avo 2.21.2.pre.pr1486 → 2.22.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f5460c088fcdb06944cf17960a56317ca92ce641858d0be2ae930dddbe527bd0
-  data.tar.gz: e2973cb82ccd2a68c857be57bd18a73c45656d340574c00bb135e67ee3c999b0
+  metadata.gz: a08f250c3df5118c161cb76f4aeb79082a1e472c833db780873077fc98563293
+  data.tar.gz: 0261dc8b5aa277264c3ae3e70706b11347669fc20cd9c606a4c89179589195eb
 SHA512:
-  metadata.gz: 47a6063f100b7ba2a49aac977b6d6e6961d75c3af62befac1d3e8de2154c84396021d37cae03cacc74a872f72172c9a506af332e3c2c6b025f2f9ff45f3743c3
-  data.tar.gz: a6112c2759fddc32613f17eba6cf6ae7c3049c0abfb89ce50c314b2cd7f89d5df6b1e743fcf44663fc1f4fcfdc92f85368464ec9a13bb5b29b12b03d5ade27d5
+  metadata.gz: 5f3e9b443058e4d1649539857d878672f396ec1e1716b6ecfd44b2eba3ffae8953027e3bcafb84fdc96dd8caa737826d34032df9b63198f54d754e28e3878710
+  data.tar.gz: 83e60548283c659a4e311454bbb0779eafa61049a7785834b512d808954c9a49debe6bdedbe67cd7faa66d0cba555978c583ba7a425d550b818b507cbac2684e

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    avo (2.21.2.pre.pr1486)
+    avo (2.22.0)
       actionview (>= 6.0)
       active_link_to
       activerecord (>= 6.0)
@@ -230,7 +230,7 @@ GEM
     listen (3.7.1)
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
-    loofah (2.19.0)
+    loofah (2.19.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
@@ -259,10 +259,10 @@ GEM
       net-protocol
       timeout
     nio4r (2.5.8)
-    nokogiri (1.13.9)
+    nokogiri (1.13.10)
       mini_portile2 (~> 2.8.0)
       racc (~> 1.4)
-    nokogiri (1.13.9-x86_64-linux)
+    nokogiri (1.13.10-x86_64-linux)
       racc (~> 1.4)
     orm_adapter (0.5.0)
     pagy (5.10.1)
@@ -276,7 +276,7 @@ GEM
       nio4r (~> 2.0)
     pundit (2.2.0)
       activesupport (>= 3.0.0)
-    racc (1.6.0)
+    racc (1.6.1)
     rack (2.2.4)
     rack-test (2.0.2)
       rack (>= 1.3)
@@ -302,8 +302,8 @@ GEM
     rails-dom-testing (2.0.3)
       activesupport (>= 4.2.0)
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.4.3)
-      loofah (~> 2.3)
+    rails-html-sanitizer (1.4.4)
+      loofah (~> 2.19, >= 2.19.1)
     rails-i18n (7.0.5)
       i18n (>= 0.7, < 2)
       railties (>= 6.0.0, < 8)

data/app/controllers/avo/application_controller.rb

@@ -259,7 +259,7 @@ module Avo
     end
 
     def render_unauthorized(_exception)
-      flash.now[:notice] = t "avo.not_authorized"
+      flash[:notice] = t "avo.not_authorized"
 
       redirect_url = if request.referrer.blank? || (request.referrer == request.url)
         root_url

data/app/controllers/avo/associations_controller.rb

@@ -24,7 +24,7 @@ module Avo
       @parent_model = @parent_resource.class.find_scope.find(params[:id])
       @parent_resource.hydrate(model: @parent_model)
       association_name = BaseResource.valid_association_name(@parent_model, params[:related_name])
-      @query = @authorization.apply_policy @parent_model.send(association_name)
+      @query = @related_authorization.apply_policy @parent_model.send(association_name)
       @association_field = @parent_resource.get_field params[:related_name]
 
       if @association_field.present? && @association_field.scope.present?
@@ -46,7 +46,7 @@ module Avo
       @resource.hydrate(model: @model)
 
       if @field.present? && !@field.searchable
-        query = @authorization.apply_policy @attachment_class
+        query = @related_authorization.apply_policy @attachment_class
 
         # Add the association scope to the query scope
         if @field.attach_scope.present?

data/app/controllers/avo/dashboards_controller.rb

@@ -13,6 +13,9 @@ module Avo
     def set_dashboard
       @dashboard = Avo::App.get_dashboard_by_id params[:id]
 
+      authorized = Avo::Hosts::BaseHost.new(block: @dashboard.authorize).handle
+      raise Avo::NotAuthorizedError.new if !authorized
+
       raise ActionController::RoutingError.new("Not Found") if @dashboard.nil? || @dashboard.is_hidden?
     end
   end

data/avo.gemspec

@@ -27,7 +27,7 @@ Gem::Specification.new do |spec|
       "public gem pushes."
   end
 
-  spec.required_ruby_version = ">= 2.4.0"
+  spec.required_ruby_version = ">= 2.6.0"
   spec.post_install_message = "Thank you for using Avo 💪  Docs are available at https://docs.avohq.io"
 
   spec.files = Dir["{bin,app,config,db,lib,public}/**/*", "MIT-LICENSE", "Rakefile", "README.md", "avo.gemspec", "Gemfile", "Gemfile.lock"]

data/bin/init

@@ -26,6 +26,8 @@ app_root do
 
   header 'Installing Yarn packages'
   run! 'yarn'
+  run! '(cd spec/dummy; yarn)'
+  run! '(cp spec/dummy/.env.test.sample spec/dummy/.env.test)'
 
   if use_docker == 'y'
     header 'Creating the Docker volume'

data/lib/avo/app.rb

@@ -59,10 +59,12 @@ module Avo
 
         # Set the current host for ActiveStorage
         begin
-          if Rails::VERSION::MAJOR === 6
-            ActiveStorage::Current.host = request.base_url
-          elsif Rails::VERSION::MAJOR === 7
-            ActiveStorage::Current.url_options = request.base_url
+          if defined?(ActiveStorage::Current)
+            if Rails::VERSION::MAJOR === 6
+              ActiveStorage::Current.host = request.base_url
+            elsif Rails::VERSION::MAJOR === 7
+              ActiveStorage::Current.url_options = request.base_url
+            end
           end
         rescue => exception
           Rails.logger.debug "[Avo] Failed to set ActiveStorage::Current.url_options, #{exception.inspect}"

data/lib/avo/dashboards/base_dashboard.rb

@@ -10,6 +10,7 @@ module Avo
       class_attribute :grid_cols, default: 3
       class_attribute :visible, default: true
       class_attribute :index, default: 0
+      class_attribute :authorize, default: -> { true }
 
       class << self
         def options_deprecation_message

data/lib/avo/version.rb

@@ -1,3 +1,3 @@
 module Avo
-  VERSION = "2.21.2.pre.pr1486" unless const_defined?(:VERSION)
+  VERSION = "2.22.0" unless const_defined?(:VERSION)
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: avo
 version: !ruby/object:Gem::Version
-  version: 2.21.2.pre.pr1486
+  version: 2.22.0
 platform: ruby
 authors:
 - Adrian Marin
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-12-07 00:00:00.000000000 Z
+date: 2022-12-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activerecord
@@ -1694,7 +1694,6 @@ files:
 - config/credentials.yml.enc
 - config/i18n-tasks.yml
 - config/initializers/pagy.rb
-- config/master.key
 - config/routes.rb
 - config/spring.rb
 - db/factories.rb
@@ -1947,12 +1946,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.4.0
+      version: 2.6.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubygems_version: 3.3.3
 signing_key: 

data/config/master.key

@@ -1 +0,0 @@
-2aeb23d82b909d9c6b5abb62f7058c2a