checkin 0.4.5 → 0.5.0

data/README.md

@@ -13,7 +13,8 @@
 * Scoped authorization rules
 * Cascading authorization rules
 * Simple: even complex authorization behaviour is understandable at glimpse and easily predictable
-* Support for controller based mass assignment protection (*Coming Soon* – already implemented but still not tested and not documented)
+* Support for controller based mass assignment protection
+* Support for RESTful and non-RESTful controllers
 
 ## Installation
 
@@ -166,7 +167,9 @@ Inside a permissions block `allow` and `deny` rules are checked consecutively. T
 
 ## Integration with the application
 
-The `checkin` method define a before filter to a controller that is responsible to instantiate a subject decorator to the current subject model, to instantiate the current resource for crud actions that has one, and then to check permissions for the *current subject* to perform the *current action* on the *current resource* in the *current scope*.
+The `checkin` method defines a before filter to a controller that is responsible to instantiate a subject decorator to the current subject model.
+
+Without options `checkin` instantiates automatically the current resource for CRUD actions (inferhed by controller name), and checks permissions for the *current subject* to perform the *current action* on the *current resource* in the *current scope*. You may with to set `:resourceful => false` to skip this.
 
 If the check fails a `Checkin::AccessDenied` exception is raised.
 
@@ -197,7 +200,7 @@ end
 
 ##### References
 
-* `checkin(options = {})`<br/>
+* `checkin(options = {})` *aliased by* `authorize` <br/>
   Define the checkin before filter in the controller in which is invoked
   **Options**
   * `:scope` : Specify the current scope
@@ -206,7 +209,7 @@ end
   * `:subject_model` : Specify the method that return the current subject model, default to `:current_user`
   * `:object` : Specify a method accessible in the controller scope that returns the current resource, if none is specified such method is automatically generated by the `checkin` method
   * `:find_object` : Specify a way to fetch the resource object passing a `String` or `Symbol` corresponding to a method name or a `Proc` that returns the resoruce. Default to `Proc.new {  model_class.find(params[:id]) }`
-  * `:skip_authorization` : Specify to skip the authorization process
+  * `resourceful`: Specify to instantiate a resource for CRUD actions (if not already present) and to check authorization process against it. Default to `true`.
   * `:rescue_with` : Specify a procedure that is invoked to rescue from `Checkin::AccessDenied` exceptions
 
 _eg._
@@ -282,4 +285,3 @@ NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
 LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
 OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
 WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-

data/VERSION

@@ -1 +1 @@
-0.4.5
+0.5.0

data/checkin.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = "checkin"
-  s.version = "0.4.5"
+  s.version = "0.5.0"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["mcasimir"]
-  s.date = "2012-05-25"
+  s.date = "2012-08-04"
   s.description = "Checkin is an authorization gem for Ruby on Rails"
   s.email = "maurizio.cas@gmail.com"
   s.extra_rdoc_files = [

data/lib/checkin/filters.rb

@@ -36,10 +36,10 @@ module Checkin
           define_method :rescue_from_checkin_access_denied, &block
           rescue_from Checkin::AccessDenied, :with => :rescue_from_checkin_access_denied        
         end
-      
-        if !opts[:skip_authorization]
+        
+        opts[:resourceful] ||= true
+        if opts[:resourceful] && !opts[:skip_authorization]
           define_method :"#{object_method}" do   
-
             
             if params[:id]  
               model_class   = self.controller_name.singularize.camelize.constantize
@@ -72,7 +72,8 @@ module Checkin
           end
         end      
       end
+      alias :authorize :checkin
+      
     end
-    
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: checkin
 version: !ruby/object:Gem::Version
-  version: 0.4.5
+  version: 0.5.0
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-05-25 00:00:00.000000000 Z
+date: 2012-08-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jeweler
@@ -70,7 +70,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
       segments:
       - 0
-      hash: -2281754506523548066
+      hash: 1410408469614774106
 required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
   requirements: