action_authorization 0.2.3 → 0.3.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/MIT-LICENSE +20 -0
- data/README.md +8 -25
- data/Rakefile +3 -8
- data/lib/action_authorization/authorization_failure.rb +2 -0
- data/lib/action_authorization/base_policy.rb +4 -1
- data/lib/action_authorization/version.rb +3 -1
- data/lib/action_authorization.rb +6 -6
- metadata +6 -5
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: d6ec2bb21ab2cd6e7a6fc961076931ba385d327272437427e2653f07dabd0901
|
4
|
+
data.tar.gz: 6b01e8b343d8fc465e9ad5c36bf76f515ca7f1b809bfc28f2ba4f66d106f6d5c
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: d91740824f6f3aca60f1c98de4ac7fea9e3e231e710e1ce027465cb8908596264885710c0d3b3ca98d8cd877d26d9ef83a3d1c6848624aa171f2bedc0798fe52
|
7
|
+
data.tar.gz: 8f6b3b6a14ba8533f6361aa1cd1241141ee246ee1561098cfa88fba41b53d64124be783a4a45ec01b4ef95fe2f3628b327b17f4171652be16e4e8d33bb775d4a
|
data/MIT-LICENSE
ADDED
@@ -0,0 +1,20 @@
|
|
1
|
+
Copyright 2017-2023 Aaron Baldwin
|
2
|
+
|
3
|
+
Permission is hereby granted, free of charge, to any person obtaining
|
4
|
+
a copy of this software and associated documentation files (the
|
5
|
+
"Software"), to deal in the Software without restriction, including
|
6
|
+
without limitation the rights to use, copy, modify, merge, publish,
|
7
|
+
distribute, sublicense, and/or sell copies of the Software, and to
|
8
|
+
permit persons to whom the Software is furnished to do so, subject to
|
9
|
+
the following conditions:
|
10
|
+
|
11
|
+
The above copyright notice and this permission notice shall be
|
12
|
+
included in all copies or substantial portions of the Software.
|
13
|
+
|
14
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
15
|
+
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
16
|
+
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
17
|
+
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
18
|
+
LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
19
|
+
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
20
|
+
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
data/README.md
CHANGED
@@ -1,9 +1,7 @@
|
|
1
1
|
# ActionAuthorization
|
2
|
-
|
3
2
|
A base policy class for authorizing controller actions with access to the current_user and object.
|
4
3
|
|
5
4
|
## Installation
|
6
|
-
|
7
5
|
Add this line to your application's Gemfile:
|
8
6
|
|
9
7
|
```ruby
|
@@ -11,19 +9,19 @@ gem 'action_authorization'
|
|
11
9
|
```
|
12
10
|
|
13
11
|
And then execute:
|
12
|
+
```bash
|
13
|
+
bundle
|
14
|
+
```
|
14
15
|
|
15
|
-
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
$ gem install action_authorization
|
16
|
+
Or install it with:
|
17
|
+
```bash
|
18
|
+
gem install action_authorization
|
19
|
+
```
|
20
20
|
|
21
21
|
## Requirements
|
22
|
-
|
23
22
|
ActionAuthorization requires a **current_user** method that returns the currently logged in user.
|
24
23
|
|
25
24
|
## Usage
|
26
|
-
|
27
25
|
Include the ActionAuthorization module in your ApplicationController (or indvidual controller(s))
|
28
26
|
|
29
27
|
```ruby
|
@@ -33,7 +31,6 @@ end
|
|
33
31
|
```
|
34
32
|
|
35
33
|
Create an authorization policy for a resource.
|
36
|
-
|
37
34
|
``` ruby
|
38
35
|
class DocumentPolicy < ActionAuthorization::BasePolicy
|
39
36
|
def show?
|
@@ -43,7 +40,6 @@ end
|
|
43
40
|
```
|
44
41
|
|
45
42
|
Call **authorize** method in controller action.
|
46
|
-
|
47
43
|
```ruby
|
48
44
|
class DocumentController < ApplicationController
|
49
45
|
def show
|
@@ -67,18 +63,5 @@ Check if authorized before displaying a link in the view.
|
|
67
63
|
<%= link_to(@document.name, @document) if policy(@document).show? %>
|
68
64
|
```
|
69
65
|
|
70
|
-
|
71
|
-
## Development
|
72
|
-
|
73
|
-
After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake test` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
|
74
|
-
|
75
|
-
To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
|
76
|
-
|
77
|
-
## Contributing
|
78
|
-
|
79
|
-
Bug reports and pull requests are welcome on GitHub at https://github.com/wwidea/action_authorization.
|
80
|
-
|
81
|
-
|
82
66
|
## License
|
83
|
-
|
84
|
-
The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).
|
67
|
+
The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).
|
data/Rakefile
CHANGED
@@ -1,10 +1,5 @@
|
|
1
|
-
|
2
|
-
require "rake/testtask"
|
1
|
+
# frozen_string_literal: true
|
3
2
|
|
4
|
-
|
5
|
-
t.libs << "test"
|
6
|
-
t.libs << "lib"
|
7
|
-
t.test_files = FileList['test/**/*_test.rb']
|
8
|
-
end
|
3
|
+
require "bundler/setup"
|
9
4
|
|
10
|
-
|
5
|
+
require "bundler/gem_tasks"
|
@@ -1,9 +1,11 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
1
3
|
module ActionAuthorization
|
2
4
|
class BasePolicy
|
3
5
|
attr_accessor :user, :object
|
4
6
|
|
5
7
|
def self.type
|
6
|
-
name.
|
8
|
+
name.delete_suffix("Policy")
|
7
9
|
end
|
8
10
|
|
9
11
|
def self.type_class
|
@@ -21,6 +23,7 @@ module ActionAuthorization
|
|
21
23
|
|
22
24
|
# create alias to object from subclass name
|
23
25
|
def self.inherited(klass)
|
26
|
+
super
|
24
27
|
klass.send(:alias_method, klass.type.underscore, :object)
|
25
28
|
end
|
26
29
|
|
data/lib/action_authorization.rb
CHANGED
@@ -1,3 +1,5 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
1
3
|
require "active_support/core_ext/module/delegation"
|
2
4
|
require "active_support/core_ext/string/inflections"
|
3
5
|
require "action_authorization/version"
|
@@ -14,11 +16,9 @@ module ActionAuthorization
|
|
14
16
|
protected
|
15
17
|
|
16
18
|
def authorize(object, action: action_name, policy_class: nil)
|
17
|
-
|
18
|
-
|
19
|
-
|
20
|
-
raise ActionAuthorization::AuthorizationFailure
|
21
|
-
end
|
19
|
+
raise AuthorizationFailure unless policy(object, policy_class).public_send(:"#{action}?")
|
20
|
+
|
21
|
+
object
|
22
22
|
end
|
23
23
|
|
24
24
|
def policy(object, policy_class = nil)
|
@@ -26,6 +26,6 @@ module ActionAuthorization
|
|
26
26
|
end
|
27
27
|
|
28
28
|
def policy_class_for(object)
|
29
|
-
"#{object.
|
29
|
+
"#{object.model_name}Policy".constantize
|
30
30
|
end
|
31
31
|
end
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: action_authorization
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.3.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Aaron Baldwin
|
@@ -9,7 +9,7 @@ authors:
|
|
9
9
|
autorequire:
|
10
10
|
bindir: bin
|
11
11
|
cert_chain: []
|
12
|
-
date:
|
12
|
+
date: 2024-07-26 00:00:00.000000000 Z
|
13
13
|
dependencies:
|
14
14
|
- !ruby/object:Gem::Dependency
|
15
15
|
name: activesupport
|
@@ -33,6 +33,7 @@ executables: []
|
|
33
33
|
extensions: []
|
34
34
|
extra_rdoc_files: []
|
35
35
|
files:
|
36
|
+
- MIT-LICENSE
|
36
37
|
- README.md
|
37
38
|
- Rakefile
|
38
39
|
- lib/action_authorization.rb
|
@@ -44,7 +45,7 @@ licenses:
|
|
44
45
|
- MIT
|
45
46
|
metadata:
|
46
47
|
homepage_uri: https://github.com/wwidea/action_authorization
|
47
|
-
|
48
|
+
rubygems_mfa_required: 'true'
|
48
49
|
post_install_message:
|
49
50
|
rdoc_options: []
|
50
51
|
require_paths:
|
@@ -53,14 +54,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
53
54
|
requirements:
|
54
55
|
- - ">="
|
55
56
|
- !ruby/object:Gem::Version
|
56
|
-
version:
|
57
|
+
version: 3.1.0
|
57
58
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
58
59
|
requirements:
|
59
60
|
- - ">="
|
60
61
|
- !ruby/object:Gem::Version
|
61
62
|
version: '0'
|
62
63
|
requirements: []
|
63
|
-
rubygems_version: 3.
|
64
|
+
rubygems_version: 3.5.11
|
64
65
|
signing_key:
|
65
66
|
specification_version: 4
|
66
67
|
summary: Rails controller object-level action authorization.
|