zen 0.2.8 → 0.3b

data/spec/zen/package/users/controller/users.rb

@@ -1,33 +1,40 @@
 require File.expand_path('../../../../../helper', __FILE__)
 
-Zen::Language.load('users')
-
 describe("Users::Controller::Users") do
   behaves_like :capybara
 
+  login_url     = Users::Controller::Users.r(:login).to_s
+  dashboard_url = Sections::Controller::Sections.r(:index).to_s
+  index_url     = Users::Controller::Users.r(:index).to_s
+  save_button   = lang('users.buttons.save')
+  new_button    = lang('users.buttons.new')
+  delete_button = lang('users.buttons.delete')
+  status        = lang('users.special.status_hash.active')
+
   it('Submit a form without a CSRF token') do
     response = page.driver.post(
       Users::Controller::Users.r(:save).to_s
     )
 
-    response.body.include?(lang('zen_general.errors.csrf')).should === true
-    response.status.should                                         === 403
+    response.body.include?(lang('zen_general.errors.csrf')).should == true
+    response.status.should                                         == 403
   end
 
   it('Show the login form') do
-    login_url = Users::Controller::Users.r(:login).to_s
-
     visit(login_url)
 
-    page.has_selector?('#login_form').should                         === true
-    page.has_selector?('input[type="submit"][value="Login"]').should === true
-    page.has_content?('Email').should                                === true
-    page.has_content?('Password').should                             === true
+    page.has_selector?('#login_form').should                         == true
+    page.has_selector?('input[type="submit"][value="Login"]').should == true
+    page.has_content?('Email').should                                == true
+    page.has_content?('Password').should                             == true
   end
 
   it('Log in') do
-    login_url     = Users::Controller::Users.r(:login).to_s
-    dashboard_url = Sections::Controller::Sections.r(:index).to_s
+    event_email = nil
+
+    Zen::Event.listen(:user_login) do |user|
+      event_email = user.email
+    end
 
     visit(login_url)
 
@@ -38,24 +45,19 @@ describe("Users::Controller::Users") do
     end
 
     current_path.should == dashboard_url
+    event_email.should  == 'spec@domain.tld'
   end
 
-  it("A user should exist") do
-    index_url = Users::Controller::Users.r(:index).to_s
-    message   = lang('users.messages.no_users')
+  it('Find an existing user') do
+    message = lang('users.messages.no_users')
 
     visit(index_url)
 
-    page.has_selector?('table tbody tr').should === true
-    page.has_content?(message).should           === false
+    page.has_selector?('table tbody tr').should == true
+    page.has_content?(message).should           == false
   end
 
   it("Create a new user") do
-    index_url   = Users::Controller::Users.r(:index).to_s
-    save_button = lang('users.buttons.save')
-    new_button  = lang('users.buttons.new')
-    status      = lang('users.special.status_hash.open')
-
     visit(index_url)
     click_link(new_button)
 
@@ -63,59 +65,166 @@ describe("Users::Controller::Users") do
       fill_in('name'   , :with => 'Spec user')
       fill_in('email'  , :with => 'spec@email.com')
       fill_in('website', :with => 'spec.com')
-      fill_in('new_password'    , :with => 'spec')
+      fill_in('password'        , :with => 'spec')
       fill_in('confirm_password', :with => 'spec')
-      select(status, :from => 'status')
+
+      select(status, :from => 'user_status_id')
       click_on(save_button)
     end
 
-    page.find('input[name="name"]').value.should  === 'Spec user'
-    page.find('input[name="email"]').value.should === 'spec@email.com'
+    page.has_selector?('span.error').should       == false
+    page.find('input[name="name"]').value.should  == 'Spec user'
+    page.find('input[name="email"]').value.should == 'spec@email.com'
   end
 
-  it("Edit an existing user") do
-    index_url   = Users::Controller::Users.r(:index).to_s
-    save_button = lang('users.buttons.save')
+  it('Search for a user') do
+    search_button = lang('zen_general.buttons.search')
+    error         = lang('zen_general.errors.invalid_search')
+
+    visit(index_url)
+
+    within('#search_form') do
+      fill_in('query', :with => 'Spec user')
+      click_on(search_button)
+    end
+
+    page.has_content?(error).should       == false
+    page.has_content?('Spec user').should == true
+
+    within('#search_form') do
+      fill_in('query', :with => 'does not exist')
+      click_on(search_button)
+    end
+
+    page.has_content?(error).should       == false
+    page.has_content?('Spec user').should == false
+  end
 
+  it("Edit an existing user") do
     visit(index_url)
-    click_link('spec@email.com')
+    click_link('Spec user')
 
     within('#user_form') do
       fill_in('name', :with => 'Spec user modified')
+      check('permission_show_user')
       click_on(save_button)
     end
 
-    page.find('input[name="name"]').value.should  === 'Spec user modified'
+    page.find('#permission_show_user').checked?.should == 'checked'
+    page.find_field('name').value.should               == 'Spec user modified'
   end
 
-  it("Edit an existing user with invalid data") do
-    index_url   = Users::Controller::Users.r(:index).to_s
-    save_button = lang('users.buttons.save')
+  it('Remove a permission from a user') do
+    visit(index_url)
+    click_link('Spec user')
 
+    within('#user_form') do
+      uncheck('permission_show_user')
+      click_on(save_button)
+    end
+
+    page.find('#permission_show_user').checked?.should != 'checked'
+  end
+
+  it("Edit an existing user with invalid data") do
     visit(index_url)
-    click_link('spec@email.com')
+    click_link('Spec user')
 
     within('#user_form') do
-      fill_in('name', :with => '')
+      fill_in('form_name', :with => '')
       click_on(save_button)
     end
 
-    page.has_selector?('label[for="form_name"] span.error').should === true
+    page.find_field('form_name').value.empty?.should               == true
+    page.has_selector?('label[for="form_name"] span.error').should == true
   end
 
   it("Delete an existing user without specifying an ID") do
-    index_url     = Users::Controller::Users.r(:index).to_s
-    delete_button = lang('users.buttons.delete')
-
     visit(index_url)
     click_on(delete_button)
 
-    page.has_selector?('input[name="user_ids[]"]').should === true
+    page.has_selector?('input[name="user_ids[]"]').should == true
   end
 
   it("Delete an existing user") do
-    index_url     = Users::Controller::Users.r(:index).to_s
-    delete_button = lang('users.buttons.delete')
+    visit(index_url)
+
+    within('table tbody tr:last-child') do
+      check('user_ids[]')
+    end
+
+    click_on(delete_button)
+
+    page.has_content?('spec@email.com').should == false
+  end
+
+  it('Call the event new_user (before and after)') do
+    event_name = nil
+
+    Zen::Event.listen(:before_new_user) do |user|
+      user.name += ' with event'
+    end
+
+    Zen::Event.listen(:after_new_user) do |user|
+      event_name = user.name
+    end
+
+    visit(index_url)
+    click_on(new_button)
+
+    within('#user_form') do
+      fill_in('name'   , :with => 'User')
+      fill_in('email'  , :with => 'spec@email.com')
+      fill_in('website', :with => 'spec.com')
+      fill_in('password'        , :with => 'spec')
+      fill_in('confirm_password', :with => 'spec')
+
+      click_on(save_button)
+    end
+
+    page.has_selector?('span.error').should      == false
+    page.find('input[name="name"]').value.should == 'User with event'
+    event_name.should                            == 'User with event'
+
+    Zen::Event.delete(:before_new_user, :after_new_user)
+  end
+
+  it('Call the event edit_user (before and after)') do
+    event_name = nil
+
+    Zen::Event.listen(:before_edit_user) do |user|
+      user.name = 'User modified'
+    end
+
+    Zen::Event.listen(:after_edit_user) do |user|
+      event_name = user.name
+    end
+
+    visit(index_url)
+    click_on('User with event')
+
+    within('#user_form') do
+      click_on(save_button)
+    end
+
+    page.has_selector?('span.error').should      == false
+    page.find('input[name="name"]').value.should == 'User modified'
+    event_name.should                            == 'User modified'
+
+    Zen::Event.delete(:before_edit_user, :after_edit_user)
+  end
+
+  it('Call the event delete_user (before and after)') do
+    event_name  = nil
+    event_name2 = nil
+
+    Zen::Event.listen(:before_delete_user) do |user|
+      event_name = user.name
+    end
+
+    Zen::Event.listen(:after_delete_user) do |user|
+      event_name2 = user.name
+    end
 
     visit(index_url)
 
@@ -125,6 +234,42 @@ describe("Users::Controller::Users") do
 
     click_on(delete_button)
 
-    page.has_content?('spec@email.com').should === false
+    page.has_content?('User modified').should == false
+    event_name.should                         == 'User modified'
+    event_name2.should                        == event_name
+
+    Zen::Event.delete(:before_delete_user, :after_delete_user)
   end
+
+  it('Register a new user') do
+    get_setting(:allow_registration).value = '1'
+
+    logout_path   = Users::Controller::Users.r(:logout).to_s
+    login_path    = Users::Controller::Users.r(:login).to_s
+    register_path = Users::Controller::Users.r(:register).to_s
+
+    visit(logout_path)
+    visit(register_path)
+
+    current_path.should == register_path
+
+    within('#register_form') do
+      fill_in('name', :with => 'New user')
+      fill_in('email', :with => 'test@test.com')
+      fill_in('password', :with => 'abc')
+      fill_in('confirm_password', :with => 'abc')
+      click_on(lang('users.buttons.register'))
+    end
+
+    page.has_selector?('span.error').should == false
+    current_path.should                     == login_path
+
+    user = Users::Model::User[:email => 'test@test.com']
+
+    user.nil?.should             == false
+    user.user_status.name.should == 'closed'
+  end
+
+  capybara_login
+  Users::Model::User[:email => 'test@test.com'].destroy
 end

data/spec/zen/package/users/helper/access.rb

@@ -0,0 +1,29 @@
+require File.expand_path('../../../../../helper', __FILE__)
+require File.join(Zen::FIXTURES, 'package', 'users', 'helper', 'access')
+
+describe('Ramaze::Helper::Access') do
+  behaves_like :capybara
+
+  visit(Users::Controller::Users.r(:logout).to_s)
+
+  it('Deny access to a method') do
+    visit('/admin/spec-access-helper/denied')
+
+    current_path.should == Users::Controller::Users.r(:login).to_s
+    page.body.include?('super secret page').should == false
+  end
+
+  it('Allow access to a list of methods') do
+    capybara_login
+
+    visit('/admin/spec-access-helper/allowed')
+
+    current_path.should                  == SpecAccessHelper.r(:allowed).to_s
+    page.body.include?('allowed').should == true
+
+    visit('/admin/spec-access-helper/allowed_1')
+
+    current_path.should                  == SpecAccessHelper.r(:allowed_1).to_s
+    page.body.include?('allowed').should == true
+  end
+end

data/spec/zen/package/users/helper/acl.rb

@@ -0,0 +1,46 @@
+require File.expand_path('../../../../../helper', __FILE__)
+require File.join(Zen::FIXTURES, 'package', 'users', 'helper', 'acl')
+
+describe('Ramaze::Helper::ACL') do
+  behaves_like :capybara
+
+  visit(Users::Controller::Users.r(:logout).to_s)
+
+  # Update the permissions before logging in as they're cached in the session.
+  Users::Model::User[:email => 'spec@domain.tld'] \
+    .add_permission(:permission => 'spec_permission')
+
+  Users::Model::UserGroup[:slug => 'administrators'] \
+    .update(:super_group => false)
+
+  capybara_login
+
+  it('Allow for a permission') do
+    visit('/admin/spec-acl-helper')
+
+    page.has_content?('not allowed').should == false
+    page.has_content?('allowed').should     == true
+  end
+
+  it('Deny for a missing permission') do
+    visit('/admin/spec-acl-helper/invalid')
+
+    page.has_content?('not allowed').should == true
+  end
+
+  it('Respond for a missing permission') do
+    visit('/admin/spec-acl-helper/respond_message')
+
+    page.has_content?(lang('zen_general.errors.not_authorized')).should == true
+    page.status_code.should == 403
+  end
+
+  Zen.database[:permissions] \
+    .filter(:permission => 'spec_permission') \
+    .delete
+
+  Users::Model::UserGroup[:slug => 'administrators'] \
+    .update(:super_group => true)
+
+  Ramaze::Cache.session.clear
+end

data/spec/zen/package/users/helper/users.rb

@@ -3,95 +3,51 @@ require File.expand_path('../../../../../helper', __FILE__)
 describe('Ramaze::Helper::Users') do
   behaves_like :capybara
 
-  it('Create the test data') do
-    @user = Users::Model::User.create(
-      :email    => 'spec@spec.com',
-      :name     => 'Spec user',
-      :password => 'password'
-    )
-
-    @group = Users::Model::UserGroup.create(
-      :name        => 'Spec user group',
-      :super_group => true
-    )
-
-    @rule = Users::Model::AccessRule.create(
-      :package       => 'sections',
-      :controller    => '*',
-      :create_access => true,
-      :read_access   => true,
-      :delete_access => true,
-      :update_access => true,
-      :user_id       => @user.id
-    )
-
-    @user.email.should   === 'spec@spec.com'
-    @group.name.should   === 'Spec user group'
-    @rule.package.should === 'sections'
-    @rule.user_id.should === @user.id
-  end
+  user = Users::Model::User.create(
+    :email    => 'spec@spec.com',
+    :name     => 'Spec user',
+    :password => 'password'
+  )
+
+  group = Users::Model::UserGroup.create(
+    :name        => 'Spec user group',
+    :super_group => true
+  )
 
   it('Validate a valid user') do
-    url = Users::Controller::Users.r(:edit, @user.id).to_s
+    url = Users::Controller::Users.r(:edit, user.id).to_s
 
     visit(url)
 
-    current_path.should === url
+    current_path.should == url
   end
 
   it('Validate an invalid user') do
-    url   = Users::Controller::Users.r(:edit, @user.id + 1).to_s
+    url   = Users::Controller::Users.r(:edit, user.id + 1).to_s
     index = Users::Controller::Users.r(:index).to_s
 
     visit(url)
 
-    current_path.should === index
+    current_path.should == index
   end
 
   it('Validate a valid user group') do
-    url = Users::Controller::UserGroups.r(:edit, @group.id).to_s
+    url = Users::Controller::UserGroups.r(:edit, group.id).to_s
 
     visit(url)
 
-    current_path.should === url
+    current_path.should == url
   end
 
   it('Validate an invalid user group') do
-    url   = Users::Controller::UserGroups.r(:edit, @group.id + 1).to_s
+    url   = Users::Controller::UserGroups.r(:edit, group.id + 1).to_s
     index = Users::Controller::UserGroups.r(:index).to_s
 
     visit(url)
 
-    current_path.should === index
-  end
-
-  it('Validate a valid access rule') do
-    url = Users::Controller::AccessRules.r(:edit, @rule.id).to_s
-
-    visit(url)
-
-    current_path.should === url
-  end
-
-  it('Validate an invalid access rule') do
-    url   = Users::Controller::AccessRules.r(:edit, @rule.id + 1).to_s
-    index = Users::Controller::AccessRules.r(:index).to_s
-
-    visit(url)
-
-    current_path.should === index
-  end
-
-  it('Delete the test data') do
-    id = @user.id
-
-    @rule.destroy
-    @group.destroy
-    @user.destroy
-
-    Users::Model::User[:name => 'Spec user'].should            === nil
-    Users::Model::UserGroup[:name => 'Spec user group'].should === nil
-    Users::Model::AccessRule[:user_id => id].should            === nil
+    current_path.should == index
   end
 
+  group.destroy
+  user.destroy
 end