denied 0.0.1 → 0.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: b94163c06da89e4067fb3b83d0141d3205461dba
-  data.tar.gz: d630061324ba20cba1c060d3ef3e62d5ce8bed49
+  metadata.gz: 23e77daaaab8fc97af9353272db2a6d6ca829d49
+  data.tar.gz: a90ab5ce62da8319d5aa0fd8d098b574cdc36c22
 SHA512:
-  metadata.gz: 6f6ab2449c746a7932aa91db6b60f1fae2ba00f7cdb042aa7cb7bf278275c2945b195a934cd0bde747534e60a21468b3cc84bc383c73dd2769cb795f4c930827
-  data.tar.gz: 39c519ff2f631a0ec99c4b1d175f07410400e2a2fd26b041239ebd4269246cc4abf4f2c0cff45c406602920aa9c063cf30af847827af649afc03e78876790bce
+  metadata.gz: d33d85c4dadc76997adec69d46b49369b727e3d791ca28cd603c110701d02deacb58ad878e7c5d911dfa7ec5d321553fc7b24cafcf1bc0b934782e251869a7d9
+  data.tar.gz: 32a141989bda077b9f79e1d7f11b4f60fa169db5c893fb8dfbea7933ec0e88b1e859bbabea741ac9dff5fec932ad78cd0a4e7100ac63e7b3db03595d8111393c

data/.travis.yml

@@ -1,5 +1,4 @@
 rvm:
-  - 1.9.3
   - 2.0.0
   - 2.1.0
   - 2.1.1

data/CHANGELOG.md

@@ -1,3 +1,6 @@
-2014-08-21 Initial import
+[not released] - 2014-08-22
+  * Added railtie to require controller extension instantly
+
+[0.0.1] - 2014-08-21 Initial import
   * Includes plain and conditional restrictions
   * ..and RSpec matcher

data/README.md

@@ -1,29 +1,50 @@
 # Denied
 
-TODO: Write a gem description
+A rails controller extension, that gives you the possibility to restrict access to your controller actions.
 
-## Installation
+[![Build Status](https://secure.travis-ci.org/xijo/denied.png?branch=master)](https://travis-ci.org/xijo/denied) [![Gem Version](https://badge.fury.io/rb/denied.png)](http://badge.fury.io/rb/denied) [![Code Climate](https://codeclimate.com/github/xijo/denied.png)](https://codeclimate.com/github/xijo/denied) [![Code Climate](https://codeclimate.com/github/xijo/denied/coverage.png)](https://codeclimate.com/github/xijo/denied)
 
-Add this line to your application's Gemfile:
+## Installation
 
     gem 'denied'
 
-And then execute:
+## Compatibility
 
-    $ bundle
+Works with rails 3 and 4 and all versions every ruby 2.
 
-Or install it yourself as:
+## Usage
 
-    $ gem install denied
+```ruby
+class GoodiesController < ApplicationController
+  restrict :take
+  restrict :delete, allow_if: :goodie_manager?
 
-## Usage
+  def take
+    # Grab a goodie
+  end
+
+  def delete
+    # Remove all the goodies
+  end
+
+  private
+
+  def goodie_manager?
+    # Your domain implementation
+  end
+end
+```
+
+What that does:
+  1. Any anonymous access to one of both methods will raise `Denied::LoginRequired`
+  2. If a `current_user` exists the access to take is allowed
+  3. If a `current_user` exists but `goodie_manager?` returns false, then `Denied::AccessDenied` will be raised
+  4. If a `current_user` exists and `goodie_manager?` is true, the access is allowed
+
+## Todos/Ideas
 
-TODO: Write usage instructions here
+* make `current_user` configurable
 
 ## Contributing
 
-1. Fork it ( http://github.com/<my-github-username>/denied/fork )
-2. Create your feature branch (`git checkout -b my-new-feature`)
-3. Commit your changes (`git commit -am 'Add some feature'`)
-4. Push to the branch (`git push origin my-new-feature`)
-5. Create new Pull Request
+You know how this works and bonus points for feature branches!

data/lib/BLOG.md

@@ -0,0 +1,14 @@
+Let's assume the following controller:
+
+```ruby
+class GoodiesController < ApplicationController
+
+  def delete
+    # Remove all the goodies
+  end
+end
+```
+
+You want to protect that controller action, the normal way is: write a before_filter to check and redirect.
+
+This is what `denied` does for you

data/lib/denied.rb

@@ -7,6 +7,7 @@ require 'denied/access_denied'
 require 'denied/restriction'
 require 'denied/gatekeeper'
 require 'denied/rails/controller'
+require 'denied/rails/railtie' if defined?(Rails)
 
 module Denied
   # Your code goes here...

data/lib/denied/rails/railtie.rb

@@ -0,0 +1,9 @@
+module Denied
+  module Rails
+    class Railtie < ::Rails::Railtie
+      initializer 'denied.add_controller_extension' do
+        ActionController::Base.send :include, Denied::Rails::Controller
+      end
+    end
+  end
+end

data/lib/denied/rspec/matcher_rspec2.rb

@@ -0,0 +1,44 @@
+RSpec::Matchers.define :have_restriction_on do |given_action_name|
+  match do |given_controller|
+    @given_action_name = given_action_name
+    @given_controller = given_controller
+
+    @restriction = given_controller.restrictions.find do |restriction|
+      restriction.restricts?(given_action_name)
+    end
+
+    if @restriction
+      if @given_allow_if
+        @restriction.allow_if == @given_allow_if
+      else
+        true
+      end
+    else
+      false
+    end
+  end
+
+  chain :with_allow_if do |given_allow_if|
+    @given_allow_if = given_allow_if
+  end
+
+  failure_message_for_should do |actual|
+    if @restriction && @given_allow_if
+      "Expected restriction to call #{@given_allow_if.inspect}, but calls #{@restriction.allow_if.inspect}"
+    else
+      "Expected to have restriction on #{@given_action_name}, but was not found in #{@given_controller.restrictions.inspect}"
+    end
+  end
+
+  failure_message_for_should_not do |actual|
+    if @given_allow_if
+      "Expected restriction not to call #{@given_allow_if.inspect}, but calls #{@restriction.allow_if.inspect}"
+    else
+      "Expected not to have restriction on #{@given_action_name}, but was found in #{@given_controller.restrictions.inspect}"
+    end
+  end
+
+  def description
+    "Checks if a restriction for a given action is defined on the controller"
+  end
+end

data/lib/denied/version.rb

@@ -1,3 +1,3 @@
 module Denied
-  VERSION = "0.0.1"
+  VERSION = "0.0.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: denied
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
 platform: ruby
 authors:
 - Johannes Opper
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-08-21 00:00:00.000000000 Z
+date: 2014-08-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -124,14 +124,17 @@ files:
 - README.md
 - Rakefile
 - denied.gemspec
+- lib/BLOG.md
 - lib/denied.rb
 - lib/denied/access_denied.rb
 - lib/denied/error.rb
 - lib/denied/gatekeeper.rb
 - lib/denied/login_required.rb
 - lib/denied/rails/controller.rb
+- lib/denied/rails/railtie.rb
 - lib/denied/restriction.rb
 - lib/denied/rspec/matcher.rb
+- lib/denied/rspec/matcher_rspec2.rb
 - lib/denied/version.rb
 - spec/lib/denied/gatekeeper_spec.rb
 - spec/lib/denied/rails/controller_spec.rb