may_may 0.0.1
Sign up to get free protection for your applications and to get access to all the features.
- data/MIT-LICENSE +20 -0
- data/README.md +85 -0
- data/Rakefile +38 -0
- data/lib/may_may/version.rb +3 -0
- data/lib/may_may.rb +102 -0
- data/lib/tasks/may_may_tasks.rake +4 -0
- data/test/dummy/README.rdoc +261 -0
- data/test/dummy/Rakefile +7 -0
- data/test/dummy/app/assets/javascripts/application.js +15 -0
- data/test/dummy/app/assets/stylesheets/application.css +13 -0
- data/test/dummy/app/controllers/application_controller.rb +7 -0
- data/test/dummy/app/controllers/may_mays_controller.rb +27 -0
- data/test/dummy/app/helpers/application_helper.rb +2 -0
- data/test/dummy/app/models/may.rb +9 -0
- data/test/dummy/app/models/role.rb +22 -0
- data/test/dummy/app/models/user.rb +22 -0
- data/test/dummy/app/models/user_role.rb +4 -0
- data/test/dummy/app/views/layouts/application.html.erb +14 -0
- data/test/dummy/app/views/may_mays/new.html.erb +3 -0
- data/test/dummy/config/application.rb +56 -0
- data/test/dummy/config/boot.rb +10 -0
- data/test/dummy/config/database.yml +25 -0
- data/test/dummy/config/environment.rb +5 -0
- data/test/dummy/config/environments/development.rb +37 -0
- data/test/dummy/config/environments/production.rb +67 -0
- data/test/dummy/config/environments/test.rb +37 -0
- data/test/dummy/config/initializers/backtrace_silencers.rb +7 -0
- data/test/dummy/config/initializers/inflections.rb +15 -0
- data/test/dummy/config/initializers/mime_types.rb +5 -0
- data/test/dummy/config/initializers/secret_token.rb +7 -0
- data/test/dummy/config/initializers/session_store.rb +8 -0
- data/test/dummy/config/initializers/wrap_parameters.rb +14 -0
- data/test/dummy/config/locales/en.yml +5 -0
- data/test/dummy/config/routes.rb +3 -0
- data/test/dummy/config.ru +4 -0
- data/test/dummy/db/development.sqlite3 +0 -0
- data/test/dummy/db/migrate/20120718155853_create_roles.rb +10 -0
- data/test/dummy/db/migrate/20120718160104_create_users.rb +10 -0
- data/test/dummy/db/migrate/20120718160138_create_user_roles.rb +11 -0
- data/test/dummy/db/schema.rb +35 -0
- data/test/dummy/db/test.sqlite3 +0 -0
- data/test/dummy/log/development.log +118 -0
- data/test/dummy/log/test.log +4792 -0
- data/test/dummy/public/404.html +26 -0
- data/test/dummy/public/422.html +26 -0
- data/test/dummy/public/500.html +25 -0
- data/test/dummy/public/favicon.ico +0 -0
- data/test/dummy/script/rails +6 -0
- data/test/may_may_test.rb +92 -0
- data/test/may_mays_controller_test.rb +54 -0
- data/test/role_test.rb +7 -0
- data/test/test_helper.rb +10 -0
- data/test/user_test.rb +8 -0
- metadata +170 -0
data/MIT-LICENSE
ADDED
@@ -0,0 +1,20 @@
|
|
1
|
+
Copyright 2012 YOURNAME
|
2
|
+
|
3
|
+
Permission is hereby granted, free of charge, to any person obtaining
|
4
|
+
a copy of this software and associated documentation files (the
|
5
|
+
"Software"), to deal in the Software without restriction, including
|
6
|
+
without limitation the rights to use, copy, modify, merge, publish,
|
7
|
+
distribute, sublicense, and/or sell copies of the Software, and to
|
8
|
+
permit persons to whom the Software is furnished to do so, subject to
|
9
|
+
the following conditions:
|
10
|
+
|
11
|
+
The above copyright notice and this permission notice shall be
|
12
|
+
included in all copies or substantial portions of the Software.
|
13
|
+
|
14
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
15
|
+
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
16
|
+
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
17
|
+
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
18
|
+
LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
19
|
+
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
20
|
+
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
data/README.md
ADDED
@@ -0,0 +1,85 @@
|
|
1
|
+
# MayMay
|
2
|
+
|
3
|
+
## Installation
|
4
|
+
|
5
|
+
gem install may_may
|
6
|
+
|
7
|
+
## Usage
|
8
|
+
|
9
|
+
MayMay automatically restricts access to actions on all controllers and then allows you to specify
|
10
|
+
permitted actions. Because an action is restricted by default, you will never accidentally allow all
|
11
|
+
users access to a new action that should have been restricted. Permitted actions are all listed in
|
12
|
+
one place (a May model) for ease of maintenance.
|
13
|
+
|
14
|
+
### No need to name roles in your views
|
15
|
+
|
16
|
+
Simplify your views. Show/hide view elements based on intended action instead of current user's roles:
|
17
|
+
|
18
|
+
<% may? (:edit, :people) do %>
|
19
|
+
<%= link_to 'only visible if user may edit people', edit_people_path %>
|
20
|
+
<% end %>
|
21
|
+
|
22
|
+
###
|
23
|
+
### Create a model named "may":
|
24
|
+
|
25
|
+
# in app/models/may.rb
|
26
|
+
|
27
|
+
class May
|
28
|
+
May.permission_setup do
|
29
|
+
controller :people do
|
30
|
+
may :index # anyone can execute the index action
|
31
|
+
may :create, :only => [:administrator] # only the administrator may create a person
|
32
|
+
may :edit, :except => [:guest] # everyone except guests may edit a person
|
33
|
+
may [:new, :update] do
|
34
|
+
# return true to allow these actions
|
35
|
+
# block executed in controller's scope
|
36
|
+
end
|
37
|
+
end # :destroy was never mentioned and so is not permitted for anyone
|
38
|
+
end
|
39
|
+
end
|
40
|
+
|
41
|
+
### Add a current_roles method to your ApplicationController:
|
42
|
+
|
43
|
+
Here is a simple example setup:
|
44
|
+
|
45
|
+
# in app/models/role.rb
|
46
|
+
|
47
|
+
class Role
|
48
|
+
# roles table should have a "name" column
|
49
|
+
end
|
50
|
+
|
51
|
+
# in app/models/user_role.rb
|
52
|
+
|
53
|
+
class UserRole
|
54
|
+
has_many :roles
|
55
|
+
end
|
56
|
+
|
57
|
+
# in app/models/user.rb
|
58
|
+
|
59
|
+
class User
|
60
|
+
has_many :user_roles
|
61
|
+
has_many :roles, through: :user_roles
|
62
|
+
end
|
63
|
+
|
64
|
+
# in app/controllers/application_controller.rb
|
65
|
+
|
66
|
+
class ApplicationController < ActionController::Base
|
67
|
+
def current_roles
|
68
|
+
current_user.roles.map {|role| role.name.to_sym }
|
69
|
+
end
|
70
|
+
end
|
71
|
+
|
72
|
+
The important thing is to return an array of roles that can be matched against the roles specified in
|
73
|
+
your May model. Your array may contain whatever types you'd like -- strings, symbols, models. Symbols
|
74
|
+
are probably most readable, however, hence the example above.
|
75
|
+
|
76
|
+
You could instead define permissions within the controller itself:
|
77
|
+
|
78
|
+
class UsersController
|
79
|
+
may :index, only: [:some, :roles]
|
80
|
+
may :show, method: [:may_show?]
|
81
|
+
end
|
82
|
+
|
83
|
+
## Licence
|
84
|
+
|
85
|
+
MIT-LICENSE
|
data/Rakefile
ADDED
@@ -0,0 +1,38 @@
|
|
1
|
+
#!/usr/bin/env rake
|
2
|
+
begin
|
3
|
+
require 'bundler/setup'
|
4
|
+
rescue LoadError
|
5
|
+
puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
|
6
|
+
end
|
7
|
+
begin
|
8
|
+
require 'rdoc/task'
|
9
|
+
rescue LoadError
|
10
|
+
require 'rdoc/rdoc'
|
11
|
+
require 'rake/rdoctask'
|
12
|
+
RDoc::Task = Rake::RDocTask
|
13
|
+
end
|
14
|
+
|
15
|
+
RDoc::Task.new(:rdoc) do |rdoc|
|
16
|
+
rdoc.rdoc_dir = 'rdoc'
|
17
|
+
rdoc.title = 'MayMay'
|
18
|
+
rdoc.options << '--line-numbers'
|
19
|
+
rdoc.rdoc_files.include('README.rdoc')
|
20
|
+
rdoc.rdoc_files.include('lib/**/*.rb')
|
21
|
+
end
|
22
|
+
|
23
|
+
|
24
|
+
|
25
|
+
|
26
|
+
Bundler::GemHelper.install_tasks
|
27
|
+
|
28
|
+
require 'rake/testtask'
|
29
|
+
|
30
|
+
Rake::TestTask.new(:test) do |t|
|
31
|
+
t.libs << 'lib'
|
32
|
+
t.libs << 'test'
|
33
|
+
t.pattern = 'test/**/*_test.rb'
|
34
|
+
t.verbose = false
|
35
|
+
end
|
36
|
+
|
37
|
+
|
38
|
+
task :default => :test
|
data/lib/may_may.rb
ADDED
@@ -0,0 +1,102 @@
|
|
1
|
+
module MayMay
|
2
|
+
class ::May
|
3
|
+
def self.permissions_setup(&block)
|
4
|
+
instance_eval(&block) if block
|
5
|
+
end
|
6
|
+
|
7
|
+
def self.may(actions, options = {}, &permission_block)
|
8
|
+
actions = [actions] unless actions.respond_to? :each
|
9
|
+
actions.each do |action|
|
10
|
+
define_singleton_method(get_permission_method(action, @controller)) do |contr, &block|
|
11
|
+
allowed = if only_roles = options[:only]
|
12
|
+
has_role?(contr, only_roles)
|
13
|
+
elsif except_roles = options[:except]
|
14
|
+
!has_role?(contr, except_roles)
|
15
|
+
elsif method = options[:method]
|
16
|
+
contr.send(method)
|
17
|
+
elsif permission_block
|
18
|
+
has_block_permission?(contr, &permission_block)
|
19
|
+
else
|
20
|
+
true # may :index # action permitted without exceptions
|
21
|
+
end
|
22
|
+
block.call if allowed && block
|
23
|
+
allowed
|
24
|
+
end
|
25
|
+
end
|
26
|
+
end
|
27
|
+
|
28
|
+
def self.permission_to?(action_name, controller_name, contr, &block)
|
29
|
+
method = get_permission_method(action_name, controller_name)
|
30
|
+
respond_to?(method) && send(method, contr, &block)
|
31
|
+
end
|
32
|
+
|
33
|
+
def self.has_role?(contr, roles)
|
34
|
+
roles = [roles] unless roles.respond_to? :include?
|
35
|
+
contr.current_roles.each {|role| return true if roles.include?(role) }
|
36
|
+
false
|
37
|
+
end
|
38
|
+
|
39
|
+
def self.get_permission_method(action_name, controller_name)
|
40
|
+
"#{action_name}_#{controller_name}?"
|
41
|
+
end
|
42
|
+
|
43
|
+
private
|
44
|
+
|
45
|
+
def self.controller(contr)
|
46
|
+
old_controller = @controller
|
47
|
+
@controller = contr
|
48
|
+
yield if block_given?
|
49
|
+
@controller = old_controller
|
50
|
+
end
|
51
|
+
|
52
|
+
def self.has_block_permission?(contr, &block)
|
53
|
+
contr.instance_eval(&block)
|
54
|
+
end
|
55
|
+
end
|
56
|
+
|
57
|
+
module MayMayACExtensions
|
58
|
+
module ClassMethods
|
59
|
+
def may(action_name, options, &block)
|
60
|
+
May.controller(self.name.gsub(/Controller$/, '').tableize.to_sym) { May.may action_name, options, &block }
|
61
|
+
end
|
62
|
+
end
|
63
|
+
|
64
|
+
def self.setup(klass)
|
65
|
+
klass.extend(MayMayACExtensions::ClassMethods)
|
66
|
+
klass.before_filter :may_may_setup
|
67
|
+
klass.helper_method :may?
|
68
|
+
end
|
69
|
+
|
70
|
+
def access_denied
|
71
|
+
response.status = 403
|
72
|
+
render :text => 'Access Denied'
|
73
|
+
end
|
74
|
+
|
75
|
+
def current_roles
|
76
|
+
(respond_to?(:current_user) && current_user.respond_to?(:role_names)) ? current_user.role_names : []
|
77
|
+
end
|
78
|
+
|
79
|
+
def may?(action_name, controller_name, &block)
|
80
|
+
May.permission_to?(action_name, controller_name, self, &block)
|
81
|
+
end
|
82
|
+
|
83
|
+
|
84
|
+
def has_role?(role)
|
85
|
+
May.has_role?(self, role)
|
86
|
+
end
|
87
|
+
|
88
|
+
private
|
89
|
+
|
90
|
+
def may_may_setup
|
91
|
+
May.permissions_setup
|
92
|
+
access_denied unless May.permission_to? params[:action], params[:controller].to_s.pluralize.to_sym, self
|
93
|
+
end
|
94
|
+
end
|
95
|
+
|
96
|
+
if defined? ActionController::Base
|
97
|
+
ActionController::Base.class_eval do
|
98
|
+
include MayMayACExtensions
|
99
|
+
MayMayACExtensions.setup(ActionController::Base)
|
100
|
+
end
|
101
|
+
end
|
102
|
+
end
|
@@ -0,0 +1,261 @@
|
|
1
|
+
== Welcome to Rails
|
2
|
+
|
3
|
+
Rails is a web-application framework that includes everything needed to create
|
4
|
+
database-backed web applications according to the Model-View-Control pattern.
|
5
|
+
|
6
|
+
This pattern splits the view (also called the presentation) into "dumb"
|
7
|
+
templates that are primarily responsible for inserting pre-built data in between
|
8
|
+
HTML tags. The model contains the "smart" domain objects (such as Account,
|
9
|
+
Product, Person, Post) that holds all the business logic and knows how to
|
10
|
+
persist themselves to a database. The controller handles the incoming requests
|
11
|
+
(such as Save New Account, Update Product, Show Post) by manipulating the model
|
12
|
+
and directing data to the view.
|
13
|
+
|
14
|
+
In Rails, the model is handled by what's called an object-relational mapping
|
15
|
+
layer entitled Active Record. This layer allows you to present the data from
|
16
|
+
database rows as objects and embellish these data objects with business logic
|
17
|
+
methods. You can read more about Active Record in
|
18
|
+
link:files/vendor/rails/activerecord/README.html.
|
19
|
+
|
20
|
+
The controller and view are handled by the Action Pack, which handles both
|
21
|
+
layers by its two parts: Action View and Action Controller. These two layers
|
22
|
+
are bundled in a single package due to their heavy interdependence. This is
|
23
|
+
unlike the relationship between the Active Record and Action Pack that is much
|
24
|
+
more separate. Each of these packages can be used independently outside of
|
25
|
+
Rails. You can read more about Action Pack in
|
26
|
+
link:files/vendor/rails/actionpack/README.html.
|
27
|
+
|
28
|
+
|
29
|
+
== Getting Started
|
30
|
+
|
31
|
+
1. At the command prompt, create a new Rails application:
|
32
|
+
<tt>rails new myapp</tt> (where <tt>myapp</tt> is the application name)
|
33
|
+
|
34
|
+
2. Change directory to <tt>myapp</tt> and start the web server:
|
35
|
+
<tt>cd myapp; rails server</tt> (run with --help for options)
|
36
|
+
|
37
|
+
3. Go to http://localhost:3000/ and you'll see:
|
38
|
+
"Welcome aboard: You're riding Ruby on Rails!"
|
39
|
+
|
40
|
+
4. Follow the guidelines to start developing your application. You can find
|
41
|
+
the following resources handy:
|
42
|
+
|
43
|
+
* The Getting Started Guide: http://guides.rubyonrails.org/getting_started.html
|
44
|
+
* Ruby on Rails Tutorial Book: http://www.railstutorial.org/
|
45
|
+
|
46
|
+
|
47
|
+
== Debugging Rails
|
48
|
+
|
49
|
+
Sometimes your application goes wrong. Fortunately there are a lot of tools that
|
50
|
+
will help you debug it and get it back on the rails.
|
51
|
+
|
52
|
+
First area to check is the application log files. Have "tail -f" commands
|
53
|
+
running on the server.log and development.log. Rails will automatically display
|
54
|
+
debugging and runtime information to these files. Debugging info will also be
|
55
|
+
shown in the browser on requests from 127.0.0.1.
|
56
|
+
|
57
|
+
You can also log your own messages directly into the log file from your code
|
58
|
+
using the Ruby logger class from inside your controllers. Example:
|
59
|
+
|
60
|
+
class WeblogController < ActionController::Base
|
61
|
+
def destroy
|
62
|
+
@weblog = Weblog.find(params[:id])
|
63
|
+
@weblog.destroy
|
64
|
+
logger.info("#{Time.now} Destroyed Weblog ID ##{@weblog.id}!")
|
65
|
+
end
|
66
|
+
end
|
67
|
+
|
68
|
+
The result will be a message in your log file along the lines of:
|
69
|
+
|
70
|
+
Mon Oct 08 14:22:29 +1000 2007 Destroyed Weblog ID #1!
|
71
|
+
|
72
|
+
More information on how to use the logger is at http://www.ruby-doc.org/core/
|
73
|
+
|
74
|
+
Also, Ruby documentation can be found at http://www.ruby-lang.org/. There are
|
75
|
+
several books available online as well:
|
76
|
+
|
77
|
+
* Programming Ruby: http://www.ruby-doc.org/docs/ProgrammingRuby/ (Pickaxe)
|
78
|
+
* Learn to Program: http://pine.fm/LearnToProgram/ (a beginners guide)
|
79
|
+
|
80
|
+
These two books will bring you up to speed on the Ruby language and also on
|
81
|
+
programming in general.
|
82
|
+
|
83
|
+
|
84
|
+
== Debugger
|
85
|
+
|
86
|
+
Debugger support is available through the debugger command when you start your
|
87
|
+
Mongrel or WEBrick server with --debugger. This means that you can break out of
|
88
|
+
execution at any point in the code, investigate and change the model, and then,
|
89
|
+
resume execution! You need to install ruby-debug to run the server in debugging
|
90
|
+
mode. With gems, use <tt>sudo gem install ruby-debug</tt>. Example:
|
91
|
+
|
92
|
+
class WeblogController < ActionController::Base
|
93
|
+
def index
|
94
|
+
@posts = Post.all
|
95
|
+
debugger
|
96
|
+
end
|
97
|
+
end
|
98
|
+
|
99
|
+
So the controller will accept the action, run the first line, then present you
|
100
|
+
with a IRB prompt in the server window. Here you can do things like:
|
101
|
+
|
102
|
+
>> @posts.inspect
|
103
|
+
=> "[#<Post:0x14a6be8
|
104
|
+
@attributes={"title"=>nil, "body"=>nil, "id"=>"1"}>,
|
105
|
+
#<Post:0x14a6620
|
106
|
+
@attributes={"title"=>"Rails", "body"=>"Only ten..", "id"=>"2"}>]"
|
107
|
+
>> @posts.first.title = "hello from a debugger"
|
108
|
+
=> "hello from a debugger"
|
109
|
+
|
110
|
+
...and even better, you can examine how your runtime objects actually work:
|
111
|
+
|
112
|
+
>> f = @posts.first
|
113
|
+
=> #<Post:0x13630c4 @attributes={"title"=>nil, "body"=>nil, "id"=>"1"}>
|
114
|
+
>> f.
|
115
|
+
Display all 152 possibilities? (y or n)
|
116
|
+
|
117
|
+
Finally, when you're ready to resume execution, you can enter "cont".
|
118
|
+
|
119
|
+
|
120
|
+
== Console
|
121
|
+
|
122
|
+
The console is a Ruby shell, which allows you to interact with your
|
123
|
+
application's domain model. Here you'll have all parts of the application
|
124
|
+
configured, just like it is when the application is running. You can inspect
|
125
|
+
domain models, change values, and save to the database. Starting the script
|
126
|
+
without arguments will launch it in the development environment.
|
127
|
+
|
128
|
+
To start the console, run <tt>rails console</tt> from the application
|
129
|
+
directory.
|
130
|
+
|
131
|
+
Options:
|
132
|
+
|
133
|
+
* Passing the <tt>-s, --sandbox</tt> argument will rollback any modifications
|
134
|
+
made to the database.
|
135
|
+
* Passing an environment name as an argument will load the corresponding
|
136
|
+
environment. Example: <tt>rails console production</tt>.
|
137
|
+
|
138
|
+
To reload your controllers and models after launching the console run
|
139
|
+
<tt>reload!</tt>
|
140
|
+
|
141
|
+
More information about irb can be found at:
|
142
|
+
link:http://www.rubycentral.org/pickaxe/irb.html
|
143
|
+
|
144
|
+
|
145
|
+
== dbconsole
|
146
|
+
|
147
|
+
You can go to the command line of your database directly through <tt>rails
|
148
|
+
dbconsole</tt>. You would be connected to the database with the credentials
|
149
|
+
defined in database.yml. Starting the script without arguments will connect you
|
150
|
+
to the development database. Passing an argument will connect you to a different
|
151
|
+
database, like <tt>rails dbconsole production</tt>. Currently works for MySQL,
|
152
|
+
PostgreSQL and SQLite 3.
|
153
|
+
|
154
|
+
== Description of Contents
|
155
|
+
|
156
|
+
The default directory structure of a generated Ruby on Rails application:
|
157
|
+
|
158
|
+
|-- app
|
159
|
+
| |-- assets
|
160
|
+
| |-- images
|
161
|
+
| |-- javascripts
|
162
|
+
| `-- stylesheets
|
163
|
+
| |-- controllers
|
164
|
+
| |-- helpers
|
165
|
+
| |-- mailers
|
166
|
+
| |-- models
|
167
|
+
| `-- views
|
168
|
+
| `-- layouts
|
169
|
+
|-- config
|
170
|
+
| |-- environments
|
171
|
+
| |-- initializers
|
172
|
+
| `-- locales
|
173
|
+
|-- db
|
174
|
+
|-- doc
|
175
|
+
|-- lib
|
176
|
+
| `-- tasks
|
177
|
+
|-- log
|
178
|
+
|-- public
|
179
|
+
|-- script
|
180
|
+
|-- test
|
181
|
+
| |-- fixtures
|
182
|
+
| |-- functional
|
183
|
+
| |-- integration
|
184
|
+
| |-- performance
|
185
|
+
| `-- unit
|
186
|
+
|-- tmp
|
187
|
+
| |-- cache
|
188
|
+
| |-- pids
|
189
|
+
| |-- sessions
|
190
|
+
| `-- sockets
|
191
|
+
`-- vendor
|
192
|
+
|-- assets
|
193
|
+
`-- stylesheets
|
194
|
+
`-- plugins
|
195
|
+
|
196
|
+
app
|
197
|
+
Holds all the code that's specific to this particular application.
|
198
|
+
|
199
|
+
app/assets
|
200
|
+
Contains subdirectories for images, stylesheets, and JavaScript files.
|
201
|
+
|
202
|
+
app/controllers
|
203
|
+
Holds controllers that should be named like weblogs_controller.rb for
|
204
|
+
automated URL mapping. All controllers should descend from
|
205
|
+
ApplicationController which itself descends from ActionController::Base.
|
206
|
+
|
207
|
+
app/models
|
208
|
+
Holds models that should be named like post.rb. Models descend from
|
209
|
+
ActiveRecord::Base by default.
|
210
|
+
|
211
|
+
app/views
|
212
|
+
Holds the template files for the view that should be named like
|
213
|
+
weblogs/index.html.erb for the WeblogsController#index action. All views use
|
214
|
+
eRuby syntax by default.
|
215
|
+
|
216
|
+
app/views/layouts
|
217
|
+
Holds the template files for layouts to be used with views. This models the
|
218
|
+
common header/footer method of wrapping views. In your views, define a layout
|
219
|
+
using the <tt>layout :default</tt> and create a file named default.html.erb.
|
220
|
+
Inside default.html.erb, call <% yield %> to render the view using this
|
221
|
+
layout.
|
222
|
+
|
223
|
+
app/helpers
|
224
|
+
Holds view helpers that should be named like weblogs_helper.rb. These are
|
225
|
+
generated for you automatically when using generators for controllers.
|
226
|
+
Helpers can be used to wrap functionality for your views into methods.
|
227
|
+
|
228
|
+
config
|
229
|
+
Configuration files for the Rails environment, the routing map, the database,
|
230
|
+
and other dependencies.
|
231
|
+
|
232
|
+
db
|
233
|
+
Contains the database schema in schema.rb. db/migrate contains all the
|
234
|
+
sequence of Migrations for your schema.
|
235
|
+
|
236
|
+
doc
|
237
|
+
This directory is where your application documentation will be stored when
|
238
|
+
generated using <tt>rake doc:app</tt>
|
239
|
+
|
240
|
+
lib
|
241
|
+
Application specific libraries. Basically, any kind of custom code that
|
242
|
+
doesn't belong under controllers, models, or helpers. This directory is in
|
243
|
+
the load path.
|
244
|
+
|
245
|
+
public
|
246
|
+
The directory available for the web server. Also contains the dispatchers and the
|
247
|
+
default HTML files. This should be set as the DOCUMENT_ROOT of your web
|
248
|
+
server.
|
249
|
+
|
250
|
+
script
|
251
|
+
Helper scripts for automation and generation.
|
252
|
+
|
253
|
+
test
|
254
|
+
Unit and functional tests along with fixtures. When using the rails generate
|
255
|
+
command, template test files will be generated for you and placed in this
|
256
|
+
directory.
|
257
|
+
|
258
|
+
vendor
|
259
|
+
External libraries that the application depends on. Also includes the plugins
|
260
|
+
subdirectory. If the app has frozen rails, those gems also go here, under
|
261
|
+
vendor/rails/. This directory is in the load path.
|
data/test/dummy/Rakefile
ADDED
@@ -0,0 +1,7 @@
|
|
1
|
+
#!/usr/bin/env rake
|
2
|
+
# Add your own tasks in files placed in lib/tasks ending in .rake,
|
3
|
+
# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
|
4
|
+
|
5
|
+
require File.expand_path('../config/application', __FILE__)
|
6
|
+
|
7
|
+
Dummy::Application.load_tasks
|
@@ -0,0 +1,15 @@
|
|
1
|
+
// This is a manifest file that'll be compiled into application.js, which will include all the files
|
2
|
+
// listed below.
|
3
|
+
//
|
4
|
+
// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
|
5
|
+
// or vendor/assets/javascripts of plugins, if any, can be referenced here using a relative path.
|
6
|
+
//
|
7
|
+
// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
|
8
|
+
// the compiled file.
|
9
|
+
//
|
10
|
+
// WARNING: THE FIRST BLANK LINE MARKS THE END OF WHAT'S TO BE PROCESSED, ANY BLANK LINE SHOULD
|
11
|
+
// GO AFTER THE REQUIRES BELOW.
|
12
|
+
//
|
13
|
+
//= require jquery
|
14
|
+
//= require jquery_ujs
|
15
|
+
//= require_tree .
|
@@ -0,0 +1,13 @@
|
|
1
|
+
/*
|
2
|
+
* This is a manifest file that'll be compiled into application.css, which will include all the files
|
3
|
+
* listed below.
|
4
|
+
*
|
5
|
+
* Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
|
6
|
+
* or vendor/assets/stylesheets of plugins, if any, can be referenced here using a relative path.
|
7
|
+
*
|
8
|
+
* You're free to add application-wide styles to this file and they'll appear at the top of the
|
9
|
+
* compiled file, but it's generally better to create a new file per style scope.
|
10
|
+
*
|
11
|
+
*= require_self
|
12
|
+
*= require_tree .
|
13
|
+
*/
|
@@ -0,0 +1,27 @@
|
|
1
|
+
class MayMaysController < ApplicationController
|
2
|
+
may :create, method: :can_create?
|
3
|
+
|
4
|
+
def index
|
5
|
+
render text: 'index'
|
6
|
+
end
|
7
|
+
|
8
|
+
def new
|
9
|
+
render layout: false
|
10
|
+
end
|
11
|
+
|
12
|
+
def show
|
13
|
+
render text: 'show'
|
14
|
+
end
|
15
|
+
|
16
|
+
def destroy
|
17
|
+
render text: 'destroy'
|
18
|
+
end
|
19
|
+
|
20
|
+
def create
|
21
|
+
render text: 'create'
|
22
|
+
end
|
23
|
+
|
24
|
+
def can_create?
|
25
|
+
current_user.name == 'admin'
|
26
|
+
end
|
27
|
+
end
|
@@ -0,0 +1,22 @@
|
|
1
|
+
class Role < ActiveRecord::Base
|
2
|
+
attr_accessible :name
|
3
|
+
|
4
|
+
belongs_to :user_role
|
5
|
+
|
6
|
+
def name
|
7
|
+
nm = read_attribute(:name)
|
8
|
+
nm ? nm.to_sym : nil
|
9
|
+
end
|
10
|
+
|
11
|
+
def self.admin
|
12
|
+
new(name: :admin)
|
13
|
+
end
|
14
|
+
|
15
|
+
def self.standard
|
16
|
+
new(name: :standard)
|
17
|
+
end
|
18
|
+
|
19
|
+
def self.guest
|
20
|
+
new(name: :guest)
|
21
|
+
end
|
22
|
+
end
|
@@ -0,0 +1,22 @@
|
|
1
|
+
class User < ActiveRecord::Base
|
2
|
+
attr_accessible :name, :roles
|
3
|
+
|
4
|
+
has_many :user_roles
|
5
|
+
has_many :roles, through: :user_roles
|
6
|
+
|
7
|
+
def role_names
|
8
|
+
roles.map(&:name)
|
9
|
+
end
|
10
|
+
|
11
|
+
def self.admin
|
12
|
+
new(:name => 'admin', :roles => [Role.admin, Role.standard])
|
13
|
+
end
|
14
|
+
|
15
|
+
def self.standard
|
16
|
+
new(:name => 'standard', :roles => [Role.standard])
|
17
|
+
end
|
18
|
+
|
19
|
+
def self.guest
|
20
|
+
new(:name => 'guest', :roles => [Role.guest])
|
21
|
+
end
|
22
|
+
end
|