cancancan_nested_auth 0.0.1 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 559c12a229b9db52a70521c4e58431db2bfb5d808e7df974931fc29c0ae3a73c
-  data.tar.gz: c085e127d95cd75eed15902defc6fd9c85db685c5aed8a8a6b9b1a8a5e85e149
+  metadata.gz: dfb4fbb1dfb77fefb8093c8b34cb03cc7014981a3b15a8c83e8574a9c3aeeb3a
+  data.tar.gz: ad181c3e808686f022518523a0857804ec9127868a61013051dd14b623b44dee
 SHA512:
-  metadata.gz: a4ef66d7c95c812e1e1e3c7a4e9676a5b53e1ce3a09bba6b21cdc8b002f6d02e6a9dbcc3879222e34116104255e908676677df0bcbcffd0c8b3cd0f11262d9d7
-  data.tar.gz: 3f77100c23e41034d5061a39e33ad638a2e499fbaa7a87f0fe297c19f2085266db59ab35301134b835db09b121b32a8c5ff5528d321f26feaa6aa968baa820f0
+  metadata.gz: 2144f3da1801f95bcc25b9b23a933cb5ba542abcb89049557d99c8b7c66fbed9c1add45ce2b4009657cb22b1792d56cd5c57ddbba69cb3528610c560b8b7e43b
+  data.tar.gz: 3803d9b0298714e3f086e2f1d5481f793f1e8e13a08d5a0e3a0311091f70ab45c38b3ec0adc82edcff16570999c00337462ae33cd0ab9e9b0d07e6c92ace9962

data/lib/cancancan/configuration.rb

@@ -1,7 +1,7 @@
 module CanCanCan
   module NestedAssignmentAndAuthorization
     class Configuration
-      attr_accessor :silence_raised_errors, :use_smart_nested_authorizations
+      attr_accessor :silence_raised_errors, :use_smart_nested_authorizations, :use_resource_key_in_params
 
       def initialize
         # Allows for stopping unauthorized actions without raising errors
@@ -9,6 +9,11 @@ module CanCanCan
         # Auto-determine what action to auth on nested associations (:create, :update, :destroy)
         # - will use the action of the root object otherwise.
         @use_smart_nested_authorizations = true
+        # Set to `true` if you're nesting parameter data under the resource_key
+        # - i.e. params => {user: {email: 'test', name: 'fun'}}
+        # Set to `false` if resource parameter data is direct in in params.
+        # - i.e. params => {email: 'test', name: 'fun'}
+        @use_resource_key_in_params = true
       end
     end
   end

data/lib/cancancan/services/assignment_and_authorization.rb

@@ -16,6 +16,9 @@ module CanCanCan
       @ability = current_ability
       @parent_object = parent_object
       @params = params
+      if CanCanCan::NestedAssignmentAndAuthorization.configuration.use_resource_key_in_params
+        @params = @params[parent_object.model_name.singular.to_sym]
+      end
       if @params.kind_of?(ActionController::Parameters)
         @params = @params.permit!.to_h
       end

data/lib/cancancan/version.rb

@@ -1,5 +1,5 @@
 module CanCanCan
   module NestedAssignmentAndAuthorization
-    VERSION = '0.0.1'
+    VERSION = '1.0.0'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cancancan_nested_auth
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 1.0.0
 platform: ruby
 authors:
 - benjamin.dana.software.dev@gmail.com