cancan and authentication check

matches_controller_spec.rb

describe MatchesController do
  let(:group) {FactoryGirl.create(:group)}

  context "requires login and checks authorization" do
    it "for GET 'new'" do
      controller.should_receive(:authenticate_user!).and_return(false)
      expect{get :new, group_id: group.id}.to raise_error(CanCan::AccessDenied)
    end

    it "for POST 'create'" do
      controller.should_receive(:authenticate_user!).and_return(false)
      expect{post :create, group_id: group.id}.to raise_error(CanCan::AccessDenied)
    end
  end
end