zena 1.2.7 → 1.2.8

data/test/integration/zafu_compiler/zafu_attributes.yml

@@ -163,7 +163,8 @@ show_attr_anchor:
   res: "<a class='anchor' name='node22'></a>status title"
 
 anchor_in_link:
-  src: "<r:link class='xx' anchor='true'/>"
+  old_src: "<r:link class='xx' anchor='true'/>"
+  src: "<a class='xx' href='#node#{id}' do='title'/>"
   res: "<a class='xx' href='#node22'>status title</a>"
 
 anchor_tag:

data/test/integration/zafu_compiler/zazen.yml

@@ -15,6 +15,10 @@ link_anchor:
   tem: "<%= zazen('see \"\":22#') %>"
   res: "<p>see <a href=\"#node22\">status title</a></p>"
 
+link_anchor_remote:
+  tem: "<%= zazen('see \"\":18#foo') %>"
+  res: "<p>see <a href=\"/oo/page18.html#foo\">projects list</a></p>"
+
 link_anchor_attribute:
   tem: "<%= zazen('see \"\":22#[title]') %>"
   res: "<p>see <a href=\"#status-title\">status title</a></p>"

data/test/integration/zafu_compiler_test.rb

@@ -5,6 +5,7 @@ class ZafuCompilerTest < Zena::Controller::TestCase
   OK = [
     'action',
     'asset',
+    'alias_site',
     'conditional',
     'calendar',
     'dates',
@@ -98,18 +99,19 @@ class ZafuCompilerTest < Zena::Controller::TestCase
     end
 
     context = yt_get('context', file, test)
-    site = Site.setup_master(sites(context.delete('site') || 'zena'))
-    $_test_site = site.name
+    site = Site.setup_master(Site.find_by_host(context.delete('host') || 'test.host'))
+    # This is used to find fixtures: returns master name (not alias)
+    $_test_site   = site.name
     @request.host = site.host
 
     # set context
     params = {}
     #params[:user_id] = users_id(context.delete('visitor').to_sym)
-    params['user'] = context.delete 'visitor'
+    params['user']    = context.delete 'visitor'
     params['node_id'] = nodes_id(context.delete('node').to_sym)
     params['prefix']  = context.delete('lang')
     params['date']    = context['ref_date'] ? context.delete('ref_date').to_s : nil
-    params['url'] = "#{file}/#{test.to_s.gsub('_', '/')}"
+    params['url']     = "#{file}/#{test.to_s.gsub('_', '/')}"
     params.merge!(context) # merge the rest of the context as query parameters
 
     compiled_files = {}
@@ -381,5 +383,46 @@ class ZafuCompilerTest < Zena::Controller::TestCase
     yt_do_test('display', 'with_a_custom_img_tag_field_with_JS')
   end
 
+  def test_alias_site_from_home
+    login(:lion)
+    node = secure(Page) { Page.create(:title => 'one', :parent_id => nodes_id(:wiki))}
+    sub  = secure(Page) { Page.create(:title => 'two', :parent_id => node.id)}
+    secure(Page) { Page.create(:title => 'three', :parent_id => sub.id)}
+    yt_do_test('alias_site', 'from_home')
+  end
+  
+  def test_alias_site_in_home
+    login(:lion)
+    node = secure(Page) { Page.create(:title => 'one', :parent_id => nodes_id(:wiki))}
+    sub  = secure(Page) { Page.create(:title => 'two', :parent_id => node.id)}
+    secure(Page) { Page.create(:title => 'three', :parent_id => sub.id)}
+    yt_do_test('alias_site', 'in_home')
+  end
+  
+  def test_alias_site_link_with_custom_base
+    login(:lion)
+    secure(Node) { nodes(:wiki) }.tap do |w|
+      w.update_attributes(:custom_base => true)
+      err w
+    end
+    node = secure(Page) { Page.create(:title => 'one', :parent_id => nodes_id(:wiki), :custom_base => true)}
+    sub  = secure(Page) { Page.create(:title => 'two', :parent_id => node.id)}
+    secure(Page) { Page.create(:title => 'three', :parent_id => sub.id)}
+    yt_do_test('alias_site', 'link_with_custom_base')
+  end
+  
+  def test_forms_auth_profile
+    login(:lion)
+    tiger = users(:tiger)
+    assert tiger.update_attributes(:profile => :ant)
+    yt_do_test('forms', 'auth_profile')
+  end
+  
+  def test_site_readonly
+    login(:lion)
+    current_site.update_attributes("site_readonly" => true)
+    yt_do_test('site', 'readonly')
+  end
+  
   yt_make
 end

data/test/selenium/Grid/grid1.rsel

@@ -1,11 +1,11 @@
 # Add first element
 open '/oo/testnode37.html?test=grid1'
-# THIS DOES NOT WORK. FIND ANOTHER WAY TO TEST THIS GRID.
-# verify_text 'css=.grid tr:nth-child(2) td:nth-child(1)', '[title]'
-# verify_text 'css=.grid tr:nth-child(3) td:nth-child(1)', 'value'
-# # Change title
-# click 'css=.grid td:nth-child(3)'
-# type 'css=.grid input', 'my title'
-# click 'css=#grid1 input[type="submit"]'
-# verify_text 'css=.grid tr:nth-child(2) td:nth-child(1)', 'my title'
+wait_for_text_present('grid setup done')
+verify_text "//table[@class='grid']/tbody/tr[2]/th", 'type to edit'
+# Change title
+click "//table[@class='grid']/tbody/tr[3]/td"
+type "//table[@class='grid']/tbody/tr[3]/td", 'some value'
+click 'css=#grid1 input[type="submit"]'
+# THIS DOES NOT WORK. CANNOT TYPE IN CONTENTEDITABLE.
+# verify_text "//table[@class='grid']/tbody/tr[3]/td", 'some value'
 

data/test/sites/complex/sites.yml

@@ -1,7 +1,7 @@
 complex:
   host:            complex.host
   root:            complex
-  anon:            anon
+  anon:            complex_anon
   public_group:    public
   site_group:      complex
   authentication:  yes
@@ -9,4 +9,4 @@ complex:
   redit_time:      7200
   languages:       fr
   default_lang:    fr
-  formats_updated_at: 2003-02-01
+  formats_updated_at: 2003-02-01

data/test/sites/complex/users.yml

@@ -5,6 +5,7 @@ DEFAULTS:
   lang:            fr
 
 complex_anon:
+  groups:          public
   status:          moderated
   node:            anonymous
 

data/test/sites/zena/columns.yml

@@ -27,6 +27,10 @@ Letter_search_mono:
 Contact_name:
   index:           string
 
+Contact_cart:
+  ptype:           hash
+  versioned:       0
+
 Post_date:
   index:           '.idx_datetime1'
   ptype:           datetime

data/test/sites/zena/sites.yml

@@ -22,6 +22,7 @@ alias:
   host:            alias.host
   root:            zena
   home:            wiki
+  skin:            wikiSkin
   anon:            anon
   public_group:    public
   site_group:      workers

data/test/sites/zena/users.yml

@@ -15,6 +15,7 @@ ant:
   groups:          public, workers
   status:          user
   lang:            fr
+  is_profile:      true
 
 tiger:
   login:           tiger

data/test/unit/node_test.rb

@@ -155,6 +155,25 @@ class NodeTest < Zena::Unit::TestCase
         end
       end
       
+      context 'destroying a node with failing before_destroy' do
+        ::Page.send(:before_destroy, :test_before_destroy)
+        class ::Page
+          attr_accessor :fail_on_destroy
+          def test_before_destroy
+            return false if @fail_on_destroy
+          end
+        end
+        
+        should 'not touch node versions' do
+          node = secure(Node) { nodes(:status) }
+          node.fail_on_destroy = true
+          assert_difference('Node.count', 0) do
+            assert_difference('Version.count', 0) do
+              node.destroy
+            end
+          end
+        end
+      end
     end # on a node with write access
   end # A logged in user
 
@@ -199,11 +218,12 @@ class NodeTest < Zena::Unit::TestCase
     assert node.save , "Save succeeds"
   end
 
-  def test_page_new_without_title
+  def test_node_new_without_title
     login(:tiger)
     node = secure!(Node) { Node.new(:parent_id => nodes_id(:cleanWater)) }
-    assert ! node.save, 'Save fails'
-    assert_equal 'can\'t be blank', node.errors[:title]
+    node.save
+    assert !node.new_record?, 'Not a new record'
+    assert_equal 'Node', node.title
   end
 
   def test_new_set_section_id
@@ -247,12 +267,25 @@ class NodeTest < Zena::Unit::TestCase
     assert node.save , "Save succeeds"
   end
 
+  def test_set_hash_attribute
+    login(:lion)
+    node = secure!(Node) { nodes(:lake) }
+    assert node.update_attributes(:'cart' => {'foo' => 'hello', 'bar' => 'bye'})
+    ant = secure!(Node) { nodes(:ant) }
+    ant.cart = node.cart
+    assert ant.save
+    # reload
+    ant = secure!(Node) { nodes(:ant) }
+    assert_equal 'hello', ant.cart['foo']
+    assert_equal 'bye', ant.cart['bar']
+  end
+  
   def test_page_update_without_title
     login(:tiger)
     node = secure!(Node) { nodes(:status)  }
     node.title = nil
-    assert !node.save
-    assert_equal 'can\'t be blank', node.errors[:title]
+    assert node.save
+    assert_equal 'Page', node.title
   end
 
   def test_update_set_section_id
@@ -1488,4 +1521,19 @@ done: \"I am done\""
     assert_equal nodes_zip(:status).to_s, node.safe_send("id")
     assert_equal nil, node.safe_send("object_id")
   end
+  
+  context 'a node with invalid properties' do
+    setup do
+      version = secure(Node) { nodes(:status) }.version
+      Zena::Db.set_attribute(version, 'properties', '{"foo":')
+    end
+    
+    subject do
+      secure(Node) { nodes(:status) }
+    end
+    
+    should 'return the failover property value' do
+      assert_equal 'INVALID PROPERTY', subject.title
+    end
+  end
 end

data/test/unit/note_test.rb

@@ -7,7 +7,7 @@ class NoteTest < Zena::Unit::TestCase
     test_page = secure!(Note) { Note.create(:title => "yoba", :parent_id => nodes_id(:cleanWater), :inherit=>1 ) }
     assert ! test_page.new_record? , "Not a new record"
     assert_equal nodes_id(:cleanWater), test_page.parent[:id]
-    assert_equal "18/21/#{test_page.zip}", test_page.fullpath
+    assert_equal "11/18/21/#{test_page.zip}", test_page.fullpath
     assert_equal '18/21', test_page.basepath
   end
 

data/test/unit/relation_proxy_test.rb

@@ -601,4 +601,24 @@ class RelationProxyTest < Zena::Unit::TestCase
       end
     end
   end # With many links
+  
+  context 'with a native writer' do
+    subject do
+      node = secure(Node) { nodes(:cleanWater)}
+      class << node
+        def reference_zips=(list)
+          @list=list
+        end
+      end
+      node
+    end
+    
+    should 'update with string list of ids' do
+      login(:lion)
+      assert_difference('Link.count', 0) do
+        subject.update_attributes_with_transformation('reference_ids' => [:art, :menu, :bird_jpg].map {|s| nodes_zip(s)}.join(', '))
+        assert_equal '30,33,35', subject.instance_variable_get(:@list).sort.join(',')
+      end
+    end
+  end
 end

data/test/unit/role_test.rb

@@ -432,6 +432,8 @@ class RoleTest < Zena::Unit::TestCase
         end
       end # with duplicate column names
     end # importing virtual classes
+    
+    
   end # An admin
 
   # Indexed columns in role tested in NodeTest

data/test/unit/site_test.rb

@@ -289,19 +289,19 @@ class SiteTest < Zena::Unit::TestCase
     opening = secure(Node) { nodes(:opening) }
     cleanWater = secure(Node) { nodes(:cleanWater) }
     art = secure(Node) { nodes(:art) }
-    assert_equal fullpath(:projects, :cleanWater, :status), status.fullpath
+    assert_equal fullpath(:zena, :projects, :cleanWater, :status), status.fullpath
     assert_equal fullpath(:projects, :cleanWater), status.basepath
     assert_equal false, status.custom_base
 
-    assert_equal fullpath(:projects, :cleanWater, :opening), opening.fullpath
+    assert_equal fullpath(:zena, :projects, :cleanWater, :opening), opening.fullpath
     assert_equal fullpath(:projects, :cleanWater), opening.basepath
     assert_equal false, opening.custom_base
 
-    assert_equal fullpath(:projects, :cleanWater), cleanWater.fullpath
+    assert_equal fullpath(:zena, :projects, :cleanWater), cleanWater.fullpath
     assert_equal fullpath(:projects, :cleanWater), cleanWater.basepath
     assert_equal true, cleanWater.custom_base
 
-    assert_equal fullpath(:collections, :art), art.fullpath
+    assert_equal fullpath(:zena, :collections, :art), art.fullpath
     assert_equal '', art.basepath
     assert_equal false, art.custom_base
   end
@@ -317,10 +317,10 @@ class SiteTest < Zena::Unit::TestCase
 
     should 'not alter fullpath' do
       node = secure!(Node) { nodes(:status) }
-      assert_equal fullpath(:projects, :cleanWater, :status), node.fullpath
+      assert_equal fullpath(:zena, :projects, :cleanWater, :status), node.fullpath
       subject.clear_cache
       node = secure!(Node) { nodes(:status) }
-      assert_equal fullpath(:projects, :cleanWater, :status), node.fullpath
+      assert_equal fullpath(:zena, :projects, :cleanWater, :status), node.fullpath
     end
   end
 
@@ -406,6 +406,10 @@ class SiteTest < Zena::Unit::TestCase
     should 'return alias home node' do
       assert_equal nodes_id(:wiki), subject.home_id
     end
+    
+    should 'return alias skin node' do
+      assert_equal nodes_id(:wikiSkin), subject.skin_id
+    end
   end
   
   context 'Creating a site alias' do
@@ -434,6 +438,24 @@ class SiteTest < Zena::Unit::TestCase
     end
   end
   
+  context 'Editing a site alias skin' do
+    subject do
+      secure(Site) { sites(:alias) }
+    end
+    
+    should 'allow setting skin' do
+      assert_equal nodes_id(:wikiSkin), subject.skin_id
+      assert subject.update_attributes(:skin_zip => nodes_zip(:default))
+      assert_equal nodes_id(:default), sites(:alias).skin.id
+    end
+    
+    should 'allow setting skin to nil' do
+      assert_equal nodes_id(:wikiSkin), subject.skin_id
+      assert subject.update_attributes(:skin_zip => '')
+      assert_nil sites(:alias).skin_id
+    end
+  end
+  
   private
     def fullpath(*args)
       args.map {|sym| nodes_zip(sym).to_s}.join('/')

data/test/unit/user_test.rb

@@ -296,7 +296,7 @@ class UserTest < Zena::Unit::TestCase
     login(:lion)
     user = secure!(User) { users(:lion) }
     assert !user.update_attributes(:status => User::Status[:user])
-    assert_equal 'You do not have the rights to do this.', user.errors[:status]
+    assert_equal 'You cannot remove your own access rights.', user.errors[:status]
     user = secure!(User) { users(:lion) }
     assert user.update_attributes('status' => User::Status[:admin].to_s, 'time_zone' => 'Europe/Berlin')
   end
@@ -468,4 +468,335 @@ class UserTest < Zena::Unit::TestCase
       assert subject.api_authorized?
     end
   end # A user in the api_group
+  
+  context 'Setting user profile' do
+    setup do
+      login(:lion)
+      secure(User) { users(:ant) }.update_attributes(:group_ids => [groups_id(:admin)])
+    end
+    
+    subject do
+      secure(User) { User.create(:login => 'foobar', :password => 'foobar', :status => User::Status[:deleted]) }
+    end
+    
+    should 'copy groups' do
+      assert_equal %w{public workers}, subject.groups.map(&:name).sort
+      assert subject.update_attributes(:profile => 'ant')
+      assert_equal %w{admin public workers}, subject.groups.map(&:name).sort
+    end
+    
+    context 'changing profile' do
+      setup do
+        subject.update_attributes(:profile => 'ant')
+      end
+      
+      should 'sync groups in dependant users' do
+        assert_equal %w{admin public workers}, subject.groups.map(&:name).sort
+
+        assert secure(User) { users(:ant) }.update_attributes(:group_ids => [])
+        # reload
+        user = User.find(subject.id)
+        assert_equal %w{public workers}, user.groups.map(&:name).sort
+      end
+
+      should 'sync status in dependant users' do
+        assert_equal %w{admin public workers}, subject.groups.map(&:name).sort
+
+        assert secure(User) { users(:ant) }.update_attributes(:status => User::Status[:deleted])
+        # reload
+        user = User.find(subject.id)
+        assert_equal User::Status[:deleted], user.status
+      end
+      
+      context 'through group edit' do
+        should 'sync groups in dependant users' do
+          assert_equal %w{admin public workers}, subject.groups.map(&:name).sort
+          grp = secure(Group) { groups(:admin) }
+          assert grp.update_attributes(:user_ids => [])
+          # Remove user
+          # reload
+          user = User.find(subject.id)
+          assert_equal %w{public workers}, user.groups.map(&:name).sort
+          
+          assert grp.update_attributes(:user_ids => [users_id(:ant)])
+          # Add user
+          # reload
+          user = User.find(subject.id)
+          assert_equal %w{admin public workers}, user.groups.map(&:name).sort
+        end
+      end
+      
+      context 'removing is_profile' do
+        context 'with dependant users' do
+          should 'error on is_profile' do
+            subject
+            ant = secure(User) { users(:ant) }
+            assert !ant.update_attributes(:is_profile => false)
+            assert_equal 'Cannot be removed (profile used).', ant.errors.on(:is_profile)
+          end
+        end
+      end
+    end
+  end # Setting user profile
+  
+  context 'reading through contact node' do
+    setup do
+      login(:lion)
+    end
+    
+    subject do
+      secure(Node) { nodes(:ant) }
+    end
+    
+    should 'read user settings' do
+      assert_equal 'ant', subject.auth_user.login
+    end
+  end
+  
+  context 'updating through contact node' do
+    setup do
+      login(:lion)
+    end
+    
+    subject do
+      secure(Node) { nodes(:ant) }
+    end
+    
+    should 'update auth settings' do
+      assert subject.update_attributes('auth' => {'login' => 'antidote'})
+      assert_equal 'antidote', users(:ant).login
+    end
+    
+    should 'update password' do
+      assert subject.update_attributes('auth' => {'password' => 'hello world'})
+      assert_equal Zena::CryptoProvider::Initial.encrypt('hello world'), users(:ant).crypted_password
+    end
+    
+    should 'not update password if blank' do
+      assert subject.update_attributes('auth' => {'password' => ''})
+      assert_equal Zena::CryptoProvider::Initial.encrypt('ant'), users(:ant).crypted_password
+    end
+    
+    should 'update profile' do
+      secure(User) { users(:tiger) }.update_attributes(:is_profile => true)
+      assert subject.update_attributes('auth' => {'profile' => 'tiger', 'is_profile' => false})
+      assert_equal users_id(:tiger), users(:ant).profile_id
+    end
+    
+    should 'not update inaccessible fields' do
+      assert subject.update_attributes('auth' => {'site_id' => 5})
+      assert_equal sites_id(:zena), subject.reload.site_id
+    end
+  end
+  
+  context 'creating through contact node' do
+    setup do
+      login(:lion)
+    end
+    
+    subject do
+      secure(Node) { nodes(:people).new_child({
+        :first_name => 'My',
+        :name       => 'Giraffe',
+        :klass      => 'Contact',
+        :auth    => {:password => 'long big neck', :profile => 'ant' }
+      })}.tap do |obj|
+        assert obj.save
+      end
+    end
+    
+    should 'create user' do
+      err subject
+      assert !subject.new_record?
+      # Reload all
+      user = secure(User) { User.find_by_login('My Giraffe') }
+      node = user.node
+      assert_equal 'My Giraffe', node.title
+      assert_equal 'My Giraffe', user.login
+      assert_equal node.id, user.node_id
+    end
+    
+    context 'with defined login' do
+      setup do
+        secure(Node) { nodes(:people).new_child({
+          :first_name => 'My',
+          :name       => 'Giraffe',
+          :klass      => 'Contact',
+          :auth    => {:password => 'long big neck', :profile => 'ant', :login => 'giraffe' }
+        })}.tap do |obj|
+          assert obj.save
+        end
+      end
+    
+      should 'use defined login' do
+        user = secure(User) { User.find_by_login('giraffe') }
+        assert_equal 'My Giraffe', user.node.title
+      end
+    end
+  end
+  
+  context 'Destroying node' do
+    subject do
+      secure(Node) { nodes(:tiger) }
+    end
+    
+    context 'as an admin' do
+      setup do
+        login(:lion)
+      end
+      
+      should 'mark user as deleted' do
+        assert_difference('User.count', 0) do
+          assert_difference('Node.count', -1) do
+            subject.destroy
+          end
+        end
+        user = users(:tiger)
+        assert_nil user.node_id
+        assert_equal User::Status[:deleted], user.status
+      end
+      
+      context 'from a user with profile' do
+        subject do
+          tiger = secure(Node) { nodes(:tiger) }
+          assert tiger.update_attributes('auth' => {'profile' => 'ant'})
+          secure(Node) { nodes(:tiger) }
+        end
+        
+        should 'remove profile' do
+          assert_equal 'ant', subject.auth['profile']
+          assert_difference('User.count', 0) do
+            assert_difference('Node.count', -1) do
+              subject.destroy
+            end
+          end
+          user = users(:tiger)
+          assert_nil user.node_id
+          assert_nil user.profile_id
+          assert_equal User::Status[:deleted], user.status
+        end
+      end
+    end
+    
+    context 'not as an admin' do
+      setup do
+        login(:tiger)
+      end
+      
+      should 'refuse to delete contact node' do
+        assert_difference('User.count', 0) do
+          assert_difference('Node.count', 0) do
+            assert !subject.destroy
+          end
+        end
+        assert_equal 'Cannot destroy: node is a user', subject.errors[:base]
+      end
+    end
+  end
+  
+  context 'not an admin' do
+    
+    context 'updating through contact node' do
+      setup do
+        login(:tiger)
+      end
+
+      subject do
+        secure(Node) { nodes(:ant) }
+      end
+
+      should 'ignore user settings' do
+        assert subject.update_attributes('auth' => {'login' => 'antidote', 'password' => 'a fool is a fool'})
+        ant = users(:ant)
+        assert_equal 'ant', ant.login
+        assert_equal Zena::CryptoProvider::Initial.encrypt('ant'), ant.crypted_password
+      end
+    end
+  end
+  
+  context 'a manager' do
+    setup do
+      login(:lion)
+      manager = secure(User) { User.create({
+        'lang'       => 'fr',
+        'time_zone'  => 'Europe/Zurich',
+        'status'     => '55',
+        'password'   => 'secret',
+        'login'      => 'bolomey',
+        'group_ids'  => [groups_id(:public), ''],
+        'node_attributes' => {
+          'name'       => 'Dupont',
+          'first_name' => 'Paul',
+          'email'      => 'paul.bolomey@brainfuck.com'
+        }
+        })
+      }
+      err manager
+      assert !manager.new_record?
+      login(manager.id)
+    end
+    
+    context 'editing a user' do
+      subject do
+        users(:tiger)
+      end
+      
+      should 'not be allowed to change groups' do
+        assert_equal %w{managers public workers}, subject.groups.map{|g| g.name}.sort
+        assert !subject.update_attributes(:group_ids => [])
+        assert_equal 'Only admin can change groups.', subject.errors[:group_ids]
+        assert_equal %w{managers public workers}, subject.reload.groups.map{|g| g.name}.sort
+      end
+      
+      should 'be allowed to change profile' do
+        assert_equal %w{managers public workers}, subject.groups.map{|g| g.name}.sort
+        assert subject.update_attributes(:profile => 'ant')
+        assert_equal %w{public workers}, subject.reload.groups.map{|g| g.name}.sort
+      end
+      
+      should 'be allowed to change status' do
+        assert subject.update_attributes(:status => User::Status[:reader])
+        assert_equal User::Status[:reader], subject.reload.status
+      end
+      
+      should 'not be allowed to set admin status' do
+        assert subject.update_attributes(:profile => 'ant')
+        assert_equal %w{public workers}, subject.reload.groups.map{|g| g.name}.sort
+      end
+      
+      context 'through node' do
+        subject do
+          secure(Node) { nodes(:tiger) }
+        end
+      
+        should 'update auth settings' do
+          assert subject.update_attributes('auth' => {'login' => 'antidote'})
+          assert_equal 'antidote', users(:tiger).login
+        end
+      end
+      
+      context 'on an admin' do
+        subject do
+          users(:lion)
+        end
+        
+        should 'not be allowed to edit' do
+          assert !subject.update_attributes(:login => 'lionixbar')
+          assert_equal 'You cannot edit this user (high status).', subject.errors[:base]
+        end
+      end
+      
+      context 'on self' do
+        subject do
+          visitor.reload
+        end
+        
+        should 'be allowed to edit' do
+          assert subject.update_attributes(:login => 'lionixbar')
+          assert_equal 'lionixbar', subject.reload.login
+        end
+      end
+    end
+  end
+      
 end