posts_controller_spec.rb

describe PostsController do
  let(:post) { Factory(:post) }

  describe "PUT #update" do
    it "allows an author to edit a post" do
      sign_in post.author
      put :update, :id => post.id
      response.should be_successful
    end

    it "does not allow a non-author to edit a post" do
      sign_in Factory(:user, :email => "[email protected]")
      put :update, :id => post.id
      response.should be_forbidden
    end
  end
end