add a suite of tests for Pundit

Author: DanielKehoe

CHANGELOG.textile

@@ -1,5 +1,9 @@
 h1. CHANGELOG
 
+h3. 0.3.4 June 14, 2014
+
+* add a suite of tests for Pundit
+
 h3. 0.3.3 June 7, 2014
 
 * eliminate deprecated 'should' syntax for OmniAuth tests

lib/generators/testing/configure/configure_generator.rb

@@ -45,6 +45,11 @@ def configure_framework
             copy_file 'spec/omniauth/controllers/sessions_controller_spec.rb', 'spec/controllers/sessions_controller_spec.rb'
             copy_file 'spec/omniauth/factories/users.rb', 'spec/factories/users.rb'
             copy_file 'spec/omniauth/models/user_spec.rb', 'spec/models/user_spec.rb'
+          when 'pundit'
+            copy_file 'spec/pundit/factories/users.rb', 'spec/factories/users.rb'
+            copy_file 'spec/pundit/features/users/user_index_spec.rb', 'spec/features/users/user_index_spec.rb'
+            copy_file 'spec/pundit/policies/user_policy_spec.rb', 'spec/policies/user_policy_spec.rb'
+            copy_file 'spec/pundit/support/pundit.rb', 'spec/support/pundit.rb'
         end
       end
 

lib/generators/testing/configure/templates/spec/pundit/factories/users.rb

@@ -0,0 +1,12 @@
+FactoryGirl.define do
+  factory :user do
+    name "Test User"
+    email "[email protected]"
+    password "please123"
+
+    trait :admin do
+      role 'admin'
+    end
+
+  end
+end

lib/generators/testing/configure/templates/spec/pundit/features/users/user_index_spec.rb

@@ -0,0 +1,25 @@
+include Warden::Test::Helpers
+Warden.test_mode!
+
+# Feature: User index page
+#   As a user
+#   I want to see a list of users
+#   So I can see who has registered
+feature 'User index page', :devise do
+
+  after(:each) do
+    Warden.test_reset!
+  end
+
+  # Scenario: User listed on index page
+  #   Given I am signed in
+  #   When I visit the user index page
+  #   Then I see my own email address
+  scenario 'user sees own email address' do
+    user = FactoryGirl.create(:user, :admin)
+    login_as(user, scope: :user)
+    visit users_path
+    expect(page).to have_content user.email
+  end
+
+end

lib/generators/testing/configure/templates/spec/pundit/policies/user_policy_spec.rb

@@ -0,0 +1,47 @@
+describe UserPolicy do
+  subject { UserPolicy }
+
+  let (:current_user) { FactoryGirl.build_stubbed :user }
+  let (:other_user) { FactoryGirl.build_stubbed :user }
+  let (:admin) { FactoryGirl.build_stubbed :user, :admin }
+
+  permissions :index? do
+    it "denies access if not an admin" do
+      expect(UserPolicy).not_to permit(current_user)
+    end
+    it "allows access for an admin" do
+      expect(UserPolicy).to permit(admin)
+    end
+  end
+
+  permissions :show? do
+    it "prevents other users from seeing your profile" do
+      expect(subject).not_to permit(current_user, other_user)
+    end
+    it "allows you to see your own profile" do
+      expect(subject).to permit(current_user, current_user)
+    end
+    it "allows an admin to see any profile" do
+      expect(subject).to permit(admin)
+    end
+  end
+
+  permissions :update? do
+    it "prevents updates if not an admin" do
+      expect(subject).not_to permit(current_user)
+    end
+    it "allows an admin to make updates" do
+      expect(subject).to permit(admin)
+    end
+  end
+
+  permissions :destroy? do
+    it "prevents deleting yourself" do
+      expect(subject).not_to permit(current_user, current_user)
+    end
+    it "allows an admin to delete any user" do
+      expect(subject).to permit(admin, other_user)
+    end
+  end
+
+end

lib/generators/testing/configure/templates/spec/pundit/support/pundit.rb

@@ -0,0 +1 @@
+require 'pundit/rspec'

lib/rails_apps_testing/version.rb

@@ -1,3 +1,3 @@
 module RailsAppsTesting
-  VERSION = "0.3.3"
+  VERSION = "0.3.4"
 end