avo 2.21.3.pre.pr1489 → 2.22.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4d211e0aa9d5c3fe3f6a510f52911b5e7d24ea5963461da0f5b16a3c1feb39d7
-  data.tar.gz: 3fa4657c6abef8ce2dcf47f162337e4aa4595b4157c0b030a5569015914821ca
+  metadata.gz: a08f250c3df5118c161cb76f4aeb79082a1e472c833db780873077fc98563293
+  data.tar.gz: 0261dc8b5aa277264c3ae3e70706b11347669fc20cd9c606a4c89179589195eb
 SHA512:
-  metadata.gz: e1ce52d940902fcc78fc1303575742e25be9d8ac17985423a4a706dc38d44e3c72ebbe26acdea2dbc8cac24ae229eb43555da51cc62acb76c2b0cf33ab398719
-  data.tar.gz: a13952382661e3411c297507a5c4f950edfbe885ade1fb9dfffe308b0cc8134449642c78d6e22417f1d1e3aed66b97dc524d438c5007a3e6b9f7a04ff88a1e80
+  metadata.gz: 5f3e9b443058e4d1649539857d878672f396ec1e1716b6ecfd44b2eba3ffae8953027e3bcafb84fdc96dd8caa737826d34032df9b63198f54d754e28e3878710
+  data.tar.gz: 83e60548283c659a4e311454bbb0779eafa61049a7785834b512d808954c9a49debe6bdedbe67cd7faa66d0cba555978c583ba7a425d550b818b507cbac2684e

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    avo (2.21.3.pre.pr1489)
+    avo (2.22.0)
       actionview (>= 6.0)
       active_link_to
       activerecord (>= 6.0)
@@ -230,7 +230,7 @@ GEM
     listen (3.7.1)
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
-    loofah (2.19.0)
+    loofah (2.19.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
@@ -259,10 +259,10 @@ GEM
       net-protocol
       timeout
     nio4r (2.5.8)
-    nokogiri (1.13.9)
+    nokogiri (1.13.10)
       mini_portile2 (~> 2.8.0)
       racc (~> 1.4)
-    nokogiri (1.13.9-x86_64-linux)
+    nokogiri (1.13.10-x86_64-linux)
       racc (~> 1.4)
     orm_adapter (0.5.0)
     pagy (5.10.1)
@@ -276,7 +276,7 @@ GEM
       nio4r (~> 2.0)
     pundit (2.2.0)
       activesupport (>= 3.0.0)
-    racc (1.6.0)
+    racc (1.6.1)
     rack (2.2.4)
     rack-test (2.0.2)
       rack (>= 1.3)
@@ -302,8 +302,8 @@ GEM
     rails-dom-testing (2.0.3)
       activesupport (>= 4.2.0)
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.4.3)
-      loofah (~> 2.3)
+    rails-html-sanitizer (1.4.4)
+      loofah (~> 2.19, >= 2.19.1)
     rails-i18n (7.0.5)
       i18n (>= 0.7, < 2)
       railties (>= 6.0.0, < 8)

data/app/controllers/avo/application_controller.rb

@@ -259,7 +259,7 @@ module Avo
     end
 
     def render_unauthorized(_exception)
-      flash.now[:notice] = t "avo.not_authorized"
+      flash[:notice] = t "avo.not_authorized"
 
       redirect_url = if request.referrer.blank? || (request.referrer == request.url)
         root_url

data/app/controllers/avo/dashboards_controller.rb

@@ -13,6 +13,9 @@ module Avo
     def set_dashboard
       @dashboard = Avo::App.get_dashboard_by_id params[:id]
 
+      authorized = Avo::Hosts::BaseHost.new(block: @dashboard.authorize).handle
+      raise Avo::NotAuthorizedError.new if !authorized
+
       raise ActionController::RoutingError.new("Not Found") if @dashboard.nil? || @dashboard.is_hidden?
     end
   end

data/avo.gemspec

@@ -27,7 +27,7 @@ Gem::Specification.new do |spec|
       "public gem pushes."
   end
 
-  spec.required_ruby_version = ">= 2.4.0"
+  spec.required_ruby_version = ">= 2.6.0"
   spec.post_install_message = "Thank you for using Avo 💪  Docs are available at https://docs.avohq.io"
 
   spec.files = Dir["{bin,app,config,db,lib,public}/**/*", "MIT-LICENSE", "Rakefile", "README.md", "avo.gemspec", "Gemfile", "Gemfile.lock"]

data/lib/avo/dashboards/base_dashboard.rb

@@ -10,6 +10,7 @@ module Avo
       class_attribute :grid_cols, default: 3
       class_attribute :visible, default: true
       class_attribute :index, default: 0
+      class_attribute :authorize, default: -> { true }
 
       class << self
         def options_deprecation_message

data/lib/avo/services/authorization_service.rb

@@ -29,7 +29,6 @@ module Avo
 
         def authorize(user, record, action, policy_class: nil, **args)
           return true if skip_authorization
-          return true if user.nil?
 
           client.authorize user, record, action, policy_class: policy_class
 
@@ -64,7 +63,7 @@ module Avo
         end
 
         def apply_policy(user, model, policy_class: nil)
-          return model if skip_authorization || user.nil?
+          return model if skip_authorization
 
           client.apply_policy(user, model, policy_class: policy_class)
         rescue NoPolicyError => error

data/lib/avo/version.rb

@@ -1,3 +1,3 @@
 module Avo
-  VERSION = "2.21.3.pre.pr1489" unless const_defined?(:VERSION)
+  VERSION = "2.22.0" unless const_defined?(:VERSION)
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: avo
 version: !ruby/object:Gem::Version
-  version: 2.21.3.pre.pr1489
+  version: 2.22.0
 platform: ruby
 authors:
 - Adrian Marin
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-12-14 00:00:00.000000000 Z
+date: 2022-12-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activerecord
@@ -1694,7 +1694,6 @@ files:
 - config/credentials.yml.enc
 - config/i18n-tasks.yml
 - config/initializers/pagy.rb
-- config/master.key
 - config/routes.rb
 - config/spring.rb
 - db/factories.rb
@@ -1947,12 +1946,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.4.0
+      version: 2.6.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubygems_version: 3.3.3
 signing_key: 

data/config/master.key

@@ -1 +0,0 @@
-2aeb23d82b909d9c6b5abb62f7058c2a