cancancan 3.6.1 → 3.6.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e0d4a5b11aba155764cf54465d5d8bf88872fed61f4a33736d45a531c619ad6e
-  data.tar.gz: 12b3b41403f3fdaba3fdb97c30ce17e319d1bfdef05fcb7700d41ba754c75a55
+  metadata.gz: f110f791b83ea1cc157fae66dd576a3dae94f60b983d654e8be252cb6c4e8939
+  data.tar.gz: cbf9e6c8e6fadca715eeff37cfce3b289550d538e84a5996b4e95aa00632d7fd
 SHA512:
-  metadata.gz: beb6989dbb2554678fa17626b6138aab396419b6d01ed8ce3ee3781030086da48985837a01bef50ab111fb47273454df8c7e3d6ced11b10a036ffe2e494feb15
-  data.tar.gz: 405b0e6eb4ab73f04964651ab27e106701c014cd706f74012e5f30aada5796de6541f812593b57e058031af0991890884701136229f0405900e3bc99ce3747ee
+  metadata.gz: 8102b54914e87e65dbd15b27991e33462d5083d37c6f57aaf09a2dfeaff92826420e27863bd88e17a8c1f18939281ec36ed2abb70e2e012df16661997af5f98a
+  data.tar.gz: 6b1defbddb0262274e8ad349fb6b267fa45b4024ca790ba3ba93f67d741cc38055e37e485d57f7ff17b59244a5c235d42e956b9049b603d2d8aa28898a4dd768

data/lib/cancan/controller_additions.rb

@@ -213,7 +213,7 @@ module CanCan
       def skip_load_resource(*args)
         options = args.extract_options!
         name = args.first
-        cancan_skipper[:load][name] = options
+        add_cancan_skip(:load, name, options)
       end
 
       # Skip the authorization behavior of CanCan. This is useful when using +load_and_authorize_resource+ but want to
@@ -229,7 +229,7 @@ module CanCan
       def skip_authorize_resource(*args)
         options = args.extract_options!
         name = args.first
-        cancan_skipper[:authorize][name] = options
+        add_cancan_skip(:authorize, name, options)
       end
 
       # Add this to a controller to ensure it performs authorization through +authorize+! or +authorize_resource+ call.
@@ -295,6 +295,15 @@ module CanCan
       def cancan_skipper
         self._cancan_skipper ||= { authorize: {}, load: {} }
       end
+
+      private
+
+      # _cancan_skipper is a class_attribute: a subclass shares the hash of its superclass until it assigns
+      # its own. Assign a copy, so a skip in a subclass does not change the superclass or sibling classes.
+      def add_cancan_skip(behavior, name, options)
+        skipper = cancan_skipper
+        self._cancan_skipper = skipper.merge(behavior => skipper[behavior].merge(name => options))
+      end
     end
 
     def self.included(base)

data/lib/cancan/model_adapters/active_record_5_adapter.rb

@@ -49,11 +49,22 @@ module CanCan
       def visit_nodes(node)
         # Rails 5.2 adds a BindParam node that prevents the visitor method from properly compiling the SQL query
         if self.class.version_greater_or_equal?('5.2.0')
-          connection = @model_class.send(:connection)
+          connection = model_connection
           collector = Arel::Collectors::SubstituteBinds.new(connection, Arel::Collectors::SQLString.new)
           connection.visitor.accept(node, collector).value
         else
-          @model_class.send(:connection).visitor.compile(node)
+          model_connection.visitor.compile(node)
+        end
+      end
+
+      # Rails 7.2 soft-deprecated ActiveRecord::Base.connection in favour of
+      # lease_connection, which better describes its lifecycle. Fall back to
+      # connection for Rails < 7.2 where lease_connection is not defined.
+      def model_connection
+        if @model_class.respond_to?(:lease_connection)
+          @model_class.lease_connection
+        else
+          @model_class.send(:connection)
         end
       end
     end

data/lib/cancan/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module CanCan
-  VERSION = '3.6.1'.freeze
+  VERSION = '3.6.2'.freeze
 end

metadata

@@ -1,17 +1,16 @@
 --- !ruby/object:Gem::Specification
 name: cancancan
 version: !ruby/object:Gem::Version
-  version: 3.6.1
+  version: 3.6.2
 platform: ruby
 authors:
 - Alessandro Rodi (Renuo AG)
 - Bryan Rite
 - Ryan Bates
 - Richard Wilson
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-05-28 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: appraisal
@@ -157,7 +156,6 @@ licenses:
 - MIT
 metadata:
   funding_uri: https://github.com/sponsors/coorasse
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -172,8 +170,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.3
-signing_key:
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Simple authorization solution for Rails.
 test_files: []