crewd_policies 0.3.0 → 0.3.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/crewd_policies/model.rb +11 -2
- data/lib/crewd_policies/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: e00be59f41afaf3cee180c45ff49150983ea0a61
|
|
4
|
+
data.tar.gz: 50a550704ad57460802ad00f9363cd60d80566a6
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 91468f165e3a89c323cd3c91642d1de2202733cd1ba92f7a6f556733f975cb3d3991a853e79f53fa307013b2fcef6285b5f4b818dd9723d827c60dcdc74c1b6c
|
|
7
|
+
data.tar.gz: 40987e4fb0a168c219da4cb89a0810f08f06c15c103fd086c4c5c9c479018b927237bcb0276469e1065757514f707f90b6a550bc1b59285848217af95c6358d5
|
data/lib/crewd_policies/model.rb
CHANGED
|
@@ -3,8 +3,8 @@
|
|
|
3
3
|
module CrewdPolicies::Model
|
|
4
4
|
|
|
5
5
|
def self.included(aClass)
|
|
6
|
-
aClass.
|
|
7
|
-
aClass.roles_rules
|
|
6
|
+
aClass.class_attribute :roles_rules, instance_predicate: false, instance_accessor: false
|
|
7
|
+
aClass.roles_rules ||= {} # [:sales] => [
|
|
8
8
|
# {ability: 'read', fields: [:name,:address]}
|
|
9
9
|
# {ability: 'destroy', allowed: true}
|
|
10
10
|
# ]
|
|
@@ -13,6 +13,10 @@ module CrewdPolicies::Model
|
|
|
13
13
|
|
|
14
14
|
module ClassMethods
|
|
15
15
|
|
|
16
|
+
def dup_roles_rules(aRR)
|
|
17
|
+
aRR.deep_dup # provided by Rails
|
|
18
|
+
end
|
|
19
|
+
|
|
16
20
|
# supports different formats : allow <role>, <abilities> => <attributes>
|
|
17
21
|
#
|
|
18
22
|
# allow :sales, :write => [:name,:address] ie. sales can write the name and address fields
|
|
@@ -25,6 +29,11 @@ module CrewdPolicies::Model
|
|
|
25
29
|
aRole = aRole.to_s
|
|
26
30
|
raise ::StandardExceptions::Http::InternalServerError.new "aAbilities must be a Hash" unless aAbilities.is_a? Hash # eg. :write => [:name,:address]
|
|
27
31
|
|
|
32
|
+
# these lines inherit roles_rules from parent classes, then dup them so the parent doesn't get modified
|
|
33
|
+
superclass_rr = self.superclass && self.superclass.respond_to?(:roles_rules) && self.superclass.roles_rules
|
|
34
|
+
inheriting_rr = self.roles_rules && superclass_rr && (self.roles_rules.equal? superclass_rr)
|
|
35
|
+
self.roles_rules = dup_roles_rules(self.roles_rules) if inheriting_rr
|
|
36
|
+
|
|
28
37
|
role_rules = (self.roles_rules[aRole] ||= [])
|
|
29
38
|
conditions = {}
|
|
30
39
|
conditions[:if] = aAbilities.delete(:if) if aAbilities.include?(:if)
|