permission_forge 0.14.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/CHANGELOG.md +1138 -0
- data/LICENSE.txt +21 -0
- data/README.md +356 -0
- data/app/controllers/concerns/permission_forge/acting_admin.rb +17 -0
- data/app/controllers/concerns/permission_forge/api/crud_actions.rb +84 -0
- data/app/controllers/concerns/permission_forge/api/nested_resource_lookup.rb +18 -0
- data/app/controllers/concerns/permission_forge/api/pagination.rb +50 -0
- data/app/controllers/concerns/permission_forge/api/response_renderer.rb +65 -0
- data/app/controllers/concerns/permission_forge/api/serializer_resolver.rb +30 -0
- data/app/controllers/concerns/permission_forge/api_authentication.rb +40 -0
- data/app/controllers/concerns/permission_forge/assignment_authorization.rb +97 -0
- data/app/controllers/concerns/permission_forge/audit_log_gate.rb +55 -0
- data/app/controllers/concerns/permission_forge/basic_authentication.rb +77 -0
- data/app/controllers/concerns/permission_forge/cache_confirmation.rb +32 -0
- data/app/controllers/concerns/permission_forge/forgery_protection.rb +29 -0
- data/app/controllers/concerns/permission_forge/html_format.rb +40 -0
- data/app/controllers/concerns/permission_forge/param_shapes.rb +87 -0
- data/app/controllers/concerns/permission_forge/tenant_required.rb +42 -0
- data/app/controllers/permission_forge/api/audit_events_controller.rb +33 -0
- data/app/controllers/permission_forge/api/base_controller.rb +220 -0
- data/app/controllers/permission_forge/api/dashboard_controller.rb +30 -0
- data/app/controllers/permission_forge/api/permission_set_group_users_controller.rb +51 -0
- data/app/controllers/permission_forge/api/permission_set_groups_controller.rb +71 -0
- data/app/controllers/permission_forge/api/permission_set_rules_controller.rb +37 -0
- data/app/controllers/permission_forge/api/permission_set_users_controller.rb +105 -0
- data/app/controllers/permission_forge/api/permission_sets_controller.rb +87 -0
- data/app/controllers/permission_forge/api/resource_actions_controller.rb +58 -0
- data/app/controllers/permission_forge/api/resource_fields_controller.rb +30 -0
- data/app/controllers/permission_forge/api/resources_controller.rb +56 -0
- data/app/controllers/permission_forge/application_controller.rb +198 -0
- data/app/controllers/permission_forge/assets_controller.rb +97 -0
- data/app/controllers/permission_forge/assignments_controller.rb +266 -0
- data/app/controllers/permission_forge/audit_events_controller.rb +94 -0
- data/app/controllers/permission_forge/bulk_assignments_controller.rb +108 -0
- data/app/controllers/permission_forge/field_lookups_controller.rb +38 -0
- data/app/controllers/permission_forge/home_controller.rb +24 -0
- data/app/controllers/permission_forge/maintenance_controller.rb +13 -0
- data/app/controllers/permission_forge/people_controller.rb +190 -0
- data/app/controllers/permission_forge/permission_set_editor.rb +71 -0
- data/app/controllers/permission_forge/permission_set_group_users_controller.rb +57 -0
- data/app/controllers/permission_forge/permission_set_groups_controller.rb +111 -0
- data/app/controllers/permission_forge/permission_set_rules_controller.rb +97 -0
- data/app/controllers/permission_forge/permission_sets_controller.rb +227 -0
- data/app/controllers/permission_forge/preferences_controller.rb +26 -0
- data/app/controllers/permission_forge/resource_actions_controller.rb +106 -0
- data/app/controllers/permission_forge/resource_fields_controller.rb +129 -0
- data/app/controllers/permission_forge/resources_controller.rb +189 -0
- data/app/controllers/permission_forge/settings_controller.rb +33 -0
- data/app/frontend/permission_forge/brand/apple-touch-icon.png +0 -0
- data/app/frontend/permission_forge/brand/chevron.svg +1 -0
- data/app/frontend/permission_forge/brand/favicon.ico +0 -0
- data/app/frontend/permission_forge/brand/favicon.svg +1 -0
- data/app/frontend/permission_forge/brand/logo-horizontal-dark.svg +1 -0
- data/app/frontend/permission_forge/brand/logo-horizontal-light.svg +1 -0
- data/app/frontend/permission_forge/brand/mark-small.svg +1 -0
- data/app/frontend/permission_forge/brand/mark.svg +1 -0
- data/app/frontend/permission_forge/pf_admin.css +766 -0
- data/app/frontend/permission_forge/pf_admin.js +482 -0
- data/app/helpers/permission_forge/application_helper.rb +167 -0
- data/app/helpers/permission_forge/audit_helper.rb +230 -0
- data/app/helpers/permission_forge/audit_sentences_helper.rb +84 -0
- data/app/helpers/permission_forge/badges_helper.rb +134 -0
- data/app/helpers/permission_forge/changes_helper.rb +117 -0
- data/app/helpers/permission_forge/people_helper.rb +118 -0
- data/app/helpers/permission_forge/sentences_helper.rb +175 -0
- data/app/helpers/permission_forge/settings_helper.rb +152 -0
- data/app/helpers/permission_forge/ui_helper.rb +184 -0
- data/app/models/permission_forge/audit_event.rb +159 -0
- data/app/models/permission_forge/permission_set.rb +100 -0
- data/app/models/permission_forge/permission_set_group.rb +83 -0
- data/app/models/permission_forge/permission_set_group_user.rb +43 -0
- data/app/models/permission_forge/permission_set_rule.rb +99 -0
- data/app/models/permission_forge/permission_set_user.rb +158 -0
- data/app/models/permission_forge/resource.rb +100 -0
- data/app/models/permission_forge/resource_action.rb +58 -0
- data/app/models/permission_forge/resource_field.rb +69 -0
- data/app/views/layouts/permission_forge/application.html.erb +30 -0
- data/app/views/layouts/permission_forge/fragment.html.erb +2 -0
- data/app/views/permission_forge/assignments/_person_options.html.erb +26 -0
- data/app/views/permission_forge/assignments/confirm_destroy.html.erb +24 -0
- data/app/views/permission_forge/assignments/new.html.erb +99 -0
- data/app/views/permission_forge/audit_events/index.html.erb +161 -0
- data/app/views/permission_forge/audit_events/show.html.erb +146 -0
- data/app/views/permission_forge/bulk_assignments/confirm_revoke.html.erb +21 -0
- data/app/views/permission_forge/bulk_assignments/new.html.erb +69 -0
- data/app/views/permission_forge/field_lookups/show.html.erb +32 -0
- data/app/views/permission_forge/home/_audit_card.html.erb +19 -0
- data/app/views/permission_forge/home/_ending_card.html.erb +32 -0
- data/app/views/permission_forge/home/_expired_card.html.erb +34 -0
- data/app/views/permission_forge/home/_privacy_card.html.erb +67 -0
- data/app/views/permission_forge/home/_rules_card.html.erb +23 -0
- data/app/views/permission_forge/home/_stale_card.html.erb +39 -0
- data/app/views/permission_forge/home/_tidy_card.html.erb +18 -0
- data/app/views/permission_forge/home/index.html.erb +69 -0
- data/app/views/permission_forge/people/_access_tab.html.erb +58 -0
- data/app/views/permission_forge/people/_audit_tab.html.erb +93 -0
- data/app/views/permission_forge/people/_effective_field_source.html.erb +11 -0
- data/app/views/permission_forge/people/_effective_tab.html.erb +118 -0
- data/app/views/permission_forge/people/_effective_why.html.erb +48 -0
- data/app/views/permission_forge/people/_why_item.html.erb +19 -0
- data/app/views/permission_forge/people/confirm_remove_all.html.erb +27 -0
- data/app/views/permission_forge/people/consent_preview.html.erb +39 -0
- data/app/views/permission_forge/people/erasure_preview.html.erb +28 -0
- data/app/views/permission_forge/people/index.html.erb +78 -0
- data/app/views/permission_forge/people/show.html.erb +54 -0
- data/app/views/permission_forge/permission_set_groups/confirm_destroy.html.erb +12 -0
- data/app/views/permission_forge/permission_set_groups/index.html.erb +55 -0
- data/app/views/permission_forge/permission_set_groups/show.html.erb +100 -0
- data/app/views/permission_forge/permission_set_rules/_builder.html.erb +145 -0
- data/app/views/permission_forge/permission_set_rules/_value_input.html.erb +42 -0
- data/app/views/permission_forge/permission_set_rules/confirm_destroy.html.erb +13 -0
- data/app/views/permission_forge/permission_set_rules/edit.html.erb +3 -0
- data/app/views/permission_forge/permission_set_rules/new.html.erb +3 -0
- data/app/views/permission_forge/permission_sets/_assignments_tab.html.erb +74 -0
- data/app/views/permission_forge/permission_sets/_audit_tab.html.erb +80 -0
- data/app/views/permission_forge/permission_sets/_conditions_tab.html.erb +83 -0
- data/app/views/permission_forge/permission_sets/_header.html.erb +36 -0
- data/app/views/permission_forge/permission_sets/_records_summary.html.erb +16 -0
- data/app/views/permission_forge/permission_sets/_resource_summary.html.erb +11 -0
- data/app/views/permission_forge/permission_sets/_resources_tab.html.erb +49 -0
- data/app/views/permission_forge/permission_sets/confirm_destroy.html.erb +23 -0
- data/app/views/permission_forge/permission_sets/confirm_switch_mode.html.erb +15 -0
- data/app/views/permission_forge/permission_sets/index.html.erb +83 -0
- data/app/views/permission_forge/permission_sets/new.html.erb +63 -0
- data/app/views/permission_forge/permission_sets/review.html.erb +26 -0
- data/app/views/permission_forge/permission_sets/show.html.erb +50 -0
- data/app/views/permission_forge/resource_actions/_across_sets.html.erb +24 -0
- data/app/views/permission_forge/resource_actions/_add_select.html.erb +12 -0
- data/app/views/permission_forge/resource_actions/_effect.html.erb +25 -0
- data/app/views/permission_forge/resource_actions/_endpoints.html.erb +16 -0
- data/app/views/permission_forge/resource_actions/_form.html.erb +44 -0
- data/app/views/permission_forge/resource_actions/_managed_note.html.erb +11 -0
- data/app/views/permission_forge/resource_actions/confirm_destroy.html.erb +13 -0
- data/app/views/permission_forge/resource_actions/new.html.erb +31 -0
- data/app/views/permission_forge/resource_actions/show.html.erb +39 -0
- data/app/views/permission_forge/resource_fields/_explain.html.erb +24 -0
- data/app/views/permission_forge/resource_fields/show.html.erb +186 -0
- data/app/views/permission_forge/resources/_actions_tab.html.erb +88 -0
- data/app/views/permission_forge/resources/_fields_tab.html.erb +89 -0
- data/app/views/permission_forge/resources/_rules_tab.html.erb +55 -0
- data/app/views/permission_forge/resources/_sync.html.erb +57 -0
- data/app/views/permission_forge/resources/confirm_destroy.html.erb +17 -0
- data/app/views/permission_forge/resources/new.html.erb +57 -0
- data/app/views/permission_forge/resources/show.html.erb +117 -0
- data/app/views/permission_forge/settings/_ladder.html.erb +15 -0
- data/app/views/permission_forge/settings/_row.html.erb +38 -0
- data/app/views/permission_forge/settings/show.html.erb +67 -0
- data/app/views/permission_forge/shared/_across_sets.html.erb +31 -0
- data/app/views/permission_forge/shared/_audit_events.html.erb +36 -0
- data/app/views/permission_forge/shared/_audit_footer.html.erb +16 -0
- data/app/views/permission_forge/shared/_audit_off_note.html.erb +15 -0
- data/app/views/permission_forge/shared/_audit_pagination.html.erb +19 -0
- data/app/views/permission_forge/shared/_audit_refused_note.html.erb +7 -0
- data/app/views/permission_forge/shared/_audit_timeline.html.erb +29 -0
- data/app/views/permission_forge/shared/_crud_cell.html.erb +18 -0
- data/app/views/permission_forge/shared/_dialog_frame.html.erb +11 -0
- data/app/views/permission_forge/shared/_expiry_picker.html.erb +27 -0
- data/app/views/permission_forge/shared/_head_extra.html.erb +3 -0
- data/app/views/permission_forge/shared/_help_banner.html.erb +10 -0
- data/app/views/permission_forge/shared/_level_control.html.erb +18 -0
- data/app/views/permission_forge/shared/_mode_banners.html.erb +22 -0
- data/app/views/permission_forge/shared/_nav.html.erb +12 -0
- data/app/views/permission_forge/shared/_preferences.html.erb +24 -0
- data/app/views/permission_forge/shared/_reason_field.html.erb +20 -0
- data/app/views/permission_forge/shared/_savebar.html.erb +13 -0
- data/app/views/permission_forge/shared/_sheet_frame.html.erb +22 -0
- data/app/views/permission_forge/shared/_sidebar.html.erb +18 -0
- data/app/views/permission_forge/shared/_tech_details.html.erb +20 -0
- data/app/views/permission_forge/shared/_toasts.html.erb +27 -0
- data/app/views/permission_forge/shared/_topbar.html.erb +15 -0
- data/app/views/permission_forge/shared/_user_select.html.erb +16 -0
- data/app/views/permission_forge/shared/audit_refused.html.erb +7 -0
- data/config/locales/permission_forge.en.yml +2115 -0
- data/config/locales/permission_forge.mk.yml +2166 -0
- data/config/locales/permission_forge.sq.yml +2164 -0
- data/config/routes.rb +143 -0
- data/lib/generators/permission_forge/install/install_generator.rb +105 -0
- data/lib/generators/permission_forge/install/templates/initializer.rb.tt +148 -0
- data/lib/generators/permission_forge/install/templates/migration.rb.tt +198 -0
- data/lib/generators/permission_forge/rls/rls_generator.rb +57 -0
- data/lib/generators/permission_forge/rls/templates/enable_permission_forge_rls.rb.tt +15 -0
- data/lib/generators/permission_forge/upgrade/templates/add_admin_ui_columns.rb.tt +8 -0
- data/lib/generators/permission_forge/upgrade/templates/add_audit_events.rb.tt +98 -0
- data/lib/generators/permission_forge/upgrade/templates/add_resource_fields_unique_index.rb.tt +69 -0
- data/lib/generators/permission_forge/upgrade/upgrade_generator.rb +66 -0
- data/lib/permission_forge/admin/action_across_sets.rb +76 -0
- data/lib/permission_forge/admin/action_rows.rb +156 -0
- data/lib/permission_forge/admin/attention_items.rb +207 -0
- data/lib/permission_forge/admin/audit_event_detail.rb +75 -0
- data/lib/permission_forge/admin/audit_log.rb +193 -0
- data/lib/permission_forge/admin/audit_log_days.rb +41 -0
- data/lib/permission_forge/admin/audit_lookups.rb +105 -0
- data/lib/permission_forge/admin/audit_name_history.rb +85 -0
- data/lib/permission_forge/admin/audit_trail.rb +169 -0
- data/lib/permission_forge/admin/bulk_people_matcher.rb +109 -0
- data/lib/permission_forge/admin/change_set.rb +123 -0
- data/lib/permission_forge/admin/change_set_parts/actions.rb +27 -0
- data/lib/permission_forge/admin/change_set_parts/base.rb +58 -0
- data/lib/permission_forge/admin/change_set_parts/context.rb +50 -0
- data/lib/permission_forge/admin/change_set_parts/field_edit.rb +67 -0
- data/lib/permission_forge/admin/change_set_parts/field_levels.rb +71 -0
- data/lib/permission_forge/admin/change_set_parts/new_actions.rb +91 -0
- data/lib/permission_forge/admin/change_set_parts/new_fields.rb +63 -0
- data/lib/permission_forge/admin/change_set_parts/resource_edit.rb +55 -0
- data/lib/permission_forge/admin/change_set_parts/resource_flags.rb +19 -0
- data/lib/permission_forge/admin/change_set_parts/set_attrs.rb +45 -0
- data/lib/permission_forge/admin/change_set_parts/values.rb +20 -0
- data/lib/permission_forge/admin/column_fields.rb +48 -0
- data/lib/permission_forge/admin/conditions_form.rb +78 -0
- data/lib/permission_forge/admin/controller_catalog.rb +166 -0
- data/lib/permission_forge/admin/csv.rb +41 -0
- data/lib/permission_forge/admin/editable_lock.rb +157 -0
- data/lib/permission_forge/admin/effective_access.rb +158 -0
- data/lib/permission_forge/admin/effective_fields.rb +176 -0
- data/lib/permission_forge/admin/expiry_presets.rb +51 -0
- data/lib/permission_forge/admin/exports/document.rb +89 -0
- data/lib/permission_forge/admin/exports/events.rb +51 -0
- data/lib/permission_forge/admin/exports/holdings.rb +118 -0
- data/lib/permission_forge/admin/exports.rb +37 -0
- data/lib/permission_forge/admin/field_across_sets.rb +51 -0
- data/lib/permission_forge/admin/field_detail.rb +112 -0
- data/lib/permission_forge/admin/field_level.rb +74 -0
- data/lib/permission_forge/admin/field_rows.rb +137 -0
- data/lib/permission_forge/admin/last_changes.rb +94 -0
- data/lib/permission_forge/admin/model_catalog.rb +216 -0
- data/lib/permission_forge/admin/people_candidates.rb +108 -0
- data/lib/permission_forge/admin/people_directory.rb +158 -0
- data/lib/permission_forge/admin/permission_set_factory.rb +48 -0
- data/lib/permission_forge/admin/person_label.rb +95 -0
- data/lib/permission_forge/admin/record_id.rb +19 -0
- data/lib/permission_forge/admin/rule_builder.rb +58 -0
- data/lib/permission_forge/admin/rule_form.rb +175 -0
- data/lib/permission_forge/admin/rule_form_input.rb +74 -0
- data/lib/permission_forge/admin/sensitive_columns.rb +68 -0
- data/lib/permission_forge/admin/settings_catalog.rb +261 -0
- data/lib/permission_forge/admin/settings_values.rb +130 -0
- data/lib/permission_forge/api/serializers/audit_event_serializer.rb +27 -0
- data/lib/permission_forge/api/serializers/base_serializer.rb +36 -0
- data/lib/permission_forge/api/serializers/permission_set_group_serializer.rb +12 -0
- data/lib/permission_forge/api/serializers/permission_set_group_user_serializer.rb +11 -0
- data/lib/permission_forge/api/serializers/permission_set_rule_serializer.rb +25 -0
- data/lib/permission_forge/api/serializers/permission_set_serializer.rb +13 -0
- data/lib/permission_forge/api/serializers/permission_set_user_serializer.rb +11 -0
- data/lib/permission_forge/api/serializers/resource_action_serializer.rb +13 -0
- data/lib/permission_forge/api/serializers/resource_field_serializer.rb +14 -0
- data/lib/permission_forge/api/serializers/resource_serializer.rb +15 -0
- data/lib/permission_forge/audit/actor.rb +144 -0
- data/lib/permission_forge/audit/actor_resolver.rb +103 -0
- data/lib/permission_forge/audit/audited_views.rb +208 -0
- data/lib/permission_forge/audit/boot_warnings.rb +58 -0
- data/lib/permission_forge/audit/column_values.rb +56 -0
- data/lib/permission_forge/audit/context.rb +98 -0
- data/lib/permission_forge/audit/detached.rb +62 -0
- data/lib/permission_forge/audit/event_catalog.rb +110 -0
- data/lib/permission_forge/audit/event_query.rb +192 -0
- data/lib/permission_forge/audit/failure.rb +47 -0
- data/lib/permission_forge/audit/field_access.rb +186 -0
- data/lib/permission_forge/audit/gate.rb +167 -0
- data/lib/permission_forge/audit/job_context.rb +32 -0
- data/lib/permission_forge/audit/log_access.rb +36 -0
- data/lib/permission_forge/audit/recorder.rb +168 -0
- data/lib/permission_forge/audit/refusals.rb +61 -0
- data/lib/permission_forge/audit/request_context.rb +152 -0
- data/lib/permission_forge/audit/runtime.rb +178 -0
- data/lib/permission_forge/audit/runtime_emission.rb +135 -0
- data/lib/permission_forge/audit/settings_observer.rb +70 -0
- data/lib/permission_forge/audit/source.rb +54 -0
- data/lib/permission_forge/audit/subscribers/base.rb +69 -0
- data/lib/permission_forge/audit/subscribers/legacy_hooks.rb +97 -0
- data/lib/permission_forge/audit/subscribers/log.rb +45 -0
- data/lib/permission_forge/audit/subscribers.rb +58 -0
- data/lib/permission_forge/audit.rb +302 -0
- data/lib/permission_forge/boot_checks.rb +184 -0
- data/lib/permission_forge/cache/backlog.rb +142 -0
- data/lib/permission_forge/cache/base.rb +200 -0
- data/lib/permission_forge/cache/bulk_invalidation.rb +131 -0
- data/lib/permission_forge/cache/failure.rb +171 -0
- data/lib/permission_forge/cache/handled_errors.rb +82 -0
- data/lib/permission_forge/cache/holder_invalidation.rb +85 -0
- data/lib/permission_forge/cache/invalidation.rb +180 -0
- data/lib/permission_forge/cache/memory_cache.rb +77 -0
- data/lib/permission_forge/cache/null_cache.rb +40 -0
- data/lib/permission_forge/cache/rails_cache.rb +231 -0
- data/lib/permission_forge/cache/rebuild.rb +149 -0
- data/lib/permission_forge/cache/settlement.rb +63 -0
- data/lib/permission_forge/cache/user_keys.rb +206 -0
- data/lib/permission_forge/cache/variant_removal.rb +55 -0
- data/lib/permission_forge/cache/withheld_notice.rb +60 -0
- data/lib/permission_forge/concerns/audited_collection.rb +34 -0
- data/lib/permission_forge/concerns/auto_permission_scoping.rb +158 -0
- data/lib/permission_forge/concerns/controller_action_guard.rb +106 -0
- data/lib/permission_forge/concerns/field_mask_checker.rb +45 -0
- data/lib/permission_forge/concerns/has_active_scope.rb +12 -0
- data/lib/permission_forge/concerns/has_audit_trail.rb +59 -0
- data/lib/permission_forge/concerns/has_permission_set_users.rb +115 -0
- data/lib/permission_forge/concerns/has_tenant_scoping.rb +86 -0
- data/lib/permission_forge/concerns/has_uuid.rb +24 -0
- data/lib/permission_forge/concerns/invalidates_in_batch.rb +207 -0
- data/lib/permission_forge/concerns/invalidates_managed_actions.rb +80 -0
- data/lib/permission_forge/concerns/masked_attributes/alias_access.rb +280 -0
- data/lib/permission_forge/concerns/masked_attributes/store_access.rb +100 -0
- data/lib/permission_forge/concerns/masked_attributes/validation_reads.rb +153 -0
- data/lib/permission_forge/concerns/masked_attributes/virtual_readers.rb +242 -0
- data/lib/permission_forge/concerns/masked_attributes.rb +576 -0
- data/lib/permission_forge/concerns/permission_cache_accessor.rb +416 -0
- data/lib/permission_forge/concerns/permission_scoped_findable.rb +337 -0
- data/lib/permission_forge/concerns/permissioned_user.rb +78 -0
- data/lib/permission_forge/concerns/permissions_memo.rb +160 -0
- data/lib/permission_forge/concerns/permissions_per_context.rb +288 -0
- data/lib/permission_forge/concerns/permissions_regenerator.rb +43 -0
- data/lib/permission_forge/concerns/records_audit_events.rb +286 -0
- data/lib/permission_forge/concerns/resource_permission_checker.rb +116 -0
- data/lib/permission_forge/concerns/validates_column_lengths.rb +69 -0
- data/lib/permission_forge/concerns/validates_dependency.rb +54 -0
- data/lib/permission_forge/conditional_sets.rb +361 -0
- data/lib/permission_forge/configuration/admin_ui_settings.rb +108 -0
- data/lib/permission_forge/configuration/audit_settings.rb +184 -0
- data/lib/permission_forge/configuration/cache_settings.rb +76 -0
- data/lib/permission_forge/configuration/controller_action_settings.rb +112 -0
- data/lib/permission_forge/configuration/gdpr_settings.rb +70 -0
- data/lib/permission_forge/configuration/masked_attributes_settings.rb +83 -0
- data/lib/permission_forge/configuration/permits_attributes_settings.rb +26 -0
- data/lib/permission_forge/configuration/presets.rb +139 -0
- data/lib/permission_forge/configuration/query_scoping_settings.rb +107 -0
- data/lib/permission_forge/configuration/strategy_values.rb +57 -0
- data/lib/permission_forge/configuration/virtual_attributes_settings.rb +65 -0
- data/lib/permission_forge/configuration.rb +624 -0
- data/lib/permission_forge/controller_actions/authorizer.rb +171 -0
- data/lib/permission_forge/controller_actions/managed_index.rb +213 -0
- data/lib/permission_forge/controller_actions/mapping.rb +167 -0
- data/lib/permission_forge/controller_actions.rb +122 -0
- data/lib/permission_forge/deprecation.rb +86 -0
- data/lib/permission_forge/engine.rb +113 -0
- data/lib/permission_forge/execution_state.rb +318 -0
- data/lib/permission_forge/invalidation_batch.rb +206 -0
- data/lib/permission_forge/masked_models.rb +226 -0
- data/lib/permission_forge/masking_sync.rb +271 -0
- data/lib/permission_forge/model_bindings.rb +90 -0
- data/lib/permission_forge/open_transaction.rb +303 -0
- data/lib/permission_forge/operators/constants.rb +41 -0
- data/lib/permission_forge/operators/registry.rb +300 -0
- data/lib/permission_forge/operators/rule_column.rb +120 -0
- data/lib/permission_forge/operators/validations.rb +111 -0
- data/lib/permission_forge/operators/value_casters/number.rb +68 -0
- data/lib/permission_forge/operators/value_casters/temporal.rb +69 -0
- data/lib/permission_forge/operators/value_casters.rb +80 -0
- data/lib/permission_forge/operators/value_typing.rb +115 -0
- data/lib/permission_forge/query_scoping_warnings.rb +68 -0
- data/lib/permission_forge/rake_audit.rb +65 -0
- data/lib/permission_forge/resource_chain.rb +190 -0
- data/lib/permission_forge/rls.rb +209 -0
- data/lib/permission_forge/services/attribute_access_guard.rb +138 -0
- data/lib/permission_forge/services/audit_event_purger.rb +150 -0
- data/lib/permission_forge/services/bulk_permission_set_assignment.rb +108 -0
- data/lib/permission_forge/services/concerns/across_tenants.rb +69 -0
- data/lib/permission_forge/services/concerns/audited_operation.rb +43 -0
- data/lib/permission_forge/services/concerns/clonable.rb +29 -0
- data/lib/permission_forge/services/consent_withdrawal_handler.rb +135 -0
- data/lib/permission_forge/services/dashboard_stats.rb +43 -0
- data/lib/permission_forge/services/data_subject_erasure.rb +306 -0
- data/lib/permission_forge/services/expired_assignment_cleaner.rb +152 -0
- data/lib/permission_forge/services/extra_field_defaults.rb +71 -0
- data/lib/permission_forge/services/field_permission_merger.rb +83 -0
- data/lib/permission_forge/services/filters_response_attributes.rb +144 -0
- data/lib/permission_forge/services/gdpr_field_auditor/text_report.rb +63 -0
- data/lib/permission_forge/services/gdpr_field_auditor.rb +223 -0
- data/lib/permission_forge/services/host_key_guard.rb +110 -0
- data/lib/permission_forge/services/mask_value.rb +93 -0
- data/lib/permission_forge/services/permission_cache_clearer.rb +174 -0
- data/lib/permission_forge/services/permission_hash_builder.rb +305 -0
- data/lib/permission_forge/services/permission_rule_applier.rb +192 -0
- data/lib/permission_forge/services/permission_set_cloner.rb +89 -0
- data/lib/permission_forge/services/permission_set_condition_evaluator.rb +102 -0
- data/lib/permission_forge/services/permission_set_group_cloner.rb +52 -0
- data/lib/permission_forge/services/permits_attributes/nested_records.rb +106 -0
- data/lib/permission_forge/services/permits_attributes.rb +270 -0
- data/lib/permission_forge/services/resource_field_generator.rb +93 -0
- data/lib/permission_forge/services/resource_with_fields_builder.rb +47 -0
- data/lib/permission_forge/services/rls_operator_sql.rb +131 -0
- data/lib/permission_forge/services/rls_policy_generator.rb +365 -0
- data/lib/permission_forge/services/security_audit/action_check.rb +157 -0
- data/lib/permission_forge/services/security_audit/assignment_check.rb +120 -0
- data/lib/permission_forge/services/security_audit/audit_trail_check.rb +166 -0
- data/lib/permission_forge/services/security_audit/base_check.rb +57 -0
- data/lib/permission_forge/services/security_audit/config_check.rb +212 -0
- data/lib/permission_forge/services/security_audit/integrity_check.rb +105 -0
- data/lib/permission_forge/services/security_audit/personal_data_check.rb +79 -0
- data/lib/permission_forge/services/security_audit/privilege_check.rb +67 -0
- data/lib/permission_forge/services/security_audit/rule_check.rb +141 -0
- data/lib/permission_forge/services/security_audit/text_report.rb +46 -0
- data/lib/permission_forge/services/security_audit/user_model_check.rb +67 -0
- data/lib/permission_forge/services/security_audit.rb +75 -0
- data/lib/permission_forge/services/stale_assignment_auditor.rb +68 -0
- data/lib/permission_forge/services/unscoped_query_detector.rb +132 -0
- data/lib/permission_forge/version.rb +3 -0
- data/lib/permission_forge/virtual_fields/discovery.rb +65 -0
- data/lib/permission_forge/virtual_fields.rb +102 -0
- data/lib/permission_forge.rb +464 -0
- data/lib/tasks/permission_forge.rake +31 -0
- data/lib/tasks/permission_forge_audit_events.rake +28 -0
- data/lib/tasks/permission_forge_cache.rake +26 -0
- data/lib/tasks/permission_forge_expiration.rake +30 -0
- data/lib/tasks/permission_forge_gdpr.rake +69 -0
- data/lib/tasks/permission_forge_rls.rake +38 -0
- metadata +515 -0
metadata
ADDED
|
@@ -0,0 +1,515 @@
|
|
|
1
|
+
--- !ruby/object:Gem::Specification
|
|
2
|
+
name: permission_forge
|
|
3
|
+
version: !ruby/object:Gem::Version
|
|
4
|
+
version: 0.14.1
|
|
5
|
+
platform: ruby
|
|
6
|
+
authors:
|
|
7
|
+
- Feti Jashari
|
|
8
|
+
bindir: bin
|
|
9
|
+
cert_chain: []
|
|
10
|
+
date: 1980-01-02 00:00:00.000000000 Z
|
|
11
|
+
dependencies:
|
|
12
|
+
- !ruby/object:Gem::Dependency
|
|
13
|
+
name: activerecord
|
|
14
|
+
requirement: !ruby/object:Gem::Requirement
|
|
15
|
+
requirements:
|
|
16
|
+
- - ">="
|
|
17
|
+
- !ruby/object:Gem::Version
|
|
18
|
+
version: '7.1'
|
|
19
|
+
- - "<"
|
|
20
|
+
- !ruby/object:Gem::Version
|
|
21
|
+
version: '8.2'
|
|
22
|
+
type: :runtime
|
|
23
|
+
prerelease: false
|
|
24
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
25
|
+
requirements:
|
|
26
|
+
- - ">="
|
|
27
|
+
- !ruby/object:Gem::Version
|
|
28
|
+
version: '7.1'
|
|
29
|
+
- - "<"
|
|
30
|
+
- !ruby/object:Gem::Version
|
|
31
|
+
version: '8.2'
|
|
32
|
+
- !ruby/object:Gem::Dependency
|
|
33
|
+
name: activesupport
|
|
34
|
+
requirement: !ruby/object:Gem::Requirement
|
|
35
|
+
requirements:
|
|
36
|
+
- - ">="
|
|
37
|
+
- !ruby/object:Gem::Version
|
|
38
|
+
version: '7.1'
|
|
39
|
+
- - "<"
|
|
40
|
+
- !ruby/object:Gem::Version
|
|
41
|
+
version: '8.2'
|
|
42
|
+
type: :runtime
|
|
43
|
+
prerelease: false
|
|
44
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
45
|
+
requirements:
|
|
46
|
+
- - ">="
|
|
47
|
+
- !ruby/object:Gem::Version
|
|
48
|
+
version: '7.1'
|
|
49
|
+
- - "<"
|
|
50
|
+
- !ruby/object:Gem::Version
|
|
51
|
+
version: '8.2'
|
|
52
|
+
- !ruby/object:Gem::Dependency
|
|
53
|
+
name: railties
|
|
54
|
+
requirement: !ruby/object:Gem::Requirement
|
|
55
|
+
requirements:
|
|
56
|
+
- - ">="
|
|
57
|
+
- !ruby/object:Gem::Version
|
|
58
|
+
version: '7.1'
|
|
59
|
+
- - "<"
|
|
60
|
+
- !ruby/object:Gem::Version
|
|
61
|
+
version: '8.2'
|
|
62
|
+
type: :runtime
|
|
63
|
+
prerelease: false
|
|
64
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
65
|
+
requirements:
|
|
66
|
+
- - ">="
|
|
67
|
+
- !ruby/object:Gem::Version
|
|
68
|
+
version: '7.1'
|
|
69
|
+
- - "<"
|
|
70
|
+
- !ruby/object:Gem::Version
|
|
71
|
+
version: '8.2'
|
|
72
|
+
description: 'PermissionForge stores permissions as Permission Sets that admins edit
|
|
73
|
+
at runtime: per-model CRUD flags and custom actions, per-field read/edit access
|
|
74
|
+
with masking, and row-level query rules. It applies them in your models (find_by,
|
|
75
|
+
permission_scoped, attribute readers and serialization) and controllers, caches
|
|
76
|
+
each user''s permissions in any Rails cache store, records every permission change
|
|
77
|
+
in an audit log, and ships an admin UI and an opt-in JSON admin API.'
|
|
78
|
+
email:
|
|
79
|
+
- fetijashari@gmail.com
|
|
80
|
+
executables: []
|
|
81
|
+
extensions: []
|
|
82
|
+
extra_rdoc_files: []
|
|
83
|
+
files:
|
|
84
|
+
- CHANGELOG.md
|
|
85
|
+
- LICENSE.txt
|
|
86
|
+
- README.md
|
|
87
|
+
- app/controllers/concerns/permission_forge/acting_admin.rb
|
|
88
|
+
- app/controllers/concerns/permission_forge/api/crud_actions.rb
|
|
89
|
+
- app/controllers/concerns/permission_forge/api/nested_resource_lookup.rb
|
|
90
|
+
- app/controllers/concerns/permission_forge/api/pagination.rb
|
|
91
|
+
- app/controllers/concerns/permission_forge/api/response_renderer.rb
|
|
92
|
+
- app/controllers/concerns/permission_forge/api/serializer_resolver.rb
|
|
93
|
+
- app/controllers/concerns/permission_forge/api_authentication.rb
|
|
94
|
+
- app/controllers/concerns/permission_forge/assignment_authorization.rb
|
|
95
|
+
- app/controllers/concerns/permission_forge/audit_log_gate.rb
|
|
96
|
+
- app/controllers/concerns/permission_forge/basic_authentication.rb
|
|
97
|
+
- app/controllers/concerns/permission_forge/cache_confirmation.rb
|
|
98
|
+
- app/controllers/concerns/permission_forge/forgery_protection.rb
|
|
99
|
+
- app/controllers/concerns/permission_forge/html_format.rb
|
|
100
|
+
- app/controllers/concerns/permission_forge/param_shapes.rb
|
|
101
|
+
- app/controllers/concerns/permission_forge/tenant_required.rb
|
|
102
|
+
- app/controllers/permission_forge/api/audit_events_controller.rb
|
|
103
|
+
- app/controllers/permission_forge/api/base_controller.rb
|
|
104
|
+
- app/controllers/permission_forge/api/dashboard_controller.rb
|
|
105
|
+
- app/controllers/permission_forge/api/permission_set_group_users_controller.rb
|
|
106
|
+
- app/controllers/permission_forge/api/permission_set_groups_controller.rb
|
|
107
|
+
- app/controllers/permission_forge/api/permission_set_rules_controller.rb
|
|
108
|
+
- app/controllers/permission_forge/api/permission_set_users_controller.rb
|
|
109
|
+
- app/controllers/permission_forge/api/permission_sets_controller.rb
|
|
110
|
+
- app/controllers/permission_forge/api/resource_actions_controller.rb
|
|
111
|
+
- app/controllers/permission_forge/api/resource_fields_controller.rb
|
|
112
|
+
- app/controllers/permission_forge/api/resources_controller.rb
|
|
113
|
+
- app/controllers/permission_forge/application_controller.rb
|
|
114
|
+
- app/controllers/permission_forge/assets_controller.rb
|
|
115
|
+
- app/controllers/permission_forge/assignments_controller.rb
|
|
116
|
+
- app/controllers/permission_forge/audit_events_controller.rb
|
|
117
|
+
- app/controllers/permission_forge/bulk_assignments_controller.rb
|
|
118
|
+
- app/controllers/permission_forge/field_lookups_controller.rb
|
|
119
|
+
- app/controllers/permission_forge/home_controller.rb
|
|
120
|
+
- app/controllers/permission_forge/maintenance_controller.rb
|
|
121
|
+
- app/controllers/permission_forge/people_controller.rb
|
|
122
|
+
- app/controllers/permission_forge/permission_set_editor.rb
|
|
123
|
+
- app/controllers/permission_forge/permission_set_group_users_controller.rb
|
|
124
|
+
- app/controllers/permission_forge/permission_set_groups_controller.rb
|
|
125
|
+
- app/controllers/permission_forge/permission_set_rules_controller.rb
|
|
126
|
+
- app/controllers/permission_forge/permission_sets_controller.rb
|
|
127
|
+
- app/controllers/permission_forge/preferences_controller.rb
|
|
128
|
+
- app/controllers/permission_forge/resource_actions_controller.rb
|
|
129
|
+
- app/controllers/permission_forge/resource_fields_controller.rb
|
|
130
|
+
- app/controllers/permission_forge/resources_controller.rb
|
|
131
|
+
- app/controllers/permission_forge/settings_controller.rb
|
|
132
|
+
- app/frontend/permission_forge/brand/apple-touch-icon.png
|
|
133
|
+
- app/frontend/permission_forge/brand/chevron.svg
|
|
134
|
+
- app/frontend/permission_forge/brand/favicon.ico
|
|
135
|
+
- app/frontend/permission_forge/brand/favicon.svg
|
|
136
|
+
- app/frontend/permission_forge/brand/logo-horizontal-dark.svg
|
|
137
|
+
- app/frontend/permission_forge/brand/logo-horizontal-light.svg
|
|
138
|
+
- app/frontend/permission_forge/brand/mark-small.svg
|
|
139
|
+
- app/frontend/permission_forge/brand/mark.svg
|
|
140
|
+
- app/frontend/permission_forge/pf_admin.css
|
|
141
|
+
- app/frontend/permission_forge/pf_admin.js
|
|
142
|
+
- app/helpers/permission_forge/application_helper.rb
|
|
143
|
+
- app/helpers/permission_forge/audit_helper.rb
|
|
144
|
+
- app/helpers/permission_forge/audit_sentences_helper.rb
|
|
145
|
+
- app/helpers/permission_forge/badges_helper.rb
|
|
146
|
+
- app/helpers/permission_forge/changes_helper.rb
|
|
147
|
+
- app/helpers/permission_forge/people_helper.rb
|
|
148
|
+
- app/helpers/permission_forge/sentences_helper.rb
|
|
149
|
+
- app/helpers/permission_forge/settings_helper.rb
|
|
150
|
+
- app/helpers/permission_forge/ui_helper.rb
|
|
151
|
+
- app/models/permission_forge/audit_event.rb
|
|
152
|
+
- app/models/permission_forge/permission_set.rb
|
|
153
|
+
- app/models/permission_forge/permission_set_group.rb
|
|
154
|
+
- app/models/permission_forge/permission_set_group_user.rb
|
|
155
|
+
- app/models/permission_forge/permission_set_rule.rb
|
|
156
|
+
- app/models/permission_forge/permission_set_user.rb
|
|
157
|
+
- app/models/permission_forge/resource.rb
|
|
158
|
+
- app/models/permission_forge/resource_action.rb
|
|
159
|
+
- app/models/permission_forge/resource_field.rb
|
|
160
|
+
- app/views/layouts/permission_forge/application.html.erb
|
|
161
|
+
- app/views/layouts/permission_forge/fragment.html.erb
|
|
162
|
+
- app/views/permission_forge/assignments/_person_options.html.erb
|
|
163
|
+
- app/views/permission_forge/assignments/confirm_destroy.html.erb
|
|
164
|
+
- app/views/permission_forge/assignments/new.html.erb
|
|
165
|
+
- app/views/permission_forge/audit_events/index.html.erb
|
|
166
|
+
- app/views/permission_forge/audit_events/show.html.erb
|
|
167
|
+
- app/views/permission_forge/bulk_assignments/confirm_revoke.html.erb
|
|
168
|
+
- app/views/permission_forge/bulk_assignments/new.html.erb
|
|
169
|
+
- app/views/permission_forge/field_lookups/show.html.erb
|
|
170
|
+
- app/views/permission_forge/home/_audit_card.html.erb
|
|
171
|
+
- app/views/permission_forge/home/_ending_card.html.erb
|
|
172
|
+
- app/views/permission_forge/home/_expired_card.html.erb
|
|
173
|
+
- app/views/permission_forge/home/_privacy_card.html.erb
|
|
174
|
+
- app/views/permission_forge/home/_rules_card.html.erb
|
|
175
|
+
- app/views/permission_forge/home/_stale_card.html.erb
|
|
176
|
+
- app/views/permission_forge/home/_tidy_card.html.erb
|
|
177
|
+
- app/views/permission_forge/home/index.html.erb
|
|
178
|
+
- app/views/permission_forge/people/_access_tab.html.erb
|
|
179
|
+
- app/views/permission_forge/people/_audit_tab.html.erb
|
|
180
|
+
- app/views/permission_forge/people/_effective_field_source.html.erb
|
|
181
|
+
- app/views/permission_forge/people/_effective_tab.html.erb
|
|
182
|
+
- app/views/permission_forge/people/_effective_why.html.erb
|
|
183
|
+
- app/views/permission_forge/people/_why_item.html.erb
|
|
184
|
+
- app/views/permission_forge/people/confirm_remove_all.html.erb
|
|
185
|
+
- app/views/permission_forge/people/consent_preview.html.erb
|
|
186
|
+
- app/views/permission_forge/people/erasure_preview.html.erb
|
|
187
|
+
- app/views/permission_forge/people/index.html.erb
|
|
188
|
+
- app/views/permission_forge/people/show.html.erb
|
|
189
|
+
- app/views/permission_forge/permission_set_groups/confirm_destroy.html.erb
|
|
190
|
+
- app/views/permission_forge/permission_set_groups/index.html.erb
|
|
191
|
+
- app/views/permission_forge/permission_set_groups/show.html.erb
|
|
192
|
+
- app/views/permission_forge/permission_set_rules/_builder.html.erb
|
|
193
|
+
- app/views/permission_forge/permission_set_rules/_value_input.html.erb
|
|
194
|
+
- app/views/permission_forge/permission_set_rules/confirm_destroy.html.erb
|
|
195
|
+
- app/views/permission_forge/permission_set_rules/edit.html.erb
|
|
196
|
+
- app/views/permission_forge/permission_set_rules/new.html.erb
|
|
197
|
+
- app/views/permission_forge/permission_sets/_assignments_tab.html.erb
|
|
198
|
+
- app/views/permission_forge/permission_sets/_audit_tab.html.erb
|
|
199
|
+
- app/views/permission_forge/permission_sets/_conditions_tab.html.erb
|
|
200
|
+
- app/views/permission_forge/permission_sets/_header.html.erb
|
|
201
|
+
- app/views/permission_forge/permission_sets/_records_summary.html.erb
|
|
202
|
+
- app/views/permission_forge/permission_sets/_resource_summary.html.erb
|
|
203
|
+
- app/views/permission_forge/permission_sets/_resources_tab.html.erb
|
|
204
|
+
- app/views/permission_forge/permission_sets/confirm_destroy.html.erb
|
|
205
|
+
- app/views/permission_forge/permission_sets/confirm_switch_mode.html.erb
|
|
206
|
+
- app/views/permission_forge/permission_sets/index.html.erb
|
|
207
|
+
- app/views/permission_forge/permission_sets/new.html.erb
|
|
208
|
+
- app/views/permission_forge/permission_sets/review.html.erb
|
|
209
|
+
- app/views/permission_forge/permission_sets/show.html.erb
|
|
210
|
+
- app/views/permission_forge/resource_actions/_across_sets.html.erb
|
|
211
|
+
- app/views/permission_forge/resource_actions/_add_select.html.erb
|
|
212
|
+
- app/views/permission_forge/resource_actions/_effect.html.erb
|
|
213
|
+
- app/views/permission_forge/resource_actions/_endpoints.html.erb
|
|
214
|
+
- app/views/permission_forge/resource_actions/_form.html.erb
|
|
215
|
+
- app/views/permission_forge/resource_actions/_managed_note.html.erb
|
|
216
|
+
- app/views/permission_forge/resource_actions/confirm_destroy.html.erb
|
|
217
|
+
- app/views/permission_forge/resource_actions/new.html.erb
|
|
218
|
+
- app/views/permission_forge/resource_actions/show.html.erb
|
|
219
|
+
- app/views/permission_forge/resource_fields/_explain.html.erb
|
|
220
|
+
- app/views/permission_forge/resource_fields/show.html.erb
|
|
221
|
+
- app/views/permission_forge/resources/_actions_tab.html.erb
|
|
222
|
+
- app/views/permission_forge/resources/_fields_tab.html.erb
|
|
223
|
+
- app/views/permission_forge/resources/_rules_tab.html.erb
|
|
224
|
+
- app/views/permission_forge/resources/_sync.html.erb
|
|
225
|
+
- app/views/permission_forge/resources/confirm_destroy.html.erb
|
|
226
|
+
- app/views/permission_forge/resources/new.html.erb
|
|
227
|
+
- app/views/permission_forge/resources/show.html.erb
|
|
228
|
+
- app/views/permission_forge/settings/_ladder.html.erb
|
|
229
|
+
- app/views/permission_forge/settings/_row.html.erb
|
|
230
|
+
- app/views/permission_forge/settings/show.html.erb
|
|
231
|
+
- app/views/permission_forge/shared/_across_sets.html.erb
|
|
232
|
+
- app/views/permission_forge/shared/_audit_events.html.erb
|
|
233
|
+
- app/views/permission_forge/shared/_audit_footer.html.erb
|
|
234
|
+
- app/views/permission_forge/shared/_audit_off_note.html.erb
|
|
235
|
+
- app/views/permission_forge/shared/_audit_pagination.html.erb
|
|
236
|
+
- app/views/permission_forge/shared/_audit_refused_note.html.erb
|
|
237
|
+
- app/views/permission_forge/shared/_audit_timeline.html.erb
|
|
238
|
+
- app/views/permission_forge/shared/_crud_cell.html.erb
|
|
239
|
+
- app/views/permission_forge/shared/_dialog_frame.html.erb
|
|
240
|
+
- app/views/permission_forge/shared/_expiry_picker.html.erb
|
|
241
|
+
- app/views/permission_forge/shared/_head_extra.html.erb
|
|
242
|
+
- app/views/permission_forge/shared/_help_banner.html.erb
|
|
243
|
+
- app/views/permission_forge/shared/_level_control.html.erb
|
|
244
|
+
- app/views/permission_forge/shared/_mode_banners.html.erb
|
|
245
|
+
- app/views/permission_forge/shared/_nav.html.erb
|
|
246
|
+
- app/views/permission_forge/shared/_preferences.html.erb
|
|
247
|
+
- app/views/permission_forge/shared/_reason_field.html.erb
|
|
248
|
+
- app/views/permission_forge/shared/_savebar.html.erb
|
|
249
|
+
- app/views/permission_forge/shared/_sheet_frame.html.erb
|
|
250
|
+
- app/views/permission_forge/shared/_sidebar.html.erb
|
|
251
|
+
- app/views/permission_forge/shared/_tech_details.html.erb
|
|
252
|
+
- app/views/permission_forge/shared/_toasts.html.erb
|
|
253
|
+
- app/views/permission_forge/shared/_topbar.html.erb
|
|
254
|
+
- app/views/permission_forge/shared/_user_select.html.erb
|
|
255
|
+
- app/views/permission_forge/shared/audit_refused.html.erb
|
|
256
|
+
- config/locales/permission_forge.en.yml
|
|
257
|
+
- config/locales/permission_forge.mk.yml
|
|
258
|
+
- config/locales/permission_forge.sq.yml
|
|
259
|
+
- config/routes.rb
|
|
260
|
+
- lib/generators/permission_forge/install/install_generator.rb
|
|
261
|
+
- lib/generators/permission_forge/install/templates/initializer.rb.tt
|
|
262
|
+
- lib/generators/permission_forge/install/templates/migration.rb.tt
|
|
263
|
+
- lib/generators/permission_forge/rls/rls_generator.rb
|
|
264
|
+
- lib/generators/permission_forge/rls/templates/enable_permission_forge_rls.rb.tt
|
|
265
|
+
- lib/generators/permission_forge/upgrade/templates/add_admin_ui_columns.rb.tt
|
|
266
|
+
- lib/generators/permission_forge/upgrade/templates/add_audit_events.rb.tt
|
|
267
|
+
- lib/generators/permission_forge/upgrade/templates/add_resource_fields_unique_index.rb.tt
|
|
268
|
+
- lib/generators/permission_forge/upgrade/upgrade_generator.rb
|
|
269
|
+
- lib/permission_forge.rb
|
|
270
|
+
- lib/permission_forge/admin/action_across_sets.rb
|
|
271
|
+
- lib/permission_forge/admin/action_rows.rb
|
|
272
|
+
- lib/permission_forge/admin/attention_items.rb
|
|
273
|
+
- lib/permission_forge/admin/audit_event_detail.rb
|
|
274
|
+
- lib/permission_forge/admin/audit_log.rb
|
|
275
|
+
- lib/permission_forge/admin/audit_log_days.rb
|
|
276
|
+
- lib/permission_forge/admin/audit_lookups.rb
|
|
277
|
+
- lib/permission_forge/admin/audit_name_history.rb
|
|
278
|
+
- lib/permission_forge/admin/audit_trail.rb
|
|
279
|
+
- lib/permission_forge/admin/bulk_people_matcher.rb
|
|
280
|
+
- lib/permission_forge/admin/change_set.rb
|
|
281
|
+
- lib/permission_forge/admin/change_set_parts/actions.rb
|
|
282
|
+
- lib/permission_forge/admin/change_set_parts/base.rb
|
|
283
|
+
- lib/permission_forge/admin/change_set_parts/context.rb
|
|
284
|
+
- lib/permission_forge/admin/change_set_parts/field_edit.rb
|
|
285
|
+
- lib/permission_forge/admin/change_set_parts/field_levels.rb
|
|
286
|
+
- lib/permission_forge/admin/change_set_parts/new_actions.rb
|
|
287
|
+
- lib/permission_forge/admin/change_set_parts/new_fields.rb
|
|
288
|
+
- lib/permission_forge/admin/change_set_parts/resource_edit.rb
|
|
289
|
+
- lib/permission_forge/admin/change_set_parts/resource_flags.rb
|
|
290
|
+
- lib/permission_forge/admin/change_set_parts/set_attrs.rb
|
|
291
|
+
- lib/permission_forge/admin/change_set_parts/values.rb
|
|
292
|
+
- lib/permission_forge/admin/column_fields.rb
|
|
293
|
+
- lib/permission_forge/admin/conditions_form.rb
|
|
294
|
+
- lib/permission_forge/admin/controller_catalog.rb
|
|
295
|
+
- lib/permission_forge/admin/csv.rb
|
|
296
|
+
- lib/permission_forge/admin/editable_lock.rb
|
|
297
|
+
- lib/permission_forge/admin/effective_access.rb
|
|
298
|
+
- lib/permission_forge/admin/effective_fields.rb
|
|
299
|
+
- lib/permission_forge/admin/expiry_presets.rb
|
|
300
|
+
- lib/permission_forge/admin/exports.rb
|
|
301
|
+
- lib/permission_forge/admin/exports/document.rb
|
|
302
|
+
- lib/permission_forge/admin/exports/events.rb
|
|
303
|
+
- lib/permission_forge/admin/exports/holdings.rb
|
|
304
|
+
- lib/permission_forge/admin/field_across_sets.rb
|
|
305
|
+
- lib/permission_forge/admin/field_detail.rb
|
|
306
|
+
- lib/permission_forge/admin/field_level.rb
|
|
307
|
+
- lib/permission_forge/admin/field_rows.rb
|
|
308
|
+
- lib/permission_forge/admin/last_changes.rb
|
|
309
|
+
- lib/permission_forge/admin/model_catalog.rb
|
|
310
|
+
- lib/permission_forge/admin/people_candidates.rb
|
|
311
|
+
- lib/permission_forge/admin/people_directory.rb
|
|
312
|
+
- lib/permission_forge/admin/permission_set_factory.rb
|
|
313
|
+
- lib/permission_forge/admin/person_label.rb
|
|
314
|
+
- lib/permission_forge/admin/record_id.rb
|
|
315
|
+
- lib/permission_forge/admin/rule_builder.rb
|
|
316
|
+
- lib/permission_forge/admin/rule_form.rb
|
|
317
|
+
- lib/permission_forge/admin/rule_form_input.rb
|
|
318
|
+
- lib/permission_forge/admin/sensitive_columns.rb
|
|
319
|
+
- lib/permission_forge/admin/settings_catalog.rb
|
|
320
|
+
- lib/permission_forge/admin/settings_values.rb
|
|
321
|
+
- lib/permission_forge/api/serializers/audit_event_serializer.rb
|
|
322
|
+
- lib/permission_forge/api/serializers/base_serializer.rb
|
|
323
|
+
- lib/permission_forge/api/serializers/permission_set_group_serializer.rb
|
|
324
|
+
- lib/permission_forge/api/serializers/permission_set_group_user_serializer.rb
|
|
325
|
+
- lib/permission_forge/api/serializers/permission_set_rule_serializer.rb
|
|
326
|
+
- lib/permission_forge/api/serializers/permission_set_serializer.rb
|
|
327
|
+
- lib/permission_forge/api/serializers/permission_set_user_serializer.rb
|
|
328
|
+
- lib/permission_forge/api/serializers/resource_action_serializer.rb
|
|
329
|
+
- lib/permission_forge/api/serializers/resource_field_serializer.rb
|
|
330
|
+
- lib/permission_forge/api/serializers/resource_serializer.rb
|
|
331
|
+
- lib/permission_forge/audit.rb
|
|
332
|
+
- lib/permission_forge/audit/actor.rb
|
|
333
|
+
- lib/permission_forge/audit/actor_resolver.rb
|
|
334
|
+
- lib/permission_forge/audit/audited_views.rb
|
|
335
|
+
- lib/permission_forge/audit/boot_warnings.rb
|
|
336
|
+
- lib/permission_forge/audit/column_values.rb
|
|
337
|
+
- lib/permission_forge/audit/context.rb
|
|
338
|
+
- lib/permission_forge/audit/detached.rb
|
|
339
|
+
- lib/permission_forge/audit/event_catalog.rb
|
|
340
|
+
- lib/permission_forge/audit/event_query.rb
|
|
341
|
+
- lib/permission_forge/audit/failure.rb
|
|
342
|
+
- lib/permission_forge/audit/field_access.rb
|
|
343
|
+
- lib/permission_forge/audit/gate.rb
|
|
344
|
+
- lib/permission_forge/audit/job_context.rb
|
|
345
|
+
- lib/permission_forge/audit/log_access.rb
|
|
346
|
+
- lib/permission_forge/audit/recorder.rb
|
|
347
|
+
- lib/permission_forge/audit/refusals.rb
|
|
348
|
+
- lib/permission_forge/audit/request_context.rb
|
|
349
|
+
- lib/permission_forge/audit/runtime.rb
|
|
350
|
+
- lib/permission_forge/audit/runtime_emission.rb
|
|
351
|
+
- lib/permission_forge/audit/settings_observer.rb
|
|
352
|
+
- lib/permission_forge/audit/source.rb
|
|
353
|
+
- lib/permission_forge/audit/subscribers.rb
|
|
354
|
+
- lib/permission_forge/audit/subscribers/base.rb
|
|
355
|
+
- lib/permission_forge/audit/subscribers/legacy_hooks.rb
|
|
356
|
+
- lib/permission_forge/audit/subscribers/log.rb
|
|
357
|
+
- lib/permission_forge/boot_checks.rb
|
|
358
|
+
- lib/permission_forge/cache/backlog.rb
|
|
359
|
+
- lib/permission_forge/cache/base.rb
|
|
360
|
+
- lib/permission_forge/cache/bulk_invalidation.rb
|
|
361
|
+
- lib/permission_forge/cache/failure.rb
|
|
362
|
+
- lib/permission_forge/cache/handled_errors.rb
|
|
363
|
+
- lib/permission_forge/cache/holder_invalidation.rb
|
|
364
|
+
- lib/permission_forge/cache/invalidation.rb
|
|
365
|
+
- lib/permission_forge/cache/memory_cache.rb
|
|
366
|
+
- lib/permission_forge/cache/null_cache.rb
|
|
367
|
+
- lib/permission_forge/cache/rails_cache.rb
|
|
368
|
+
- lib/permission_forge/cache/rebuild.rb
|
|
369
|
+
- lib/permission_forge/cache/settlement.rb
|
|
370
|
+
- lib/permission_forge/cache/user_keys.rb
|
|
371
|
+
- lib/permission_forge/cache/variant_removal.rb
|
|
372
|
+
- lib/permission_forge/cache/withheld_notice.rb
|
|
373
|
+
- lib/permission_forge/concerns/audited_collection.rb
|
|
374
|
+
- lib/permission_forge/concerns/auto_permission_scoping.rb
|
|
375
|
+
- lib/permission_forge/concerns/controller_action_guard.rb
|
|
376
|
+
- lib/permission_forge/concerns/field_mask_checker.rb
|
|
377
|
+
- lib/permission_forge/concerns/has_active_scope.rb
|
|
378
|
+
- lib/permission_forge/concerns/has_audit_trail.rb
|
|
379
|
+
- lib/permission_forge/concerns/has_permission_set_users.rb
|
|
380
|
+
- lib/permission_forge/concerns/has_tenant_scoping.rb
|
|
381
|
+
- lib/permission_forge/concerns/has_uuid.rb
|
|
382
|
+
- lib/permission_forge/concerns/invalidates_in_batch.rb
|
|
383
|
+
- lib/permission_forge/concerns/invalidates_managed_actions.rb
|
|
384
|
+
- lib/permission_forge/concerns/masked_attributes.rb
|
|
385
|
+
- lib/permission_forge/concerns/masked_attributes/alias_access.rb
|
|
386
|
+
- lib/permission_forge/concerns/masked_attributes/store_access.rb
|
|
387
|
+
- lib/permission_forge/concerns/masked_attributes/validation_reads.rb
|
|
388
|
+
- lib/permission_forge/concerns/masked_attributes/virtual_readers.rb
|
|
389
|
+
- lib/permission_forge/concerns/permission_cache_accessor.rb
|
|
390
|
+
- lib/permission_forge/concerns/permission_scoped_findable.rb
|
|
391
|
+
- lib/permission_forge/concerns/permissioned_user.rb
|
|
392
|
+
- lib/permission_forge/concerns/permissions_memo.rb
|
|
393
|
+
- lib/permission_forge/concerns/permissions_per_context.rb
|
|
394
|
+
- lib/permission_forge/concerns/permissions_regenerator.rb
|
|
395
|
+
- lib/permission_forge/concerns/records_audit_events.rb
|
|
396
|
+
- lib/permission_forge/concerns/resource_permission_checker.rb
|
|
397
|
+
- lib/permission_forge/concerns/validates_column_lengths.rb
|
|
398
|
+
- lib/permission_forge/concerns/validates_dependency.rb
|
|
399
|
+
- lib/permission_forge/conditional_sets.rb
|
|
400
|
+
- lib/permission_forge/configuration.rb
|
|
401
|
+
- lib/permission_forge/configuration/admin_ui_settings.rb
|
|
402
|
+
- lib/permission_forge/configuration/audit_settings.rb
|
|
403
|
+
- lib/permission_forge/configuration/cache_settings.rb
|
|
404
|
+
- lib/permission_forge/configuration/controller_action_settings.rb
|
|
405
|
+
- lib/permission_forge/configuration/gdpr_settings.rb
|
|
406
|
+
- lib/permission_forge/configuration/masked_attributes_settings.rb
|
|
407
|
+
- lib/permission_forge/configuration/permits_attributes_settings.rb
|
|
408
|
+
- lib/permission_forge/configuration/presets.rb
|
|
409
|
+
- lib/permission_forge/configuration/query_scoping_settings.rb
|
|
410
|
+
- lib/permission_forge/configuration/strategy_values.rb
|
|
411
|
+
- lib/permission_forge/configuration/virtual_attributes_settings.rb
|
|
412
|
+
- lib/permission_forge/controller_actions.rb
|
|
413
|
+
- lib/permission_forge/controller_actions/authorizer.rb
|
|
414
|
+
- lib/permission_forge/controller_actions/managed_index.rb
|
|
415
|
+
- lib/permission_forge/controller_actions/mapping.rb
|
|
416
|
+
- lib/permission_forge/deprecation.rb
|
|
417
|
+
- lib/permission_forge/engine.rb
|
|
418
|
+
- lib/permission_forge/execution_state.rb
|
|
419
|
+
- lib/permission_forge/invalidation_batch.rb
|
|
420
|
+
- lib/permission_forge/masked_models.rb
|
|
421
|
+
- lib/permission_forge/masking_sync.rb
|
|
422
|
+
- lib/permission_forge/model_bindings.rb
|
|
423
|
+
- lib/permission_forge/open_transaction.rb
|
|
424
|
+
- lib/permission_forge/operators/constants.rb
|
|
425
|
+
- lib/permission_forge/operators/registry.rb
|
|
426
|
+
- lib/permission_forge/operators/rule_column.rb
|
|
427
|
+
- lib/permission_forge/operators/validations.rb
|
|
428
|
+
- lib/permission_forge/operators/value_casters.rb
|
|
429
|
+
- lib/permission_forge/operators/value_casters/number.rb
|
|
430
|
+
- lib/permission_forge/operators/value_casters/temporal.rb
|
|
431
|
+
- lib/permission_forge/operators/value_typing.rb
|
|
432
|
+
- lib/permission_forge/query_scoping_warnings.rb
|
|
433
|
+
- lib/permission_forge/rake_audit.rb
|
|
434
|
+
- lib/permission_forge/resource_chain.rb
|
|
435
|
+
- lib/permission_forge/rls.rb
|
|
436
|
+
- lib/permission_forge/services/attribute_access_guard.rb
|
|
437
|
+
- lib/permission_forge/services/audit_event_purger.rb
|
|
438
|
+
- lib/permission_forge/services/bulk_permission_set_assignment.rb
|
|
439
|
+
- lib/permission_forge/services/concerns/across_tenants.rb
|
|
440
|
+
- lib/permission_forge/services/concerns/audited_operation.rb
|
|
441
|
+
- lib/permission_forge/services/concerns/clonable.rb
|
|
442
|
+
- lib/permission_forge/services/consent_withdrawal_handler.rb
|
|
443
|
+
- lib/permission_forge/services/dashboard_stats.rb
|
|
444
|
+
- lib/permission_forge/services/data_subject_erasure.rb
|
|
445
|
+
- lib/permission_forge/services/expired_assignment_cleaner.rb
|
|
446
|
+
- lib/permission_forge/services/extra_field_defaults.rb
|
|
447
|
+
- lib/permission_forge/services/field_permission_merger.rb
|
|
448
|
+
- lib/permission_forge/services/filters_response_attributes.rb
|
|
449
|
+
- lib/permission_forge/services/gdpr_field_auditor.rb
|
|
450
|
+
- lib/permission_forge/services/gdpr_field_auditor/text_report.rb
|
|
451
|
+
- lib/permission_forge/services/host_key_guard.rb
|
|
452
|
+
- lib/permission_forge/services/mask_value.rb
|
|
453
|
+
- lib/permission_forge/services/permission_cache_clearer.rb
|
|
454
|
+
- lib/permission_forge/services/permission_hash_builder.rb
|
|
455
|
+
- lib/permission_forge/services/permission_rule_applier.rb
|
|
456
|
+
- lib/permission_forge/services/permission_set_cloner.rb
|
|
457
|
+
- lib/permission_forge/services/permission_set_condition_evaluator.rb
|
|
458
|
+
- lib/permission_forge/services/permission_set_group_cloner.rb
|
|
459
|
+
- lib/permission_forge/services/permits_attributes.rb
|
|
460
|
+
- lib/permission_forge/services/permits_attributes/nested_records.rb
|
|
461
|
+
- lib/permission_forge/services/resource_field_generator.rb
|
|
462
|
+
- lib/permission_forge/services/resource_with_fields_builder.rb
|
|
463
|
+
- lib/permission_forge/services/rls_operator_sql.rb
|
|
464
|
+
- lib/permission_forge/services/rls_policy_generator.rb
|
|
465
|
+
- lib/permission_forge/services/security_audit.rb
|
|
466
|
+
- lib/permission_forge/services/security_audit/action_check.rb
|
|
467
|
+
- lib/permission_forge/services/security_audit/assignment_check.rb
|
|
468
|
+
- lib/permission_forge/services/security_audit/audit_trail_check.rb
|
|
469
|
+
- lib/permission_forge/services/security_audit/base_check.rb
|
|
470
|
+
- lib/permission_forge/services/security_audit/config_check.rb
|
|
471
|
+
- lib/permission_forge/services/security_audit/integrity_check.rb
|
|
472
|
+
- lib/permission_forge/services/security_audit/personal_data_check.rb
|
|
473
|
+
- lib/permission_forge/services/security_audit/privilege_check.rb
|
|
474
|
+
- lib/permission_forge/services/security_audit/rule_check.rb
|
|
475
|
+
- lib/permission_forge/services/security_audit/text_report.rb
|
|
476
|
+
- lib/permission_forge/services/security_audit/user_model_check.rb
|
|
477
|
+
- lib/permission_forge/services/stale_assignment_auditor.rb
|
|
478
|
+
- lib/permission_forge/services/unscoped_query_detector.rb
|
|
479
|
+
- lib/permission_forge/version.rb
|
|
480
|
+
- lib/permission_forge/virtual_fields.rb
|
|
481
|
+
- lib/permission_forge/virtual_fields/discovery.rb
|
|
482
|
+
- lib/tasks/permission_forge.rake
|
|
483
|
+
- lib/tasks/permission_forge_audit_events.rake
|
|
484
|
+
- lib/tasks/permission_forge_cache.rake
|
|
485
|
+
- lib/tasks/permission_forge_expiration.rake
|
|
486
|
+
- lib/tasks/permission_forge_gdpr.rake
|
|
487
|
+
- lib/tasks/permission_forge_rls.rake
|
|
488
|
+
homepage: https://github.com/fetijashari/permission_forge
|
|
489
|
+
licenses:
|
|
490
|
+
- MIT
|
|
491
|
+
metadata:
|
|
492
|
+
source_code_uri: https://github.com/fetijashari/permission_forge
|
|
493
|
+
changelog_uri: https://github.com/fetijashari/permission_forge/blob/main/CHANGELOG.md
|
|
494
|
+
documentation_uri: https://github.com/fetijashari/permission_forge/tree/main/docs
|
|
495
|
+
bug_tracker_uri: https://github.com/fetijashari/permission_forge/issues
|
|
496
|
+
rubygems_mfa_required: 'true'
|
|
497
|
+
rdoc_options: []
|
|
498
|
+
require_paths:
|
|
499
|
+
- lib
|
|
500
|
+
required_ruby_version: !ruby/object:Gem::Requirement
|
|
501
|
+
requirements:
|
|
502
|
+
- - ">="
|
|
503
|
+
- !ruby/object:Gem::Version
|
|
504
|
+
version: '3.2'
|
|
505
|
+
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
506
|
+
requirements:
|
|
507
|
+
- - ">="
|
|
508
|
+
- !ruby/object:Gem::Version
|
|
509
|
+
version: '0'
|
|
510
|
+
requirements: []
|
|
511
|
+
rubygems_version: 3.6.9
|
|
512
|
+
specification_version: 4
|
|
513
|
+
summary: 'Database-backed permissions for Rails: resource CRUD, field-level access
|
|
514
|
+
and masking, row-level rules'
|
|
515
|
+
test_files: []
|