decidim-api 0.32.1 → 0.32.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 711ce76f6b6ef54bacaa6bc29c43a19b85700f4774f27e103d40e20431951e4a
-  data.tar.gz: 914f1dd7ea6ef1aa92ac99b571c42d9d469190d9834969b820a0b088e8bbddc0
+  metadata.gz: '0554690274d2da30ea2a9479b101b33f8607239ae6e2ccbcf81d89846a06c0d2'
+  data.tar.gz: 1f537c5eda8cfee30c3cb239ef4260a97705a1777306b7251a4320f40282775f
 SHA512:
-  metadata.gz: 05c4829b1bc14b3e49fb8b5a2063fb2a9342503dba997f9ae4c7872a6cbaebd2aaa8dcdb15fc0d0f9801f34631cd3b99ff1d6f6ff998715e8a58945c4ada5ca1
-  data.tar.gz: ffdc03c642bbb04d4c325eb48a53be3bc8951b1a86b2900d4c8a8718d167368051eeef3821a7616a4f7be3761e94e48373324462003c9e0ec7d74131da51ecd5
+  metadata.gz: 04a72a83c77d17c3c5462d377d5cf90ab5a440cbcc38ff19740b7bcb76f722e5226fd79ded64d5b78319f5d966571b1671174f4671822256f15d79246e19f282
+  data.tar.gz: c282a686e98b0c106ed7fc21348b2e8ba985b19407aca665dc49261c715f91aeaccd72b6da75f4252985baa317b515b0fa2f923511cad3c234e68323e53c6147

data/config/locales/cs.yml

@@ -3,6 +3,7 @@ cs:
   decidim:
     api:
       errors:
+        introspection_disabled: Introspekce je pro tento požadavek zakázána
         invalid_locale: Poskytnuta neplatná lokalizace
         locale_argument_error: Při interním zpracování i18n dat došlo k chybě
         not_found: "%{type} nenalezen"

data/config/locales/de.yml

@@ -1 +1,15 @@
+---
 de:
+  decidim:
+    api:
+      errors:
+        introspection_disabled: Introspection ist für diese Anfrage deaktiviert
+        invalid_locale: Ungültige Spracheinstellung angegeben
+        locale_argument_error: Bei der internen Verarbeitung der i18n-Daten ist ein Fehler aufgetreten
+        not_found: "%{type} nicht gefunden"
+        permission_not_set: Für dieses %{type} wurde keine Berechtigung festgelegt
+        recursion_limit_exceeded_error: In der Abfrage wurden zu viele Rekursionen festgestellt
+        too_many_aliases_error: Es wurden zu viele Aliase verwendet. Sie haben %{size} Aliase verwendet, erlaubt sind jedoch nur %{limit}.
+        unauthorized_field: Sie können das Feld %{field} von %{type} nicht ansehen oder bearbeiten, da Ihnen die Berechtigung dafür fehlt
+        unauthorized_mutation: Sie sind nicht berechtigt, diese Änderungsoperation durchzuführen
+        unauthorized_object: Sie können dieses %{type} nicht ansehen oder bearbeiten, da Ihnen die Berechtigung dafür fehlt

data/config/locales/es.yml

@@ -12,4 +12,4 @@ es:
         too_many_aliases_error: Has utilizado demasiados alias (nicknames). Has usado %{size} alias, pero se permite un máximo de %{limit}.
         unauthorized_field: No puedes ver o editar el campo %{field} en %{type} porque no tienes permiso
         unauthorized_mutation: No tienes permiso para realizar esta mutación
-        unauthorized_object: No puedes ver o editar este %{type} porque no tienes permisos
+        unauthorized_object: No puedes ver o editar este/a %{type} porque no tienes permisos

data/config/locales/gl.yml

@@ -1 +1,15 @@
+---
 gl:
+  decidim:
+    api:
+      errors:
+        introspection_disabled: A introspección está desactivada para esta solicitude
+        invalid_locale: A configuración rexional indicada non é válida
+        locale_argument_error: Produciuse un erro ao xestionar internamente os datos de i18n
+        not_found: "Non se atopou %{type}"
+        permission_not_set: Non se estableceu o permiso para %{type}
+        recursion_limit_exceeded_error: Detectáronse demasiadas recursións na consulta
+        too_many_aliases_error: Usáronse demasiados alias. Usaches %{size}, pero só se permiten %{limit}.
+        unauthorized_field: Non podes ver nin editar o campo %{field} de %{type} porque non tes permiso
+        unauthorized_mutation: Non tes permiso para realizar esta mutación
+        unauthorized_object: Non podes ver nin editar %{type} porque non tes permisos

data/decidim-api.gemspec

@@ -3,7 +3,7 @@
 $LOAD_PATH.push File.expand_path("lib", __dir__)
 
 Gem::Specification.new do |s|
-  version = "0.32.1"
+  version = "0.32.2"
   s.version = version
   s.authors = ["Josep Jaume Rey Peroy", "Marc Riera Casals", "Oriol Gual Oliva"]
   s.email = ["josepjaume@gmail.com", "mrc2407@gmail.com", "oriolgual@gmail.com"]
@@ -31,7 +31,7 @@ Gem::Specification.new do |s|
 
   s.add_dependency "decidim-core", version
   s.add_dependency "devise-jwt", ">= 0.12.1", "< 0.14.0"
-  s.add_dependency "graphql", ">= 2.4.17", "< 2.6"
+  s.add_dependency "graphql", ">= 2.4.17", "< 2.7"
   s.add_dependency "graphql-docs", ">= 5", "< 7"
   s.add_dependency "rack-cors", ">= 1", "< 4"
 

data/lib/decidim/api/graphql_permissions.rb

@@ -56,29 +56,39 @@ module Decidim
           false
         end
 
-        # Injects into context object current_participatory_space and current_component keys as they are needed
+        # Injects into the context the current_participatory_space and current_component keys
+        # for the object being checked, as they are needed by the permission classes.
         #
         # @param object [ActiveModel::Base] The object that is being represented.
         # @param context [GraphQL::Query::Context] The GraphQL context
         #
         # @return Hash
         def local_context(object, context)
-          context[:current_participatory_space] ||=
-            if object.respond_to?(:participatory_space)
-              object.participatory_space
-            elsif object.is_a?(Decidim::Participable)
-              object
-            end
-          context[:current_component] ||=
-            if object.is_a?(Decidim::Component)
-              object
-            elsif object.respond_to?(:component)
-              object.component
-            end
+          participatory_space = participatory_space_for(object)
+          component = component_for(object)
+
+          # Always use the associations of the object being checked. The context
+          # is shared by every field in the query, so keeping a previous object's
+          # space could authorize resources from a different space.
+          context[:current_participatory_space] = participatory_space if participatory_space
+          context[:current_component] = component if component
 
           context.to_h
         end
 
+        def participatory_space_for(object)
+          return object.participatory_space if object.respond_to?(:participatory_space)
+          return object if object.is_a?(Decidim::Participable)
+
+          component_for(object)&.participatory_space
+        end
+
+        def component_for(object)
+          return object if object.is_a?(Decidim::Component)
+
+          object.component if object.respond_to?(:component)
+        end
+
         def local_user_context(object, context)
           context = local_context(object, context)
 

data/lib/decidim/api/query_type.rb

@@ -57,6 +57,8 @@ module Decidim
       end
 
       def user(id: nil, nickname: nil)
+        return nil if id.blank? && nickname.blank?
+
         Core::UserEntityFinder.new.call(object, { id:, nickname: }, context)
       end
 

data/lib/decidim/api/test/factories.rb

@@ -16,8 +16,6 @@ FactoryBot.define do
     organization
     locale { organization.default_locale }
     tos_agreement { "1" }
-    confirmation_sent_at { Time.current }
-    accepted_tos_version { organization.tos_version }
     admin { true }
     admin_terms_accepted_at { Time.current }
     notifications_sending_frequency { "none" }

data/lib/decidim/api/version.rb

@@ -4,7 +4,7 @@ module Decidim
   # This holds the decidim-api version.
   module Api
     def self.version
-      "0.32.1"
+      "0.32.2"
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: decidim-api
 version: !ruby/object:Gem::Version
-  version: 0.32.1
+  version: 0.32.2
 platform: ruby
 authors:
 - Josep Jaume Rey Peroy
@@ -17,14 +17,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
 - !ruby/object:Gem::Dependency
   name: devise-jwt
   requirement: !ruby/object:Gem::Requirement
@@ -54,7 +54,7 @@ dependencies:
         version: 2.4.17
     - - "<"
       - !ruby/object:Gem::Version
-        version: '2.6'
+        version: '2.7'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -64,7 +64,7 @@ dependencies:
         version: 2.4.17
     - - "<"
       - !ruby/object:Gem::Version
-        version: '2.6'
+        version: '2.7'
 - !ruby/object:Gem::Dependency
   name: graphql-docs
   requirement: !ruby/object:Gem::Requirement
@@ -111,56 +111,56 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
 - !ruby/object:Gem::Dependency
   name: decidim-comments
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
 - !ruby/object:Gem::Dependency
   name: decidim-dev
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
 - !ruby/object:Gem::Dependency
   name: decidim-participatory_processes
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.32.1
+        version: 0.32.2
 description: API engine for decidim
 email:
 - josepjaume@gmail.com