ishapi 0.1.6 → 0.1.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 0bc2551ac0f596f9a00805d21aac56f9b47bcb95
-  data.tar.gz: 92906c76403bbedfdfa1c48637ff73c2f47890e2
+  metadata.gz: 6fde57c4d2ec802718f51faa22e509d4f8d445d0
+  data.tar.gz: e721fa860b52af477142b114a3c98c3e9a2d0679
 SHA512:
-  metadata.gz: 28f3be37b2755ea3a4369b9938c394cda3f8383be3dff28de75dc1402b54f43b9b187b93d2942809ac10a397615b05e0767cc9c2f8623a45d7b8698c8a19a19c
-  data.tar.gz: 3c07240b2b30509bb8eb60feb48a7dbd6d2682bb828829720d29274db762f0b957dbbe488fa1c6b3878ce4eaa30527016223ff732aca36cc101dc3905a8abc36
+  metadata.gz: 3b0bce38baf4f21e2dc617a33f71eee4b9b2c126a56a1eb5f48d8a70c2347620520cb10b3d9da9bb72f3e85905401250aa444bddc8cc9467f277e111f9a67e5d
+  data.tar.gz: 3c76037a3f826617d3b26e9d1749855b816d585fb58464a61a2893486e8a98e654204dae294a0e6c4fad9fa49e411304c25089d10b2a38df65a24598644fed93

data/app/controllers/ishapi/api_controller.rb

@@ -1,4 +1,3 @@
-
 require_dependency "ishapi/application_controller"
 
 module Ishapi

data/app/controllers/ishapi/application_controller.rb

@@ -2,6 +2,14 @@ module Ishapi
   class ApplicationController < ActionController::Base
     protect_from_forgery with: :exception
     layout :false
+    before_action :set_current_ability
+    check_authorization
+
+    private
+
+    def set_current_ability
+      @current_ability ||= ::Ishapi::Ability.new( current_user )
+    end
 
     def puts! a, b=''
       puts "+++ +++ #{b}"

data/app/controllers/ishapi/galleries_controller.rb

@@ -3,7 +3,8 @@ module Ishapi
   class GalleriesController < ApplicationController
 
     def show
-      @gallery = ::Gallery.find_by :galleryname => params[:galleryname]
+      @gallery = ::Gallery.unscoped.find_by :galleryname => params[:galleryname]
+      authorize! :show, @gallery
     end
 
   end

data/app/models/ishapi/ability.rb

@@ -0,0 +1,32 @@
+
+class Ishapi::Ability
+  include ::CanCan::Ability
+
+  def initialize user
+
+    #
+    # signed in user
+    #
+    unless user.blank?
+
+      if user.profile && user.profile.manager?
+        can :manage, :all
+      end
+
+      can [ :show ], Gallery do |gallery|
+        gallery.user == user
+      end
+      
+    end
+    user ||= User.new
+    
+    can [ :read ], Gallery do |gallery|
+      gallery.is_public
+    end
+
+    can [ :read ], Report do |report|
+      report.is_public
+    end
+    
+  end
+end

data/app/models/ishapi/ability.rb~

@@ -0,0 +1,14 @@
+
+class Ishapi::Ability
+  include ::CanCan::Ability
+
+  def initialize user
+    user ||= User.new
+
+    if user.profile && user.profile.manager?
+      can :manage, :all
+    else
+      can :read, :all
+    end
+  end
+end

data/app/models/ishapi/application_record.rb

@@ -1,3 +1,4 @@
+
 module Ishapi
   class ApplicationRecord
   end

data/lib/ishapi.rb

@@ -1,4 +1,8 @@
+
 require "ishapi/engine"
+require 'cancancan'
+require 'kaminari/mongoid'
+require 'kaminari/actionview'
 
 module Ishapi
   # Your code goes here...

data/lib/ishapi/version.rb

@@ -1,3 +1,3 @@
 module Ishapi
-  VERSION = '0.1.6'
+  VERSION = File.read("VERSION")
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ishapi
 version: !ruby/object:Gem::Version
-  version: 0.1.6
+  version: 0.1.8
 platform: ruby
 authors:
 - piousbox
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-05-22 00:00:00.000000000 Z
+date: 2017-05-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -38,6 +38,48 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 6.1.0
+- !ruby/object:Gem::Dependency
+  name: cancancan
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: kaminari-mongoid
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: kaminari-actionview
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -112,6 +154,8 @@ files:
 - app/helpers/ishapi/articles_helper.rb
 - app/jobs/ishapi/application_job.rb
 - app/mailers/ishapi/application_mailer.rb
+- app/models/ishapi/ability.rb
+- app/models/ishapi/ability.rb~
 - app/models/ishapi/application_record.rb
 - app/models/ishapi/article.rb
 - app/views/ishapi/articles/_form.html.erb