ae_declarative_authorization 1.3.0 → 1.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 109d7f06d55bf881913fc6da042161c75cd1072f65b2cbf71308f73885485c57
-  data.tar.gz: 65ab92a85db9e907bb8fd64ef426b34b9fd00ca4f314183fa5b6fbc11a133d8b
+  metadata.gz: 5e11a2b5e7153658db82ba4882cf04c2dc4f7e1ec22d21908365af7a860de466
+  data.tar.gz: 01cc82ce6c960d11af9199fa142334de736b7957fd8b30dd81a95822964bca64
 SHA512:
-  metadata.gz: 7cb9f6727a83a476cc4380851d88d54c46e5d78ab921342a2122f67a7d58789c6888c7a2d487a14072c75335a6e82819351a6de3332ae8597b923b8ba1645504
-  data.tar.gz: ff391767bdf4426a379cd4c53eeba0013fdf3bc8d900b47f2849c8478a17b8a67b4bde0bd26987606bbbcefecd59cfa54b9b0bce9083364e8b6af9ed07d44ef8
+  metadata.gz: c9c061d3055fdf6d84d81699a53e653e67bb42f6162dd4c27eac31e473d145e9cb14268cbe886114ba781428aafd179be2ea9449ba7b9e79ddbc4c2dfd3f6734
+  data.tar.gz: 708873a0ad5ab828bb8615d211b41d5a80cab0af1e4b7a985be167ef61267a6eba1add3f63b059677c5c9c212a31c891739c7200ab321b64e32bb2e0c9d8655b

data/declarative_authorization.gemspec

@@ -19,5 +19,5 @@ Gem::Specification.new do |spec|
   spec.metadata['allowed_push_host'] = 'https://rubygems.org'
 
   spec.add_dependency('blockenspiel', ['>= 0.5', '< 1'])
-  spec.add_dependency('rails', ['>= 6.1', '< 7.2'])
+  spec.add_dependency('rails', ['>= 6.1', '< 7.3'])
 end

data/lib/declarative_authorization/version.rb

@@ -1,3 +1,3 @@
 module DeclarativeAuthorization
-  VERSION = '1.3.0'.freeze
+  VERSION = '1.5.0'.freeze
 end

data/lib/rubocop/cop/decl_auth/before_actions_precede_access_filter.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+module RuboCop
+  module Cop
+    module DeclAuth
+      # Enforces placing all `before_action` statements prior to the first `filter_access_to` statement.
+      # This ensures that any data required by the access filters is available before the filter is applied.
+      # See the documentation above the `filter_access_to` method in Authorization::Controller::DSL for more information
+      #
+      # @example
+      #   # bad
+      #   before_action: :do_something
+      #   filter_access_to :all
+      #   before_action :find_object
+      #
+      #   # good
+      #   before_action: :do_something
+      #   before_action :find_object
+      #
+      #   filter_access_to :all
+      #
+      class BeforeActionsPrecedeAccessFilter < RuboCop::Cop::Base
+        def_node_search :before_actions, '(send nil? :before_action ...)'
+        def_node_search :access_filters, '(send nil? :filter_access_to ...)'
+
+        MSG = '`:filter_access_to` statements should be placed after all other `:before_action` statements.'
+
+        def on_class(node)
+          before_actions = before_actions(node)
+          access_filters = access_filters(node)
+
+          return if before_actions.count.zero? || access_filters.count.zero?
+
+          last_before_action = before_actions.to_a.last
+          first_access_filter = access_filters.to_a.first
+
+          return if last_before_action.sibling_index < first_access_filter.sibling_index
+
+          add_offense(access_filters.first, message: MSG)
+        end
+      end
+    end
+  end
+end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: ae_declarative_authorization
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 1.5.0
 platform: ruby
 authors:
 - AppFolio
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-02-29 00:00:00.000000000 Z
+date: 2025-01-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: blockenspiel
@@ -39,7 +38,7 @@ dependencies:
         version: '6.1'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7.2'
+        version: '7.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -49,7 +48,7 @@ dependencies:
         version: '6.1'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7.2'
+        version: '7.3'
 description: Rails gem for maintainable authorization based on readable authorization
   rules.
 email: opensource@appfolio.com
@@ -77,13 +76,13 @@ files:
 - lib/generators/authorization/install/install_generator.rb
 - lib/generators/authorization/rules/rules_generator.rb
 - lib/generators/authorization/rules/templates/authorization_rules.rb
+- lib/rubocop/cop/decl_auth/before_actions_precede_access_filter.rb
 - lib/tasks/authorization_tasks.rake
 homepage: https://github.com/appfolio/ae_declarative_authorization
 licenses:
 - MIT
 metadata:
   allowed_push_host: https://rubygems.org
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -98,8 +97,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.3
-signing_key:
+rubygems_version: 3.6.3
 specification_version: 4
 summary: Rails gem for maintainable authorization based on readable authorization
   rules.