wellington1993 / avaliacao_desenvolvedor

Teste para avaliação de desenvolvedor

README

• TODO: Aplicacao bonita
• TODO: Testes
• Favor Checar a Issue #1 (#1)
• Rodando com docker ou com ambiente instalado (se necessário, rodar bin/run.sh)
  • Dicas no documentation/para instalações binarias
• upload de arquivo
• Banco de dados modelado

This README would normally document whatever steps are necessary to get the application up and running.

Things you may want to cover:

• Ruby version

Ruby 3.0.0

• System dependencies

Na pasta documentation há dicas de dependencias binárias para Ubuntu

• Configuration

Nada em especial

• Database creation

Banco em arquivo ja criado

• Database initialization

Banco em arquivo ja inicializado

• How to run the test suite

• Testes

• Services (job queues, cache servers, search engines, etc.)

Nenhum ainda

• Deployment instructions

Rodar bin/run.sh

avaliacao_desenvolvedor's Issues

Criar teste para importação de arquivo nulo

Criar teste para importação de arquivo nulo

[DepShield] (CVSS 5.3) Vulnerability due to usage of kind-of:3.2.2

Vulnerabilities

DepShield reports that this application's usage of kind-of:3.2.2 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:3.2.2 is a transitive dependency introduced by the following direct dependency(s):

• webpack:4.46.0
        └─ micromatch:3.1.10
              └─ braces:2.3.2
                    └─ fill-range:4.0.0
                          └─ is-number:3.0.0
                                └─ kind-of:3.2.2
                    └─ snapdragon-node:2.1.1
                          └─ snapdragon-util:3.0.1
                                └─ kind-of:3.2.2
              └─ snapdragon:0.8.2
                    └─ base:0.11.2
                          └─ cache-base:1.0.1
                                └─ has-value:1.0.0
                                      └─ has-values:1.0.0
                                            └─ is-number:3.0.0
                                                  └─ kind-of:3.2.2
                                └─ to-object-path:0.3.0
                                      └─ kind-of:3.2.2
                          └─ class-utils:0.3.6
                                └─ static-extend:0.1.2
                                      └─ object-copy:0.1.0
                                            └─ kind-of:3.2.2
                    └─ define-property:0.2.5
                          └─ is-descriptor:0.1.6
                                └─ is-accessor-descriptor:0.1.6
                                      └─ kind-of:3.2.2
                                └─ is-data-descriptor:0.1.4
                                      └─ kind-of:3.2.2
        └─ watchpack:1.7.5
              └─ watchpack-chokidar2:2.0.1
                    └─ chokidar:2.1.8
                          └─ braces:2.3.2
                                └─ fill-range:4.0.0
                                      └─ is-number:3.0.0
                                            └─ kind-of:3.2.2

• webpack-dev-server:3.11.2
        └─ chokidar:2.1.8
              └─ braces:2.3.2
                    └─ fill-range:4.0.0
                          └─ is-number:3.0.0
                                └─ kind-of:3.2.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.uniq:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.uniq:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.uniq:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• @rails/webpacker:5.3.0
        └─ optimize-css-assets-webpack-plugin:5.0.4
              └─ cssnano:4.1.11
                    └─ cssnano-preset-default:4.0.8
                          └─ postcss-merge-rules:4.0.3
                                └─ caniuse-api:3.0.0
                                      └─ lodash.uniq:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Criar teste para retorno de dados via API JSON

Criar teste para retorno de dados via API JSON

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.get:4.4.2

Vulnerabilities

DepShield reports that this application's usage of lodash.get:4.4.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.get:4.4.2 is a transitive dependency introduced by the following direct dependency(s):

• @rails/webpacker:5.3.0
        └─ webpack-assets-manifest:3.1.1
              └─ lodash.get:4.4.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of express:4.17.1

Vulnerabilities

DepShield reports that this application's usage of express:4.17.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

---

Occurrences

express:4.17.1 is a transitive dependency introduced by the following direct dependency(s):

• webpack-dev-server:3.11.2
        └─ express:4.17.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Importar "e armazene-os no banco de dados"

• e armazene-os no banco de dados

Aplicacao bonita

avaliacao_desenvolvedor/README.md

Lines 3 to 8 in 50b43ab

	- [ ] TODO: Aplicacao bonita
	- [ ] TODO: Testes
	- [x] Favor Checar a Issue #1 (https://github.com/wellington1993/avaliacao_desenvolvedor/issues/1)
	- [x] Rodando com docker ou com ambiente instalado (se necessário, rodar `bin/run.sh`)
	- Dicas no `documentation/`para instalações binarias
	- [x] upload de arquivo

---

This issue was generated by todo based on a TODO comment in 50b43ab. It's been assigned to @wellington1993 because they committed the code.

Criar teste para importação de arquivo incompleto

Criar teste para importação de arquivo incompleto

Testes

avaliacao_desenvolvedor/README.md

Lines 4 to 9 in 50b43ab

	- [ ] TODO: Testes
	- [x] Favor Checar a Issue #1 (https://github.com/wellington1993/avaliacao_desenvolvedor/issues/1)
	- [x] Rodando com docker ou com ambiente instalado (se necessário, rodar `bin/run.sh`)
	- Dicas no `documentation/`para instalações binarias
	- [x] upload de arquivo
	- [x] Banco de dados modelado

---

This issue was generated by todo based on a TODO comment in 50b43ab. It's been assigned to @wellington1993 because they committed the code.

"rodar a partir das instruções fornecidas"

• rodar a partir das instruções fornecidas

Revisar models adicionando validações de presença e comprimento de string

Revisar models adicionando validações de presença e comprimento de string.

Ajudara nos testes.

"A aplicação deve ser escrita obrigatoriamente em: Ruby 2.2+ Rails 5 e SQLite"

• Ruby 2.2+
• Rails 5
• SQLite

"Exibir todos os registros importados"

• Exibir todos os registros importados
• Menu
• Menu Bootstrap
• Listagem levando aos filhos

[DepShield] (CVSS 7.5) Vulnerability due to usage of http-proxy:1.18.1

Vulnerabilities

DepShield reports that this application's usage of http-proxy:1.18.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

http-proxy:1.18.1 is a transitive dependency introduced by the following direct dependency(s):

• webpack-dev-server:3.11.2
        └─ http-proxy-middleware:0.19.1
              └─ http-proxy:1.18.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

DepShield Deprecation Notice

Depshield will be deprecated on Monday December 12th

Please install our new product, Sonatype Lift with advanced features

[DepShield] (CVSS 5.3) Vulnerability due to usage of kind-of:4.0.0

Vulnerabilities

DepShield reports that this application's usage of kind-of:4.0.0 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:4.0.0 is a transitive dependency introduced by the following direct dependency(s):

• webpack:4.46.0
        └─ micromatch:3.1.10
              └─ snapdragon:0.8.2
                    └─ base:0.11.2
                          └─ cache-base:1.0.1
                                └─ has-value:1.0.0
                                      └─ has-values:1.0.0
                                            └─ kind-of:4.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.debounce:4.0.8

Vulnerabilities

DepShield reports that this application's usage of lodash.debounce:4.0.8 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.debounce:4.0.8 is a transitive dependency introduced by the following direct dependency(s):

• @rails/webpacker:5.3.0
        └─ @babel/plugin-transform-runtime:7.13.15
              └─ babel-plugin-polyfill-corejs2:0.2.0
                    └─ @babel/helper-define-polyfill-provider:0.2.0
                          └─ lodash.debounce:4.0.8

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

"criar uma interface web" (Scaffold + CSS)

• Scaffold
• CSS
• Bootstrap
• Login?
• Busca
• Ordenação
• Filtros
• Upload
• Fontes
• CDN
• Telas individuais
• Contagem itens
• Modo Dark
• Responsividade
• Menu
• Breadcumb

Importar "com dados separados por TAB"

Importar:

• com dados separados por TAB

" Interpretar ("parsear") o arquivo recebido"

• Interpretar ("parsear") o arquivo recebido

"funcionando em ambiente compatível com Unix (Linux ou Mac OS X)"

• funcionando
• em ambiente compatível com Unix
• Linux
• Mac OS X

Desafio

Você recebeu um arquivo de texto com os dados de vendas da empresa.

Precisamos criar uma maneira para que estes dados sejam:

• importados para um banco de dados.

Sua tarefa é:

• criar uma interface web
• que aceite upload de arquivos,
• normalize os dados
• e armazene-os no banco de dados.

Sua aplicação web DEVE:

• Ter um teste de model e controller automatizado para a funcionalidade pedida
• Ter uma boa aparecia
• A aplicação deve ser escrita obrigatoriamente em: Ruby 2.2+ Rails 5 e SQLite
• Ser simples de configurar
• e rodar a partir das instruções fornecidas,
• funcionando em ambiente compatível com Unix (Linux ou Mac OS X).
• Ela deve utilizar apenas linguagens e bibliotecas livres ou gratuitas.
• Aceitar (via um formulário) o upload de arquivos text
• com dados separados por TAB
• testar o aplicativo usando o arquivo fornecido.
• A primeira linha do arquivo tem o nome das colunas
• Você pode assumir que as colunas estarão sempre nesta ordem, e que sempre haverá uma linha de cabeçalho.
• Um arquivo de exemplo chamado 'dados.txt' está incluído neste repositório.
• Interpretar ("parsear") o arquivo recebido,
• normalizar os dados
• e salvar corretamente a informação em um banco de dados relacional.
• Exibir todos os registros importados,
• bem como a receita bruta total dos registros contidos no arquivo enviado após o upload + parser.
• e ser fácil de usar

Criar teste para Upload de Arquivos

Criar teste para Upload de Arquivo

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.memoize:4.1.2

Vulnerabilities

DepShield reports that this application's usage of lodash.memoize:4.1.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.memoize:4.1.2 is a transitive dependency introduced by the following direct dependency(s):

• @rails/webpacker:5.3.0
        └─ optimize-css-assets-webpack-plugin:5.0.4
              └─ cssnano:4.1.11
                    └─ cssnano-preset-default:4.0.8
                          └─ postcss-merge-rules:4.0.3
                                └─ caniuse-api:3.0.0
                                      └─ lodash.memoize:4.1.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Adicionar Navbar usando Bootstrap

Criar partial para navbar e usar no laout padrão, usando bootstrap para estilização

[DepShield] (CVSS 7.4) Vulnerability due to usage of ini:1.3.8

Vulnerabilities

DepShield reports that this application's usage of ini:1.3.8 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

ini:1.3.8 is a transitive dependency introduced by the following direct dependency(s):

• webpack-cli:3.3.12
        └─ findup-sync:3.0.0
              └─ resolve-dir:1.0.1
                    └─ global-modules:1.0.0
                          └─ global-prefix:1.0.2
                                └─ ini:1.3.8
        └─ global-modules:2.0.0
              └─ global-prefix:3.0.0
                    └─ ini:1.3.8

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

"Ser simples de configurar"

• Ser simples de configurar

"Ser simples de configurar" (Docker)

• Docker
• Scripts
• Documentação
• Teste em mais de um ambiente

"receita bruta total dos registros"

• bem como a receita bruta total dos registros contidos no arquivo
• enviado após o upload
• + parser.

[DepShield] (CVSS 5.3) Vulnerability due to usage of kind-of:5.1.0

Vulnerabilities

DepShield reports that this application's usage of kind-of:5.1.0 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:5.1.0 is a transitive dependency introduced by the following direct dependency(s):

• webpack:4.46.0
        └─ micromatch:3.1.10
              └─ snapdragon:0.8.2
                    └─ define-property:0.2.5
                          └─ is-descriptor:0.1.6
                                └─ kind-of:5.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of q:1.5.1

Vulnerabilities

DepShield reports that this application's usage of q:1.5.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

---

Occurrences

q:1.5.1 is a transitive dependency introduced by the following direct dependency(s):

• @rails/webpacker:5.3.0
        └─ optimize-css-assets-webpack-plugin:5.0.4
              └─ cssnano:4.1.11
                    └─ cssnano-preset-default:4.0.8
                          └─ postcss-svgo:4.0.3
                                └─ svgo:1.3.2
                                      └─ coa:2.0.2
                                            └─ q:1.5.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of debug:2.6.9

Vulnerabilities

DepShield reports that this application's usage of debug:2.6.9 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

debug:2.6.9 is a transitive dependency introduced by the following direct dependency(s):

• webpack:4.46.0
        └─ micromatch:3.1.10
              └─ extglob:2.0.4
                    └─ expand-brackets:2.1.4
                          └─ debug:2.6.9
              └─ snapdragon:0.8.2
                    └─ debug:2.6.9

• webpack-dev-server:3.11.2
        └─ compression:1.7.4
              └─ debug:2.6.9
        └─ express:4.17.1
              └─ body-parser:1.19.0
                    └─ debug:2.6.9
              └─ debug:2.6.9
              └─ finalhandler:1.1.2
                    └─ debug:2.6.9
              └─ send:0.17.1
                    └─ debug:2.6.9
        └─ serve-index:1.9.1
              └─ debug:2.6.9

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

"Ela deve utilizar apenas linguagens e bibliotecas livres ou gratuitas"

Ela deve utilizar apenas linguagens e bibliotecas:

• livres
• gratuitas

Adcionar Bootstrap 4

Adicionar Bootstrap 4 ao layout/template padrão