effective_datatables 2.4.1 → 2.4.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 2f0b5d8833f49fa08b11c76ee4f49622ff13c72d
-  data.tar.gz: 3b64fb8a94657715b230c1b47976c0c180afaeb4
+  metadata.gz: dd41f4b17a43b69b4164c73ec1c27333ff277423
+  data.tar.gz: ac99a8b3b030df212aef90af6600ce95545dede6
 SHA512:
-  metadata.gz: 91119ca0ee5f73dfa6bcefd728cf18c9a4e4f0f5ba7522f1b242c4d44f11290d1a25139d7300f59f82e3710a1f8a34284e3a7eeca47800a493d4e91be02a0dc1
-  data.tar.gz: 5caf11ca75774bb2133c8a67343a0b0aadb6f55e4b72b63136ecc459916d173bfe1105b5ae7e17a8b483d83582fd92a91bf8408da50cbc058fb8e2770119e2fa
+  metadata.gz: ce3b38c75aefba7aaedcbe339ed6ec87f59c878a8cac244c4f197d711efee35391bcf3498f1c775261bf2ca3f18b0288cd9a4b036711fd9a796c2ff2bb8953a3
+  data.tar.gz: ae522ad82d750f286ffe766eb205ac8417fc908558b62c1d9ffed46a17769d85e0e4fcd8c8ab53c1704aaa829517626e5aacd21e0d68501d93b349362f583ab1

data/README.md

@@ -438,7 +438,7 @@ filterable  # whether the dataTable is filterable
 
 ## actions_column
 
-Creates a column with links to this resource's Show, Edit and Destroy actions.
+Creates a column with links to this resource's `show`, `edit` and `destroy` actions.
 
 Sets `responsivePriority: 0` so the column is last to collapse when the table is shrunk down.
 
@@ -448,7 +448,37 @@ Override the default actions by passing your own partial:
 actions_column partial: 'admin/posts/actions'
 ```
 
-Optionally uses the authorization method (below) to determine if the `current_user` has permission for each of these actions.
+### Showing action buttons
+
+The show/edit/destroy action buttons can be configured to always show, always hide, or to consider the current_user's permission level.
+
+To always show / hide:
+
+```ruby
+actions_column show: false, edit: true, destroy: true, unarchive: true
+```
+
+To authorize based on the current_user and the `config.authorization_method`:
+
+```ruby
+actions_column show: :authorize
+```
+
+The above will call the effective_datatables `config.authorization_method` just once to see if the current_user has permission to show/edit/destroy the collection class.
+
+The action button will be displayed if `EffectiveDatatables.authorized?(controller, :edit, Post)` returns true.
+
+To call authorize on each individual resource:
+
+```ruby
+actions_column show: :authorize_each
+```
+
+Or via a Proc:
+
+```ruby
+actions_column show: Proc.new { |resource| can?(:show, resource.parent) }
+```
 
 See the `config/initializers/effective_datatable.rb` file for more information.
 

data/app/models/effective/effective_datatable/rendering.rb

@@ -89,6 +89,8 @@ module Effective
               end
             end
 
+            # If locals[:show_action] == :authorize_each, this will get run again.
+
             rendered[name] = (render(
               :partial => opts[:partial],
               :as => opts[:partial_local],

data/app/views/effective/datatables/_actions_column.html.haml

@@ -1,3 +1,28 @@
+:ruby
+  if show_action == :authorize_each
+    show_action = (EffectiveDatatables.authorized?(controller, :show, resource) rescue false)
+  elsif show_action.respond_to?(:call)
+    show_action = instance_exec(resource, &show_action)
+  end
+
+  if edit_action == :authorize_each
+    edit_action = (EffectiveDatatables.authorized?(controller, :edit, resource) rescue false)
+  elsif edit_action.respond_to?(:call)
+    edit_action = instance_exec(resource, &edit_action)
+  end
+
+  if destroy_action == :authorize_each
+    destroy_action = (EffectiveDatatables.authorized?(controller, :destroy, resource) rescue false)
+  elsif destroy_action.respond_to?(:call)
+    destroy_action = instance_exec(resource, &destroy_action)
+  end
+
+  if unarchive_action == :authorize_each
+    unarchive_action = (EffectiveDatatables.authorized?(controller, :unarchive, resource) rescue false)
+  elsif unarchive_action.respond_to?(:call)
+    unarchive_action = instance_exec(resource, &unarchive_action)
+  end
+
 - if show_action
   - url = (polymorphic_path([*controller_namespace, resource]) rescue nil) || (polymorphic_path(resource) rescue nil)
   - if url.present?

data/lib/effective_datatables/version.rb

@@ -1,3 +1,3 @@
 module EffectiveDatatables
-  VERSION = '2.4.1'.freeze
+  VERSION = '2.4.2'.freeze
 end

data/lib/generators/templates/effective_datatables.rb

@@ -41,14 +41,20 @@ EffectiveDatatables.setup do |config|
   # Valid values for each action are:
   # true (always include a link to this action)
   # false (never include a link to this action)
-  # :authorize (include link only if authorized - only works with ActiveRecord collections)
+  # :authorize (include link only if authorized to show/edit/destroy the resource class)
+  # :authorize_each (include link only if authorized to show/edit/destroy the resource)
+  # Proc.new { |resource| can?(:edit, resource.parent) }
   #
-  # When :authorize, a single check will be made via the above authorization_method
+  # When :authorize, a single check will be made via the above config.authorization_method
   # to see if the current_user has permission to :show/:edit/:destroy the collection class, i.e. Post
   # EffectiveDatatables.authorized? (:show || :edit || :destroy), Post
+  # This is a faster permission check, because it only checks the class once
   #
-  # For performance reasons, we only check the class once, not every individual resource.
-  # You can override this default by calling `actions_column show: false, edit: true, destroy: :authorize`
+  # If you want to authorize each individual resource, use :authorize_each
+  # EffectiveDatatables.authorized? (:show || :edit || :destroy), Post.find(1)
+  #
+  # You can override these defaults on a per-table basis
+  # by calling `actions_column(show: false, edit: true, destroy: :authorize)`
   config.actions_column = {
     show: :authorize,
     edit: :authorize,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: effective_datatables
 version: !ruby/object:Gem::Version
-  version: 2.4.1
+  version: 2.4.2
 platform: ruby
 authors:
 - Code and Effect
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-05-31 00:00:00.000000000 Z
+date: 2016-06-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails