /^A Refinery user exists$/ do
+  @refinery_user ||= Factory(:refinery_user)
+end
+
+Given /^I have a user named "(.*)"$/ do |name|
+  Factory(:user, :username => name)
+end
+
+Given /^I have a R|refinery user named "(.*)"$/ do |name|
+  Factory(:refinery_user, :username => name)
+end
+
+Given /^I have no users$/ do
+  User.delete_all
+end
+
+Then /^I should have ([0-9]+) users?$/ do |count|
+  User.count.should == count.to_i
+end

data/authentication/features/support/factories.rb

@@ -0,0 +1,18 @@
+require 'factory_girl'
+
+Factory.define :user do |u|
+  u.sequence(:username) { |n| "person#{n}" }
+  u.sequence(:email) { |n| "person#{n}@cucumber.com" }
+  u.password  "greenandjuicy"
+  u.password_confirmation "greenandjuicy"
+end
+
+Factory.define :refinery_user, :parent => :user do |u|
+  u.roles { [ Role[:refinery] ] }
+
+  u.after_create do |user|
+    Refinery::Plugins.registered.each_with_index do |plugin, index|
+      user.plugins.create(:name => plugin.name, :position => index)
+    end
+  end
+end

data/authentication/features/support/paths.rb

@@ -0,0 +1,24 @@
+module NavigationHelpers
+  module Refinery
+    module Authentication
+      def path_to(page_name)
+        case page_name
+
+        when /the list of users/
+          admin_users_path
+
+        when /the login page/
+          new_user_session_path
+
+        when /the forgot password page/
+          new_user_password_path
+
+        when /the reset password page/
+          edit_user_password_path(:reset_password_token => @user.reset_password_token)
+        else
+          nil
+        end
+      end
+    end
+  end
+end

data/authentication/lib/authenticated_system.rb

@@ -0,0 +1,29 @@
+module AuthenticatedSystem
+  protected
+    # Store the URI of the current request in the session.
+    #
+    # We can return to this location by calling #redirect_back_or_default.
+    def store_location
+      session[:return_to] = request.fullpath
+    end
+
+    # Redirect to the URI stored by the most recent store_location call or
+    # to the passed default.
+    def redirect_back_or_default(default)
+      redirect_to(session[:return_to] || default)
+      session[:return_to] = nil
+    end
+
+    #def current_user
+      #current_user
+    #end
+
+    def refinery_user?
+      user_signed_in? && current_user.has_role?(:refinery)
+    end
+
+    def self.included(base)
+      base.send :helper_method, :current_user, :current_user_session, :user_signed_in?, :refinery_user? if base.respond_to? :helper_method
+    end
+
+end

data/authentication/lib/authentication.rb

@@ -0,0 +1,30 @@
+require 'refinery'
+
+module Refinery
+  module Authentication
+
+    class Engine < Rails::Engine
+      config.autoload_paths += %W( #{config.root}/lib )
+
+      config.after_initialize do
+        Refinery::Plugin.register do |plugin|
+          plugin.name = "refinery_users"
+          plugin.version = %q{0.9.9}
+          plugin.menu_match = /(refinery|admin)\/users$/
+          plugin.activity = {
+            :class => User,
+            :title => 'login'
+          }
+          plugin.url = {:controller => "/admin/users"}
+        end
+      end
+    end
+  end
+
+  class << self
+    attr_accessor :authentication_login_field
+    def authentication_login_field
+      @authentication_login_field ||= 'login'
+    end
+  end
+end

data/authentication/lib/generators/refinerycms_authentication_generator.rb

@@ -0,0 +1,8 @@
+require 'refinery/generators'
+
+class RefinerycmsAuthentication < ::Refinery::Generators::EngineInstaller
+
+  source_root File.expand_path('../../../', __FILE__)
+  engine_name "authentication"
+
+end

data/authentication/license.md

@@ -0,0 +1,21 @@
+# MIT License
+ 
+Copyright (c) 2005-2010 [Resolve Digital](http://www.resolvedigital.com)
+ 
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+ 
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+ 
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/authentication/readme.md

@@ -0,0 +1,17 @@
+# Authentication
+
+## About
+
+At the heart of Refinery's user management is the authentication plugin located in ``vendor/plugins/authentication``
+
+What this really is is just a standard [authlogic](http://github.com/binarylogic/authlogic) install extended with a few extra features like "I forgot my password" and hooked directly into the heart of Refinery's plugin system.
+
+Authlogic allows you to easily integrate with other systems too. So you could be logged in into another system using authlogic and easily stay logged in between the two systems without having to login twice.
+
+## Adding New Users
+
+New users can be easily added by going to the 'Users' area admin and clicking on "Add new user".
+
+## Limiting and Granting Access
+
+Each user has a set of plugins they're allowed to see. You can control which plugins each user can see by checking and unchecking the checkboxes next to the plugin name when editing or adding a new user.

data/authentication/refinerycms-authentication.gemspec

@@ -0,0 +1,20 @@
+require File.expand_path(File.join(*%w[.. .. lib refinery.rb]), __FILE__)
+version = Refinery.version
+
+Gem::Specification.new do |s|
+  s.platform    = Gem::Platform::RUBY
+  s.name        = 'refinerycms-authentication'
+  s.version     = version
+  s.summary     = 'Authentication engine for Refinery CMS'
+  s.description = 'Ruby on Rails Authentication engine for Refinery CMS'
+  s.required_ruby_version = '>= 1.8.7'
+
+  s.email       = %q{info@refinerycms.com}
+  s.homepage    = %q{http://refinerycms.com}
+  s.authors     = ['Resolve Digital', 'David Jones', 'Philip Arndt']
+
+  s.files       = Dir['**/*'] - Dir['*.gemspec']
+  s.require_path = 'lib'
+
+  s.add_dependency('refinerycms-core', version)
+end

data/authentication/spec/models/user_spec.rb

@@ -0,0 +1,159 @@
+require 'spec_helper'
+
+Dir[File.expand_path('../../../features/support/factories.rb', __FILE__)].each {|f| require f}
+
+describe User do
+  context "Roles" do
+    context "add_role" do
+      it "raises Exception when Role object is passed" do
+        user = Factory(:user)
+        lambda{ user.add_role(Role.new)}.should raise_exception
+      end
+
+      it "adds a Role to the User when role not yet assigned to User" do
+        user = Factory(:user)
+        lambda {
+          user.add_role(:new_role)
+        }.should change(user.roles, :count).by(1)
+        user.roles.collect(&:title).should include("NewRole")
+      end
+
+      it "does not add a Role to the User when this Role is already assigned to User" do
+        user = Factory(:refinery_user)
+        lambda {
+          user.add_role(:refinery)
+        }.should_not change(user.roles, :count).by(1)
+        user.roles.collect(&:title).should include("Refinery")
+      end
+    end
+
+    context "has_role" do
+      it "raises Exception when Role object is passed" do
+        user = Factory(:user)
+        lambda{ user.has_role?(Role.new)}.should raise_exception
+      end
+
+      it "returns the true if user has Role" do
+        user = Factory(:refinery_user)
+        user.has_role?(:refinery).should be_true
+      end
+
+      it "returns false if user hasn't the Role" do
+        user = Factory(:refinery_user)
+        user.has_role?(:refinery_fail).should be_false
+      end
+    end
+
+    describe "role association" do
+      it "have a roles attribute" do
+        Factory(:user).should respond_to(:roles)
+      end
+    end
+  end
+
+  context "validations" do
+    # email and password validations are done by including devises validatable
+    # module so those validations are not tested here
+    before(:each) do
+      @attr = {
+        :username => "RefineryCMS",
+        :email => "refinery@cms.com",
+        :password => "123456",
+        :password_confirmation => "123456"
+      }
+    end
+
+    it "requires username" do
+      User.new(@attr.merge(:username => "")).should_not be_valid
+    end
+
+    it "rejects duplicate usernames" do
+      User.create!(@attr)
+      User.new(@attr.merge(:email => "another@email.com")).should_not be_valid
+    end
+  end
+
+  describe ".find_for_database_authentication" do
+    it "finds user either by username or email" do
+      user = Factory(:user)
+      User.find_for_database_authentication(:login => user.username).should == user
+      User.find_for_database_authentication(:login => user.email).should == user
+    end
+  end
+
+  describe "#can_delete?" do
+    before(:each) do
+      @user = Factory(:refinery_user)
+      @user_not_persisted = Factory.build(:refinery_user)
+      @super_user = Factory(:refinery_user)
+      @super_user.add_role(:superuser)
+    end
+
+    context "won't allow to delete" do
+      it "not persisted user record" do
+        @user.can_delete?(@user_not_persisted).should be_false
+      end
+
+      it "user with superuser role" do
+        @user.can_delete?(@super_user).should be_false
+      end
+
+      it "if user count with refinery role <= 1" do
+        Role[:refinery].users.delete(@user)
+        @super_user.can_delete?(@user).should be_false
+      end
+
+      it "user himself" do
+        @user.can_delete?(@user).should be_false
+      end
+    end
+
+    context "allow to delete" do
+      it "if all conditions return true" do
+        @super_user.can_delete?(@user).should be_true
+      end
+    end
+  end
+
+  describe "#plugins=" do
+    it "assigns plugins to user" do
+      user = Factory(:user)
+      plugin_list = ["refinery_one", "refinery_two", "refinery_three"]
+      user.plugins = plugin_list
+      user.plugins.collect { |p| p.name }.should == plugin_list
+    end
+  end
+
+  describe "#authorized_plugins" do
+    it "returns array of user and always allowd plugins" do
+      user = Factory(:user)
+      ["refinery_one", "refinery_two", "refinery_three"].each_with_index do |name, index|
+        user.plugins.create!(:name => name, :position => index)
+      end
+      user.authorized_plugins.should == user.plugins.collect { |p| p.name } | Refinery::Plugins.always_allowed.names
+    end
+  end
+
+  describe "plugins association" do
+    before(:each) do
+      @user = Factory(:user)
+      @plugin_list = ["refinery_one", "refinery_two", "refinery_three"]
+      @user.plugins = @plugin_list
+    end
+
+    it "have a plugins attribute" do
+      @user.should respond_to(:plugins)
+    end
+
+    it "returns plugins in ASC order" do
+      @user.plugins[0].name.should == @plugin_list[0]
+      @user.plugins[1].name.should == @plugin_list[1]
+      @user.plugins[2].name.should == @plugin_list[2]
+    end
+
+    it "deletes associated plugins" do
+      @user.destroy
+      UserPlugin.find_by_user_id(@user.id).should be_nil
+    end
+  end
+end

data/autotest/autotest.rb

@@ -0,0 +1,17 @@
+###  uncomment any of the following requires applicable for your system
+###  and then copy this to .autotest if you are using the ZenTest autotest.
+# require "autotest/restart"
+# require "test_notifier/runner/autotest"
+# require "redgreen/autotest"
+# require "autotest/timestamp"
+
+# adds exceptions from .gitignore file, please modify exceptions there!
+imported_exceptions =  IO.readlines('.gitignore').inject([]) do |acc, line|
+  acc << line.strip if line.to_s[0] != '#' && line.strip != ''; acc
+end
+
+Autotest.add_hook :initialize do |autotest|
+  imported_exceptions.each do |exception|
+    autotest.add_exception(exception)
+  end
+end

data/autotest/discover.rb

@@ -0,0 +1,2 @@
+Autotest.add_discovery { "rails" }
+Autotest.add_discovery { "rspec2" }

data/base/db/migrate/20100913234706_create_refinerycms_core_schema.rb

@@ -0,0 +1,23 @@
+class CreateRefinerycmsCoreSchema < ActiveRecord::Migration
+  def self.up
+    create_table ::Slug.table_name, :force => true do |t|
+      t.string   "name"
+      t.integer  "sluggable_id"
+      t.integer  "sequence",                     :default => 1, :null => false
+      t.string   "sluggable_type", :limit => 40
+      t.string   "scope",          :limit => 40
+      t.datetime "created_at"
+    end
+
+    add_index ::Slug.table_name, ["name", "sluggable_type", "scope", "sequence"], :name => "index_#{::Slug.table_name}_on_name_sluggable_type_scope_and_sequence", :unique => true
+    add_index ::Slug.table_name, ["sluggable_id"], :name => "index_#{::Slug.table_name}_on_sluggable_id"
+  end
+
+  def self.down
+    [::Slug].reject{|m|
+      !(defined?(m) and m.respond_to?(:table_name))
+    }.each do |model|
+      drop_table model.table_name
+    end
+  end
+end

data/base/db/migrate/20101217113424_add_locale_to_slugs.rb

@@ -0,0 +1,13 @@
+class AddLocaleToSlugs < ActiveRecord::Migration
+  def self.up
+    add_column :slugs, :locale, :string
+
+    add_index :slugs, :locale
+  end
+
+  def self.down
+    remove_column :slugs, :locale
+
+    remove_index :slugs, :locale
+  end
+end