test/application/Rakefile test/application/app/controllers/application.rb test/application/app/controllers/thingy_controller.rb test/application/app/controllers/widgets_controller.rb test/application/app/models/user.rb test/application/app/models/widget.rb test/application/config/boot.rb test/application/config/database.yml test/application/config/environment.rb test/application/config/environments/test.rb test/application/config/routes.rb test/application/db/.gitignore test/application/lib/plugin_under_test_locator.rb test/application/log/.gitignore test/application/public/javascripts/application.js test/application/public/javascripts/controls.js test/application/public/javascripts/dragdrop.js test/application/public/javascripts/effects.js test/application/public/javascripts/prototype.js test/application/script/about test/application/script/console test/application/script/dbconsole test/application/script/destroy test/application/script/generate test/application/script/performance/benchmarker test/application/script/performance/profiler test/application/script/performance/request test/application/script/plugin test/application/script/process/inspector test/application/script/process/reaper test/application/script/process/spawner test/application/script/runner test/application/script/server test/application/tmp/.gitignore @@ -1,5 +1,20 @@ Authorize ========= +authorize is a Ruby on Rails plugin providing a sophisticated Role-Based Access Control (RBAC) system. It started as a spinoff of Bill Katz's Authorization plugin, but has been substantially tested, debugged and enhanced since then. Current functionality highlights include: + + * Polymorphic association of ActiveRecord subject models. + * Polymorphic association of ActiveRecord trustee models. + * Flexible identity mappings to support Group-based roles. + * Syntax to support a single ActiveRecord model being both a subject and a trustee. + * Dynamic methods on subjects and trustees support domain-specific syntax: user.is_owner_of(widget)? and widget.is_owned_by?(user) + * Class-level role support (user.is_moderator_of?(Post) + * Generic/global-level role support (user.is_administrator?) + * Performance-optimized Domain-Specific Language (DSL) for more sophisticated predicates (available in ActionController at controller and action level). + +For more information on the theory of RBAC, see http://en.wikipedia.org/wiki/Role-based_access_control, but note that the term "subject" is used where this plugin uses the term "trustee". + +---------------- + The authorize plugin extends ActionController with the ability to check permissions and react accordingly. There are two approaches: a simple boolean check (permit?) and a more sophisticated predicated block (permit) with exception handling. In both cases, the method accepts a permissions description string expressed in a domain-specific language. The simplest version of this language is just the name of the required README @@ -1,5 +1,4 @@ require File.dirname(__FILE__) + '/test_helper.rb' -require File.dirname(__FILE__) + '/lib/thingy_controller.rb' class ControllerClassTest < ActionController::TestCase fixtures :users, :widgets, :authorizations test/controller_class_test.rb @@ -1,5 +1,4 @@ require File.dirname(__FILE__) + '/test_helper.rb' -require File.dirname(__FILE__) + '/lib/widgets_controller.rb' class ControllerTest < ActionController::TestCase fixtures :users, :widgets, :authorizations @@ -55,9 +54,7 @@ class ControllerTest < ActionController::TestCase end test 'should find authorizations without identities method' do - class DegenerateUser < ActiveRecord::Base - acts_as_trustee - end + class ::DegenerateUser < ActiveRecord::Base; acts_as_trustee; end du = DegenerateUser.create du.authorize('steward', widgets(:foo)) assert_nothing_raised do test/controller_test.rb @@ -1,52 +1,37 @@ -require 'test/unit' - -# Boot Rails manually, instead of via the environment.rb file. This help limit the impact of the host application. -# Plugins are booted as a consequence of booting Rails. -ENV['RAILS_ENV'] = 'test' -RAILS_GEM_VERSION = '2.1.0' unless defined? RAILS_GEM_VERSION -require File.expand_path(File.join(File.dirname(__FILE__) + '/../../../../config/boot.rb')) -Rails::Initializer.run - -# Remove the host application (../app/...) from the dependency and load paths. -ActiveSupport::Dependencies.load_paths.delete_if {|path| /app\//.match(path) } -ActiveSupport::Dependencies.load_once_paths.delete_if {|path| /app\//.match(path) } -$LOAD_PATH.delete_if {|path| /app\//.match(path) } - -# Add our testing library directory to the load path. -$LOAD_PATH.unshift(File.dirname(__FILE__) + '/lib') - -ActiveRecord::Base.logger = Logger.new(File.dirname(__FILE__) + "/debug.log") - -db_adapter = ENV['DB'] -# no db passed, try one of these fine config-free DBs before bombing. -db_adapter ||= - begin - require 'rubygems' - require 'sqlite' - 'sqlite' - rescue MissingSourceFile - begin - require 'sqlite3' - 'sqlite3' - rescue MissingSourceFile - end - end - -if db_adapter.nil? - raise "No DB Adapter selected. Pass the DB= option to pick one, or install Sqlite or Sqlite3." -end - -db_config = YAML::load(IO.read(File.dirname(__FILE__) + '/database.yml')) -ActiveRecord::Base.establish_connection(db_config[db_adapter]) +ENV['RAILS_ENV'] ||= 'test' +require File.expand_path(File.dirname(__FILE__) + "/application/config/environment") +require 'test_help' +# From this point forward, we can assume that we have booted a generic Rails environment plus +# our (booted) plugin. load(File.dirname(__FILE__) + "/schema.rb") -require 'action_controller/test_process' - -require 'active_record/fixtures' -Test::Unit::TestCase.fixture_path = File.dirname(__FILE__) + "/fixtures" +# Run the migrations (optional) +# ActiveRecord::Migrator.migrate("#{Rails.root}/db/migrate") +# Set Test::Unit options for optimal performance/fidelity. class Test::Unit::TestCase self.use_transactional_fixtures = true self.use_instantiated_fixtures = false + self.fixture_path = "#{RAILS_ROOT}/../fixtures" + + def self.uses_mocha(description) + require 'mocha' + yield + rescue LoadError + $stderr.puts "Skipping #{description} tests. `gem install mocha` and try again." + end + + def self.test(name, &block) # Shamelessly lifted from ActiveSupport + test_name = "test_#{name.gsub(/\s+/,'_')}".to_sym + defined = instance_method(test_name) rescue false + raise "#{test_name} is already defined in #{self}" if defined + if block_given? + define_method(test_name, &block) + else + define_method(test_name) do + flunk "No implementation provided for #{name}" + end + end + end end \ No newline at end of file test/test_helper.rb test/database.yml test/lib/thingy_controller.rb test/lib/user.rb test/lib/widget.rb test/lib/widgets_controller.rb dea91dbc438f52d7507f521b292a6df0d9318202 Chris Hapgood cch1@hapgoods.com http://github.com/cch1/authorize/commit/88870f1bfe4561f81110155a74001f78ff569293 88870f1bfe4561f81110155a74001f78ff569293 2008-10-10T12:21:27-07:00 2008-10-10T12:21:27-07:00 Switched to dedicated embedded test application * Fixed minor namespacing warning in test. * Updated README. 0769c37f2c1616529e591d72264fb7a5d6592ec4 Chris Hapgood cch1@hapgoods.com