jsonapi-authorization 1.0.0.alpha4 → 1.0.0.alpha5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 994dbbd65ed5c9b5d65b3addc2bf880dbdd0b102
-  data.tar.gz: 9cb8b76e4f5f2105f79239a3c5493957b13511e4
+  metadata.gz: 38df18640b26a88119c4c253745a5b78bf549f16
+  data.tar.gz: 1e3676e726ba546d80ed364d1a16673a2c78ebd2
 SHA512:
-  metadata.gz: c6230923d4150aa1a207f64ca473f3cf147644729c8449a353bbdd9b85b2db319232388bec7ba7f57c379311cea0c8a0c5cd3b8bd4aa4ab438525ffbd6e7d20a
-  data.tar.gz: 63ea830d6a7a9b6a635f493027a2f2ce2441e79b77c39869b5175598b461ae7370f4e0bc280e0666fd55a275a96a92c09ccff40eaf55b4f6af905e10b9f5c630
+  metadata.gz: 41b360cfcee0708244121f9b1debea24e1414776c89346b7ede2e57c0b2e1178a0587f39a838ca8b2641e555c529cbbdc0f9505467aa30dfd022bc62f1a07422
+  data.tar.gz: c0ba742a117a18b2273ed7662187d70a65e404f3c09b1bb48e37801ebbe7396ba39dd1348508e6ecee7b0a14dfd7ddbd1639f7e73afcbab7b84ca2d1f5bb974a

data/lib/jsonapi/authorization/default_pundit_authorizer.rb

@@ -237,10 +237,15 @@ module JSONAPI
 
       private
 
-      def authorize_relationship_operation(source_record, relationship_method, *args)
+      def authorize_relationship_operation(
+        source_record,
+        relationship_method,
+        related_record_or_records = nil
+      )
         policy = ::Pundit.policy(user, source_record)
         if policy.respond_to?(relationship_method)
-          unless policy.public_send(relationship_method, *args)
+          args = [relationship_method, related_record_or_records].reject(&:nil?)
+          unless policy.public_send(*args)
             raise ::Pundit::NotAuthorizedError,
                   query: relationship_method,
                   record: source_record,
@@ -248,6 +253,11 @@ module JSONAPI
           end
         else
           ::Pundit.authorize(user, source_record, 'update?')
+          if related_record_or_records
+            Array(related_record_or_records).each do |related_record|
+              ::Pundit.authorize(user, related_record, 'update?')
+            end
+          end
         end
       end
 

data/lib/jsonapi/authorization/version.rb

@@ -1,5 +1,5 @@
 module JSONAPI
   module Authorization
-    VERSION = "1.0.0.alpha4".freeze
+    VERSION = "1.0.0.alpha5".freeze
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jsonapi-authorization
 version: !ruby/object:Gem::Version
-  version: 1.0.0.alpha4
+  version: 1.0.0.alpha5
 platform: ruby
 authors:
 - Vesa Laakso
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-05-30 00:00:00.000000000 Z
+date: 2017-06-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: jsonapi-resources