eaco 0.8.2 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 91f235834d2378f29b46f54e433898e4d8e7b34f
-  data.tar.gz: 094515fb0e0c0da6354262e3a0c0f8b50cfce099
+  metadata.gz: 342302faeb4d72f36078ceb1566c2701481e2005
+  data.tar.gz: b6986e43c743934700e081dfe5a497e5a49a5632
 SHA512:
-  metadata.gz: 84abe5ac3ef02b6433d2d2dfbd399c032250a480d8fafecdbb38fd662f49c7a48c591bd7baf755feac9eac2e7b649d25aface3e7dbf5f2e5a5f5470908b296d4
-  data.tar.gz: bba9437ebbda22bc5e04752b1a4af8d6898ac3def1d1bb326dbd65dba8e062cd40af967a27630a55d60155b7c543ad87bbd95952bd8851fb24ba8adf91e21c91
+  metadata.gz: 7aae3bdd2fe862f8c5185b7cd774d1a0e55d2c7592d687d5b40aef388cc14d468c6eea4fbff0648b3ef8ca73bd2a487d05bf50afa3d252380a1074762be5c8a8
+  data.tar.gz: 0306f78ebe3b7197dda0afcb44250a56c93e5471af163c6d9d262196c798cb6f0e5e5a42ba52f7bd092cfbc0c50205ef828c7d616b4c4290b3e16d31867d8b9c

data/.travis.yml

@@ -1,7 +1,7 @@
 rvm:
-  - 2.0.0
-  - 2.1.5
-  - 2.2.0
+  - 2.1
+  - 2.2
+  - 2.3.1
 
 gemfile:
   - gemfiles/rails_3.2.gemfile

data/README.md

@@ -6,7 +6,7 @@
 [![Inline docs](http://inch-ci.org/github/ifad/eaco.svg?branch=master)](http://inch-ci.org/github/ifad/eaco)
 [![Gem Version](https://badge.fury.io/rb/eaco.svg)](http://badge.fury.io/rb/eaco)
 
-Eacus, the holder of the keys of Hades, is an ACL-based authorization
+Eacus, the holder of the keys of Hades, is an Attribute-Based Access Control ([ABAC](https://en.wikipedia.org/wiki/Attribute-based_access_control)) authorization
 framework for Ruby.
 
 ![Eaco e Telamone][eaco-e-telamone]
@@ -15,23 +15,31 @@ framework for Ruby.
 
 ## Design
 
-Eaco provides your application's Resources discretionary access.
-Access to the Resource is determined matching an ACL against an Actor.
+Eaco provides your application's Resources discretionary access based on attributes.
+Access to a Resource by an Actor is determined by checking whether the Actor owns
+the security attributes (Designators) required by the Resource.
 
-Different Actors can have different levels of access to the same Resource,
-depending on their role as determined by the ACL.
+Each Resource protected by Eaco has an ACL attached. ACLs define which security
+attribute grant access to the Resource, and at which level. The level of access
+is expressed in terms of roles. Roles are scoped per Resource types.
 
-To each role are granted a set of possible abilities, and access is verified
-by checking whether a given actor can perform a specific ability.
+Each Role then describes a set of abilities that it can perform. In your code,
+you check directly whether an Actor has a specific ability on a Resource, and
+all the indirection is then evaluated by Eaco.
 
-Actors are described by their Designators, a pluggable mechanism whose details
-are up to your application. For instance, an Actor can have many designators
-that describe either its identity or its belonging to a group or occupying a
-position in a department.
+## Designators
+
+Security attributes are extracted out of Actors through the Designators framework,
+a pluggable mechanism whose details are up to your application.
+
+An Actor can have many designators,  that describe its identity or its belonging
+to a group or occupying a position in a department.
 
 Designators are Ruby classes that can embed any sort of custom behaviour that
 your application requires.
 
+## ACLS
+
 ACLs are hashes with designators as keys and roles as values. Extracting
 authorized collections requires only an hash key lookup mechanism in your
 database. Adapters are provided for PG's +jsonb+ and for CouchDB-Lucene.

data/eaco.gemspec

@@ -20,7 +20,11 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "bundler", "~> 1.6"
   spec.add_development_dependency "rake"
   spec.add_development_dependency "byebug"
-  spec.add_development_dependency "guard"
+  # Starting from version 2.12.7, guard includes listen >= 2.7, and
+  # starting from version 3.1.2, listen includes ruby_dep, that
+  # works only from Ruby 2.2.3 onwards. However eaco supports 2.0
+  # and up.
+  spec.add_development_dependency "guard", "< 2.12.7"
   spec.add_development_dependency "yard"
   spec.add_development_dependency "appraisal"
   spec.add_development_dependency "rspec"

data/lib/eaco/acl.rb

@@ -57,9 +57,8 @@ module Eaco
     #
     def del(*designator)
       identify(*designator).each do |key|
-        self.delete(key)
+        self.delete(key.to_s)
       end
-
       self
     end
 

data/lib/eaco/version.rb

@@ -2,6 +2,6 @@ module Eaco
 
   # Current version
   #
-  VERSION = '0.8.2'
+  VERSION = '1.0.0'
 
 end

data/spec/eaco/acl_spec.rb

@@ -54,16 +54,16 @@ RSpec.describe Eaco::ACL do
   describe '#del' do
     let(:designator) { Eaco::Designator.new 'test' }
 
-    subject { acl.del(designator) }
+    before { acl.del(designator) }
 
     context 'when removing non-existing permissions' do
       let(:acl) { described_class.new }
-      it { expect(subject).to eq({}) }
+      it { expect(acl).to eq({}) }
     end
 
     context 'when removing existing permissions' do
       let(:acl) { described_class.new(designator => :editor) }
-      it { expect(subject).to eq({}) }
+      it { expect(acl).to eq({}) }
     end
   end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: eaco
 version: !ruby/object:Gem::Version
-  version: 0.8.2
+  version: 1.0.0
 platform: ruby
 authors:
 - Marcello Barnaba
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-11-16 00:00:00.000000000 Z
+date: 2016-05-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -56,16 +56,16 @@ dependencies:
   name: guard
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 2.12.7
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 2.12.7
 - !ruby/object:Gem::Dependency
   name: yard
   requirement: !ruby/object:Gem::Requirement