serum-rails 0.1.0

data/spec/test_app/Gemfile.lock

@@ -0,0 +1,163 @@
+PATH
+  remote: vendor/gems/cucumber-rails-0.4.1
+  specs:
+    cucumber-rails (0.4.1)
+      cucumber (>= 0.10.1)
+      nokogiri (>= 1.4.4)
+      rack-test (>= 0.5.7)
+
+GEM
+  remote: http://rubygems.org/
+  specs:
+    abstract (1.0.0)
+    actionmailer (2.3.11)
+      actionpack (= 2.3.11)
+    actionpack (2.3.11)
+      activesupport (= 2.3.11)
+      rack (~> 1.1.0)
+    activerecord (2.3.11)
+      activesupport (= 2.3.11)
+    activeresource (2.3.11)
+      activesupport (= 2.3.11)
+    activesupport (2.3.11)
+    acts-as-taggable-on (2.0.6)
+    aegis (2.5.3)
+    ancestry (1.2.4)
+      activerecord (>= 2.2.2)
+    andand (1.3.1)
+    builder (3.0.0)
+    capybara (0.4.1.2)
+      celerity (>= 0.7.9)
+      culerity (>= 0.2.4)
+      mime-types (>= 1.16)
+      nokogiri (>= 1.3.3)
+      rack (>= 1.0.0)
+      rack-test (>= 0.5.4)
+      selenium-webdriver (>= 0.0.27)
+      xpath (~> 0.1.3)
+    celerity (0.8.9)
+    childprocess (0.1.8)
+      ffi (~> 1.0.6)
+    clearance (0.8.8)
+    columnize (0.3.2)
+    configuration (1.2.0)
+    cucumber (0.10.2)
+      builder (>= 2.1.2)
+      diff-lcs (>= 1.1.2)
+      gherkin (>= 2.3.5)
+      json (>= 1.4.6)
+      term-ansicolor (>= 1.0.5)
+    cucumber_factory (1.7.4)
+    cucumber_spinner (0.2.1)
+      rtui (>= 0.2.2)
+    culerity (0.2.15)
+    database_cleaner (0.6.7)
+    diff-lcs (1.1.2)
+    erubis (2.6.6)
+      abstract (>= 1.0.0)
+    faker (0.3.1)
+    ffi (1.0.7)
+      rake (>= 0.8.7)
+    gherkin (2.3.7)
+      json (>= 1.4.6)
+    haml (3.1.1)
+    inaction_mailer (0.6)
+    jrails (0.6.0)
+    json (1.5.1)
+    json_pure (1.5.1)
+    launchy (0.4.0)
+      configuration (>= 0.0.5)
+      rake (>= 0.8.1)
+    linecache (0.43)
+    machinist (1.0.6)
+    machinist_callbacks (0.1.3)
+      machinist (< 2.0.0)
+    mime-types (1.16)
+    modularity (0.6.0)
+    mysql (2.8.1)
+    nokogiri (1.4.4)
+    paperclip (2.3.4)
+      activerecord
+      activesupport
+    query_diet (0.2.0)
+    rack (1.1.2)
+    rack-test (0.6.0)
+      rack (>= 1.0)
+    rails (2.3.11)
+      actionmailer (= 2.3.11)
+      actionpack (= 2.3.11)
+      activerecord (= 2.3.11)
+      activeresource (= 2.3.11)
+      activesupport (= 2.3.11)
+      rake (>= 0.8.3)
+    rake (0.8.7)
+    resource_controller (0.6.6)
+    rspec (1.3.2)
+    rspec-rails (1.3.4)
+      rack (>= 1.0.0)
+      rspec (~> 1.3.1)
+    rspec_spinner (1.1.3)
+      rtui
+    rtui (0.2.2)
+    ruby-debug (0.10.4)
+      columnize (>= 0.1)
+      ruby-debug-base (~> 0.10.4.0)
+    ruby-debug-base (0.10.4)
+      linecache (>= 0.3)
+    ruby-ole (1.2.11.1)
+    rubyzip (0.9.4)
+    sass (3.1.1)
+    selenium-webdriver (0.2.0)
+      childprocess (>= 0.1.7)
+      ffi (>= 1.0.7)
+      json_pure
+      rubyzip
+    shoulda (2.11.1)
+    spreadsheet (0.6.5.2)
+      ruby-ole (>= 1.0)
+    term-ansicolor (1.0.5)
+    timecop (0.3.5)
+    vpim (0.695)
+    will_paginate (2.3.15)
+    xpath (0.1.4)
+      nokogiri (~> 1.3)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  acts-as-taggable-on (= 2.0.6)
+  aegis
+  ancestry
+  andand (= 1.3.1)
+  capybara
+  clearance (= 0.8.8)
+  cucumber
+  cucumber-rails!
+  cucumber_factory
+  cucumber_spinner
+  database_cleaner
+  erubis (= 2.6.6)
+  faker (= 0.3.1)
+  haml
+  inaction_mailer
+  jrails (= 0.6.0)
+  launchy
+  machinist (= 1.0.6)
+  machinist_callbacks (= 0.1.3)
+  modularity (= 0.6.0)
+  mysql
+  paperclip (= 2.3.4)
+  query_diet (= 0.2.0)
+  rails (= 2.3.11)
+  resource_controller (= 0.6.6)
+  rspec (= 1.3.2)
+  rspec-rails
+  rspec_spinner (= 1.1.3)
+  ruby-debug
+  sass
+  shoulda (= 2.11.1)
+  spreadsheet (= 0.6.5.2)
+  timecop (= 0.3.5)
+  vpim
+  will_paginate (= 2.3.15)

data/spec/test_app/Rakefile

@@ -0,0 +1,11 @@
+# Add your own tasks in files placed in lib/tasks ending in .rake,
+# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
+
+require(File.join(File.dirname(__FILE__), 'config', 'boot'))
+
+require 'rake'
+require 'rake/testtask'
+require 'rake/rdoctask'
+
+require 'tasks/rails'
+

data/spec/test_app/app/controllers/admin/categories_controller.rb

@@ -0,0 +1,17 @@
+# Controller to manage category as an admin.
+# origin: M
+class Admin::CategoriesController < ApplicationController
+
+  does 'boring_controller',
+    :order => 'categories.name'
+
+  in_sections :admin_categories
+  permissions :admin_categories
+
+  private
+
+  def collection_scope
+    Category.roots.by_name
+  end
+
+end

data/spec/test_app/app/controllers/admin/users_controller.rb

@@ -0,0 +1,30 @@
+# Controller to manage users as an admin.
+# origin: RM
+class Admin::UsersController < ApplicationController
+
+  does 'boring_controller',
+    :order => 'users.username',
+    :show_is_edit => true
+
+  before_filter :set_sections, :except => :deleted
+
+  in_sections :admin_users
+  permissions :admin_users
+
+  def deleted
+    in_sections :deleted_users
+    @users = User.find(:all, :conditions => { :deleted => true }).paginate(:page => params[:page], :per_page => PAGE_SIZE)
+  end
+  
+  private
+  
+  def set_sections
+    in_sections object.andand.deleted? ? :deleted_users : :active_users
+  end
+
+  # What we call User.search with
+  def search_args
+    [params[:query], current_user]
+  end
+
+end

data/spec/test_app/app/controllers/application_controller/i18n_trait.rb

@@ -0,0 +1,24 @@
+# Configures I18n in controllers.
+# origin: RM
+module ApplicationController::I18nTrait
+
+  as_trait do
+     
+    prepend_before_filter :set_locale
+    helper_method :translate_model_name
+    
+    private
+    
+    def translate_model_name(model)
+      klass = model
+      klass = klass.class if klass.is_a?(ActiveRecord::Base)
+      klass.human_name
+    end
+
+    def set_locale
+      I18n.locale = 'en'
+    end
+    
+  end
+
+end

data/spec/test_app/app/controllers/application_controller/navigation_trait.rb

@@ -0,0 +1,19 @@
+# Allows controllers to associate actions with tabs in the site navigation.
+# origin: RM
+module ApplicationController::NavigationTrait
+  as_trait do
+
+    before_filter :set_default_section
+
+    DEFAULT_SECTIONS = { 'edit' => 'edit', 'update' => 'edit', 'show' => 'show', 'index' => 'index' }
+
+    private
+
+    def set_default_section
+      DEFAULT_SECTIONS[action_name].andand.tap do |section|
+        in_sections section
+      end
+    end
+
+  end
+end

data/spec/test_app/app/controllers/application_controller/security_trait/disabled_clearance_accounts_trait.rb

@@ -0,0 +1,41 @@
+module Clearance
+  class DisabledAccount < StandardError
+  end
+end
+
+# Trait to ensure disabled (locked, deleted) users cannot sign in.
+# origin: RM
+module ApplicationController::SecurityTrait::DisabledClearanceAccountsTrait
+  as_trait do
+
+    private
+
+    def user_from_cookie_with_disabled_accounts
+      user = user_from_cookie_without_disabled_accounts
+      if user && user.account_disabled?
+        cookies.delete(:remember_token)
+        raise Clearance::DisabledAccount, "Signed out user ##{user.id} because her account has been disabled"
+      end
+      user
+    end
+
+    alias_method_chain :user_from_cookie, :disabled_accounts
+
+    def sign_in_with_disabled_accounts(user)
+      if user.account_disabled?
+        raise Clearance::DisabledAccount, "Cannot sign in user ##{user.id} because her account has been disabled"
+      else
+        sign_in_without_disabled_accounts(user)
+      end
+    end
+
+    alias_method_chain :sign_in, :disabled_accounts
+
+    rescue_from Clearance::DisabledAccount, :with => :deny_access_to_disabled_account
+
+    def deny_access_to_disabled_account
+      deny_access translate('disabled_account', :default =>  "Your account has been disabled")
+    end
+
+  end
+end

data/spec/test_app/app/controllers/application_controller/security_trait.rb

@@ -0,0 +1,65 @@
+# Provides authorization, authentication and CSRF protections for controllers.
+# origin: RM
+module ApplicationController::SecurityTrait
+
+  as_trait do
+
+    include Aegis::Controller
+    include Clearance::Authentication
+    protect_from_forgery
+    filter_parameter_logging :password
+
+    # Require a signed in user by default
+    before_filter :authenticate
+    around_filter :rescue_access_denied
+
+    require_permissions
+
+    private
+
+    # Override Clearance method so people not signed in are still users
+    def current_user
+      super || User.guest
+    end
+
+    # Override Clearance method for our notion of being signed in
+    def signed_in?
+      super && current_user != User.guest
+    end
+
+    # Override Clearance method for our notion of being signed in
+    def signed_out?
+      !signed_in?
+    end
+
+    # Override Clearance method so sessions time out after 1 hour 
+    def sign_in(user)
+      if user
+        cookies[:remember_token] = {
+          :value   => user.remember_token,
+          :expires => 1.hour.from_now.utc
+        }
+        self.current_user = user
+      end
+    end
+
+    def rescue_access_denied
+      yield
+    rescue Aegis::AccessDenied => e
+      flash[:error] = 'Access denied'
+      redirect_to root_path
+    end
+
+    # Mark a controller that doesn''t require a signed in user
+    def self.public_controller(options = {})
+      skip_permissions
+      skip_before_filter :authenticate, options
+    end
+    
+    def sign_in_url
+      new_session_path
+    end
+
+  end
+
+end

data/spec/test_app/app/controllers/application_controller.rb

@@ -0,0 +1,13 @@
+# Base class for all controllers.
+# origin: RM
+class ApplicationController < ActionController::Base
+  include Modularity::Does
+  does 'application_controller/security'
+  does 'application_controller/i18n'
+  does 'application_controller/navigation'
+  does 'application_controller/security_trait/disabled_clearance_accounts'
+
+  helper :all
+  layout 'screen'
+
+end

data/spec/test_app/app/controllers/conferences_controller.rb

@@ -0,0 +1,67 @@
+# Manages conferences as a conference creator. Also allows to sign up as an attendee and cancel the attendance again.
+# origin: M
+class ConferencesController < ApplicationController
+
+  public_controller :only => [:index, :show, :search]
+
+  in_sections :conferences
+
+  does 'boring_controller', :destroy_is_permanent => true, :order => :name
+
+  before_filter :set_category, :only => :index
+
+  permissions :conferences
+
+  create.before do
+    object.user = current_user
+  end
+
+  index.before do
+    in_sections :browse
+    @running_conferences = end_of_association_chain.running
+    @conference_search = ConferenceSearch.new
+    @categories = if @category
+      @category.children
+    else
+      Category.roots
+    end.by_name
+  end
+
+  def search
+    in_sections :search
+    @conference_search = ConferenceSearch.new(params[:conference_search] || {})
+    @conferences = paginate(@conference_search.find.by_name)
+  end
+
+  show.wants.ics do
+    send_data object.to_icalendar(current_user).encode, :type => 'text/calendar'
+  end
+
+  def attend
+    object.attend!(current_user)
+    flash[:success] = "You have signed up for #{object.name}"
+    redirect_to object_path
+  end
+
+  def cancel_attendance
+    object.cancel_attendance!(current_user)
+    flash[:success] = "You are no longer signed up for #{object.name}"
+    redirect_to object_path
+  end
+
+  private
+
+  def set_category
+    if params[:category_id]
+      @category = Category.find(params[:category_id])
+    end
+  end
+
+  def end_of_association_chain
+    if @category
+      @category.conferences
+    else
+      Conference
+    end.by_name
+  end
+end

data/spec/test_app/app/controllers/friendship_requests_controller.rb

@@ -0,0 +1,31 @@
+# Accepts or rejects a friendship request.
+# origin: M
+class FriendshipRequestsController < ApplicationController
+
+  permissions :friends
+
+  def accept
+    if object.accept
+      flash[:notice] = 'Contact request accepted'
+    else
+      flash[:error] = 'Error accepting contact request'
+    end
+    redirect_to current_user
+  end
+
+  def deny
+    if object.deny
+      flash[:notice] = 'Contact request denied'
+    else
+      flash[:error] = 'Error denying contact request'
+    end
+    redirect_to current_user
+  end
+  
+  private
+
+  def object
+    @friendship_request ||= current_user.friendship_requests.find(params[:id])
+  end
+
+end

data/spec/test_app/app/controllers/invitations_controller.rb

@@ -0,0 +1,39 @@
+# Sends, accept and dismisses conference invitations.
+# origin: M
+class InvitationsController < ApplicationController
+
+  resource_controller
+
+  permissions :invitations
+
+  in_sections :conferences, :invitations
+
+  def create
+    invitation = current_user.sent_invitations.create!(object_params)
+    flash[:notice] = "You have invited #{current_user.name_for(invitation.recipient)} to #{invitation.conference.name}"
+    redirect_to new_invitation_path(:invitation => { :conference_id => invitation.conference.id})
+  end
+
+  def accept
+    object.accept!
+    flash[:success] = "You have signed up for #{object.conference.name}"
+    redirect_to object.conference
+  end
+
+  def dismiss
+    object.dismiss!
+    flash[:notice] = "Invitation dismissed"
+    redirect_to conferences_path
+  end
+
+  def end_of_association_chain
+    current_user.received_invitations
+  end
+
+  private
+
+  def object_params
+    (super || {}).slice(:conference_id, :recipient_id)
+  end
+
+end

data/spec/test_app/app/controllers/members_controller.rb

@@ -0,0 +1,21 @@
+# Shows the user list, searches users and sends friendship requests to multiple users at once.
+# origin: M
+class MembersController < ApplicationController
+
+  permissions :members
+  in_sections :members, :member_search
+
+  def index
+    @member_search ||= MemberSearch.new current_user, params[:member_search]
+    @matching_users = @member_search.users.by_username.paginate(:page => params[:page], :per_page => PAGE_SIZE)
+  end
+
+  def request_friendships
+    for user in User.active.scoped(:conditions => { :id => params[:friendship_request].andand[:user_id] })
+      user.friendship_requests.create! :requesting_user => current_user
+    end
+    flash[:notice] = 'Contact requests sent'
+    redirect_to members_path
+  end
+
+end

data/spec/test_app/app/controllers/passwords_controller.rb

@@ -0,0 +1,33 @@
+# Lets users reset their password when they forgot or when their account was created by an admin.
+# origin: RM
+class PasswordsController < Clearance::PasswordsController
+
+  public_controller
+
+  private
+
+  # Be more gentle than the default Clearance implementation and redirect
+  # users to the password recovery from if the token is incorrect (or already used)
+  def forbid_non_existent_user
+    super
+  rescue ActionController::Forbidden => e
+    if User.exists?(params[:user_id])
+      redirect_to new_password_path(:user_id => params[:user_id])
+    else
+      raise e
+    end
+  end
+
+  def url_after_create
+    new_session_path
+  end
+
+  def url_after_update
+    root_path
+  end
+
+  def flash_success_after_update
+    nil
+  end
+
+end

data/spec/test_app/app/controllers/sessions_controller.rb

@@ -0,0 +1,17 @@
+# Sign in and sign out.
+# origin: RM
+class SessionsController < Clearance::SessionsController
+
+  public_controller
+
+  private
+  
+  def url_after_create
+    root_path
+  end
+
+  def flash_success_after_create
+    nil
+  end
+
+end

data/spec/test_app/app/controllers/shared/boring_controller_trait/deletable_trait.rb

@@ -0,0 +1,23 @@
+# Controller support for indestructible records that set deleted flags instead of destroying themselves.
+# origin: RM
+module BoringControllerTrait::DeletableTrait
+  as_trait do
+    
+    def destroy
+      load_object
+      object.deleted = !object.deleted?
+      if object.save
+        if object.deleted?
+          set_flash :destroy
+        else
+          flash[:notice] = "#{translate_model_name(object)} restored"
+        end
+        redirect_to collection_url
+      else
+        set_flash :destroy_fails
+        redirect_to edit_object_path
+      end
+    end
+
+  end
+end

data/spec/test_app/app/controllers/shared/boring_controller_trait/flash_trait.rb

@@ -0,0 +1,23 @@
+# Provides good default flash messages for controller actions.
+# origin: RM
+module BoringControllerTrait::FlashTrait
+  as_trait do
+
+    create.success.flash lambda { "#{translate_model_name(object)} created" }
+    create.failure.flash lambda { error_flash("Could not save") }
+
+    update.success.flash lambda { "#{translate_model_name(object)} updated" }
+    update.failure.flash lambda { error_flash("Could not save") }
+
+    destroy.success.flash lambda { "#{translate_model_name(object)} deleted" }
+    destroy.failure.flash lambda { error_flash("Could not delete") }
+
+    private
+
+    # This is a hack because resource_controller uses flash[:notice] for everything
+    def error_flash(msg)
+      "<span class='error'>#{ERB::Util.html_escape msg}</span>".html_safe
+    end
+
+  end
+end

data/spec/test_app/app/controllers/shared/boring_controller_trait/helpers_trait.rb

@@ -0,0 +1,35 @@
+# Provides macros to quickly configure a resource_controller.
+# origin: RM
+module BoringControllerTrait::HelpersTrait
+  as_trait do |options|
+  
+    if options[:show_is_edit]
+      for action in [:show, :update, :create] do
+        send(action).wants.html do
+          redirect_to edit_object_path
+        end
+      end
+    end
+
+    if options[:for_forms]
+      before_filter :only => [:new, :create, :edit, :update] do |c|
+        c.send(options[:for_forms])
+      end
+    end
+
+    private
+
+    if options[:model_name]
+
+      define_method :model_name do
+        options[:model_name]
+      end
+
+      define_method :object_name do
+        options[:model_name]
+      end
+
+    end
+
+  end
+end