bp3-activeadmin 0.1.3 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b4b0eb8b833d37e88ac9189afa80ea055e43a1a60fc49c454e41068f6bd5bb53
-  data.tar.gz: 7ea66416000acc61f3c0af98507947fbfd61f1bd7d72b1c88dc52ceb6e25ed5e
+  metadata.gz: 65ba710517022adea3ee5fcda381918ea3bdf46f7b888682b1f3b13ce6d0ef0f
+  data.tar.gz: 21034d1c5ef08a4cf3fe531148c8563fa402cdb3d8126a8cf35142951c307503
 SHA512:
-  metadata.gz: 3dfa7e6d3fc953a19519eb20177340b47477022baa23801d16ae95e91b977dfeccea61ba795cd8747961a572edffda890b53d9ab4c792cd181a8937a42ea3583
-  data.tar.gz: 5babf2998aa59356cc5a4df687ba2b5b0b22db3978c5337fc2b8e691c899e90802aaa0b23a6d96fd852dc38b0b86cbeb2f83cc96bf421a538f34e45413cbb1c4
+  metadata.gz: c74c7384d5e8c33ee9a24bee1c201c66c3f4dda905a720228da4a6469266dfc9c4e7b3c872f1859a26ed9bb9b5c1247c467200e929b0b27fbb9072d0dee2b977
+  data.tar.gz: 976e099a624f2e5b0697227246bd7b52aa9987146fa3cd2a635b00af129c43e0584e9baa8673ec6ad75e8e767a043ba55b9a049794f7f30f461b362c8869ec91

data/.rubocop.yml

@@ -1,4 +1,4 @@
-require:
+plugins:
   - rubocop-rake
   - rubocop-rspec
 

data/CHANGELOG.md

@@ -1,5 +1,18 @@
 ## [Unreleased]
 
+## [0.2.1] - 2026-10-30
+
+### Security
+
+- Answer `EXPLORE` through `Bp3::Core::Ransackable` on `ActiveAdmin::Comment`, whose own class methods
+  otherwise allowed every column and association to it
+- Require bp3-core 0.4.0, for `Bp3::Core::Ransackable::EXPLORE`
+
+## [0.2.0] - 2026-01-12
+
+- Update activeadmin gem dependency to 4.0.0.beta16
+- Update gems
+
 ## [0.1.3] - 2024-11-18
 
 - Use ruby 3.3.5 and relax gem constraints

data/CLAUDE.md

@@ -0,0 +1,52 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+bp3-activeadmin adapts `activeadmin` (4.x) for BP3 (persuavis/black_phoebe_3), a multi-site multi-tenant
+Rails application. It keeps ActiveAdmin's default filters inside what each model allows ransack to search.
+
+## Commands
+
+The gems run on Ruby 3.4.6 (`.ruby-version`). Prefix commands with `~/.rvm/bin/rvm 3.4.6 do` when the
+shell is not already on it; a missing `rspec` means the wrong Ruby, not a missing bundle.
+
+- `bundle exec rake` - specs and RuboCop (the default task)
+- `bundle exec rspec spec/path/to/file_spec.rb[:LINE]` - one file or example
+- `bundle exec rubocop` / `bundle exec rubocop -a`
+- `bin/setup`, `bin/console`, `rake install`
+
+## Architecture
+
+`lib/bp3/activeadmin/railtie.rb` runs in an `after_initialize` block:
+
+- prepends `PrependResourceExtension` to `ActiveAdmin::Filters::ResourceExtension`, so `default_filters`
+  keeps only the fields in `resource_class.ransackable_fields(auth_object)` (from `Bp3::Core::Ransackable`)
+- `auth_object` is the configured request state class sent the configured method
+- includes `Bp3::Core::Ransackable` in `ActiveAdmin::Comment`
+
+**Configuration** (`lib/bp3/activeadmin.rb`): `Bp3::Activeadmin.global_request_state_class_name` and
+`.global_request_state_method`. The application's `config/initializers/bp3-activeadmin.rb` sets them to
+`'GlobalRequestState'` and `:current_login` (the README's example still shows `:highest_privilege`).
+
+The entry file is `lib/bp3-active_admin.rb`, not `lib/bp3-activeadmin.rb`; Bundler's autorequire finds
+`bp3/activeadmin` instead.
+
+## Testing
+
+The spec only checks the version; the Railtie needs a Rails application with ActiveAdmin to exercise. Try a
+change against the application (black_phoebe_3) by putting this repo's `lib` ahead of the bundled gem.
+
+## Code Style
+
+- RuboCop (`.rubocop.yml`): target Ruby 3.2.2, NewCops, rubocop-rake and rubocop-rspec; AbcSize 26,
+  MethodLength 15, BlockLength 66, ModuleLength 150; `Lint/ConstantDefinitionInBlock` and `Lint/Void`
+  are off for `lib/bp3/**/railtie.rb`, where classes are reopened inside a block
+- Every file starts with `# frozen_string_literal: true`
+- American English; no trailing whitespace on any added or modified line
+
+## Release
+
+Bump `lib/bp3/activeadmin/version.rb` and add a `CHANGELOG.md` entry. `rake release` tags, pushes and
+publishes to rubygems.org; leave releasing and committing to the user.

data/Gemfile.lock

@@ -1,18 +1,18 @@
 PATH
   remote: .
   specs:
-    bp3-activeadmin (0.1.3)
-      activeadmin (>= 3.2.2)
-      activesupport (>= 7.1.2)
-      bp3-core (>= 0.1.0)
+    bp3-activeadmin (0.2.1)
+      activeadmin (>= 4.0.0.beta16)
+      activesupport (~> 8.1)
+      bp3-core (>= 0.4.0)
       bp3-request_state (>= 0.1.0)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    actionpack (8.0.0)
-      actionview (= 8.0.0)
-      activesupport (= 8.0.0)
+    actionpack (8.1.4)
+      actionview (= 8.1.4)
+      activesupport (= 8.1.4)
       nokogiri (>= 1.8.5)
       rack (>= 2.2.4)
       rack-session (>= 1.0.1)
@@ -20,194 +20,213 @@ GEM
       rails-dom-testing (~> 2.2)
       rails-html-sanitizer (~> 1.6)
       useragent (~> 0.16)
-    actionview (8.0.0)
-      activesupport (= 8.0.0)
+    actionview (8.1.4)
+      activesupport (= 8.1.4)
       builder (~> 3.1)
       erubi (~> 1.11)
       rails-dom-testing (~> 2.2)
       rails-html-sanitizer (~> 1.6)
-    activeadmin (3.2.5)
-      arbre (~> 1.2, >= 1.2.1)
+    activeadmin (4.0.0.beta23)
+      arbre (~> 2.0)
       csv
-      formtastic (>= 3.1)
-      formtastic_i18n (>= 0.4)
-      inherited_resources (~> 1.7)
-      jquery-rails (>= 4.2)
+      formtastic (>= 6.0)
+      formtastic_i18n (>= 0.7)
+      inherited_resources (~> 2.0)
       kaminari (>= 1.2.1)
-      railties (>= 6.1)
+      railties (>= 7.2)
       ransack (>= 4.0)
-    activemodel (8.0.0)
-      activesupport (= 8.0.0)
-    activerecord (8.0.0)
-      activemodel (= 8.0.0)
-      activesupport (= 8.0.0)
+    activemodel (8.1.4)
+      activesupport (= 8.1.4)
+    activerecord (8.1.4)
+      activemodel (= 8.1.4)
+      activesupport (= 8.1.4)
       timeout (>= 0.4.0)
-    activesupport (8.0.0)
+    activesupport (8.1.4)
       base64
-      benchmark (>= 0.3)
       bigdecimal
       concurrent-ruby (~> 1.0, >= 1.3.1)
       connection_pool (>= 2.2.5)
       drb
       i18n (>= 1.6, < 2)
+      json
       logger (>= 1.4.2)
       minitest (>= 5.1)
       securerandom (>= 0.3)
       tzinfo (~> 2.0, >= 2.0.5)
       uri (>= 0.13.1)
-    arbre (1.7.0)
-      activesupport (>= 3.0.0)
-      ruby2_keywords (>= 0.0.2)
-    ast (2.4.2)
-    base64 (0.2.0)
-    benchmark (0.4.0)
-    bigdecimal (3.1.8)
-    bp3-core (0.1.5)
-      actionview (>= 7.1.2)
-      activesupport (>= 7.1.2)
-    bp3-request_state (0.1.2)
-      actionpack (>= 7.1.2)
-      activesupport (>= 7.1.2)
+    arbre (2.2.1)
+      activesupport (>= 7.0)
+    ast (2.4.3)
+    base64 (0.3.0)
+    bigdecimal (4.1.3)
+    bp3-core (0.4.0)
+      actionview (~> 8.1)
+      activesupport (~> 8.1)
+      bp3-request_state (~> 0.1)
+    bp3-request_state (0.1.3)
+      actionpack (~> 8.1)
+      activesupport (~> 8.1)
       request_store (>= 1.5.1)
     builder (3.3.0)
-    concurrent-ruby (1.3.4)
-    connection_pool (2.4.1)
-    crass (1.0.6)
-    csv (3.3.0)
-    diff-lcs (1.5.1)
-    drb (2.2.1)
-    erubi (1.13.0)
-    formtastic (5.0.0)
-      actionpack (>= 6.0.0)
+    concurrent-ruby (1.3.8)
+    connection_pool (3.0.2)
+    crass (1.0.8)
+    csv (3.3.7)
+    diff-lcs (1.6.2)
+    drb (2.2.3)
+    erb (6.0.7)
+    erubi (1.13.1)
+    formtastic (6.0.0)
+      actionpack (>= 7.2.0)
     formtastic_i18n (0.7.0)
-    has_scope (0.8.2)
-      actionpack (>= 5.2)
-      activesupport (>= 5.2)
-    i18n (1.14.6)
+    has_scope (0.9.0)
+      actionpack (>= 7.0)
+      activesupport (>= 7.0)
+    i18n (1.15.2)
       concurrent-ruby (~> 1.0)
-    inherited_resources (1.14.0)
-      actionpack (>= 6.0)
+    inherited_resources (2.1.0)
+      actionpack (>= 7.0)
       has_scope (>= 0.6)
-      railties (>= 6.0)
+      railties (>= 7.0)
       responders (>= 2)
-    io-console (0.7.2)
-    irb (1.14.1)
+    io-console (0.9.5)
+    irb (1.18.0)
+      pp (>= 0.6.0)
+      prism (>= 1.3.0)
       rdoc (>= 4.0.0)
       reline (>= 0.4.2)
-    jquery-rails (4.6.0)
-      rails-dom-testing (>= 1, < 3)
-      railties (>= 4.2.0)
-      thor (>= 0.14, < 2.0)
-    json (2.8.2)
-    kaminari (1.2.2)
+    json (3.1.0)
+    kaminari (1.3.2)
       activesupport (>= 4.1.0)
-      kaminari-actionview (= 1.2.2)
-      kaminari-activerecord (= 1.2.2)
-      kaminari-core (= 1.2.2)
-    kaminari-actionview (1.2.2)
+      kaminari-actionview (= 1.3.2)
+      kaminari-activerecord (= 1.3.2)
+      kaminari-core (= 1.3.2)
+    kaminari-actionview (1.3.2)
       actionview
-      kaminari-core (= 1.2.2)
-    kaminari-activerecord (1.2.2)
+      kaminari-core (= 1.3.2)
+    kaminari-activerecord (1.3.2)
       activerecord
-      kaminari-core (= 1.2.2)
-    kaminari-core (1.2.2)
-    language_server-protocol (3.17.0.3)
-    logger (1.6.1)
-    loofah (2.23.1)
+      kaminari-core (= 1.3.2)
+    kaminari-core (1.3.2)
+    language_server-protocol (3.17.0.6)
+    lint_roller (1.1.0)
+    logger (1.7.0)
+    loofah (2.25.2)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
-    minitest (5.25.1)
-    nokogiri (1.16.7-x86_64-darwin)
+    minitest (6.0.6)
+      drb (~> 2.0)
+      prism (~> 1.5)
+    nokogiri (1.19.4-x86_64-darwin)
       racc (~> 1.4)
-    parallel (1.26.3)
-    parser (3.3.6.0)
+    parallel (2.3.0)
+    parser (3.3.13.0)
       ast (~> 2.4.1)
       racc
-    psych (5.2.0)
-      stringio
+    pp (0.6.4)
+      prettyprint
+    prettyprint (0.2.1)
+    prism (1.9.0)
     racc (1.8.1)
-    rack (3.1.8)
-    rack-session (2.0.0)
+    rack (3.2.8)
+    rack-session (2.1.2)
+      base64 (>= 0.1.0)
       rack (>= 3.0.0)
-    rack-test (2.1.0)
+    rack-test (2.3.0)
       rack (>= 1.3)
-    rackup (2.2.1)
+    rackup (2.3.1)
       rack (>= 3)
-    rails-dom-testing (2.2.0)
+    rails-dom-testing (2.3.0)
       activesupport (>= 5.0.0)
       minitest
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.6.0)
-      loofah (~> 2.21)
-      nokogiri (~> 1.14)
-    railties (8.0.0)
-      actionpack (= 8.0.0)
-      activesupport (= 8.0.0)
+    rails-html-sanitizer (1.7.1)
+      loofah (~> 2.25, >= 2.25.2)
+      nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
+    railties (8.1.4)
+      actionpack (= 8.1.4)
+      activesupport (= 8.1.4)
       irb (~> 1.13)
       rackup (>= 1.0.0)
       rake (>= 12.2)
       thor (~> 1.0, >= 1.2.2)
+      tsort (>= 0.2)
       zeitwerk (~> 2.6)
     rainbow (3.1.1)
-    rake (13.2.1)
-    ransack (4.2.1)
-      activerecord (>= 6.1.5)
-      activesupport (>= 6.1.5)
+    rake (13.4.2)
+    ransack (6.0.1)
+      activerecord (>= 7.2)
+      activesupport (>= 7.2)
       i18n
-    rdoc (6.7.0)
-      psych (>= 4.0.0)
-    regexp_parser (2.9.2)
-    reline (0.5.11)
+    rbs (4.2.0)
+      logger
+      prism (>= 1.6.0)
+      tsort
+    rdoc (8.1.0)
+      erb
+      prism (>= 1.6.0)
+      rbs (>= 4.0.0)
+      tsort
+    regexp_parser (2.13.1)
+    reline (0.7.0)
       io-console (~> 0.5)
     request_store (1.7.0)
       rack (>= 1.4)
-    responders (3.1.1)
-      actionpack (>= 5.2)
-      railties (>= 5.2)
-    rspec (3.13.0)
+    responders (3.2.1)
+      actionpack (>= 7.0)
+      railties (>= 7.0)
+    rspec (3.13.2)
       rspec-core (~> 3.13.0)
       rspec-expectations (~> 3.13.0)
       rspec-mocks (~> 3.13.0)
-    rspec-core (3.13.2)
+    rspec-core (3.13.6)
       rspec-support (~> 3.13.0)
-    rspec-expectations (3.13.3)
+    rspec-expectations (3.13.5)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
-    rspec-mocks (3.13.2)
+    rspec-mocks (3.13.8)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
-    rspec-support (3.13.1)
-    rubocop (1.68.0)
-      json (~> 2.3)
-      language_server-protocol (>= 3.17.0)
-      parallel (~> 1.10)
+    rspec-support (3.13.7)
+    rubocop (1.92.2)
+      json (>= 2.3)
+      language_server-protocol (~> 3.17.0.2)
+      lint_roller (~> 1.1.0)
+      parallel (>= 1.10)
       parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
-      regexp_parser (>= 2.4, < 3.0)
-      rubocop-ast (>= 1.32.2, < 2.0)
+      regexp_parser (>= 2.11.3, < 3.0)
+      rubocop-ast (>= 1.49.0, < 2.0)
       ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 2.4.0, < 3.0)
-    rubocop-ast (1.36.1)
-      parser (>= 3.3.1.0)
-    rubocop-rake (0.6.0)
-      rubocop (~> 1.0)
-    rubocop-rspec (3.2.0)
-      rubocop (~> 1.61)
+      unicode-display_width (>= 2.4.0, < 4.0)
+    rubocop-ast (1.50.0)
+      parser (>= 3.3.7.2)
+      prism (~> 1.7)
+    rubocop-rake (0.7.1)
+      lint_roller (~> 1.1)
+      rubocop (>= 1.72.1)
+    rubocop-rspec (3.10.2)
+      lint_roller (~> 1.1)
+      regexp_parser (>= 2.0)
+      rubocop (~> 1.86, >= 1.86.2)
     ruby-progressbar (1.13.0)
-    ruby2_keywords (0.0.5)
-    securerandom (0.3.2)
-    stringio (3.1.2)
-    thor (1.3.2)
-    timeout (0.4.2)
+    securerandom (0.4.1)
+    thor (1.5.0)
+    timeout (0.6.1)
+    tsort (0.2.0)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
-    unicode-display_width (2.6.0)
-    uri (1.0.2)
-    useragent (0.16.10)
-    zeitwerk (2.7.1)
+    unicode-display_width (3.3.0)
+      unicode-emoji (~> 4.3)
+    unicode-emoji (4.3.0)
+    uri (1.1.2)
+    useragent (0.16.11)
+    zeitwerk (2.8.3)
 
 PLATFORMS
   x86_64-darwin-22
+  x86_64-darwin-23
+  x86_64-darwin-24
 
 DEPENDENCIES
   bp3-activeadmin!
@@ -218,4 +237,4 @@ DEPENDENCIES
   rubocop-rspec (>= 2.25)
 
 BUNDLED WITH
-   2.5.17
+   2.7.2

data/bp3-activeadmin.gemspec

@@ -31,9 +31,9 @@ Gem::Specification.new do |spec|
   spec.executables = spec.files.grep(%r{\Aexe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'activeadmin', '>= 3.2.2'
-  spec.add_dependency 'activesupport', '>= 7.1.2'
-  spec.add_dependency 'bp3-core', '>= 0.1.0'
+  spec.add_dependency 'activeadmin', '>= 4.0.0.beta16'
+  spec.add_dependency 'activesupport', '~> 8.1'
+  spec.add_dependency 'bp3-core', '>= 0.4.0'
   spec.add_dependency 'bp3-request_state', '>= 0.1.0'
 
   # spec.add_development_dependency 'bp3-core' # TODO: make this work

data/lib/bp3/activeadmin/railtie.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require 'active_support'
 require 'rails/railtie'
 
 module Bp3
@@ -31,6 +32,20 @@ module Bp3
 
             class Comment
               include Bp3::Core::Ransackable
+
+              # ActiveAdmin defines these on the class itself, which beats anything included, so its
+              # answers stand only for plain ransack and Ransackable still answers EXPLORE
+              def self.ransackable_attributes(auth_object = nil)
+                return super if auth_object == Bp3::Core::Ransackable::EXPLORE
+
+                authorizable_ransackable_attributes
+              end
+
+              def self.ransackable_associations(auth_object = nil)
+                return super if auth_object == Bp3::Core::Ransackable::EXPLORE
+
+                authorizable_ransackable_associations
+              end
             end
           end
         end

data/lib/bp3/activeadmin/version.rb

@@ -2,6 +2,6 @@
 
 module Bp3
   module Activeadmin
-    VERSION = '0.1.3'
+    VERSION = '0.2.1'
   end
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: bp3-activeadmin
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 0.2.1
 platform: ruby
 authors:
 - Wim den Braven
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-11-18 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activeadmin
@@ -16,42 +15,42 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.2
+        version: 4.0.0.beta16
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.2
+        version: 4.0.0.beta16
 - !ruby/object:Gem::Dependency
   name: activesupport
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 7.1.2
+        version: '8.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 7.1.2
+        version: '8.1'
 - !ruby/object:Gem::Dependency
   name: bp3-core
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.1.0
+        version: 0.4.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.1.0
+        version: 0.4.0
 - !ruby/object:Gem::Dependency
   name: bp3-request_state
   requirement: !ruby/object:Gem::Requirement
@@ -136,7 +135,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '2.25'
-description:
 email:
 - wimdenbraven@persuavis.com
 executables: []
@@ -147,6 +145,7 @@ files:
 - ".rubocop.yml"
 - ".yardopts"
 - CHANGELOG.md
+- CLAUDE.md
 - Gemfile
 - Gemfile.lock
 - LICENSE.txt
@@ -167,7 +166,6 @@ metadata:
   source_code_uri: https://github.com/persuavis/bp3-activeadmin
   changelog_uri: https://github.com/persuavis/bp3-activeadmin/blob/main/CHANGELOG.md
   rubygems_mfa_required: 'true'
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -182,8 +180,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.17
-signing_key:
+rubygems_version: 4.0.4
 specification_version: 4
 summary: bp3-activeadmin adapts activeadmin for BP3 (persuavis/black_phoebe_3).
 test_files: []