forest_liana 5.1.0 → 5.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ab9646c698402ca2481f07ae86b409d8704a696f37a66b1480214bb99c2e69b1
-  data.tar.gz: f19e6491e2833148464bd8b24cbf3f390e5223981aa3fbcfe92f6b755da23b90
+  metadata.gz: 8c78dcd3b69f75932cb2e52b0448b8155088347c1e434438d5d12fbfb5380eed
+  data.tar.gz: 2b84707467c2d775aed3a775879db4db24c5c2e28290a0b480fd25763b43e80a
 SHA512:
-  metadata.gz: 3a4885397e50426324c4d6f93fd08539fcc5c440fa2292441d68310ce59e5d87c0bde5d6f8742e8bebce29dc9cf48fbd55962854f74a4e74bf5b2eced6032e29
-  data.tar.gz: 2cd513683040ca3092d7078a7f99b88a5174d5cd91711fc9c1b06abfca0a55e0f1ddd9f2c973c135e04b8eca3310f1c59c1dbb4e4551ecdc0e9ae577206da896
+  metadata.gz: da235c4e9ef1c433654138de93dbb3925521b381f9abc9553d6ed91a3ddfae61189804d52b423cb2022284e0425e05687e3559e131527cacda251289cfb5e69c
+  data.tar.gz: dc4716b15fe417e2c073c5736a1b990664ed8bfdf83ed47f559e8980a7744f30aa6e013abac6d65a04d5ed650cae962f964f5a2a43f380be1f43fab01a8f9c09

data/app/controllers/forest_liana/resources_controller.rb

@@ -22,7 +22,13 @@ module ForestLiana
           checker = ForestLiana::PermissionsChecker.new(@resource, 'searchToEdit', @rendering_id)
           return head :forbidden unless checker.is_authorized?
         else
-          checker = ForestLiana::PermissionsChecker.new(@resource, 'list', @rendering_id)
+          checker = ForestLiana::PermissionsChecker.new(
+            @resource,
+            'list',
+            @rendering_id,
+            nil,
+            get_collection_list_permission_info(forest_user, request)
+          )
           return head :forbidden unless checker.is_authorized?
         end
 
@@ -51,7 +57,13 @@ module ForestLiana
 
     def count
       begin
-        checker = ForestLiana::PermissionsChecker.new(@resource, 'list', @rendering_id)
+        checker = ForestLiana::PermissionsChecker.new(
+          @resource,
+          'list',
+          @rendering_id,
+          nil,
+          get_collection_list_permission_info(forest_user, request)
+        )
         return head :forbidden unless checker.is_authorized?
 
         getter = ForestLiana::ResourcesGetter.new(@resource, params)
@@ -232,5 +244,15 @@ module ForestLiana
       collection_name = ForestLiana.name_for(@resource)
       @collection ||= ForestLiana.apimap.find { |collection| collection.name.to_s == collection_name }
     end
+
+    # NOTICE: Return a formatted object containing the request condition filters and 
+    #         the user id used by the scope validator class to validate if scope is 
+    #         in request
+    def get_collection_list_permission_info(user, collection_list_request)
+      {
+        user_id: user['id'],
+        filters: collection_list_request[:filters],
+      }
+    end
   end
 end

data/app/services/forest_liana/permissions_checker.rb

@@ -3,11 +3,12 @@ module ForestLiana
     @@permissions_per_rendering = Hash.new
     @@expiration_in_seconds = (ENV['FOREST_PERMISSIONS_EXPIRATION_IN_SECONDS'] || 3600).to_i
 
-    def initialize(resource, permission_name, rendering_id, smart_action_parameters = nil)
+    def initialize(resource, permission_name, rendering_id, smart_action_parameters = nil, collection_list_parameters = nil)
       @collection_name = ForestLiana.name_for(resource)
       @permission_name = permission_name
       @rendering_id = rendering_id
       @smart_action_parameters = smart_action_parameters
+      @collection_list_parameters = collection_list_parameters
     end
 
     def is_authorized?
@@ -46,12 +47,23 @@ module ForestLiana
       return @allowed && (@users.nil?|| @users.include?(@user_id.to_i));
     end
 
+    def collection_list_allowed?(scope_permissions)
+      return ForestLiana::ScopeValidator.new(
+        scope_permissions['filter'],
+        scope_permissions['dynamicScopesValues']['users']
+      ).is_scope_in_request?(@collection_list_parameters)
+    end
+
     def is_allowed?
       permissions = get_permissions
       if permissions && permissions[@collection_name] &&
         permissions[@collection_name]['collection']
         if @permission_name === 'actions'
           return smart_action_allowed?(permissions[@collection_name]['actions'])
+        # NOTICE: Permissions[@collection_name]['scope'] will either contains conditions filter and
+        #         dynamic user values definition, or null for collection that does not use scopes
+        elsif @permission_name === 'list' and permissions[@collection_name]['scope']
+          return collection_list_allowed?(permissions[@collection_name]['scope'])
         else
           return permissions[@collection_name]['collection'][@permission_name]
         end

data/app/services/forest_liana/scope_validator.rb

@@ -0,0 +1,97 @@
+module ForestLiana
+  class ScopeValidator
+    def initialize(scope_permissions, users_variable_values)
+      @scope_filters = scope_permissions
+      @users_variable_values = users_variable_values
+    end
+
+    def is_scope_in_request?(scope_request)
+      begin
+        filters = JSON.parse(scope_request[:filters])
+      rescue JSON::ParserError
+        raise ForestLiana::Errors::HTTP422Error.new('Invalid filters JSON format')
+      end
+      @computed_scope = compute_condition_filters_from_scope(scope_request[:user_id])
+
+      # NOTICE: Perfom a travel in the request condition filters tree to find the scope
+      tagged_scope_filters = get_scope_found_in_request(filters)
+
+      # NOTICE: Permission system always send an aggregator even if there is only one condition
+      #         In that case, if the condition is valid, then request was not edited
+      return !tagged_scope_filters.nil? if @scope_filters['conditions'].length == 1
+
+      # NOTICE: If there is more than one condition, do a final validation on the condition filters
+      return tagged_scope_filters != nil &&
+        tagged_scope_filters[:aggregator] == @scope_filters['aggregator'] &&
+        tagged_scope_filters[:conditions] &&
+        tagged_scope_filters[:conditions].length == @scope_filters['conditions'].length
+    end
+
+    private
+
+    def compute_condition_filters_from_scope(user_id)
+      computed_condition_filters = @scope_filters.clone
+      computed_condition_filters['conditions'].each do |condition|
+        if condition.include?('value') && 
+          !condition['value'].nil? && 
+          condition['value'].start_with?('$') && 
+          @users_variable_values.include?(user_id)
+          condition['value'] = @users_variable_values[user_id][condition['value']]
+        end
+      end
+      return computed_condition_filters
+    end
+
+    def get_scope_found_in_request(filters)
+      return nil unless filters
+      return search_scope_aggregation(filters)
+    end
+
+    def search_scope_aggregation(node)
+      ensure_valid_aggregation(node)
+
+      return is_scope_condition?(node) unless node['aggregator']
+  
+      # NOTICE: Remove conditions that are not from the scope
+      filtered_conditions = node['conditions'].map { |condition| 
+        search_scope_aggregation(condition)
+      }.select { |condition|
+        condition
+      }
+
+      # NOTICE: If there is only one condition filter left and its current aggregator is
+      #         an "and", this condition filter is the searched scope
+      if (filtered_conditions.length == 1 && 
+        filtered_conditions.first.is_a?(Hash) &&
+        filtered_conditions.first.include?(:aggregator) &&
+        node['aggregator'] == 'and')
+        return filtered_conditions.first
+      end
+
+      # NOTICE: Otherwise, validate if the current node is the scope and return nil
+      #         if it's not
+      return (filtered_conditions.length == @scope_filters['conditions'].length && 
+        node['aggregator'] == @scope_filters['aggregator']) ?
+        { aggregator: node['aggregator'], conditions: filtered_conditions } :
+        nil
+    end
+
+    def is_scope_condition?(condition)
+      ensure_valid_condition(condition)
+      return @computed_scope['conditions'].include?(condition)
+    end
+
+    def ensure_valid_aggregation(node)
+      raise ForestLiana::Errors::HTTP422Error.new('Filters cannot be a raw value') unless node.is_a?(Hash)
+      raise_empty_condition_in_filter_error if node.empty?
+    end
+
+    def ensure_valid_condition(condition)
+      raise_empty_condition_in_filter_error if condition.empty?
+      raise ForestLiana::Errors::HTTP422Error.new('Condition cannot be a raw value') unless condition.is_a?(Hash)
+      unless condition['field'].is_a?(String) and condition['operator'].is_a?(String)
+        raise ForestLiana::Errors::HTTP422Error.new('Invalid condition format')
+      end
+    end
+  end
+end

data/lib/forest_liana/version.rb

@@ -1,3 +1,3 @@
 module ForestLiana
-  VERSION = "5.1.0"
+  VERSION = "5.2.1"
 end

data/test/services/forest_liana/scope_validator_test.rb

@@ -0,0 +1,185 @@
+module ForestLiana
+  class ScopeValidatorTest < ActiveSupport::TestCase
+    test 'Request with aggregated condition filters should be allowed if it matches the scope exactly' do
+      scope_validator = ForestLiana::ScopeValidator.new({
+          'aggregator' => 'and',
+          'conditions' => [
+            { 'field' => 'name', 'value' => 'john', 'operator' => 'equal' },
+            { 'field' => 'price', 'value' => '2500', 'operator' => 'equal' }
+          ]
+        }, [])
+
+      allowed = scope_validator.is_scope_in_request?({
+        user_id: '1',
+        filters: JSON.generate({
+          aggregator: 'and',
+          conditions: [
+            { field: 'name', value: 'john', operator: 'equal' },
+            { field: 'price', value: '2500', operator: 'equal' }              
+          ]
+        })
+      })
+      assert allowed == true
+    end
+
+    test 'Request with simple condition filter should be allowed if it matches the scope exactly' do
+      scope_validator = ForestLiana::ScopeValidator.new({
+          'aggregator' => 'and',
+          'conditions' => [
+            { 'field' => 'field', 'value' => 'value', 'operator' => 'equal' }
+          ]
+        }, [])
+      allowed = scope_validator.is_scope_in_request?({
+        user_id: '1',
+        filters: JSON.generate({
+          field: 'field', value: 'value', operator: 'equal'
+        })
+      })
+      assert allowed == true
+    end
+
+    test 'Request with multiples condition filters should be allowed if it contains the scope ' do
+      scope_validator = ForestLiana::ScopeValidator.new({
+          'aggregator' => 'and',
+          'conditions' => [
+            { 'field' => 'name', 'value' => 'doe', 'operator' => 'equal' }
+          ]
+        }, []
+        )
+        
+      allowed = scope_validator.is_scope_in_request?({
+        user_id: '1',
+        filters: JSON.generate({
+          aggregator: 'and',
+          conditions: [
+            { field: 'name', value: 'doe', operator: 'equal' },
+            { field: 'field2', value: 'value2', operator: 'equal' }              
+          ]
+        })
+      })
+      assert allowed == true
+    end
+
+    test 'Request with dynamic user values should be allowed if it matches the scope exactly' do
+      scope_validator = ForestLiana::ScopeValidator.new({
+          'aggregator' => 'and',
+          'conditions' => [
+            { 'field' => 'name', 'value' => '$currentUser.lastname', 'operator' => 'equal' }
+          ],
+        }, {
+          '1' => { '$currentUser.lastname' => 'john' }
+        })
+
+      allowed = scope_validator.is_scope_in_request?({
+        user_id: '1',
+        filters: JSON.generate({
+          'field' => 'name', 'value' => 'john', 'operator' => 'equal'
+        })
+      })
+      assert allowed == true
+    end
+
+    test 'Request with multiples aggregation and dynamic values should be allowed if it contains the scope' do
+      scope_validator = ForestLiana::ScopeValidator.new({
+        'aggregator' => 'or',
+        'conditions' => [
+            { 'field' => 'price', 'value' => '2500', 'operator' => 'equal' },
+            { 'field' => 'name', 'value' => '$currentUser.lastname', 'operator' => 'equal' }
+          ]
+        }, {
+          '1' => { '$currentUser.lastname' => 'john' }
+        })
+        
+      allowed = scope_validator.is_scope_in_request?({
+        user_id: '1',
+        filters: JSON.generate({
+          aggregator: 'and',
+          conditions: [
+            { field: 'field', value: 'value', operator: 'equal' },
+            { 
+              aggregator: 'or',
+              conditions: [
+                { field: 'price', value: '2500', operator: 'equal' },
+                { field: 'name', value: 'john', operator: 'equal' }   
+              ]
+            }
+          ]
+        })
+      })
+      assert allowed == true
+    end
+
+    test 'Request that does not match the expect scope should not be allowed' do
+      scope_validator = ForestLiana::ScopeValidator.new({
+          'aggregator' => 'and',
+          'conditions' => [
+            { 'field' => 'name', 'value' => 'john', 'operator' => 'equal' },
+            { 'field' => 'price', 'value' => '2500', 'operator' => 'equal' }
+          ]
+        }, [])
+        
+      allowed = scope_validator.is_scope_in_request?({
+        user_id: '1',
+        filters: JSON.generate({
+          aggregator: 'and',
+          conditions: [
+            { field: 'name', value: 'definitely_not_john', operator: 'equal' },
+            { field: 'price', value: '0', operator: 'equal' }              
+          ]
+        })
+      })
+      assert allowed == false
+    end
+
+    test 'Request that are missing part of the scope should not be allowed' do
+      scope_validator = ForestLiana::ScopeValidator.new({
+          'aggregator' => 'and',
+          'conditions' => [
+            { 'field' => 'name', 'value' => 'john', 'operator' => 'equal' },
+            { 'field' => 'price', 'value' => '2500', 'operator' => 'equal' }
+          ]
+        }, [])
+        
+      allowed = scope_validator.is_scope_in_request?({
+        user_id: '1',
+        filters: JSON.generate({
+          aggregator: 'and',
+          conditions: [
+            { field: 'name', value: 'john', operator: 'equal' },
+          ]
+        })
+      })
+      assert allowed == false
+    end
+
+    test 'Request that does not have a top aggregator being "and" should not be allowed' do
+      scope_validator = ForestLiana::ScopeValidator.new({
+        'aggregator' => 'and',
+        'conditions' => [
+            { 'field' => 'price', 'value' => '2500', 'operator' => 'equal' },
+            { 'field' => 'name', 'value' => '$currentUser.lastname', 'operator' => 'equal' }
+          ]
+        }, {
+          '1' => { '$currentUser.lastname' => 'john' }
+        })
+
+      allowed = scope_validator.is_scope_in_request?({
+        user_id: '1',
+        filters: JSON.generate({
+          aggregator: 'or',
+          conditions: [
+            { field: 'field', value: 'value', operator: 'equal' },
+            { 
+              aggregator: 'and',
+              conditions: [
+                { field: 'price', value: '2500', operator: 'equal' },
+                { field: 'name', value: 'john', operator: 'equal' }   
+              ]
+            }
+          ]
+        })
+      })
+      assert allowed == false
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: forest_liana
 version: !ruby/object:Gem::Version
-  version: 5.1.0
+  version: 5.2.1
 platform: ruby
 authors:
 - Sandro Munda
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-04-17 00:00:00.000000000 Z
+date: 2020-07-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -84,16 +84,16 @@ dependencies:
   name: groupdate
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 2.5.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 2.5.2
 - !ruby/object:Gem::Dependency
   name: useragent
   requirement: !ruby/object:Gem::Requirement
@@ -262,6 +262,7 @@ files:
 - app/services/forest_liana/resources_getter.rb
 - app/services/forest_liana/schema_adapter.rb
 - app/services/forest_liana/schema_utils.rb
+- app/services/forest_liana/scope_validator.rb
 - app/services/forest_liana/search_query_builder.rb
 - app/services/forest_liana/stat_getter.rb
 - app/services/forest_liana/stripe_base_getter.rb
@@ -432,6 +433,7 @@ files:
 - test/services/forest_liana/resource_updater_test.rb
 - test/services/forest_liana/resources_getter_test.rb
 - test/services/forest_liana/schema_adapter_test.rb
+- test/services/forest_liana/scope_validator_test.rb
 - test/services/forest_liana/value_stat_getter_test.rb
 - test/test_helper.rb
 homepage: https://github.com/ForestAdmin/forest-rails
@@ -453,147 +455,149 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.8
+rubyforge_project: 
+rubygems_version: 2.7.7
 signing_key: 
 specification_version: 4
 summary: Official Rails Liana for Forest
 test_files:
-- test/dummy/app/models/has_many_class_name_field.rb
-- test/dummy/app/models/has_many_through_field.rb
+- test/fixtures/owner.yml
+- test/fixtures/belongs_to_field.yml
+- test/fixtures/has_many_through_field.yml
+- test/fixtures/tree.yml
+- test/fixtures/has_one_field.yml
+- test/fixtures/reference.yml
+- test/fixtures/serialize_field.yml
+- test/fixtures/has_many_field.yml
+- test/fixtures/string_field.yml
+- test/services/forest_liana/resources_getter_test.rb
+- test/services/forest_liana/scope_validator_test.rb
+- test/services/forest_liana/schema_adapter_test.rb
+- test/services/forest_liana/has_many_getter_test.rb
+- test/services/forest_liana/value_stat_getter_test.rb
+- test/services/forest_liana/resource_updater_test.rb
+- test/services/forest_liana/pie_stat_getter_test.rb
+- test/test_helper.rb
+- test/dummy/README.rdoc
+- test/dummy/app/views/layouts/application.html.erb
 - test/dummy/app/models/has_many_field.rb
-- test/dummy/app/models/date_field.rb
+- test/dummy/app/models/string_field.rb
 - test/dummy/app/models/has_and_belongs_to_many_field.rb
-- test/dummy/app/models/serialize_field.rb
-- test/dummy/app/models/reference.rb
-- test/dummy/app/models/float_field.rb
-- test/dummy/app/models/integer_field.rb
+- test/dummy/app/models/has_many_through_field.rb
+- test/dummy/app/models/has_many_class_name_field.rb
+- test/dummy/app/models/has_one_field.rb
+- test/dummy/app/models/date_field.rb
 - test/dummy/app/models/boolean_field.rb
-- test/dummy/app/models/belongs_to_field.rb
-- test/dummy/app/models/owner.rb
+- test/dummy/app/models/float_field.rb
+- test/dummy/app/models/reference.rb
 - test/dummy/app/models/belongs_to_class_name_field.rb
-- test/dummy/app/models/decimal_field.rb
-- test/dummy/app/models/has_one_field.rb
-- test/dummy/app/models/string_field.rb
 - test/dummy/app/models/polymorphic_field.rb
 - test/dummy/app/models/tree.rb
-- test/dummy/app/controllers/application_controller.rb
-- test/dummy/app/views/layouts/application.html.erb
+- test/dummy/app/models/decimal_field.rb
+- test/dummy/app/models/serialize_field.rb
+- test/dummy/app/models/integer_field.rb
+- test/dummy/app/models/belongs_to_field.rb
+- test/dummy/app/models/owner.rb
+- test/dummy/app/helpers/application_helper.rb
 - test/dummy/app/assets/javascripts/application.js
 - test/dummy/app/assets/stylesheets/application.css
-- test/dummy/app/helpers/application_helper.rb
+- test/dummy/app/controllers/application_controller.rb
+- test/dummy/Rakefile
 - test/dummy/bin/rake
-- test/dummy/bin/setup
 - test/dummy/bin/bundle
 - test/dummy/bin/rails
-- test/dummy/config/secrets.yml
+- test/dummy/bin/setup
+- test/dummy/public/404.html
+- test/dummy/public/500.html
+- test/dummy/public/422.html
+- test/dummy/public/favicon.ico
+- test/dummy/config.ru
+- test/dummy/db/migrate/20181111162121_create_references_table.rb
+- test/dummy/db/migrate/20150608131430_create_integer_field.rb
+- test/dummy/db/migrate/20160628173505_add_timestamps.rb
+- test/dummy/db/migrate/20160627172810_create_owner.rb
+- test/dummy/db/migrate/20150814081918_create_has_many_through_field.rb
+- test/dummy/db/migrate/20150608132159_create_boolean_field.rb
+- test/dummy/db/migrate/20150608131603_create_decimal_field.rb
+- test/dummy/db/migrate/20150616150629_create_polymorphic_field.rb
+- test/dummy/db/migrate/20150612112520_create_has_and_belongs_to_many_field.rb
+- test/dummy/db/migrate/20150608131610_create_float_field.rb
+- test/dummy/db/migrate/20150608133038_create_belongs_to_field.rb
+- test/dummy/db/migrate/20150608150016_create_has_many_field.rb
+- test/dummy/db/migrate/20150609114636_create_belongs_to_class_name_field.rb
+- test/dummy/db/migrate/20170614141921_create_serialize_field.rb
+- test/dummy/db/migrate/20150608132621_create_string_field.rb
+- test/dummy/db/migrate/20150608133044_create_has_one_field.rb
+- test/dummy/db/migrate/20150623115554_create_has_many_class_name_field.rb
+- test/dummy/db/migrate/20150608130516_create_date_field.rb
+- test/dummy/db/migrate/20160627172951_create_tree.rb
+- test/dummy/db/schema.rb
 - test/dummy/config/routes.rb
-- test/dummy/config/locales/en.yml
-- test/dummy/config/environments/production.rb
-- test/dummy/config/environments/development.rb
-- test/dummy/config/environments/test.rb
 - test/dummy/config/environment.rb
+- test/dummy/config/secrets.yml
 - test/dummy/config/application.rb
-- test/dummy/config/database.yml
 - test/dummy/config/boot.rb
-- test/dummy/config/initializers/backtrace_silencers.rb
+- test/dummy/config/environments/test.rb
+- test/dummy/config/environments/development.rb
+- test/dummy/config/environments/production.rb
+- test/dummy/config/locales/en.yml
+- test/dummy/config/initializers/wrap_parameters.rb
 - test/dummy/config/initializers/mime_types.rb
 - test/dummy/config/initializers/filter_parameter_logging.rb
-- test/dummy/config/initializers/session_store.rb
-- test/dummy/config/initializers/wrap_parameters.rb
 - test/dummy/config/initializers/assets.rb
-- test/dummy/config/initializers/cookies_serializer.rb
+- test/dummy/config/initializers/session_store.rb
 - test/dummy/config/initializers/inflections.rb
-- test/dummy/config.ru
-- test/dummy/Rakefile
-- test/dummy/public/favicon.ico
-- test/dummy/public/422.html
-- test/dummy/public/500.html
-- test/dummy/public/404.html
-- test/dummy/db/schema.rb
-- test/dummy/db/migrate/20150608133038_create_belongs_to_field.rb
-- test/dummy/db/migrate/20150608130516_create_date_field.rb
-- test/dummy/db/migrate/20160627172951_create_tree.rb
-- test/dummy/db/migrate/20150608132621_create_string_field.rb
-- test/dummy/db/migrate/20160627172810_create_owner.rb
-- test/dummy/db/migrate/20150612112520_create_has_and_belongs_to_many_field.rb
-- test/dummy/db/migrate/20150608132159_create_boolean_field.rb
-- test/dummy/db/migrate/20181111162121_create_references_table.rb
-- test/dummy/db/migrate/20160628173505_add_timestamps.rb
-- test/dummy/db/migrate/20150608133044_create_has_one_field.rb
-- test/dummy/db/migrate/20150814081918_create_has_many_through_field.rb
-- test/dummy/db/migrate/20150609114636_create_belongs_to_class_name_field.rb
-- test/dummy/db/migrate/20150608150016_create_has_many_field.rb
-- test/dummy/db/migrate/20150608131430_create_integer_field.rb
-- test/dummy/db/migrate/20170614141921_create_serialize_field.rb
-- test/dummy/db/migrate/20150608131610_create_float_field.rb
-- test/dummy/db/migrate/20150608131603_create_decimal_field.rb
-- test/dummy/db/migrate/20150623115554_create_has_many_class_name_field.rb
-- test/dummy/db/migrate/20150616150629_create_polymorphic_field.rb
-- test/dummy/README.rdoc
+- test/dummy/config/initializers/cookies_serializer.rb
+- test/dummy/config/initializers/backtrace_silencers.rb
+- test/dummy/config/database.yml
 - test/forest_liana_test.rb
-- test/fixtures/has_many_through_field.yml
-- test/fixtures/string_field.yml
-- test/fixtures/belongs_to_field.yml
-- test/fixtures/tree.yml
-- test/fixtures/has_one_field.yml
-- test/fixtures/reference.yml
-- test/fixtures/owner.yml
-- test/fixtures/has_many_field.yml
-- test/fixtures/serialize_field.yml
-- test/test_helper.rb
 - test/routing/route_test.rb
-- test/services/forest_liana/schema_adapter_test.rb
-- test/services/forest_liana/resource_updater_test.rb
-- test/services/forest_liana/value_stat_getter_test.rb
-- test/services/forest_liana/has_many_getter_test.rb
-- test/services/forest_liana/pie_stat_getter_test.rb
-- test/services/forest_liana/resources_getter_test.rb
+- spec/services/forest_liana/ip_whitelist_checker_spec.rb
+- spec/services/forest_liana/schema_adapter_spec.rb
+- spec/services/forest_liana/apimap_sorter_spec.rb
+- spec/services/forest_liana/filters_parser_spec.rb
 - spec/spec_helper.rb
-- spec/dummy/app/config/routes.rb
+- spec/requests/resources_spec.rb
+- spec/dummy/README.rdoc
+- spec/dummy/app/views/layouts/application.html.erb
 - spec/dummy/app/models/island.rb
 - spec/dummy/app/models/user.rb
 - spec/dummy/app/models/tree.rb
-- spec/dummy/app/controllers/application_controller.rb
-- spec/dummy/app/views/layouts/application.html.erb
+- spec/dummy/app/helpers/application_helper.rb
 - spec/dummy/app/assets/javascripts/application.js
 - spec/dummy/app/assets/stylesheets/application.css
-- spec/dummy/app/helpers/application_helper.rb
+- spec/dummy/app/config/routes.rb
+- spec/dummy/app/controllers/application_controller.rb
+- spec/dummy/Rakefile
 - spec/dummy/bin/rake
-- spec/dummy/bin/setup
 - spec/dummy/bin/bundle
 - spec/dummy/bin/rails
-- spec/dummy/config/secrets.yml
+- spec/dummy/bin/setup
+- spec/dummy/config.ru
+- spec/dummy/db/migrate/20190226174951_create_tree.rb
+- spec/dummy/db/migrate/20190716135241_add_type_to_user.rb
+- spec/dummy/db/migrate/20190226173051_create_isle.rb
+- spec/dummy/db/migrate/20190716130830_add_age_to_tree.rb
+- spec/dummy/db/migrate/20190226172951_create_user.rb
+- spec/dummy/db/schema.rb
 - spec/dummy/config/routes.rb
-- spec/dummy/config/environments/production.rb
-- spec/dummy/config/environments/development.rb
-- spec/dummy/config/environments/test.rb
 - spec/dummy/config/environment.rb
+- spec/dummy/config/secrets.yml
 - spec/dummy/config/application.rb
-- spec/dummy/config/database.yml
 - spec/dummy/config/boot.rb
-- spec/dummy/config/initializers/backtrace_silencers.rb
+- spec/dummy/config/environments/test.rb
+- spec/dummy/config/environments/development.rb
+- spec/dummy/config/environments/production.rb
+- spec/dummy/config/initializers/wrap_parameters.rb
+- spec/dummy/config/initializers/forest_liana.rb
 - spec/dummy/config/initializers/mime_types.rb
 - spec/dummy/config/initializers/filter_parameter_logging.rb
-- spec/dummy/config/initializers/session_store.rb
-- spec/dummy/config/initializers/wrap_parameters.rb
 - spec/dummy/config/initializers/assets.rb
-- spec/dummy/config/initializers/cookies_serializer.rb
-- spec/dummy/config/initializers/forest_liana.rb
+- spec/dummy/config/initializers/session_store.rb
 - spec/dummy/config/initializers/inflections.rb
-- spec/dummy/config.ru
-- spec/dummy/Rakefile
-- spec/dummy/db/schema.rb
-- spec/dummy/db/migrate/20190716130830_add_age_to_tree.rb
-- spec/dummy/db/migrate/20190226173051_create_isle.rb
-- spec/dummy/db/migrate/20190226174951_create_tree.rb
-- spec/dummy/db/migrate/20190226172951_create_user.rb
-- spec/dummy/db/migrate/20190716135241_add_type_to_user.rb
-- spec/dummy/README.rdoc
-- spec/requests/resources_spec.rb
-- spec/rails_helper.rb
-- spec/helpers/forest_liana/query_helper_spec.rb
+- spec/dummy/config/initializers/cookies_serializer.rb
+- spec/dummy/config/initializers/backtrace_silencers.rb
+- spec/dummy/config/database.yml
 - spec/helpers/forest_liana/schema_helper_spec.rb
-- spec/services/forest_liana/schema_adapter_spec.rb
-- spec/services/forest_liana/apimap_sorter_spec.rb
-- spec/services/forest_liana/filters_parser_spec.rb
-- spec/services/forest_liana/ip_whitelist_checker_spec.rb
+- spec/helpers/forest_liana/query_helper_spec.rb
+- spec/rails_helper.rb