simon_says 0.0.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/.gitignore +18 -0
- data/.gitpublish +3 -0
- data/.travis.yml +9 -0
- data/Gemfile +13 -0
- data/Guardfile +13 -0
- data/LICENSE.txt +22 -0
- data/README.md +18 -0
- data/ROADMAP.md +9 -0
- data/Rakefile +24 -0
- data/SimonSays.png +0 -0
- data/lib/simon_says/authorizer.rb +157 -0
- data/lib/simon_says/roleable.rb +107 -0
- data/lib/simon_says/version.rb +3 -0
- data/lib/simon_says.rb +8 -0
- data/simon_says.gemspec +28 -0
- data/test/controllers/admin/reports_controller_test.rb +92 -0
- data/test/controllers/documents_controller_test.rb +87 -0
- data/test/models/admin_test.rb +7 -0
- data/test/models/membership_test.rb +7 -0
- data/test/rails_app/.gitignore +16 -0
- data/test/rails_app/README.rdoc +28 -0
- data/test/rails_app/Rakefile +6 -0
- data/test/rails_app/app/assets/images/.keep +0 -0
- data/test/rails_app/app/assets/javascripts/application.js +16 -0
- data/test/rails_app/app/assets/stylesheets/application.css +15 -0
- data/test/rails_app/app/controllers/admin/reports_controller.rb +40 -0
- data/test/rails_app/app/controllers/application_controller.rb +19 -0
- data/test/rails_app/app/controllers/concerns/.keep +0 -0
- data/test/rails_app/app/controllers/documents_controller.rb +48 -0
- data/test/rails_app/app/helpers/application_helper.rb +2 -0
- data/test/rails_app/app/mailers/.keep +0 -0
- data/test/rails_app/app/models/.keep +0 -0
- data/test/rails_app/app/models/admin/report.rb +2 -0
- data/test/rails_app/app/models/admin.rb +5 -0
- data/test/rails_app/app/models/concerns/.keep +0 -0
- data/test/rails_app/app/models/document.rb +4 -0
- data/test/rails_app/app/models/membership.rb +8 -0
- data/test/rails_app/app/models/user.rb +4 -0
- data/test/rails_app/app/views/layouts/application.html.erb +14 -0
- data/test/rails_app/bin/bundle +3 -0
- data/test/rails_app/bin/rails +8 -0
- data/test/rails_app/bin/rake +8 -0
- data/test/rails_app/bin/spring +18 -0
- data/test/rails_app/config/application.rb +29 -0
- data/test/rails_app/config/boot.rb +4 -0
- data/test/rails_app/config/database.yml +25 -0
- data/test/rails_app/config/environment.rb +5 -0
- data/test/rails_app/config/environments/development.rb +37 -0
- data/test/rails_app/config/environments/production.rb +78 -0
- data/test/rails_app/config/environments/test.rb +39 -0
- data/test/rails_app/config/initializers/assets.rb +8 -0
- data/test/rails_app/config/initializers/backtrace_silencers.rb +7 -0
- data/test/rails_app/config/initializers/cookies_serializer.rb +3 -0
- data/test/rails_app/config/initializers/filter_parameter_logging.rb +4 -0
- data/test/rails_app/config/initializers/inflections.rb +16 -0
- data/test/rails_app/config/initializers/mime_types.rb +4 -0
- data/test/rails_app/config/initializers/session_store.rb +3 -0
- data/test/rails_app/config/initializers/wrap_parameters.rb +14 -0
- data/test/rails_app/config/locales/en.yml +23 -0
- data/test/rails_app/config/routes.rb +7 -0
- data/test/rails_app/config/secrets.yml +22 -0
- data/test/rails_app/config.ru +4 -0
- data/test/rails_app/db/migrate/20141016142638_create_admins.rb +9 -0
- data/test/rails_app/db/migrate/20141016183619_create_users.rb +8 -0
- data/test/rails_app/db/migrate/20141016183633_create_memberships.rb +12 -0
- data/test/rails_app/db/migrate/20141016183642_create_documents.rb +9 -0
- data/test/rails_app/db/migrate/20141017140833_create_admin_reports.rb +9 -0
- data/test/rails_app/db/schema.rb +47 -0
- data/test/rails_app/db/seeds.rb +7 -0
- data/test/rails_app/lib/assets/.keep +0 -0
- data/test/rails_app/lib/tasks/.keep +0 -0
- data/test/rails_app/log/.keep +0 -0
- data/test/rails_app/public/404.html +67 -0
- data/test/rails_app/public/422.html +67 -0
- data/test/rails_app/public/500.html +66 -0
- data/test/rails_app/public/favicon.ico +0 -0
- data/test/rails_app/public/robots.txt +5 -0
- data/test/rails_app/test/controllers/.keep +0 -0
- data/test/rails_app/test/fixtures/.keep +0 -0
- data/test/rails_app/test/fixtures/admin/reports.yml +2 -0
- data/test/rails_app/test/fixtures/admins.yml +11 -0
- data/test/rails_app/test/fixtures/documents.yml +8 -0
- data/test/rails_app/test/fixtures/memberships.yml +10 -0
- data/test/rails_app/test/fixtures/users.yml +2 -0
- data/test/rails_app/test/helpers/.keep +0 -0
- data/test/rails_app/test/integration/.keep +0 -0
- data/test/rails_app/test/mailers/.keep +0 -0
- data/test/rails_app/test/models/.keep +0 -0
- data/test/rails_app/test/models/admin/report_test.rb +7 -0
- data/test/rails_app/test/models/document_test.rb +7 -0
- data/test/rails_app/test/models/membership_test.rb +7 -0
- data/test/rails_app/test/models/user_test.rb +7 -0
- data/test/rails_app/test/test_helper.rb +10 -0
- data/test/rails_app/vendor/assets/javascripts/.keep +0 -0
- data/test/rails_app/vendor/assets/stylesheets/.keep +0 -0
- data/test/simon_says/authorizer_test.rb +143 -0
- data/test/simon_says/roleable_test.rb +200 -0
- data/test/simon_says_test.rb +7 -0
- data/test/test_helper.rb +48 -0
- metadata +312 -0
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
# encoding: UTF-8
|
|
2
|
+
# This file is auto-generated from the current state of the database. Instead
|
|
3
|
+
# of editing this file, please use the migrations feature of Active Record to
|
|
4
|
+
# incrementally modify your database, and then regenerate this schema definition.
|
|
5
|
+
#
|
|
6
|
+
# Note that this schema.rb definition is the authoritative source for your
|
|
7
|
+
# database schema. If you need to create the application database on another
|
|
8
|
+
# system, you should be using db:schema:load, not running all the migrations
|
|
9
|
+
# from scratch. The latter is a flawed and unsustainable approach (the more migrations
|
|
10
|
+
# you'll amass, the slower it'll run and the greater likelihood for issues).
|
|
11
|
+
#
|
|
12
|
+
# It's strongly recommended that you check this file into your version control system.
|
|
13
|
+
|
|
14
|
+
ActiveRecord::Schema.define(version: 20141017140833) do
|
|
15
|
+
|
|
16
|
+
create_table "admin_reports", force: true do |t|
|
|
17
|
+
t.string "title"
|
|
18
|
+
t.datetime "created_at"
|
|
19
|
+
t.datetime "updated_at"
|
|
20
|
+
end
|
|
21
|
+
|
|
22
|
+
create_table "admins", force: true do |t|
|
|
23
|
+
t.integer "access_mask"
|
|
24
|
+
t.datetime "created_at"
|
|
25
|
+
t.datetime "updated_at"
|
|
26
|
+
end
|
|
27
|
+
|
|
28
|
+
create_table "documents", force: true do |t|
|
|
29
|
+
t.string "title"
|
|
30
|
+
t.datetime "created_at"
|
|
31
|
+
t.datetime "updated_at"
|
|
32
|
+
end
|
|
33
|
+
|
|
34
|
+
create_table "memberships", force: true do |t|
|
|
35
|
+
t.integer "user_id"
|
|
36
|
+
t.integer "document_id"
|
|
37
|
+
t.integer "roles_mask", default: 0
|
|
38
|
+
t.datetime "created_at"
|
|
39
|
+
t.datetime "updated_at"
|
|
40
|
+
end
|
|
41
|
+
|
|
42
|
+
create_table "users", force: true do |t|
|
|
43
|
+
t.datetime "created_at"
|
|
44
|
+
t.datetime "updated_at"
|
|
45
|
+
end
|
|
46
|
+
|
|
47
|
+
end
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# This file should contain all the record creation needed to seed the database with its default values.
|
|
2
|
+
# The data can then be loaded with the rake db:seed (or created alongside the db with db:setup).
|
|
3
|
+
#
|
|
4
|
+
# Examples:
|
|
5
|
+
#
|
|
6
|
+
# cities = City.create([{ name: 'Chicago' }, { name: 'Copenhagen' }])
|
|
7
|
+
# Mayor.create(name: 'Emanuel', city: cities.first)
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
@@ -0,0 +1,67 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html>
|
|
3
|
+
<head>
|
|
4
|
+
<title>The page you were looking for doesn't exist (404)</title>
|
|
5
|
+
<meta name="viewport" content="width=device-width,initial-scale=1">
|
|
6
|
+
<style>
|
|
7
|
+
body {
|
|
8
|
+
background-color: #EFEFEF;
|
|
9
|
+
color: #2E2F30;
|
|
10
|
+
text-align: center;
|
|
11
|
+
font-family: arial, sans-serif;
|
|
12
|
+
margin: 0;
|
|
13
|
+
}
|
|
14
|
+
|
|
15
|
+
div.dialog {
|
|
16
|
+
width: 95%;
|
|
17
|
+
max-width: 33em;
|
|
18
|
+
margin: 4em auto 0;
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
div.dialog > div {
|
|
22
|
+
border: 1px solid #CCC;
|
|
23
|
+
border-right-color: #999;
|
|
24
|
+
border-left-color: #999;
|
|
25
|
+
border-bottom-color: #BBB;
|
|
26
|
+
border-top: #B00100 solid 4px;
|
|
27
|
+
border-top-left-radius: 9px;
|
|
28
|
+
border-top-right-radius: 9px;
|
|
29
|
+
background-color: white;
|
|
30
|
+
padding: 7px 12% 0;
|
|
31
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
h1 {
|
|
35
|
+
font-size: 100%;
|
|
36
|
+
color: #730E15;
|
|
37
|
+
line-height: 1.5em;
|
|
38
|
+
}
|
|
39
|
+
|
|
40
|
+
div.dialog > p {
|
|
41
|
+
margin: 0 0 1em;
|
|
42
|
+
padding: 1em;
|
|
43
|
+
background-color: #F7F7F7;
|
|
44
|
+
border: 1px solid #CCC;
|
|
45
|
+
border-right-color: #999;
|
|
46
|
+
border-left-color: #999;
|
|
47
|
+
border-bottom-color: #999;
|
|
48
|
+
border-bottom-left-radius: 4px;
|
|
49
|
+
border-bottom-right-radius: 4px;
|
|
50
|
+
border-top-color: #DADADA;
|
|
51
|
+
color: #666;
|
|
52
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
53
|
+
}
|
|
54
|
+
</style>
|
|
55
|
+
</head>
|
|
56
|
+
|
|
57
|
+
<body>
|
|
58
|
+
<!-- This file lives in public/404.html -->
|
|
59
|
+
<div class="dialog">
|
|
60
|
+
<div>
|
|
61
|
+
<h1>The page you were looking for doesn't exist.</h1>
|
|
62
|
+
<p>You may have mistyped the address or the page may have moved.</p>
|
|
63
|
+
</div>
|
|
64
|
+
<p>If you are the application owner check the logs for more information.</p>
|
|
65
|
+
</div>
|
|
66
|
+
</body>
|
|
67
|
+
</html>
|
|
@@ -0,0 +1,67 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html>
|
|
3
|
+
<head>
|
|
4
|
+
<title>The change you wanted was rejected (422)</title>
|
|
5
|
+
<meta name="viewport" content="width=device-width,initial-scale=1">
|
|
6
|
+
<style>
|
|
7
|
+
body {
|
|
8
|
+
background-color: #EFEFEF;
|
|
9
|
+
color: #2E2F30;
|
|
10
|
+
text-align: center;
|
|
11
|
+
font-family: arial, sans-serif;
|
|
12
|
+
margin: 0;
|
|
13
|
+
}
|
|
14
|
+
|
|
15
|
+
div.dialog {
|
|
16
|
+
width: 95%;
|
|
17
|
+
max-width: 33em;
|
|
18
|
+
margin: 4em auto 0;
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
div.dialog > div {
|
|
22
|
+
border: 1px solid #CCC;
|
|
23
|
+
border-right-color: #999;
|
|
24
|
+
border-left-color: #999;
|
|
25
|
+
border-bottom-color: #BBB;
|
|
26
|
+
border-top: #B00100 solid 4px;
|
|
27
|
+
border-top-left-radius: 9px;
|
|
28
|
+
border-top-right-radius: 9px;
|
|
29
|
+
background-color: white;
|
|
30
|
+
padding: 7px 12% 0;
|
|
31
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
h1 {
|
|
35
|
+
font-size: 100%;
|
|
36
|
+
color: #730E15;
|
|
37
|
+
line-height: 1.5em;
|
|
38
|
+
}
|
|
39
|
+
|
|
40
|
+
div.dialog > p {
|
|
41
|
+
margin: 0 0 1em;
|
|
42
|
+
padding: 1em;
|
|
43
|
+
background-color: #F7F7F7;
|
|
44
|
+
border: 1px solid #CCC;
|
|
45
|
+
border-right-color: #999;
|
|
46
|
+
border-left-color: #999;
|
|
47
|
+
border-bottom-color: #999;
|
|
48
|
+
border-bottom-left-radius: 4px;
|
|
49
|
+
border-bottom-right-radius: 4px;
|
|
50
|
+
border-top-color: #DADADA;
|
|
51
|
+
color: #666;
|
|
52
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
53
|
+
}
|
|
54
|
+
</style>
|
|
55
|
+
</head>
|
|
56
|
+
|
|
57
|
+
<body>
|
|
58
|
+
<!-- This file lives in public/422.html -->
|
|
59
|
+
<div class="dialog">
|
|
60
|
+
<div>
|
|
61
|
+
<h1>The change you wanted was rejected.</h1>
|
|
62
|
+
<p>Maybe you tried to change something you didn't have access to.</p>
|
|
63
|
+
</div>
|
|
64
|
+
<p>If you are the application owner check the logs for more information.</p>
|
|
65
|
+
</div>
|
|
66
|
+
</body>
|
|
67
|
+
</html>
|
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
<!DOCTYPE html>
|
|
2
|
+
<html>
|
|
3
|
+
<head>
|
|
4
|
+
<title>We're sorry, but something went wrong (500)</title>
|
|
5
|
+
<meta name="viewport" content="width=device-width,initial-scale=1">
|
|
6
|
+
<style>
|
|
7
|
+
body {
|
|
8
|
+
background-color: #EFEFEF;
|
|
9
|
+
color: #2E2F30;
|
|
10
|
+
text-align: center;
|
|
11
|
+
font-family: arial, sans-serif;
|
|
12
|
+
margin: 0;
|
|
13
|
+
}
|
|
14
|
+
|
|
15
|
+
div.dialog {
|
|
16
|
+
width: 95%;
|
|
17
|
+
max-width: 33em;
|
|
18
|
+
margin: 4em auto 0;
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
div.dialog > div {
|
|
22
|
+
border: 1px solid #CCC;
|
|
23
|
+
border-right-color: #999;
|
|
24
|
+
border-left-color: #999;
|
|
25
|
+
border-bottom-color: #BBB;
|
|
26
|
+
border-top: #B00100 solid 4px;
|
|
27
|
+
border-top-left-radius: 9px;
|
|
28
|
+
border-top-right-radius: 9px;
|
|
29
|
+
background-color: white;
|
|
30
|
+
padding: 7px 12% 0;
|
|
31
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
h1 {
|
|
35
|
+
font-size: 100%;
|
|
36
|
+
color: #730E15;
|
|
37
|
+
line-height: 1.5em;
|
|
38
|
+
}
|
|
39
|
+
|
|
40
|
+
div.dialog > p {
|
|
41
|
+
margin: 0 0 1em;
|
|
42
|
+
padding: 1em;
|
|
43
|
+
background-color: #F7F7F7;
|
|
44
|
+
border: 1px solid #CCC;
|
|
45
|
+
border-right-color: #999;
|
|
46
|
+
border-left-color: #999;
|
|
47
|
+
border-bottom-color: #999;
|
|
48
|
+
border-bottom-left-radius: 4px;
|
|
49
|
+
border-bottom-right-radius: 4px;
|
|
50
|
+
border-top-color: #DADADA;
|
|
51
|
+
color: #666;
|
|
52
|
+
box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
|
|
53
|
+
}
|
|
54
|
+
</style>
|
|
55
|
+
</head>
|
|
56
|
+
|
|
57
|
+
<body>
|
|
58
|
+
<!-- This file lives in public/500.html -->
|
|
59
|
+
<div class="dialog">
|
|
60
|
+
<div>
|
|
61
|
+
<h1>We're sorry, but something went wrong.</h1>
|
|
62
|
+
</div>
|
|
63
|
+
<p>If you are the application owner check the logs for more information.</p>
|
|
64
|
+
</div>
|
|
65
|
+
</body>
|
|
66
|
+
</html>
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
ENV['RAILS_ENV'] ||= 'test'
|
|
2
|
+
require File.expand_path('../../config/environment', __FILE__)
|
|
3
|
+
require 'rails/test_help'
|
|
4
|
+
|
|
5
|
+
class ActiveSupport::TestCase
|
|
6
|
+
# Setup all fixtures in test/fixtures/*.yml for all tests in alphabetical order.
|
|
7
|
+
fixtures :all
|
|
8
|
+
|
|
9
|
+
# Add more helper methods to be used by all tests here...
|
|
10
|
+
end
|
|
File without changes
|
|
File without changes
|
|
@@ -0,0 +1,143 @@
|
|
|
1
|
+
require 'test_helper'
|
|
2
|
+
|
|
3
|
+
class AuthorizerTest < ActiveSupport::TestCase
|
|
4
|
+
setup do
|
|
5
|
+
@controller = Class.new(ApplicationController) do
|
|
6
|
+
# These would be defined by Devise or some authenication library
|
|
7
|
+
attr_accessor :current_user, :current_admin, :sites
|
|
8
|
+
attr_reader :params
|
|
9
|
+
|
|
10
|
+
def params=(params)
|
|
11
|
+
@params = params.with_indifferent_access
|
|
12
|
+
end
|
|
13
|
+
|
|
14
|
+
# shortcut to read instance variables
|
|
15
|
+
def [](ivar_name)
|
|
16
|
+
instance_variable_get :"@#{ivar_name}"
|
|
17
|
+
end
|
|
18
|
+
|
|
19
|
+
def authenticate_admin! # dummy method
|
|
20
|
+
end
|
|
21
|
+
|
|
22
|
+
def authenticate_user! # dummy method
|
|
23
|
+
end
|
|
24
|
+
|
|
25
|
+
include SimonSays::Authorizer
|
|
26
|
+
end.new
|
|
27
|
+
|
|
28
|
+
@controller.current_user = users(:bob)
|
|
29
|
+
@controller.params = { id: documents(:alpha).id }
|
|
30
|
+
end
|
|
31
|
+
|
|
32
|
+
test "find_resource" do
|
|
33
|
+
@controller.find_resource :document
|
|
34
|
+
|
|
35
|
+
assert_equal documents(:alpha), @controller[:document]
|
|
36
|
+
end
|
|
37
|
+
|
|
38
|
+
test "find_resource with class_name" do
|
|
39
|
+
@controller.find_resource :document, class_name: 'document'
|
|
40
|
+
|
|
41
|
+
assert_equal documents(:alpha), @controller[:document]
|
|
42
|
+
end
|
|
43
|
+
|
|
44
|
+
test "find_resource with default scope and through" do
|
|
45
|
+
@controller.class.default_authorization_scope = :current_user
|
|
46
|
+
@controller.current_user = users(:bob)
|
|
47
|
+
|
|
48
|
+
@controller.find_resource :document, through: :memberships
|
|
49
|
+
|
|
50
|
+
assert_equal documents(:alpha), @controller[:document]
|
|
51
|
+
end
|
|
52
|
+
|
|
53
|
+
test "find_resource with from" do
|
|
54
|
+
@controller.instance_variable_set :@user, users(:bob)
|
|
55
|
+
|
|
56
|
+
@controller.find_resource :document, from: :user
|
|
57
|
+
|
|
58
|
+
assert_equal documents(:alpha), @controller[:document]
|
|
59
|
+
end
|
|
60
|
+
|
|
61
|
+
test "find_resource with namespace" do
|
|
62
|
+
@controller.current_admin = admins(:support)
|
|
63
|
+
@controller.params = { id: admin_reports(:report_one).id }
|
|
64
|
+
|
|
65
|
+
@controller.find_resource :report, namespace: :admin
|
|
66
|
+
|
|
67
|
+
assert_equal admin_reports(:report_one), @controller[:report]
|
|
68
|
+
end
|
|
69
|
+
|
|
70
|
+
test "find_resource raises RecordNotFound" do
|
|
71
|
+
assert_raises ActiveRecord::RecordNotFound do
|
|
72
|
+
@controller.params = { id: -1 }
|
|
73
|
+
@controller.find_resource :document
|
|
74
|
+
end
|
|
75
|
+
end
|
|
76
|
+
|
|
77
|
+
test "find_resource raises RecordNotFound with default scope and through" do
|
|
78
|
+
@controller.class.default_authorization_scope = :current_user
|
|
79
|
+
@controller.current_user = users(:bob)
|
|
80
|
+
|
|
81
|
+
assert_raises ActiveRecord::RecordNotFound do
|
|
82
|
+
@controller.params = { id: -1 }
|
|
83
|
+
@controller.find_resource :document, through: :memberships
|
|
84
|
+
end
|
|
85
|
+
end
|
|
86
|
+
|
|
87
|
+
test "find_resource raises RecordNotFound with from" do
|
|
88
|
+
@controller.instance_variable_set :@user, users(:bob)
|
|
89
|
+
|
|
90
|
+
assert_raises ActiveRecord::RecordNotFound do
|
|
91
|
+
@controller.params = { id: -1 }
|
|
92
|
+
@controller.find_resource :document, from: :user
|
|
93
|
+
end
|
|
94
|
+
end
|
|
95
|
+
|
|
96
|
+
test "authorize with membership role" do
|
|
97
|
+
@controller.instance_variable_set :@membership, documents(:alpha).memberships.first
|
|
98
|
+
|
|
99
|
+
assert @controller.authorize(:fork, resource: :membership)
|
|
100
|
+
end
|
|
101
|
+
|
|
102
|
+
test "authorize with current_admin" do
|
|
103
|
+
@controller.current_admin = admins(:support)
|
|
104
|
+
|
|
105
|
+
assert @controller.authorize(:support, resource: :admin)
|
|
106
|
+
end
|
|
107
|
+
|
|
108
|
+
test "authorize with multiple roles" do
|
|
109
|
+
@controller.instance_variable_set :@membership, documents(:alpha).memberships.first
|
|
110
|
+
|
|
111
|
+
assert @controller.authorize([:update, :delete], resource: :membership)
|
|
112
|
+
end
|
|
113
|
+
|
|
114
|
+
test "authorize with through" do
|
|
115
|
+
@controller.instance_variable_set :@membership, documents(:alpha).memberships.first
|
|
116
|
+
|
|
117
|
+
assert @controller.authorize(:delete, through: :membership)
|
|
118
|
+
end
|
|
119
|
+
|
|
120
|
+
test "authorize invokes authentication_admin" do
|
|
121
|
+
@controller.current_admin = admins(:marketing)
|
|
122
|
+
|
|
123
|
+
@controller.expects(:authenticate_admin!).once
|
|
124
|
+
@controller.authorize(:marketing, resource: :admin)
|
|
125
|
+
end
|
|
126
|
+
|
|
127
|
+
test "authorization failure single role" do
|
|
128
|
+
assert_raises SimonSays::Authorizer::Denied do
|
|
129
|
+
@controller.instance_variable_set :@membership, documents(:beta).memberships.first
|
|
130
|
+
|
|
131
|
+
@controller.authorize(:delete, resource: :membership)
|
|
132
|
+
end
|
|
133
|
+
end
|
|
134
|
+
|
|
135
|
+
test "authorization failire multi roles" do
|
|
136
|
+
@controller.instance_variable_set :@membership, documents(:beta).memberships.first
|
|
137
|
+
|
|
138
|
+
assert_raises SimonSays::Authorizer::Denied do
|
|
139
|
+
@controller.authorize([:update, :delete], resource: :membership)
|
|
140
|
+
end
|
|
141
|
+
end
|
|
142
|
+
end
|
|
143
|
+
|