json2sql 1.0.15 → 1.0.16

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 698df3c08077bb25df5b606c6cc419891dad06698053d5af5e5fb451d33a9c1c
-  data.tar.gz: 5e7469e5e323e7226f7a200fbd60daaedc92d1cefdcac7efd78ba8cfd1680897
+  metadata.gz: 39f16dc1347524e05a3b12ea619883c5cfec2ebf86c13df6954f549fb7f7d934
+  data.tar.gz: 6590f96be14c84a510368e25bf875e5223825162b39b1bb3d06f075a6c43a1cc
 SHA512:
-  metadata.gz: 685484a3bc90af693415f4d9bc20321b256e1279b52edcb5abe554195532f205076f3ca5c7e54c627e757f69a1029f9d5acb4eb1f479755503d9eb0208813c25
-  data.tar.gz: 4558dc87daef35b1b26805fb8d49f35ad1bc67d80395f94fa52ef13ffa1a9c474bb7842a878275e611aafe157496529ff59b1f625537b13f949a6973efe827cc
+  metadata.gz: 51c4cc95f0a1fb7d529b2366515a0661f48c26cd6c28da176c0e58f7c7bb7f900853e1ce1ffa76c84cfc65797eab3bae6cecac1fd88558fc70c429253005c9d6
+  data.tar.gz: 6a6d13a1d6ba250e52fc7a87f5e3f99852d815cbf6bd34b34a170972a478c35df2836cb124959e662b3abd2fb4d8294cb3deb087fd1d80ba2c044eda4416c96b

data/lib/json2sql/query_policy.rb

@@ -115,7 +115,7 @@ module Json2sql
     
     # Filters children/parents relations in :allow mode.
     # Only relations present as keys in config[relation] pass through.
-    # If config[relation] is absent or not a Hash, relations are untouched.
+    # If config[relation] is absent or not a Hash, all relations are blocked.
     # No-op in :deny mode.
 
     def filter_relations(params, config, relation)
@@ -128,15 +128,14 @@ module Json2sql
 
       config_tables = config[relation]
 
-      return unless config_tables.is_a?(Hash)
-
-      params[relation] = param_tables.select { |table, _| config_tables.key?(table) }
+      params[relation] = config_tables.is_a?(Hash) ? param_tables.select { |table, _| config_tables.key?(table) } : {}
     end
 
     # Filters "columns" using mode (:allow or :deny).
     # Handles Array (SELECT) and Hash (INSERT/UPDATE) column formats.
     # Hash entries (function columns) always pass through in :allow mode.
-    # If no column list is defined for the table, columns are untouched.
+    # If no column list is defined: in :allow mode all columns are blocked;
+    # in :deny mode columns are untouched.
 
     def filter_columns(params, config)
 
@@ -146,7 +145,10 @@ module Json2sql
 
       list = config["columns"]
 
-      return unless list.is_a?(Array)
+      if !list.is_a?(Array)
+        params["columns"] = columns.is_a?(Array) ? [] : {} if @mode == :allow
+        return
+      end
 
       params["columns"] = if @mode == :deny
 

data/lib/json2sql/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Json2sql
-  VERSION = "1.0.15"
+  VERSION = "1.0.16"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: json2sql
 version: !ruby/object:Gem::Version
-  version: 1.0.15
+  version: 1.0.16
 platform: ruby
 authors:
 - Tiago da Silva