saasy 0.0.1

data/lib/saucy/user.rb

@@ -0,0 +1,30 @@
+module Saucy
+  module User
+    extend ActiveSupport::Concern
+
+    included do
+      attr_accessible :name, :project_ids, :email, :password
+      has_many :memberships
+      has_many :accounts, :through => :memberships
+      has_many :permissions
+      has_many :projects, :through => :permissions
+      validates_presence_of :name
+    end
+
+    module InstanceMethods
+      def admin_of?(account)
+        memberships.exists?(:account_id => account.id, :admin => true)
+      end
+
+      def member_of?(account_or_project)
+        account_or_project.has_member?(self)
+      end
+    end
+
+    module ClassMethods
+      def by_name
+        order('users.name')
+      end
+    end
+  end
+end

data/spec/controllers/accounts_controller_spec.rb

@@ -0,0 +1,228 @@
+require 'spec_helper'
+
+describe AccountsController, "routes" do
+  it { should route(:get, "/plans/abc/accounts/new").
+                to(:action => :new, :plan_id => :abc) }
+  it { should route(:get, "/accounts").to(:action => :index) }
+  it { should route(:post, "/plans/abc/accounts").
+                to(:action => :create, :plan_id => :abc) }
+  it { should route(:put, "/accounts/1").to(:action => :update, :id => 1) }
+  it { should route(:get, "/accounts/1/edit").to(:action => :edit, :id => 1) }
+  it { should route(:delete, "/accounts/1").to(:action => :destroy, :id => 1) }
+end
+
+describe AccountsController, "new" do
+  let(:signup) { stub('signup') }
+  let(:plan) { Factory(:plan) }
+
+  before do
+    Signup.stubs(:new => signup)
+    get :new, :plan_id => plan.to_param
+  end
+
+  it "renders the new account form" do
+    should respond_with(:success)
+    should render_template(:new)
+  end
+
+  it "assigns a new signup" do
+    Signup.should have_received(:new)
+    should assign_to(:signup).with(signup)
+  end
+
+  it "notifies observers" do
+    should notify_observers("plan_viewed", :plan => plan, :request => request)
+  end
+end
+
+describe AccountsController, "successful create for a confirmed user" do
+  let(:user) { Factory.stub(:user) }
+  let(:account) { Factory.stub(:account) }
+  let(:signup) { stub('signup', :user    => user,
+                                :user=   => nil,
+                                :plan=   => plan,
+                                :account => account) }
+  let(:signup_attributes) { "attributes" }
+  let(:plan) { Factory(:plan) }
+
+  before do
+    Signup.stubs(:new => signup)
+    signup.stubs(:save => true)
+    sign_in_as user
+    post :create, :signup => signup_attributes, :plan_id => plan.to_param
+  end
+
+  it "creates an signup" do
+    Signup.should have_received(:new).with(signup_attributes)
+    signup.should have_received(:save)
+  end
+
+  it "redirects to the root" do
+    should redirect_to(new_account_project_url(signup.account))
+  end
+
+  it "sets the current user" do
+    signup.should have_received(:user=).with(user)
+  end
+
+  it { should set_the_flash.to(/created/i) }
+  it { should_not set_the_flash.to(/confirm/i) }
+  it { should be_signed_in.as(user) }
+
+  it "notifies observers" do
+    should notify_observers("account_created", :account => signup.account,
+                                               :request => request)
+  end
+end
+
+describe AccountsController, "failed create" do
+  let(:signup) { stub('signup', :user= => nil, :plan= => plan) }
+  let(:signup_attributes) { "attributes" }
+  let(:plan) { Factory(:plan) }
+
+  before do
+    Signup.stubs(:new => signup)
+    signup.stubs(:save => false)
+    post :create, :signup => signup_attributes, :plan_id => plan.to_param
+  end
+
+  it "creates an signup" do
+    Signup.should have_received(:new).with(signup_attributes)
+    signup.should have_received(:save)
+  end
+
+  it "renders the new signup form" do
+    should respond_with(:success)
+    should render_template(:new)
+  end
+
+  it "assigns a new signup" do
+    Signup.should have_received(:new)
+    should assign_to(:signup).with(signup)
+  end
+end
+
+describe AccountsController, "index with multiple projects" do
+  let(:user) { Factory.stub(:user) }
+  let(:accounts) { %w(one two) }
+  let(:projects) { %w(one two) }
+
+  before do
+    user.stubs(:accounts => accounts)
+    user.stubs(:projects => projects)
+    sign_in_as user
+    get :index
+  end
+
+  it "renders the dashboard page" do
+    should respond_with(:success)
+    should render_template(:index)
+  end
+
+  it "assigns the user's accounts" do
+    user.should have_received(:accounts)
+    should assign_to(:accounts).with(accounts)
+  end
+end
+
+describe AccountsController, "signed out" do
+  it "redirects to sign_in on index" do
+    get :index
+    should redirect_to(sign_in_path)
+  end
+  it "redirects to sign_in on edit" do
+    get :edit, :id => 1
+    should redirect_to(sign_in_path)
+  end
+  it "redirects to sign_in on update" do
+    put :update, :id => 1, :account => {}
+    should redirect_to(sign_in_path)
+  end
+end
+
+describe AccountsController, "index with one project" do
+  let(:user) { Factory.stub(:user) }
+  let(:accounts) { %w(one two) }
+  let(:projects) { [Factory.stub(:project)] }
+
+  before do
+    user.stubs(:accounts => accounts)
+    user.stubs(:projects => projects)
+    sign_in_as user
+    get :index
+  end
+
+  it "redirects to the project" do
+    should redirect_to(controller.project_url(projects.first))
+  end
+end
+
+describe AccountsController, "valid update", :as => :account_admin do
+  before do
+    put :update,
+        :account => Factory.attributes_for(:account),
+        :id => account.to_param
+  end
+
+  it "redirects to settings" do
+    should redirect_to(edit_profile_url)
+  end
+
+  it { should set_the_flash.to(/updated/) }
+end
+
+describe AccountsController, "invalid update", :as => :account_admin do
+  before do
+    put :update,
+        :account => {:name => ""},
+        :id => account.to_param
+  end
+
+  it { should respond_with(:success) }
+  it { should render_template(:edit) }
+end
+
+describe AccountsController, "edit", :as => :account_admin do
+  before do
+    get :edit, :id => account.to_param
+  end
+
+  it "renders the edit template" do
+    should respond_with(:success)
+    should render_template(:edit)
+  end
+
+  it "assigns the account" do
+    should assign_to(:account).with(account)
+  end
+end
+
+describe AccountsController, "destroy", :as => :account_admin do
+  before do
+    Account.stubs(:find_by_keyword! => account)
+    account.stubs(:destroy)
+    delete :destroy, :id => account.to_param
+  end
+
+  it "redirects to the root url" do
+    should redirect_to("/")
+  end
+
+  it "sets the flash" do
+    should set_the_flash.to(/deleted/i)
+  end
+
+  it "deletes the account" do
+    account.should have_received(:destroy)
+  end
+end
+
+describe AccountsController, "permissions", :as => :account_member do
+  it { should deny_access.
+                on(:get, :edit, :id => account.to_param).
+                flash(/admin/) }
+  it { should deny_access.
+                on(:put, :update, :id => account.to_param).
+                flash(/admin/) }
+end
+

data/spec/controllers/application_controller_spec.rb

@@ -0,0 +1,32 @@
+require 'spec_helper'
+
+describe ApplicationController do
+
+  describe "with a valid account id in the params" do
+    before do
+      @account = Factory(:account)
+      @controller.stubs(:params).returns(:account_id => @account.to_param)
+    end
+
+    it "should return the corresponding account from current_account" do
+      @controller.__send__(:current_account).should == @account
+    end
+  end
+
+  describe "with an invalid account id in the params" do
+    before do
+      @controller.stubs(:params).returns(:account_id => "invalid")
+    end
+
+    it "should return the corresponding account from current_account" do
+      expect { @controller.__send__(:current_account) }.
+        to raise_error(ActiveRecord::RecordNotFound)
+    end
+  end
+
+  it { should filter_param(:card_number) }
+  it { should filter_param(:cardholder_name) }
+  it { should filter_param(:verification_code) }
+  it { should filter_param(:expiration_month) }
+  it { should filter_param(:expiration_year) }
+end

data/spec/controllers/invitations_controller_spec.rb

@@ -0,0 +1,215 @@
+require 'spec_helper'
+
+describe InvitationsController, "routes" do
+  it { should route(:get, "/accounts/abc/invitations/new").
+                to(:action => :new, :account_id => 'abc') }
+  it { should route(:post, "/accounts/abc/invitations").
+                to(:action => :create, :account_id => 'abc') }
+  it { should route(:get, "/accounts/abc/invitations/xyz").
+                to(:action => :show, :account_id => 'abc', :id => 'xyz') }
+  it { should route(:put, "/accounts/abc/invitations/xyz").
+                to(:action => :update, :account_id => 'abc', :id => 'xyz') }
+end
+
+describe InvitationsController, "permissions" do
+  let(:account) { Factory(:account) }
+  before { sign_in }
+  it { should deny_access.
+                on(:get, :new, :account_id => account.to_param).
+                flash(/admin/) }
+  it { should deny_access.
+                on(:post, :create, :account_id => account.to_param).
+                flash(/admin/) }
+end
+
+describe InvitationsController, "new", :as => :account_admin do
+  let(:invitation) { Invitation.new }
+  let(:projects) { ['one', 'two'] }
+
+  before do
+    Account.stubs(:find_by_keyword! => account)
+    account.stubs(:projects_by_name => projects)
+    Invitation.stubs(:new => invitation)
+    get :new, :account_id => account.to_param
+  end
+
+  it "renders the new template" do
+    should respond_with(:success)
+    should render_template(:new)
+  end
+
+  it "assigns an invitation" do
+    Invitation.should have_received(:new)
+    should assign_to(:invitation).with(invitation)
+  end
+
+  it "assigns projects" do
+    should assign_to(:projects).with(projects)
+  end
+end
+
+describe InvitationsController, "valid create", :as => :account_admin do
+  let(:invitation) { Factory.stub(:invitation) }
+  let(:attributes) { 'attributes' }
+
+  before do
+    Invitation.stubs(:new => invitation)
+    invitation.stubs(:account=)
+    invitation.stubs(:sender=)
+    invitation.stubs(:save => true)
+    post :create, :account_id => account.to_param, :invitation => attributes
+  end
+
+  it "redirects to the membership index" do
+    should redirect_to(account_memberships_url(account))
+  end
+
+  it "saves an invitation" do
+    Invitation.should have_received(:new).with(attributes)
+    invitation.should have_received(:account=).with(account)
+    invitation.should have_received(:sender=).with(current_user)
+    invitation.should have_received(:save)
+  end
+
+  it "sets a flash message" do
+    should set_the_flash.to(/invited/i)
+  end
+end
+
+describe InvitationsController, "invalid create", :as => :account_admin do
+  let(:invitation) { Factory.stub(:invitation) }
+  let(:projects) { ['one', 'two'] }
+
+  before do
+    Invitation.stubs(:new => invitation)
+    invitation.stubs(:save => false)
+    Account.stubs(:find_by_keyword! => account)
+    account.stubs(:projects_by_name => projects)
+    post :create, :account_id => account.to_param, :invitation => {}
+  end
+
+  it "renders the new template" do
+    should respond_with(:success)
+    should render_template(:new)
+  end
+
+  it "doesn't set a flash message" do
+    should_not set_the_flash
+  end
+
+  it "assigns projects" do
+    should assign_to(:projects).with(projects)
+  end
+end
+
+describe InvitationsController, "show" do
+  let(:invitation) { Factory.stub(:invitation, :code => 'abc') }
+  let(:account)    { invitation.account }
+
+  before do
+    Invitation.stubs(:find_by_code! => invitation)
+    get :show, :id => invitation.to_param, :account_id => account.to_param
+  end
+
+  it "renders the show template" do
+    should respond_with(:success)
+    should render_template(:show)
+  end
+
+  it "assigns the invitation" do
+    Invitation.should have_received(:find_by_code!).with(invitation.to_param)
+    should assign_to(:invitation).with(invitation)
+  end
+end
+
+describe InvitationsController, "show for a used invitation" do
+  let(:invitation) { Factory.stub(:invitation, :code => 'abc', :used => true) }
+  let(:account)    { invitation.account }
+
+  before do
+    Invitation.stubs(:find_by_code! => invitation)
+    get :show, :id => invitation.to_param, :account_id => account.to_param
+  end
+
+  it "redirects to the root url" do
+    should redirect_to("/")
+  end
+
+  it "sets a flash message" do
+    should set_the_flash.to(/used/i)
+  end
+end
+
+describe InvitationsController, "valid update" do
+  let(:invitation) { Factory.stub(:invitation, :code => 'abc') }
+  let(:account)    { invitation.account }
+  let(:attributes) { 'attributes' }
+  let(:user)       { Factory.stub(:user) }
+
+  before do
+    Invitation.stubs(:find_by_code! => invitation)
+    invitation.stubs(:accept => true)
+    invitation.stubs(:user   => user)
+    put :update, :id         => invitation.to_param,
+                 :account_id => account.to_param,
+                 :invitation => attributes
+  end
+
+  it "signs the user in" do
+    should be_signed_in.as(user)
+  end
+
+  it "accepts the invitation" do
+    Invitation.should have_received(:find_by_code!).with(invitation.to_param)
+    invitation.should have_received(:accept).with(attributes)
+  end
+
+  it "redirects to the root page" do
+    should redirect_to(root_url)
+  end
+end
+
+describe InvitationsController, "invalid update" do
+  let(:invitation) { Factory.stub(:invitation, :code => 'abc') }
+  let(:account) { invitation.account }
+
+  before do
+    Invitation.stubs(:find_by_code! => invitation)
+    invitation.stubs(:accept => false)
+    put :update, :id         => invitation.to_param,
+                 :account_id => account.to_param,
+                 :invitation => {}
+  end
+
+  it "doesn't sign in" do
+    should_not be_signed_in
+  end
+
+  it "renders the show template" do
+    should respond_with(:success)
+    should render_template(:show)
+  end
+
+  it "assigns the invitation" do
+    should assign_to(:invitation).with(invitation)
+  end
+end
+
+describe InvitationsController, "update for a used invitation" do
+  let(:invitation) { Factory.stub(:invitation, :code => 'abc', :used => true) }
+  let(:account)    { invitation.account }
+
+  before do
+    Invitation.stubs(:find_by_code! => invitation)
+    put :update, :id => invitation.to_param, :account_id => account.to_param
+  end
+
+  it "redirects to the root url" do
+    should redirect_to("/")
+  end
+
+  it "sets a flash message" do
+    should set_the_flash.to(/used/i)
+  end
+end
+