bootstrap_admin 0.0.18 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: db471f923e62f81baa4449b884b64fd7580bc4a1
-  data.tar.gz: 46a424404f30ea8d28e7f32490a969cfa79f489e
+  metadata.gz: 1c5a7149bdccd86b79ae1b9d28b8120328f2297a
+  data.tar.gz: fa6ed728a44b1ace28761610fe369416d0f44d2f
 SHA512:
-  metadata.gz: 849064a01fb36b2b2671ba51806052f79c0ac26b0b004a06f5f8e4f2926f09572162f4f1782ebc0f20b006c3b06ae81b68cfad4f3ec45573794c67f153cd8511
-  data.tar.gz: f609ff21d9cb80f4495ded9d681c80cd6712ec2e54ff9d633e25bb7c643b9b0aedf36d186a0f9d67a9c82979156e9ca686a381688464b2dd0be7e0008e9eadbc
+  metadata.gz: ef09e63d8c141c469ba603337a66fdbde4d081eb47f57c4b720e2273eadf8399b5e17df16d5f5a549c546d3563411fb5ef57d70ed0d9bd9ae7b20162627d4490
+  data.tar.gz: a300ec7519b19bc2d5722abdb69673dd09d3ff2e464a611a821f5936dbd396479cec94d86a806024a2c05f90e69b267ac70d89a9565993ccc173fe18b1c492f1

data/app/helpers/bootstrap_admin_helper.rb

@@ -216,7 +216,7 @@ module BootstrapAdminHelper
   # =============================================================================
   # @return [String] the model instance name for the current controller
   def model_name_for controller
-    model_for(controller).model_name.underscore
+    model_for(controller).model_name.to_s.underscore
   end
 
   # =============================================================================
@@ -238,16 +238,9 @@ module BootstrapAdminHelper
   def attributes
     return @attributes if @attributes
     model_klass = model_for controller
-
     fields =  bootstrap_admin_config.send("#{params[:action]}_fields")  ||
               bootstrap_admin_config.send("action_fields")              ||
-              model_klass.accessible_attributes.
-                reject(&:blank?).
-                map{|att| real_attribute_name att }.
-                reject do |att| 
-                  att.to_s =~ /(.+)_attributes/ && 
-                  model_klass.reflect_on_all_associations.map(&:name).include?($1.to_sym)
-                end
+              find_attributes_for_class(model_klass)
 
     @attributes = fields.map do |att|
       BootstrapAdmin::Attribute.new att,
@@ -294,4 +287,20 @@ module BootstrapAdminHelper
       end
     end
 
+    # ==============================================================================
+    # Finds attributes for the given model class
+    # @param model_klass [ActiveRecord::Base] The model to get attributes from
+    # @return [Array of Symbol] attributes for the given model
+    def find_attributes_for_class model_klass
+      attributes = BootstrapAdmin.filter_ignored_fields(model_klass.attribute_names)
+
+      attributes.map{|att| real_attribute_name att }.
+                 reject{|att|
+                   att.to_s =~ /(.+)_attributes/ &&
+                   model_klass.reflect_on_all_associations
+                              .map(&:name)
+                              .include?($1.to_sym)
+                 }
+    end
+
 end

data/lib/bootstrap_admin.rb

@@ -55,6 +55,19 @@ module BootstrapAdmin
   @@ui_styles = {
     index: %w(table-bordered table-striped)
   }
+
+  # =============================================================================
+  mattr_accessor :default_ignored_fields
+  @@default_ignored_fields = %i(id created_at updated_at)
+
+  def self.default_ignored_field_symbols
+    @@default_ignored_fields.map(&:to_sym)
+  end
+
+  def self.filter_ignored_fields fields
+    Array(fields).map(&:to_sym) - default_ignored_field_symbols
+  end
+
   # =============================================================================
   # Setup BootstrapAdmin
   # Run rails generate bootstrap_admin:install

data/lib/bootstrap_admin/actions.rb

@@ -28,7 +28,7 @@ module BootstrapAdmin
       # =============================================================================
       # Creates a new item
       def create
-        instance model_class.new(params[model_name])
+        instance model_class.new( find_permitted_fields(:new) )
         instance.save
         namespaced_response instance
       end
@@ -40,7 +40,7 @@ module BootstrapAdmin
       # =============================================================================
       # Updates the existing item
       def update
-        instance.update_attributes params[model_name]
+        instance.update_attributes find_permitted_fields(:update)
         namespaced_response instance
       end
 
@@ -98,7 +98,7 @@ module BootstrapAdmin
             instance_variable_set "@#{collection_name}", collection_var
           else
             unless cvar = instance_variable_get("@#{collection_name}")
-              cvar = model_class.scoped
+              cvar = model_class.default_scoped
               instance_variable_set "@#{collection_name}", cvar
             end
             cvar
@@ -111,6 +111,18 @@ module BootstrapAdmin
           self.class.name.sub("Controller", "").underscore.split('/').last
         end
 
+        # ==============================================================================
+        # Strong Parameters stuff...
+        def find_permitted_fields action_name
+          fields = (
+            send("permitted_#{action_name}_fields") ||
+            send("permitted_fields") ||
+            BootstrapAdmin.filter_ignored_fields( model_class.attribute_names )
+          ).map(&:to_sym)
+
+          params.require(model_name).permit(*fields)
+        end
+
       private
         # =============================================================================
         # Prepares a response using the controllers reponder.

data/lib/bootstrap_admin/controller_config.rb

@@ -24,6 +24,11 @@ module BootstrapAdmin
     alias_method :create_fields, :form_fields
     alias_method :update_fields, :form_fields
 
+    attr_accessor :permitted_new_fields
+    attr_accessor :permitted_update_fields
+    attr_accessor :permitted_search_fields
+    attr_accessor :permitted_fields
+
     # Fields to be used on ALL actions
     # These are used when none of the {action}_fields are defined
     attr_accessor :action_fields

data/lib/bootstrap_admin/responder.rb

@@ -96,11 +96,11 @@ module BootstrapAdmin
       # =============================================================================
       def search_fields resource
         if controller.searchable_fields.blank?
-          accessible  = resource.accessible_attributes.reject &:blank?
-          text_fields = resource.columns.
-                                 select{|c| [:string, :text].include? c.type}.
-                                 map(&:name)
-          text_fields & accessible
+          BootstrapAdmin.filter_ignored_fields(
+            resource.columns.
+                     select{|c| [:string, :text].include? c.type}.
+                     map{|c| c.name.to_sym}
+          )
         else
           controller.searchable_fields
         end

data/lib/bootstrap_admin/version.rb

@@ -1,3 +1,3 @@
 module BootstrapAdmin
-  VERSION = "0.0.18"
+  VERSION = "1.0.0"
 end

data/lib/generators/bootstrap_admin/install/templates/bootstrap_admin.rb

@@ -8,11 +8,20 @@ BootstrapAdmin.setup do |config|
   # ==> Paginator configuration
   # Configure the number of results shown per page by the paginator.
   # Default value: 10
+  #
   # config.paginator_page_size = 10
 
   # ==> UI Styles
   # Configure the css class names that each action wrapper will have
   # Default value: {index: %w(table-bordered table-striped)}
+  #
   # config.ui_styles[:index] << "my_awesome_style_class"
 
+  # ==> Default ignored fields
+  # Define the fields that the automatic view generator should ignore
+  # when building the index view and the new/edit forms.
+  # Default value: %i(id created_at updated_at)
+  #
+  # config.default_ignored_fields += %i(some other fields)
+
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bootstrap_admin
 version: !ruby/object:Gem::Version
-  version: 0.0.18
+  version: 1.0.0
 platform: ruby
 authors:
 - Ivo Jesus
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-07-18 00:00:00.000000000 Z
+date: 2015-07-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails