logged_in_controller_extension.rb

require 'cgi'
module LoggedInControllerExtension
  
  def self.included(base)
    base.extend Setup
    base.setup_logged_in
  end
  
  module Setup
    def setup_logged_in
      include InstanceMethods
      before_filter :validate_ace_user
      helper_method :current_user, :display_forecast_link?, :display_admin_home_link?
      self.allow_forgery_protection = false
    end    
  end
  
  module InstanceMethods
    
    protected
    def current_user
      @current_user
    end
    
    def validate_ace_user
      username = session[ApplicationController::SESSION_KEY__USERNAME]
      if username.nil?
        if request.request_uri.length > 1
          referrer = "#{request.protocol}#{request.host_with_port}#{request.request_uri}"
          session[ApplicationController::SESSION_KEY__REFERRER] = CGI::escape(referrer)
        end
        redirect_to :controller => "/login", :action => "index"
        return false
      end
      @current_user = Member.find_by_username(username)
      if (@current_user.inactive?)
        flash[:error] = "Your account has been deactivated. For more information please contact support@#{AceConfig['email_domain']}"
        clear_session
        redirect_to :controller => '/login', :action => :index
      end
      true
    end
    
    def display_forecast_link?
      @current_user.has_site_role?(:project_billing_admin)
    end
    
    def display_admin_home_link?
      @current_user and @current_user.has_any_of_these_site_roles?(
                                                                   :project_billing_admin,
                                                                   :can_view_reports,
                                                                   :hour_report_admin,
                                                                   :news_admin,
                                                                   :text_admin,
                                                                   :template_task_admin,
                                                                   :links_admin,
                                                                   :work_order_admin
      )
    end
  end
  
end

logged_in_controller_extension_test.rb

class LoggedInControllerExtensionTest < ActiveSupport::TestCase
  class ControllerStub
  end

  class << ControllerStub
    attr_accessor :before_filter_args
    def before_filter *args; self.before_filter_args = args end
  end

  def setup
    @controller = ControllerStub.new
  end

  def test_before_filter_declaration
    class << @controller
      include LoggedInControllerExtension
    end
    assert_equal :validatE_ace_user, @controller.class.before_filter_args, "Should include validate_ace_user filter"
  end
end