Module: Authorize::TestHelper

Defined in:
lib/authorize/test_helper.rb

Instance Method Summary collapse

Instance Method Details

#assert_authorized(*args) ⇒ Object

Assert that a given role explicitly has a given permission mode for a given resource Example: assert_authorized(current_user, :read, :list, widget) If a trustee is provided instead of a role, then the primary role of the trustee is used.



9
10
11
12
13
 
# File 'lib/authorize/test_helper.rb', line 9

def assert_authorized(*args)
  tor = args.shift
  role = tor.is_a?(Authorize::Role) ? tor : tor.role
  assert_block("Role #{role} is not authorized") {role.may?(*args)}
end

#assert_does_not_have_role(tor, subrole) ⇒ Object 



26
27
28
29
 
# File 'lib/authorize/test_helper.rb', line 26

def assert_does_not_have_role(tor, subrole)
  role = tor.is_a?(Authorize::Role) ? tor : tor.role
  assert_block("Role #{role} includes #{subrole}") {!role.roles.include?(subrole)}
end

#assert_has_role(tor, subrole) ⇒ Object 



21
22
23
24
 
# File 'lib/authorize/test_helper.rb', line 21

def assert_has_role(tor, subrole)
  role = tor.is_a?(Authorize::Role) ? tor : tor.role
  assert_block("Role #{role} does not include #{subrole}") {role.roles.include?(subrole)}
end

#assert_permitted(tor, *args) ⇒ Object

A weak assertion of access The assertion includes subordinate roles’ permissions and considers global/class permissions



33
34
35
36
37
38
39
40
 
# File 'lib/authorize/test_helper.rb', line 33

def assert_permitted(tor, *args)
  role = tor.is_a?(Authorize::Role) ? tor : tor.role
  resource = args.pop
  request_mask = Authorize::Permission::Mask[*args]
  assert_block("Role #{role} is not permitted (#{request_mask})") do
    Authorize::Permission.over(resource).as(role.roles).permit?(request_mask)
  end
end

#assert_unauthorized(*args) ⇒ Object 



15
16
17
18
19
 
# File 'lib/authorize/test_helper.rb', line 15

def assert_unauthorized(*args)
  tor = args.shift
  role = tor.is_a?(Authorize::Role) ? tor : tor.role
  assert_block("Role #{role} is authorized") {role.may_not?(*args)}
end