typus 0.9.39 → 1.0.0.pre

data/test/functional/admin/resources_controller_posts_forms_test.rb

@@ -0,0 +1,58 @@
+require "test_helper"
+
+# Here we test everything related to forms.
+
+class Admin::PostsControllerTest < ActionController::TestCase
+
+  # Our model definition is:
+  #
+  #   Post:
+  #     fields:
+  #       form: title, body, created_at, status, published_at
+  #
+  should "verify forms" do
+
+    get :new
+    assert_template :new
+
+    assert_select "form"
+
+    # We have 3 inputs: 1 hidden which is the UTF8 stuff, one which is the 
+    # Post#title and finally the submit button.
+
+    assert_select "form input", 3
+
+    # Post#title: Input
+    assert_select 'label[for="post_title"]'
+    assert_select 'input#post_title[type="text"]'
+
+    # We have 1 textarea
+    assert_select "form textarea", 1
+
+    # Post#body: Text Area
+    assert_select 'label[for="post_body"]'
+    assert_select 'textarea#post_body'
+
+    # We have 6 selectors
+    assert_select "form select", 6
+
+    # Post#created_at: Datetime
+    assert_select 'label[for="post_created_at"]'
+    assert_select 'select#post_created_at_1i'
+    assert_select 'select#post_created_at_2i'
+    assert_select 'select#post_created_at_3i'
+    assert_select 'select#post_created_at_4i'
+    assert_select 'select#post_created_at_5i'
+
+    # Post#status: Selector
+    assert_select 'label[for="post_status"]'
+    assert_select 'select#post_status'
+
+    # We have 1 template
+
+    # Post#published_at: Datetime
+    assert_match "templates#datepicker_template_published_at", @response.body
+
+  end
+
+end

data/test/functional/admin/resources_controller_posts_permissions_test.rb

@@ -0,0 +1,100 @@
+require "test_helper"
+
+class Admin::PostsControllerTest < ActionController::TestCase
+
+  context "Root" do
+
+    setup do
+      editor = Factory(:typus_user, :email => "editor@example.com", :role => "editor")
+      @post = Factory(:post, :typus_user => editor)
+    end
+
+    should "verify_root_can_edit_any_record" do
+      Post.all.each do |post|
+        get :edit, { :id => post.id }
+        assert_response :success
+        assert_template 'edit'
+      end
+    end
+
+    should "verify_admin_updating_an_item_does_not_change_typus_user_id_if_not_defined" do
+      post :update, { :id => @post.id, :post => { :title => 'Updated by admin' } }
+      post_updated = Post.find(@post.id)
+      assert_equal @post.typus_user_id, post_updated.typus_user_id
+    end
+
+    should "verify_admin_updating_an_item_does_change_typus_user_id_to_whatever_admin_wants" do
+      post :update, { :id => @post.id, :post => { :title => 'Updated', :typus_user_id => 108 } }
+      post_updated = Post.find(@post.id)
+      assert_equal 108, post_updated.typus_user_id
+    end
+
+  end
+
+  context "No root" do
+
+    setup do
+      @typus_user = Factory(:typus_user, :email => "editor@example.com", :role => "editor")
+      @request.session[:typus_user_id] = @typus_user.id
+      assert @typus_user.is_not_root?
+      @request.env['HTTP_REFERER'] = '/admin/posts'
+    end
+
+    should "verify_editor_can_show_any_record" do
+      Post.all.each do |post|
+        get :show, { :id => post.id }
+        assert_response :success
+        assert_template 'show'
+      end
+    end
+
+    should "verify_editor_tried_to_edit_a_post_owned_by_himself" do
+      _post = Factory(:post, :typus_user => @typus_user)
+      get :edit, { :id => _post.id }
+      assert_response :success
+    end
+
+    should "verify_editor_tries_to_edit_a_post_owned_by_the_admin" do
+      get :edit, { :id => Factory(:post).id }
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "You don't have permission to access this item.", flash[:alert]
+    end
+
+    should "verify_editor_tries_to_show_a_post_owned_by_the_admin" do
+      get :show, { :id => Factory(:post).id }
+      assert_response :success
+    end
+
+    should "verify_editor_tries_to_show_a_post_owned_by_the_admin whe only user items" do
+
+      Typus::Resources.expects(:only_user_items).returns(true)
+      post = Factory(:post)
+      get :show, { :id => post.id }
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "You don't have permission to access this item.", flash[:alert]
+    end
+
+    should "verify_typus_user_id_of_item_when_creating_record" do
+      post :create, { :post => { :title => "Chunky Bacon", :body => "Lorem ipsum ..." } }
+      post_ = Post.find_by_title("Chunky Bacon")
+
+      assert_equal @request.session[:typus_user_id], post_.typus_user_id
+    end
+
+    should "verify_editor_updating_an_item_does_not_change_typus_user_id" do
+
+      [ 108, nil ].each do |typus_user_id|
+        _post = Factory(:post, :typus_user => @typus_user)
+        post :update, { :id => _post.id, :post => { :title => 'Updated', :typus_user_id => @typus_user.id } }
+        post_updated = Post.find(_post.id)
+        assert_equal  @request.session[:typus_user_id], post_updated.typus_user_id
+      end
+    end
+
+  end
+
+end

data/test/functional/admin/{master_controller_posts_relationships_test.rb → resources_controller_posts_relationships_test.rb}

@@ -1,4 +1,4 @@
-require 'test/helper'
+require "test_helper"
 
 class Admin::PostsControllerTest < ActionController::TestCase
 
@@ -6,29 +6,29 @@ class Admin::PostsControllerTest < ActionController::TestCase
   # Post => has_many :comments
   ##
 
-  def test_should_relate_comment_with_post_and_then_unrelate
+  should "relate_comment_with_post_and_then_unrelate" do
 
-    comment = comments(:without_post_id)
-    post_ = posts(:published)
+    comment = Factory(:comment, :post => nil)
+    post_ = Factory(:post)
     @request.env['HTTP_REFERER'] = "/admin/posts/edit/#{post_.id}#comments"
 
     assert_difference('post_.comments.count') do
-      post :relate, { :id => post_.id, 
+      post :relate, { :id => post_.id,
                       :related => { :model => 'Comment', :id => comment.id } }
     end
 
     assert_response :redirect
     assert_redirected_to @request.env['HTTP_REFERER']
-    assert_equal "Comment related to Post.", flash[:success]
+    assert_equal "Comment related to Post", flash[:notice]
 
     assert_difference('post_.comments.count', -1) do
-      post :unrelate, { :id => post_.id, 
+      post :unrelate, { :id => post_.id,
                         :resource => 'Comment', :resource_id => comment.id }
     end
 
     assert_response :redirect
     assert_redirected_to @request.env['HTTP_REFERER']
-    assert_equal "Comment unrelated from Post.", flash[:success]
+    assert_equal "Comment unrelated from Post", flash[:notice]
 
   end
 
@@ -36,51 +36,56 @@ class Admin::PostsControllerTest < ActionController::TestCase
   # Post => has_and_belongs_to_many :categories
   ##
 
-  def test_should_relate_category_with_post_and_then_unrelate
+  should "relate_category_with_post_and_then_unrelate" do
 
-    category = categories(:first)
-    post_ = posts(:published)
+    category = Factory(:category)
+    post_ = Factory(:post)
     @request.env['HTTP_REFERER'] = "/admin/posts/edit/#{post_.id}#categories"
 
     assert_difference('category.posts.count') do
-      post :relate, { :id => post_.id, 
+      post :relate, { :id => post_.id,
                       :related => { :model => 'Category', :id => category.id } }
     end
 
     assert_response :redirect
     assert_redirected_to @request.env['HTTP_REFERER']
-    assert_equal "Category related to Post.", flash[:success]
+    assert_equal "Category related to Post", flash[:notice]
 
     assert_difference('category.posts.count', -1) do
-      post :unrelate, { :id => post_.id, 
+      post :unrelate, { :id => post_.id,
                         :resource => 'Category', :resource_id => category.id }
     end
 
     assert_response :redirect
     assert_redirected_to @request.env['HTTP_REFERER']
-    assert_equal "Category unrelated from Post.", flash[:success]
+    assert_equal "Category unrelated from Post", flash[:notice]
 
   end
 
+=begin
+
   ##
   # Post => has_many :assets, :as => resource (Polimorphic)
   ##
 
-  def test_should_relate_asset_with_post_and_then_unrelate
+  # FIXME: ActiveRecord::UnknownAttributeError: unknown attribute: post
+  should "relate_asset_with_post_and_then_unrelate"
 
-    post_ = posts(:published)
+    post_ = Factory(:post)
 
     @request.env['HTTP_REFERER'] = "/admin/posts/edit/#{post_.id}#assets"
 
     assert_difference('post_.assets.count', -1) do
-      get :unrelate, { :id => post_.id,  
+      get :unrelate, { :id => post_.id,
                        :resource => 'Asset', :resource_id => post_.assets.first.id }
     end
 
     assert_response :redirect
     assert_redirected_to @request.env['HTTP_REFERER']
-    assert_equal "Asset unrelated from Post.", flash[:success]
+    assert_equal "Asset unrelated from Post.", flash[:notice]
 
   end
 
-end
+=end
+
+end

data/test/functional/admin/resources_controller_posts_roles.rb

@@ -0,0 +1,52 @@
+require "test_helper"
+
+class Admin::PostsControllerTest < ActionController::TestCase
+
+  context "Admin" do
+
+    setup do
+      @admin = Factory(:typus_user)
+      @request.session[:typus_user_id] = @admin.id
+    end
+
+    should "add a category" do
+      assert @admin.can?("create", "Post")
+    end
+
+    should "destroy a post" do
+      get :destroy, { :id => Factory(:post).id, :method => :delete }
+
+      assert_response :redirect
+      assert_equal "Post successfully removed.", flash[:notice]
+      assert_redirected_to :action => :index
+    end
+
+  end
+
+  context "Designer" do
+
+    setup do
+      @designer = Factory(:typus_user, :role => "designer")
+      @request.session[:typus_user_id] = @designer.id
+    end
+
+    should "not_allow_designer_to_add_a_post" do
+      get :new
+
+      assert_response :redirect
+      assert_equal "Designer can't perform action. (new)", flash[:notice]
+      assert_redirected_to :action => :index
+    end
+
+    should "not_allow_designer_to_destroy_a_post" do
+      get :destroy, { :id => Factory(:post).id, :method => :delete }
+
+      assert_response :redirect
+      assert_equal "Designer can't delete this item.", flash[:notice]
+      assert_redirected_to :action => :index
+
+    end
+
+  end
+
+end

data/test/functional/admin/resources_controller_posts_views_test.rb

@@ -0,0 +1,143 @@
+require "test_helper"
+
+class Admin::PostsControllerTest < ActionController::TestCase
+
+  context "Index" do
+
+    setup do
+      get :index
+    end
+
+    should "render index and validates_presence_of_custom_partials" do
+      assert_match "posts#_index.html.erb", @response.body
+    end
+
+    should "render_index_and_verify_page_title" do
+      assert_select "title", "Posts"
+    end
+
+    should "render index_and_show_add_entry_link" do
+      assert_select "#sidebar ul" do
+        assert_select "li", "Add new"
+      end
+    end
+
+    should "render_index_and_show_trash_item_image" do
+      assert_response :success
+      assert_select '.trash', 'Trash'
+    end
+
+  end
+
+  context "New" do
+
+    setup do
+      get :new
+    end
+
+    should "render new and partials_on_new" do
+      assert_match "posts#_new.html.erb", @response.body
+    end
+
+    should "render new and verify page title" do
+      assert_select "title", "New Post"
+    end
+
+  end
+
+  context "Edit" do
+
+    setup do
+      get :edit, { :id => Factory(:post).id }
+    end
+
+    should "render_edit_and_verify_presence_of_custom_partials" do
+      assert_match "posts#_edit.html.erb", @response.body
+    end
+
+    should "render_edit_and_verify_page_title" do
+      assert_select "title", "Edit Post"
+    end
+
+  end
+
+  context "Show" do
+
+    setup do
+      get :show, { :id => Factory(:post).id }
+    end
+
+    should "render_show_and_verify_presence_of_custom_partials" do
+      assert_match "posts#_show.html.erb", @response.body
+    end
+
+    should "render_show_and_verify_page_title" do
+      assert_select "title", "Show Post"
+    end
+
+  end
+
+  should "get_index_and_render_edit_or_show_links" do
+    %w(edit show).each do |action|
+      Typus::Resources.expects(:default_action_on_item).at_least_once.returns(action)
+      get :index
+      Post.all.each do |post|
+        assert_match "/posts/#{action}/#{post.id}", @response.body
+      end
+    end
+  end
+
+  context "Designer" do
+
+    setup do
+      @typus_user = Factory(:typus_user, :email => "designer@example.com", :role => "designer")
+      @request.session[:typus_user_id] = @typus_user.id
+    end
+
+    should "render_index_and_not_show_add_entry_link" do
+      get :index
+      assert_response :success
+      assert_no_match /Add Post/, @response.body
+    end
+
+    should "render_index_and_not_show_trash_image" do
+      get :index
+      assert_response :success
+      assert_select ".trash", false
+    end
+
+  end
+
+  context "Editor" do
+
+    setup do
+      @typus_user = Factory(:typus_user, :email => "editor@example.com", :role => "editor")
+      @request.session[:typus_user_id] = @typus_user.id
+    end
+
+    should "get_index_and_render_edit_or_show_links_on_owned_records" do
+      get :index
+      Post.all.each do |post|
+        action = post.owned_by?(@typus_user) ? "edit" : "show"
+        assert_match "/posts/#{action}/#{post.id}", @response.body
+      end
+    end
+
+    should "get_index_and_render_edit_or_show_on_only_user_items" do
+      %w(edit show).each do |action|
+        Typus::Resources.stubs(:only_user_items).returns(true)
+        Typus::Resources.stubs(:default_action_on_item).returns(action)
+        get :index
+        Post.all.each do |post|
+          if post.owned_by?(@typus_user)
+            assert_match "/posts/#{action}/#{post.id}", @response.body
+          else
+            assert_no_match /\/posts\/#{action}\/#{post.id}/, @response.body
+          end
+        end
+      end
+    end
+
+  end
+
+end

data/test/functional/admin/resources_controller_tableless_resource_test.rb

@@ -0,0 +1,51 @@
+require "test_helper"
+
+class Admin::StatusControllerTest < ActionController::TestCase
+
+  context "Admin" do
+
+    setup do
+      @request.session[:typus_user_id] = Factory(:typus_user).id
+    end
+
+    should "render index" do
+      get :index
+      assert_response :success
+      assert_template 'index'
+    end
+
+    should "not render show" do
+      get :show
+      assert_response :unprocessable_entity
+    end
+
+  end
+
+  context "Editor" do
+
+    setup do
+      @request.session[:typus_user_id] = Factory(:typus_user, :role => "editor").id
+    end
+
+    should "not render index" do
+      get :index
+      assert_response :unprocessable_entity
+    end
+
+  end
+
+  context "Not logged user" do
+
+    setup do
+      @request.session[:typus_user_id] = nil
+    end
+
+    should "not render index and redirect to new_admin_session_path with back_to" do
+      get :index
+      assert_response :redirect
+      assert_redirected_to new_admin_session_path(:back_to => '/admin/status')
+    end
+
+  end
+
+end

data/test/functional/admin/resources_controller_typus_users_test.rb

@@ -0,0 +1,159 @@
+require "test_helper"
+
+class Admin::TypusUsersControllerTest < ActionController::TestCase
+
+  context "Master role" do
+
+    setup do
+      Typus.master_role = 'admin'
+      @typus_user = Factory(:typus_user)
+      @typus_user_editor = Factory(:typus_user, :email => "editor@example.com", :role => "editor")
+      @request.session[:typus_user_id] = @typus_user.id
+      @request.env['HTTP_REFERER'] = '/admin/typus_users'
+    end
+
+    should "allow_admin_to_create_typus_users" do
+      get :new
+      assert_response :success
+    end
+
+    should "not allow admin to toogle her status" do
+      get :toggle, { :id => @typus_user.id, :field => 'status' }
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "You can't toggle your status.", flash[:notice]
+    end
+
+    should "allow_admin_to_toggle_other_users_status" do
+
+      get :toggle, { :id => @typus_user_editor.id, :field => 'status' }
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "Typus user status changed.", flash[:notice]
+    end
+
+    should "not be able to destroy herself" do
+      assert_difference('TypusUser.count', 0) do
+        delete :destroy, :id => @typus_user.id
+      end
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "You can't remove yourself.", flash[:notice]
+    end
+
+    should "verify_admin_can_destroy_others" do
+      assert_difference('TypusUser.count', -1) do
+        delete :destroy, :id => @typus_user_editor.id
+      end
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "Typus user successfully removed.", flash[:notice]
+    end
+
+  end
+
+  context "No master role" do
+
+    setup do
+      @typus_user = Factory(:typus_user, :role => "editor")
+      @request.session[:typus_user_id] = @typus_user.id
+      @request.env['HTTP_REFERER'] = '/admin/typus_users'
+    end
+
+    should "not_allow_non_root_typus_user_to_toggle_status" do
+      get :toggle, { :id => @typus_user.id, :field => 'status' }
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "You're not allowed to toggle status.", flash[:notice]
+    end
+
+    should "not_allow_editor_to_create_typus_users" do
+      get :new
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "Editor can't perform action. (new)", flash[:notice].to_s
+    end
+
+  end
+
+  context "Editor" do
+
+    setup do
+      @request.env['HTTP_REFERER'] = '/admin/typus_users'
+      @typus_user = Factory(:typus_user, :email => "editor@example.com", :role => "editor")
+      @request.session[:typus_user_id] = @typus_user.id
+    end
+
+    should "allow_editor_to_update_himself" do
+      post :update, { :id => @typus_user.id, :typus_user => { :role => 'editor' } }
+
+      assert_response :redirect
+      assert_redirected_to "/admin/typus_users/edit/#{@typus_user.id}"
+      assert_equal "Typus user successfully updated.", flash[:notice]
+    end
+
+    should "not_allow_editor_to_update_himself_to_become_admin" do
+      post :update, { :id => @typus_user.id, :typus_user => { :role => 'admin' } }
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "You can't change your role.", flash[:notice]
+    end
+
+    should "not_allow_editor_to_edit_other_users_profiles" do
+      get :edit, { :id => Factory(:typus_user).id }
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "As you're not the admin or the owner of this record you cannot edit it.", flash[:notice]
+    end
+
+    should "not_allow_editor_to_destroy_users" do
+      delete :destroy, :id => Factory(:typus_user).id
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "You're not allowed to remove Typus Users.", flash[:notice]
+    end
+
+    should "not_allow_editor_to_destroy_herself" do
+      delete :destroy, :id => @typus_user.id
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "You're not allowed to remove Typus Users.", flash[:notice]
+    end
+
+    should "change_root_to_editor_so_editor_can_edit_others_content" do
+      Typus.expects(:master_role).at_least_once.returns("editor")
+      get :edit, { :id => Factory(:typus_user).id }
+      assert_response :success
+    end
+
+  end
+
+  context "Designer" do
+
+    setup do
+      @request.env['HTTP_REFERER'] = '/admin'
+      @typus_user = Factory(:typus_user, :role => "designer")
+      @request.session[:typus_user_id] = @typus_user.id
+    end
+
+    should "redirect_to_admin_dashboard_if_user_does_not_have_privileges" do
+      get :index
+
+      assert_response :redirect
+      assert_redirected_to @request.env['HTTP_REFERER']
+      assert_equal "Designer can't display items.", flash[:notice]
+    end
+
+  end
+
+end