permission_forge 0.14.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (406) hide show
  1. checksums.yaml +7 -0
  2. data/CHANGELOG.md +1138 -0
  3. data/LICENSE.txt +21 -0
  4. data/README.md +356 -0
  5. data/app/controllers/concerns/permission_forge/acting_admin.rb +17 -0
  6. data/app/controllers/concerns/permission_forge/api/crud_actions.rb +84 -0
  7. data/app/controllers/concerns/permission_forge/api/nested_resource_lookup.rb +18 -0
  8. data/app/controllers/concerns/permission_forge/api/pagination.rb +50 -0
  9. data/app/controllers/concerns/permission_forge/api/response_renderer.rb +65 -0
  10. data/app/controllers/concerns/permission_forge/api/serializer_resolver.rb +30 -0
  11. data/app/controllers/concerns/permission_forge/api_authentication.rb +40 -0
  12. data/app/controllers/concerns/permission_forge/assignment_authorization.rb +97 -0
  13. data/app/controllers/concerns/permission_forge/audit_log_gate.rb +55 -0
  14. data/app/controllers/concerns/permission_forge/basic_authentication.rb +77 -0
  15. data/app/controllers/concerns/permission_forge/cache_confirmation.rb +32 -0
  16. data/app/controllers/concerns/permission_forge/forgery_protection.rb +29 -0
  17. data/app/controllers/concerns/permission_forge/html_format.rb +40 -0
  18. data/app/controllers/concerns/permission_forge/param_shapes.rb +87 -0
  19. data/app/controllers/concerns/permission_forge/tenant_required.rb +42 -0
  20. data/app/controllers/permission_forge/api/audit_events_controller.rb +33 -0
  21. data/app/controllers/permission_forge/api/base_controller.rb +220 -0
  22. data/app/controllers/permission_forge/api/dashboard_controller.rb +30 -0
  23. data/app/controllers/permission_forge/api/permission_set_group_users_controller.rb +51 -0
  24. data/app/controllers/permission_forge/api/permission_set_groups_controller.rb +71 -0
  25. data/app/controllers/permission_forge/api/permission_set_rules_controller.rb +37 -0
  26. data/app/controllers/permission_forge/api/permission_set_users_controller.rb +105 -0
  27. data/app/controllers/permission_forge/api/permission_sets_controller.rb +87 -0
  28. data/app/controllers/permission_forge/api/resource_actions_controller.rb +58 -0
  29. data/app/controllers/permission_forge/api/resource_fields_controller.rb +30 -0
  30. data/app/controllers/permission_forge/api/resources_controller.rb +56 -0
  31. data/app/controllers/permission_forge/application_controller.rb +198 -0
  32. data/app/controllers/permission_forge/assets_controller.rb +97 -0
  33. data/app/controllers/permission_forge/assignments_controller.rb +266 -0
  34. data/app/controllers/permission_forge/audit_events_controller.rb +94 -0
  35. data/app/controllers/permission_forge/bulk_assignments_controller.rb +108 -0
  36. data/app/controllers/permission_forge/field_lookups_controller.rb +38 -0
  37. data/app/controllers/permission_forge/home_controller.rb +24 -0
  38. data/app/controllers/permission_forge/maintenance_controller.rb +13 -0
  39. data/app/controllers/permission_forge/people_controller.rb +190 -0
  40. data/app/controllers/permission_forge/permission_set_editor.rb +71 -0
  41. data/app/controllers/permission_forge/permission_set_group_users_controller.rb +57 -0
  42. data/app/controllers/permission_forge/permission_set_groups_controller.rb +111 -0
  43. data/app/controllers/permission_forge/permission_set_rules_controller.rb +97 -0
  44. data/app/controllers/permission_forge/permission_sets_controller.rb +227 -0
  45. data/app/controllers/permission_forge/preferences_controller.rb +26 -0
  46. data/app/controllers/permission_forge/resource_actions_controller.rb +106 -0
  47. data/app/controllers/permission_forge/resource_fields_controller.rb +129 -0
  48. data/app/controllers/permission_forge/resources_controller.rb +189 -0
  49. data/app/controllers/permission_forge/settings_controller.rb +33 -0
  50. data/app/frontend/permission_forge/brand/apple-touch-icon.png +0 -0
  51. data/app/frontend/permission_forge/brand/chevron.svg +1 -0
  52. data/app/frontend/permission_forge/brand/favicon.ico +0 -0
  53. data/app/frontend/permission_forge/brand/favicon.svg +1 -0
  54. data/app/frontend/permission_forge/brand/logo-horizontal-dark.svg +1 -0
  55. data/app/frontend/permission_forge/brand/logo-horizontal-light.svg +1 -0
  56. data/app/frontend/permission_forge/brand/mark-small.svg +1 -0
  57. data/app/frontend/permission_forge/brand/mark.svg +1 -0
  58. data/app/frontend/permission_forge/pf_admin.css +766 -0
  59. data/app/frontend/permission_forge/pf_admin.js +482 -0
  60. data/app/helpers/permission_forge/application_helper.rb +167 -0
  61. data/app/helpers/permission_forge/audit_helper.rb +230 -0
  62. data/app/helpers/permission_forge/audit_sentences_helper.rb +84 -0
  63. data/app/helpers/permission_forge/badges_helper.rb +134 -0
  64. data/app/helpers/permission_forge/changes_helper.rb +117 -0
  65. data/app/helpers/permission_forge/people_helper.rb +118 -0
  66. data/app/helpers/permission_forge/sentences_helper.rb +175 -0
  67. data/app/helpers/permission_forge/settings_helper.rb +152 -0
  68. data/app/helpers/permission_forge/ui_helper.rb +184 -0
  69. data/app/models/permission_forge/audit_event.rb +159 -0
  70. data/app/models/permission_forge/permission_set.rb +100 -0
  71. data/app/models/permission_forge/permission_set_group.rb +83 -0
  72. data/app/models/permission_forge/permission_set_group_user.rb +43 -0
  73. data/app/models/permission_forge/permission_set_rule.rb +99 -0
  74. data/app/models/permission_forge/permission_set_user.rb +158 -0
  75. data/app/models/permission_forge/resource.rb +100 -0
  76. data/app/models/permission_forge/resource_action.rb +58 -0
  77. data/app/models/permission_forge/resource_field.rb +69 -0
  78. data/app/views/layouts/permission_forge/application.html.erb +30 -0
  79. data/app/views/layouts/permission_forge/fragment.html.erb +2 -0
  80. data/app/views/permission_forge/assignments/_person_options.html.erb +26 -0
  81. data/app/views/permission_forge/assignments/confirm_destroy.html.erb +24 -0
  82. data/app/views/permission_forge/assignments/new.html.erb +99 -0
  83. data/app/views/permission_forge/audit_events/index.html.erb +161 -0
  84. data/app/views/permission_forge/audit_events/show.html.erb +146 -0
  85. data/app/views/permission_forge/bulk_assignments/confirm_revoke.html.erb +21 -0
  86. data/app/views/permission_forge/bulk_assignments/new.html.erb +69 -0
  87. data/app/views/permission_forge/field_lookups/show.html.erb +32 -0
  88. data/app/views/permission_forge/home/_audit_card.html.erb +19 -0
  89. data/app/views/permission_forge/home/_ending_card.html.erb +32 -0
  90. data/app/views/permission_forge/home/_expired_card.html.erb +34 -0
  91. data/app/views/permission_forge/home/_privacy_card.html.erb +67 -0
  92. data/app/views/permission_forge/home/_rules_card.html.erb +23 -0
  93. data/app/views/permission_forge/home/_stale_card.html.erb +39 -0
  94. data/app/views/permission_forge/home/_tidy_card.html.erb +18 -0
  95. data/app/views/permission_forge/home/index.html.erb +69 -0
  96. data/app/views/permission_forge/people/_access_tab.html.erb +58 -0
  97. data/app/views/permission_forge/people/_audit_tab.html.erb +93 -0
  98. data/app/views/permission_forge/people/_effective_field_source.html.erb +11 -0
  99. data/app/views/permission_forge/people/_effective_tab.html.erb +118 -0
  100. data/app/views/permission_forge/people/_effective_why.html.erb +48 -0
  101. data/app/views/permission_forge/people/_why_item.html.erb +19 -0
  102. data/app/views/permission_forge/people/confirm_remove_all.html.erb +27 -0
  103. data/app/views/permission_forge/people/consent_preview.html.erb +39 -0
  104. data/app/views/permission_forge/people/erasure_preview.html.erb +28 -0
  105. data/app/views/permission_forge/people/index.html.erb +78 -0
  106. data/app/views/permission_forge/people/show.html.erb +54 -0
  107. data/app/views/permission_forge/permission_set_groups/confirm_destroy.html.erb +12 -0
  108. data/app/views/permission_forge/permission_set_groups/index.html.erb +55 -0
  109. data/app/views/permission_forge/permission_set_groups/show.html.erb +100 -0
  110. data/app/views/permission_forge/permission_set_rules/_builder.html.erb +145 -0
  111. data/app/views/permission_forge/permission_set_rules/_value_input.html.erb +42 -0
  112. data/app/views/permission_forge/permission_set_rules/confirm_destroy.html.erb +13 -0
  113. data/app/views/permission_forge/permission_set_rules/edit.html.erb +3 -0
  114. data/app/views/permission_forge/permission_set_rules/new.html.erb +3 -0
  115. data/app/views/permission_forge/permission_sets/_assignments_tab.html.erb +74 -0
  116. data/app/views/permission_forge/permission_sets/_audit_tab.html.erb +80 -0
  117. data/app/views/permission_forge/permission_sets/_conditions_tab.html.erb +83 -0
  118. data/app/views/permission_forge/permission_sets/_header.html.erb +36 -0
  119. data/app/views/permission_forge/permission_sets/_records_summary.html.erb +16 -0
  120. data/app/views/permission_forge/permission_sets/_resource_summary.html.erb +11 -0
  121. data/app/views/permission_forge/permission_sets/_resources_tab.html.erb +49 -0
  122. data/app/views/permission_forge/permission_sets/confirm_destroy.html.erb +23 -0
  123. data/app/views/permission_forge/permission_sets/confirm_switch_mode.html.erb +15 -0
  124. data/app/views/permission_forge/permission_sets/index.html.erb +83 -0
  125. data/app/views/permission_forge/permission_sets/new.html.erb +63 -0
  126. data/app/views/permission_forge/permission_sets/review.html.erb +26 -0
  127. data/app/views/permission_forge/permission_sets/show.html.erb +50 -0
  128. data/app/views/permission_forge/resource_actions/_across_sets.html.erb +24 -0
  129. data/app/views/permission_forge/resource_actions/_add_select.html.erb +12 -0
  130. data/app/views/permission_forge/resource_actions/_effect.html.erb +25 -0
  131. data/app/views/permission_forge/resource_actions/_endpoints.html.erb +16 -0
  132. data/app/views/permission_forge/resource_actions/_form.html.erb +44 -0
  133. data/app/views/permission_forge/resource_actions/_managed_note.html.erb +11 -0
  134. data/app/views/permission_forge/resource_actions/confirm_destroy.html.erb +13 -0
  135. data/app/views/permission_forge/resource_actions/new.html.erb +31 -0
  136. data/app/views/permission_forge/resource_actions/show.html.erb +39 -0
  137. data/app/views/permission_forge/resource_fields/_explain.html.erb +24 -0
  138. data/app/views/permission_forge/resource_fields/show.html.erb +186 -0
  139. data/app/views/permission_forge/resources/_actions_tab.html.erb +88 -0
  140. data/app/views/permission_forge/resources/_fields_tab.html.erb +89 -0
  141. data/app/views/permission_forge/resources/_rules_tab.html.erb +55 -0
  142. data/app/views/permission_forge/resources/_sync.html.erb +57 -0
  143. data/app/views/permission_forge/resources/confirm_destroy.html.erb +17 -0
  144. data/app/views/permission_forge/resources/new.html.erb +57 -0
  145. data/app/views/permission_forge/resources/show.html.erb +117 -0
  146. data/app/views/permission_forge/settings/_ladder.html.erb +15 -0
  147. data/app/views/permission_forge/settings/_row.html.erb +38 -0
  148. data/app/views/permission_forge/settings/show.html.erb +67 -0
  149. data/app/views/permission_forge/shared/_across_sets.html.erb +31 -0
  150. data/app/views/permission_forge/shared/_audit_events.html.erb +36 -0
  151. data/app/views/permission_forge/shared/_audit_footer.html.erb +16 -0
  152. data/app/views/permission_forge/shared/_audit_off_note.html.erb +15 -0
  153. data/app/views/permission_forge/shared/_audit_pagination.html.erb +19 -0
  154. data/app/views/permission_forge/shared/_audit_refused_note.html.erb +7 -0
  155. data/app/views/permission_forge/shared/_audit_timeline.html.erb +29 -0
  156. data/app/views/permission_forge/shared/_crud_cell.html.erb +18 -0
  157. data/app/views/permission_forge/shared/_dialog_frame.html.erb +11 -0
  158. data/app/views/permission_forge/shared/_expiry_picker.html.erb +27 -0
  159. data/app/views/permission_forge/shared/_head_extra.html.erb +3 -0
  160. data/app/views/permission_forge/shared/_help_banner.html.erb +10 -0
  161. data/app/views/permission_forge/shared/_level_control.html.erb +18 -0
  162. data/app/views/permission_forge/shared/_mode_banners.html.erb +22 -0
  163. data/app/views/permission_forge/shared/_nav.html.erb +12 -0
  164. data/app/views/permission_forge/shared/_preferences.html.erb +24 -0
  165. data/app/views/permission_forge/shared/_reason_field.html.erb +20 -0
  166. data/app/views/permission_forge/shared/_savebar.html.erb +13 -0
  167. data/app/views/permission_forge/shared/_sheet_frame.html.erb +22 -0
  168. data/app/views/permission_forge/shared/_sidebar.html.erb +18 -0
  169. data/app/views/permission_forge/shared/_tech_details.html.erb +20 -0
  170. data/app/views/permission_forge/shared/_toasts.html.erb +27 -0
  171. data/app/views/permission_forge/shared/_topbar.html.erb +15 -0
  172. data/app/views/permission_forge/shared/_user_select.html.erb +16 -0
  173. data/app/views/permission_forge/shared/audit_refused.html.erb +7 -0
  174. data/config/locales/permission_forge.en.yml +2115 -0
  175. data/config/locales/permission_forge.mk.yml +2166 -0
  176. data/config/locales/permission_forge.sq.yml +2164 -0
  177. data/config/routes.rb +143 -0
  178. data/lib/generators/permission_forge/install/install_generator.rb +105 -0
  179. data/lib/generators/permission_forge/install/templates/initializer.rb.tt +148 -0
  180. data/lib/generators/permission_forge/install/templates/migration.rb.tt +198 -0
  181. data/lib/generators/permission_forge/rls/rls_generator.rb +57 -0
  182. data/lib/generators/permission_forge/rls/templates/enable_permission_forge_rls.rb.tt +15 -0
  183. data/lib/generators/permission_forge/upgrade/templates/add_admin_ui_columns.rb.tt +8 -0
  184. data/lib/generators/permission_forge/upgrade/templates/add_audit_events.rb.tt +98 -0
  185. data/lib/generators/permission_forge/upgrade/templates/add_resource_fields_unique_index.rb.tt +69 -0
  186. data/lib/generators/permission_forge/upgrade/upgrade_generator.rb +66 -0
  187. data/lib/permission_forge/admin/action_across_sets.rb +76 -0
  188. data/lib/permission_forge/admin/action_rows.rb +156 -0
  189. data/lib/permission_forge/admin/attention_items.rb +207 -0
  190. data/lib/permission_forge/admin/audit_event_detail.rb +75 -0
  191. data/lib/permission_forge/admin/audit_log.rb +193 -0
  192. data/lib/permission_forge/admin/audit_log_days.rb +41 -0
  193. data/lib/permission_forge/admin/audit_lookups.rb +105 -0
  194. data/lib/permission_forge/admin/audit_name_history.rb +85 -0
  195. data/lib/permission_forge/admin/audit_trail.rb +169 -0
  196. data/lib/permission_forge/admin/bulk_people_matcher.rb +109 -0
  197. data/lib/permission_forge/admin/change_set.rb +123 -0
  198. data/lib/permission_forge/admin/change_set_parts/actions.rb +27 -0
  199. data/lib/permission_forge/admin/change_set_parts/base.rb +58 -0
  200. data/lib/permission_forge/admin/change_set_parts/context.rb +50 -0
  201. data/lib/permission_forge/admin/change_set_parts/field_edit.rb +67 -0
  202. data/lib/permission_forge/admin/change_set_parts/field_levels.rb +71 -0
  203. data/lib/permission_forge/admin/change_set_parts/new_actions.rb +91 -0
  204. data/lib/permission_forge/admin/change_set_parts/new_fields.rb +63 -0
  205. data/lib/permission_forge/admin/change_set_parts/resource_edit.rb +55 -0
  206. data/lib/permission_forge/admin/change_set_parts/resource_flags.rb +19 -0
  207. data/lib/permission_forge/admin/change_set_parts/set_attrs.rb +45 -0
  208. data/lib/permission_forge/admin/change_set_parts/values.rb +20 -0
  209. data/lib/permission_forge/admin/column_fields.rb +48 -0
  210. data/lib/permission_forge/admin/conditions_form.rb +78 -0
  211. data/lib/permission_forge/admin/controller_catalog.rb +166 -0
  212. data/lib/permission_forge/admin/csv.rb +41 -0
  213. data/lib/permission_forge/admin/editable_lock.rb +157 -0
  214. data/lib/permission_forge/admin/effective_access.rb +158 -0
  215. data/lib/permission_forge/admin/effective_fields.rb +176 -0
  216. data/lib/permission_forge/admin/expiry_presets.rb +51 -0
  217. data/lib/permission_forge/admin/exports/document.rb +89 -0
  218. data/lib/permission_forge/admin/exports/events.rb +51 -0
  219. data/lib/permission_forge/admin/exports/holdings.rb +118 -0
  220. data/lib/permission_forge/admin/exports.rb +37 -0
  221. data/lib/permission_forge/admin/field_across_sets.rb +51 -0
  222. data/lib/permission_forge/admin/field_detail.rb +112 -0
  223. data/lib/permission_forge/admin/field_level.rb +74 -0
  224. data/lib/permission_forge/admin/field_rows.rb +137 -0
  225. data/lib/permission_forge/admin/last_changes.rb +94 -0
  226. data/lib/permission_forge/admin/model_catalog.rb +216 -0
  227. data/lib/permission_forge/admin/people_candidates.rb +108 -0
  228. data/lib/permission_forge/admin/people_directory.rb +158 -0
  229. data/lib/permission_forge/admin/permission_set_factory.rb +48 -0
  230. data/lib/permission_forge/admin/person_label.rb +95 -0
  231. data/lib/permission_forge/admin/record_id.rb +19 -0
  232. data/lib/permission_forge/admin/rule_builder.rb +58 -0
  233. data/lib/permission_forge/admin/rule_form.rb +175 -0
  234. data/lib/permission_forge/admin/rule_form_input.rb +74 -0
  235. data/lib/permission_forge/admin/sensitive_columns.rb +68 -0
  236. data/lib/permission_forge/admin/settings_catalog.rb +261 -0
  237. data/lib/permission_forge/admin/settings_values.rb +130 -0
  238. data/lib/permission_forge/api/serializers/audit_event_serializer.rb +27 -0
  239. data/lib/permission_forge/api/serializers/base_serializer.rb +36 -0
  240. data/lib/permission_forge/api/serializers/permission_set_group_serializer.rb +12 -0
  241. data/lib/permission_forge/api/serializers/permission_set_group_user_serializer.rb +11 -0
  242. data/lib/permission_forge/api/serializers/permission_set_rule_serializer.rb +25 -0
  243. data/lib/permission_forge/api/serializers/permission_set_serializer.rb +13 -0
  244. data/lib/permission_forge/api/serializers/permission_set_user_serializer.rb +11 -0
  245. data/lib/permission_forge/api/serializers/resource_action_serializer.rb +13 -0
  246. data/lib/permission_forge/api/serializers/resource_field_serializer.rb +14 -0
  247. data/lib/permission_forge/api/serializers/resource_serializer.rb +15 -0
  248. data/lib/permission_forge/audit/actor.rb +144 -0
  249. data/lib/permission_forge/audit/actor_resolver.rb +103 -0
  250. data/lib/permission_forge/audit/audited_views.rb +208 -0
  251. data/lib/permission_forge/audit/boot_warnings.rb +58 -0
  252. data/lib/permission_forge/audit/column_values.rb +56 -0
  253. data/lib/permission_forge/audit/context.rb +98 -0
  254. data/lib/permission_forge/audit/detached.rb +62 -0
  255. data/lib/permission_forge/audit/event_catalog.rb +110 -0
  256. data/lib/permission_forge/audit/event_query.rb +192 -0
  257. data/lib/permission_forge/audit/failure.rb +47 -0
  258. data/lib/permission_forge/audit/field_access.rb +186 -0
  259. data/lib/permission_forge/audit/gate.rb +167 -0
  260. data/lib/permission_forge/audit/job_context.rb +32 -0
  261. data/lib/permission_forge/audit/log_access.rb +36 -0
  262. data/lib/permission_forge/audit/recorder.rb +168 -0
  263. data/lib/permission_forge/audit/refusals.rb +61 -0
  264. data/lib/permission_forge/audit/request_context.rb +152 -0
  265. data/lib/permission_forge/audit/runtime.rb +178 -0
  266. data/lib/permission_forge/audit/runtime_emission.rb +135 -0
  267. data/lib/permission_forge/audit/settings_observer.rb +70 -0
  268. data/lib/permission_forge/audit/source.rb +54 -0
  269. data/lib/permission_forge/audit/subscribers/base.rb +69 -0
  270. data/lib/permission_forge/audit/subscribers/legacy_hooks.rb +97 -0
  271. data/lib/permission_forge/audit/subscribers/log.rb +45 -0
  272. data/lib/permission_forge/audit/subscribers.rb +58 -0
  273. data/lib/permission_forge/audit.rb +302 -0
  274. data/lib/permission_forge/boot_checks.rb +184 -0
  275. data/lib/permission_forge/cache/backlog.rb +142 -0
  276. data/lib/permission_forge/cache/base.rb +200 -0
  277. data/lib/permission_forge/cache/bulk_invalidation.rb +131 -0
  278. data/lib/permission_forge/cache/failure.rb +171 -0
  279. data/lib/permission_forge/cache/handled_errors.rb +82 -0
  280. data/lib/permission_forge/cache/holder_invalidation.rb +85 -0
  281. data/lib/permission_forge/cache/invalidation.rb +180 -0
  282. data/lib/permission_forge/cache/memory_cache.rb +77 -0
  283. data/lib/permission_forge/cache/null_cache.rb +40 -0
  284. data/lib/permission_forge/cache/rails_cache.rb +231 -0
  285. data/lib/permission_forge/cache/rebuild.rb +149 -0
  286. data/lib/permission_forge/cache/settlement.rb +63 -0
  287. data/lib/permission_forge/cache/user_keys.rb +206 -0
  288. data/lib/permission_forge/cache/variant_removal.rb +55 -0
  289. data/lib/permission_forge/cache/withheld_notice.rb +60 -0
  290. data/lib/permission_forge/concerns/audited_collection.rb +34 -0
  291. data/lib/permission_forge/concerns/auto_permission_scoping.rb +158 -0
  292. data/lib/permission_forge/concerns/controller_action_guard.rb +106 -0
  293. data/lib/permission_forge/concerns/field_mask_checker.rb +45 -0
  294. data/lib/permission_forge/concerns/has_active_scope.rb +12 -0
  295. data/lib/permission_forge/concerns/has_audit_trail.rb +59 -0
  296. data/lib/permission_forge/concerns/has_permission_set_users.rb +115 -0
  297. data/lib/permission_forge/concerns/has_tenant_scoping.rb +86 -0
  298. data/lib/permission_forge/concerns/has_uuid.rb +24 -0
  299. data/lib/permission_forge/concerns/invalidates_in_batch.rb +207 -0
  300. data/lib/permission_forge/concerns/invalidates_managed_actions.rb +80 -0
  301. data/lib/permission_forge/concerns/masked_attributes/alias_access.rb +280 -0
  302. data/lib/permission_forge/concerns/masked_attributes/store_access.rb +100 -0
  303. data/lib/permission_forge/concerns/masked_attributes/validation_reads.rb +153 -0
  304. data/lib/permission_forge/concerns/masked_attributes/virtual_readers.rb +242 -0
  305. data/lib/permission_forge/concerns/masked_attributes.rb +576 -0
  306. data/lib/permission_forge/concerns/permission_cache_accessor.rb +416 -0
  307. data/lib/permission_forge/concerns/permission_scoped_findable.rb +337 -0
  308. data/lib/permission_forge/concerns/permissioned_user.rb +78 -0
  309. data/lib/permission_forge/concerns/permissions_memo.rb +160 -0
  310. data/lib/permission_forge/concerns/permissions_per_context.rb +288 -0
  311. data/lib/permission_forge/concerns/permissions_regenerator.rb +43 -0
  312. data/lib/permission_forge/concerns/records_audit_events.rb +286 -0
  313. data/lib/permission_forge/concerns/resource_permission_checker.rb +116 -0
  314. data/lib/permission_forge/concerns/validates_column_lengths.rb +69 -0
  315. data/lib/permission_forge/concerns/validates_dependency.rb +54 -0
  316. data/lib/permission_forge/conditional_sets.rb +361 -0
  317. data/lib/permission_forge/configuration/admin_ui_settings.rb +108 -0
  318. data/lib/permission_forge/configuration/audit_settings.rb +184 -0
  319. data/lib/permission_forge/configuration/cache_settings.rb +76 -0
  320. data/lib/permission_forge/configuration/controller_action_settings.rb +112 -0
  321. data/lib/permission_forge/configuration/gdpr_settings.rb +70 -0
  322. data/lib/permission_forge/configuration/masked_attributes_settings.rb +83 -0
  323. data/lib/permission_forge/configuration/permits_attributes_settings.rb +26 -0
  324. data/lib/permission_forge/configuration/presets.rb +139 -0
  325. data/lib/permission_forge/configuration/query_scoping_settings.rb +107 -0
  326. data/lib/permission_forge/configuration/strategy_values.rb +57 -0
  327. data/lib/permission_forge/configuration/virtual_attributes_settings.rb +65 -0
  328. data/lib/permission_forge/configuration.rb +624 -0
  329. data/lib/permission_forge/controller_actions/authorizer.rb +171 -0
  330. data/lib/permission_forge/controller_actions/managed_index.rb +213 -0
  331. data/lib/permission_forge/controller_actions/mapping.rb +167 -0
  332. data/lib/permission_forge/controller_actions.rb +122 -0
  333. data/lib/permission_forge/deprecation.rb +86 -0
  334. data/lib/permission_forge/engine.rb +113 -0
  335. data/lib/permission_forge/execution_state.rb +318 -0
  336. data/lib/permission_forge/invalidation_batch.rb +206 -0
  337. data/lib/permission_forge/masked_models.rb +226 -0
  338. data/lib/permission_forge/masking_sync.rb +271 -0
  339. data/lib/permission_forge/model_bindings.rb +90 -0
  340. data/lib/permission_forge/open_transaction.rb +303 -0
  341. data/lib/permission_forge/operators/constants.rb +41 -0
  342. data/lib/permission_forge/operators/registry.rb +300 -0
  343. data/lib/permission_forge/operators/rule_column.rb +120 -0
  344. data/lib/permission_forge/operators/validations.rb +111 -0
  345. data/lib/permission_forge/operators/value_casters/number.rb +68 -0
  346. data/lib/permission_forge/operators/value_casters/temporal.rb +69 -0
  347. data/lib/permission_forge/operators/value_casters.rb +80 -0
  348. data/lib/permission_forge/operators/value_typing.rb +115 -0
  349. data/lib/permission_forge/query_scoping_warnings.rb +68 -0
  350. data/lib/permission_forge/rake_audit.rb +65 -0
  351. data/lib/permission_forge/resource_chain.rb +190 -0
  352. data/lib/permission_forge/rls.rb +209 -0
  353. data/lib/permission_forge/services/attribute_access_guard.rb +138 -0
  354. data/lib/permission_forge/services/audit_event_purger.rb +150 -0
  355. data/lib/permission_forge/services/bulk_permission_set_assignment.rb +108 -0
  356. data/lib/permission_forge/services/concerns/across_tenants.rb +69 -0
  357. data/lib/permission_forge/services/concerns/audited_operation.rb +43 -0
  358. data/lib/permission_forge/services/concerns/clonable.rb +29 -0
  359. data/lib/permission_forge/services/consent_withdrawal_handler.rb +135 -0
  360. data/lib/permission_forge/services/dashboard_stats.rb +43 -0
  361. data/lib/permission_forge/services/data_subject_erasure.rb +306 -0
  362. data/lib/permission_forge/services/expired_assignment_cleaner.rb +152 -0
  363. data/lib/permission_forge/services/extra_field_defaults.rb +71 -0
  364. data/lib/permission_forge/services/field_permission_merger.rb +83 -0
  365. data/lib/permission_forge/services/filters_response_attributes.rb +144 -0
  366. data/lib/permission_forge/services/gdpr_field_auditor/text_report.rb +63 -0
  367. data/lib/permission_forge/services/gdpr_field_auditor.rb +223 -0
  368. data/lib/permission_forge/services/host_key_guard.rb +110 -0
  369. data/lib/permission_forge/services/mask_value.rb +93 -0
  370. data/lib/permission_forge/services/permission_cache_clearer.rb +174 -0
  371. data/lib/permission_forge/services/permission_hash_builder.rb +305 -0
  372. data/lib/permission_forge/services/permission_rule_applier.rb +192 -0
  373. data/lib/permission_forge/services/permission_set_cloner.rb +89 -0
  374. data/lib/permission_forge/services/permission_set_condition_evaluator.rb +102 -0
  375. data/lib/permission_forge/services/permission_set_group_cloner.rb +52 -0
  376. data/lib/permission_forge/services/permits_attributes/nested_records.rb +106 -0
  377. data/lib/permission_forge/services/permits_attributes.rb +270 -0
  378. data/lib/permission_forge/services/resource_field_generator.rb +93 -0
  379. data/lib/permission_forge/services/resource_with_fields_builder.rb +47 -0
  380. data/lib/permission_forge/services/rls_operator_sql.rb +131 -0
  381. data/lib/permission_forge/services/rls_policy_generator.rb +365 -0
  382. data/lib/permission_forge/services/security_audit/action_check.rb +157 -0
  383. data/lib/permission_forge/services/security_audit/assignment_check.rb +120 -0
  384. data/lib/permission_forge/services/security_audit/audit_trail_check.rb +166 -0
  385. data/lib/permission_forge/services/security_audit/base_check.rb +57 -0
  386. data/lib/permission_forge/services/security_audit/config_check.rb +212 -0
  387. data/lib/permission_forge/services/security_audit/integrity_check.rb +105 -0
  388. data/lib/permission_forge/services/security_audit/personal_data_check.rb +79 -0
  389. data/lib/permission_forge/services/security_audit/privilege_check.rb +67 -0
  390. data/lib/permission_forge/services/security_audit/rule_check.rb +141 -0
  391. data/lib/permission_forge/services/security_audit/text_report.rb +46 -0
  392. data/lib/permission_forge/services/security_audit/user_model_check.rb +67 -0
  393. data/lib/permission_forge/services/security_audit.rb +75 -0
  394. data/lib/permission_forge/services/stale_assignment_auditor.rb +68 -0
  395. data/lib/permission_forge/services/unscoped_query_detector.rb +132 -0
  396. data/lib/permission_forge/version.rb +3 -0
  397. data/lib/permission_forge/virtual_fields/discovery.rb +65 -0
  398. data/lib/permission_forge/virtual_fields.rb +102 -0
  399. data/lib/permission_forge.rb +464 -0
  400. data/lib/tasks/permission_forge.rake +31 -0
  401. data/lib/tasks/permission_forge_audit_events.rake +28 -0
  402. data/lib/tasks/permission_forge_cache.rake +26 -0
  403. data/lib/tasks/permission_forge_expiration.rake +30 -0
  404. data/lib/tasks/permission_forge_gdpr.rake +69 -0
  405. data/lib/tasks/permission_forge_rls.rake +38 -0
  406. metadata +515 -0
metadata ADDED
@@ -0,0 +1,515 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: permission_forge
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.14.1
5
+ platform: ruby
6
+ authors:
7
+ - Feti Jashari
8
+ bindir: bin
9
+ cert_chain: []
10
+ date: 1980-01-02 00:00:00.000000000 Z
11
+ dependencies:
12
+ - !ruby/object:Gem::Dependency
13
+ name: activerecord
14
+ requirement: !ruby/object:Gem::Requirement
15
+ requirements:
16
+ - - ">="
17
+ - !ruby/object:Gem::Version
18
+ version: '7.1'
19
+ - - "<"
20
+ - !ruby/object:Gem::Version
21
+ version: '8.2'
22
+ type: :runtime
23
+ prerelease: false
24
+ version_requirements: !ruby/object:Gem::Requirement
25
+ requirements:
26
+ - - ">="
27
+ - !ruby/object:Gem::Version
28
+ version: '7.1'
29
+ - - "<"
30
+ - !ruby/object:Gem::Version
31
+ version: '8.2'
32
+ - !ruby/object:Gem::Dependency
33
+ name: activesupport
34
+ requirement: !ruby/object:Gem::Requirement
35
+ requirements:
36
+ - - ">="
37
+ - !ruby/object:Gem::Version
38
+ version: '7.1'
39
+ - - "<"
40
+ - !ruby/object:Gem::Version
41
+ version: '8.2'
42
+ type: :runtime
43
+ prerelease: false
44
+ version_requirements: !ruby/object:Gem::Requirement
45
+ requirements:
46
+ - - ">="
47
+ - !ruby/object:Gem::Version
48
+ version: '7.1'
49
+ - - "<"
50
+ - !ruby/object:Gem::Version
51
+ version: '8.2'
52
+ - !ruby/object:Gem::Dependency
53
+ name: railties
54
+ requirement: !ruby/object:Gem::Requirement
55
+ requirements:
56
+ - - ">="
57
+ - !ruby/object:Gem::Version
58
+ version: '7.1'
59
+ - - "<"
60
+ - !ruby/object:Gem::Version
61
+ version: '8.2'
62
+ type: :runtime
63
+ prerelease: false
64
+ version_requirements: !ruby/object:Gem::Requirement
65
+ requirements:
66
+ - - ">="
67
+ - !ruby/object:Gem::Version
68
+ version: '7.1'
69
+ - - "<"
70
+ - !ruby/object:Gem::Version
71
+ version: '8.2'
72
+ description: 'PermissionForge stores permissions as Permission Sets that admins edit
73
+ at runtime: per-model CRUD flags and custom actions, per-field read/edit access
74
+ with masking, and row-level query rules. It applies them in your models (find_by,
75
+ permission_scoped, attribute readers and serialization) and controllers, caches
76
+ each user''s permissions in any Rails cache store, records every permission change
77
+ in an audit log, and ships an admin UI and an opt-in JSON admin API.'
78
+ email:
79
+ - fetijashari@gmail.com
80
+ executables: []
81
+ extensions: []
82
+ extra_rdoc_files: []
83
+ files:
84
+ - CHANGELOG.md
85
+ - LICENSE.txt
86
+ - README.md
87
+ - app/controllers/concerns/permission_forge/acting_admin.rb
88
+ - app/controllers/concerns/permission_forge/api/crud_actions.rb
89
+ - app/controllers/concerns/permission_forge/api/nested_resource_lookup.rb
90
+ - app/controllers/concerns/permission_forge/api/pagination.rb
91
+ - app/controllers/concerns/permission_forge/api/response_renderer.rb
92
+ - app/controllers/concerns/permission_forge/api/serializer_resolver.rb
93
+ - app/controllers/concerns/permission_forge/api_authentication.rb
94
+ - app/controllers/concerns/permission_forge/assignment_authorization.rb
95
+ - app/controllers/concerns/permission_forge/audit_log_gate.rb
96
+ - app/controllers/concerns/permission_forge/basic_authentication.rb
97
+ - app/controllers/concerns/permission_forge/cache_confirmation.rb
98
+ - app/controllers/concerns/permission_forge/forgery_protection.rb
99
+ - app/controllers/concerns/permission_forge/html_format.rb
100
+ - app/controllers/concerns/permission_forge/param_shapes.rb
101
+ - app/controllers/concerns/permission_forge/tenant_required.rb
102
+ - app/controllers/permission_forge/api/audit_events_controller.rb
103
+ - app/controllers/permission_forge/api/base_controller.rb
104
+ - app/controllers/permission_forge/api/dashboard_controller.rb
105
+ - app/controllers/permission_forge/api/permission_set_group_users_controller.rb
106
+ - app/controllers/permission_forge/api/permission_set_groups_controller.rb
107
+ - app/controllers/permission_forge/api/permission_set_rules_controller.rb
108
+ - app/controllers/permission_forge/api/permission_set_users_controller.rb
109
+ - app/controllers/permission_forge/api/permission_sets_controller.rb
110
+ - app/controllers/permission_forge/api/resource_actions_controller.rb
111
+ - app/controllers/permission_forge/api/resource_fields_controller.rb
112
+ - app/controllers/permission_forge/api/resources_controller.rb
113
+ - app/controllers/permission_forge/application_controller.rb
114
+ - app/controllers/permission_forge/assets_controller.rb
115
+ - app/controllers/permission_forge/assignments_controller.rb
116
+ - app/controllers/permission_forge/audit_events_controller.rb
117
+ - app/controllers/permission_forge/bulk_assignments_controller.rb
118
+ - app/controllers/permission_forge/field_lookups_controller.rb
119
+ - app/controllers/permission_forge/home_controller.rb
120
+ - app/controllers/permission_forge/maintenance_controller.rb
121
+ - app/controllers/permission_forge/people_controller.rb
122
+ - app/controllers/permission_forge/permission_set_editor.rb
123
+ - app/controllers/permission_forge/permission_set_group_users_controller.rb
124
+ - app/controllers/permission_forge/permission_set_groups_controller.rb
125
+ - app/controllers/permission_forge/permission_set_rules_controller.rb
126
+ - app/controllers/permission_forge/permission_sets_controller.rb
127
+ - app/controllers/permission_forge/preferences_controller.rb
128
+ - app/controllers/permission_forge/resource_actions_controller.rb
129
+ - app/controllers/permission_forge/resource_fields_controller.rb
130
+ - app/controllers/permission_forge/resources_controller.rb
131
+ - app/controllers/permission_forge/settings_controller.rb
132
+ - app/frontend/permission_forge/brand/apple-touch-icon.png
133
+ - app/frontend/permission_forge/brand/chevron.svg
134
+ - app/frontend/permission_forge/brand/favicon.ico
135
+ - app/frontend/permission_forge/brand/favicon.svg
136
+ - app/frontend/permission_forge/brand/logo-horizontal-dark.svg
137
+ - app/frontend/permission_forge/brand/logo-horizontal-light.svg
138
+ - app/frontend/permission_forge/brand/mark-small.svg
139
+ - app/frontend/permission_forge/brand/mark.svg
140
+ - app/frontend/permission_forge/pf_admin.css
141
+ - app/frontend/permission_forge/pf_admin.js
142
+ - app/helpers/permission_forge/application_helper.rb
143
+ - app/helpers/permission_forge/audit_helper.rb
144
+ - app/helpers/permission_forge/audit_sentences_helper.rb
145
+ - app/helpers/permission_forge/badges_helper.rb
146
+ - app/helpers/permission_forge/changes_helper.rb
147
+ - app/helpers/permission_forge/people_helper.rb
148
+ - app/helpers/permission_forge/sentences_helper.rb
149
+ - app/helpers/permission_forge/settings_helper.rb
150
+ - app/helpers/permission_forge/ui_helper.rb
151
+ - app/models/permission_forge/audit_event.rb
152
+ - app/models/permission_forge/permission_set.rb
153
+ - app/models/permission_forge/permission_set_group.rb
154
+ - app/models/permission_forge/permission_set_group_user.rb
155
+ - app/models/permission_forge/permission_set_rule.rb
156
+ - app/models/permission_forge/permission_set_user.rb
157
+ - app/models/permission_forge/resource.rb
158
+ - app/models/permission_forge/resource_action.rb
159
+ - app/models/permission_forge/resource_field.rb
160
+ - app/views/layouts/permission_forge/application.html.erb
161
+ - app/views/layouts/permission_forge/fragment.html.erb
162
+ - app/views/permission_forge/assignments/_person_options.html.erb
163
+ - app/views/permission_forge/assignments/confirm_destroy.html.erb
164
+ - app/views/permission_forge/assignments/new.html.erb
165
+ - app/views/permission_forge/audit_events/index.html.erb
166
+ - app/views/permission_forge/audit_events/show.html.erb
167
+ - app/views/permission_forge/bulk_assignments/confirm_revoke.html.erb
168
+ - app/views/permission_forge/bulk_assignments/new.html.erb
169
+ - app/views/permission_forge/field_lookups/show.html.erb
170
+ - app/views/permission_forge/home/_audit_card.html.erb
171
+ - app/views/permission_forge/home/_ending_card.html.erb
172
+ - app/views/permission_forge/home/_expired_card.html.erb
173
+ - app/views/permission_forge/home/_privacy_card.html.erb
174
+ - app/views/permission_forge/home/_rules_card.html.erb
175
+ - app/views/permission_forge/home/_stale_card.html.erb
176
+ - app/views/permission_forge/home/_tidy_card.html.erb
177
+ - app/views/permission_forge/home/index.html.erb
178
+ - app/views/permission_forge/people/_access_tab.html.erb
179
+ - app/views/permission_forge/people/_audit_tab.html.erb
180
+ - app/views/permission_forge/people/_effective_field_source.html.erb
181
+ - app/views/permission_forge/people/_effective_tab.html.erb
182
+ - app/views/permission_forge/people/_effective_why.html.erb
183
+ - app/views/permission_forge/people/_why_item.html.erb
184
+ - app/views/permission_forge/people/confirm_remove_all.html.erb
185
+ - app/views/permission_forge/people/consent_preview.html.erb
186
+ - app/views/permission_forge/people/erasure_preview.html.erb
187
+ - app/views/permission_forge/people/index.html.erb
188
+ - app/views/permission_forge/people/show.html.erb
189
+ - app/views/permission_forge/permission_set_groups/confirm_destroy.html.erb
190
+ - app/views/permission_forge/permission_set_groups/index.html.erb
191
+ - app/views/permission_forge/permission_set_groups/show.html.erb
192
+ - app/views/permission_forge/permission_set_rules/_builder.html.erb
193
+ - app/views/permission_forge/permission_set_rules/_value_input.html.erb
194
+ - app/views/permission_forge/permission_set_rules/confirm_destroy.html.erb
195
+ - app/views/permission_forge/permission_set_rules/edit.html.erb
196
+ - app/views/permission_forge/permission_set_rules/new.html.erb
197
+ - app/views/permission_forge/permission_sets/_assignments_tab.html.erb
198
+ - app/views/permission_forge/permission_sets/_audit_tab.html.erb
199
+ - app/views/permission_forge/permission_sets/_conditions_tab.html.erb
200
+ - app/views/permission_forge/permission_sets/_header.html.erb
201
+ - app/views/permission_forge/permission_sets/_records_summary.html.erb
202
+ - app/views/permission_forge/permission_sets/_resource_summary.html.erb
203
+ - app/views/permission_forge/permission_sets/_resources_tab.html.erb
204
+ - app/views/permission_forge/permission_sets/confirm_destroy.html.erb
205
+ - app/views/permission_forge/permission_sets/confirm_switch_mode.html.erb
206
+ - app/views/permission_forge/permission_sets/index.html.erb
207
+ - app/views/permission_forge/permission_sets/new.html.erb
208
+ - app/views/permission_forge/permission_sets/review.html.erb
209
+ - app/views/permission_forge/permission_sets/show.html.erb
210
+ - app/views/permission_forge/resource_actions/_across_sets.html.erb
211
+ - app/views/permission_forge/resource_actions/_add_select.html.erb
212
+ - app/views/permission_forge/resource_actions/_effect.html.erb
213
+ - app/views/permission_forge/resource_actions/_endpoints.html.erb
214
+ - app/views/permission_forge/resource_actions/_form.html.erb
215
+ - app/views/permission_forge/resource_actions/_managed_note.html.erb
216
+ - app/views/permission_forge/resource_actions/confirm_destroy.html.erb
217
+ - app/views/permission_forge/resource_actions/new.html.erb
218
+ - app/views/permission_forge/resource_actions/show.html.erb
219
+ - app/views/permission_forge/resource_fields/_explain.html.erb
220
+ - app/views/permission_forge/resource_fields/show.html.erb
221
+ - app/views/permission_forge/resources/_actions_tab.html.erb
222
+ - app/views/permission_forge/resources/_fields_tab.html.erb
223
+ - app/views/permission_forge/resources/_rules_tab.html.erb
224
+ - app/views/permission_forge/resources/_sync.html.erb
225
+ - app/views/permission_forge/resources/confirm_destroy.html.erb
226
+ - app/views/permission_forge/resources/new.html.erb
227
+ - app/views/permission_forge/resources/show.html.erb
228
+ - app/views/permission_forge/settings/_ladder.html.erb
229
+ - app/views/permission_forge/settings/_row.html.erb
230
+ - app/views/permission_forge/settings/show.html.erb
231
+ - app/views/permission_forge/shared/_across_sets.html.erb
232
+ - app/views/permission_forge/shared/_audit_events.html.erb
233
+ - app/views/permission_forge/shared/_audit_footer.html.erb
234
+ - app/views/permission_forge/shared/_audit_off_note.html.erb
235
+ - app/views/permission_forge/shared/_audit_pagination.html.erb
236
+ - app/views/permission_forge/shared/_audit_refused_note.html.erb
237
+ - app/views/permission_forge/shared/_audit_timeline.html.erb
238
+ - app/views/permission_forge/shared/_crud_cell.html.erb
239
+ - app/views/permission_forge/shared/_dialog_frame.html.erb
240
+ - app/views/permission_forge/shared/_expiry_picker.html.erb
241
+ - app/views/permission_forge/shared/_head_extra.html.erb
242
+ - app/views/permission_forge/shared/_help_banner.html.erb
243
+ - app/views/permission_forge/shared/_level_control.html.erb
244
+ - app/views/permission_forge/shared/_mode_banners.html.erb
245
+ - app/views/permission_forge/shared/_nav.html.erb
246
+ - app/views/permission_forge/shared/_preferences.html.erb
247
+ - app/views/permission_forge/shared/_reason_field.html.erb
248
+ - app/views/permission_forge/shared/_savebar.html.erb
249
+ - app/views/permission_forge/shared/_sheet_frame.html.erb
250
+ - app/views/permission_forge/shared/_sidebar.html.erb
251
+ - app/views/permission_forge/shared/_tech_details.html.erb
252
+ - app/views/permission_forge/shared/_toasts.html.erb
253
+ - app/views/permission_forge/shared/_topbar.html.erb
254
+ - app/views/permission_forge/shared/_user_select.html.erb
255
+ - app/views/permission_forge/shared/audit_refused.html.erb
256
+ - config/locales/permission_forge.en.yml
257
+ - config/locales/permission_forge.mk.yml
258
+ - config/locales/permission_forge.sq.yml
259
+ - config/routes.rb
260
+ - lib/generators/permission_forge/install/install_generator.rb
261
+ - lib/generators/permission_forge/install/templates/initializer.rb.tt
262
+ - lib/generators/permission_forge/install/templates/migration.rb.tt
263
+ - lib/generators/permission_forge/rls/rls_generator.rb
264
+ - lib/generators/permission_forge/rls/templates/enable_permission_forge_rls.rb.tt
265
+ - lib/generators/permission_forge/upgrade/templates/add_admin_ui_columns.rb.tt
266
+ - lib/generators/permission_forge/upgrade/templates/add_audit_events.rb.tt
267
+ - lib/generators/permission_forge/upgrade/templates/add_resource_fields_unique_index.rb.tt
268
+ - lib/generators/permission_forge/upgrade/upgrade_generator.rb
269
+ - lib/permission_forge.rb
270
+ - lib/permission_forge/admin/action_across_sets.rb
271
+ - lib/permission_forge/admin/action_rows.rb
272
+ - lib/permission_forge/admin/attention_items.rb
273
+ - lib/permission_forge/admin/audit_event_detail.rb
274
+ - lib/permission_forge/admin/audit_log.rb
275
+ - lib/permission_forge/admin/audit_log_days.rb
276
+ - lib/permission_forge/admin/audit_lookups.rb
277
+ - lib/permission_forge/admin/audit_name_history.rb
278
+ - lib/permission_forge/admin/audit_trail.rb
279
+ - lib/permission_forge/admin/bulk_people_matcher.rb
280
+ - lib/permission_forge/admin/change_set.rb
281
+ - lib/permission_forge/admin/change_set_parts/actions.rb
282
+ - lib/permission_forge/admin/change_set_parts/base.rb
283
+ - lib/permission_forge/admin/change_set_parts/context.rb
284
+ - lib/permission_forge/admin/change_set_parts/field_edit.rb
285
+ - lib/permission_forge/admin/change_set_parts/field_levels.rb
286
+ - lib/permission_forge/admin/change_set_parts/new_actions.rb
287
+ - lib/permission_forge/admin/change_set_parts/new_fields.rb
288
+ - lib/permission_forge/admin/change_set_parts/resource_edit.rb
289
+ - lib/permission_forge/admin/change_set_parts/resource_flags.rb
290
+ - lib/permission_forge/admin/change_set_parts/set_attrs.rb
291
+ - lib/permission_forge/admin/change_set_parts/values.rb
292
+ - lib/permission_forge/admin/column_fields.rb
293
+ - lib/permission_forge/admin/conditions_form.rb
294
+ - lib/permission_forge/admin/controller_catalog.rb
295
+ - lib/permission_forge/admin/csv.rb
296
+ - lib/permission_forge/admin/editable_lock.rb
297
+ - lib/permission_forge/admin/effective_access.rb
298
+ - lib/permission_forge/admin/effective_fields.rb
299
+ - lib/permission_forge/admin/expiry_presets.rb
300
+ - lib/permission_forge/admin/exports.rb
301
+ - lib/permission_forge/admin/exports/document.rb
302
+ - lib/permission_forge/admin/exports/events.rb
303
+ - lib/permission_forge/admin/exports/holdings.rb
304
+ - lib/permission_forge/admin/field_across_sets.rb
305
+ - lib/permission_forge/admin/field_detail.rb
306
+ - lib/permission_forge/admin/field_level.rb
307
+ - lib/permission_forge/admin/field_rows.rb
308
+ - lib/permission_forge/admin/last_changes.rb
309
+ - lib/permission_forge/admin/model_catalog.rb
310
+ - lib/permission_forge/admin/people_candidates.rb
311
+ - lib/permission_forge/admin/people_directory.rb
312
+ - lib/permission_forge/admin/permission_set_factory.rb
313
+ - lib/permission_forge/admin/person_label.rb
314
+ - lib/permission_forge/admin/record_id.rb
315
+ - lib/permission_forge/admin/rule_builder.rb
316
+ - lib/permission_forge/admin/rule_form.rb
317
+ - lib/permission_forge/admin/rule_form_input.rb
318
+ - lib/permission_forge/admin/sensitive_columns.rb
319
+ - lib/permission_forge/admin/settings_catalog.rb
320
+ - lib/permission_forge/admin/settings_values.rb
321
+ - lib/permission_forge/api/serializers/audit_event_serializer.rb
322
+ - lib/permission_forge/api/serializers/base_serializer.rb
323
+ - lib/permission_forge/api/serializers/permission_set_group_serializer.rb
324
+ - lib/permission_forge/api/serializers/permission_set_group_user_serializer.rb
325
+ - lib/permission_forge/api/serializers/permission_set_rule_serializer.rb
326
+ - lib/permission_forge/api/serializers/permission_set_serializer.rb
327
+ - lib/permission_forge/api/serializers/permission_set_user_serializer.rb
328
+ - lib/permission_forge/api/serializers/resource_action_serializer.rb
329
+ - lib/permission_forge/api/serializers/resource_field_serializer.rb
330
+ - lib/permission_forge/api/serializers/resource_serializer.rb
331
+ - lib/permission_forge/audit.rb
332
+ - lib/permission_forge/audit/actor.rb
333
+ - lib/permission_forge/audit/actor_resolver.rb
334
+ - lib/permission_forge/audit/audited_views.rb
335
+ - lib/permission_forge/audit/boot_warnings.rb
336
+ - lib/permission_forge/audit/column_values.rb
337
+ - lib/permission_forge/audit/context.rb
338
+ - lib/permission_forge/audit/detached.rb
339
+ - lib/permission_forge/audit/event_catalog.rb
340
+ - lib/permission_forge/audit/event_query.rb
341
+ - lib/permission_forge/audit/failure.rb
342
+ - lib/permission_forge/audit/field_access.rb
343
+ - lib/permission_forge/audit/gate.rb
344
+ - lib/permission_forge/audit/job_context.rb
345
+ - lib/permission_forge/audit/log_access.rb
346
+ - lib/permission_forge/audit/recorder.rb
347
+ - lib/permission_forge/audit/refusals.rb
348
+ - lib/permission_forge/audit/request_context.rb
349
+ - lib/permission_forge/audit/runtime.rb
350
+ - lib/permission_forge/audit/runtime_emission.rb
351
+ - lib/permission_forge/audit/settings_observer.rb
352
+ - lib/permission_forge/audit/source.rb
353
+ - lib/permission_forge/audit/subscribers.rb
354
+ - lib/permission_forge/audit/subscribers/base.rb
355
+ - lib/permission_forge/audit/subscribers/legacy_hooks.rb
356
+ - lib/permission_forge/audit/subscribers/log.rb
357
+ - lib/permission_forge/boot_checks.rb
358
+ - lib/permission_forge/cache/backlog.rb
359
+ - lib/permission_forge/cache/base.rb
360
+ - lib/permission_forge/cache/bulk_invalidation.rb
361
+ - lib/permission_forge/cache/failure.rb
362
+ - lib/permission_forge/cache/handled_errors.rb
363
+ - lib/permission_forge/cache/holder_invalidation.rb
364
+ - lib/permission_forge/cache/invalidation.rb
365
+ - lib/permission_forge/cache/memory_cache.rb
366
+ - lib/permission_forge/cache/null_cache.rb
367
+ - lib/permission_forge/cache/rails_cache.rb
368
+ - lib/permission_forge/cache/rebuild.rb
369
+ - lib/permission_forge/cache/settlement.rb
370
+ - lib/permission_forge/cache/user_keys.rb
371
+ - lib/permission_forge/cache/variant_removal.rb
372
+ - lib/permission_forge/cache/withheld_notice.rb
373
+ - lib/permission_forge/concerns/audited_collection.rb
374
+ - lib/permission_forge/concerns/auto_permission_scoping.rb
375
+ - lib/permission_forge/concerns/controller_action_guard.rb
376
+ - lib/permission_forge/concerns/field_mask_checker.rb
377
+ - lib/permission_forge/concerns/has_active_scope.rb
378
+ - lib/permission_forge/concerns/has_audit_trail.rb
379
+ - lib/permission_forge/concerns/has_permission_set_users.rb
380
+ - lib/permission_forge/concerns/has_tenant_scoping.rb
381
+ - lib/permission_forge/concerns/has_uuid.rb
382
+ - lib/permission_forge/concerns/invalidates_in_batch.rb
383
+ - lib/permission_forge/concerns/invalidates_managed_actions.rb
384
+ - lib/permission_forge/concerns/masked_attributes.rb
385
+ - lib/permission_forge/concerns/masked_attributes/alias_access.rb
386
+ - lib/permission_forge/concerns/masked_attributes/store_access.rb
387
+ - lib/permission_forge/concerns/masked_attributes/validation_reads.rb
388
+ - lib/permission_forge/concerns/masked_attributes/virtual_readers.rb
389
+ - lib/permission_forge/concerns/permission_cache_accessor.rb
390
+ - lib/permission_forge/concerns/permission_scoped_findable.rb
391
+ - lib/permission_forge/concerns/permissioned_user.rb
392
+ - lib/permission_forge/concerns/permissions_memo.rb
393
+ - lib/permission_forge/concerns/permissions_per_context.rb
394
+ - lib/permission_forge/concerns/permissions_regenerator.rb
395
+ - lib/permission_forge/concerns/records_audit_events.rb
396
+ - lib/permission_forge/concerns/resource_permission_checker.rb
397
+ - lib/permission_forge/concerns/validates_column_lengths.rb
398
+ - lib/permission_forge/concerns/validates_dependency.rb
399
+ - lib/permission_forge/conditional_sets.rb
400
+ - lib/permission_forge/configuration.rb
401
+ - lib/permission_forge/configuration/admin_ui_settings.rb
402
+ - lib/permission_forge/configuration/audit_settings.rb
403
+ - lib/permission_forge/configuration/cache_settings.rb
404
+ - lib/permission_forge/configuration/controller_action_settings.rb
405
+ - lib/permission_forge/configuration/gdpr_settings.rb
406
+ - lib/permission_forge/configuration/masked_attributes_settings.rb
407
+ - lib/permission_forge/configuration/permits_attributes_settings.rb
408
+ - lib/permission_forge/configuration/presets.rb
409
+ - lib/permission_forge/configuration/query_scoping_settings.rb
410
+ - lib/permission_forge/configuration/strategy_values.rb
411
+ - lib/permission_forge/configuration/virtual_attributes_settings.rb
412
+ - lib/permission_forge/controller_actions.rb
413
+ - lib/permission_forge/controller_actions/authorizer.rb
414
+ - lib/permission_forge/controller_actions/managed_index.rb
415
+ - lib/permission_forge/controller_actions/mapping.rb
416
+ - lib/permission_forge/deprecation.rb
417
+ - lib/permission_forge/engine.rb
418
+ - lib/permission_forge/execution_state.rb
419
+ - lib/permission_forge/invalidation_batch.rb
420
+ - lib/permission_forge/masked_models.rb
421
+ - lib/permission_forge/masking_sync.rb
422
+ - lib/permission_forge/model_bindings.rb
423
+ - lib/permission_forge/open_transaction.rb
424
+ - lib/permission_forge/operators/constants.rb
425
+ - lib/permission_forge/operators/registry.rb
426
+ - lib/permission_forge/operators/rule_column.rb
427
+ - lib/permission_forge/operators/validations.rb
428
+ - lib/permission_forge/operators/value_casters.rb
429
+ - lib/permission_forge/operators/value_casters/number.rb
430
+ - lib/permission_forge/operators/value_casters/temporal.rb
431
+ - lib/permission_forge/operators/value_typing.rb
432
+ - lib/permission_forge/query_scoping_warnings.rb
433
+ - lib/permission_forge/rake_audit.rb
434
+ - lib/permission_forge/resource_chain.rb
435
+ - lib/permission_forge/rls.rb
436
+ - lib/permission_forge/services/attribute_access_guard.rb
437
+ - lib/permission_forge/services/audit_event_purger.rb
438
+ - lib/permission_forge/services/bulk_permission_set_assignment.rb
439
+ - lib/permission_forge/services/concerns/across_tenants.rb
440
+ - lib/permission_forge/services/concerns/audited_operation.rb
441
+ - lib/permission_forge/services/concerns/clonable.rb
442
+ - lib/permission_forge/services/consent_withdrawal_handler.rb
443
+ - lib/permission_forge/services/dashboard_stats.rb
444
+ - lib/permission_forge/services/data_subject_erasure.rb
445
+ - lib/permission_forge/services/expired_assignment_cleaner.rb
446
+ - lib/permission_forge/services/extra_field_defaults.rb
447
+ - lib/permission_forge/services/field_permission_merger.rb
448
+ - lib/permission_forge/services/filters_response_attributes.rb
449
+ - lib/permission_forge/services/gdpr_field_auditor.rb
450
+ - lib/permission_forge/services/gdpr_field_auditor/text_report.rb
451
+ - lib/permission_forge/services/host_key_guard.rb
452
+ - lib/permission_forge/services/mask_value.rb
453
+ - lib/permission_forge/services/permission_cache_clearer.rb
454
+ - lib/permission_forge/services/permission_hash_builder.rb
455
+ - lib/permission_forge/services/permission_rule_applier.rb
456
+ - lib/permission_forge/services/permission_set_cloner.rb
457
+ - lib/permission_forge/services/permission_set_condition_evaluator.rb
458
+ - lib/permission_forge/services/permission_set_group_cloner.rb
459
+ - lib/permission_forge/services/permits_attributes.rb
460
+ - lib/permission_forge/services/permits_attributes/nested_records.rb
461
+ - lib/permission_forge/services/resource_field_generator.rb
462
+ - lib/permission_forge/services/resource_with_fields_builder.rb
463
+ - lib/permission_forge/services/rls_operator_sql.rb
464
+ - lib/permission_forge/services/rls_policy_generator.rb
465
+ - lib/permission_forge/services/security_audit.rb
466
+ - lib/permission_forge/services/security_audit/action_check.rb
467
+ - lib/permission_forge/services/security_audit/assignment_check.rb
468
+ - lib/permission_forge/services/security_audit/audit_trail_check.rb
469
+ - lib/permission_forge/services/security_audit/base_check.rb
470
+ - lib/permission_forge/services/security_audit/config_check.rb
471
+ - lib/permission_forge/services/security_audit/integrity_check.rb
472
+ - lib/permission_forge/services/security_audit/personal_data_check.rb
473
+ - lib/permission_forge/services/security_audit/privilege_check.rb
474
+ - lib/permission_forge/services/security_audit/rule_check.rb
475
+ - lib/permission_forge/services/security_audit/text_report.rb
476
+ - lib/permission_forge/services/security_audit/user_model_check.rb
477
+ - lib/permission_forge/services/stale_assignment_auditor.rb
478
+ - lib/permission_forge/services/unscoped_query_detector.rb
479
+ - lib/permission_forge/version.rb
480
+ - lib/permission_forge/virtual_fields.rb
481
+ - lib/permission_forge/virtual_fields/discovery.rb
482
+ - lib/tasks/permission_forge.rake
483
+ - lib/tasks/permission_forge_audit_events.rake
484
+ - lib/tasks/permission_forge_cache.rake
485
+ - lib/tasks/permission_forge_expiration.rake
486
+ - lib/tasks/permission_forge_gdpr.rake
487
+ - lib/tasks/permission_forge_rls.rake
488
+ homepage: https://github.com/fetijashari/permission_forge
489
+ licenses:
490
+ - MIT
491
+ metadata:
492
+ source_code_uri: https://github.com/fetijashari/permission_forge
493
+ changelog_uri: https://github.com/fetijashari/permission_forge/blob/main/CHANGELOG.md
494
+ documentation_uri: https://github.com/fetijashari/permission_forge/tree/main/docs
495
+ bug_tracker_uri: https://github.com/fetijashari/permission_forge/issues
496
+ rubygems_mfa_required: 'true'
497
+ rdoc_options: []
498
+ require_paths:
499
+ - lib
500
+ required_ruby_version: !ruby/object:Gem::Requirement
501
+ requirements:
502
+ - - ">="
503
+ - !ruby/object:Gem::Version
504
+ version: '3.2'
505
+ required_rubygems_version: !ruby/object:Gem::Requirement
506
+ requirements:
507
+ - - ">="
508
+ - !ruby/object:Gem::Version
509
+ version: '0'
510
+ requirements: []
511
+ rubygems_version: 3.6.9
512
+ specification_version: 4
513
+ summary: 'Database-backed permissions for Rails: resource CRUD, field-level access
514
+ and masking, row-level rules'
515
+ test_files: []