More Access-Control Testing

Administrator and public access

The advantage of splitting responsibility and testing into separate controller and model concerns becomes even more clear when we add another requirement. Let’s allow for the possibility of administrative users who can see any project, as well as public projects that can be seen by any user.

Design work

We’ll want to represent these properties in the database. In this case, we’re doing the design work based on planning our test. We’ll generate a migration using the command bundle exec rake generate migration add_public_fields, which gives a skeleton file. We’ll add the following and run bundle exec rake db:migrate: