rockstart 0.1.0 → 0.1.1

data/lib/generators/rockstart/development/scaffolds/templates/model.rb.tt

@@ -0,0 +1,61 @@
+<% module_namespacing do -%>
+class <%= class_name %> < <%= parent_class_name.classify %>
+<% if attributes_names.any? { |name| name == "position" } -%>
+  # Use acts_as_list to maintain position of the <%= class_name %>
+  acts_as_list column: :position, top_of_list: 0 #, scope: :parent
+
+<% end -%>
+  # Allow Pagination of <%= class_name %> collections
+  paginates_per 25
+
+  # Log changes made to the <%= class_name %>
+  audited only: %i[<%= attributes_names.join(" ") %>]
+
+  # Generate human-readable tokens as params (friendly_id)
+<%-
+  # Generate scaffold with name or title, and a `slug:uniq` field to enable friendly_id
+  identifier_attribute_names = attributes_names.filter { |name| %w(name title).include?(name) }
+  friendly_id_attribute = identifier_attribute_names.first
+  if friendly_id_attribute && attributes_names.any? { |name| name == "slug" }
+-%>
+  extend FriendlyId
+  friendly_id :<%= friendly_id_attribute %>
+<% else -%>
+  # extend FriendlyId
+  # friendly_id :<%= friendly_id_attribute || "name" %>
+<% end -%>
+
+<%- identifier_attribute_names.each do |attribute_name| -%>
+  validates :<%= attribute_name %>, presence: true
+<% end -%>
+<% attributes.select(&:reference?).each do |attribute| -%>
+  belongs_to :<%= attribute.name %><%= ', polymorphic: true' if attribute.polymorphic? %>
+<% end -%>
+<% attributes.select(&:reference?).each do |attribute| -%>
+  belongs_to :<%= attribute.name %><%= ', polymorphic: true' if attribute.polymorphic? %>
+<% end -%>
+<% attributes.select(&:rich_text?).each do |attribute| -%>
+  has_rich_text :<%= attribute.name %>
+<% end -%>
+<% attributes.select(&:attachment?).each do |attribute| -%>
+  has_one_attached :<%= attribute.name %>
+<% end -%>
+<% attributes.select(&:attachments?).each do |attribute| -%>
+  has_many_attached :<%= attribute.name %>
+<% end -%>
+<% attributes.select(&:token?).each do |attribute| -%>
+  has_secure_token<% if attribute.name != "token" %> :<%= attribute.name %><% end %>
+<% end -%>
+<% if attributes.any?(&:password_digest?) -%>
+  has_secure_password
+<% end -%>
+
+  def to_s
+<% if friendly_id_attribute -%>
+    <%= friendly_id_attribute %>_was # Use original <%= friendly_id_attribute %> for display labels
+<% else -%>
+    "<%= class_name %>" # TODO: Provide a display label
+<% end -%>
+  end
+end
+<% end -%>

data/lib/generators/rockstart/development/scaffolds/templates/rspec/api_request_spec.rb.tt

@@ -0,0 +1,142 @@
+<%%-
+  resource_path = name.underscore.pluralize
+  permitted_attributes = attributes.reject { |a| a.name == "slug" }
+  permitted_params = permitted_attributes.map { |a| ":#{a.name}" }.join(", ")
+-%>
+# frozen_string_literal: true
+
+require "rails_helper"
+
+<%% module_namespacing do -%>
+RSpec.describe "/<%%= controller_class_name %>", <%%= type_metatag(:request) %> do
+  # This should return the minimal set of values that should be in the headers
+  # in order to pass any filters (e.g. authentication) defined in
+  # <%%= controller_class_name %>Controller, or in your router and rack
+  # middleware. Be sure to keep this updated too.
+  let(:valid_headers) do
+    {}
+  end
+
+<%% unless options[:singleton] -%>
+  describe "GET /<%%= resource_path %>" do
+    it "renders a successful response" do
+      create(:<%%= file_name %>)
+      get <%%= index_helper %>_url, headers: valid_headers, as: :json
+      expect(response).to be_successful
+    end
+  end
+<%% end -%>
+
+  describe "GET /<%%= resource_path %>/:id" do
+    it "renders a successful response" do
+      <%%= file_name %> = create(:<%%= file_name %>)
+      get <%%= show_helper.tr('@', '') %>, as: :json
+      expect(response).to be_successful
+    end
+  end
+
+  describe "POST /<%%= resource_path %>" do
+    context "with valid parameters" do
+      let(:valid_attributes) do
+        <%%- if permitted_attributes.any? -%>
+        attributes_for(:<%%= ns_file_name %>).slice(<%%= permitted_params %>)
+        <%%- else -%>
+        skip("Add a hash of attributes valid for your model")
+        <%%- end -%>
+      end
+
+      it "creates a new <%%= class_name %>" do
+        expect do
+          post <%%= index_helper %>_url,
+               params: { <%%= ns_file_name %>: valid_attributes }, headers: valid_headers, as: :json
+        end.to change(<%%= class_name %>, :count).by(1)
+      end
+
+      it "renders a JSON response with the new <%%= ns_file_name %>" do
+        post <%%= index_helper %>_url,
+             params: { <%%= ns_file_name %>: valid_attributes }, headers: valid_headers, as: :json
+        expect(response).to have_http_status(:created)
+        expect(response.content_type).to match(a_string_including("application/json"))
+      end
+    end
+
+    context "with invalid parameters" do
+      let(:invalid_attributes) do
+        skip("Add a hash of attributes invalid for your model")
+      end
+
+      it "does not create a new <%%= class_name %>" do
+        expect do
+          post <%%= index_helper %>_url,
+               params: { <%%= ns_file_name %>: invalid_attributes }, as: :json
+        end.to change(<%%= class_name %>, :count).by(0)
+      end
+
+      it "renders a JSON response with errors for the new <%%= ns_file_name %>" do
+        post <%%= index_helper %>_url,
+             params: { <%%= ns_file_name %>: invalid_attributes }, headers: valid_headers, as: :json
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(response.content_type).to eq("application/json")
+      end
+    end
+  end
+
+  describe "PATCH /<%%= resource_path %>/:id" do
+    context "with valid parameters" do
+      let(:new_attributes) do
+        <%%- if permitted_attributes.any? -%>
+        attributes_for(:<%%= ns_file_name %>).slice(<%%= permitted_params %>)
+        <%%- else -%>
+        skip("Add a hash of attributes valid for your model")
+        <%%- end -%>
+      end
+
+      it "updates the requested <%%= ns_file_name %>" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        patch <%%= show_helper.tr('@', '') %>,
+              params: { <%%= singular_table_name %>: invalid_attributes }, headers: valid_headers, as: :json
+
+        <%%= file_name %>.reload
+        <%%- if permitted_attributes.any? -%>
+        <%%- permitted_attributes.each do |attribute| -%>
+        expect(<%%= file_name %>.<%%= attribute.name %>).to eq(new_attributes[:<%%= attribute.name %>])
+        <%%- end -%>
+        <%%- else -%>
+        skip("Add assertions for updated state")
+        <%%- end -%>
+      end
+
+      it "renders a JSON response with the <%%= ns_file_name %>" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        patch <%%= show_helper.tr('@', '') %>,
+              params: { <%%= singular_table_name %>: invalid_attributes }, headers: valid_headers, as: :json
+        expect(response).to have_http_status(:ok)
+        expect(response.content_type).to eq("application/json")
+      end
+    end
+
+    context "with invalid parameters" do
+      let(:invalid_attributes) do
+        skip("Add a hash of attributes invalid for your model")
+      end
+
+      it "renders a JSON response with errors for the <%%= ns_file_name %>" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        patch <%%= show_helper.tr('@', '') %>,
+              params: { <%%= singular_table_name %>: invalid_attributes }, headers: valid_headers, as: :json
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(response.content_type).to eq("application/json")
+      end
+    end
+  end
+
+  describe "DELETE /<%%= resource_path %>/:id" do
+    it "destroys the requested <%%= ns_file_name %>" do
+      <%%= file_name %> = create(:<%%= file_name %>)
+      expect do
+        delete <%%= show_helper.tr('@', '') %>, headers: valid_headers, as: :json
+      end.to change(<%%= class_name %>, :count).by(-1)
+    end
+  end
+end
+<%% end -%>

data/lib/generators/rockstart/development/scaffolds/templates/rspec/model_spec.rb.tt

@@ -0,0 +1,35 @@
+require "rails_helper"
+
+<% module_namespacing do -%>
+RSpec.describe <%= class_name %>, <%= type_metatag(:model) %> do
+<%-
+# Generate scaffold with name or title, and a `slug:uniq` field to enable friendly_id
+  friendly_id_attribute = attributes_names.detect { |name| %w(name title).include?(name) }
+  using_friendly_id = friendly_id_attribute && attributes_names.any? { |name| %w(slug).include?(name) }
+-%>
+  <%- for attribute in attributes -%>
+  # <%= attribute.name %>:<%= attribute.type %>
+  it { is_expected.to have_db_column(:<%= attribute.name %>) }
+  <%- if %w(email name title).include?(attribute.name) -%>
+  it { is_expected.to validate_presence_of(:<%= attribute.name %>) }
+  <%- end -%>
+  <%- end -%>
+
+  describe "audited" do
+    it { should be_audited.only(%i[<%= attributes_names.join(" ") %>]) }
+<% attributes.select(&:reference?).each do |attribute| -%>
+    # it { should be_audited.associated_with(:<%= attribute.name %>) }
+<% end -%>
+  end
+<% if using_friendly_id -%>
+
+  describe "friendly_id" do
+    it "generates a slug from <%= friendly_id_attribute %>" do
+      <%= file_name %> = <%= class_name %>.new <%= friendly_id_attribute %>: "Example Slug"
+      <%= file_name %>.send(:set_slug) # callback method used by friendly_id
+      expect(<%= file_name %>.slug).to eq "example-slug"
+    end
+  end
+  <%- end -%>
+end
+<% end -%>

data/lib/generators/rockstart/development/scaffolds/templates/rspec/request_spec.rb.tt

@@ -0,0 +1,492 @@
+<%%-
+  resource_path = name.underscore.pluralize
+  permitted_attributes = attributes.reject { |a| a.name == "slug" }
+  permitted_params = permitted_attributes.map { |a| ":#{a.name}" }.join(", ")
+-%>
+# frozen_string_literal: true
+
+require "rails_helper"
+
+<%% module_namespacing do -%>
+RSpec.describe "<%%= controller_class_name %>", <%%= type_metatag(:request) %> do
+<%% unless options[:singleton] -%>
+  describe "GET /<%%= resource_path %>" do
+    context "with an authenticated admin" do
+      let(:authenticated_admin) { create(:user, :admin) }
+
+      before do
+        sign_in(authenticated_admin)
+      end
+
+      it "renders a successful response" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        get <%%= index_helper %>_url
+        expect(response).to be_successful
+        expect(response.body).to have_link(href: <%%= show_helper.tr('@', '').sub(/_url/, '_path') %>)
+      end
+    end
+
+    context "with an authenticated user" do
+      let(:authenticated_user) { create(:user) }
+
+      before do
+        sign_in(authenticated_user)
+      end
+
+      it "renders a successful response" do
+        create(:<%%= file_name %>)
+        get <%%= index_helper %>_url
+        expect(response).to be_successful
+      end
+    end
+
+    context "with an unauthorized user" do
+      let(:unauthorized_user) do
+        skip("Provide a user where <%%= class_name %>Policy.index? is not granted")
+      end
+
+      before do
+        sign_in(unauthorized_user)
+      end
+
+      it "forbids access" do
+        create(:<%%= file_name %>)
+        get <%%= index_helper %>_url
+        expect(response).to redirect_to(url_for_user_dashboard)
+
+        follow_redirect!
+        expect(response.body).to have_selector(".alert-error", text: t("pundit.example_policy.index?", default: t("pundit.default")))
+      end
+    end
+
+    it "does not allow access to guests" do
+      create(:<%%= file_name %>)
+      get <%%= index_helper %>_url
+      expect(response).to redirect_to(url_for_authentication)
+    end
+  end
+
+  describe "GET /<%%= resource_path %>/page/:page" do
+    context "with an authenticated admin" do
+      let(:authenticated_admin) { create(:user, :admin) }
+
+      before do
+        sign_in(authenticated_admin)
+      end
+
+      it "renders a successful response", :aggregate_failures do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        get <%%= index_helper %>_url(page: 1)
+        expect(response).to be_successful
+        expect(response.body).to have_link(href: <%%= show_helper.tr('@', '').sub(/_url/, '_path') %>)
+
+        # Second Page
+        get <%%= index_helper %>_url(page: 2)
+        expect(response).to be_successful
+        expect(response.body).not_to have_link(href: <%%= show_helper.tr('@', '').sub(/_url/, '_path') %>)
+      end
+    end
+  end
+<%% end -%>
+
+  describe "GET /<%%= resource_path %>/:id" do
+    context "with an authenticated admin" do
+      let(:authenticated_admin) { create(:user, :admin) }
+
+      before do
+        sign_in(authenticated_admin)
+      end
+
+      it "renders a successful response" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        get <%%= show_helper.tr('@', '') %>
+        expect(response).to be_successful
+      end
+    end
+
+    context "with an authenticated user" do
+      let(:authenticated_user) { create(:user) }
+
+      before do
+        sign_in(authenticated_user)
+      end
+
+      it "renders a successful response" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        get <%%= show_helper.tr('@', '') %>
+        expect(response).to be_successful
+      end
+    end
+
+    context "with an unauthorized user" do
+      let(:unauthorized_user) do
+        skip("Provide a user where <%%= class_name %>Policy.show? is not granted")
+      end
+
+      before do
+        sign_in(unauthorized_user)
+      end
+
+      it "forbids access" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        get <%%= show_helper.tr('@', '') %>
+        expect(response).to redirect_to(<%%= index_helper %>_url)
+
+        follow_redirect!
+        expect(response.body).to have_selector(".alert-error", text: t("pundit.example_policy.show?", default: t("pundit.default")))
+      end
+    end
+
+    it "does not allow access to guests" do
+      <%%= file_name %> = create(:<%%= file_name %>)
+      get <%%= show_helper.tr('@', '') %>
+      expect(response).to redirect_to(url_for_authentication)
+    end
+  end
+
+  describe "GET /<%%= resource_path %>/new" do
+    context "with an authenticated admin" do
+      let(:authenticated_admin) { create(:user, :admin) }
+
+      before do
+        sign_in(authenticated_admin)
+      end
+
+      it "renders a successful response" do
+        get <%%= new_helper %>
+        expect(response).to be_successful
+      end
+    end
+
+    context "with an authenticated user" do
+      let(:authenticated_user) { create(:user) }
+
+      before do
+        sign_in(authenticated_user)
+      end
+
+      it "forbids access" do
+        get <%%= new_helper %>
+        expect(response).to redirect_to(<%%= index_helper %>_url)
+
+        follow_redirect!
+        expect(response.body).to have_selector(".alert-error", text: t("pundit.example_policy.new?", default: t("pundit.default")))
+      end
+    end
+
+    it "does not allow access to guests" do
+      get <%%= new_helper %>
+      expect(response).to redirect_to(url_for_authentication)
+    end
+  end
+
+  describe "GET /<%%= resource_path %>/:id/edit" do
+    context "with an authenticated admin" do
+      let(:authenticated_admin) { create(:user, :admin) }
+
+      before do
+        sign_in(authenticated_admin)
+      end
+
+      it "render a successful response" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        get <%%= edit_helper.tr('@','') %>
+        expect(response).to be_successful
+      end
+    end
+
+    context "with an authenticated user" do
+      let(:authenticated_user) { create(:user) }
+
+      before do
+        sign_in(authenticated_user)
+      end
+
+      it "forbids access" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        get <%%= edit_helper.tr('@','') %>
+        expect(response).to redirect_to(<%%= show_helper.tr('@', '') %>)
+
+        follow_redirect!
+        expect(response.body).to have_selector(".alert-error", text: t("pundit.example_policy.edit?", default: t("pundit.default")))
+      end
+    end
+
+    it "does not allow access to guests" do
+      <%%= file_name %> = create(:<%%= file_name %>)
+      get <%%= edit_helper.tr('@','') %>
+      expect(response).to redirect_to(url_for_authentication)
+    end
+  end
+
+  describe "POST /<%%= resource_path %>" do
+    context "with valid parameters" do
+      let(:valid_attributes) do
+        <%%- if permitted_attributes.any? -%>
+        attributes_for(:<%%= ns_file_name %>).slice(<%%= permitted_params %>)
+        <%%- else -%>
+        skip("Add a hash of attributes valid for your model")
+        <%%- end -%>
+      end
+
+      context "with an authenticated admin" do
+        let(:authenticated_admin) { create(:user, :admin) }
+
+        before do
+          sign_in(authenticated_admin)
+        end
+
+        it "creates a new <%%= class_name %>" do
+          expect do
+            post <%%= index_helper %>_url, params: { <%%= ns_file_name %>: valid_attributes }
+          end.to change(<%%= class_name %>, :count).by(1)
+
+          <%%= file_name %> = <%%= class_name %>.last
+          <%%- if permitted_attributes.any? -%>
+          <%%- permitted_attributes.each do |attribute| -%>
+          expect(<%%= file_name %>.<%%= attribute.name %>).to eq(valid_attributes[:<%%= attribute.name %>])
+           <%%- end -%>
+          <%%- else -%>
+          skip("Add assertions for created state")
+          <%%- end -%>
+        end
+
+        it "audits the change", :aggregate_failures do
+          expect do
+            post <%%= index_helper %>_url, params: { <%%= ns_file_name %>: valid_attributes }
+          end.to change(Audit, :count).by(1)
+
+          <%%= file_name %> = <%%= class_name %>.last!
+
+          audit = <%%= file_name %>.audits.last
+          expect(audit.action).to eq "create"
+          expect(audit.associated).to be_nil
+<% if auth0? -%>
+          expect(audit.user_uid).to eq authenticated_admin.id
+<% else -%>
+          expect(audit.user).to eq authenticated_admin
+<% end -%>
+          expect(audit.remote_address).not_to eq request.remote_ip # Anonymized
+          expect(audit.request_uuid).to eq request.request_id
+        end
+
+        it "redirects to the created <%%= ns_file_name %>" do
+          post <%%= index_helper %>_url, params: { <%%= ns_file_name %>: valid_attributes }
+          expect(response).to redirect_to(<%%= show_helper.gsub("\@#{file_name}", class_name+".last") %>)
+        end
+      end
+
+      context "with an authenticated user" do
+        let(:authenticated_user) { create(:user) }
+
+        before do
+          sign_in(authenticated_user)
+        end
+
+        it "forbids access" do
+          post <%%= index_helper %>_url, params: { <%%= ns_file_name %>: valid_attributes }
+          expect(response).to redirect_to(<%%= index_helper %>_url)
+
+          follow_redirect!
+          expect(response.body).to have_selector(".alert-error", text: t("pundit.example_policy.create?", default: t("pundit.default")))
+        end
+      end
+
+      it "does not allow access to guests" do
+        post <%%= index_helper %>_url, params: { <%%= ns_file_name %>: valid_attributes }
+        expect(response).to redirect_to(url_for_authentication)
+      end
+    end
+
+    context "with invalid parameters" do
+      let(:authenticated_admin) { create(:user, :admin) }
+
+      let(:invalid_attributes) do
+        skip("Add a hash of attributes invalid for your model")
+      end
+
+      before do
+        sign_in(authenticated_admin)
+      end
+
+      it "does not create a new <%%= class_name %>" do
+        expect do
+          post <%%= index_helper %>_url, params: { <%%= ns_file_name %>: invalid_attributes }
+        end.to change(<%%= class_name %>, :count).by(0)
+      end
+
+      it "renders a successful response (i.e. to display the 'new' template)" do
+        post <%%= index_helper %>_url, params: { <%%= ns_file_name %>: invalid_attributes }
+        expect(response).to be_successful
+      end
+    end
+  end
+
+  describe "PATCH /<%%= resource_path %>/:id" do
+    context "with valid parameters" do
+      let(:new_attributes) do
+        <%%- if permitted_attributes.any? -%>
+        attributes_for(:<%%= ns_file_name %>).slice(<%%= permitted_params %>)
+        <%%- else -%>
+        skip("Add a hash of attributes valid for your model")
+        <%%- end -%>
+      end
+
+      context "with an authenticated admin" do
+        let(:authenticated_admin) { create(:user, :admin) }
+
+        before do
+          sign_in(authenticated_admin)
+        end
+
+        it "updates the requested <%%= ns_file_name %>" do
+          <%%= file_name %> = create(:<%%= file_name %>)
+          patch <%%= show_helper.tr('@', '') %>, params: { <%%= singular_table_name %>: new_attributes }
+
+          <%%= file_name %>.reload
+          <%%- if permitted_attributes.any? -%>
+          <%%- permitted_attributes.each do |attribute| -%>
+          expect(<%%= file_name %>.<%%= attribute.name %>).to eq(new_attributes[:<%%= attribute.name %>])
+           <%%- end -%>
+          <%%- else -%>
+          skip("Add assertions for updated state")
+          <%%- end -%>
+        end
+
+        it "audits the change", :aggregate_failures do
+          <%%= file_name %> = create(:<%%= file_name %>)
+
+          expect do
+            patch <%%= show_helper.tr('@', '') %>, params: { <%%= singular_table_name %>: new_attributes }
+          end.to change(Audit, :count).by(1)
+
+          audit = <%%= file_name %>.audits.last!
+          expect(audit.action).to eq "update"
+          expect(audit.associated).to be_nil
+<% if auth0? -%>
+          expect(audit.user_uid).to eq authenticated_admin.id
+<% else -%>
+          expect(audit.user).to eq authenticated_admin
+<% end -%>
+          expect(audit.remote_address).not_to eq request.remote_ip # Anonymized
+          expect(audit.request_uuid).to eq request.request_id
+        end
+
+        it "redirects to the <%%= ns_file_name %>" do
+          <%%= file_name %> = create(:<%%= file_name %>)
+          patch <%%= show_helper.tr('@', '') %>, params: { <%%= singular_table_name %>: new_attributes }
+          <%%= file_name %>.reload
+          expect(response).to redirect_to(<%%= singular_table_name %>_url(<%%= file_name %>))
+        end
+      end
+
+      context "with an authenticated user" do
+        let(:authenticated_user) { create(:user) }
+
+        before do
+          sign_in(authenticated_user)
+        end
+
+        it "forbids access" do
+          <%%= file_name %> = create(:<%%= file_name %>)
+          patch <%%= show_helper.tr('@', '') %>, params: { <%%= singular_table_name %>: new_attributes }
+          expect(response).to redirect_to(<%%= show_helper.tr('@', '') %>)
+
+          follow_redirect!
+          expect(response.body).to have_selector(".alert-error", text: t("pundit.example_policy.update?", default: t("pundit.default")))
+        end
+      end
+
+      it "does not allow access to guests" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        patch <%%= show_helper.tr('@', '') %>, params: { <%%= singular_table_name %>: new_attributes }
+        expect(response).to redirect_to(url_for_authentication)
+      end
+    end
+
+    context "with invalid parameters" do
+      let(:authenticated_admin) { create(:user, :admin) }
+
+      let(:invalid_attributes) do
+        skip("Add a hash of attributes invalid for your model")
+      end
+
+      before do
+        sign_in(authenticated_admin)
+      end
+
+      it "renders a successful response (i.e. to display the 'edit' template)" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        patch <%%= show_helper.tr('@', '') %>, params: { <%%= singular_table_name %>: invalid_attributes }
+        expect(response).to be_successful
+      end
+    end
+  end
+
+  describe "DELETE /<%%= resource_path %>/:id" do
+    context "with an authenticated admin" do
+      let(:authenticated_admin) { create(:user, :admin) }
+
+      before do
+        sign_in(authenticated_admin)
+      end
+
+      it "destroys the requested <%%= ns_file_name %>" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        expect do
+          delete <%%= show_helper.tr('@', '') %>
+        end.to change(<%%= class_name %>, :count).by(-1)
+      end
+
+      it "audits the change", :aggregate_failures do
+        <%%= file_name %> = create(:<%%= file_name %>)
+
+        expect do
+          delete <%%= show_helper.tr('@', '') %>
+        end.to change(Audit, :count).by(1)
+
+        audit = Audit.last!
+        expect(audit.action).to eq "destroy"
+        expect(audit.auditable_id).to eq <%%= file_name %>.id
+        expect(audit.associated).to be_nil
+<% if auth0? -%>
+        expect(audit.user_uid).to eq authenticated_admin.id
+<% else -%>
+        expect(audit.user).to eq authenticated_admin
+<% end -%>
+        expect(audit.remote_address).not_to eq request.remote_ip # Anonymized
+        expect(audit.request_uuid).to eq request.request_id
+      end
+
+      it "redirects to the <%%= table_name %> list" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        delete <%%= show_helper.tr('@', '') %>
+        expect(response).to redirect_to(<%%= index_helper %>_url)
+      end
+    end
+
+    context "with an authenticated user" do
+      let(:authenticated_user) { create(:user) }
+
+      before do
+        sign_in(authenticated_user)
+      end
+
+      it "forbids access" do
+        <%%= file_name %> = create(:<%%= file_name %>)
+        delete <%%= show_helper.tr('@', '') %>
+        expect(response).to redirect_to(<%%= show_helper.tr('@', '') %>)
+
+        follow_redirect!
+        expect(response.body).to have_selector(".alert-error", text: t("pundit.example_policy.destroy?", default: t("pundit.default")))
+      end
+    end
+
+    it "does not allow access to guests" do
+      <%%= file_name %> = create(:<%%= file_name %>)
+      delete <%%= show_helper.tr('@', '') %>
+      expect(response).to redirect_to(url_for_authentication)
+    end
+  end
+end
+<%% end -%>