From 37463028e8612f7f4a350c58e6230366c45638a5 Mon Sep 17 00:00:00 2001
From: Adam Wiggins <adam@heroku.com>
Date: Sun, 23 Mar 2008 14:40:38 -0700
Subject: [PATCH] Access class to manage ownership and permissions

---
 lib/rush.rb         |  1 +
 lib/rush/access.rb  | 53 +++++++++++++++++++++++++++++++++
 spec/access_spec.rb | 72 +++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 126 insertions(+)
 create mode 100644 lib/rush/access.rb
 create mode 100644 spec/access_spec.rb

diff --git a/lib/rush.rb b/lib/rush.rb
index 8db2e88..c062a9e 100644
--- a/lib/rush.rb
+++ b/lib/rush.rb
@@ -8,6 +8,7 @@ module Rush::Connection; end
 require 'exceptions'
 require 'config'
 require 'commands'
+require 'access'
 require 'entry'
 require 'file'
 require 'dir'
diff --git a/lib/rush/access.rb b/lib/rush/access.rb
new file mode 100644
index 0000000..d56ab48
--- /dev/null
+++ b/lib/rush/access.rb
@@ -0,0 +1,53 @@
+class Rush::Access
+	attr_accessor :user
+	attr_accessor :group
+	attr_accessor :user_read, :user_write, :user_execute
+	attr_accessor :group_read, :group_write, :group_execute
+	attr_accessor :other_read, :other_write, :other_execute
+
+	def initialize(options={})
+		parse(options)
+	end
+
+	def self.roles
+		%w(user group other)
+	end
+
+	def self.permissions
+		%w(read write execute)
+	end
+
+	def parse(options)
+		options.each do |key, value|
+			if key == :user
+				self.user = value
+			elsif key == :group
+				self.group = value
+			else
+				perms = extract_list('permission', key, self.class.permissions)
+				roles = extract_list('role', value, self.class.roles)
+				set_matrix(perms, roles)
+			end
+		end
+	end
+
+	def set_matrix(perms, roles)
+		perms.each do |perm|
+			roles.each do |role|
+				meth = "#{role}_#{perm}=".to_sym
+				send(meth, true)
+			end
+		end
+	end
+
+	def extract_list(type, value, choices)
+		list = parts_from(value)
+		list.each do |value|
+			raise(Rush::BadAccessSpecifier, "Unrecognized #{type}: #{value}") unless choices.include? value
+		end
+	end
+
+	def parts_from(value)
+		value.to_s.split('_').reject { |r| r == 'and' }
+	end
+end
diff --git a/spec/access_spec.rb b/spec/access_spec.rb
new file mode 100644
index 0000000..223efd6
--- /dev/null
+++ b/spec/access_spec.rb
@@ -0,0 +1,72 @@
+require File.dirname(__FILE__) + '/base'
+
+describe Rush::Access do
+	before do
+		@access = Rush::Access.new
+	end
+
+	it "has roles: user, group, other" do
+		@access.class.roles == %w(user group other)
+	end
+
+	it "has permissions: read, write, execute" do
+		@access.class.permissions == %w(read write execute)
+	end
+
+	it "gets parts from a one-part symbol like :user" do
+		@access.parts_from(:user).should == %w(user)
+	end
+
+	it "gets parts from a two-part symbol like :read_write" do
+		@access.parts_from(:read_write).should == %w(read write)
+	end
+
+	it "allows use of 'and' in multipart symbols, like :user_and_group" do
+		@access.parts_from(:user_and_group).should == %w(user group)
+	end
+
+	it "extract_list verifies that all the parts among the valid choices" do
+		@access.should_receive(:parts_from).with(:red_green).and_return(%w(red green))
+		@access.extract_list('type', :red_green, %w(red blue green)).should == %w(red green)
+	end
+
+	it "extract_list raises a BadAccessSpecifier when there is part not in the list of choices" do
+		lambda do
+			@access.extract_list('role', :user_bork, %w(user group))
+		end.should raise_error(Rush::BadAccessSpecifier, "Unrecognized role: bork")
+	end
+
+	it "sets one value in the matrix of permissions and roles" do
+		@access.set_matrix(%w(read), %w(user))
+		@access.user_read.should == true
+	end
+
+	it "sets two values in the matrix of permissions and roles" do
+		@access.set_matrix(%w(read), %w(user group))
+		@access.user_read.should == true
+		@access.group_read.should == true
+	end
+
+	it "sets four values in the matrix of permissions and roles" do
+		@access.set_matrix(%w(read write), %w(user group))
+		@access.user_read.should == true
+		@access.group_read.should == true
+		@access.user_write.should == true
+		@access.group_write.should == true
+	end
+
+	it "parse options hash: user" do
+		@access.parse(:user => 'joe')
+		@access.user.should == 'joe'
+	end
+
+	it "parse options hash: group" do
+		@access.parse(:group => 'users')
+		@access.group.should == 'users'
+	end
+
+	it "parse options hash: permissions" do
+		@access.parse(:read => :user)
+		@access.user_read.should == true
+	end
+end