ez-permissions 0.4.4 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c103819ff5b91d66f0f956545f2b0c1366e4ff076f953370e34e2e4c3685c099
-  data.tar.gz: f8094eb993fff840aac16397516ecaff77f121cecd09d654f7b3316113199b45
+  metadata.gz: cab72e814bf5bc7883df8e8f069958543d29a009eff5f3f1449c8f601417b731
+  data.tar.gz: 415e76d721038d89e81515b240bbe81fee10dbbe04e4781c6b3fa42adc9e340a
 SHA512:
-  metadata.gz: 75e8986de02432aa15c5135fa5821ca390daf446f4dfcef6c936bb3708179798b8b964138ce406142516fc0042aabed6516840fab1440318741973826d04e17b
-  data.tar.gz: 2eb3c3a15fb6e31dc47dccc28ffba3482a53d5face7757ed3f4269112346f5f739c6968d6cebbc2c71fe089c3c64a4b291a6ed15993ff713e2da8877dc649e08
+  metadata.gz: 726fd87afd239f261fb02c3c8ed57ab178807bd31fb5b46bfbad8b08e9e860cdc9066f2fa297c0208d9ad7717e63a147964d92a24db008b193d91516a3d68122
+  data.tar.gz: 620fbc36e4b13bc1e3f4a07636d13515decc9ff380cc76b199373e6cb28ca472f338571e2a474535780225ee0ea58eb59999fb0d5254ef812023f27021c6379d

data/README.md

@@ -31,7 +31,7 @@ Configuration interface allows you to change default behavior
 ```ruby
 Ez::Permissions.configure do |config|
   # If in generated migrations you changed table names, please configure them here:
-  config.permission_table_name = 'my_permissions'
+  config.permissions_table_name = 'my_permissions'
   config.roles_table_name = 'my_roles'
   config.models_roles_table_name = 'my_model_roles'
   config.permissions_roles_table_name = 'my_permissions_roles'
@@ -157,7 +157,7 @@ Permissions.list_by_role(:manager, scoped: project)
 # Create a role
 Permissions.create_role(:user)
 
-# Grant role's possibility to have action per resource
+# Grant role's ability to have action per resource
 Permissions.grant_permission(:user, :read, :projects)
 
 # Grant all defined actions per resource
@@ -200,7 +200,7 @@ Permissions.can?(user, :create, :users, scoped: project) => # false
 If in one HTTP request (e.g. navigation menu rendering) you don't want to hit the database with dozens of queries, you can cache all user permission in a hash
 
 ```ruby
-user_permissions =  Permissions.model_permissions_map(user)
+user_permissions =  Permissions.model_permissions(user)
 user_permissions # => #<Ez::Permissions::API::Authorize::ModelPermissions...
 
 # You can fetch permissions as a hash
@@ -214,6 +214,7 @@ end
 # or user #can? and #authorize! helper methods
 user_permissions.can?(:read, :users) # => true
 user_permissions.can?(:create, :users) # => false
+user_permissions.can?(:create, :users, scoped: project) # => false
 user_permissions.authorize!(:create, :users) # => raise Ez::Permissions::NotAuthorized
 ```
 
@@ -280,8 +281,6 @@ Of course, you can use them as mixins, but it's up to you.
 
 ## TODO
 - [ ] Add helper methods for seed grant permissions
-- [ ] Cached permissions. If single UI has multiple checks for one user - we can cache it!
-- [ ] Not all permissions should be manageable through UI, like roles and permissions.
 
 ## Contributing
 Contribution directions go here.

data/app/models/ez/permissions/role.rb

@@ -5,7 +5,7 @@ module Ez
     class Role < ApplicationRecord
       self.table_name = Ez::Permissions.config.roles_table_name
 
-      has_and_belongs_to_many :permissions
+      has_and_belongs_to_many :permissions, join_table: Ez::Permissions.config.permissions_roles_table_name
 
       validates :name, presence: true
       validates :name, uniqueness: true

data/lib/ez/permissions/api/authorize/godmode_permissions.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module Ez
+  module Permissions
+    module API
+      module Authorize
+        class GodmodPermissions < ModelPermissions
+          def can?(_action_name, _resource_name, **)
+            true
+          end
+
+          def authorize!(_action_name, _resource_name, **)
+            true
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ez/permissions/api/authorize/model_permissions.rb

@@ -11,20 +11,21 @@ module Ez
             @permissions_map = permissions_map
           end
 
-          def can?(action_name, resource_name)
-            permissions_map[to_key(action_name, resource_name)] == true
+          def can?(action_name, resource_name, scoped: nil)
+            permissions_map[to_key(action_name, resource_name, scoped)] == true
           end
 
-          def authorize!(action_name, resource_name)
-            permissions_map.fetch(to_key(action_name, resource_name))
+          def authorize!(action_name, resource_name, scoped: nil)
+            permissions_map.fetch(to_key(action_name, resource_name, scoped))
           rescue KeyError
             raise Ez::Permissions::NotAuthorizedError
           end
 
           private
 
-          def to_key(action_name, resource_name)
-            "#{action_name}_#{resource_name}".to_sym
+          def to_key(action_name, resource_name, scoped = nil)
+            scoped_key = [scoped&.class, scoped&.id].compact.join('_')
+            "#{action_name}_#{resource_name}_#{scoped_key}".to_sym
           end
         end
       end

data/lib/ez/permissions/api/authorize.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require_relative 'authorize/model_permissions'
+require_relative 'authorize/godmode_permissions'
 
 module Ez
   module Permissions
@@ -8,12 +9,19 @@ module Ez
       module Authorize
         def model_permissions(model)
           ModelPermissions.new(
-            model.permissions.each_with_object({}) do |permission, acum|
-              acum["#{permission.action}_#{permission.resource}".to_sym] = true
+            model.class.includes(assigned_roles: { role: :permissions }).find(model.id).assigned_roles.each_with_object({}) do |assigned_role, acum|
+              scoped_key = [assigned_role.scoped_type, assigned_role.scoped_id].compact.join('_')
+              assigned_role.role.permissions.each do |permission|
+                acum["#{permission.action}_#{permission.resource}_#{scoped_key}".to_sym] = true
+              end
             end
           )
         end
 
+        def godmode_permissions
+          GodmodPermissions.new({})
+        end
+
         def authorize!(model, *actions, resource, scoped: nil, &block)
           authorize(model, *actions, resource, scoped: scoped, raise_exception: true, &block)
         end

data/lib/ez/permissions/dsl.rb

@@ -52,7 +52,7 @@ module Ez
       def message(txt, level = 'WARN')
         return if Ez::Permissions.config.mute_stdout
 
-        STDOUT.puts("[#{level}] Ez::Permissions: #{txt}")
+        $stdout.puts("[#{level}] Ez::Permissions: #{txt}")
       end
 
       def seed_to_db(resource)

data/lib/ez/permissions/resource.rb

@@ -5,13 +5,14 @@ module Ez
     class Resource
       ACTIONS = %i[create read update delete].freeze
 
-      attr_reader :name, :model, :actions, :group
+      attr_reader :name, :model, :actions, :group, :label
 
       def initialize(name, options = {})
         @name    = name
         @model   = options.fetch(:model, nil)
         @actions = process_actions(options.fetch(:actions, []))
         @group   = options.fetch(:group, :others)
+        @label   = options.fetch(:label, name.to_s.humanize)
       end
 
       def <=>(other)

data/lib/ez/permissions/version.rb

@@ -2,6 +2,6 @@
 
 module Ez
   module Permissions
-    VERSION = '0.4.4'
+    VERSION = '0.7.0'
   end
 end

data/lib/generators/ez/permissions/install_generator.rb

@@ -8,7 +8,7 @@ module Ez
                     "# frozen_string_literal: true
 
 Ez::Permissions.configure do |config|
-  # config.permission_table_name = 'ez_permissions_permissions'
+  # config.permissions_table_name = 'ez_permissions_permissions'
   # config.roles_table_name = 'ez_permissions_roles'
   # config.models_roles_table_name = 'ez_permissions_model_roles'
   # config.permissions_roles_table_name = 'ez_permissions_permissions_roles'

data/lib/tasks/ez/permissions_tasks.rake

@@ -7,7 +7,7 @@ namespace :ez do
       Ez::Permissions::Permission.find_each do |permission|
         next if Ez::Permissions::DSL.resource_action?(permission.resource, permission.action)
 
-        STDOUT.puts '[WARNING] Ez::Permissions:'\
+        $stdout.puts '[WARNING] Ez::Permissions:'\
           "Permission##{permission.id} [#{permission.resource} -> #{permission.action}] is redundant"
       end
     end
@@ -17,7 +17,7 @@ namespace :ez do
         next if Ez::Permissions::DSL.resource_action?(permission.resource, permission.action)
 
         permission.destroy
-        STDOUT.puts '[WARNING] Ez::Permissions:'\
+        $stdout.puts '[WARNING] Ez::Permissions:'\
           "Permission##{permission.id} [#{permission.resource} -> #{permission.action}] is removed"
       end
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ez-permissions
 version: !ruby/object:Gem::Version
-  version: 0.4.4
+  version: 0.7.0
 platform: ruby
 authors:
 - Volodya Sveredyuk
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-06-05 00:00:00.000000000 Z
+date: 2021-11-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ez-core
@@ -148,14 +148,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.3.6
+        version: '1.4'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.3.6
+        version: '1.4'
 description: Easy permissions engine for Rails app.
 email:
 - sveredyuk@gmail.com
@@ -176,6 +176,7 @@ files:
 - lib/ez/permissions.rb
 - lib/ez/permissions/api.rb
 - lib/ez/permissions/api/authorize.rb
+- lib/ez/permissions/api/authorize/godmode_permissions.rb
 - lib/ez/permissions/api/authorize/model_permissions.rb
 - lib/ez/permissions/api/models.rb
 - lib/ez/permissions/api/permissions.rb
@@ -201,14 +202,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 2.5.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
+rubygems_version: 3.1.6
 signing_key: 
 specification_version: 4
 summary: Easy permissions engine for Rails app.