extreme_aas 0.0.1

data/.gitignore

@@ -0,0 +1,8 @@
+.bundle/
+log/*.log
+pkg/
+spec/dummy/db/*.sqlite3
+spec/dummy/log/*.log
+spec/dummy/tmp/
+.DS_Store
+spec/dummy/config/database.yml

data/.rvmrc

@@ -0,0 +1,5 @@
+rvm @extreme_aas
+if ! command -v bundle ; then
+  gem install bundler
+fi
+bundle | grep -v 'Using' | grep -v 'complete' | sed '/^$/d'

data/Gemfile

@@ -0,0 +1,3 @@
+source "http://rubygems.org"
+
+gemspec

data/Gemfile.lock

@@ -0,0 +1,134 @@
+PATH
+  remote: .
+  specs:
+    extreme_aas (0.0.1)
+      capybara (>= 0.4.0)
+      rails (~> 3.2.2)
+
+GEM
+  remote: http://rubygems.org/
+  specs:
+    actionmailer (3.2.3)
+      actionpack (= 3.2.3)
+      mail (~> 2.4.4)
+    actionpack (3.2.3)
+      activemodel (= 3.2.3)
+      activesupport (= 3.2.3)
+      builder (~> 3.0.0)
+      erubis (~> 2.7.0)
+      journey (~> 1.0.1)
+      rack (~> 1.4.0)
+      rack-cache (~> 1.2)
+      rack-test (~> 0.6.1)
+      sprockets (~> 2.1.2)
+    activemodel (3.2.3)
+      activesupport (= 3.2.3)
+      builder (~> 3.0.0)
+    activerecord (3.2.3)
+      activemodel (= 3.2.3)
+      activesupport (= 3.2.3)
+      arel (~> 3.0.2)
+      tzinfo (~> 0.3.29)
+    activeresource (3.2.3)
+      activemodel (= 3.2.3)
+      activesupport (= 3.2.3)
+    activesupport (3.2.3)
+      i18n (~> 0.6)
+      multi_json (~> 1.0)
+    arel (3.0.2)
+    builder (3.0.0)
+    capybara (1.1.2)
+      mime-types (>= 1.16)
+      nokogiri (>= 1.3.3)
+      rack (>= 1.0.0)
+      rack-test (>= 0.5.4)
+      selenium-webdriver (~> 2.0)
+      xpath (~> 0.1.4)
+    childprocess (0.3.1)
+      ffi (~> 1.0.6)
+    diff-lcs (1.1.3)
+    erubis (2.7.0)
+    factory_girl (3.0.0)
+      activesupport (>= 3.0.0)
+    factory_girl_rails (3.0.0)
+      factory_girl (~> 3.0.0)
+      railties (>= 3.0.0)
+    ffi (1.0.11)
+    hike (1.2.1)
+    i18n (0.6.0)
+    journey (1.0.3)
+    json (1.6.6)
+    mail (2.4.4)
+      i18n (>= 0.4.0)
+      mime-types (~> 1.16)
+      treetop (~> 1.4.8)
+    mime-types (1.18)
+    multi_json (1.2.0)
+    mysql2 (0.3.11)
+    nokogiri (1.5.2)
+    polyglot (0.3.3)
+    rack (1.4.1)
+    rack-cache (1.2)
+      rack (>= 0.4)
+    rack-ssl (1.3.2)
+      rack
+    rack-test (0.6.1)
+      rack (>= 1.0)
+    rails (3.2.3)
+      actionmailer (= 3.2.3)
+      actionpack (= 3.2.3)
+      activerecord (= 3.2.3)
+      activeresource (= 3.2.3)
+      activesupport (= 3.2.3)
+      bundler (~> 1.0)
+      railties (= 3.2.3)
+    railties (3.2.3)
+      actionpack (= 3.2.3)
+      activesupport (= 3.2.3)
+      rack-ssl (~> 1.3.2)
+      rake (>= 0.8.7)
+      rdoc (~> 3.4)
+      thor (~> 0.14.6)
+    rake (0.9.2.2)
+    rdoc (3.12)
+      json (~> 1.4)
+    rspec (2.9.0)
+      rspec-core (~> 2.9.0)
+      rspec-expectations (~> 2.9.0)
+      rspec-mocks (~> 2.9.0)
+    rspec-core (2.9.0)
+    rspec-expectations (2.9.1)
+      diff-lcs (~> 1.1.3)
+    rspec-mocks (2.9.0)
+    rspec-rails (2.9.0)
+      actionpack (>= 3.0)
+      activesupport (>= 3.0)
+      railties (>= 3.0)
+      rspec (~> 2.9.0)
+    rubyzip (0.9.6.1)
+    selenium-webdriver (2.20.0)
+      childprocess (>= 0.2.5)
+      ffi (~> 1.0)
+      multi_json (~> 1.0)
+      rubyzip
+    sprockets (2.1.2)
+      hike (~> 1.2)
+      rack (~> 1.0)
+      tilt (~> 1.1, != 1.3.0)
+    thor (0.14.6)
+    tilt (1.3.3)
+    treetop (1.4.10)
+      polyglot
+      polyglot (>= 0.3.1)
+    tzinfo (0.3.32)
+    xpath (0.1.4)
+      nokogiri (~> 1.3)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  extreme_aas!
+  factory_girl_rails
+  mysql2
+  rspec-rails (~> 2.5)

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2012 YOURNAME
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.rdoc

@@ -0,0 +1,3 @@
+= ExtremeAas
+
+This project rocks and uses MIT-LICENSE.

data/Rakefile

@@ -0,0 +1,25 @@
+# encoding: UTF-8
+require 'rubygems'
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rake'
+require 'rake/rdoctask'
+
+require 'rspec/core'
+require 'rspec/core/rake_task'
+
+RSpec::Core::RakeTask.new(:spec)
+
+task :default => :spec
+
+Rake::RDocTask.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'ExtremeAas'
+  rdoc.options << '--line-numbers' << '--inline-source'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end

data/app/models/extreme_aas/application_controller.rb

@@ -0,0 +1,21 @@
+module ExtremeAas
+  module ApplicationController
+    private
+    def extreme_aas_permission_denied
+      render "#{Rails.root}/public/404", :format => [:html], :status => :unauthorized
+    end
+
+    def extreme_aas_ask_permission
+      #context profile, controller action
+      simple_action = ExtremeAas::ExtremeSimpleAction.find_action :controller_name =>params[:controller], :action_name => params[:action]
+      extreme_aas_permission_denied unless simple_action && extreme_aas_profile && simple_action.has_permission?(extreme_aas_profile)
+
+    end
+
+    def extreme_aas_profile
+      @extreme_aas_profile ||= ExtremeProfile.last #FIXME
+
+      #@extreme_aas_profile ||= ExtremeProfile.find(session[:extreme_aas_profile_id]) if session[:extreme_aas_profile_id]
+    end
+  end
+end

data/app/models/extreme_aas/extreme_action.rb

@@ -0,0 +1,21 @@
+module ExtremeAas
+  class ExtremeAction < ActiveRecord::Base
+    belongs_to :actionable, :polymorphic => true, :dependent => :destroy
+    has_many :grants, :class_name => 'ExtremeGrant', :dependent => :destroy
+    has_many :action_edges, :class_name => 'ExtremeActionEdge', :foreign_key => 'child_action_id', :dependent => :destroy
+    
+    def self.parse args={}
+      if args.include? :group
+        return ExtremeActionGroup.find_by_name(args[:group]).super_action
+      end
+      return ExtremeSimpleAction.where(args).first.super_action
+    end
+    
+    def method_missing(method, *args, &block)
+      super
+    rescue NoMethodError => e
+      self.actionable.send(method, *args, &block)
+    end
+    
+  end
+end

data/app/models/extreme_aas/extreme_action_abstract.rb

@@ -0,0 +1,22 @@
+module ExtremeAas
+  module ExtremeActionAbstract
+    extend ActiveSupport::Concern
+
+    included do
+      #put things here
+      after_save :create_action
+      has_one :super_action, :class_name => 'ExtremeAction', :as => 'actionable', :dependent => :destroy
+    end
+    
+    private 
+    def create_action
+      ExtremeAction.create!(:actionable_id => self.id, :actionable_type => self.class.name)
+    end
+
+    public
+    def has_permission? profile
+      raise NotImplementedError, 'Please check ExtremeActionAbstract module to see which methods are missing'
+    end
+    
+  end
+end

data/app/models/extreme_aas/extreme_action_edge.rb

@@ -0,0 +1,6 @@
+module ExtremeAas
+  class ExtremeActionEdge < ActiveRecord::Base
+    belongs_to :parent_action, :class_name => 'ExtremeActionGroup', :foreign_key => 'parent_action_id'
+    belongs_to :child_action, :class_name => 'ExtremeAction', :foreign_key => 'child_action_id'
+  end
+end

data/app/models/extreme_aas/extreme_action_group.rb

@@ -0,0 +1,33 @@
+module ExtremeAas
+  class ExtremeActionGroup < ActiveRecord::Base
+    include ExtremeActionAbstract
+
+    has_many :action_edges, :class_name => 'ExtremeActionEdge', :foreign_key => 'parent_action_id', :dependent => :destroy
+    has_many :actions, :through => :action_edges, :source => :child_action
+
+    validates_uniqueness_of :name
+
+    def self.export path = "#{Rails.root}/config/extreme_aas_groups.yml"
+      yaml = YAML::load_file(path)
+      if yaml
+        yaml.each do |group_name, actions|
+          group = ExtremeActionGroup.find_or_create_by_name group_name
+          actions.each do |action_yml_params|
+            action_params = {}
+            action_yml_params.each do |key, value|
+              action_params[key.to_sym] = value
+            end
+            action = ExtremeAction.parse action_params
+            if action.nil?
+              raise "Action not found. Parameters #{action_params}"
+            else
+              group.actions << action
+            end
+          end
+        end
+      else
+        puts "Warning: couldn't load file in #{path}"
+      end
+    end
+  end
+end

data/app/models/extreme_aas/extreme_grant.rb

@@ -0,0 +1,13 @@
+module ExtremeAas
+  class ExtremeGrant < ActiveRecord::Base
+    belongs_to :profile, :class_name => 'ExtremeProfile', :foreign_key => 'extreme_profile_id'
+    belongs_to :action, :class_name => 'ExtremeAction', :foreign_key => 'extreme_action_id'
+    
+    after_initialize :default_values
+    
+    def default_values
+      self.volatile ||= false
+    end
+    
+  end
+end

data/app/models/extreme_aas/extreme_profile.rb

@@ -0,0 +1,10 @@
+module ExtremeAas
+  class ExtremeProfile < ActiveRecord::Base
+    has_many :grants, :class_name => 'ExtremeGrant', :dependent => :destroy
+    has_many :granted_actions, :through => :grants, :source => :action
+    
+    def give_permission action
+      granted_actions << action 
+    end
+  end
+end

data/app/models/extreme_aas/extreme_simple_action.rb

@@ -0,0 +1,19 @@
+module ExtremeAas
+  class ExtremeSimpleAction < ActiveRecord::Base
+    include ExtremeActionAbstract
+    
+    validates :action_name, :uniqueness => { :scope => :controller_name}
+    
+    def self.find_action(context)
+      where(:action_name => context[:action_name], :controller_name => context[:controller_name]).first
+    end
+  
+    def has_permission? profile
+      return !super_action.grants.where(:extreme_profile_id => profile.id).empty?
+    end
+    
+    def volatile?
+      self.volatile == true
+    end
+  end
+end

data/extreme_aas.gemspec

@@ -0,0 +1,29 @@
+# Provide a simple gemspec so you can easily use your enginex
+# project in your rails apps through git.
+require File.expand_path("../lib/extreme_aas/version", __FILE__)
+
+Gem::Specification.new do |s|
+  s.name = "extreme_aas"
+  s.summary = "Gem for implementing Authentication Authorization System."
+  s.description = "This gem allows you to specify permissions at controller action or helper methods levels."
+#  s.files = Dir["{app,lib,config}/**/*"] + ["MIT-LICENSE", "Rakefile", "Gemfile", "README.rdoc"]
+  s.authors     = ["Luis Cruz","Martina Simicic"]
+  s.homepage    = "https://github.com/kiddosware/extreme_aas"
+  s.version = ExtremeAas::VERSION
+  
+  #Dependencies
+  s.required_rubygems_version = "> 1.3.6"
+  s.add_dependency "rails" , "~> 3.2.2"
+  s.add_dependency "capybara" , ">= 0.4.0"
+  s.add_development_dependency "rspec-rails", "~> 2.5"
+  s.add_development_dependency "factory_girl_rails"
+  s.add_development_dependency 'mysql2'
+  
+  #files
+  s.files         = `git ls-files`.split("\n")
+  s.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
+  s.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  s.require_paths = ["lib"]
+
+
+end

data/lib/extreme_aas/engine.rb

@@ -0,0 +1,23 @@
+module ExtremeAas
+
+  class Engine < Rails::Engine
+
+    initializer "extreme_aas.load_app_instance_data" do |app|
+      ExtremeAas.setup do |config|
+        config.app_root = app.root
+      end
+    end
+
+    initializer "extreme_aas.load_static_assets" do |app|
+      app.middleware.use ::ActionDispatch::Static, "#{root}/public"
+    end
+
+    initializer 'extreme_aas.app_controller' do |app|
+      ActiveSupport.on_load(:action_controller) do
+        before_filter :extreme_aas_ask_permission
+        include ExtremeAas::ApplicationController
+      end
+    end
+  end
+
+end

data/lib/extreme_aas/version.rb

@@ -0,0 +1,3 @@
+module ExtremeAas
+  VERSION = "0.0.1"
+end

data/lib/extreme_aas.rb

@@ -0,0 +1,25 @@
+require "active_support/dependencies"
+
+module ExtremeAas
+  # Our host application root path
+  # We set this when the engine is initialized
+  mattr_accessor :app_root
+
+  # Yield self on setup for nice config blocks
+  def self.setup
+    yield self
+  end
+
+  # def self.controllers_actions
+  #     controllers = Dir.new("#{Rails.root}/app/controllers").entries
+  #     controllers.each do |controller|
+  #       if controller =~ /_controller/
+  #         p cont = controller.camelize.gsub(".rb","")
+  #         p Kernel.const_get(cont).action_methods
+  #       end
+  #     end
+  #   end
+
+end
+# Require our engine
+require "extreme_aas/engine"

data/lib/generators/extreme_aas/extreme_aas_generator.rb

@@ -0,0 +1,21 @@
+require 'rails/generators'
+require 'rails/generators/migration'
+
+class ExtremeAasGenerator < Rails::Generators::Base
+  include Rails::Generators::Migration
+  def self.source_root
+    @source_root ||= File.join(File.dirname(__FILE__), 'templates')
+  end
+
+  def self.next_migration_number(dirname)
+    if ActiveRecord::Base.timestamped_migrations
+      Time.new.utc.strftime("%Y%m%d%H%M%S")
+    else
+      "%.3d" % (current_migration_number(dirname) + 1)
+    end
+  end
+
+  def create_migration_file
+    migration_template 'migration.rb', 'db/migrate/create_extreme_aas_tables.rb'
+  end
+end

data/lib/generators/extreme_aas/templates/migration.rb

@@ -0,0 +1,36 @@
+class CreateExtremeAasTables < ActiveRecord::Migration
+  def change
+    create_table :extreme_profiles do |t|
+      t.timestamps
+    end
+    create_table :extreme_grants do |t|
+      t.references :extreme_profile
+      t.references :extreme_action
+      t.boolean :volatile
+      t.timestamps      
+    end
+    create_table :extreme_simple_actions do |t|
+      #--------
+      t.string :controller_name
+      t.string :action_name
+      #--------
+      t.string :helper_name
+      t.string :method_name
+      #--------
+      t.timestamps
+    end
+    create_table :extreme_action_groups do |t|
+      t.string :name
+      t.timestamps
+    end
+    create_table :extreme_actions do |t|
+      t.references :actionable, :polymorphic => true
+      t.timestamps
+    end
+    create_table :extreme_action_edges do |t|
+      t.integer :child_action_id
+      t.integer :parent_action_id
+      t.timestamps
+    end
+  end
+end

data/lib/tasks/sync.rake

@@ -0,0 +1,56 @@
+namespace :extreme_aas do
+  
+  desc "Sync application actions with extreme_actions in db"
+  task :sync_simple_actions => :environment do
+    sync_simple_actions
+  end
+
+  desc "Export group actions from the configuration"
+  task :export_group_actions => :environment do
+    ExtremeAas::ExtremeActionGroup.export
+  end
+  
+  #task: sync and export groups
+  desc "Update Extreme AAS actions"
+  task :update_actions => :environment do
+    Rake::Task["extreme_aas:sync_simple_actions"].invoke
+    Rake::Task["extreme_aas:export_group_actions"].invoke
+  end
+  
+  def sync_simple_actions
+    processed_actions_ids = []
+    #Controllers
+    controllers = Dir.new("#{Rails.root}/app/controllers").entries
+    controllers.each do |controller_file|
+      if controller_file =~ /_controller/
+        controller = controller_file.camelize.gsub(".rb","")
+        puts "Processing controller #{controller}"
+        Kernel.const_get(controller).action_methods.each do |controller_action|
+          simple_action = ExtremeAas::ExtremeSimpleAction.find_action(:action_name => controller_action, :controller_name => controller)
+          if simple_action.nil?
+            simple_action = ExtremeAas::ExtremeSimpleAction.create(:controller_name => controller, :action_name => controller_action)
+          end
+          processed_actions_ids << simple_action.id
+        end
+      end
+    end
+    #Helpers
+    helpers = Dir.new("#{Rails.root}/app/helpers").entries
+    helpers.each do |helper_file|
+      if helper_file =~ /_helper/
+        helper = helper_file.camelize.gsub(".rb","")
+        puts "Processing helper #{helper}"
+        Kernel.const_get(helper).instance_method_names.each do |method_name|
+          simple_action = ExtremeAas::ExtremeSimpleAction.find_action(:helper_name => helper, :method_name => method_name)
+          if simple_action.nil?
+            simple_action = ExtremeAas::ExtremeSimpleAction.create(:helper_name => helper, :method_name => method_name)
+          end
+          processed_actions_ids << simple_action.id
+        end
+      end
+    end
+    ExtremeAas::ExtremeSimpleAction.destroy_all(['id NOT IN (?)', processed_actions_ids])
+    puts "We're done here."
+  end
+  
+end

data/spec/dummy/Gemfile.lock

@@ -0,0 +1,10 @@
+GEM
+  remote: http://rubygems.org/
+  specs:
+    sqlite3-ruby (1.2.5)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  sqlite3-ruby (= 1.2.5)

data/spec/dummy/Rakefile

@@ -0,0 +1,7 @@
+# Add your own tasks in files placed in lib/tasks ending in .rake,
+# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
+
+require File.expand_path('../config/application', __FILE__)
+require 'rake'
+
+Dummy::Application.load_tasks

data/spec/dummy/app/assets/javascripts/users.js

@@ -0,0 +1,2 @@
+// Place all the behaviors and hooks related to the matching controller here.
+// All this logic will automatically be available in application.js.

data/spec/dummy/app/assets/stylesheets/scaffold.css

@@ -0,0 +1,56 @@
+body { background-color: #fff; color: #333; }
+
+body, p, ol, ul, td {
+  font-family: verdana, arial, helvetica, sans-serif;
+  font-size:   13px;
+  line-height: 18px;
+}
+
+pre {
+  background-color: #eee;
+  padding: 10px;
+  font-size: 11px;
+}
+
+a { color: #000; }
+a:visited { color: #666; }
+a:hover { color: #fff; background-color:#000; }
+
+div.field, div.actions {
+  margin-bottom: 10px;
+}
+
+#notice {
+  color: green;
+}
+
+.field_with_errors {
+  padding: 2px;
+  background-color: red;
+  display: table;
+}
+
+#error_explanation {
+  width: 450px;
+  border: 2px solid red;
+  padding: 7px;
+  padding-bottom: 0;
+  margin-bottom: 20px;
+  background-color: #f0f0f0;
+}
+
+#error_explanation h2 {
+  text-align: left;
+  font-weight: bold;
+  padding: 5px 5px 5px 15px;
+  font-size: 12px;
+  margin: -7px;
+  margin-bottom: 0px;
+  background-color: #c00;
+  color: #fff;
+}
+
+#error_explanation ul li {
+  font-size: 12px;
+  list-style: square;
+}

data/spec/dummy/app/assets/stylesheets/users.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/spec/dummy/app/controllers/application_controller.rb

@@ -0,0 +1,3 @@
+class ApplicationController < ActionController::Base
+  protect_from_forgery  
+end