Andreas/tracks
1
0
Fork 0
mirror of https://github.com/TracksApp/tracks.git synced 2026-01-08 18:28:50 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

update routing and test for authorized access to all tracks pages

Browse source
This commit is contained in:
Reinier Balt 2010-07-30 21:06:12 +02:00
parent 65ecb7b019
commit 29e007f9c6
7 changed files with 102 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

2
features/contexts_manage.feature
View file

@ -21,7 +21,7 @@ Feature: Manage contexts
And he should see that a context named "OutAndAbout" is present
@selenium
Scenario: Delete context from context page
Scenario: Delete context from context page should update badge
Given I have a context called "@computer"
When I go to the contexts page
Then the badge should show 1

38
features/logging_in.feature
View file

@ -6,9 +6,9 @@ Feature: Existing user logging in
Background:
Given the following user records
| login | password | is_admin |
| testuser | secret | false |
| admin | secret | true |
| login | password | is_admin | first_name | last_name |
| testuser | secret | false | Test | User |
| admin | secret | true | Admin | User |
Scenario Outline: Succesfull and unsuccesfull login
When I go to the login page
@ -21,6 +21,32 @@ Feature: Existing user logging in
| admin | secret | redirected to the home page | Login successful |
| admin | wrong | on the login page | Login unsuccessful |
Scenario: Accessing a secured page when not logged in
When I go to the home page
Then I should be redirected to the login page
Scenario Outline: Unauthorized users cannot access Tracks and need to log in first
Given there exists a project called "top secret" for user "testuser"
And there exists a context called "@secret location" for user "testuser"
When I go to the <page>
Then I should be redirected to the login page
When I submit the login form as user "testuser" with password "secret"
Then I should be redirected to the <next page>
And I should see "<logout>"
Examples:
| page | next page | logout |
| home page | home page | Logout (Test User) |
| contexts page | contexts page | Logout (Test User) |
| projects page | projects page | Logout (Test User) |
| notes page | notes page | Logout (Test User) |
| repeating todos page | repeating todos page | Logout (Test User) |
| statistics page | statistics page | Logout (Test User) |
| manage users page | manage users page | 401 Unauthorized |
| integrations page | integrations page | Logout (Test User) |
| starred page | starred page | Logout (Test User) |
| tickler page | tickler page | Logout (Test User) |
| calendar page | calendar page | Logout (Test User) |
| feeds page | feeds page | Logout (Test User) |
| preference page | preference page | Logout (Test User) |
| export page | export page | Logout (Test User) |
| rest api docs page | rest api docs page | Logout (Test User) |
| search page | search page | Logout (Test User) |
| "top secret" project for user "testuser" | "top secret" project for user "testuser" | Logout (Test User) |
| context page for "@secret location" for user "testuser" | context page for "@secret location" for user "testuser" | Logout (Test User) |

8
features/step_definitions/context_steps.rb
View file

@ -3,8 +3,14 @@ Given /^I have no contexts$/ do
Context.delete_all
end
Given /^there exists a context called "([^"]*)" for user "([^"]*)"$/ do |context_name, login|
user = User.find_by_login(login)
user.should_not be_nil
@context = user.contexts.create!(:name => context_name)
end
Given /^I have a context called "([^\"]*)"$/ do |context_name|
@context = @current_user.contexts.create!(:name => context_name)
Given "there exists a context called \"#{context_name}\" for user \"#{@current_user.login}\""
end
Given /^I have the following contexts:$/ do |table|

10
features/step_definitions/project_steps.rb
View file

@ -15,6 +15,15 @@ Given /^there exists a project "([^\"]*)" for user "([^\"]*)"$/ do |project_name
user.projects.create!(:name => project_name)
end
Given /^there exists a project called "([^"]*)" for user "([^"]*)"$/ do |project_name, login|
# TODO: regexp change to integrate this with the previous since only 'called' is different
Given "there exists a project \"#{project_name}\" for user \"#{login}\""
end
Given /^I have a project called "([^"]*)"$/ do |project_name|
Given "there exists a project \"#{project_name}\" for user \"#{@current_user.login}\""
end
When /^I visit the "([^\"]*)" project$/ do |project_name|
@project = Project.find_by_name(project_name)
@project.should_not be_nil
@ -25,7 +34,6 @@ When /^I visit the project page for "([^"]*)"$/ do |project_name|
When "I visit the \"#{project_name}\" project"
end
When /^I edit the project description to "([^\"]*)"$/ do |new_description|
click_link "link_edit_project_#{@project.id}"
fill_in "project[description]", :with => new_description

16
features/support/paths.rb
View file

@ -28,6 +28,22 @@ module NavigationHelpers
integrations_path
when /the tickler page/
tickler_path
when /the export page/
data_path
when /the preference page/
preferences_path
when /the rest api docs page/
rest_api_docs_path
when /the search page/
search_path
when /the starred page/
tag_path("starred")
when /the feeds page/
feeds_path
when /the context page for "([^\"]*)" for user "([^\"]*)"/i
context_path(User.find_by_login($2).contexts.find_by_name($1))
when /the "([^\"]*)" project for user "([^\"]*)"/i
project_path(User.find_by_login($2).projects.find_by_name($1))
# Add more mappings here.
# Here is an example that pulls values out of the Regexp: