brisk-bills 0.7.0 → 0.8.1

data/vendor/plugins/active_scaffold/frontends/default/views/_show.html.erb

@@ -1,8 +1,8 @@
-<h4><%= active_scaffold_config.show.label -%></h4>
+<h4><%= active_scaffold_config.show.label(@record.to_label.nil? ? nil : clean_column_value(@record.to_label)) %></h4>
 
 <%= render :partial => 'show_columns', :locals => {:columns => active_scaffold_config.show.columns} -%>
 
 <p class="form-footer">
-  <%= link_to as_(:close), params_for(:controller => params[:parent_controller] ? params[:parent_controller] : params[:controller], :action => 'list'), :class => 'cancel' %>
+  <%= link_to as_(:close), main_path_to_return, :class => 'cancel' %>
   <%= loading_indicator_tag(:action => :create, :id => params[:id]) %>
-</p>
+</p>

data/vendor/plugins/active_scaffold/frontends/default/views/_show_columns.html.erb

@@ -1,11 +1,12 @@
 <dl>
 <% columns.each :for => @record do |column| %>
-  <% if column.is_a? ActiveScaffold::DataStructures::ActionColumns -%>
-    <dt><%= column.name -%></dt>
-    <dd><%= render :partial => 'show_columns' %></dd>
-  <% else -%>
-    <dt><%= column.label -%></dt>
-    <dd><%= show_column_value(@record, column) -%> &nbsp;</dd>
-  <% end -%>
+  <dt><%= column.label -%></dt>
+  <dd<%= " class=\"#{column.name}-view #{column.css_class}\"" unless column.is_a? ActiveScaffold::DataStructures::ActionColumns %>>
+<% if column.is_a? ActiveScaffold::DataStructures::ActionColumns -%>
+    &nbsp;<%= render :partial => 'show_columns', :locals => {:columns => column} %>
+<% else -%>
+    <%= show_column_value(@record, column) %>
+<% end -%>
+  </dd>
 <% end -%>
 </dl>

data/vendor/plugins/active_scaffold/frontends/default/views/_update_actions.html.erb

@@ -1,9 +1,9 @@
 <div class="active-scaffold-header">
   <div class="actions">
-    <% active_scaffold_config.action_links.each :record do |link| -%>
+    <% active_scaffold_config.action_links.each :member do |link| -%>
       <% next unless link.action == 'nested' -%>
-      <% next if controller.respond_to? link.security_method and !controller.send(link.security_method) -%>
-      <%= record.authorized_for?(:action => link.crud_type) ? render_action_link(link, url_options) : "<a class='disabled'>#{link.label}</a>" -%>
+      <% next if skip_action_link(link) -%>
+      <%= record.authorized_for?(:crud_type => link.crud_type, :action => link.action) ? render_action_link(link, url_options, record) : "<a class='disabled'>#{link.label}</a>" -%>
     <% end -%>
   </div>
 </div>

data/vendor/plugins/active_scaffold/frontends/default/views/_update_form.html.erb

@@ -1,6 +1,7 @@
 <% url_options = params_for(:action => :update) -%>
+<% xhr ||= request.xhr? -%>
 <%=
-if request.xhr?
+if xhr
   if active_scaffold_config.update.multipart?  # file_uploads
     form_remote_upload_tag url_options.merge({:iframe => true}),
                            :onsubmit => onsubmit,
@@ -33,17 +34,19 @@ end
 
   <h4><%= @record.to_label.nil? ? active_scaffold_config.update.label : as_(:update_model, :model => clean_column_value(@record.to_label)) %></h4>
 
-  <% if request.xhr? -%>
-    <div id="<%= element_messages_id(:action => :update) %>" class="messages-container"><%= error_messages_for :record, :object_name => @record.class.human_name.downcase %></div>
-  <% else -%>
+  <div id="<%= element_messages_id(:action => :update) %>" class="messages-container">
+<% if request.xhr? -%>
+    <%= error_messages_for :record, :object_name => @record.class.human_name.downcase %>
+<% else -%>
     <%= render :partial => 'form_messages' %>
-  <% end -%>
+<% end -%>
+  </div>
 
   <%= render :partial => 'form', :locals => { :columns => active_scaffold_config.update.columns } %>
 
   <p class="form-footer">
     <%= submit_tag as_(:update), :class => "submit" %>
-    <%= link_to as_(:cancel), params_for(:controller => params[:parent_controller] ? params[:parent_controller] : params[:controller], :action => 'list'), :class => 'cancel' %>
+    <%= link_to as_(:cancel), main_path_to_return, :class => 'cancel' %>
     <%= loading_indicator_tag(:action => :update, :id => params[:id]) %>
   </p>
 

data/vendor/plugins/active_scaffold/frontends/default/views/_vertical_subform.html.erb

@@ -0,0 +1,7 @@
+<div id="<%= sub_form_list_id(:association => column.name) %>">
+  <% associated.each_index do |index| %>
+  <% @record = associated[index] -%>
+  <%= render :partial => 'vertical_subform_record', :locals => {:scope => column_scope(column), :parent_record => parent_record, :column => column, :locked => @record == locked} %>
+  <% end -%>
+</div>
+<%= render :partial => 'form_association_footer', :locals => {:parent_record => parent_record, :column => column, :associated => associated} -%>

data/vendor/plugins/active_scaffold/frontends/default/views/_vertical_subform_record.html.erb

@@ -0,0 +1,38 @@
+<%
+  record_column = column
+  readonly = (@record.readonly? or not @record.authorized_for?(:crud_type => :update))
+  crud_type = @record.new_record? ? :create : (readonly ? :read : :update)
+  show_actions = false
+  config = active_scaffold_config_for(@record.class)
+-%>
+<ol class="association-record <%= 'association-record-new' if @record.new_record? -%> <%= 'locked' if locked -%>">
+<% if @record.errors.count -%>
+  <div class="association-record-errors" id="<%= element_messages_id :action => @record.class.name.underscore, :id => "#{parent_record.id}-#{index}" %>">
+    <%= error_messages_for :record, :object_name => @record.class.human_name.downcase %>
+  </div>
+<% end %>
+<% config.subform.columns.each :for => @record, :crud_type => crud_type, :flatten => true do |column| %>
+<%
+  next unless in_subform?(column, parent_record)
+  show_actions = true
+  column = column.clone
+  column.form_ui ||= :select if column.association
+-%>
+  <li class="form-element <%= 'required' if column.required? %> <%= column.css_class unless column.css_class.nil? %>">
+    <% unless readonly -%>
+      <%= render :partial => form_partial_for_column(column), :locals => { :column => column, :scope => scope } -%>
+    <% else -%>
+      <p><%= get_column_value(@record, column) -%></p>
+    <% end -%>
+  </li>
+<% end -%>
+<% if show_actions -%>
+  <li class="actions">
+    <%= link_to_function as_(:remove), '$(this).up(".association-record").remove()', { :class => "destroy" } if record_column.plural_association? and (@record.authorized_for?(:crud_type => :delete) or not [:destroy, :delete_all].include?(record_column.association.options[:dependent])) %>
+    <% unless @record.new_record? %>
+    <% options = active_scaffold_input_options(config.columns[@record.class.primary_key], scope) -%>
+    <input type="hidden" name="<%= options[:name] -%>" id="<%= options[:id] -%>" value="<%= @record.id -%>" />
+    <% end -%>
+  </li>
+<% end -%>
+</ol>

data/vendor/plugins/active_scaffold/frontends/default/views/add_existing.js.rjs

@@ -1,4 +1,5 @@
 page.insert_html :top, active_scaffold_tbody_id, :partial => 'list_record', :locals => {:record => @record}
+page.replace active_scaffold_calculations_id, :partial => 'list_calculations' if active_scaffold_config.list.columns.any? {|c| c.calculation?}
 page << "ActiveScaffold.stripe($('#{active_scaffold_tbody_id}'))"
 page << "ActiveScaffold.hide_empty_message('#{active_scaffold_tbody_id}','#{empty_message_id}');"
 page << "ActiveScaffold.increment_record_count('#{active_scaffold_id}');"
@@ -13,4 +14,4 @@ if (form_stays_open = true)
   end
 else
   page << "$$('##{element_form_id(:action => :new_existing)} a.cancel').first().link.close();"
-end
+end

data/vendor/plugins/active_scaffold/frontends/default/views/delete.html.erb

@@ -5,7 +5,7 @@
 
       <p class="form-footer">
         <%= submit_tag as_(:delete), :class => 'submit' %>
-        <%= link_to as_(:cancel), params_for(:action => 'index'), :class => 'cancel' %>
+        <%= link_to as_(:cancel), main_path_to_return, :class => 'cancel' %>
       </p>
 
     </form>

data/vendor/plugins/active_scaffold/frontends/default/views/destroy.js.rjs

@@ -1,7 +1,7 @@
 if controller.send(:successful?)
-  page << "$('#{action_link_id((respond_to?(:nested_habtm?) and nested_habtm? and active_scaffold_config.nested.shallow_delete) ? 'destroy_existing' : 'destroy', params[:id])}').action_link.close_previous_adapter();"
+  page << "$('#{action_link_id((respond_to?(:nested_habtm?) and nested_habtm? and active_scaffold_config.nested.shallow_delete) ? 'destroy_existing' : 'delete', params[:id])}').action_link.close_previous_adapter();"
   page.remove element_row_id(:action => 'list', :id => params[:id])
-  page << "ActiveScaffold.reload_if_empty('#{active_scaffold_tbody_id}','#{url_for(params_for(:action => 'update_table', :id => nil, :page => [active_scaffold_config.list.user.page.to_i - 1, 1].max, :escape => false))}');"
+  page << "ActiveScaffold.reload_if_empty('#{active_scaffold_tbody_id}','#{url_for(params_for(:action => :index, :id => nil, :page => [active_scaffold_config.list.user.page.to_i - 1, 1].max, :escape => false))}');"
   page << "ActiveScaffold.stripe('#{active_scaffold_tbody_id}');"
   page << "ActiveScaffold.decrement_record_count('#{active_scaffold_id}');"
   page.replace active_scaffold_calculations_id, :partial => 'list_calculations' if active_scaffold_config.list.columns.any? {|c| c.calculation?}

data/vendor/plugins/active_scaffold/frontends/default/views/edit_associated.js.rjs

@@ -1,15 +1,20 @@
-associated_form = render :partial => 'form_association_record', :locals => {:scope => @scope, :parent_record => @parent_record, :column => @column}
-associated_form = %|<tr class="association-record #{'association-record-new' if @record.new_record?} #{'locked' if @record.new_record? and @column.singular_association?}">#{associated_form}</tr>|
-
-if @column.singular_association?
-  page << %|
-    associated = #{associated_form.to_json};
-    if (current = $$('##{sub_form_list_id(:association => @column.name)} tr.association-record')[0]) {
-      Element.replace(current, associated)
-    } else {
-      new Insertion.Top('#{sub_form_list_id(:association => @column.name)}', associated)
-    }
-  |
-else
-  page.insert_html :bottom, sub_form_list_id(:association => @column.name), associated_form
-end
+associated_form = render :partial => "#{subform_partial_for_column(@column)}_record", :locals => {:scope => @scope, :parent_record => @parent_record, :column => @column, :locked => @record.new_record? && @column.singular_association?}
+
+if @column.singular_association?
+  page << %|
+    associated = #{associated_form.to_json};
+    if (current = $$('##{sub_form_list_id(:association => @column.name)} .association-record')[0]) {
+      Element.replace(current, associated)
+    } else {
+      new Insertion.Top('#{sub_form_list_id(:association => @column.name)}', associated)
+    }
+  |
+else
+  unless @record.new_record?
+    column = active_scaffold_config_for(@record.class).columns[@record.class.primary_key]
+    id = active_scaffold_input_options(column, @scope)[:id]
+    page << "if (!$('#{id}')) {"
+  end
+  page.insert_html :bottom, sub_form_list_id(:association => @column.name), associated_form
+  page << "}" unless @record.new_record?
+end

data/vendor/plugins/active_scaffold/frontends/default/views/list.html.erb

@@ -1,4 +1,4 @@
-<div id="<%= active_scaffold_id -%>" class="active-scaffold active-scaffold-<%= controller_id %> <%= "#{params[:controller]}-view" %> <%= active_scaffold_config.theme %>-theme">
+<div id="<%= active_scaffold_id -%>" class="active-scaffold active-scaffold-<%= controller_id %> <%= controller_class %> <%= active_scaffold_config.theme %>-theme">
   <div class="active-scaffold-header">
     <%= render :partial => 'list_header' %>
   </div>
@@ -7,16 +7,18 @@
       <% if active_scaffold_config.list.always_show_search %>
         <tr>
           <td>
-            <div class="active-scaffold show_search-view <%= "#{params[:controller]}-view" %> view">
+            <div class="active-scaffold show_search-view <%= controller_class %> view">
               <%= render :partial => active_scaffold_config.list.search_partial %>
             </div> 
           </td> 
         </tr>
+      <% else %>
+      <tr><td></td></tr>
       <% end %>
       <% if params[:nested].nil? && active_scaffold_config.list.always_show_create %>
         <tr> 
           <td> 
-            <div  class="active-scaffold create-view <%= "#{params[:controller]}-view" %> view">
+            <div  class="active-scaffold create-view <%= controller_class %> view">
               <%= render :partial => 'create_form_on_list' %>
             </div> 
           </td> 
@@ -30,15 +32,17 @@
 </div>
 
 <script type="text/javascript">
-<% if active_scaffold_config.theme != :default %>
+//<![CDATA[
+<% if active_scaffold_config.theme != :default -%>
 Rico.Corner.round($$('#<%= active_scaffold_id %> div.active-scaffold-header').first(), {color: 'fromElement', bgColor: 'fromParent', corners: 'top', compact: true});
 Rico.Corner.round($$('#<%= active_scaffold_id %> div.active-scaffold-footer').first(), {color: 'fromElement', bgColor: 'fromParent', corners: 'bottom', compact: true});
-<% end %>
-new ActiveScaffold.Actions.Table($$('#<%= active_scaffold_id -%> div.active-scaffold-header a.action'), $('<%= before_header_id -%>'), $('<%= loading_indicator_id(:action => :table) -%>'))
+<% end -%>
+new ActiveScaffold.Actions.Table($$('#<%= active_scaffold_id -%> div.active-scaffold-header a.action'), $('<%= before_header_id -%>'), $('<%= loading_indicator_id(:action => :index) -%>'));
 ActiveScaffold.server_error_response = '<p class="error-message message">'
-  + <%= as_(:internal_error).to_json %>
+  + <%= as_(:internal_error).to_json.html_safe %>
   + '<a href="#" onclick="Element.remove(this.parentNode); return false;">'
-  + <%= as_(:close).to_json %>
+  + <%= as_(:close).to_json.html_safe %>
   + '</a>'
   + '</p>';
+//]]>
 </script>

data/vendor/plugins/active_scaffold/frontends/default/views/list.js.rjs

@@ -0,0 +1 @@
+page[active_scaffold_content_id].replace_html render(:partial => 'list', :layout => false)

data/vendor/plugins/active_scaffold/frontends/default/views/mark.js.rjs

@@ -0,0 +1,6 @@
+if params[:id]
+  # FIXME: It isn't right when there are filtered records by a search
+  page << "$('#{active_scaffold_id}').down('.mark_record').checked = #{@mark ? true : false};"
+else
+  page << "$$('##{active_scaffold_tbody_id} > tr > td > .mark_record').each(function(checkbox) { checkbox.checked = #{@mark ? true : false};});"
+end

data/vendor/plugins/active_scaffold/frontends/default/views/on_create.js.rjs

@@ -1,25 +1,29 @@
-cancel_selector = "##{element_form_id(:action => :create)} a.cancel".to_json
+form = element_form_id(:action => :create)
+cancel_selector = "##{form} a.cancel".to_json
 
 if controller.send :successful?
   if @insert_row
     page.insert_html :top, active_scaffold_tbody_id, :partial => 'list_record', :locals => {:record => @record}
+    page.replace active_scaffold_calculations_id, :partial => 'list_calculations' if active_scaffold_config.list.columns.any? {|c| c.calculation?}
     page << "ActiveScaffold.stripe($('#{active_scaffold_tbody_id}'))"
     page << "ActiveScaffold.hide_empty_message('#{active_scaffold_tbody_id}','#{empty_message_id}');"
     page << "ActiveScaffold.increment_record_count('#{active_scaffold_id}');"
+    page[element_row_id(:action => :list, :id => @record.id)].highlight
   end
 
   if (active_scaffold_config.create.persistent)
     page << "$$(#{cancel_selector}).first().link.reload();"
   else
-    page << "$$(#{cancel_selector}).first().link.close#{'_with_refresh' unless @insert_row}();"
+    page << "$$(#{cancel_selector}).first().link.close();"
   end
-  if (active_scaffold_config.create.edit_after_create)
-    page << "var link = $('#{action_link_id 'edit', @record.id}');"
+  if (action = active_scaffold_config.create.action_after_create)
+    page << "var link = $('#{action_link_id action, @record.id}');"
     page << "if (link) (function() { link.action_link.open() }).defer();"
   end
 else
-  page << "l = $$(#{cancel_selector}).first().link;"
-  page.replace element_form_id(:action => :create), :partial => 'create_form'
-  page << "l.register_cancel_hooks();"
+  page << "var l = $$(#{cancel_selector}).first().link;"
+  page.replace form, :partial => 'create_form', :locals => {:xhr => true}
+  page << "if (l) l.register_cancel_hooks();"
+  page[form].scroll_to
 end
-page.replace_html active_scaffold_messages_id, :partial => 'messages'
+page.replace_html active_scaffold_messages_id, :partial => 'messages'

data/vendor/plugins/active_scaffold/frontends/default/views/on_update.js.rjs

@@ -1,11 +1,18 @@
-cancel_selector = "##{element_form_id(:action => :update)} a.cancel".to_json
+form = element_form_id(:action => :update)
+cancel_selector = "##{form} a.cancel".to_json
 
 if controller.send :successful?
-  page << "$$(#{cancel_selector}).first().link.close_with_refresh();"
+  if active_scaffold_config.update.persistent
+    flash.now[:info] = 'Update Succeeded!'
+  else
+    updated_row = render :partial => 'list_record', :locals => {:record => @record} if params[:parent_controller].nil?
+    page << "$$(#{cancel_selector}).first().link.close('#{escape_javascript(updated_row)}');"
+  end
   page.replace active_scaffold_calculations_id, :partial => 'list_calculations' if active_scaffold_config.list.columns.any? {|c| c.calculation?}
 else
-  page << "l = $$(#{cancel_selector}).first().link;"
-  page.replace element_form_id(:action => :update), :partial => 'update_form'
-  page << "l.register_cancel_hooks();"
+  page << "var l = $$(#{cancel_selector}).first().link;"
+  page.replace form, :partial => 'update_form', :locals => {:xhr => true}
+  page << "if (l) l.register_cancel_hooks();"
+  page[form].scroll_to
 end
-page.replace_html active_scaffold_messages_id, :partial => 'messages'
+page.replace_html active_scaffold_messages_id, :partial => 'messages'

data/vendor/plugins/active_scaffold/frontends/default/views/render_field.js.rjs

@@ -0,0 +1 @@
+page << render(:partial => 'render_fields.js', :object => @update_columns)

data/vendor/plugins/active_scaffold/frontends/default/views/search.html.erb

@@ -1,5 +1,5 @@
 <div class="active-scaffold">
-  <div class="search-view <%= "#{params[:controller]}-view" %> view">
+  <div class="search-view <%= controller_class %> view">
     <%= render :partial => 'search' -%>
   </div>
-</div>
+</div>

data/vendor/plugins/active_scaffold/frontends/default/views/update.html.erb

@@ -1,8 +1,8 @@
 <div class="active-scaffold">
   <div class="update-view <%= "#{params[:controller]}-view" %> view">
-    <% if active_scaffold_config.update.nested_links and active_scaffold_config.action_links.any? {|link| link.type == :record } -%>
+    <% if active_scaffold_config.update.nested_links and active_scaffold_config.action_links.any? {|link| link.type == :member } -%>
     <%= render :partial => 'update_actions', :locals => {:record => @record, :url_options => params_for(:action => :list, :id => @record.id)} %>
     <% end -%>
     <%= render :partial => 'update_form' -%>
   </div>
-</div>
+</div>

data/vendor/plugins/active_scaffold/frontends/default/views/update_column.js.rjs

@@ -5,8 +5,9 @@ unless controller.send :successful?
 end
 column = active_scaffold_config.columns[params[:column]]
 if column.inplace_edit
-  page.replace_html(column_span_id,format_inplace_edit_column(@record, column))
+  page.replace_html(column_span_id, format_inplace_edit_column(@record, column))
 else
   formatted_value = get_column_value(@record, column)
-  page.replace_html(column_span_id,  formatted_value)
-end
+  page.replace_html(column_span_id, formatted_value)
+end
+page.replace_html(active_scaffold_calculations_id(column), render_column_calculation(column)) if column.calculation?

data/vendor/plugins/active_scaffold/frontends/default/views/update_row.js.rjs

@@ -0,0 +1,2 @@
+page.call 'ActiveScaffold.update_row', element_row_id(:action => 'list', :id => @record.id), render(:partial => 'list_record', :locals => {:record => @record})
+page.replace active_scaffold_calculations_id, :partial => 'list_calculations' if active_scaffold_config.list.columns.any? {|c| c.calculation?}

data/vendor/plugins/active_scaffold/init.rb

@@ -1,8 +1,8 @@
 ##
 ## Initialize the environment
 ##
-unless Rails::VERSION::MAJOR == 2 && Rails::VERSION::MINOR >= 3
-  raise "This version of ActiveScaffold requires Rails 2.3 or higher.  Please use an earlier version."
+unless Rails::VERSION::MAJOR == 2 && Rails::VERSION::MINOR >= 3 && Rails::VERSION::TINY >= 8
+  raise "This version of ActiveScaffold requires Rails 2.3.8 or higher.  Please use an earlier version."
 end
 
 require File.dirname(__FILE__) + '/environment'

data/vendor/plugins/active_scaffold/install.rb

@@ -30,11 +30,10 @@ class ErrCounter # using errcount.com
   def self.increment
     @http = Net::HTTP.new("errcount.com")
     resp, data = @http.get2("/ctr/#{@@ACCOUNT_ID}.js", {'Referer' => @@SITE_DOMAIN})
-    puts resp.body
   end  
 end
 
 begin
   ErrCounter.increment
 rescue
-end
+end

data/vendor/plugins/active_scaffold/install_assets.rb

@@ -8,7 +8,7 @@ Dir.chdir(Dir.getwd.sub(/vendor.*/, '')) do
 
 def copy_files(source_path, destination_path, directory)
   source, destination = File.join(directory, source_path), File.join(Rails.root, destination_path)
-  FileUtils.mkdir(destination) unless File.exist?(destination)
+  FileUtils.mkdir_p(destination) unless File.exist?(destination)
   FileUtils.cp_r(Dir.glob(source+'/*.*'), destination)
 end
 

data/vendor/plugins/active_scaffold/lib/active_record_permissions.rb

@@ -62,33 +62,8 @@ module ActiveRecordPermissions
 
   module Permissions
     def self.included(base)
-      base.extend ClassMethods
-    end
-
-    # A generic authorization query. This is what will be called programatically, since
-    # the actual permission methods can't be guaranteed to exist. And because we want to
-    # intelligently combine multiple applicable methods.
-    #
-    # options[:action] should be a CRUD verb (:create, :read, :update, :destroy)
-    # options[:column] should be the name of a model attribute
-    def authorized_for?(options = {})
-      raise ArgumentError, "unknown action #{options[:action]}" if options[:action] and ![:create, :read, :update, :destroy].include?(options[:action])
-
-      # collect the possibly-related methods that actually exist
-      methods = [
-        column_security_method(options[:column]),
-        action_security_method(options[:action]),
-        column_and_action_security_method(options[:column], options[:action])
-      ].compact.select {|m| respond_to?(m)}
-
-      # if any method returns false, then return false
-      return false if methods.any? {|m| !send(m)}
-
-      # if any method actually exists then it must've returned true, so return true
-      return true unless methods.empty?
-
-      # if no method exists, return the default permission
-      return ActiveRecordPermissions.default_permission
+      base.extend SecurityMethods
+      base.send :include, SecurityMethods
     end
 
     # Because any class-level queries get delegated to the instance level via a new record,
@@ -98,26 +73,62 @@ module ActiveRecordPermissions
       !new_record?
     end
 
-    module ClassMethods
-      # Class level just delegates to instance level
-      def authorized_for?(*args)
-        @authorized_for_delegatee ||= self.new
-        @authorized_for_delegatee.authorized_for?(*args)
+    module SecurityMethods
+      # A generic authorization query. This is what will be called programatically, since
+      # the actual permission methods can't be guaranteed to exist. And because we want to
+      # intelligently combine multiple applicable methods.
+      #
+      # options[:crud_type] should be a CRUD verb (:create, :read, :update, :destroy)
+      # options[:column] should be the name of a model attribute
+      # options[:action] is the name of a method
+      def authorized_for?(options = {})
+        raise ArgumentError, "unknown crud type #{options[:crud_type]}" if options[:crud_type] and ![:create, :read, :update, :delete].include?(options[:crud_type])
+
+        # column_authorized_for_crud_type? has the highest priority over other methods,
+        # you can disable a crud verb and enable that verb for a column
+        # (for example, disable update and enable inplace_edit in a column)
+        method = column_and_crud_type_security_method(options[:column], options[:crud_type])
+        return send(method) if method and respond_to?(method)
+
+        # authorized_for_action? has higher priority than other methods,
+        # you can disable a crud verb and enable an action with that crud verb
+        # (for example, disable update and enable an action with update as crud type)
+        method = action_security_method(options[:action])
+        return send(method) if method and respond_to?(method)
+
+        # collect other possibly-related methods that actually exist
+        methods = [
+          column_security_method(options[:column]),
+          crud_type_security_method(options[:crud_type]),
+        ].compact.select {|m| respond_to?(m)}
+
+        # if any method returns false, then return false
+        return false if methods.any? {|m| !send(m)}
+
+        # if any method actually exists then it must've returned true, so return true
+        return true unless methods.empty?
+
+        # if no method exists, return the default permission
+        return ActiveRecordPermissions.default_permission
       end
-    end
 
-    private
+      private
 
-    def column_security_method(column)
-      "#{column}_authorized?" if column
-    end
+      def column_security_method(column)
+        "#{column}_authorized?" if column
+      end
 
-    def action_security_method(action)
-      "authorized_for_#{action}?" if action
-    end
+      def crud_type_security_method(crud_type)
+        "authorized_for_#{crud_type}?" if crud_type
+      end
 
-    def column_and_action_security_method(column, action)
-      "#{column}_authorized_for_#{action}?" if column and action
+      def action_security_method(action)
+        "authorized_for_#{action}?" if action
+      end
+
+      def column_and_crud_type_security_method(column, crud_type)
+        "#{column}_authorized_for_#{crud_type}?" if column and crud_type
+      end
     end
   end
 end