Enforce registration config in the controller. Close #91.

app/controllers/concerto_devise/registrations_controller.rb

@@ -1,5 +1,10 @@
 #Overriding the Devise Registrations controller for fun and profit
 class ConcertoDevise::RegistrationsController < Devise::RegistrationsController
+  before_filter :check_permissions, :only=>[:new, :create]
+
+  def check_permissions
+    authorize! :create, User
+  end
 
   def create
     build_resource
@@ -33,4 +38,4 @@ def create
     end
   end
 
-end 
+end 

test/functional/registration_controller_test.rb

@@ -1,8 +1,8 @@
 require 'test_helper'
 
-class DeviseRegistrationsControllerTest < ActionController::TestCase
+class ConcertoDeviseRegistrationsControllerTest < ActionController::TestCase
   include Devise::TestHelpers
-  tests Devise::RegistrationsController
+  tests ConcertoDevise::RegistrationsController
 
   def setup
     request.env["devise.mapping"] = Devise.mappings[:user]
@@ -13,4 +13,15 @@ def setup
     assert_response :success
   end
 
+  test "registration form diabled" do
+    ConcertoConfig.set("allow_registration", "false")
+    get :new
+    assert_response :redirect
+  end
+
+  test "registration processing disabled" do
+    ConcertoConfig.set("allow_registration", "false")
+    post :create, {:user => {:first_name => "Name", :last_name => "Last", :email => "a@a.com"}}
+    assert_response :redirect
+  end
 end

test/unit/abilities/user/user_test.rb

@@ -50,4 +50,10 @@ def setup
     assert ability.cannot?(:update, @katie)
     assert ability.cannot?(:destroy, @katie)
   end
+
+  test "new users cannot sign up with disabled" do
+    ConcertoConfig.set(:allow_registration, "false")
+    ability = Ability.new(User.new)
+    assert ability.cannot?(:create, User)
+  end
 end