bullet_train-roles 0.1.9 → 1.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 22f9bcc3e444766f5813562e0506db8f9b921f141ce2ce77eb3d30156418c80f
-  data.tar.gz: 7db6d4154b2bd4e58e7d35455635b55b84f6e66424e1f4e9b26a82e908865dbb
+  metadata.gz: 30730d97710a95ccb3a1607d68ec6e41316d421555be035900fbb7e112546bd1
+  data.tar.gz: f22d482d9382f630b7fb200f48469644bca171d12535fef117880a69cfcca5e3
 SHA512:
-  metadata.gz: 6ece8c36a0ae647489604813e15646ec1096d62f3980d032892ceefd21b8bf7a5f82430ad6a58219edf287994ee0019a7dc00dbe2939782ac7e24b1ff0b77188
-  data.tar.gz: 0a386a84154f7d192019ab68d5be0094b3fcd6827dd53f29bf629fa0ed15a8ff8546bbd2fb382b9a4e3b30e13d922de0b7e2d819c08c03fb4662516f193df0af
+  metadata.gz: bf8243e967c09351262fbc615f2b61f3d78d72d741a5c6c18ba62cfe8a0c3621ad4219a65768e640d91eaea4b52c930652ecf94323c31861d5222b5738e71790
+  data.tar.gz: 6a8048e3d64762d1578f25b202660606768d38ba6508e89cc7ec33812878d87e139b015286840360d66f04a248b87c2dc3d6b7ef05b76bda70bc1905aa57491b

data/Gemfile.lock

@@ -9,7 +9,7 @@ GIT
 PATH
   remote: .
   specs:
-    bullet_train-roles (0.1.9)
+    bullet_train-roles (1.2.0)
       active_hash
       activesupport
       cancancan

data/README.md

@@ -142,6 +142,31 @@ permit user, through: :projects_collaborators, parent: :project
 
 In this example, `permit` is smart enough to only apply the permissions granted by a `Projects::Collaborator` record at the level of the `Project` it belongs to. You can turn any model into a grant model by adding `include Roles::Support` and adding a `role_ids:jsonb` attribute. You can look at `Scaffolding::AbsolutelyAbstract::CreativeConcepts::Collaborator` for an example.
 
+
+## Restricting Available Roles
+
+In some situations, you don't want all roles to be available to all Grant Models.  For example, you might have a `project_editor` role that only makes sense when applied at the Project level.  Note that this is only necessary if you want your project_editor to have more limited permissions than an admin user.  If a `project_editor` has full control of their project, you should probably just use the `admin` role.
+
+By default all Grant Models will show all roles as options.  If you want to limit the roles available to a model, use the `roles_only` class method:
+
+```
+class Membership < ApplicationRecord
+  include Roles::Support
+  roles_only :admin, :editor, :reader # Add this line to restrict the Membership model to only these roles
+end
+```
+
+To access the array of all roles available for a particular model, use the `assignable_roles` class method.  For example, in your Membership form, you probably _only_ want to show the assignable_roles as options.  Your view could look like this:
+
+```
+<% Membership.assignable_roles.each do |role| %>
+  <% if role.manageable_by?(current_membership.roles) %>
+    <!-- View component for showing a role option. Probably a checkbox -->
+  <% end %>
+<% end %>
+```
+
+
 ## Debugging
 If you want to see what CanCanCan directives are being created by your permit calls, you can add the `debug: true` option to your `permit` statement in `app/models/ability.rb`.
 

data/bullet_train-roles.gemspec

@@ -12,7 +12,7 @@ Gem::Specification.new do |spec|
   spec.description = "Yaml-backed ApplicationHash for CanCan Roles"
   spec.homepage = "https://github.com/bullet-train-co/bullet_train-roles"
   spec.license = "MIT"
-  spec.required_ruby_version = Gem::Requirement.new(">= 2.4.0")
+  spec.required_ruby_version = Gem::Requirement.new(">= 2.7.0")
 
   spec.metadata["homepage_uri"] = spec.homepage
   spec.metadata["source_code_uri"] = "https://github.com/bullet-train-co/bullet_train-roles"

data/lib/bullet_train/roles/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Roles
-  VERSION = "0.1.9"
+  VERSION = "1.2.0"
 end

data/lib/roles/permit.rb

@@ -2,48 +2,64 @@
 
 module Roles
   module Permit
-    def permit(user, through:, parent:, debug: false, intermediary: nil, cache_key: nil)
+    def permit(user, through:, parent:, debug: false, intermediary: nil, rails_cache_key: nil)
       # When changing permissions during development, you may also want to do this on each request:
       # User.update_all ability_cache: nil if Rails.env.development?
-      permissions = if cache_key
-        Rails.cache.fetch(cache_key) do
+      permissions = if rails_cache_key
+        Rails.cache.fetch(rails_cache_key) do
           build_permissions(user, through, parent, intermediary)
         end
       else
         build_permissions(user, through, parent, intermediary)
       end
 
-      permissions.each do |permission|
-        can(permission.actions, permission.model.constantize, permission.condition) unless permission.is_debug
+      begin
+        assign_permissions(permissions)
+      rescue NameError => e
+        if rails_cache_key
+          # Cache has become stale with model classes that no longer exist
+          Rails.logger.info "Found missing models in cache - #{e.message.squish} - building fresh permissions"
+          Rails.cache.delete(rails_cache_key)
+          permissions = build_permissions(user, through, parent, intermediary)
+          assign_permissions(permissions)
+        else
+          raise e
+        end
       end
 
       if debug
         puts "###########################"
         puts "Auto generated `ability.rb` content:"
         permissions.map do |permission|
-          if permission.is_debug
-            puts permission.info
+          if permission[:is_debug]
+            puts permission[:info]
           else
-            puts "can #{permission.actions}, #{permission.model}, #{permission.condition}"
+            puts "can #{permission[:actions]}, #{permission[:model]}, #{permission[:condition]}"
           end
         end
         puts "############################"
       end
     end
 
+    def assign_permissions(permissions)
+      permissions.each do |permission|
+        can(permission[:actions], permission[:model].constantize, permission[:condition]) unless permission[:is_debug]
+      end
+    end
+
     def build_permissions(user, through, parent, intermediary)
       added_roles = Set.new
       permissions = []
       user.send(through).map(&:roles).flatten.uniq.each do |role|
         unless added_roles.include?(role)
-          permissions << OpenStruct.new(is_debug: true, info: "########### ROLE: #{role.key}")
+          permissions << {is_debug: true, info: "########### ROLE: #{role.key}"}
           permissions += add_abilities_for(role, user, through, parent, intermediary)
           added_roles << role
         end
 
         role.included_roles.each do |included_role|
           unless added_roles.include?(included_role)
-            permissions << OpenStruct.new(is_debug: true, info: "############# INCLUDED ROLE: #{included_role.key}")
+            permissions << {is_debug: true, info: "############# INCLUDED ROLE: #{included_role.key}"}
             permissions += add_abilities_for(included_role, user, through, parent, intermediary)
           end
         end
@@ -56,9 +72,9 @@ module Roles
       permissions = []
       role.ability_generator(user, through, parent, intermediary) do |ag|
         permissions << if ag.valid?
-          OpenStruct.new(is_debug: false, actions: ag.actions, model: ag.model.to_s, condition: ag.condition)
+          {is_debug: false, actions: ag.actions, model: ag.model.to_s, condition: ag.condition}
         else
-          OpenStruct.new(is_debug: true, info: "# #{ag.model} does not respond to #{parent} so we're not going to add an ability for the #{through} context")
+          {is_debug: true, info: "# #{ag.model} does not respond to #{parent} so we're not going to add an ability for the #{through} context"}
         end
       end
       permissions

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bullet_train-roles
 version: !ruby/object:Gem::Version
-  version: 0.1.9
+  version: 1.2.0
 platform: ruby
 authors:
 - Prabin Poudel
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-08-31 00:00:00.000000000 Z
+date: 2022-12-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: byebug
@@ -209,7 +209,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.4.0
+      version: 2.7.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="