arsecurity 0.1.0 → 0.1.1

data/CHANGELOG

@@ -1,3 +1,7 @@
+Changes in version 0.1.1 (2009-03-28)
+-------------------------------------
+fix missing of require
+
 Changes in version 0.1.0 (2009-03-16)
 -------------------------------------
 initial release

data/Rakefile

@@ -1,7 +1,7 @@
 require 'rubygems'
 require 'rake/gempackagetask'
 PKG_NAME = "arsecurity"
-PKG_VERSION = "0.1.0"
+PKG_VERSION = "0.1.1"
 PKG_FILE_NAME = "#{PKG_NAME}-#{PKG_VERSION}"
 PKG_FILES = FileList[
   '[A-Z]*',

data/lib/arsecurity.rb

@@ -1,4 +1,5 @@
 require 'rinterceptor'
+require 'arsecurity_util'
 module Arsecurity
   CREATE = 'create'
   READ = 'read'

data/lib/arsecurity_default.rb

@@ -1,5 +1,5 @@
-
-
+require 'arsecurity'
+require 'arsecurity_handler'
 module ArsecurityDefault
   #value can be regexp, symbol or string
   CLASS_READ_METHOD = ["find_every", "count"]
@@ -22,6 +22,14 @@ end
 
 class DefaultArsecurityHandler < ArsecurityHandler
   class << self
+    #for customize logic, such as for administrator
+    def accept?
+      false
+    end
+    #for customize logic, such as for time restriction
+    def reject?
+      false
+    end
     def get_conditions(invocation)
       case invocation.method
         when *ArsecurityDefault::CLASS_READ_METHOD

data/lib/arsecurity_permission.rb

@@ -1,8 +1,8 @@
 class ArsecurityPermission
-  attr_accessor :type, :method, :instance_condition, :sql_condition
+  attr_accessor :target_class_name, :operation, :instance_condition, :sql_condition
   def initialize(permission)
-    @type = permission[:type]
-    @method = permission[:method]
+    @target_class_name = permission[:target_class_name]
+    @operation = permission[:operation]
     @instance_condition = permission[:instance_condition]
     @sql_condition = permission[:sql_condition]
   end

data/lib/arsecurity_util.rb

@@ -1,25 +1,25 @@
 class ArsecurityUtil
   class << self
     attr_accessor :handler
-    def authorized?(method, type, instance, invocation)
+    def authorized?(operation, target_class_name, instance, invocation)
       return true if handler.accept?
       return false if handler.reject?
       result = false
       permissions = handler.permissions
       
       unless permissions.nil? || permissions.empty?
-        result = check_permissions(permissions, method, type, instance, invocation)
+        result = check_permissions(permissions, operation, target_class_name, instance, invocation)
       end
       result
     end
 
-    def check_permissions(permissions, method, type, instance, invocation)
+    def check_permissions(permissions, operation, target_class_name, instance, invocation)
       
       permissions.each do |permission|
         permission = ArsecurityPermission.new(permission) if permission.is_a?(Hash)
-        next if permission.type != type
-        unless permission.method.nil?
-          next if permission.method != method
+        next if permission.target_class_name != target_class_name
+        unless permission.operation.nil?
+          next if permission.operation != operation
         end
         #instance not nil mean persist
         
@@ -27,7 +27,7 @@ class ArsecurityUtil
           if  permission.instance_condition.nil? || permission.instance_condition.empty?
             return true
           else
-            result = ERB.new("<% result =  (#{permission.instance_condition}) ? true : false %><%= result %>").result(permission.send(:binding))
+            result = ERB.new("<% result =  (#{permission.instance_condition}) ? true : false %><%= result %>").result(instance.send(:binding))
             return true if result == 'true'
           end
         else
@@ -63,17 +63,17 @@ class ArsecurityUtil
       false
     end 
     
-    def has_permission(permission, method, type, instance)
-      return false if permission.type != type
+    def has_permission(permission, operation, target_class_name, instance)
+      return false if permission.target_class_name != target_class_name
       
-      unless permission.method.nil?
-        return false if permission.method != method
+      unless permission.operation.nil?
+        return false if permission.operation != operation
       end
       
       if permission.instance_condition.blank?
         return true      
       else
-        result = ERB.new("<% result =  (#{permission.instance_condition}) ? true : false %><%= result %>").result(permission.send(:binding))
+        result = ERB.new("<% result =  (#{permission.instance_condition}) ? true : false %><%= result %>").result(instance.send(:binding))
         return result == 'true'
       end
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: arsecurity
 version: !ruby/object:Gem::Version 
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors: 
 - Leon Li
@@ -9,7 +9,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2009-03-17 00:00:00 +08:00
+date: 2009-03-28 00:00:00 +08:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency