lockdown 2.0.2 → 2.0.3

data/lib/lockdown.rb

@@ -24,7 +24,7 @@ module Lockdown
 
     # @return the version string for the library.
     def version
-      '2.0.2'
+      '2.0.3'
     end
 
     def rails_mixin

data/lib/lockdown/delivery.rb

@@ -16,8 +16,8 @@ module Lockdown
 
         path += "/" unless path =~ /\/$/
         path = "/" + path unless path =~ /^\//
-        
-        if access_rights_regex =~ path 
+
+        if (access_rights_regex =~ path) == 0
           return true 
         end
 

data/lockdown.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = %q{lockdown}
-  s.version = "2.0.2"
+  s.version = "2.0.3"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Andrew Stone"]
-  s.date = %q{2010-09-21}
+  s.date = %q{2010-09-22}
   s.description = %q{Restrict access to your controller actions. }
   s.email = %q{andy@stonean.com}
   s.extra_rdoc_files = [

data/test/helper.rb

@@ -1,5 +1,6 @@
 # encoding: utf-8
 
+require 'rubygems'
 require 'minitest/unit'
 
 MiniTest::Unit.autorun

data/test/lockdown/test_delivery.rb

@@ -187,6 +187,38 @@ class TestLockdown < MiniTest::Unit::TestCase
 
     assert_equal false, Lockdown::Delivery.allowed?('/users/', Lockdown::Configuration.authenticated_access)
     assert_equal false, Lockdown::Delivery.allowed?('/users', Lockdown::Configuration.authenticated_access)
+  end
+
+  def test_it_handles_namespaced_routes_correctly
+    Authorization.permission :posts
+    Authorization.permission :users
+    Authorization.public_access :posts, :users
+
+    Authorization.permission :protected_users do
+      resource 'nested/users'
+    end
+    Authorization.protected_access :protected_users
+
+    assert_equal true, Lockdown::Delivery.allowed?('/users')
+
+    assert_equal false, Lockdown::Delivery.allowed?('/nested/users')
+
+    assert_equal true, Lockdown::Delivery.allowed?('/users', Lockdown::Configuration.authenticated_access)
+    assert_equal true, Lockdown::Delivery.allowed?('/nested/users', Lockdown::Configuration.authenticated_access)
+  end
+
+  def test_it_matches_exact_paths_only
+    Authorization.permission :users
+    Authorization.public_access :users
+
+    Authorization.permission :users_that_should_be_protected
+    Authorization.protected_access :users_that_should_be_protected
+
+    assert_equal true, Lockdown::Delivery.allowed?('/users')
+
+    assert_equal false, Lockdown::Delivery.allowed?('/users_that_should_be_protected')
 
+    assert_equal true, Lockdown::Delivery.allowed?('/users', Lockdown::Configuration.authenticated_access)
+    assert_equal true, Lockdown::Delivery.allowed?('/users_that_should_be_protected', Lockdown::Configuration.authenticated_access)
   end
 end

metadata

@@ -5,8 +5,8 @@ version: !ruby/object:Gem::Version
   segments: 
   - 2
   - 0
-  - 2
-  version: 2.0.2
+  - 3
+  version: 2.0.3
 platform: ruby
 authors: 
 - Andrew Stone
@@ -14,7 +14,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2010-09-21 00:00:00 -04:00
+date: 2010-09-22 00:00:00 -04:00
 default_executable: 
 dependencies: []