just_auth_me 0.0.2alpha

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2012 André Barbosa
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,56 @@
+# JustAuthMe
+
+JustAuthMe is a gem to manage authorization in the simplest way possible. Most times you just want to check if an object belongs to the current user, JustAuthMe does just that without any configuration.
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'just_auth_me'
+```
+
+## Usage
+
+JustAuthMe needs a method called 'current_user' that will return the user currently logged in.
+
+If you just want to simply want to authorize a resource, add this line to that resource controller:
+
+```ruby
+just_auth_me Resource
+```
+
+If your resource is nested under other resource you can authorize it through the parent resource by passing the 'through' option like this:
+
+```ruby
+just_auth_me Resource, through: OtherResource
+```
+
+Alternatively you can also pass a block to handle the authorization logic:
+
+```ruby	
+just_auth_me Resource do |r|
+  current_user.role == 'admin' and r.user_id == current_user.id
+end
+```
+
+With a nested resource:
+
+```ruby
+just_auth_me Resource, through: OtherResource do |r, o|
+  current_user.role == 'admin' and o.user_id == current_user.id
+end
+```
+
+You can also pass 'only' and 'except' options to just_auth_me:
+	
+```ruby
+just_auth_me Resource, only: [:new, :create, :destroy]
+just_auth_me Resource, except: [:show]
+```
+
+## Development
+
+Questions or problems? Please post them on the [issue tracker](https://github.com/nata79/just_auth_me/issues). You can contribute changes by forking the project and submitting a pull request. You can ensure the tests passing by running `bundle` and `rake`.
+
+This gem is created by André Barbosa and is under the MIT License.

data/Rakefile

@@ -0,0 +1,29 @@
+#!/usr/bin/env rake
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+begin
+  require 'rdoc/task'
+rescue LoadError
+  require 'rdoc/rdoc'
+  require 'rake/rdoctask'
+  RDoc::Task = Rake::RDocTask
+end
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'SimpleAuth'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+Bundler::GemHelper.install_tasks
+
+require 'rspec/core/rake_task'
+
+RSpec::Core::RakeTask.new(:spec)
+
+task default: :spec

data/lib/just_auth_me/controller_additions.rb

@@ -0,0 +1,68 @@
+module JustAuthMe
+  module ControllerAdditions
+
+    module Controller
+      def self.included(klass)
+        klass.class_eval do
+          self.send :extend, JustAuthMe::ControllerAdditions::Controller::ClassMethods
+        end
+      end
+
+      module ClassMethods        
+
+        def just_auth_me(resource, options={})
+          
+          if options[:through]
+            auth_object = "@#{options[:through].name.underscore}"
+          else
+            auth_object = "@#{resource.name.underscore}"
+          end
+
+          send :define_method, "load_#{resource.name.underscore}_just_auth_me" do
+
+            # Load resource
+            if params[:action] == 'index'
+              JustAuthMe::ControllerResources.load_on_index(resource, self, options, params)
+            elsif params[:action] == 'create'
+              JustAuthMe::ControllerResources.load_on_create_or_new(resource, self, options, params)
+            elsif params[:action] == 'new'
+              JustAuthMe::ControllerResources.load_on_create_or_new(resource, self, options, params)
+            else
+              JustAuthMe::ControllerResources.load_by_id(resource, self, options, params)
+            end
+
+          end
+
+          before_filter "load_#{resource.name.underscore}_just_auth_me".to_sym
+
+          send :define_method, "authorize_#{resource.name.underscore}_just_auth_me" do
+
+            # Authorize resource
+            raise JustAuthMe::AnauthorizedAccess unless current_user
+
+            if (params[:action] != 'index'  and 
+                params[:action] != 'create' and 
+                params[:action] != 'new'    and 
+                instance_variable_defined?(auth_object))
+
+              raise JustAuthMe::AnauthorizedAccess unless current_user.id == instance_variable_get(auth_object).user_id
+            end
+
+          end
+
+          before_filter "authorize_#{resource.name.underscore}_just_auth_me".to_sym, only: options[:only], except: options[:except]
+
+        end
+      end
+
+
+      module InstanceMethods
+        
+      end
+
+    end
+
+  end
+
+end
+::ActionController::Base.send :include, JustAuthMe::ControllerAdditions::Controller

data/lib/just_auth_me/controller_resources.rb

@@ -0,0 +1,50 @@
+module JustAuthMe
+  class ControllerResources
+    def self.load_on_index(resource, controller, options={}, params={})
+      set_resource_object resource
+      if options[:through]
+        load_parent(options[:through], params, controller)
+        objects = load_parent_nested_resource_collection(resource)
+        controller.instance_variable_set("#{@resource_object.pluralize}", objects)
+      else
+        controller.instance_variable_set("#{@resource_object.pluralize}", resource.all)
+      end
+    end
+
+    def self.load_on_create_or_new(resource, controller, options={}, params={})
+      set_resource_object resource
+      if options[:through]
+        load_parent(options[:through], params, controller)
+        created_object = load_parent_nested_resource_collection(resource).new(params[resource.name.underscore.to_sym])
+        controller.instance_variable_set(@resource_object, created_object)
+      else
+        controller.instance_variable_set(@resource_object, resource.new(params[resource.name.underscore.to_sym]))
+      end
+    end
+
+    def self.load_by_id(resource, controller, options={}, params={})
+      set_resource_object resource
+      if options[:through]
+        load_parent(options[:through], params, controller)
+        found_object = load_parent_nested_resource_collection(resource).find(params[:id])
+        controller.instance_variable_set(@resource_object, found_object)
+      else
+        controller.instance_variable_set(@resource_object, resource.find(params[:id]))
+      end
+    end
+
+    private
+    def self.set_resource_object(resource)
+      @resource_object = "@#{resource.name.underscore}"
+    end
+
+    def self.load_parent(parent_class, params, controller)
+      @parent = parent_class.find(params["#{parent_class.name.underscore}_id"])
+      controller.instance_variable_set("@#{parent_class.name.underscore}", @parent)
+    end
+
+    def self.load_parent_nested_resource_collection(resource)
+      @parent.send("#{resource.name.underscore.pluralize}")
+    end
+  end
+end

data/lib/just_auth_me/exceptions.rb

@@ -0,0 +1,4 @@
+module JustAuthMe
+  class AnauthorizedAccess < StandardError
+  end
+end

data/lib/just_auth_me/version.rb

@@ -0,0 +1,3 @@
+module JustAuthMe
+  VERSION = "0.0.2alpha"
+end

data/lib/just_auth_me.rb

@@ -0,0 +1,6 @@
+require 'just_auth_me/controller_additions'
+require 'just_auth_me/controller_resources'
+require 'just_auth_me/exceptions'
+module JustAuthMe
+
+end

data/lib/tasks/just_auth_me_tasks.rake

@@ -0,0 +1,4 @@
+# desc "Explaining what the task does"
+# task :simple_auth do
+#   # Task goes here
+# end

metadata

@@ -0,0 +1,105 @@
+--- !ruby/object:Gem::Specification
+name: just_auth_me
+version: !ruby/object:Gem::Version
+  version: 0.0.2alpha
+  prerelease: 5
+platform: ruby
+authors:
+- André Barbosa
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2012-09-26 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 3.2.8
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 3.2.8
+- !ruby/object:Gem::Dependency
+  name: rspec-rails
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: sqlite3
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+description: JustAuthMe is a gem to manage authorization in the simplest way possible.
+  Most times you just want to check if an object belongs to the current user, JustAuthMe
+  does just that withou any configuration.
+email:
+- albmail88@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/just_auth_me/controller_additions.rb
+- lib/just_auth_me/controller_resources.rb
+- lib/just_auth_me/exceptions.rb
+- lib/just_auth_me/version.rb
+- lib/just_auth_me.rb
+- lib/tasks/just_auth_me_tasks.rake
+- MIT-LICENSE
+- Rakefile
+- README.md
+homepage: https://github.com/nata79/just_auth_me
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>'
+    - !ruby/object:Gem::Version
+      version: 1.3.1
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.24
+signing_key: 
+specification_version: 3
+summary: JustAuthMe is the most tiny and simple authorization gem for ruby on rails.
+test_files: []
+has_rdoc: