rspec의 "CanCan::AccessDenied"오류

묘사

let(:product) { Factory(:daily_deal) }

context "for a logged-in User" do
  context "that is the creator of the product being edited" do
    before(:each) do
      sign_in product.creator
      get :edit, :id => product.id.to_s
    end

    it { should respond_with(:ok) }
    it { should render_template(:edit) }
  end

  context "that is not the creator of the product being edited" do
    before(:each) do
      sign_in Factory(:user)
    end

    it "raises an authorization error" do
      expect { get :edit, :id => product.id.to_s }.to raise_error(CanCan::AccessDenied)
    end
  end

end

context "for a non-logged-in User" do
  it "raises an authorization error" do
    expect { get :edit, :id => product.id.to_s }.to raise_error(CanCan::AccessDenied)
  end
end

토론 #1

토론 #2

def initialize(user)
  can(:create, Product) if user.can_sell?

  can :update, Product do |product|
    user == product.creator
  end

  can :destroy, Product do |product|
    user == product.creator
  end
end

토론 #4

토론 #5

토론 #6

  before(:each) do
    sign_in user_who_can_sell
    get :new
  end

  it { should respond_with(:ok) }
  it { should render_template(:new) }

  it "builds a daily deal into @daily_deal" do
    assigns(:daily_deal).daily_deal?.should be_true
  end

  it "builds an address for the daily deal" do
    assigns(:daily_deal).address.should_not be_nil
  end

  it "builds a gift card into @gift_card" do
    assigns(:gift_card).gift_card?.should be_true
  end
end

context "for a non-logged-in User" do
  it "raises an authorization error" do
    expect { get :new }.to raise_error(CanCan::AccessDenied)
  end
end

let(:product) { Factory(:daily_deal) }

context "for a logged-in User" do
  context "that is the creator of the product being destroyed" do
    before(:each) do
      sign_in product.creator
      delete :destroy, :id => product.id.to_s
    end

    it "makes the specified Product deleted" do
      product.reload.deleted?.should be_true
    end

    it { should redirect_to(my_listings_path) }
  end

  context "that is not the creator of the product being destroyed" do
    before(:each) do
      sign_in User.create!(Factory.attributes_for(:user))
    end

    it "raises an authorization error" do
      expect { delete :destroy, :id => product.id.to_s }.to raise_error(CanCan::AccessDenied)
    end
  end

end

context "for a non-logged-in User" do
  it "raises an authorization error" do
    expect { delete :destroy, :id => product.id.to_s }.to raise_error(CanCan::AccessDenied)
  end
end

let(:product) { Factory(:daily_deal) }

context "for a logged-in User" do
  context "that is the creator of the product being edited" do
    before(:each) do
      sign_in product.creator
      get :edit, :id => product.id.to_s
    end

    it { should respond_with(:ok) }
    it { should render_template(:edit) }
  end

  context "that is not the creator of the product being edited" do
    before(:each) do
      sign_in Factory(:user)
    end

    it "raises an authorization error" do
      expect { get :edit, :id => product.id.to_s }.to raise_error(CanCan::AccessDenied)
    end
  end

end

context "for a non-logged-in User" do
  it "raises an authorization error" do
    expect { get :edit, :id => product.id.to_s }.to raise_error(CanCan::AccessDenied)
  end
end

  controller.params[:location].should == controller.send(:current_lat_and_lon)
end

can [:edit, :update, :destroy], Product do |product|
  user == product.creator
end