lotus_admin 1.4.0 → 1.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 82eb960c647ff89e930551906a0886cdac56255ea0fe989ab6861cb486f81ca1
-  data.tar.gz: df0111ec129d5ad11c9e01fc40891a5199bead2a68322b186c445842e32d9010
+  metadata.gz: 52d4737f0f995337c89e2dfa7183364fc45e134bdd69ab8333485f9feff7eae4
+  data.tar.gz: 2474b390b2d5c7dbf0f1209dde38b3263a4368c86228b49af0b1efe6d5b2aaae
 SHA512:
-  metadata.gz: 72efc100e64e636b9cda77a6f67610e336b2e9445d6081cba2a93006063e18ed060f0e1bc09ee0becd9da07c8820c9d6d49271f1e77d8d222f62e31c77c57b69
-  data.tar.gz: b5539dd34e997fb8c3502a4dc5818a2effc7126ab0ca0b082deef56d5cd3aa2e4bd857fb97cd17c8834e153551631b6fda834e6a9c290684c07ebdaa6163d5f1
+  metadata.gz: a85c4256b0e83f67ed69f340d627e707d3ff5a5fb8fa7f58cf03b209636f1fbd4522c9294e83737130a82e7230a8ab06badec56a96bc91810f5d5fcd08d19162
+  data.tar.gz: 3a0a4f62f9c62775cf14b197fa69facc65c5038ae5bb7598aeaa3902637fa95112f6d7891af405bcc84e7cd3e121f18c11faf1ccb71227a1a1ec29513ed68ee6

data/app/controllers/concerns/lotus_admin/authorization.rb

@@ -25,7 +25,7 @@ module LotusAdmin
     def beginning_of_association_chain
       chain = super
 
-      if self.class._policy_class_name.present?
+      if using_pundit?
         policy_scope(chain, policy_scope_class: "#{ self.class._policy_class_name }::Scope".constantize)
       else
         chain
@@ -33,8 +33,11 @@ module LotusAdmin
     end
 
     def user_not_authorized
-      flash[:alert] = "You are not authorized to perform this action."
-      redirect_to(request.referrer || root_path)
+      redirect_to root_path, alert: "You are not authorized to perform this action."
+    end
+
+    def using_pundit?
+      self.class._policy_class_name.present?
     end
   end
 end

data/app/controllers/lotus_admin/resource_controller.rb

@@ -17,11 +17,15 @@ class LotusAdmin::ResourceController < LotusAdmin::AuthenticatedController
 
   def new
     self.resource = build_resource
+
+    authorize(resource) if using_pundit?
   end
 
   def create
     self.resource = build_resource(permitted_params)
 
+    authorize(resource) if using_pundit?
+
     if resource.save
       redirect_to [lotus_admin, resource], notice: "Created new #{ resource_class.model_name.human } successfully"
     else
@@ -30,6 +34,8 @@ class LotusAdmin::ResourceController < LotusAdmin::AuthenticatedController
   end
 
   def update
+    authorize(resource) if using_pundit?
+
     if resource.update(permitted_params)
       redirect_to [lotus_admin, resource], notice: "Updated new #{ resource_class.model_name.human } successfully"
     else
@@ -38,6 +44,8 @@ class LotusAdmin::ResourceController < LotusAdmin::AuthenticatedController
   end
 
   def index(&block)
+    authorize(resource_class) if using_pundit?
+
     respond_to do |format|
       format.html
 
@@ -45,7 +53,13 @@ class LotusAdmin::ResourceController < LotusAdmin::AuthenticatedController
     end
   end
 
+  def show
+    authorize(resource) if using_pundit?
+  end
+
   def destroy
+    authorize(resource) if using_pundit?
+
     if resource.destroy
       flash[:notice] = "#{ resource_class.model_name.human } has been removed"
     else

data/lib/lotus_admin/version.rb

@@ -1,3 +1,3 @@
 module LotusAdmin
-  VERSION = '1.4.0'
+  VERSION = '1.4.1'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lotus_admin
 version: !ruby/object:Gem::Version
-  version: 1.4.0
+  version: 1.4.1
 platform: ruby
 authors:
 - Matt Millsaps-Brewer