Rails%203%20In%20Action

228 CHAPTER 9 File uploading
sign_in(:user, good_user)
end
it "can access assets in a project" do
get 'show', :id => asset.id
response.body.should eql(File.read(path))
end
end
If you’re using Windows you may have to do this on the response.body line instead,
because the line breaks on Windows are slightly different:
response.body.gsub!(/\r\n?/, "\n").should eql(File.read(path))
In this example, you sign in as the good_user by using another before block. Then
you assert that when this user attempts to get this asset through the show action, the
user should receive it as a response. Write another context and spec for the bad_user
too, as shown in the following listing.
Listing 9.10 spec/controllers/assets_controller_spec.rb
context "users without access" do
before do
sign_in(:user, bad_user)
end
it "cannot access assets in this project" do
get 'show', :id => asset.id
response.should redirect_to(root_path)
flash[:alert].should eql("The asset you were looking for
➥could not be found.")
end
end
Here you sign in as the bad_user and then deny all knowledge of the asset’s existence
by redirecting to root and displaying an alert flash message. Let’s run these specs now
with bin/rspec spec/controllers/assets_controller_spec.rb. Both examples
complain:
The action 'show' could not be found for FilesController
Well, that’s no good. Now you need to define this show action.
9.3.2 Showing your assets
Open your FilesController file and define the show action, along with a
before_filter to set the current_user variable, which you’ll need for permission
checking. This code is shown in the following listing.
Listing 9.11 app/controllers/files_controller.rb
class FilesController < ApplicationController
before_filter :authenticate_user!
def show