bscf-core 0.4.98 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e21ece92c538dd2de05e92798fdbcdb484515fb2b4d51579a49a7743cd845908
-  data.tar.gz: 323646d95a5005ddf6ba62a24b5b3d0184ab70d2e570cb969104be978e1f378a
+  metadata.gz: 225894f65a8e151960ff603ac227cc575754eae6ab1c146ee20542091fa129a5
+  data.tar.gz: e9f6a8a6f912ef97dcfe6fc718deae1204d26a17a93995abc369604b6fa4aab2
 SHA512:
-  metadata.gz: 19e9f2eb4f89d4849965264b20c08cff31570de7f4c67bd595900475a550986a44b8d803f93e3b82b44db1740ed4ad1c66e3c4f61c10b4e8d8dcf78a82264c88
-  data.tar.gz: 72ab3727d5ef514d63f5f8219e7635ec0c5446c6cc2993bd67e0f03084602c9bee6fdf67fe195f612aa5ca37621936efa43ee1e511d2971ba59e80fa9a676555
+  metadata.gz: 3c1d6726242a8153d72662522730397733670e19ace435ac032521bfab747ee559bcdd9ae3a65d8480d80676a22e907b68504b1f2b6a8a1af76107c8da69e2f9
+  data.tar.gz: 01ad96461f4a1f3de25e67b6b361079de48411cdb6748ffc9654040fc67db27bdbba1928e572ef1066ee875834ed73e6652154badf7d68a6a413f94624a8376b

data/app/controllers/bscf/core/application_controller.rb

@@ -1,16 +1,18 @@
 module Bscf
   module Core
     class ApplicationController < ActionController::API
+      include Pundit::Authorization
+
+      rescue_from Pundit::NotAuthorizedError, with: :user_not_authorized
+
       private
 
-      def is_authenticated
-        render json: { error: "Not authenticated" }, status: :unauthorized unless current_user
+      def user_not_authorized
+        render json: { error: "You are not authorized to perform this action." }, status: :unauthorized
       end
 
-      def is_allowed
-        user_role = UserRole.find_by(user: current_user)
-        role = Role.find(user_role.role_id)
-        render json: { error: "Not authorized" }, status: :ok unless role.name == "User" || role.name == "Admin"
+      def is_authenticated
+        render json: { error: "Not authenticated" }, status: :unauthorized unless current_user
       end
 
       def current_user

data/app/policies/application_policy.rb

@@ -0,0 +1,22 @@
+class ApplicationPolicy
+  attr_reader :user, :record
+
+  def initialize(user, record)
+    @user = user
+    @record = record
+  end
+
+  private
+
+  def admin?
+    user.user_roles.any? { |ur| ur.role.name == "Admin" }
+  end
+
+  def driver?
+    user.user_roles.any? { |ur| ur.role.name == "Driver" }
+  end
+
+  def user_role?
+    user.user_roles.any? { |ur| ur.role.name == "User" }
+  end
+end

data/app/policies/user_policy.rb

@@ -0,0 +1,17 @@
+class UserPolicy < ApplicationPolicy
+  def index?
+    admin?
+  end
+
+  def show?
+    admin?
+  end
+
+  def by_role?
+    admin?
+  end
+
+  def has_virtual_account?
+    true
+  end
+end

data/app/policies/user_profile_policy.rb

@@ -0,0 +1,9 @@
+class UserProfilePolicy < ApplicationPolicy
+  def show?
+    true
+  end
+
+  def update_kyc?
+    admin?
+  end
+end

data/app/policies/user_role_policy.rb

@@ -0,0 +1,5 @@
+class UserRolePolicy < ApplicationPolicy
+  def assign_driver?
+    admin?
+  end
+end

data/lib/bscf/core/engine.rb

@@ -2,6 +2,7 @@ module Bscf
   module Core
     class Engine < ::Rails::Engine
       isolate_namespace Bscf::Core
+      config.autoload_paths << File.expand_path("../../app/policies", __dir__)
       config.generators.api_only = true
 
       config.generators do |g|

data/lib/bscf/core/version.rb

@@ -1,5 +1,5 @@
 module Bscf
   module Core
-    VERSION = "0.4.98"
+    VERSION = "0.5.0"
   end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: bscf-core
 version: !ruby/object:Gem::Version
-  version: 0.4.98
+  version: 0.5.0
 platform: ruby
 authors:
 - Asrat
 bindir: bin
 cert_chain: []
-date: 1980-01-02 00:00:00.000000000 Z
+date: 2025-07-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: active_model_serializers
@@ -147,6 +147,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: pundit
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: database_cleaner-active_record
   requirement: !ruby/object:Gem::Requirement
@@ -316,6 +330,10 @@ files:
 - app/models/bscf/core/virtual_account_transaction.rb
 - app/models/bscf/core/voucher.rb
 - app/models/bscf/core/wholesaler_product.rb
+- app/policies/application_policy.rb
+- app/policies/user_policy.rb
+- app/policies/user_profile_policy.rb
+- app/policies/user_role_policy.rb
 - app/services/bscf/core/gebeta_maps_service.rb
 - app/services/bscf/core/token_service.rb
 - app/services/bscf/core/transaction_service.rb
@@ -425,7 +443,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 3.6.2
 specification_version: 4
 summary: An Engine for Supply Chain Financing
 test_files: []