Non-admins cannot create new posts.

LindseyB · LindseyB · commit ded3b3794a4e · 2010-07-10T22:07:20.000-04:00
diff --git a/features/blog.feature b/features/blog.feature
@@ -3,7 +3,7 @@ Feature: The Hackety Blog
 		Given there is a blog post with the title "First Post"
 		When I go to the blog page
 		Then I should see "First Post"
-	Scenario: I can create a post
+	Scenario: Admins may create a post
 		Given I'm logged in as admin
 		And I go to the new post page
 		When I fill in "Title" with "new title"
@@ -18,3 +18,11 @@ Feature: The Hackety Blog
 		When I go to the posts page
 		Then I should see "First Post"
 		And I should see "Second Post"
+	Scenario: Not logged in users cannot create a post
+		Given I'm not logged in
+		And I go to the new post page
+		Then I should see "Sorry, buddy"
+	Scenario: Non-admin users cannot create a post
+		Given I'm logged in
+		And I go to the new post page
+		Then I should see "Sorry, buddy"
diff --git a/features/step_definitions/common_steps.rb b/features/step_definitions/common_steps.rb
@@ -1,9 +1,23 @@
-Given /^I'm logged in as admin$/ do
-	password = "foobar"
-	@user = Factory(:admin,:password => password, :password_confirmation => password)
+def login user
 	visit "/login"
-	fill_in "email", :with => @user.email
-	fill_in "password", :with => password
+	fill_in "email", :with => user.email
+	fill_in "password", :with => user.password
 	click_button "login"
 end
 
+Given /^I'm logged in as admin$/ do
+	password = "foobar"
+	user = Factory(:admin,:password => password, :password_confirmation => password)
+	login user
+end
+
+Given /^I'm not logged in$/ do
+	visit "/logout"
+end
+
+Given /^I'm logged in$/ do
+	password = "foobar"
+	user = Factory(:user,:password => password, :password_confirmation => password)
+	login user
+end
+
diff --git a/hackety.rb b/hackety.rb
@@ -28,10 +28,20 @@
 end
 
 get "/posts/new" do
+	unless current_user.admin?
+		flash[:notice] = "Sorry, buddy"
+		redirect "/posts"
+	end
+
 	haml :posts_new
 end
 
 post "/posts" do
+	unless current_user.admin?
+		flash[:notice] = "Sorry, buddy"
+		redirect "/posts"
+	end
+
 	@post = Post.create(params)
 	flash[:notice] = "Post Created"
 	redirect "/posts/#{@post.id}" 
