declarative_authorization 0.5.6 → 0.5.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/CHANGELOG +4 -0
- data/README.rdoc +1 -1
- data/lib/declarative_authorization/in_controller.rb +10 -9
- data/lib/declarative_authorization/obligation_scope.rb +1 -1
- metadata +20 -40
data/CHANGELOG
CHANGED
data/README.rdoc
CHANGED
@@ -515,7 +515,7 @@ sbartsch at tzi.org
|
|
515
515
|
|
516
516
|
Thanks to John Joseph Bachir, Dennis Blöte, Eike Carls, Damian Caruso, Kai Chen, Erik Dahlstrand,
|
517
517
|
Jeroen van Dijk, Alexander Dobriakov, Sebastian Dyck, Ari Epstein, Jeremy Friesen,
|
518
|
-
Tim Harper, John Hawthorn, hollownest, Daniel Kristensen, Jeremy Kleindl,
|
518
|
+
Tim Harper, John Hawthorn, hollownest, Daniel Kristensen, Jeremy Kleindl, Joel Kociolek,
|
519
519
|
Benjamin ter Kuile, Brad Langhorst, Brian Langenfeld,
|
520
520
|
Georg Ledermann, Geoff Longman, Olly Lylo, Mark Mansour, Thomas Maurer, Kevin Moore,
|
521
521
|
Tyler Pickett, Edward Rudd, Sharagoz,
|
@@ -127,7 +127,7 @@ module Authorization
|
|
127
127
|
elsif auth_exception
|
128
128
|
logger.info "Permission denied: #{auth_exception}"
|
129
129
|
end
|
130
|
-
if respond_to?(:permission_denied)
|
130
|
+
if respond_to?(:permission_denied, true)
|
131
131
|
# permission_denied needs to render or redirect
|
132
132
|
send(:permission_denied)
|
133
133
|
else
|
@@ -176,11 +176,12 @@ module Authorization
|
|
176
176
|
object = object_or_sym
|
177
177
|
end
|
178
178
|
|
179
|
-
{:
|
180
|
-
:object => object,
|
179
|
+
result = {:object => object,
|
181
180
|
:context => context,
|
182
181
|
:skip_attribute_test => object.nil?,
|
183
182
|
:bang => bang}.merge(options)
|
183
|
+
result[:user] = current_user unless result.key?(:user)
|
184
|
+
result
|
184
185
|
end
|
185
186
|
|
186
187
|
module ClassMethods
|
@@ -315,7 +316,7 @@ module Authorization
|
|
315
316
|
# filter_access_to in child controllers with the same action.
|
316
317
|
def all_filter_access_permissions # :nodoc:
|
317
318
|
ancestors.inject([]) do |perms, mod|
|
318
|
-
if mod.respond_to?(:filter_access_permissions)
|
319
|
+
if mod.respond_to?(:filter_access_permissions, true)
|
319
320
|
perms +
|
320
321
|
mod.filter_access_permissions.collect do |p1|
|
321
322
|
p1.clone.remove_actions(perms.inject(Set.new) {|actions, p2| actions + p2.actions})
|
@@ -489,7 +490,7 @@ module Authorization
|
|
489
490
|
load_parent_method = :"load_#{options[:nested_in].to_s.singularize}"
|
490
491
|
shallow_exceptions = options[:shallow] ? {:except => members.keys} : {}
|
491
492
|
before_filter shallow_exceptions do |controller|
|
492
|
-
if controller.respond_to?(load_parent_method)
|
493
|
+
if controller.respond_to?(load_parent_method, true)
|
493
494
|
controller.send(load_parent_method)
|
494
495
|
else
|
495
496
|
controller.send(:load_parent_controller_object, options[:nested_in])
|
@@ -499,7 +500,7 @@ module Authorization
|
|
499
500
|
new_for_collection_method = :"new_#{controller_name.singularize}_for_collection"
|
500
501
|
before_filter :only => collections.keys do |controller|
|
501
502
|
# new_for_collection
|
502
|
-
if controller.respond_to?(new_for_collection_method)
|
503
|
+
if controller.respond_to?(new_for_collection_method, true)
|
503
504
|
controller.send(new_for_collection_method)
|
504
505
|
else
|
505
506
|
controller.send(:new_controller_object_for_collection,
|
@@ -511,7 +512,7 @@ module Authorization
|
|
511
512
|
new_from_params_method = :"new_#{controller_name.singularize}_from_params"
|
512
513
|
before_filter :only => new_actions.keys do |controller|
|
513
514
|
# new_from_params
|
514
|
-
if controller.respond_to?(new_from_params_method)
|
515
|
+
if controller.respond_to?(new_from_params_method, true)
|
515
516
|
controller.send(new_from_params_method)
|
516
517
|
else
|
517
518
|
controller.send(:new_controller_object_from_params,
|
@@ -521,7 +522,7 @@ module Authorization
|
|
521
522
|
load_method = :"load_#{controller_name.singularize}"
|
522
523
|
before_filter :only => members.keys do |controller|
|
523
524
|
# load controller object
|
524
|
-
if controller.respond_to?(load_method)
|
525
|
+
if controller.respond_to?(load_method, true)
|
525
526
|
controller.send(load_method)
|
526
527
|
else
|
527
528
|
controller.send(:load_controller_object, options[:context] || controller_name)
|
@@ -558,7 +559,7 @@ module Authorization
|
|
558
559
|
def filter_access_permissions # :nodoc:
|
559
560
|
unless filter_access_permissions?
|
560
561
|
ancestors[1..-1].reverse.each do |mod|
|
561
|
-
mod.filter_access_permissions if mod.respond_to?(:filter_access_permissions)
|
562
|
+
mod.filter_access_permissions if mod.respond_to?(:filter_access_permissions, true)
|
562
563
|
end
|
563
564
|
end
|
564
565
|
class_variable_set(:@@declarative_authorization_permissions, {}) unless filter_access_permissions?
|
@@ -256,7 +256,7 @@ module Authorization
|
|
256
256
|
else
|
257
257
|
attribute_name = model.columns_hash["#{attribute}_id"] && :"#{attribute}_id" ||
|
258
258
|
model.columns_hash[attribute.to_s] && attribute ||
|
259
|
-
|
259
|
+
model.primary_key
|
260
260
|
attribute_table_alias = table_alias
|
261
261
|
used_paths << path
|
262
262
|
end
|
metadata
CHANGED
@@ -1,33 +1,24 @@
|
|
1
|
-
--- !ruby/object:Gem::Specification
|
1
|
+
--- !ruby/object:Gem::Specification
|
2
2
|
name: declarative_authorization
|
3
|
-
version: !ruby/object:Gem::Version
|
4
|
-
|
3
|
+
version: !ruby/object:Gem::Version
|
4
|
+
version: 0.5.7
|
5
5
|
prerelease:
|
6
|
-
segments:
|
7
|
-
- 0
|
8
|
-
- 5
|
9
|
-
- 6
|
10
|
-
version: 0.5.6
|
11
6
|
platform: ruby
|
12
|
-
authors:
|
7
|
+
authors:
|
13
8
|
- Steffen Bartsch
|
14
9
|
autorequire:
|
15
10
|
bindir: bin
|
16
11
|
cert_chain: []
|
17
|
-
|
18
|
-
date: 2012-09-23 00:00:00 Z
|
12
|
+
date: 2013-03-10 00:00:00.000000000 Z
|
19
13
|
dependencies: []
|
20
|
-
|
21
14
|
description:
|
22
15
|
email: sbartsch@tzi.org
|
23
16
|
executables: []
|
24
|
-
|
25
17
|
extensions: []
|
26
|
-
|
27
|
-
extra_rdoc_files:
|
18
|
+
extra_rdoc_files:
|
28
19
|
- README.rdoc
|
29
20
|
- CHANGELOG
|
30
|
-
files:
|
21
|
+
files:
|
31
22
|
- CHANGELOG
|
32
23
|
- MIT-LICENSE
|
33
24
|
- README.rdoc
|
@@ -74,38 +65,27 @@ files:
|
|
74
65
|
- test/authorization_test.rb
|
75
66
|
homepage: http://github.com/stffn/declarative_authorization
|
76
67
|
licenses: []
|
77
|
-
|
78
68
|
post_install_message:
|
79
69
|
rdoc_options: []
|
80
|
-
|
81
|
-
require_paths:
|
70
|
+
require_paths:
|
82
71
|
- lib
|
83
|
-
required_ruby_version: !ruby/object:Gem::Requirement
|
72
|
+
required_ruby_version: !ruby/object:Gem::Requirement
|
84
73
|
none: false
|
85
|
-
requirements:
|
86
|
-
- -
|
87
|
-
- !ruby/object:Gem::Version
|
88
|
-
hash: 59
|
89
|
-
segments:
|
90
|
-
- 1
|
91
|
-
- 8
|
92
|
-
- 6
|
74
|
+
requirements:
|
75
|
+
- - ! '>='
|
76
|
+
- !ruby/object:Gem::Version
|
93
77
|
version: 1.8.6
|
94
|
-
required_rubygems_version: !ruby/object:Gem::Requirement
|
78
|
+
required_rubygems_version: !ruby/object:Gem::Requirement
|
95
79
|
none: false
|
96
|
-
requirements:
|
97
|
-
- -
|
98
|
-
- !ruby/object:Gem::Version
|
99
|
-
|
100
|
-
segments:
|
101
|
-
- 0
|
102
|
-
version: "0"
|
80
|
+
requirements:
|
81
|
+
- - ! '>='
|
82
|
+
- !ruby/object:Gem::Version
|
83
|
+
version: '0'
|
103
84
|
requirements: []
|
104
|
-
|
105
85
|
rubyforge_project:
|
106
|
-
rubygems_version: 1.8.
|
86
|
+
rubygems_version: 1.8.23
|
107
87
|
signing_key:
|
108
88
|
specification_version: 3
|
109
|
-
summary: declarative_authorization is a Rails plugin for maintainable authorization
|
89
|
+
summary: declarative_authorization is a Rails plugin for maintainable authorization
|
90
|
+
based on readable authorization rules.
|
110
91
|
test_files: []
|
111
|
-
|