mdarby-restful_acl 1.0

data/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright (c) 2008 Matt Darby
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README

@@ -0,0 +1,3 @@
+RESTful_ACL is a simple Access Control Layer for Ruby on Rails. It restricts access on a fine-grained level to any RESTful MVC stack. While the ACL structure and engine are provided by this plugin, the implementation is fully up to the user. Every application is different and everyone likes to setup their User / Account / Role resources differently; this plugin will allow you to do your thing and keep that thing locked down.
+
+Please see the wiki (http://github.com/mdarby/restful_acl/wikis/) for more information.

data/Rakefile

@@ -0,0 +1,22 @@
+require 'rake'
+require 'rake/testtask'
+require 'rake/rdoctask'
+
+desc 'Default: run unit tests.'
+task :default => :test
+
+desc 'Test the restful_acl plugin.'
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'lib'
+  t.pattern = 'test/**/*_test.rb'
+  t.verbose = true
+end
+
+desc 'Generate documentation for the restful_acl plugin.'
+Rake::RDocTask.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'RestfulAcl'
+  rdoc.options << '--line-numbers' << '--inline-source'
+  rdoc.rdoc_files.include('README')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end

data/init.rb

@@ -0,0 +1 @@
+require File.dirname(__FILE__) + "/rails/init"

data/lib/restful_acl.rb

@@ -0,0 +1,54 @@
+module RestfulAcl
+  
+  def self.included(base)
+    base.extend(ClassMethods)
+    base.send :include, ClassMethods
+  end
+  
+  module ClassMethods
+
+    def has_permission?
+      return true if current_user.respond_to?("is_admin?") && current_user.is_admin? # Admins rule.
+      
+      begin
+        # Load the Model based on the controller name
+        klass = self.controller_name.classify.constantize
+
+        # Load the object requested if the param[:id] exists
+        object = klass.find(params[:id]) unless params[:id].blank?
+        
+        # Let's let the Model decide what is acceptable
+        permission_denied unless case params[:action] 
+          when "index"          then klass.is_readable_by(current_user)
+          when "show"           then klass.is_readable_by(current_user, object)
+          when "edit", "update" then object.is_updatable_by(current_user)
+          when "new", "create"  then klass.is_creatable_by(current_user)
+          when "destroy"        then object.is_deletable_by(current_user)
+          else klass.is_readable_by(current_user)
+        end
+      
+      rescue
+        # Failsafe: If any funny business is going on, log and redirect
+        routing_error
+      end
+    end
+
+
+    private
+
+    def permission_denied
+      logger.info("[ACL] Permission denied to %s at %s for %s" %
+      [(logged_in? ? current_user.login : 'guest'), Time.now, request.request_uri])
+  
+      redirect_to denied_url
+    end
+
+    def routing_error
+      logger.info("[ACL] Routing error by %s at %s for %s" %
+      [(logged_in? ? current_user.login : 'guest'), Time.now, request.request_uri])
+  
+      redirect_to error_url
+    end
+  
+  end
+end

data/lib/restful_acl_helper.rb

@@ -0,0 +1,43 @@
+module RestfulAclHelper
+
+  def creatable
+    return true if admin_enabled
+    
+    klass.is_creatable_by(current_user)
+  end
+  alias_method :createable, :creatable
+  
+  
+  def updatable(object)
+    return true if admin_enabled
+    
+    object.is_updatable_by(current_user)
+  end
+  alias_method :updateable, :updatable
+  
+  
+  def deletable(object)
+    return true if admin_enabled
+    
+    object.is_deletable_by(current_user)
+  end
+  alias_method :deleteable, :deletable
+  
+  
+  def readable(object = nil)
+    return true if admin_enabled
+    
+    klass.is_readable_by(current_user, object)
+  end  
+
+  private
+    
+    def admin_enabled
+      current_user.respond_to?("is_admin?") && current_user.is_admin?
+    end
+    
+    def klass
+      params[:controller].classify.constantize
+    end
+
+end

data/tasks/restful_acl_tasks.rake

@@ -0,0 +1,4 @@
+# desc "Explaining what the task does"
+# task :restful_acl do
+#   # Task goes here
+# end

data/uninstall.rb

@@ -0,0 +1 @@
+# Uninstall hook code here

metadata

@@ -0,0 +1,61 @@
+--- !ruby/object:Gem::Specification 
+name: mdarby-restful_acl
+version: !ruby/object:Gem::Version 
+  version: "1.0"
+platform: ruby
+authors: 
+- Matt Darby
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2008-12-14 00:00:00 -08:00
+default_executable: 
+dependencies: []
+
+description: A Rails gem that provides fine grained access control to RESTful resources in a Rails 2.0+ project.
+email: matt@matt-darby.com
+executables: []
+
+extensions: []
+
+extra_rdoc_files: []
+
+files: 
+- MIT-LICENSE
+- README
+- Rakefile
+- init.rb
+- lib/restful_acl.rb
+- lib/restful_acl_helper.rb
+- rails/init.rb
+- tasks/restful_acl_tasks.rake
+- uninstall.rb
+has_rdoc: false
+homepage: http://github.com/mdarby/restful_acl/tree/master
+post_install_message: 
+rdoc_options: []
+
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+  version: 
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+  version: 
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.2.0
+signing_key: 
+specification_version: 2
+summary: Object-level access control
+test_files: []
+