Rails%203%20In%20Action

140 CHAPTER 7 Basic access control
Dir[Rails.root + "factories/*.rb"].each do |file|
require file
end
When the value of the email method is inside a block, it’s evaluated every time this
factory is called and generates a new (hopefully random) email address.
The next bit of code to write is in your spec and is the first example to ensure that
users who are not admins (such as the user object) cannot access the new action. The
code in the following listing should replace the placeholder "cannot access the new
action" example you’ve already got.
Listing 7.4 spec/controllers/projects_controller_spec.rb
context "standard users" do
it "cannot access the new action" do
sign_in(:user, user)
get :new
response.should redirect_to(root_path)
flash[:alert].should eql("You must be an admin to do that.")
end
end
This spec is placed inside a context block because you’ll have specs for standard users
later. context blocks function similarly to describe blocks; they’re mainly used to
specify the context of an example rather than to describe what it does.
On the first line of the example, you use the sign_in method, which is available in
Devise, but the appropriate part isn’t yet included. This method takes two arguments:
the scope and the resource. Because you have only one scope for Devise, you don’t
have to worry about what this means right now. What you do care about is that this
method will sign in a user.
To add this method, you must include a module in your RSpec configuration: the
Devise::TestHelpers module. Open spec/spec_helper.rb, and you’ll see the
RSpec.configure block (comments stripped) shown in the following listing.
Listing 7.5 spec/spec_helper.rb
RSpec.configure do |config|
config.mock_with :rspec
end
This configure method is responsible for setting up RSpec. To include the
Devise::TestHelpers method, you could use it like this:
RSpec.configure do |config|
config.mock_with :rspec
config.include Devise::TestHelpers
end
But you may want to rerun the RSpec generator to update your spec/spec_helper.rb
file and its associates when you update RSpec. If this file is updated, you’ll lose your