declarative_authorization-dta 0.1 → 0.1.1

data/lib/declarative_authorization/in_model.rb

@@ -5,6 +5,8 @@ require File.dirname(__FILE__) + '/obligation_scope.rb'
 module Authorization
   
   module AuthorizationInModel
+    ReadAllPrivilege = :read
+    WriteAllPrivilege = :write
 
     # If the user meets the given privilege, permitted_to? returns true
     # and yields to the optional block.
@@ -49,7 +51,7 @@ module Authorization
       return false unless [:read, :write].include?(mode)
       
       # Variables needed to make checks
-      access_all_columns_sym = (mode == :read) ? self.class.read_all_privilege.to_sym : self.class.write_all_privilege.to_sym
+      access_all_columns_sym = (mode == :read) ? ReadAllPrivilege : WriteAllPrivilege
       whitelist_sym = (mode == :read) ? attribute.to_sym : (attribute + '=').to_sym
       acl_sym = (mode == :read) ? ('read_' + attribute).to_sym : ('write_' + attribute).to_sym
       
@@ -234,11 +236,11 @@ module Authorization
               instance_eval <<-EOV
                
                 def #{method_name}
-                   permitted_to!(:read_#{method_name}) unless permitted_to?(:#{read_all_privilege})
+                   permitted_to!(:read_#{method_name}) unless permitted_to?(:#{ReadAllPrivilege})
                    return no_acl_#{method_name}
                 end
                 def #{method_name}=(value)
-                   permitted_to!(:write_#{method_name}) unless permitted_to?(:#{write_all_privilege})
+                   permitted_to!(:write_#{method_name}) unless permitted_to?(:#{WriteAllPrivilege})
                    return no_acl_#{method_name}=(value)
                 end
               EOV
@@ -274,23 +276,7 @@ module Authorization
               
               # Create helper methods, that can be called from within our code to access
               # variables that are set up during initilization
-              instance_eval <<-EOV
-                #
-                # Determine what privilege to use for read all
-                #
-                def read_all_privilege
-                  '#{options[:include_attributes][0][:read_all_privilege].blank? ? 'read' : options[:include_attributes][0][:read_all_privilege]}'
-                end            
-
-                #
-                # Determine what privilege to use for write all
-                #
-                def write_all_privilege
-                  '#{options[:include_attributes][0][:write_all_privilege].blank? ? 'write' : options[:include_attributes][0][:write_all_privilege]}'
-                end
-              EOV
-              
-              class_eval <<-EOV
+               class_eval <<-EOV
                 #
                 # Method to return the white list
                 #
@@ -312,7 +298,7 @@ module Authorization
                   class_eval "begin; alias_method :no_acl_#{name}, :#{name};rescue;end #Alias-Methods - put acl stuff into method-chain
                   begin; alias_method :no_acl_#{name}=, :#{name}=; rescue; end
                   def #{name} #Define getters / setter with ACL-Checks
-                    permitted_to!(:read_#{name}) if !permitted_to?(:#{read_all_privilege}); 
+                    permitted_to!(:read_#{name}) if !permitted_to?(:#{ReadAllPrivilege}); 
                     if(respond_to? 'no_acl_#{name}')
                       return no_acl_#{name}
                     else
@@ -320,7 +306,7 @@ module Authorization
                     end
                   end" unless name.to_s == self.primary_key.to_s || whitelist.include?(name.to_sym) || application_default_attributes.include?(name.to_sym) || !options[:include_read] # Do not do reads, unless told so
                   class_eval %{def #{name}=(n)
-                    permitted_to!(:write_#{name}) if !permitted_to?(:#{write_all_privilege});
+                    permitted_to!(:write_#{name}) if !permitted_to?(:#{WriteAllPrivilege});
                     if(respond_to? 'no_acl_#{name}=')
                       return no_acl_#{name}=(n)
                     else
@@ -379,7 +365,7 @@ module Authorization
               # Returns a hash of key, value paris that are readable
               #
               def readable_attributes 
-                return attributes if permitted_to?(self.class.read_all_privilege.to_sym)
+                return attributes if permitted_to?(ReadAllPrivilege)
                 attributes.reject do |k,v|
                   !allowed?(:read, k)
                 end
@@ -389,7 +375,7 @@ module Authorization
               # Returns a hash of key, value paris that are showable, excluding application_default_attributes
               #
               def showable_attributes
-                return attributes if permitted_to?(self.class.read_all_privilege.to_sym)
+                return attributes if permitted_to?(ReadAllPrivilege)
                 attributes.reject do |k,v|
                   !allowed?(:read, k, true)
                 end
@@ -399,7 +385,7 @@ module Authorization
               # Returns a hash of key, value paris that are writable
               #
               def writable_attributes
-                return attributes if permitted_to?(self.class.write_all_privilege.to_sym)
+                return attributes if permitted_to?(WriteAllPrivilege)
                 attributes.reject do |k,v|
                   !allowed?(:write, k)
                 end

metadata

@@ -1,7 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: declarative_authorization-dta
 version: !ruby/object:Gem::Version 
-  version: "0.1"
+  hash: 25
+  prerelease: false
+  segments: 
+  - 0
+  - 1
+  - 1
+  version: 0.1.1
 platform: ruby
 authors: 
 - Jan Luehr
@@ -9,19 +15,25 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2010-09-03 00:00:00 +02:00
+date: 2010-09-10 00:00:00 +02:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency 
   name: rails
-  type: :runtime
-  version_requirement: 
-  version_requirements: !ruby/object:Gem::Requirement 
+  prerelease: false
+  requirement: &id001 !ruby/object:Gem::Requirement 
+    none: false
     requirements: 
     - - ">="
       - !ruby/object:Gem::Version 
+        hash: 11
+        segments: 
+        - 2
+        - 1
+        - 0
         version: 2.1.0
-    version: 
+  type: :runtime
+  version_requirements: *id001
 description: 
 email: yanosz@gmx.net
 executables: []
@@ -86,21 +98,29 @@ rdoc_options: []
 require_paths: 
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
   requirements: 
   - - ">="
     - !ruby/object:Gem::Version 
+      hash: 59
+      segments: 
+      - 1
+      - 8
+      - 6
       version: 1.8.6
-  version: 
 required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
   requirements: 
   - - ">="
     - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
       version: "0"
-  version: 
 requirements: []
 
 rubyforge_project: 
-rubygems_version: 1.3.5
+rubygems_version: 1.3.7
 signing_key: 
 specification_version: 3
 summary: declarative_authorization is a Rails plugin for authorization based on readable authorization rules.