cantango 0.8.0 → 0.8.5.1

data/lib/cantango/configuration/engines/cache.rb

@@ -6,9 +6,20 @@ module CanTango
       class Cache < Engine
         include Singleton
 
+        def compile state
+          raise "Must be set to :on or :off" if ![:on, :off].include? state
+          @compile = state
+        end
+
+        def compile?
+          @compile ||= :on
+          @compile == :on
+        end
+
         def store &block
           @store ||= ns::Store.new
-          @store.default_class ||= CanTango::Ability::Cache::MonetaCache
+          # CanTango::Ability::Cache::MonetaCache
+          @store.default_class ||= CanTango::Ability::Cache::SessionCache
           yield @store if block
           @store
         end

data/lib/cantango/configuration/engines/engine.rb

@@ -7,18 +7,18 @@ module CanTango
           @state = state || :on
         end
 
-        def reset! 
+        def reset!
           @state = nil
         end
 
-        def on?            
+        def on?
           @state == :on
         end
- 
-        def off? 
+
+        def off?
           !on?
         end
- 
+
         protected
 
         def ns

data/lib/cantango/configuration/engines/permission.rb

@@ -14,7 +14,7 @@ module CanTango
         end
 
         def types
-          [:roles, :role_groups, :licenses, :users]
+          [:roles, :role_groups, :licenses, :users, :user_types, :account_types]
         end
 
         attr_reader :config_path

data/lib/cantango/configuration/permit_registry.rb

@@ -0,0 +1,17 @@
+module CanTango
+  class Configuration
+    class PermitRegistry
+      [:user, :account, :role, :role_group].each do |permit|
+        class_eval %{
+          def #{permit}
+            @#{permit} ||= HashRegistry.new
+          end
+        }
+      end
+
+    end
+  end
+end
+
+
+

data/lib/cantango/configuration/permits.rb

@@ -0,0 +1,29 @@
+module CanTango
+  class Configuration 
+    class Permits < PermitRegistry
+      include Singleton
+
+      attr_reader :accounts
+      # CanTango.config.permits.accounts[:admin].role => {}
+
+      def accounts
+        @accounts ||= Hash.new
+      end
+
+      def account_hash name
+        accounts[name]
+      end
+
+      def method_missing method_name, *args
+        accounts[method_name] ||= PermitRegistry.new
+      end
+
+      def register_permit_class(permit_name, permit_clazz, permit_type, account_name)
+        registry = account_name ? self.send(account_name.to_sym) : self
+        registry.send(permit_type)[permit_name] = permit_clazz
+      end
+    end
+  end
+end
+
+

data/lib/cantango/configuration/registry.rb

@@ -4,11 +4,10 @@ require 'sugar-high/kind_of'
 module CanTango
   class Configuration
     class Registry
+      
       attr_writer   :default
       attr_accessor :registered
 
-      include Singleton
-
       def types= *types
         @types = types.select {|t| t.is_a? Class }
       end
@@ -43,6 +42,10 @@ module CanTango
         @registered ||= default
       end
 
+      def registered? label
+        registered.map(&:to_s).include? label.to_s
+      end
+
       def default
         @default ||= []
       end

data/lib/cantango/configuration/role_groups.rb

@@ -1,6 +1,9 @@
 module CanTango
   class Configuration
     class RoleGroups < RoleRegistry
+      
+      include Singleton
+      
       def default_has_method
         :in_role_group?
       end

data/lib/cantango/configuration/role_registry.rb

@@ -32,6 +32,10 @@ module CanTango
         @excluded = names.select_labels
       end
 
+      def filter?
+        !(excluded + onlies).empty?
+      end
+
       def clear!
         super
         @excluded = []

data/lib/cantango/configuration/roles.rb

@@ -1,6 +1,8 @@
 module CanTango
   class Configuration
     class Roles < RoleRegistry
+      include Singleton
+
       def default_has_method
         :has_role?
       end

data/lib/cantango/configuration/user_accounts.rb

@@ -1,6 +1,7 @@
 module CanTango
   class Configuration
     class UserAccounts < Registry
+      include Singleton
     end
   end
 end

data/lib/cantango/configuration/users.rb

@@ -1,6 +1,7 @@
 module CanTango
   class Configuration
     class Users < Registry
+      include Singleton
     end
   end
 end

data/lib/cantango/engine.rb

@@ -0,0 +1,13 @@
+module CanTango
+  class Engine
+    attr_reader :ability
+
+    def initialize ability
+      @ability = ability
+    end
+
+    def execute!
+      # raise NotImplementedError      
+    end
+  end
+end

data/lib/cantango/filters.rb

@@ -0,0 +1,5 @@
+module CanTango
+  module Filters
+    autoload_modules :Filter, :RoleFilter, :RoleGroupFilter
+  end
+end

data/lib/cantango/filters/filter.rb

@@ -0,0 +1,34 @@
+module CanTango
+  module Filters
+    class Filter
+      attr_reader :item, :include_list
+
+      def initialize item, list = nil
+        @item         = item.to_sym
+        @include_list = list || []
+      end
+
+      def valid?
+        return false if !in_include_list?
+        return false if not_only?
+        !excluded?
+      end
+
+      def in_include_list?
+        return true if include_list.empty?
+        include_list.include? item
+      end
+
+      def not_only?
+        false
+      end
+
+      def excluded?
+        false
+      end
+    end
+  end
+end
+
+
+

data/lib/cantango/filters/role_filter.rb

@@ -0,0 +1,29 @@
+module CanTango
+  module Filters
+    class RoleFilter < Filter
+      alias_method :role, :item
+
+      def initialize role, roles = nil
+        super
+      end
+
+      def not_only?
+        !only_roles.empty? && !only_roles.include?(role)
+      end
+
+      def excluded?
+        !excluded_roles.empty? && excluded_roles.include?(role)
+      end
+
+      def only_roles
+        CanTango.config.roles.onlies
+      end
+
+      def excluded_roles
+        CanTango.config.roles.excluded
+      end
+    end
+  end
+end
+
+

data/lib/cantango/filters/role_group_filter.rb

@@ -0,0 +1,28 @@
+module CanTango
+  module Filters
+    class RoleGroupFilter < Filter
+      alias_method :role_group, :item
+
+      def initialize role_group, role_groups = nil
+        super      
+      end
+
+      def not_only?
+        !only_role_groups.empty? && !only_role_groups.include?(role_group)
+      end
+
+      def excluded?
+        !excluded_role_groups.empty? && excluded_role_groups.include?(role_group)
+      end
+
+      def only_role_groups
+        CanTango.config.role_groups.onlies
+      end
+
+      def excluded_role_groups
+        CanTango.config.role_groups.excluded
+      end
+    end
+  end
+end
+

data/lib/cantango/permission_engine.rb

@@ -1,7 +1,32 @@
 module CanTango
-  module PermissionEngine
+  class PermissionEngine < Engine
     autoload_modules :Collector, :Compiler, :Evaluator, :Selector
     autoload_modules :Factory, :Loader, :Parser, :Permission
     autoload_modules :RulesParser, :Store, :YamlStore, :Statements, :Statement
+
+    def initialize ability
+      super
+    end
+
+    def execute!
+      puts "permissions"
+      permissions.each do |permission|
+        permission.evaluate! user
+      end
+    end
+
+    def permissions
+      permission_factory.build!
+    end
+
+    protected
+
+    def user
+      ability.user
+    end
+
+    def permission_factory
+      @permission_factory ||= CanTango::PermissionEngine::Factory.new ability
+    end
   end
 end

data/lib/cantango/permission_engine/collector.rb

@@ -1,5 +1,5 @@
 module CanTango
-  module PermissionEngine
+  class PermissionEngine < Engine
     class Collector
       attr_reader :ability, :permissions, :type
 
@@ -10,7 +10,7 @@ module CanTango
       end
 
       def build
-        relevant_rules.inject([]){|evaluators, (name, rules)| 
+        relevant_rules.inject([]){|evaluators, (name, rules)|
           evaluators << CanTango::PermissionEngine::Evaluator.new(ability, rules) 
         }
       end
@@ -35,6 +35,11 @@ module CanTango
         ability.user
       end
 
+      def user_account
+        ability.user_account
+      end
+      alias_method :account, :user_account
+
       def user_key_field
         ability.user_key_field
       end

data/lib/cantango/permission_engine/compiler.rb

@@ -1,5 +1,5 @@
 module CanTango
-  module PermissionEngine
+  class PermissionEngine < Engine
     class Compiler
       attr_reader :permission, :categories
 
@@ -36,7 +36,14 @@ module CanTango
         statements(method)
       end
 
+      # TODO: make cleaner!
+      def check_actions method
+        permission_actions = permission.static_rules.send(method).keys.to_symbols
+        raise "valid actions are: #{valid_actions}" if (permission_actions - valid_actions).size > 0
+      end
+
       def statements method
+        check_actions method
         valid_actions.map do |action|
           statements_string(method, :action => action)
         end.compact.join("\n")

data/lib/cantango/permission_engine/evaluator.rb

@@ -1,5 +1,5 @@
 module CanTango
-  module PermissionEngine
+  class PermissionEngine < Engine
     class Evaluator
       attr_reader :ability, :rule
 
@@ -20,7 +20,7 @@ module CanTango
       def rules
         ability.send :rules
       end
-     
+
       def user
         @user
       end

data/lib/cantango/permission_engine/factory.rb

@@ -1,10 +1,6 @@
-require 'sugar-high/class_ext'
-
 module CanTango
-  module PermissionEngine
+  class PermissionEngine < Engine
     class Factory
-      include ClassExt
-
       attr_accessor :ability
 
       # creates the factory for the ability
@@ -31,29 +27,29 @@ module CanTango
       end
 
       def store
-        store_class.new :cantango_permissions, store_options
+        store_class.new :permissions, store_options
       end
 
       def store_class
-        permissions_engine.store.default_class
+        permission_engine.store.default_class
       end
 
       def store_options
-        permissions_engine.store.options.merge(:path => config_path)
+        permission_engine.store.options.merge(:path => config_path)
       end
 
       def permission_types
-        permissions_engine.types
+        permission_engine.types
       end
 
       def config_path
-        permissions_engine.config_path
+        permission_engine.config_path
       end
 
       private
 
-      def permissions_engine
-        CanTango.config.permissions
+      def permission_engine
+        CanTango.config.permission_engine
       end
     end
   end