databound 2.0.1 → 3.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: cba727e2ab9d8e8ae6f7493aad47e28cac352592
-  data.tar.gz: d6791304413633e2abdaee1b737a77b1a9dfaea3
+  metadata.gz: c17ea9293869f528bb57b8f815ade20dfe629904
+  data.tar.gz: bff389e7ba5502edb650bede3fe7b78acda3a88e
 SHA512:
-  metadata.gz: 63143f0d64ad79f6563425cd35b7a73a4e01d0c3b40b369476c34f77c52d54c64a2793f57b68f39970c8031f6706df4fdb038aacfd29ff3fbccc58cb6f0d008a
-  data.tar.gz: b6cdeca9c47ab71d89368ed45f2c10ee2f3eb715f693b3255264083982d25d9415c9fe1ee3723ae4ef947a5fb1ca81ab0cc682314d7c0ad4d953deb8c15e60e0
+  metadata.gz: ac22d42e131278f67c5fa25dbcfeeb3f8e8300c1596d47ddf5493cb19daab2a9cc3cd05519ed5a8b780ba703db670bffaea15144ac66ab364d9807bf6553eeb4
+  data.tar.gz: 2c4d73542e0f1195e9e1ebc0aebeb6cd366c2f77b526e347d160225694b4c03b15b4882ef5cb21b4c799c70fed73122996217084725fe44bdce56eabfa26631a

data/README.md

@@ -6,7 +6,7 @@
 
 ![Databound](https://cloud.githubusercontent.com/assets/1877286/4743542/df89dcec-5a28-11e4-9114-6f383fe269cb.png)
 
-Exposes Ruby on Rails database to the Javascript side.
+Provides Javascript a simple CRUD API to the Ruby on Rails backend.
 
 This repo is for Ruby on Rails backend part of Databound.
 
@@ -24,11 +24,11 @@ This repo is for Ruby on Rails backend part of Databound.
   });
 
   User.find(15).then(function(user) {
-   print('User no. 15: ' + user.name);
+    alert('User no. 15: ' + user.name);
   });
 
   User.create({ name: 'Peter' }).then(function(user) {
-   print('I am ' + user.name + ' from database');
+    alert('I am ' + user.name + ' from database');
   });
 ```
 

data/databound.gemspec

@@ -8,9 +8,9 @@ Gem::Specification.new do |spec|
   spec.version       = Databound::VERSION
   spec.authors       = ['Domas Bitvinskas']
   spec.email         = ['domas.bitvinskas@me.com']
-  spec.summary       = %q{Databound exposes Ruby on Rails database to the Javascript side}
-  spec.description   = %q{Works with ActiveRecord and Mongoid out of the box}
-  spec.homepage      = 'https://github.com/Nedomas/databound'
+  spec.summary       = %q{Provides Javascript a simple API to the Ruby on Rails CRUD}
+  spec.description   = %q{It lets you use methods like create, update, destroy in the front-end while handling all the setup and providing basic security out of the box.}
+  spec.homepage      = 'http://databound.me'
   spec.license       = 'MIT'
 
   spec.files         = `git ls-files -z`.split("\x0")

data/lib/databound.rb

@@ -2,13 +2,13 @@ require 'databound/extensions'
 require 'databound/version'
 require 'databound/data'
 require 'databound/manager'
-require 'databound/utils'
+require 'databound/config'
+require 'databound/controller'
 require 'databound/rails/routes'
 
 module Databound
   def self.included(base)
     base.send(:before_action, :init_crud, only: %i(where create update destroy))
-    base.extend(ClassMethods)
   end
 
   def where
@@ -66,14 +66,6 @@ module Databound
     serializer.new(record).attributes[:id]
   end
 
-  def model
-    raise 'Override model method to specify a model to be used in CRUD'
-  end
-
-  def permitted_columns
-    []
-  end
-
   def init_crud
     @crud = Databound::Manager.new(self)
   end
@@ -81,23 +73,4 @@ module Databound
   def scoped_records
     @crud.find_scoped_records(only_extra_scopes: true)
   end
-
-  module ClassMethods
-    attr_reader :dsls
-    attr_reader :stricts
-    attr_reader :permit_update_destroy
-
-    def dsl(name, value, strict: true, &block)
-      @stricts ||= {}
-      @stricts[name.to_s] = strict
-
-      @dsls ||= {}
-      @dsls[name.to_s] ||= {}
-      @dsls[name.to_s][value.to_s] = block
-    end
-
-    def permit_update_destroy?(&block)
-      @permit_update_destroy = block
-    end
-  end
 end

data/lib/databound/config.rb

@@ -0,0 +1,38 @@
+module Databound
+  class Config
+    def initialize(block, model)
+      @model = model
+      @permit = {}
+      instance_eval(&block)
+    end
+
+    def columns(*specified_columns)
+      @columns = specified_columns
+    end
+
+    def model(specified_model)
+      raise "Model '#{@model}' already specified" if @model
+
+      @model = specified_model
+    end
+
+    def permit(*methods, &block)
+      methods.each do |method|
+        @permit[method] = block
+      end
+    end
+
+    def dsl(name, value, strict: true, &block)
+      @stricts ||= {}
+      @stricts[name] = strict
+
+      @dsls ||= {}
+      @dsls[name] ||= {}
+      @dsls[name][value.to_s] = block
+    end
+
+    def read(name)
+      instance_variable_get("@#{name}")
+    end
+  end
+end

data/lib/databound/controller.rb

@@ -0,0 +1,63 @@
+module Databound
+  class Controller
+    class << self
+      def add_application_controller_configs!
+        def ApplicationController.databound(model = nil, &block)
+          include Databound
+
+          send(:define_method, :databound_config) do
+            Databound::Config.new(block, model)
+          end
+        end
+      end
+
+      def find_or_create(name, resource, opts)
+        find(name) || create(name, resource, opts)
+      end
+
+      def create(name, resource, opts)
+        opts ||= {}
+        Object.const_set(as_constant_string(name), new(resource, opts))
+      end
+
+      def new(resource, opts)
+        model_name = opts.delete(:model) || fallback_model(resource)
+
+        result = Class.new(ApplicationController)
+        result.send(:databound) do
+          model model_name
+
+          opts.each do |key, value|
+            send(key, *value)
+          end
+        end
+
+        result
+      end
+
+      def fallback_model(resource)
+        resource.to_s.classify.underscore.to_sym
+      end
+
+      def exists?(path)
+        name_error = false
+
+        begin
+          as_constant_string(path).constantize
+        rescue NameError
+          name_error = true
+        end
+
+        !name_error
+      end
+
+      def find(path)
+        as_constant_string(path).constantize if exists?(path)
+      end
+
+      def as_constant_string(name)
+        "#{name.camelize}Controller"
+      end
+    end
+  end
+end

data/lib/databound/data.rb

@@ -1,16 +1,16 @@
 module Databound
   class Data
-    def initialize(controller, json)
+    def initialize(controller, json, model)
       return unless json
 
       @controller = controller
-      @params = JSON.parse(json) if json.is_a?(String)
-      @params = json if json.is_a?(Hash)
+      @json = json
       @data = interpolated_params
+      @model = model
     end
 
-    def records(model)
-      model.where(@data)
+    def records
+      @model.where(@data)
     end
 
     def to_h
@@ -19,21 +19,27 @@ module Databound
 
     private
 
+    def params
+      @params ||= JSON.parse(@json) if @json.is_a?(String)
+      @params ||= @json if @json.is_a?(Hash)
+      OpenStruct.new(@params)
+    end
+
     def interpolated_params
-      @params.each_with_object({}) do |(key, val), obj|
+      params.to_h.each_with_object({}) do |(key, val), obj|
         check_strict!(key, val)
 
         block = dsl_block(key, val)
-        obj[key] = block ? @controller.instance_exec(@params.to_options, &block) : val
+        obj[key] = block ? @controller.instance_exec(params, &block) : val
       end
     end
 
     def dsl_block(key, val)
-      swallow_nil { dsl_key(key)[val] }
+      swallow_nil { dsl_key(key)[val.to_s] }
     end
 
     def dsl_key(key)
-      swallow_nil { @controller.class.dsls[key] }
+      swallow_nil { @controller.databound_config.read(:dsls)[key] }
     end
 
     def check_strict!(key, val)
@@ -45,7 +51,7 @@ module Databound
     end
 
     def strict?(key)
-      swallow_nil { @controller.class.stricts[key] }
+      swallow_nil { @controller.databound_config.read(:stricts)[key] }
     end
   end
 end

data/lib/databound/extensions.rb

@@ -1,5 +1,3 @@
-# module Databound
-# end
 def swallow_nil
   yield
 rescue NoMethodError

data/lib/databound/manager.rb

@@ -3,67 +3,78 @@ module Databound
   class Manager
     def initialize(controller)
       @controller = controller
-      @model = @controller.send(:model)
 
-      @scope = Databound::Data.new(controller, scope_js)
-      @data = Databound::Data.new(controller, data_js).to_h
+      @scope = Databound::Data.new(@controller, scope_js, model)
+      @data = Databound::Data.new(@controller, data_js, model)
 
       @extra_where_scopes = JSON.parse(extra_where_scopes_js).map do |extra_scope|
-        Databound::Data.new(controller, extra_scope)
+        Databound::Data.new(@controller, extra_scope, model)
       end
     end
 
     def find_scoped_records(only_extra_scopes: false)
-      records = []
-      records << @scope.records(@model)
+      records = model.where(or_query(@scope, *@extra_where_scopes))
+      records = filter_by_params!(records) unless only_extra_scopes
 
-      @extra_where_scopes.each do |extra_scope|
-        records << extra_scope.records(@model)
-      end
-
-      if only_extra_scopes
-        records.flatten
-      else
-        records.map { |record| record.where(@data) }.flatten
-      end
+      check_permit!(:read, params, records)
+      records
     end
 
     def create_from_data
-      check_params!
-      @model.where(@scope.to_h).create(@data)
+      check_params!(:create)
+      record = model.new(params.to_h)
+      check_permit!(:create, params, record)
+
+      record.save
+      record
     end
 
     def update_from_data
-      id = @data.delete('id')
+      attributes = params.to_h
+      id = attributes.delete(:id)
 
-      check_params!
-      record = @model.find(id)
-      check_permit_update_destroy!(record)
-      record.update(@data)
+      check_params!(:update)
+      record = model.find(id)
+      check_permit!(:update, params, record)
 
+      record.update(attributes)
       record
     end
 
     def destroy_from_data
-      record = @model.find(@data['id'])
-      check_permit_update_destroy!(record)
+      record = model.find(params.id)
+      check_permit!(:destroy, params, record)
       record.destroy
     end
 
     private
 
-    def check_params!
-      return if permitted_columns == :all
+    def or_query(*scopes)
+      nodes = scopes.map do |scope|
+        model.where(scope.to_h).where_values.reduce(:and)
+      end
+
+      nodes[1..-1].reduce(nodes.first) do |memo, node|
+        node.or(memo)
+      end
+    end
+
+    def check_params!(action)
+      @action = action
+      return if columns == :all
       return if unpermitted_columns.empty?
 
       raise NotPermittedError, "Request includes unpermitted columns: #{unpermitted_columns.join(', ')}"
     end
 
-    def check_permit_update_destroy!(record)
-      return unless permit_update_destroy_block
-      return if permit_update_destroy_block.call(record)
+    def check_permit!(method, params, record = nil)
+      permit_checks = @controller.databound_config.read(:permit)
+      check = permit_checks[method]
+
+      return unless check
+      return if @controller.instance_exec(params, record, &check)
 
-      raise NotPermittedError, 'Request for update or destroy not permitted'
+      raise NotPermittedError, "Request for #{method} not permitted"
     end
 
     def permit_update_destroy_block
@@ -71,29 +82,35 @@ module Databound
     end
 
     def unpermitted_columns
-      requested = [@scope, @data].map(&:to_h).flat_map(&:keys)
-      requested - permitted_columns.map(&:to_s)
+      params.to_h.keys - columns - allowed_action_columns
     end
 
-    def permitted_columns
-      columns = @controller.send(:permitted_columns)
+    def params
+      OpenStruct.new(@scope.to_h.merge(@data.to_h))
+    end
+
+    def allowed_action_columns
+      @action == :update ? [:id] : []
+    end
 
-      case columns
-      when :all
+    def columns
+      result = @controller.databound_config.read(:columns)
+
+      case result
+      when [:all]
         :all
-      when :table_columns
+      when [:table_columns]
         table_columns
       else
-        Array(columns)
+        Array(result)
       end
     end
 
     def table_columns
-      # permit all by default
       if mongoid?
         model.fields.keys.map(&:to_sym)
       elsif activerecord?
-        model.column_names
+        model.column_names.map(&:to_sym)
       else
         raise 'ORM not supported. Use ActiveRecord or Mongoid'
       end
@@ -108,7 +125,13 @@ module Databound
     end
 
     def model
-      @controller.send(:model)
+      raise 'No model specified' unless model_name
+
+      model_name.to_s.camelize.constantize
+    end
+
+    def model_name
+      @controller.databound_config.read(:model)
     end
 
     def scope_js
@@ -122,5 +145,13 @@ module Databound
     def extra_where_scopes_js
       @controller.params[:extra_where_scopes] || '[]'
     end
+
+    def extra_scope_records
+      @extra_where_scopes.flat_map(&:records)
+    end
+
+    def filter_by_params!(records)
+      records.where(params.to_h)
+    end
   end
 end

data/lib/databound/rails/routes.rb

@@ -3,15 +3,16 @@ class ActionDispatch::Routing::Mapper
     namespace = @scope[:path]
     namespace = namespace[1..-1] if namespace
     opts = resources.pop if resources.last.is_a?(Hash)
+    Databound::Controller.add_application_controller_configs!
 
     resources.each do |resource|
       Rails.application.routes.draw do
-        controller = [namespace, resource].compact.join('/')
-        Databound::Utils.create_controller_unless_exists(controller, resource, opts)
+        controller_name = [namespace, resource].compact.join('/')
+        Databound::Controller.find_or_create(controller_name, resource, opts)
 
         %i(where create update destroy).each do |name|
           path = [namespace, resource, name].compact.join('/')
-          to = [controller, name].join('#')
+          to = [controller_name, name].join('#')
           post path => to
         end
       end

data/lib/databound/version.rb

@@ -1,3 +1,3 @@
 module Databound
-  VERSION = '2.0.1'
+  VERSION = '3.0.0'
 end

data/spec/controllers/{permitted_columns_controller_spec.rb → columns_controller_spec.rb}

@@ -1,6 +1,35 @@
 require 'spec_helper'
 
-describe PermittedColumnsController, type: :controller do
+describe PostsController, type: :controller do
+  describe 'via routes' do
+    it 'raise when param is not permitted' do
+      data = {
+        data: {
+          city: 'Barcelona',
+        },
+        scope: {},
+      }
+
+      expect { post(:create, javascriptize(data)) }.to raise_error(
+        Databound::NotPermittedError,
+        'Request includes unpermitted columns: city',
+      )
+    end
+
+    it 'should create when param is permitted' do
+      data = {
+        data: {
+          title: 'Nikki',
+        },
+        scope: {},
+      }
+
+      expect { post(:create, javascriptize(data)) }.not_to raise_error
+    end
+  end
+end
+
+describe ColumnsController, type: :controller do
   describe '#create' do
     it 'raise when param is not permitted' do
       data = {

data/spec/controllers/model_controller_spec.rb

@@ -0,0 +1,22 @@
+require 'spec_helper'
+
+describe ProjectsController do
+  describe 'via routes' do
+    it 'should be able to specify model via routes' do
+      expect(ProjectsController.new.databound_config.read(:model)).to equal(:user)
+    end
+
+    it 'should be able to specify columns via routes' do
+      expect(ProjectsController.new.databound_config.read(:columns))
+        .to eql(%i(city user_id))
+    end
+  end
+end
+
+describe NoModelController, type: :controller do
+  describe 'raise error' do
+    it 'when model is not defined' do
+      expect { post(:create) }.to raise_error(RuntimeError)
+    end
+  end
+end

data/spec/controllers/permit_controller_spec.rb

@@ -0,0 +1,124 @@
+require 'spec_helper'
+
+describe PermitController, type: :controller do
+  CURRENT_USER_ID = 1
+
+  before :each do
+    Project.create(city: 'LA', user_id: 5)
+    Project.create(city: 'LA', user_id: 1)
+  end
+
+  describe '#read' do
+    it 'raise when scope is not permitted' do
+      data = {
+        data: {
+          city: 'LA',
+          dont_permit: true,
+        },
+        scope: {},
+      }
+
+      expect { post(:where, javascriptize(data)) }.to raise_error(
+        Databound::NotPermittedError,
+        'Request for read not permitted',
+      )
+    end
+
+    it 'should update when param is permitted' do
+      data = {
+        data: {
+          city: 'Barcelona',
+          user_id: 1,
+        },
+        scope: {},
+      }
+
+      expect { post(:where, javascriptize(data)) }.not_to raise_error
+    end
+  end
+
+  describe '#create' do
+    it 'raise when scope is not permitted' do
+      data = {
+        data: {
+          city: 'Barcelona',
+          user_id: 2,
+        },
+        scope: {},
+      }
+
+      expect { post(:create, javascriptize(data)) }.to raise_error(
+        Databound::NotPermittedError,
+        'Request for create not permitted',
+      )
+    end
+
+    it 'should update when param is permitted' do
+      data = {
+        data: {
+          city: 'Barcelona',
+          user_id: 1,
+        },
+        scope: {},
+      }
+
+      expect { post(:create, javascriptize(data)) }.not_to raise_error
+    end
+  end
+
+  describe '#update' do
+    it 'raise when scope is not permitted' do
+      data = {
+        data: {
+          id: 1,
+          city: 'Barcelona',
+        },
+        scope: {},
+      }
+
+      expect { post(:update, javascriptize(data)) }.to raise_error(
+        Databound::NotPermittedError,
+        'Request for update not permitted',
+      )
+    end
+
+    it 'should update when param is permitted' do
+      data = {
+        data: {
+          id: 2,
+          city: 'Barcelona',
+        },
+        scope: {},
+      }
+
+      expect { post(:update, javascriptize(data)) }.not_to raise_error
+    end
+  end
+
+  describe '#destroy' do
+    it 'raise when scope is not permitted' do
+      data = {
+        data: {
+          id: 1,
+        },
+        scope: {},
+      }
+
+      expect { post(:destroy, javascriptize(data)) }.to raise_error(
+        Databound::NotPermittedError,
+        'Request for destroy not permitted',
+      )
+    end
+
+    it 'should destroy when param is permitted' do
+      data = {
+        data: {
+          id: 2,
+        },
+        scope: {},
+      }
+
+      expect { post(:destroy, javascriptize(data)) }.not_to raise_error
+    end
+  end
+end

data/spec/internal/app/controllers/columns_controller.rb

@@ -0,0 +1,6 @@
+class ColumnsController < ApplicationController
+  databound do
+    model :user
+    columns :name
+  end
+end

data/spec/internal/app/controllers/dsl_controller.rb

@@ -1,21 +1,11 @@
 class DslController < ApplicationController
-  include Databound
-
-  private
-
-  def model
-    User
-  end
-
-  def permitted_columns
-    %i(name city)
-  end
-
-  dsl(:city, :hottest) do
-    'Miami'
-  end
-
-  dsl(:city, :coldest) do |params|
-    "Where #{params[:name]} lives"
+  databound do
+    model :user
+    columns :name, :city
+
+    dsl(:city, :hottest) { 'Miami' }
+    dsl(:city, :coldest) do |params|
+      "Where #{params.name} lives"
+    end
   end
 end

data/spec/internal/app/controllers/loose_dsl_controller.rb

@@ -1,17 +1,8 @@
 class LooseDslController < ApplicationController
-  include Databound
+  databound do
+    model :user
+    columns :name, :city
 
-  private
-
-  def permitted_columns
-    %i(name city)
-  end
-
-  def model
-    User
-  end
-
-  dsl(:city, :hottest, strict: false) do
-    'Miami'
+    dsl(:city, :hottest, strict: false) { 'Miami' }
   end
 end

data/spec/internal/app/controllers/no_model_controller.rb

@@ -1,3 +1,4 @@
 class NoModelController < ApplicationController
-  include Databound
+  databound do
+  end
 end

data/spec/internal/app/controllers/permit_controller.rb

@@ -0,0 +1,18 @@
+class PermitController < ApplicationController
+  databound do
+    model :project
+    columns :name, :city, :user_id, :dont_permit
+
+    permit(:read) do |params, records|
+      !params.dont_permit
+    end
+
+    permit(:create) do |params|
+      params.user_id == CURRENT_USER_ID
+    end
+
+    permit(:update, :destroy) do |_, record|
+      record.user_id == CURRENT_USER_ID
+    end
+  end
+end

data/spec/internal/app/controllers/users_controller.rb

@@ -1,13 +1,6 @@
 class UsersController < ApplicationController
-  include Databound
-
-  private
-
-  def model
-    User
-  end
-
-  def permitted_columns
-    %i(name city)
+  databound do
+    model :user
+    columns :name, :city
   end
 end

data/spec/internal/config/routes.rb

@@ -1,10 +1,11 @@
 Rails.application.routes.draw do
   databound :users
   databound :no_model
-  databound :permitted_columns
+  databound :columns
   databound :dsl
   databound :loose_dsl
-  databound :messages, permitted_columns: :table_columns
-  databound :permit_update_destroy
-  databound :posts, permitted_columns: %i(title)
+  databound :messages, columns: :table_columns
+  databound :permit
+  databound :posts, columns: %i(title)
+  databound :projects, columns: %i(city user_id), model: :user
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: databound
 version: !ruby/object:Gem::Version
-  version: 2.0.1
+  version: 3.0.0
 platform: ruby
 authors:
 - Domas Bitvinskas
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-01-04 00:00:00.000000000 Z
+date: 2015-01-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec-rails
@@ -122,7 +122,8 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '10.0'
-description: Works with ActiveRecord and Mongoid out of the box
+description: It lets you use methods like create, update, destroy in the front-end
+  while handling all the setup and providing basic security out of the box.
 email:
 - domas.bitvinskas@me.com
 executables: []
@@ -138,29 +139,30 @@ files:
 - config.ru
 - databound.gemspec
 - lib/databound.rb
+- lib/databound/config.rb
+- lib/databound/controller.rb
 - lib/databound/data.rb
 - lib/databound/extensions.rb
 - lib/databound/manager.rb
 - lib/databound/rails/routes.rb
-- lib/databound/utils.rb
 - lib/databound/version.rb
 - lib/generators/databound/install/install_generator.rb
 - lib/generators/databound/install/templates/application.js
 - lib/generators/databound/install/templates/databound-standalone.js
+- spec/controllers/columns_controller_spec.rb
 - spec/controllers/databound_spec.rb
 - spec/controllers/dsl_controller_spec.rb
 - spec/controllers/loose_dsl_controller_spec.rb
-- spec/controllers/no_model_controller_spec.rb
+- spec/controllers/model_controller_spec.rb
 - spec/controllers/on_the_fly_spec.rb
-- spec/controllers/permit_update_destroy_controller_spec.rb
-- spec/controllers/permitted_columns_controller_spec.rb
-- spec/controllers/permitted_routes_columns_controller_spec.rb
+- spec/controllers/permit_controller_spec.rb
+- spec/controllers/routes_opts_controller_spec.rb
 - spec/internal/app/controllers/application_controller.rb
+- spec/internal/app/controllers/columns_controller.rb
 - spec/internal/app/controllers/dsl_controller.rb
 - spec/internal/app/controllers/loose_dsl_controller.rb
 - spec/internal/app/controllers/no_model_controller.rb
-- spec/internal/app/controllers/permit_update_destroy_controller.rb
-- spec/internal/app/controllers/permitted_columns_controller.rb
+- spec/internal/app/controllers/permit_controller.rb
 - spec/internal/app/controllers/users_controller.rb
 - spec/internal/app/models/message.rb
 - spec/internal/app/models/post.rb
@@ -222,7 +224,7 @@ files:
 - spec/support/rails_test_app/public/robots.txt
 - spec/support/rails_test_app/vendor/assets/javascripts/.keep
 - spec/support/rails_test_app/vendor/assets/stylesheets/.keep
-homepage: https://github.com/Nedomas/databound
+homepage: http://databound.me
 licenses:
 - MIT
 metadata: {}
@@ -245,22 +247,22 @@ rubyforge_project:
 rubygems_version: 2.2.2
 signing_key: 
 specification_version: 4
-summary: Databound exposes Ruby on Rails database to the Javascript side
+summary: Provides Javascript a simple API to the Ruby on Rails CRUD
 test_files:
+- spec/controllers/columns_controller_spec.rb
 - spec/controllers/databound_spec.rb
 - spec/controllers/dsl_controller_spec.rb
 - spec/controllers/loose_dsl_controller_spec.rb
-- spec/controllers/no_model_controller_spec.rb
+- spec/controllers/model_controller_spec.rb
 - spec/controllers/on_the_fly_spec.rb
-- spec/controllers/permit_update_destroy_controller_spec.rb
-- spec/controllers/permitted_columns_controller_spec.rb
-- spec/controllers/permitted_routes_columns_controller_spec.rb
+- spec/controllers/permit_controller_spec.rb
+- spec/controllers/routes_opts_controller_spec.rb
 - spec/internal/app/controllers/application_controller.rb
+- spec/internal/app/controllers/columns_controller.rb
 - spec/internal/app/controllers/dsl_controller.rb
 - spec/internal/app/controllers/loose_dsl_controller.rb
 - spec/internal/app/controllers/no_model_controller.rb
-- spec/internal/app/controllers/permit_update_destroy_controller.rb
-- spec/internal/app/controllers/permitted_columns_controller.rb
+- spec/internal/app/controllers/permit_controller.rb
 - spec/internal/app/controllers/users_controller.rb
 - spec/internal/app/models/message.rb
 - spec/internal/app/models/post.rb

data/lib/databound/utils.rb

@@ -1,36 +0,0 @@
-module Databound
-  class Utils
-    def self.create_controller_unless_exists(path, resource, opts)
-      return if exists?(path)
-      opts ||= {}
-
-      controller = Class.new(ApplicationController)
-      controller.send(:include, Databound)
-      controller.send(:define_method, :model) do
-        resource.to_s.classify.constantize
-      end
-
-      controller.send(:define_method, :permitted_columns) do
-        opts.fetch(:permitted_columns) do
-          raise 'Specify permitted_columns in routes or the controller'
-        end
-      end
-
-      Object.const_set(controller_name(path), controller)
-    end
-
-    def self.exists?(path)
-      begin
-        controller_name(path).constantize
-      rescue NameError
-        return false
-      end
-
-      true
-    end
-
-    def self.controller_name(path)
-      "#{path.camelize}Controller"
-    end
-  end
-end

data/spec/controllers/no_model_controller_spec.rb

@@ -1,9 +0,0 @@
-require 'spec_helper'
-
-describe NoModelController, type: :controller do
-  describe 'raise error' do
-    it 'when model is not defined' do
-      expect { post(:create) }.to raise_error(RuntimeError)
-    end
-  end
-end

data/spec/controllers/permit_update_destroy_controller_spec.rb

@@ -1,66 +0,0 @@
-require 'spec_helper'
-
-describe PermitUpdateDestroyController, type: :controller do
-  CURRENT_USER_ID = 1
-
-  before :each do
-    Project.create(city: 'LA', user_id: 5)
-    Project.create(city: 'LA', user_id: 1)
-  end
-
-  describe '#update' do
-    it 'raise when scope is not permitted' do
-      data = {
-        data: {
-          id: 1,
-          city: 'Barcelona',
-        },
-        scope: {},
-      }
-
-      expect { post(:update, javascriptize(data)) }.to raise_error(
-        Databound::NotPermittedError,
-        'Request for update or destroy not permitted',
-      )
-    end
-
-    it 'should update when param is permitted' do
-      data = {
-        data: {
-          id: 2,
-          city: 'Barcelona',
-        },
-        scope: {},
-      }
-
-      expect { post(:update, javascriptize(data)) }.not_to raise_error
-    end
-  end
-
-  describe '#destroy' do
-    it 'raise when scope is not permitted' do
-      data = {
-        data: {
-          id: 1,
-        },
-        scope: {},
-      }
-
-      expect { post(:destroy, javascriptize(data)) }.to raise_error(
-        Databound::NotPermittedError,
-        'Request for update or destroy not permitted',
-      )
-    end
-
-    it 'should destroy when param is permitted' do
-      data = {
-        data: {
-          id: 2,
-        },
-        scope: {},
-      }
-
-      expect { post(:destroy, javascriptize(data)) }.not_to raise_error
-    end
-  end
-end

data/spec/internal/app/controllers/permit_update_destroy_controller.rb

@@ -1,17 +0,0 @@
-class PermitUpdateDestroyController < ApplicationController
-  include Databound
-
-  private
-
-  def permitted_columns
-    %i(name city)
-  end
-
-  def model
-    Project
-  end
-
-  permit_update_destroy? do |record|
-    record.user_id == CURRENT_USER_ID
-  end
-end

data/spec/internal/app/controllers/permitted_columns_controller.rb

@@ -1,13 +0,0 @@
-class PermittedColumnsController < ApplicationController
-  include Databound
-
-  private
-
-  def model
-    User
-  end
-
-  def permitted_columns
-    %i(name)
-  end
-end