bali 6.0.0rc2 → 6.0.0rc3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dc092b862d79cc3506ac33a12c09c11a7d79b9b9c91c6a3116b8e6f2d3217288
-  data.tar.gz: b8ee30857224a08cece951ccd5e615d62c2fc1b5888ac9ec77548736c859278d
+  metadata.gz: 0e9334cb26b9dabfd0fea90717a16aa2963086c7b15c25bb1119df0da7b52fc6
+  data.tar.gz: e909e2291baeade6fb075d8280d1f3e82bbeb7254bcff845b4242667d7b4c8a0
 SHA512:
-  metadata.gz: 7379abef2d029101733e7a7dcb1f4d1718adc07f40cb99f5df4e3ac4ec18ccfd8d5e64c6bbd091527186d9cd7b6ef3d17129c02afc46eaffce1e482ed049bc37
-  data.tar.gz: a5908ad1de7f4882eab302e17aab0c13f478bf2f665a43043ff1a62fdb3e7c99f1d41ecd62d6d17a5474f5a787a5efecbf1b4d5dede94d21d324c9ed2f5c1af9
+  metadata.gz: 2bab74fcaeb2feca9d4062c939f7c56e41f21becf949e2ce0065c704463d1b07af034bb058c602ef0d2e9c365074b03b171c50ca35297d863a8da71445164c55
+  data.tar.gz: db8d79a694289e8c59f25c8008ac0c9230b46d40bdea30b6cf15477fa66cf8394f07f8d442fc35c154a31a78b4a7725dda12f6ef67aacfa88dc777306364783a

data/.gitignore

@@ -7,10 +7,12 @@
 /pkg/
 /spec/reports/
 /tmp/
+/spec/test_app/tmp
 
 *.swp
 *.swo
 *.gemspec
 *.gem
+*.log
 
 plugins

data/.travis.yml

@@ -1,4 +1,46 @@
 language: ruby
+
+env:
+  global:
+    - CC_TEST_REPORTER_ID=76cedf4d3aa437009b269ff68b901102ca24baeb46245eb94fca42e21bba20a7
+
 rvm:
-  - 2.2.2
-before_install: gem install bundler -v 1.10.6
+ - 2.6.5
+
+before_install:
+  - curl -L https://codeclimate.com/downloads/test-reporter/test-reporter-latest-linux-amd64 > ./cc-test-reporter
+  - chmod +x ./cc-test-reporter
+  - ./cc-test-reporter before-build
+  - sudo apt update -qq
+  - gem i bundler -v '<2'
+
+cache: bundler
+
+script:
+  - bundle exec rspec
+
+after_script:
+  - ./cc-test-reporter after-build --exit-code $TRAVIS_TEST_RESULT
+
+matrix:
+  include:
+    - rvm: 2.7.0
+      gemfile: gemfiles/Gemfile-rails.6.0.x
+    - rvm: 2.6.3
+      gemfile: gemfiles/Gemfile-rails.6.0.x
+    - rvm: 2.6.3
+      gemfile: gemfiles/Gemfile-rails.5.2.x
+    - rvm: 2.4.4
+      gemfile: gemfiles/Gemfile-rails.5.2.x
+    - rvm: 2.6.3
+      gemfile: gemfiles/Gemfile-rails.5.1.x
+    - rvm: 2.6.3
+      gemfile: gemfiles/Gemfile-rails.5.0.x
+    - rvm: 2.4.4
+      gemfile: gemfiles/Gemfile-rails.5.0.x
+    - rvm: ruby-head
+      gemfile: gemfiles/Gemfile-rails.edge
+
+  allow_failures:
+    - rvm: ruby-head
+    - gemfile: gemfiles/Gemfile-rails.edge

data/gemfiles/Gemfile-rails.5.0.x

@@ -0,0 +1,7 @@
+source 'https://rubygems.org'
+
+gemspec path: '..'
+
+gem 'rails', '~> 5.0.0'
+gem 'rspec-rails', '~> 3.9'
+gem 'sqlite3', '< 1.4'

data/gemfiles/Gemfile-rails.5.1.x

@@ -0,0 +1,6 @@
+source 'https://rubygems.org'
+
+gemspec path: '..'
+
+gem 'rails', '~> 5.1.0'
+gem 'rspec-rails', '~> 3.9'

data/gemfiles/Gemfile-rails.5.2.x

@@ -0,0 +1,6 @@
+source 'https://rubygems.org'
+
+gemspec path: '..'
+
+gem 'rails', git: 'https://github.com/rails/rails', branch: '5-2-stable'
+gem 'rspec-rails', '~> 3.9'

data/gemfiles/Gemfile-rails.6.0.x

@@ -0,0 +1,5 @@
+source 'https://rubygems.org'
+
+gemspec path: '..'
+
+gem 'rails', '~> 6.0.0'

data/gemfiles/Gemfile-rails.edge

@@ -0,0 +1,14 @@
+source 'https://rubygems.org'
+
+gemspec path: '..'
+
+git_source(:github) do |repo_name|
+  repo_name = "#{repo_name}/#{repo_name}" unless repo_name.include?("/")
+  "https://github.com/#{repo_name}.git"
+end
+
+github 'rails/rails' do
+  gem 'rails'
+end
+
+gem 'rspec-rails', '~> 4.0'

data/lib/bali.rb

@@ -11,6 +11,7 @@ require "zeitwerk"
 loader = Zeitwerk::Loader.for_gem
 loader.ignore("#{__dir__}/generators")
 loader.ignore("#{__dir__}/bali/rails")
+loader.ignore("#{__dir__}/bali/rspec")
 loader.setup
 
 module Bali
@@ -30,6 +31,14 @@ module Bali
     require "bali/rails/action_view"
     require "bali/rails/active_record"
   end
+
+  if defined? RSpec
+    begin
+      require "rspec/matchers"
+      require "bali/rspec/able_to_matcher"
+    rescue LoadError => e
+    end
+  end
 end
 
 loader.eager_load

data/lib/bali/judge.rb

@@ -79,10 +79,6 @@ class Bali::Judge
   def judgement
     judgement = natural_value if no_rule_group?
 
-    if judgement.nil? && rule.nil? && may_have_reservation?
-      judgement = cross_check_reverse_value(cross_check_judge.judgement)
-    end
-
     if judgement.nil? && rule.nil?
       cross_check_value = nil
       # default if can? for undefined rule is false, after related clause
@@ -99,7 +95,7 @@ class Bali::Judge
           # give chance to check at others block
           @rule = otherly_rule
         else
-          judgement = cross_check_reverse_value(cross_check_value)
+          judgement = reverse_value(cross_check_value)
         end
       end
     end
@@ -176,12 +172,13 @@ class Bali::Judge
       term == :cant ? DEFINITE_TRUE : DEFINITE_FALSE
     end
 
-    # returns true if we need to check rule that can overwrite
-    # the most powerful rule defined
-    def may_have_reservation?
-      term == :cant ?
-        (rule_group && rule_group.cant_all?) :
-        (rule_group && rule_group.can_all?)
+    def reverse_value(value)
+      case value
+      when DEFINITE_TRUE then DEFINITE_FALSE
+      when DEFINITE_FALSE then DEFINITE_TRUE
+      when FUZY_FALSE then FUZY_TRUE
+      when FUZY_TRUE then FUZY_FALSE
+      end
     end
 
     def evaluate(rule, actor, record)
@@ -195,15 +192,6 @@ class Bali::Judge
       evaluation ? DEFINITE_TRUE : DEFINITE_FALSE
     end
 
-    def cross_check_reverse_value(cross_check_value)
-      case cross_check_value
-      when DEFINITE_TRUE then DEFINITE_FALSE
-      when DEFINITE_FALSE then DEFINITE_TRUE
-      when FUZY_FALSE then FUZY_TRUE
-      when FUZY_TRUE then FUZY_FALSE
-      end
-    end
-
     def deduce_by_evaluation
       return unless rule
 
@@ -216,9 +204,9 @@ class Bali::Judge
       return unless rule_group
 
       if rule_group.can_all?
-        term == :cant ? DEFINITE_FALSE : DEFINITE_TRUE
+        reverse_value(natural_value)
       elsif rule_group.cant_all?
-        term == :cant ? DEFINITE_TRUE : DEFINITE_FALSE
+        natural_value
       end
     end
 

data/lib/bali/printer.rb

@@ -2,17 +2,37 @@ require "stringio"
 require "date"
 
 # module that would allow all defined rules to be printed for check
-module Bali::Printer
-  module_function
+class Bali::Printer
+  include Singleton
 
   SEPARATOR = " " * 6
   SUBTARGET_TITLE_SEPARATOR = SEPARATOR + ("-" * 80) + "\n"
 
-  def pretty_print
+  def self.printable
+    instance.printable
+  end
+
+  def self.pretty_print
+    printable
+  end
+
+  def load_rule_classes
+    return unless Bali.config.rules_path.present?
+
+    Dir["#{Bali.config.rules_path}/**/*.rb"].each do |rule_class_path|
+      require rule_class_path
+    end
+  rescue LoadError
+    # ignore
+  end
+
+  def printable
+    load_rule_classes
     output = StringIO.new
 
     # build up the string for pretty printing rules
     rule_classes = ObjectSpace.each_object(Class).select { |cls| cls < Bali::Rules }
+    rule_classes.sort! { |a, b| a.to_s <=> b.to_s }
     rule_classes.each do |rule_class|
       output << "===== #{rule_class.model_class} =====\n\n"
 

data/lib/bali/rails/action_controller.rb

@@ -5,4 +5,10 @@ require 'active_support/lazy_load_hooks'
 ActiveSupport.on_load :action_controller do
   require "bali"
   ::ActionController::Base.send :include, Bali::Statics::Authorizer
+  ::ActionController::Base.send :include, Bali::Statics::ScopeRuler
+
+  if defined? ::ActionController::API
+    ::ActionController::API.send :include, Bali::Statics::Authorizer
+    ::ActionController::API.send :include, Bali::Statics::ScopeRuler
+  end
 end

data/lib/bali/rails/action_view.rb

@@ -5,4 +5,5 @@ require 'active_support/lazy_load_hooks'
 ActiveSupport.on_load :action_view do
   require "bali"
   ::ActionView::Base.send :include, Bali::Statics::Authorizer
+  ::ActionView::Base.send :include, Bali::Statics::ScopeRuler
 end

data/lib/bali/rails/active_record.rb

@@ -4,7 +4,5 @@ require 'active_support/lazy_load_hooks'
 
 ActiveSupport.on_load :active_record do
   require "bali"
-  ::ActiveRecord::Base.send :include, Bali::Authorizer
-  ::ActiveRecord::Base.send :extend, Bali::Statics::Authorizer
   ::ActiveRecord::Base.send :extend, Bali::Statics::ActiveRecord
 end

data/lib/bali/role.rb

@@ -5,8 +5,15 @@ class Bali::Role
     DEFAULT_ALLOW = :default_allow
   ].freeze
 
+  IDENTIFIER_CLASSES = [
+    String,
+    Symbol,
+    NilClass,
+  ].freeze
+
   attr_accessor :name
   attr_accessor :cans, :cants
+  attr_reader :scope
 
   attr_accessor :can_all
   alias :can_all? :can_all
@@ -15,7 +22,7 @@ class Bali::Role
 
   def self.formalize(object)
     case object
-    when String, Symbol, NilClass then [object]
+    when *IDENTIFIER_CLASSES then [object]
     when Array then object
     else formalize(extract_roles_from_object(object))
     end
@@ -30,7 +37,7 @@ class Bali::Role
   end
 
   def initialize(name)
-    @name = name&.to_sym
+    @name = name.to_sym if name
     @right_level = INHERIT
 
     @cans = {}
@@ -45,19 +52,42 @@ class Bali::Role
     right_level == DEFAULT_DENY
   end
 
-  def can_all=(bool)
-    case bool
-    when true then @right_level = DEFAULT_ALLOW
-    else @right_level = DEFAULT_DENY
+  ##### DSL METHODS
+  def can(*args, &block)
+    add :can, *args, block
+  end
+
+  def cant(*args, &block)
+    add :cant, *args, block
+  end
+
+  def can_all
+    @right_level = DEFAULT_ALLOW
+  end
+
+  def cant_all
+    @right_level = DEFAULT_DENY
+  end
+
+  def scope(&block)
+    return @scope unless block_given?
+
+    raise Bali::DslError, "Block can't be scoped inside a role" if name
+    @scope = block
+  end
+
+  def add(term, *operations, block)
+    operations.each do |operation|
+      rule = Bali::Rule.new(term, operation)
+      rule.conditional = block if block
+      self << rule
     end
   end
+  ##### DSL METHODS
 
   def << rule
-    # operation cant be defined twice
     operation = rule.operation.to_sym
 
-    return if cants[operation] && cans[operation]
-
     if rule.term == :cant
       cants[operation] = rule
       cans.delete operation

data/lib/bali/rspec/able_to_matcher.rb

@@ -0,0 +1,39 @@
+module RSpec
+  module Matchers
+    module BuiltIn
+      class AbleToMatcher < Be
+        def initialize(operation, class_or_record = nil)
+          @operation = operation
+          @class_or_record = class_or_record
+        end
+
+        def matches?(actor)
+          if @class_or_record
+            rule_class = "#{@class_or_record.class.name}#{Bali.config.suffix}".constantize
+            rule_class.can?(actor, @operation, @class_or_record)
+          else
+            @class_or_record = actor
+            rule_class = "#{@class_or_record.name}#{Bali.config.suffix}".constantize
+            rule_class.can?(nil, @operation, @class_or_record)
+          end
+        end
+
+        def failure_message
+          "expected to be able to #{@operation}, but actually cannot"
+        end
+
+        def failure_message_when_negated
+          "expected not to be able to #{@operation}, but actually can"
+        end
+
+        def description
+          "be able to #{@operation}"
+        end
+      end
+    end
+
+    def be_able_to(*args)
+      BuiltIn::AbleToMatcher.new(*args)
+    end
+  end
+end

data/lib/bali/ruler.rb

@@ -6,14 +6,14 @@ class Bali::Ruler
   private :model_class
 
   def self.for(record_class)
-    rule_maker_cls_str = "#{record_class}#{Bali.config.suffix}"
-    rule_class = rule_maker_cls_str.safe_constantize
+    rule_class = Bali::Rules.for(record_class)
     rule_class.ruler if rule_class
   end
 
   def initialize(model_class)
     @model_class = model_class
     @roles = {}
+    @roles[nil] = Bali::Role.new(nil)
   end
 
   def << role
@@ -21,6 +21,18 @@ class Bali::Ruler
   end
 
   def [] role
-    @roles[role&.to_sym]
+    symbolized_role = role.to_sym if role
+    @roles[symbolized_role]
+  end
+
+  def find_or_create_role role_name
+    role = self[role_name]
+
+    if role.nil?
+      role = Bali::Role.new(role_name)
+      self << role
+    end
+
+    role
   end
 end

data/lib/bali/rules.rb

@@ -1,17 +1,25 @@
+require "forwardable"
+
 class Bali::Rules
+  extend Bali::Statics::Authorizer
+  extend Bali::Statics::ScopeRuler
+
   class << self
+    extend Forwardable
+
     attr_writer :current_role
     attr_reader :ruler
-  end
 
-  def self.inherited(subcls)
-    # Every rule class has the inherited block even if it's never
-    # used/formally defined, so it's easier to work with or make
-    # assumption/checking on the inherited block. As we treat
-    # rules defined in the inherited scope, as default value,
-    # this decision makes sense.
+    def_delegators :inheritable_role, :scope, :scope
+    def_delegators :inheritable_role, :can, :can
+    def_delegators :inheritable_role, :cant, :cant
+    def_delegators :inheritable_role, :cant_all, :cant_all
+    def_delegators :inheritable_role, :can_all, :can_all
+  end
 
-    subcls.set_role nil
+  def self.for(record_class)
+    rule_maker_cls_str = "#{record_class}#{Bali.config.suffix}"
+    rule_maker_cls_str.safe_constantize
   end
 
   def self.model_class
@@ -21,27 +29,11 @@ class Bali::Rules
     rule_class_maker_str.constantize
   end
 
-  def self.can(*args, &block)
-    add :can, *args, block
-  end
-
-  def self.cant(*args, &block)
-    add :cant, *args, block
-  end
-
-  def self.cant_all(*args)
-    current_role.can_all = false
-  end
-
-  def self.can_all(*args)
-    current_role.can_all = true
-  end
-
-  def self.role(*roles)
-    roles.each do |role|
-      if Symbol === role || String === role || NilClass === role
-        set_role role
-        yield
+  def self.role(*role_names, &block)
+    role_names.each do |role_name|
+      if Bali::Role::IDENTIFIER_CLASSES.include?(role_name.class)
+        role = ruler.find_or_create_role role_name
+        role.instance_eval(&block)
       else
         raise Bali::DslError, "Cannot define role using #{param.class}. " +
           "Please use either a Symbol, a String or nil"
@@ -49,26 +41,11 @@ class Bali::Rules
     end
   end
 
-  def self.current_role
-    @current_role ||= set_role nil
-  end
-
   def self.ruler
     @ruler ||= Bali::Ruler.new(model_class)
   end
 
-  def self.set_role(role)
-    role = ruler[role] || Bali::Role.new(role)
-    ruler << role
-    @current_role = role
+  def self.inheritable_role
+    ruler[nil]
   end
-
-  def self.add(term, *operations, block)
-    operations.each do |operation|
-      rule = Bali::Rule.new(term, operation)
-      rule.conditional = block if block
-      current_role << rule
-    end
-  end
-
 end

data/lib/bali/statics/authorizer.rb

@@ -1,9 +1,61 @@
 module Bali::Statics::Authorizer
-  def can?(actor_or_roles, operation, record = self)
-    Bali::Judge.check(:can, actor_or_roles, operation, record)
+  module HelperFunctions
+    extend self
+
+    def not_true_actor?(actor)
+      Symbol === actor || String === actor
+    end
+
+    def find_actor(actor, operation, record = nil)
+      return actor unless not_true_actor?(actor)
+    end
+
+    def find_operation(actor, operation, record = nil)
+      not_true_actor?(actor) ?
+        actor :
+        operation
+    end
+
+    def find_record(actor, operation, record = nil)
+      if not_true_actor?(actor) && record.nil?
+        operation
+      elsif actor.is_a?(ActiveRecord::Base) && record.nil?
+        actor.class
+      else
+        record
+      end
+    end
+
+    def determine_model_class!(obj, arg1, arg2, arg3)
+      if arg2.nil? && arg3.nil? && !obj.respond_to?(:model_class)
+        raise Bali::Error, "Cannot perform checking when the actor is not known"
+      end
+      arg3 = obj.model_class if (arg2.nil? || arg1.nil?) && arg3.nil?
+      arg3
+    end
+
+    def check(term, obj, arg1, arg2, arg3)
+      # try to infer current user if only passing one arg
+      if arg2.nil? && arg3.nil? && obj.respond_to?(:current_user)
+        arg2 = arg1
+        arg1 = obj.current_user
+      end
+
+      arg3 = HelperFunctions.determine_model_class! obj, arg1, arg2, arg3
+
+      actor = HelperFunctions.find_actor(arg1, arg2, arg3)
+      operation = HelperFunctions.find_operation(arg1, arg2, arg3)
+      record = HelperFunctions.find_record(arg1, arg2, arg3)
+
+      Bali::Judge.check(term, actor, operation, record)
+    end
+  end
+
+  def can?(arg1, arg2 = nil, arg3 = nil)
+    HelperFunctions.check(:can, self, arg1, arg2, arg3)
   end
 
-  def cant?(actor_or_roles, operation, record = self)
-    Bali::Judge.check(:cant, actor_or_roles, operation, record)
+  def cant?(arg1, arg2 = nil, arg3 = nil)
+    HelperFunctions.check(:cant, self, arg1, arg2, arg3)
   end
 end

data/lib/bali/statics/scope_ruler.rb

@@ -0,0 +1,39 @@
+module Bali::Statics::ScopeRuler
+  module HelperFunctions
+    extend self
+
+    def extract_data_and_actor(obj, arg1, arg2 = nil)
+      if arg2.nil?
+        data = arg1
+        if obj.respond_to?(:current_user)
+          actor = obj.current_user
+        end
+      else
+        data, actor = arg1, arg2
+      end
+
+      return data, actor
+    end
+
+    def scope_for(relation)
+      rule_class = Bali::Rules.for(relation.model)
+      return unless rule_class
+
+      rule_class.inheritable_role.scope
+    end
+  end
+
+  def rule_scope(arg1, arg2 = nil)
+    data, actor = HelperFunctions.extract_data_and_actor(self, arg1, arg2)
+    return unless data
+
+    scope = HelperFunctions.scope_for(data)
+    scoped_data = case scope.arity
+                  when 0 then scope.call
+                  when 1 then scope.call(data)
+                  when 2 then scope.call(data, actor)
+                  end
+
+    scoped_data || data
+  end
+end

data/lib/bali/tasks/bali/print_rules.rake

@@ -4,6 +4,6 @@ namespace :bali do
     rules_path = Bali.config.rules_path
     Dir.glob("#{rules_path}/**/*.rb").each { |f| load f }
 
-    $stdout.puts Bali::Printer.pretty_print
+    $stdout.puts Bali::Printer.printable
   end
 end

data/lib/bali/version.rb

@@ -1,3 +1,3 @@
 module Bali
-  VERSION = "6.0.0rc2"
+  VERSION = "6.0.0rc3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: bali
 version: !ruby/object:Gem::Version
-  version: 6.0.0rc2
+  version: 6.0.0rc3
 platform: ruby
 authors:
 - Adam Notodikromo
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-04-27 00:00:00.000000000 Z
+date: 2020-05-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: zeitwerk
@@ -73,19 +73,19 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: rspec
+  name: rspec-rails
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - "<="
       - !ruby/object:Gem::Version
-        version: '3.9'
+        version: '4'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - "<="
       - !ruby/object:Gem::Version
-        version: '3.9'
+        version: '4'
 - !ruby/object:Gem::Dependency
   name: pry-byebug
   requirement: !ruby/object:Gem::Requirement
@@ -102,6 +102,20 @@ dependencies:
         version: '0'
 - !ruby/object:Gem::Dependency
   name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: '0.17'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: '0.17'
+- !ruby/object:Gem::Dependency
+  name: sqlite3
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -130,8 +144,12 @@ files:
 - bali.gemspec
 - bin/console
 - bin/setup
+- gemfiles/Gemfile-rails.5.0.x
+- gemfiles/Gemfile-rails.5.1.x
+- gemfiles/Gemfile-rails.5.2.x
+- gemfiles/Gemfile-rails.6.0.x
+- gemfiles/Gemfile-rails.edge
 - lib/bali.rb
-- lib/bali/authorizer.rb
 - lib/bali/config.rb
 - lib/bali/dsl_error.rb
 - lib/bali/error.rb
@@ -142,11 +160,13 @@ files:
 - lib/bali/rails/active_record.rb
 - lib/bali/railtie.rb
 - lib/bali/role.rb
+- lib/bali/rspec/able_to_matcher.rb
 - lib/bali/rule.rb
 - lib/bali/ruler.rb
 - lib/bali/rules.rb
 - lib/bali/statics/active_record.rb
 - lib/bali/statics/authorizer.rb
+- lib/bali/statics/scope_ruler.rb
 - lib/bali/tasks/bali/print_rules.rake
 - lib/bali/version.rb
 - lib/generators/rails/USAGE

data/lib/bali/authorizer.rb

@@ -1,13 +0,0 @@
-module Bali::Authorizer
-  def self.included(base)
-    base.extend Bali::Statics::Authorizer
-  end
-
-  def can?(actor_or_roles, operation = nil)
-    self.class.can?(actor_or_roles, operation, self)
-  end
-
-  def cant?(actor_or_roles, operation = nil)
-    self.class.cant?(actor_or_roles, operation, self)
-  end
-end