Rails 3 in Action RYAN BIGG YEHUDA KATZ MANNING. Shelter Island

Size: px

Start display at page:

Download "Rails 3 in Action RYAN BIGG YEHUDA KATZ MANNING. Shelter Island"

Dina Griffith
3 years ago
Views:

What can only be done by admins 137?
What does the CRU stand for?
What type of development is it called?

1 Rails 3 in Action RYAN BIGG YEHUDA KATZ 11 MANNING Shelter Island

2 contents xv preface acknowledgments xvii about this book xx about the authors xxiii about the cover illustration xxiv Ruby on Rails, theframework What is Ruby on Rails? 2 Benefits 2 Common terms 3 Rails in the wild Developing your first application 5 Installing Rails 5 Generating an application 6 Starting the application 6 Scaffolding 7 Migrations 8 * Viewing and creating purchases 9 Validations 13 * Showing off 14 Routing 15 ' Updating 16 * Deleting Summary Test-and behavior-driven development Test-driven development 24 Why test? 25 Writing yourfirst test 25 Saving bacon Behavior-driven development 28 RSpec 29 «Cucumber Summary vii

2 Developing your first application 5 Installing Rails 5 Generating an application 6 Starting the application 6 Scaffolding 7 Migrations 8 * Viewing and creating purchases 9

3 Developing a real Rails application Application setup 45 The application, story 45 Version control 47* The Gemfile and generators 50» Database configuration 53 * Applying a stylesheet First steps 55 Creating projects 55' RESTful routing 60" Committing changes 72 Setting a page title 72 Validations Summary 81 OhCRUD! Viewing projects 83 Writing a feature 84 The Factory Girl 85 Adding a link to a project Editing projects 88 The edit action 88 The update action Deleting projects 91 Writing a feature 92» Adding a destroy action 92 * Looking for what isn't there Summary 97?. Nested resources Creating tickets 99 Nested routing helpers 100 a Creating tickets controller 101 Defining a hasjmany association 103» Creating tickets within a project 104 Finding tickets scoped by project 105 * Ticket validations Viewing tickets Editing 5.4 Deleting Listing tickets 110 Cidling tickets 111 tickets 112 Adding the edit action 113 Adding the update action Summary 116 tickets 115 T Authentication and basic authorization 117 s 6.1 What Devise does 118 Installing Devise 118

1 Viewing projects 83 Writing a feature 84 The Factory Girl 85 Adding a link to a project 86 4.2 Editing projects 88 The edit action 88 The update action 90 4.

4 6.2 User signup Confirmation link sign-in 122 Testing 122* Confirming confirmation Form sign-in Linking tickets to users 128 Attributing tickets to users 129 * We broke something! 131 Fixing the Viexving Tickets feature 132* Fixing the Editing Ticketsfeature 133» Fixing the Deleting Tickets feature Summary Basic access control Projects can be created only by admins Adding the admin field to the users table Restricting actions to admins only 138 Fixing three more broke-it scenarios 143 * Hiding the New Project link 144 Hiding the edit and delete links 146 7A Namespace routing Namespace-based 7.6 Creating 7.7 Editing CRUD 151 Adding a namespace root 151 * The index action 152 The new action 153 The create action 154 admin users 155 users 157 The show action 158 The edit and update actions Deleting users 161 Ensuring you can't delete yourself Summary 163 ) More authorization Restricting read access Restricting by scope Fixing what you broke Blocking Fixing Editing Projects 173 * Fixing the four failing features 173 One * more thing 176 Fixing Signing Up 178 * access to tickets 183 Locking out the bad guys 183

131 Fixing the Viexving Tickets feature 132* Fixing the Editing Ticketsfeature 133» Fixing the Deleting Tickets feature 134 6.6 Summary 135 7 Basic access control 136 7.

5 8.5 Restricting write access 185 Rewriting a feature 185 Blocking creation 187» Wlialis CanCan? 188 Adding abilities Restricting update access 190 No updatingfar you! 191 Authorizing editing Restricting delete access 193 Enforcing destroy protection 193 * Hiding 194 permission 8.8 Assigning permissions 198 Viewing projects 198* And the rest 206 links based on 8.9 Seed data Summary 212 File uploading Attaching a file 214 A featurefeaturing files 214* Enter stage right, Paperclip 216 Using Paperclip Attaching many fdes 220 Two more files 221 * Using nested attributes Serving files through a controller 226 Protecting piles 227 Showing assets your 228 * Public assets 230 * Privatizing assets UsingJavaScript 231 JavaScript testing 232 * IntroducingjQuery 233 * Adding more files with JavaScript 234 * Responding to an asynchronous request 235 * Sending parameters for an asynchronous request Summary 241 Tracking state Leaving a comment Changing Where's the ticket? 245 * The commentform 247 The comment model 247 The comments controller 249 a ticket's state 252 Creating the State model 253 * Selecting states 255 Callbacks 257 * Seeding states 259 Fixing creating comments 261

8 Assigning permissions 198 Viewing projects 198* And the rest 206 links based on 8.9 Seed data 209 8.10 Summary 212 File uploading 213 9.

6 10.3 Tracking changes Managing Ch-ch-changes 263 Another c-c-callback 264 Displaying changes 265» Show me the page 266 Automatic escaping saves your bacon 267 Styling states 268 states 269 Adding additional states 270 Defining a default 10.5 Locking clown states 278 state 273 Hiding a select box 278 ' Bestowing changing slate permissions 280 Hacking a form 282 * Ignoring a parameter Summary 285 Tagging Creating tags 287 Creating lags feature 287 * Using text_field_tag 288 Showing tags 288 Defining the tags association 289 The Tag model 289 Displaying a ticket's tags Adding more tags 292 Adding tags through a comment 292» Fixing the CommenlsController spec Tag restriction 295 Testing tag restriction 295 Tags are allowed, for some Deleting a tag 297 Testing tag deletion 298 * Adding a link to delete the tag 299 Actually removing a tag Finding tags 303 Testing search 303 Searching by state with Searcher 305 Searching by state 307 * Search, but without the search Summary 310 Sending Sending ticket notifications 313 Automatically watching a ticket 314* Using observers 315 Defining the watchers association 316 «Introducing Action Mailer 318 An Action Mailer template 320 Delivering HTML s 322

Defining a default 10.5 Locking clown states 278 state 273 Hiding a select box 278 ' Bestowing changing slate permissions 280 Hacking a form 282 * Ignoring a parameter 283 10.

7 12.2 Subscribing to updates 325 Testing comment subscription 325 Automatically adding a user to a watchlisl 327 * Unsubscribingfrom ticket notifications Real-world Receiving 'Festing real-world 334 ' Configuring Action Mailer 336 Connecting to Grnail 337 s 340 Setting a reply-to address 340 * Receiving a reply Summary 345 Designing an API The projects 13.2 Beginning API 349 Your first API 351 Sewing an API 354 * API authentication 355» Error reporting 356 * Serving XML 358 * Creating projects 360 * Restricting access to only admins 362 A single project 365 No projectfor you! 368 Updating a project 370 * Exterminate! Rate limiting 377 the tickets API Versioning One request, two request, three request, pour 377 * No more, thanks! 379 Bach to zero 380 Creating 13.5 Summary 384 an API 381 a new version 381 Deployment Server setup 386 Setting up a server using VirtualBox 386 Installing the base RVM and Ruby 389 Installing RVM Installing Ruby Creating a user for the app 391 Key-based authentication 391 * Disabling password authentication The database server 394 Creating a database and user 394 * Ident authentication 395

5 Summary 345 Designing an API 34 7 13.1 The projects 13.

8 xiii 14.5 Deploy away! 395 Deploy keys 396 «Configuring Capistrano 397 Setting up * the deploy environment 400 Deploying the application 401 * Bundling gems 403 Choosing a database Serving requests 407 Installing Passenger 408 An init script Summary 410 Alternative authentication How OAuth works Twitter authentication 415 Setting up OmniAuth 415 Registering an application with Twitter 416 Setting up an OmniAuth testing environment 417' Testing Twitter signan GitHub authentication 425 Registering and testing GitHub auth Summary 433 Basic performance enhancements Pagination 435 IntroducingKaminari 436 * Paginating an interface 437 Paginating an API Database query enhancements 444 Eager loading 445 Database indexes Page and action caching 448 Caching a page 448 Caching an action 451 Cache sweepers 454 Client-side caching 457 Cachingpage fragments Background workers Summary 466 Engines A brief history of engines Why engines are useful Brand-new engine 471 Creating an engine 471 * The layout ofan engine 472 Engine, routing 4 76

2 Twitter authentication 415 Setting up OmniAuth 415 Registering an application with Twitter 416 Setting up an OmniAuth testing environment 417' Testing Twitter signan 419 15.

9 17.4 Setting up a testing environment 478 Removing Test::Unit 479 InstallingRSpec and Capybara Writing* your first engine feature 482 Your first Capybara test 483 Setting * up routes 484 The topics controller 485 * The index action 485 * The new action 488 * The create action 489 * The show action 490 Showing an association count Adding more posts to topics Classes outside your control 497 Engine configuration 497 * A fake User model 500 Authenticating topics 501 * Adding authorship to topics 505 Post authentication 506 * Showing the last post Releasing as a gem Integrating with an application Summary 514 Rack-based applications 516 I Building Rack applications 517 A basic Rack application Building bigger Rack applications 522 You 're breaking up 522 * Running a combined Rack application Mounting a Rack application with Rails 525 Mounting Heartbeat 526 * Introducing The API, by Sinatra 528 * Basic error checking Middleware 533 Sinatra 527 Middleware in Rails 534 Investigating ActionDispatchr.Slatic 536 Crafting middleware Summary 540 appendix A Why Rails? 541 appendix B Tidbits 546 index 551

action 490 Showing an association count 492 17.6 Adding more posts to topics 493 17.

Rails Cookbook. Rob Orsini. O'REILLY 8 Beijing Cambridge Farnham Koln Paris Sebastopol Taipei Tokyo

Rails Cookbook. Rob Orsini. O'REILLY 8 Beijing Cambridge Farnham Koln Paris Sebastopol Taipei Tokyo Rails Cookbook Rob Orsini O'REILLY 8 Beijing Cambridge Farnham Koln Paris Sebastopol Taipei Tokyo Table of Contents Foreword : ; xi Preface ; ;... xiii 1. Getting Started 1 1.1 Joining the Rails Community

Rails 3 in Action RYAN BIGG YEHUDA KATZ MANNING. Shelter Island

What can only be done by admins 137?

What does the CRU stand for?

What type of development is it called?