action_policy 0.4.4 → 0.5.4
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +211 -175
- data/README.md +5 -4
- data/config/rubocop-rspec.yml +17 -0
- data/lib/.rbnext/2.7/action_policy/behaviours/policy_for.rb +62 -0
- data/lib/.rbnext/2.7/action_policy/i18n.rb +56 -0
- data/lib/.rbnext/2.7/action_policy/policy/cache.rb +101 -0
- data/lib/.rbnext/2.7/action_policy/policy/pre_check.rb +162 -0
- data/lib/.rbnext/2.7/action_policy/rspec/be_authorized_to.rb +89 -0
- data/lib/.rbnext/2.7/action_policy/rspec/have_authorized_scope.rb +124 -0
- data/lib/.rbnext/2.7/action_policy/utils/pretty_print.rb +159 -0
- data/lib/.rbnext/3.0/action_policy/behaviour.rb +115 -0
- data/lib/.rbnext/3.0/action_policy/behaviours/policy_for.rb +62 -0
- data/lib/.rbnext/3.0/action_policy/behaviours/scoping.rb +35 -0
- data/lib/.rbnext/3.0/action_policy/behaviours/thread_memoized.rb +59 -0
- data/lib/.rbnext/3.0/action_policy/ext/policy_cache_key.rb +72 -0
- data/lib/.rbnext/3.0/action_policy/policy/aliases.rb +69 -0
- data/lib/.rbnext/3.0/action_policy/policy/authorization.rb +87 -0
- data/lib/.rbnext/3.0/action_policy/policy/cache.rb +101 -0
- data/lib/.rbnext/3.0/action_policy/policy/core.rb +161 -0
- data/lib/.rbnext/3.0/action_policy/policy/defaults.rb +31 -0
- data/lib/.rbnext/3.0/action_policy/policy/execution_result.rb +37 -0
- data/lib/.rbnext/3.0/action_policy/policy/pre_check.rb +162 -0
- data/lib/.rbnext/3.0/action_policy/policy/reasons.rb +212 -0
- data/lib/.rbnext/3.0/action_policy/policy/scoping.rb +160 -0
- data/lib/.rbnext/3.0/action_policy/rspec/be_authorized_to.rb +89 -0
- data/lib/.rbnext/3.0/action_policy/rspec/have_authorized_scope.rb +124 -0
- data/lib/.rbnext/3.0/action_policy/utils/pretty_print.rb +159 -0
- data/lib/.rbnext/3.0/action_policy/utils/suggest_message.rb +19 -0
- data/lib/action_policy.rb +7 -1
- data/lib/action_policy/behaviour.rb +22 -16
- data/lib/action_policy/behaviours/policy_for.rb +10 -3
- data/lib/action_policy/behaviours/scoping.rb +2 -1
- data/lib/action_policy/behaviours/thread_memoized.rb +1 -3
- data/lib/action_policy/ext/module_namespace.rb +1 -6
- data/lib/action_policy/ext/policy_cache_key.rb +10 -30
- data/lib/action_policy/i18n.rb +1 -1
- data/lib/action_policy/lookup_chain.rb +26 -28
- data/lib/action_policy/policy/aliases.rb +7 -12
- data/lib/action_policy/policy/authorization.rb +8 -7
- data/lib/action_policy/policy/cache.rb +11 -17
- data/lib/action_policy/policy/core.rb +25 -12
- data/lib/action_policy/policy/defaults.rb +3 -9
- data/lib/action_policy/policy/execution_result.rb +3 -9
- data/lib/action_policy/policy/pre_check.rb +19 -58
- data/lib/action_policy/policy/reasons.rb +31 -19
- data/lib/action_policy/policy/scoping.rb +5 -6
- data/lib/action_policy/rails/controller.rb +6 -1
- data/lib/action_policy/rails/policy/instrumentation.rb +1 -1
- data/lib/action_policy/rspec/be_authorized_to.rb +5 -9
- data/lib/action_policy/rspec/dsl.rb +1 -1
- data/lib/action_policy/rspec/have_authorized_scope.rb +5 -7
- data/lib/action_policy/utils/pretty_print.rb +21 -24
- data/lib/action_policy/utils/suggest_message.rb +1 -3
- data/lib/action_policy/version.rb +1 -1
- data/lib/generators/action_policy/install/templates/{application_policy.rb → application_policy.rb.tt} +0 -0
- data/lib/generators/action_policy/policy/policy_generator.rb +4 -1
- data/lib/generators/action_policy/policy/templates/{policy.rb → policy.rb.tt} +0 -0
- data/lib/generators/rspec/templates/{policy_spec.rb → policy_spec.rb.tt} +0 -0
- data/lib/generators/test_unit/templates/{policy_test.rb → policy_test.rb.tt} +0 -0
- metadata +55 -119
- data/.gitattributes +0 -2
- data/.github/ISSUE_TEMPLATE.md +0 -21
- data/.github/PULL_REQUEST_TEMPLATE.md +0 -29
- data/.github/bug_report_template.rb +0 -175
- data/.gitignore +0 -15
- data/.rubocop.yml +0 -54
- data/.tidelift.yml +0 -6
- data/.travis.yml +0 -31
- data/Gemfile +0 -22
- data/Rakefile +0 -27
- data/action_policy.gemspec +0 -44
- data/benchmarks/namespaced_lookup_cache.rb +0 -74
- data/benchmarks/pre_checks.rb +0 -73
- data/bin/console +0 -14
- data/bin/setup +0 -8
- data/docs/.nojekyll +0 -0
- data/docs/CNAME +0 -1
- data/docs/README.md +0 -79
- data/docs/_sidebar.md +0 -27
- data/docs/aliases.md +0 -122
- data/docs/assets/docsify-search.js +0 -364
- data/docs/assets/docsify.min.js +0 -3
- data/docs/assets/fonts/FiraCode-Medium.woff +0 -0
- data/docs/assets/fonts/FiraCode-Regular.woff +0 -0
- data/docs/assets/images/banner.png +0 -0
- data/docs/assets/images/cache.png +0 -0
- data/docs/assets/images/cache.svg +0 -70
- data/docs/assets/images/layer.png +0 -0
- data/docs/assets/images/layer.svg +0 -35
- data/docs/assets/prism-ruby.min.js +0 -1
- data/docs/assets/styles.css +0 -347
- data/docs/assets/vue.min.css +0 -1
- data/docs/authorization_context.md +0 -92
- data/docs/behaviour.md +0 -113
- data/docs/caching.md +0 -291
- data/docs/controller_action_aliases.md +0 -109
- data/docs/custom_lookup_chain.md +0 -48
- data/docs/custom_policy.md +0 -53
- data/docs/debugging.md +0 -55
- data/docs/decorators.md +0 -27
- data/docs/favicon.ico +0 -0
- data/docs/graphql.md +0 -302
- data/docs/i18n.md +0 -44
- data/docs/index.html +0 -43
- data/docs/instrumentation.md +0 -84
- data/docs/lookup_chain.md +0 -22
- data/docs/namespaces.md +0 -77
- data/docs/non_rails.md +0 -28
- data/docs/pre_checks.md +0 -57
- data/docs/pundit_migration.md +0 -80
- data/docs/quick_start.md +0 -118
- data/docs/rails.md +0 -120
- data/docs/reasons.md +0 -120
- data/docs/scoping.md +0 -255
- data/docs/testing.md +0 -390
- data/docs/writing_policies.md +0 -107
- data/gemfiles/jruby.gemfile +0 -8
- data/gemfiles/rails42.gemfile +0 -9
- data/gemfiles/rails6.gemfile +0 -8
- data/gemfiles/railsmaster.gemfile +0 -6
- data/lib/action_policy/ext/string_match.rb +0 -14
- data/lib/action_policy/ext/yield_self_then.rb +0 -25
File without changes
|
@@ -8,7 +8,10 @@ module ActionPolicy
|
|
8
8
|
source_root File.expand_path("templates", __dir__)
|
9
9
|
|
10
10
|
def run_install_if_needed
|
11
|
-
|
11
|
+
in_root do
|
12
|
+
return if File.exist?("app/policies/application_policy.rb")
|
13
|
+
end
|
14
|
+
|
12
15
|
generate "action_policy:install"
|
13
16
|
end
|
14
17
|
|
File without changes
|
File without changes
|
File without changes
|
metadata
CHANGED
@@ -1,15 +1,29 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: action_policy
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.5.4
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Vladimir Dementyev
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2020-
|
11
|
+
date: 2020-12-09 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
|
+
- !ruby/object:Gem::Dependency
|
14
|
+
name: ruby-next-core
|
15
|
+
requirement: !ruby/object:Gem::Requirement
|
16
|
+
requirements:
|
17
|
+
- - ">="
|
18
|
+
- !ruby/object:Gem::Version
|
19
|
+
version: 0.10.3
|
20
|
+
type: :runtime
|
21
|
+
prerelease: false
|
22
|
+
version_requirements: !ruby/object:Gem::Requirement
|
23
|
+
requirements:
|
24
|
+
- - ">="
|
25
|
+
- !ruby/object:Gem::Version
|
26
|
+
version: 0.10.3
|
13
27
|
- !ruby/object:Gem::Dependency
|
14
28
|
name: ammeter
|
15
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -56,72 +70,30 @@ dependencies:
|
|
56
70
|
name: rake
|
57
71
|
requirement: !ruby/object:Gem::Requirement
|
58
72
|
requirements:
|
59
|
-
- - "
|
73
|
+
- - ">="
|
60
74
|
- !ruby/object:Gem::Version
|
61
|
-
version: '
|
75
|
+
version: '13.0'
|
62
76
|
type: :development
|
63
77
|
prerelease: false
|
64
78
|
version_requirements: !ruby/object:Gem::Requirement
|
65
79
|
requirements:
|
66
|
-
- - "
|
80
|
+
- - ">="
|
67
81
|
- !ruby/object:Gem::Version
|
68
|
-
version: '
|
82
|
+
version: '13.0'
|
69
83
|
- !ruby/object:Gem::Dependency
|
70
84
|
name: rspec
|
71
85
|
requirement: !ruby/object:Gem::Requirement
|
72
86
|
requirements:
|
73
|
-
- - "
|
74
|
-
- !ruby/object:Gem::Version
|
75
|
-
version: '3.3'
|
76
|
-
type: :development
|
77
|
-
prerelease: false
|
78
|
-
version_requirements: !ruby/object:Gem::Requirement
|
79
|
-
requirements:
|
80
|
-
- - "~>"
|
81
|
-
- !ruby/object:Gem::Version
|
82
|
-
version: '3.3'
|
83
|
-
- !ruby/object:Gem::Dependency
|
84
|
-
name: rubocop
|
85
|
-
requirement: !ruby/object:Gem::Requirement
|
86
|
-
requirements:
|
87
|
-
- - "~>"
|
88
|
-
- !ruby/object:Gem::Version
|
89
|
-
version: 0.67.0
|
90
|
-
type: :development
|
91
|
-
prerelease: false
|
92
|
-
version_requirements: !ruby/object:Gem::Requirement
|
93
|
-
requirements:
|
94
|
-
- - "~>"
|
95
|
-
- !ruby/object:Gem::Version
|
96
|
-
version: 0.67.0
|
97
|
-
- !ruby/object:Gem::Dependency
|
98
|
-
name: rubocop-md
|
99
|
-
requirement: !ruby/object:Gem::Requirement
|
100
|
-
requirements:
|
101
|
-
- - "~>"
|
102
|
-
- !ruby/object:Gem::Version
|
103
|
-
version: '0.2'
|
104
|
-
type: :development
|
105
|
-
prerelease: false
|
106
|
-
version_requirements: !ruby/object:Gem::Requirement
|
107
|
-
requirements:
|
108
|
-
- - "~>"
|
109
|
-
- !ruby/object:Gem::Version
|
110
|
-
version: '0.2'
|
111
|
-
- !ruby/object:Gem::Dependency
|
112
|
-
name: standard
|
113
|
-
requirement: !ruby/object:Gem::Requirement
|
114
|
-
requirements:
|
115
|
-
- - "~>"
|
87
|
+
- - ">="
|
116
88
|
- !ruby/object:Gem::Version
|
117
|
-
version:
|
89
|
+
version: '3.9'
|
118
90
|
type: :development
|
119
91
|
prerelease: false
|
120
92
|
version_requirements: !ruby/object:Gem::Requirement
|
121
93
|
requirements:
|
122
|
-
- - "
|
94
|
+
- - ">="
|
123
95
|
- !ruby/object:Gem::Version
|
124
|
-
version:
|
96
|
+
version: '3.9'
|
125
97
|
- !ruby/object:Gem::Dependency
|
126
98
|
name: benchmark-ips
|
127
99
|
requirement: !ruby/object:Gem::Requirement
|
@@ -157,69 +129,35 @@ executables: []
|
|
157
129
|
extensions: []
|
158
130
|
extra_rdoc_files: []
|
159
131
|
files:
|
160
|
-
- ".gitattributes"
|
161
|
-
- ".github/ISSUE_TEMPLATE.md"
|
162
|
-
- ".github/PULL_REQUEST_TEMPLATE.md"
|
163
|
-
- ".github/bug_report_template.rb"
|
164
|
-
- ".gitignore"
|
165
|
-
- ".rubocop.yml"
|
166
|
-
- ".tidelift.yml"
|
167
|
-
- ".travis.yml"
|
168
132
|
- CHANGELOG.md
|
169
|
-
- Gemfile
|
170
133
|
- LICENSE.txt
|
171
134
|
- README.md
|
172
|
-
-
|
173
|
-
- action_policy.
|
174
|
-
-
|
175
|
-
-
|
176
|
-
-
|
177
|
-
-
|
178
|
-
-
|
179
|
-
-
|
180
|
-
-
|
181
|
-
-
|
182
|
-
-
|
183
|
-
-
|
184
|
-
-
|
185
|
-
-
|
186
|
-
-
|
187
|
-
-
|
188
|
-
-
|
189
|
-
-
|
190
|
-
-
|
191
|
-
-
|
192
|
-
-
|
193
|
-
-
|
194
|
-
-
|
195
|
-
-
|
196
|
-
-
|
197
|
-
-
|
198
|
-
- docs/controller_action_aliases.md
|
199
|
-
- docs/custom_lookup_chain.md
|
200
|
-
- docs/custom_policy.md
|
201
|
-
- docs/debugging.md
|
202
|
-
- docs/decorators.md
|
203
|
-
- docs/favicon.ico
|
204
|
-
- docs/graphql.md
|
205
|
-
- docs/i18n.md
|
206
|
-
- docs/index.html
|
207
|
-
- docs/instrumentation.md
|
208
|
-
- docs/lookup_chain.md
|
209
|
-
- docs/namespaces.md
|
210
|
-
- docs/non_rails.md
|
211
|
-
- docs/pre_checks.md
|
212
|
-
- docs/pundit_migration.md
|
213
|
-
- docs/quick_start.md
|
214
|
-
- docs/rails.md
|
215
|
-
- docs/reasons.md
|
216
|
-
- docs/scoping.md
|
217
|
-
- docs/testing.md
|
218
|
-
- docs/writing_policies.md
|
219
|
-
- gemfiles/jruby.gemfile
|
220
|
-
- gemfiles/rails42.gemfile
|
221
|
-
- gemfiles/rails6.gemfile
|
222
|
-
- gemfiles/railsmaster.gemfile
|
135
|
+
- config/rubocop-rspec.yml
|
136
|
+
- lib/.rbnext/2.7/action_policy/behaviours/policy_for.rb
|
137
|
+
- lib/.rbnext/2.7/action_policy/i18n.rb
|
138
|
+
- lib/.rbnext/2.7/action_policy/policy/cache.rb
|
139
|
+
- lib/.rbnext/2.7/action_policy/policy/pre_check.rb
|
140
|
+
- lib/.rbnext/2.7/action_policy/rspec/be_authorized_to.rb
|
141
|
+
- lib/.rbnext/2.7/action_policy/rspec/have_authorized_scope.rb
|
142
|
+
- lib/.rbnext/2.7/action_policy/utils/pretty_print.rb
|
143
|
+
- lib/.rbnext/3.0/action_policy/behaviour.rb
|
144
|
+
- lib/.rbnext/3.0/action_policy/behaviours/policy_for.rb
|
145
|
+
- lib/.rbnext/3.0/action_policy/behaviours/scoping.rb
|
146
|
+
- lib/.rbnext/3.0/action_policy/behaviours/thread_memoized.rb
|
147
|
+
- lib/.rbnext/3.0/action_policy/ext/policy_cache_key.rb
|
148
|
+
- lib/.rbnext/3.0/action_policy/policy/aliases.rb
|
149
|
+
- lib/.rbnext/3.0/action_policy/policy/authorization.rb
|
150
|
+
- lib/.rbnext/3.0/action_policy/policy/cache.rb
|
151
|
+
- lib/.rbnext/3.0/action_policy/policy/core.rb
|
152
|
+
- lib/.rbnext/3.0/action_policy/policy/defaults.rb
|
153
|
+
- lib/.rbnext/3.0/action_policy/policy/execution_result.rb
|
154
|
+
- lib/.rbnext/3.0/action_policy/policy/pre_check.rb
|
155
|
+
- lib/.rbnext/3.0/action_policy/policy/reasons.rb
|
156
|
+
- lib/.rbnext/3.0/action_policy/policy/scoping.rb
|
157
|
+
- lib/.rbnext/3.0/action_policy/rspec/be_authorized_to.rb
|
158
|
+
- lib/.rbnext/3.0/action_policy/rspec/have_authorized_scope.rb
|
159
|
+
- lib/.rbnext/3.0/action_policy/utils/pretty_print.rb
|
160
|
+
- lib/.rbnext/3.0/action_policy/utils/suggest_message.rb
|
223
161
|
- lib/action_policy.rb
|
224
162
|
- lib/action_policy/authorizer.rb
|
225
163
|
- lib/action_policy/base.rb
|
@@ -234,10 +172,8 @@ files:
|
|
234
172
|
- lib/action_policy/ext/module_namespace.rb
|
235
173
|
- lib/action_policy/ext/policy_cache_key.rb
|
236
174
|
- lib/action_policy/ext/string_constantize.rb
|
237
|
-
- lib/action_policy/ext/string_match.rb
|
238
175
|
- lib/action_policy/ext/string_underscore.rb
|
239
176
|
- lib/action_policy/ext/symbol_camelize.rb
|
240
|
-
- lib/action_policy/ext/yield_self_then.rb
|
241
177
|
- lib/action_policy/i18n.rb
|
242
178
|
- lib/action_policy/lookup_chain.rb
|
243
179
|
- lib/action_policy/policy/aliases.rb
|
@@ -270,14 +206,14 @@ files:
|
|
270
206
|
- lib/action_policy/version.rb
|
271
207
|
- lib/generators/action_policy/install/USAGE
|
272
208
|
- lib/generators/action_policy/install/install_generator.rb
|
273
|
-
- lib/generators/action_policy/install/templates/application_policy.rb
|
209
|
+
- lib/generators/action_policy/install/templates/application_policy.rb.tt
|
274
210
|
- lib/generators/action_policy/policy/USAGE
|
275
211
|
- lib/generators/action_policy/policy/policy_generator.rb
|
276
|
-
- lib/generators/action_policy/policy/templates/policy.rb
|
212
|
+
- lib/generators/action_policy/policy/templates/policy.rb.tt
|
277
213
|
- lib/generators/rspec/policy_generator.rb
|
278
|
-
- lib/generators/rspec/templates/policy_spec.rb
|
214
|
+
- lib/generators/rspec/templates/policy_spec.rb.tt
|
279
215
|
- lib/generators/test_unit/policy_generator.rb
|
280
|
-
- lib/generators/test_unit/templates/policy_test.rb
|
216
|
+
- lib/generators/test_unit/templates/policy_test.rb.tt
|
281
217
|
homepage: https://github.com/palkan/action_policy
|
282
218
|
licenses:
|
283
219
|
- MIT
|
@@ -295,7 +231,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
295
231
|
requirements:
|
296
232
|
- - ">="
|
297
233
|
- !ruby/object:Gem::Version
|
298
|
-
version: 2.
|
234
|
+
version: 2.5.0
|
299
235
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
300
236
|
requirements:
|
301
237
|
- - ">="
|
data/.gitattributes
DELETED
data/.github/ISSUE_TEMPLATE.md
DELETED
@@ -1,21 +0,0 @@
|
|
1
|
-
<!--
|
2
|
-
This template is for bug reports. If you are reporting a bug, please continue on. If you are here for another reason,
|
3
|
-
feel free to skip the rest of this template.
|
4
|
-
-->
|
5
|
-
|
6
|
-
### Tell us about your environment
|
7
|
-
|
8
|
-
**Ruby Version:**
|
9
|
-
|
10
|
-
**Framework Version (Rails, whatever):**
|
11
|
-
|
12
|
-
**Action Policy Version:**
|
13
|
-
|
14
|
-
**Reproduction Script:** Use [this template](https://github.com/palkan/action_policy/blob/master/.github/bug_report_template.rb) to
|
15
|
-
create a standalone reproduction script. That would help us to fix the problem quicker. Thanks!
|
16
|
-
|
17
|
-
### What did you do?
|
18
|
-
|
19
|
-
### What did you expect to happen?
|
20
|
-
|
21
|
-
### What actually happened?
|
@@ -1,29 +0,0 @@
|
|
1
|
-
<!--
|
2
|
-
First of all, thanks for contributing!
|
3
|
-
|
4
|
-
If it's a typo fix or minor documentation update feel free to skip the rest of this template!
|
5
|
-
-->
|
6
|
-
|
7
|
-
<!--
|
8
|
-
If it's a bug fix, then link it to the issue, for example:
|
9
|
-
|
10
|
-
Fixes #xxx
|
11
|
-
-->
|
12
|
-
|
13
|
-
|
14
|
-
<!--
|
15
|
-
Otherwise, describe the changes:
|
16
|
-
|
17
|
-
### What is the purpose of this pull request?
|
18
|
-
|
19
|
-
### What changes did you make? (overview)
|
20
|
-
|
21
|
-
### Is there anything you'd like reviewers to focus on?
|
22
|
-
|
23
|
-
-->
|
24
|
-
|
25
|
-
PR checklist:
|
26
|
-
|
27
|
-
- [ ] Tests included
|
28
|
-
- [ ] Documentation updated
|
29
|
-
- [ ] Changelog entry added
|
@@ -1,175 +0,0 @@
|
|
1
|
-
# frozen_string_literal: true
|
2
|
-
|
3
|
-
require "bundler/inline"
|
4
|
-
|
5
|
-
# This reproduction script allows you to test Action Policy with Rails.
|
6
|
-
# It contains:
|
7
|
-
# - Headless User model
|
8
|
-
# - UserPolicy
|
9
|
-
# - UsersController
|
10
|
-
# - Example tests for the controller.
|
11
|
-
#
|
12
|
-
# Update the classes to reproduce the failing case.
|
13
|
-
#
|
14
|
-
# Run the script as follows:
|
15
|
-
#
|
16
|
-
# $ ruby bug_report_template.rb
|
17
|
-
gemfile(true) do
|
18
|
-
source "https://rubygems.org"
|
19
|
-
|
20
|
-
gem "rails", "~> 6.0"
|
21
|
-
gem "action_policy", "~> 0.4"
|
22
|
-
|
23
|
-
gem "pry-byebug", platform: :mri
|
24
|
-
end
|
25
|
-
|
26
|
-
require "rails"
|
27
|
-
require "action_controller/railtie"
|
28
|
-
require "action_policy"
|
29
|
-
|
30
|
-
require "minitest/autorun"
|
31
|
-
|
32
|
-
module Buggy
|
33
|
-
class Application < Rails::Application
|
34
|
-
config.logger = Logger.new("/dev/null")
|
35
|
-
config.eager_load = false
|
36
|
-
|
37
|
-
initializer "routes" do
|
38
|
-
Rails.application.routes.draw do
|
39
|
-
get ":controller(/:action)"
|
40
|
-
end
|
41
|
-
end
|
42
|
-
end
|
43
|
-
end
|
44
|
-
|
45
|
-
Rails.application.initialize!
|
46
|
-
|
47
|
-
class User
|
48
|
-
include Comparable
|
49
|
-
|
50
|
-
attr_reader :name
|
51
|
-
|
52
|
-
def initialize(name)
|
53
|
-
@name = name
|
54
|
-
end
|
55
|
-
|
56
|
-
def admin?
|
57
|
-
name == "admin"
|
58
|
-
end
|
59
|
-
|
60
|
-
def <=>(other)
|
61
|
-
return super unless other.is_a?(User)
|
62
|
-
name <=> other.name
|
63
|
-
end
|
64
|
-
end
|
65
|
-
|
66
|
-
class UserPolicy < ActionPolicy::Base
|
67
|
-
def index?
|
68
|
-
true
|
69
|
-
end
|
70
|
-
|
71
|
-
def create?
|
72
|
-
user.admin?
|
73
|
-
end
|
74
|
-
|
75
|
-
def show?
|
76
|
-
true
|
77
|
-
end
|
78
|
-
|
79
|
-
def manage?
|
80
|
-
user.admin? && !record.admin?
|
81
|
-
end
|
82
|
-
end
|
83
|
-
|
84
|
-
class UsersController < ActionController::Base
|
85
|
-
authorize :user, through: :current_user
|
86
|
-
|
87
|
-
before_action :set_user, only: [:update, :show]
|
88
|
-
|
89
|
-
def index
|
90
|
-
authorize!
|
91
|
-
render plain: "OK"
|
92
|
-
end
|
93
|
-
|
94
|
-
def create
|
95
|
-
authorize!
|
96
|
-
render plain: "OK"
|
97
|
-
end
|
98
|
-
|
99
|
-
def update
|
100
|
-
render plain: "OK"
|
101
|
-
end
|
102
|
-
|
103
|
-
def show
|
104
|
-
if allowed_to?(:update?, @user)
|
105
|
-
render plain: "OK"
|
106
|
-
else
|
107
|
-
render plain: "Read-only"
|
108
|
-
end
|
109
|
-
end
|
110
|
-
|
111
|
-
def current_user
|
112
|
-
@current_user ||= User.new(params[:user])
|
113
|
-
end
|
114
|
-
|
115
|
-
private
|
116
|
-
|
117
|
-
def set_user
|
118
|
-
@user = User.new(params[:target])
|
119
|
-
authorize! @user
|
120
|
-
end
|
121
|
-
end
|
122
|
-
|
123
|
-
class TestBugReproduction < ActionController::TestCase
|
124
|
-
tests UsersController
|
125
|
-
|
126
|
-
def before_setup
|
127
|
-
@routes = Rails.application.routes
|
128
|
-
super
|
129
|
-
end
|
130
|
-
|
131
|
-
def teardown
|
132
|
-
ActionPolicy::PerThreadCache.clear_all
|
133
|
-
end
|
134
|
-
|
135
|
-
def test_index
|
136
|
-
get :index, params: {user: "guest"}
|
137
|
-
assert_equal "OK", response.body
|
138
|
-
end
|
139
|
-
|
140
|
-
def test_create_failed
|
141
|
-
e = assert_raises(ActionPolicy::Unauthorized) do
|
142
|
-
post :create, params: {user: "guest"}
|
143
|
-
end
|
144
|
-
|
145
|
-
assert_equal UserPolicy, e.policy
|
146
|
-
assert_equal :create?, e.rule
|
147
|
-
assert e.result.reasons.is_a?(::ActionPolicy::Policy::FailureReasons)
|
148
|
-
end
|
149
|
-
|
150
|
-
def test_create_succeed
|
151
|
-
post :create, params: {user: "admin"}
|
152
|
-
assert_equal "OK", response.body
|
153
|
-
end
|
154
|
-
|
155
|
-
def test_update_failed
|
156
|
-
assert_raises(ActionPolicy::Unauthorized) do
|
157
|
-
patch :update, params: {user: "admin", target: "admin"}
|
158
|
-
end
|
159
|
-
end
|
160
|
-
|
161
|
-
def test_update_succeed
|
162
|
-
patch :update, params: {user: "admin", target: "guest"}
|
163
|
-
assert_equal "OK", response.body
|
164
|
-
end
|
165
|
-
|
166
|
-
def test_show
|
167
|
-
get :show, params: {user: "admin", target: "guest"}
|
168
|
-
assert_equal "OK", response.body
|
169
|
-
end
|
170
|
-
|
171
|
-
def test_show_admin
|
172
|
-
get :show, params: {user: "admin", target: "admin"}
|
173
|
-
assert_equal "Read-only", response.body
|
174
|
-
end
|
175
|
-
end
|