account_authz 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f6bf1ede17936361eb69db9ddee70b962284bacf76ff5118230b15c12426a3af
-  data.tar.gz: 0af940aed74493eda52f69ee2889dd03771bc29364d4424610c9528a3973d2e1
+  metadata.gz: 349b6e1097c3f9cd3f4211488f800e5132418138e0785573f2810dde8e87287d
+  data.tar.gz: 9cf6c1e7593dc3bd6e814df1df72d5f0caa488bd868407cf3098e6f189a3950d
 SHA512:
-  metadata.gz: e5c79cf5b28c21c94ac5c141fe06c999712b2f13c363a31aae570c204c810be2c648435af1313ab0748fcad5a89425527b6d9e9579633448869e286ce064eacb
-  data.tar.gz: 470a22bd1bc503c93d15e69618c3c0db9ca57b1cfc8c24e4d5a4ba2aba891797ab45ee7d65239ac45ac524c46f320f14545c6693e3b14583bff58f88eff361e6
+  metadata.gz: 02b2a2acf869db601b2cf5470565ef64920543c01c027f21575b22d5e16d98f1ac8e679d9759d9f9f0698f17ee65acc719bd01a147a428ca087aec4d0620e6fa
+  data.tar.gz: 403e200dd7e81b20319415fbce054f10dd4cbfa9327faa7ddccf399c042fd91c70c03f16f7ecb18269cc86315a56087d942b161127776f6224c68a5361d75ea6

data/app/models/account_authz/current.rb

@@ -3,5 +3,6 @@
 module AccountAuthz
   class Current < ActiveSupport::CurrentAttributes
     attribute :account_id
+    attribute :capabilities, default: -> { {} }
   end
 end

data/app/models/account_authz/role.rb

@@ -4,6 +4,7 @@ module AccountAuthz
   class Role < ApplicationRecord
     validates :name, presence: true
     validate :capabilities_within_catalog
+    after_save { Current.capabilities = {} }
 
     scope :in_account, ->(account_id) { where(account_id: account_id) }
 

data/app/models/concerns/account_authz/member.rb

@@ -10,16 +10,20 @@ module AccountAuthz
     end
 
     def assign_role(role)
+      Current.capabilities = {}
       account_authz_assignments.find_or_create_by(role: role)
     end
 
     def revoke_role(role)
+      Current.capabilities = {}
       account_authz_assignments.where(role: role).destroy_all
     end
 
     def capabilities(account_id: nil)
-      roles = account_id ? account_authz_roles.where(account_id: account_id) : account_authz_roles
-      roles.flat_map(&:capabilities).uniq.map(&:to_sym)
+      Current.capabilities[[ self.class.name, id, account_id ]] ||= begin
+        roles = account_id ? account_authz_roles.where(account_id: account_id) : account_authz_roles
+        roles.flat_map(&:capabilities).uniq.map(&:to_sym)
+      end
     end
 
     def can?(capability, account_id: nil)

data/lib/account_authz/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module AccountAuthz
-  VERSION = "0.1.1"
+  VERSION = "0.1.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: account_authz
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - tylercschneider