public
Description: Generic roles for you and your objects
Homepage: http://github.com/nakajima/roleful/tree/master/spec/roleful_spec.rb
Clone URL: git://github.com/nakajima/roleful.git
roleful / spec / roleful_spec.rb
100644 325 lines (264 sloc) 8.39 kb
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
require File.dirname(__FILE__) + '/spec_helper'
 
describe Roleful do
  attr_reader :klass, :object
  
  before(:each) do
    @klass = Class.new do
      attr_reader :role
      
      def initialize(*role)
        @role = role.empty? ? :null : role
      end
      
      include Roleful
    end
  end
  
  it "adds ROLES to class" do
    proc {
      klass::ROLES
    }.should_not raise_error
  end
  
  it "adds PERMISSIONS to class" do
    proc {
      klass::PERMISSIONS
    }.should_not raise_error
  end
  
  it "has :null role by default" do
    klass::ROLES[:null].should_not be_nil
  end
  
  it "allows roles to be added" do
    klass.role :admin
    klass::ROLES[:admin].should_not be_nil
  end
  
  describe "role name predicate helpers" do
    before(:each) do
      klass.role :admin
    end
    
    it "return true if proper role" do
      klass.new(:admin).should be_admin
    end
    
    it "returns if not proper role" do
      klass.new.should_not be_admin
    end
  end
  
  describe "declaring role permissions" do
    before(:each) do
      klass.role(:admin) { can :view_foos }
    end
    
    it "adds to PERMISSIONS" do
      proc {
        klass.role(:admin) { can :view_bars }
      }.should change(klass::PERMISSIONS, :length)
    end
    
    it "works for declared roles" do
      object = klass.new(:admin)
      object.can_view_foos?.should be_true
    end
    
    it "works with built-in null object" do
      object = klass.new
      object.can_view_foos?.should be_false
    end
    
    it "does not add the same role more than once" do
      proc {
        klass.role(:admin) { can :view_bars }
      }.should_not change(klass::ROLES, :length)
    end
    
    it "does not add the same permission more than once to the same role" do
      proc {
        klass.role(:admin) { can :view_foos }
      }.should_not change(klass::ROLES[:admin].permissions, :length)
    end
    
    describe "#can?" do
      context "as object with role" do
        it "returns true or false depending on the permission" do
          object = klass.new(:admin)
          object.can?(:view_foos).should be_true
        end
      end
      
      context "for superuser role" do
        before(:each) do
          klass.role(:super_admin, :superuser => true)
        end
        
        it "returns true for existing permission" do
          klass.new(:super_admin).can?(:view_foos).should be_true
        end
        
        it "returns false when permission doesn't exist" do
          klass.new(:super_admin).can?(:eat_cheese).should be_false
        end
      end
      
      context "as object without role" do
        it "returns true or false depending on the permission" do
          object = klass.new
          object.can?(:view_foos).should be_false
        end
      end
    end
    
    context "for :null role" do
      it "returns false when permission exists elsewhere" do
        klass.new.can_view_foos?.should_not be
      end
 
      it "blows up when permission hasn't been declared" do
        proc {
          klass.new.can_eat_cheese?
        }.should raise_error(NoMethodError)
      end
      
      it "allows permissions to be declared" do
        klass.role(:null) { can :be_null }
        klass.new.can_be_null?.should be_true
      end
    end
    
    context "for :superuser role" do
      it "has all permissions" do
        klass.role(:super_admin, :superuser => true)
        object = klass.new(:super_admin)
        object.can_view_foos?.should be_true
      end
    end
  end
  
  describe "permission methods" do
    before(:each) do
      klass.role(:paid)
      klass.role(:admin) { can :view_foos }
    end
    
    context "for roles that have permission" do
      before(:each) do
        @object = klass.new(:admin)
      end
      
      it "returns true" do
        object.can_view_foos?.should be_true
      end
      
      it "are known to be responded to" do
        object.respond_to?(:can_view_foos?).should be_true
      end
    end
    
    context "for roles that don't have permission" do
      before(:each) do
        @object = klass.new(:paid)
      end
      
      it "returns false" do
        object.can_view_foos?.should be_false
      end
      
      it "is known to be responded to" do
        object.respond_to?(:can_view_foos?).should be_true
      end
    end
  end
  
  describe "with instance-specific permissions" do
    before(:each) do
      klass.role :admin do
        can(:be_self) { |that| self == that }
        can(:be_two) { |that| :two == that }
      end
    end
    
    it "takes a block" do
      object = klass.new(:admin)
      object.can_be_two?(:one).should be_false
      object.can_be_two?(:two).should be_true
    end
    
    context "as object with role" do
      it "binds self to instance" do
        object = klass.new(:admin)
        object.can_be_self?(object).should be_true
      end
      
      it "work with #can? calls" do
        object = klass.new(:admin)
        object.can?(:be_self, object).should be_true
        object.can?(:be_self, :other).should be_false
      end
    end
    
    context "as object without role" do
      it "binding self to instance" do
        object = klass.new
        object.can_be_self?(object).should be_false
      end
      
      it "work with #can? calls" do
        object = klass.new
        object.can?(:be_self, object).should be_false
        object.can?(:be_self, :other).should be_false
      end
    end
  end
  
  describe "declaring multiple roles at once" do
    before(:each) do
      klass.role :admin, :paid do
        can :have_access
      end
    end
    
    describe "passing multiple role names" do
      it "adds permissions to each role" do
        klass.new(:admin).can_have_access?.should be_true
        klass.new(:paid).can_have_access?.should be_true
      end
      
      it "doesn't give permissions to null user" do
        klass.new.can_have_access?.should be_false
      end
    end
    
    describe "with :all option" do
      before(:each) do
        klass.role(:all) { can :do_anything }
      end
      
      it "adds permissions to all non-null roles" do
        klass.new(:admin).can_do_anything?.should be_true
        klass.new(:paid).can_do_anything?.should be_true
      end
      
      it "doesn't add permissions to null role" do
        klass.new.can_do_anything?.should be_false
      end
    end
  end
  
  describe "having multiple roles" do
    before(:each) do
      klass.role(:foo) { can :be_foo }
      klass.role(:bar) { can :be_bar }
    end
    
    it "returns true for all role predicate helpers" do
      klass.new(:foo, :bar).should be_foo
      klass.new(:foo, :bar).should be_bar
    end
    
    it "grants permissions of all roles" do
      klass.new(:foo, :bar).can_be_foo?.should be_true
      klass.new(:foo, :bar).can_be_bar?.should be_true
    end
    
    it "handles invalid roles in collection" do
      klass.new(:fizz, :foo, :bar).can_be_foo?.should be_true
    end
  end
  
  describe "temporary role contexts" do
    before(:each) do
      klass.role(:awesome) { can :be_awesome }
      klass.role(:bad_ass) { can :be_bad_ass }
    end
    
    it "allows an object to have a role within a block" do
      object = klass.new
      object.can?(:be_awesome).should be_false
      
      object.with_role(:awesome) do
        object.can?(:be_awesome).should be_true
      end
 
      object.can?(:be_awesome).should be_false
    end
    
    it "works with multiple role contexts" do
      object = klass.new
      
      object.can?(:be_awesome).should be_false
      object.can?(:be_bad_ass).should be_false
      
      object.with_roles(:awesome, :bad_ass) do
        object.can?(:be_awesome).should be_true
        object.can?(:be_bad_ass).should be_true
      end
      
      object.can?(:be_awesome).should be_false
      object.can?(:be_bad_ass).should be_false
    end
    
    it "restores old singleton methods" do
      object = klass.new
      class << object
        def role
          :awesome
        end
      end
      
      object.should be_awesome
      object.can?(:be_awesome).should be_true
      
      object.with_role(:bad_ass) do
        object.should be_bad_ass
        object.can?(:be_bad_ass).should be_true
      end
      
      object.should be_awesome
      object.can?(:be_awesome)
    end
  end
end