consent 1.0.1 → 2.1.0

metadata

@@ -1,15 +1,29 @@
 --- !ruby/object:Gem::Specification
 name: consent
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 2.1.0
 platform: ruby
 authors:
 - Carlos Palhares
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-05-10 00:00:00.000000000 Z
+date: 2025-02-19 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: cancancan
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 3.2.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 3.2.1
 - !ruby/object:Gem::Dependency
   name: activerecord
   requirement: !ruby/object:Gem::Requirement
@@ -25,61 +39,103 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '5'
 - !ruby/object:Gem::Dependency
-  name: bundler
+  name: appraisal
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.17.3
+        version: 2.5.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.17.3
+        version: 2.5.0
 - !ruby/object:Gem::Dependency
-  name: cancancan
+  name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.15.0
+        version: '2.1'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.15.0
+        version: '2.1'
 - !ruby/object:Gem::Dependency
-  name: pry
+  name: combustion
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.14.1
+        version: '1.3'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.14.1
+        version: '1.3'
 - !ruby/object:Gem::Dependency
-  name: rake
+  name: license_finder
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 12.3.3
+        version: '7.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 12.3.3
+        version: '7.0'
+- !ruby/object:Gem::Dependency
+  name: pry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.14.2
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.14.2
+- !ruby/object:Gem::Dependency
+  name: pry-byebug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 3.10.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 3.10.1
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -95,34 +151,48 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '3.0'
 - !ruby/object:Gem::Dependency
-  name: rubocop
+  name: rspec-rails
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.65.0
+        version: 6.1.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.65.0
+        version: 6.1.5
+- !ruby/object:Gem::Dependency
+  name: rubocop-powerhome
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.5.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.5.0
 - !ruby/object:Gem::Dependency
   name: sqlite3
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.4.2
+        version: 1.7.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.4.2
-description: Consent
+        version: 1.7.3
+description: Consent permission based authorization
 email:
 - chjunior@gmail.com
 executables: []
@@ -130,40 +200,59 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".gitignore"
-- ".rspec"
 - ".rubocop.yml"
 - ".rubocop_todo.yml"
-- ".ruby-version"
-- ".travis.yml"
+- Appraisals
 - Gemfile
-- LICENSE
-- README.md
+- Gemfile.lock
 - Rakefile
-- TODO.md
+- app/models/concerns/consent/authorizable.rb
+- app/models/consent/application_record.rb
+- app/models/consent/history.rb
+- app/models/consent/permission.rb
 - bin/console
 - bin/setup
+- config.ru
 - consent.gemspec
+- db/migrate/20211104225614_create_nitro_auth_authorization_permissions.rb
+- db/migrate/20220420135558_create_nitro_auth_authorization_histories.rb
+- doc/dependency_decisions.yml
+- docs/CHANGELOG.md
+- docs/README.md
+- gemfiles/.bundle/config
+- gemfiles/rails_6_1.gemfile
+- gemfiles/rails_6_1.gemfile.lock
+- gemfiles/rails_7_0.gemfile
+- gemfiles/rails_7_0.gemfile.lock
+- gemfiles/rails_7_1.gemfile
+- gemfiles/rails_7_1.gemfile.lock
 - lib/consent.rb
 - lib/consent/ability.rb
 - lib/consent/action.rb
 - lib/consent/dsl.rb
-- lib/consent/railtie.rb
+- lib/consent/engine.rb
+- lib/consent/model_additions.rb
+- lib/consent/permission_migration.rb
 - lib/consent/reloader.rb
 - lib/consent/rspec.rb
 - lib/consent/rspec/consent_action.rb
 - lib/consent/rspec/consent_view.rb
 - lib/consent/subject.rb
+- lib/consent/subject_coder.rb
+- lib/consent/symbol_adapter.rb
 - lib/consent/version.rb
 - lib/consent/view.rb
 - lib/generators/consent/permissions_generator.rb
 - lib/generators/consent/templates/permissions.rb.erb
 - lib/generators/consent/templates/permissions_spec.rb.erb
+- mkdocs.yml
 - renovate.json
-homepage: 
+homepage: https://github.com/powerhome/power-tools
 licenses:
 - MIT
-metadata: {}
-post_install_message: 
+metadata:
+  rubygems_mfa_required: 'true'
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -171,15 +260,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '3.0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.8
-signing_key: 
+rubygems_version: 3.5.23
+signing_key:
 specification_version: 4
-summary: Consent
+summary: Consent permission based authorization
 test_files: []

data/.rspec

@@ -1,2 +0,0 @@
---format documentation
---color

data/.ruby-version

@@ -1 +0,0 @@
-2.5.0

data/.travis.yml

@@ -1,20 +0,0 @@
-sudo: false
-language: ruby
-rvm:
-- 2.5.8
-- 2.6.6
-- 2.7.2
-- 3.0.0
-before_install: gem install bundler -v 1.17.3
-script:
-  - bundle exec rubocop
-  - bundle exec rspec
-deploy:
-  provider: rubygems
-  api_key:
-    secure: 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
-  gem: consent
-  on:
-    tags: true
-    repo: powerhome/consent
-    ruby: 2.6.6

data/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright Power Home Remodeling Group, LLC
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

data/README.md

@@ -1,252 +0,0 @@
-# Consent [![Build Status](https://travis-ci.org/powerhome/consent.svg?branch=master)](https://travis-ci.org/powerhome/consent)
-
-## Installation
-
-Add this line to your application's Gemfile:
-
-```ruby
-gem 'consent'
-```
-
-And then execute:
-
-    $ bundle
-
-Or install it yourself as:
-
-    $ gem install consent
-
-## What is Consent
-
-Consent makes defining permissions easier by providing a clean, concise DSL for authorization
-so that all abilities do not have to be in your `Ability`
-class.
-
-Consent takes application permissions and models them so that permissions are organized and can
-be defined granularly. It does so using the following models:
-
-* View: A collection of objects limited by a given condition.
-* Action: An action performed on top of the objects limited by the view. For example, one user could only `:view` something, while another could `:manage` it.
-* Subject: Holds the scope of the actions.
-* Permission: The combination of a subject, an action, and a view (or full-access).
-
-## What Consent Is Not
-
-Consent isn't a tool to enforce permissions -- it supports CanCan(Can) for that goal.
-
-## Subject
-
-The subject is the central point of a group of actions and views. It will typically
-be an `ActiveRecord` class, a `:symbol`, or any Plain Old Ruby Object.
-
-You define a subject with the following DSL:
-
-```ruby
-Consent.define Project, 'Our Projects' do
-  #in this case, Project is the subject
-  # and `Our Projects` is the description that makes it clear to users
-  # what the subject is acting upon.
-  …
-end
-```
-
-The scope is the action that's being performed on the subject. It can be anything, but will
-typically be an ActiveRecord class, a `:symbol`, or a PORO.
-
-For instance:
-
-```ruby
-Consent.define :features, 'Beta Features' do
-  # whatever you put inside this method defines the scope
-end
-```
-
-## Views
-
-Views are the rules that limit access to actions. For instance, a user may see a `Project`
-from his department, but not from others. You can enforce it with a `:department` view,
-as in the examples below:
-
-### Hash Conditions
-
-Probably the most commonly used. When the view can be defined using a `where` scope in
-an ActiveRecord context. It follows a match condition and will return all objects that meet
-the criteria:
-
-```ruby
-Consent.define Project, 'Projects' do
-  view :department, "User's department only" do |user|
-    { department_id: user.id }
-  end
-end
-```
-
-Although hash conditions (matching object's attributes) are recommended, the constraints can
-be anything you want. Since Consent does not enforce the rules, those rules are directly given
-to CanCan. Following [CanCan rules](https://github.com/CanCanCommunity/cancancan/wiki/Defining-Abilities%3A-Best-Practice)
-for defining abilities is recommended.
-
-### Object Conditions
-
-If you're not matching for equal values, then you would need to use an object condition.
-
-If you already have an object and want to check to see whether the user has permission to view
-that specific object, you would use object conditions.
-
-If your needs can't be satisfied by hash conditions, it is recommended that a second condition
-is given for constraining object instances. For example, if you want to restrict a view for smaller
-volume projects:
-
-```ruby
-Consent.define Project, 'Projects' do
-  view :small_volumes, "User's department only",
-    -> (user) {
-      ['amount < ?', user.volume_limit]
-    end,
-    -> (user, project) {
-      project.amount < user.volume_limit
-    }
-end
-```
-
-For object conditions, the latter argument will be the referred object, while the
-first will be the context given to the [Permission](#permission) (also check
-[CanCan integration](#cancan-integration)).
-
-## Action
-
-An action is anything you can perform on a given subject. In the example of
-Features this would look like the following using Consent's DSL:
-
-```ruby
-Consent.define :features, 'Beta Features' do
-  action :beta_chat, 'Beta Chat App'
-end
-```
-
-To associate different views to the same action:
-
-```ruby
-Consent.define Project, 'Projects' do
-  # returns conditions that can be used as a matcher for objects so the matcher
-  # can return true or false (hash version)
-  view :department, "User's department only" do |user|
-    { department_id: user.id }
-  end
-  view :future_projects, "User's department only",
-    # returns a condition to be applied to a collection of objects
-    -> (_) {
-      ['starts_at > ?', Date.today]
-    end,
-    # returns true/false based on a condition -- to use this, you must pass in
-    # an instance of an object in order to check the permission
-    -> (user, project) {
-      project.starts_at > Date.today
-    }
-
-  action :read, 'Read projects', views: [:department, :future_projects]
-end
-```
-
-If you have a set of actions with the same set of views, you can use a
-`with_defaults` block to simplify the writing:
-
-```ruby
-with_defaults views: [:department, :small_volumes] do
-  action :read, 'Read projects'
-  action :approve, 'Approve projects'
-end
-```
-
-## Permission
-
-A permission is what is consented to the user. It consentment to perform
-an *action* on a limited *view* of the *subject*. It marries the three concepts
-to consent an access to the user.
-
-## CanCan Integration
-
-Consent provides a CanCan ability (Consent::Ability) to integrate your
-permissions with frameworks like Rails. To use it with Rails check out the
-example at [Ability for Other Users](https://github.com/CanCanCommunity/cancancan/wiki/Ability-for-Other-Users)
-on CanCanCan's wiki.
-
-In the ability you define the scope of the permissions. This is typically a
-user:
-
-```ruby
-Consent::Ability.new(user)
-```
-
-You'd more commonly define a subclass of `Consent::Ability`, and consent access
-to the user by calling `consent`:
-
-```ruby
-class MyAbility < Consent::Ability
-  def initialize(user)
-    super user
-
-    consent :read, Project, :department
-  end
-end
-```
-
-You can also consent full access by not specifying the view:
-
-```ruby
-  consent :read, Project
-```
-
-If you have a somehow manageable permission, you can consent them in batch in your ability:
-
-```ruby
-class MyAbility < Consent::Ability
-  def initialize(user)
-    super user
-
-    user.permissions.each do |permission|
-      consent permission.action, permission.subject, permission.view
-    end
-  end
-end
-```
-
-Consenting the same permission multiple times is handled as a Union by CanCanCan:
-
-```ruby
-class MyAbility < Consent::Ability
-  def initialize(user)
-    super user
-
-    consent :read, Project, :department
-    consent :read, Project, :future_projects
-  end
-end
-
-user = User.new(department_id: 13)
-ability = MyAbility.new(user)
-
-Project.accessible_by(ability, :read).to_sql
-=> SELECT * FROM projects WHERE ((department_id = 13) OR (starts_at > '2021-04-06'))
-```
-
-## Rails Integration
-
-Consent is integrated into Rails with `Consent::Railtie`. To define where
-your permission files will be, use `config.consent.path`. This defaults to
-`#{Rails.root}/app/permissions/` to conform to Rails' standards.
-
-## Development
-
-After checking out the repo, run `bin/setup` to install dependencies. Then, run
-`rake spec` to run the tests. You can also run `bin/console` for an interactive
-prompt that will allow you to experiment.
-
-To install this gem onto your local machine, run `bundle exec rake install`. To
-release a new version, update the version number in `version.rb`, and then run
-`bundle exec rake release`, which will create a git tag for the version, push
-git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
-
-## Contributing
-
-Bug reports and pull requests are welcome on GitHub at https://github.com/powerhome/consent.

data/TODO.md

@@ -1 +0,0 @@
-* DSL validate Consent state