exits 0.0.3 → 0.0.4

checksums.yaml

@@ -1,15 +1,15 @@
 ---
 !binary "U0hBMQ==":
   metadata.gz: !binary |-
-    OGZkYTQzMDI5NzMwMTZmNzEyYTM1MjljMjNiZjJkN2VmZGNhMWU3Mg==
+    YzllMzlhZmZlMjNhNzhiNzRkN2NiMDIyMDFhZjI5YWM4OTRhZjk0Zg==
   data.tar.gz: !binary |-
-    ZWFjYmU4ZjMwMzJhM2IzNzMyYzFiMzgxNTI1OGZkNjYyMGY5ZjVmNQ==
+    YmQ0YjNmMTAwODM3YjEwMDFmNTM1ZmFlZWEyZGJiMjlhMTcxNjZlZA==
 !binary "U0hBNTEy":
   metadata.gz: !binary |-
-    MmVjODNmMTBhNDA1ZGEwYjQ2YjU3NmQ4ZDU1NWYxNjFkOThhMWJmM2YwNTQ3
-    ZjhmZDc5OGI2ZmU2YjA2ZjVlOTA1MTY5ODliYTcwZDRiODg3ZjQyNDc2YmU1
-    OWE3NjNlMzJmZGE3ODU1ODg4MGQ1MjMzYzJhMWM1MGNmNmNkZjU=
+    MWE2ODkyMGFjYjgxYTBmOTNjOTkxNmUzNzcxNTQ4ZDc2ZDkyMTkxY2M3MjAy
+    M2NlYWQwOTQ0OTBhYjIzZTFmODdkMzE3ZDgyMjg3M2M2NWFiNDRjYjJmMWNk
+    YjUwZDQ2ODQ3N2Q4ZDIxMTQ1OGY4MmVmNTU3OWQ0ODMyZGIyMmE=
   data.tar.gz: !binary |-
-    ZTkzYWE3NDU3YWNjYzc3ZjhhMTdhNjc4ZTI4Njg4MTMxOThlMDdkOTg4ZmQw
-    MWNmZDE5NmI3MjE3N2M1NzM5ODA0OWY3ODUwMGNmMDJhM2Y1ZTYzMDc5Njll
-    MmY3MDg5NGRlMWE4MmNmZDZkN2RhYzMxODA0MzQ3YjUyNTJkMWE=
+    NmNkYjQ1NmVmZTEyMjQ5NzA3YjkxYmMzODE2MjA2NGFlZmEwNzU4ZTcwMTZj
+    YzUwYWRiNDNkODhhMzM5NTYwMzM1MTFhN2YwZTI3ZDhkOWM2NWFkYmU2MTEz
+    ODIyOWEyY2YxNDc5NDBiMGRhN2FkMjY4ZmViZWM4OWQ2NzQxYzA=

data/README.md

@@ -11,28 +11,30 @@ Designed with an emphasis on readability, it also is designed to work with your
 
 Let's assume you have Admin & User and want to let admin have access to everything and restrict User to edit their own stuff.
 
-		# controllers/application_controller.rb
-		class ApplicationController < ActionController::Base
-			before_action :restrict_routes!
-		end
-
-		# controllers/posts_controller.rb
-		class PostsController < ActionController::Base
-			allow Admin, :all
-			allow User, :show, :new, :create, :edit
-
-			def admin
-			end
-
-			def edit
-				@post = Post.find params[:id].to_i
-				allow! User do
-					current_user.eql? @post.user
-				end
-			end
-		end
-
-First of all, for Exits to work, you need to add `before_action :restrict_routes` to your ApplicationController.
+```ruby
+# controllers/application_controller.rb
+class ApplicationController < ActionController::Base
+  before_action :restrict_routes!
+end
+
+# controllers/posts_controller.rb
+class PostsController < ActionController::Base
+  allow Admin, :all
+  allow User, :show, :new, :create, :edit
+  
+  def admin
+  end
+	
+  def edit
+    @post = Post.find params[:id].to_i
+    allow! User do
+      current_user.eql? @post.user
+    end
+  end
+end
+```
+
+First of all, for Exits to work, you need to add `before_action :restrict_routes!` to your ApplicationController.
 
 Exits takes a very strict approach to handling access. If you don't allow access to an action for a given user class, _it won't be authorized to access such action._
 
@@ -51,30 +53,37 @@ When a user is unauthorized the default behavior is to set a flash message and r
 
 You can override this behavior.
 
-		# controllers/application_controller.rb
-		class ApplicationController < ActionController::Base
-			before_action :restrict_routes!
-		
-			def unauthorized	(exception)
-				# Handle unauthorized user here
-			end
-		end
-
+```ruby
+# controllers/application_controller.rb
+class ApplicationController < ActionController::Base
+  before_action :restrict_routes!
+  
+  def unauthorized	(exception)
+    # Handle unauthorized user here
+  end
+end
+```
 
 ## Installation
 
 Add this line to your application's Gemfile:
 
-    gem 'exits'
+```ruby
+gem 'exits'
+```
 
 And then execute:
 
-    $ bundle
+```bash
+$ bundle
+```
 
 ## Test
 Exits comes with a test suite.
 
-		$ rake test
+```bash
+$ rake test
+```
 
 ## Contributing
 

data/lib/exits/rules.rb

@@ -15,6 +15,7 @@ module Exits
     end
 
     def authorized?(controller_class, klass, action)
+      return true if klass.eql?(NilClass)
       controller = @controllers.fetch(controller_class, {})
       return false if controller.nil?
       controller.authorized? klass, action

data/lib/exits/version.rb

@@ -1,3 +1,3 @@
 module Exits
-  VERSION = "0.0.3"
+  VERSION = "0.0.4"
 end

data/test/test_controller.rb

@@ -43,6 +43,13 @@ describe Exits::ActionController::Helpers do
     end
   end
 
+  it 'should authorize if no user exists (Guest)' do
+    @controller.action_name = :index
+    @controller.current_user = nil
+
+    assert @controller.class.rules.authorized? @controller.class, @controller.current_user.class, @controller.action_name
+  end
+
   it 'should not authorize a user at the action level' do
     @controller.action_name = :edit
     @controller.current_user = User.new

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: exits
 version: !ruby/object:Gem::Version
-  version: 0.0.3
+  version: 0.0.4
 platform: ruby
 authors:
 - Pier-Olivier Thibault