porteiro 0.0.4 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 9fabc9cec9eba0b0a3f02458696c4a01212362c5
-  data.tar.gz: 0e8c24eabee01b8328468bd2a03018c085002640
+  metadata.gz: 8df7f6dcfe31a88b0ca3a25dd320944b58a93807
+  data.tar.gz: 9318d0767c05a425f71cb92e860254d83fc29358
 SHA512:
-  metadata.gz: 31521c10743b4cb0c74c38b1e95762be892051ccedeab56e61250cd4088aae4be07084c707b94d58b784603fba7cc7eaadeb2bceec94592330955195df96d3ca
-  data.tar.gz: 1eab18ee90a8454b27b4be7c2962c8176b340fb6b3af1d2defdeee1ed99814b70be8158c9a0d46099e54f5957ee34964d053cf4ef6d2ed31a5a1eff593e45800
+  metadata.gz: bc0806ec204f27d8f937c8f0132cecd385926bcb5dbb17aa8f7d794d42d634c55451a5e6527ed92a99c390d9046914cd8f5437beade5c264759aee8c50356c4c
+  data.tar.gz: bb537dbc6492707b0850d561da4c7b39f8e77ed3fdf2a8a6c4c5dafdf543786b39788d2bbd4ce51f72818bc5de46875b664622f68923ef35c520bb4e26cc5224

data/.gitignore

@@ -15,3 +15,8 @@ spec/reports
 test/tmp
 test/version_tmp
 tmp
+*.bundle
+*.so
+*.o
+*.a
+mkmf.log

data/Gemfile

@@ -1,4 +1,3 @@
 source 'https://rubygems.org'
 
-# Specify your gem's dependencies in porteiro.gemspec
 gemspec

data/LICENSE.txt

@@ -1,4 +1,4 @@
-Copyright (c) 2014 bradwheel
+Copyright (c) 2015 bradwheel
 
 MIT License
 

data/README.md

@@ -1,6 +1,17 @@
 # Porteiro
 
-TODO: Write a gem description
+Porteiro is pundit for controllers. Policies are meant for authorizing requests through controller actions. 
+
+## Features: 
+
+- Supports policy fallback, so you can create a default policy that will be used in the absence of a 
+defined policy. To use this, define a method in your controller called default_policy and add a string with the name
+of the class to be used. E.g..
+
+    def default_policy
+      'ApplicationPolicy'
+    end
+
 
 ## Installation
 
@@ -18,12 +29,11 @@ Or install it yourself as:
 
 ## Usage
 
-TODO: Write usage instructions here
 
 ## Contributing
 
-1. Fork it
+1. Fork it ( https://github.com/[my-github-username]/porteiro/fork )
 2. Create your feature branch (`git checkout -b my-new-feature`)
 3. Commit your changes (`git commit -am 'Add some feature'`)
 4. Push to the branch (`git push origin my-new-feature`)
-5. Create new Pull Request
+5. Create a new Pull Request

data/Rakefile

@@ -1,3 +1,10 @@
 require "bundler/gem_tasks"
-
+require 'rake/testtask'
+ 
+Rake::TestTask.new do |task|
+  task.libs << %w(test)
+  task.pattern = 'test/*_test.rb'
+end
+ 
+task default: :test
 

data/lib/porteiro.rb

@@ -1,60 +1,52 @@
-require "porteiro/version"
-require "porteiro/policy_finder"
-require "active_support/concern"
-require "active_support/inflector"
+require 'porteiro/version'
+require 'porteiro/policy_finder'
 
 module Porteiro
-  extend ActiveSupport::Concern 
 
-  class NotAuthorizedError < StandardError;end
-  class PolicyUndefinedError < StandardError;end
-  class AuthorizationNotPerformedError < StandardError;end
-
-  class << self
+  UnauthorizedAction = Class.new(StandardError) do 
+    attr_accessor :user, :policy, :context
+  end
 
-    ##
-    # ClassMethod to find policy with PolicyFinder using the current_user 
-    # and request params.
-    ##
+  AuthorizationNotPerformed = Class.new(StandardError)
 
-    def policy(user, req_params)
-      policy = PolicyFinder.new(user, req_params).find!
-      return policy
+  def authorize!(other_action_name=nil)
+    policy_authorized!
+    policy        = porteiro_policy
+    policy_action = porteiro_action(other_action_name)
+    unless policy.public_send(policy_action)
+      error = UnauthorizedAction.new("#{policy.class}: #{policy_action}")
+      error.user, error.policy, error.context = porteiro_user, policy, policy_action
+      raise error
     end
+    true
+  end
 
-    ##
-    # Configuration methods for setting default policy name
-    ## 
-
-    def default_policy
-      @default_policy ||= "ApplicationPolicy"
-    end
-    attr_writer :default_policy
+  def porteiro_policy
+    PolicyFinder.call(
+      self, 
+      porteiro_user, 
+      porteiro_default_policy
+    )
+  end
 
+  def porteiro_action(other_action_name=nil)
+    name = other_action_name || action_name
+    [name.to_s, '?'].join
   end
 
-  ##
-  # Before action that can be called in the controller to check for authorization.
-  # If this is not called, no policy will be looked up.
-  ## 
+  def porteiro_default_policy
+  end
 
-  def authorize_user_access!
-    @_policy_authorized = true
-    policy_obj = policy 
-    controller_action = policy_obj.params.fetch(:action)
-    policy_obj.send("#{controller_action}?") ? true :  (raise NotAuthorizedError, "You aren't permitted to access this resource")
+  def porteiro_user
+    current_user
   end
 
   def verify_authorized
-     raise AuthorizationNotPerformedError unless @_policy_authorized
-   end
-
-  def policy
-    @policy || Porteiro.policy(porteiro_user, params)
+    raise AuthorizationNotPerformed unless @_porteiro_policy_authorized
   end
 
-  def porteiro_user
-    current_user
+  def policy_authorized!
+    @_porteiro_policy_authorized = true
   end
 
 end

data/lib/porteiro/policy_finder.rb

@@ -1,38 +1,51 @@
+require 'active_support/core_ext/string/inflections'
+
 module Porteiro
   class PolicyFinder
 
-    attr_reader :user, :req_params, :klass
+    PolicyNotFound = Class.new(StandardError)
+
+    def self.call(context, user, default_policy=nil)
+      service = new(context, user, default_policy)
+      service.call
+    end
+
+    attr_reader :context, :user, :default_policy
+    def initialize(context, user, default_policy=nil)
+      @context        = context
+      @user           = user
+      @default_policy = default_policy
+    end
 
-    def initialize(user, req_params)
-      @user = user
-      @req_params = req_params
-      @klass = fetch_klass_from_params
+    def call
+      policy.new(user, context)
     end
 
-    def find!
-      begin 
-        return instantiate_policy_class
-      rescue NameError
-        raise PolicyUndefinedError, "You must define your default policy: #{Porteiro.default_policy}"
+    def policy
+      policy = safe_constantize(policy_class_name)
+      if !policy && default_policy
+        policy = safe_constantize(default_policy)
       end
+      raise PolicyNotFound, "#{policy_class_name} could not be found" unless policy 
+      policy 
     end
 
-    def fetch_klass_from_params
-      return String(req_params.fetch(:controller).classify) rescue nil
+    def policy_class_name
+      [controller_name, 'Policy'].join
+    end
+
+    def controller_name
+      context.params[:controller].camelize
     end
 
-    ##
-    # Finds policy and instantiates it. If policy doesn't exist, the default
-    # policy is instantiated. This removes the need to define every policy if
-    # you want to use method_missing in the default policy.
-    ##
 
-    def instantiate_policy_class
-      policy = "#{klass}Policy".constantize.new(user, req_params) rescue nil
-      return (Porteiro.default_policy.constantize.new(user, req_params)) unless policy 
-      return policy 
+    private
+
+    def safe_constantize(name)
+      ::Object.const_get(name.to_s)
+    rescue ::NameError
+      nil
     end
 
   end
 end
-

data/lib/porteiro/version.rb

@@ -1,3 +1,3 @@
 module Porteiro
-  VERSION = "0.0.4"
+  VERSION = "1.0.0"
 end

data/porteiro.gemspec

@@ -8,20 +8,20 @@ Gem::Specification.new do |spec|
   spec.version       = Porteiro::VERSION
   spec.authors       = ["bradwheel"]
   spec.email         = ["bradley.m.wheel@gmail.com"]
-  spec.description   = %q{Authorization for controllers modeled after Pundit.}
-  spec.summary       = %q{Authorization for controllers modeled after Pundit.}
+  spec.summary       = %q{API Authorization for controllers.}
+  spec.description   = %q{Pundit for controllers only.}
   spec.homepage      = ""
   spec.license       = "MIT"
 
-  spec.files         = `git ls-files`.split($/)
+  spec.files         = `git ls-files -z`.split("\x0")
   spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
   spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
   spec.require_paths = ["lib"]
 
-  spec.add_dependency "activesupport", ">= 3.0.0"
-  spec.add_development_dependency "activerecord", ">= 3.0.0"
-  spec.add_development_dependency "rspec"
-  spec.add_development_dependency "pry"
-  spec.add_development_dependency "bundler", "~> 1.3"
+  spec.add_dependency "activesupport"
+
+  spec.add_development_dependency "bundler", "~> 1.6"
   spec.add_development_dependency "rake"
+  spec.add_development_dependency "minitest-reporters"
+  spec.add_development_dependency "pry"
 end

data/test/policy_finder_test.rb

@@ -0,0 +1,82 @@
+require 'support/test_helper'
+require 'support/test_controller'
+require 'support/mock_user'
+require 'support/comments_policy'
+require 'porteiro/policy_finder'
+
+module Porteiro
+  describe PolicyFinder do 
+
+
+    before do 
+      @context = ::TestController.new(
+        'comments', 
+        'index', 
+        {format: :json, action: 'index', controller: 'comments'}
+      )
+      @user = ::MockUser.new
+      @policy_finder = PolicyFinder.new(@context, @user)
+    end
+
+
+    describe '#call' do 
+
+      it 'finds policy by controller name' do 
+        @policy_finder.call.must_be_instance_of ::CommentsPolicy
+      end
+
+    end
+
+    describe '#policy_class_name' do 
+
+      it 'returns the controller name concatenated with Policy' do 
+        @policy_finder.policy_class_name.must_equal 'CommentsPolicy'
+      end
+
+      describe 'when controller is nested' do 
+
+        it 'retains the class hierarchy' do 
+          context = ::TestController.new(
+            'comments', 
+            'index', 
+            {format: :json, action: 'index', controller: 'user/posts/comments'}
+          )
+          policy_finder = PolicyFinder.new(context, @user)
+          policy_finder.policy_class_name.must_equal 'User::Posts::CommentsPolicy'
+        end
+
+      end
+
+    end
+
+    describe '#controller_name' do 
+
+      it 'returns the controller name camelized' do 
+        @policy_finder.controller_name.must_equal 'Comments'
+      end
+
+      describe 'when controller is nested' do 
+
+        it 'retains the class hierarchy' do 
+          context = ::TestController.new(
+            'comments', 
+            'index', 
+            {format: :json, action: 'index', controller: 'user/posts/comments'}
+          )
+          @policy_finder = PolicyFinder.new(context, @user)
+          @policy_finder.controller_name.must_equal 'User::Posts::Comments'
+        end
+
+      end
+
+    end
+
+    describe '#safe_constantize'do 
+
+      it { @policy_finder.send(:safe_constantize, 'Object').must_equal Object }
+      it { @policy_finder.send(:safe_constantize, 'Obbject').must_be_nil }
+      
+    end
+
+  end
+end

data/test/porteiro_test.rb

@@ -0,0 +1,162 @@
+require 'support/test_helper'
+require 'support/comments_policy'
+require 'support/application_policy'
+require 'support/mock_user'
+
+describe Porteiro do
+
+
+  before do 
+    ::TestController.include(Porteiro)
+    @context = ::TestController.new(
+      'comments', 
+      'index', 
+      {format: :json, action: 'index', controller: 'comments'}
+    )
+    @brad = ::MockUser.new('brad')
+    @joe  = ::MockUser.new('joe')
+    @context.current_user = @joe
+    @context.other_user = @brad
+  end
+
+
+  describe '#porteiro_policy' do 
+
+    it 'calls PolicyFinder with context and porteiro_user' do 
+      mock = ::Minitest::Mock.new
+      mock.expect(:call, nil, [@context, @joe, nil])
+
+      Porteiro::PolicyFinder.stub(:call, mock) do 
+        @context.stub(:porteiro_user, @joe) do 
+          @context.porteiro_policy
+        end
+      end
+
+      mock.verify
+    end
+
+  end  
+
+  describe '#porteiro_action' do 
+
+    it 'returns the action_name concatenated with ?' do 
+      @context.porteiro_action.must_equal 'index?'
+    end
+
+    it 'returns the other action name when supplied' do 
+      @context.porteiro_action('create').must_equal 'create?'
+    end
+
+  end
+
+  describe '#porteiro_user' do 
+
+    describe 'when porteiro_user is not set' do 
+      
+      it 'returns current_user' do 
+        @context.porteiro_user.name.must_equal @joe.name
+      end
+
+    end
+
+    describe 'when porteiro_user is defined' do 
+
+      before do 
+        @context.instance_eval do 
+          def porteiro_user 
+            other_user
+          end
+        end
+      end
+
+      it 'returns set user' do 
+        @context.porteiro_user.name.must_equal @brad.name
+      end
+
+      after do 
+        @context.instance_eval do 
+          undef :porteiro_user
+        end
+      end
+
+    end
+
+  end
+
+  describe '#authorize' do 
+    
+    describe 'when can access' do 
+
+      it 'returns true' do
+        @context.authorize!.must_equal true
+      end
+
+      describe 'when policy verification is not ran' do 
+        
+        it 'raises Porteiro::AuthorizationNotPerformed' do 
+          proc { @context.verify_authorized }.must_raise Porteiro::AuthorizationNotPerformed
+        end
+
+      end
+
+    end
+
+    describe 'when cannot access' do 
+
+      it 'raises Porteiro::ActionUnauthorized' do 
+        context = ::TestController.new(
+          'comments', 
+          'create', 
+          {format: :json, action: 'index', controller: 'comments'}
+        )
+
+        proc { context.authorize! }.must_raise Porteiro::UnauthorizedAction
+      end
+
+    end
+
+  end
+
+  describe 'policy default' do 
+
+    before do 
+      @context = ::TestController.new(
+        'posts', 
+        'create', 
+        {format: :json, action: 'create', controller: 'posts'}
+      )
+    end
+
+    describe 'when given a default policy' do 
+
+      before do 
+        @context.instance_eval do 
+          def porteiro_default_policy
+            '::ApplicationPolicy'
+          end
+        end   
+      end
+
+      it 'uses default' do    
+        @context.authorize!.must_equal true
+      end
+
+      after do 
+        @context.instance_eval do 
+          undef :porteiro_default_policy
+        end
+      end
+
+    end
+
+    describe 'when not given a default policy' do
+
+      it 'raises Porteiro::PolicyNotFound if not given' do 
+        proc { @context.authorize! }.must_raise Porteiro::PolicyFinder::PolicyNotFound
+      end
+
+    end
+    
+  end
+
+end

data/test/support/application_policy.rb

@@ -0,0 +1,12 @@
+class ApplicationPolicy 
+  
+  def initialize(user, context)
+    @user    = user 
+    @context = context
+  end
+
+  def create?
+    true
+  end
+
+end

data/test/support/comments_policy.rb

@@ -0,0 +1,21 @@
+class CommentsPolicy
+
+  attr_reader :user, :context
+  def initialize(user, context)
+    @user   = user
+    @context = context 
+  end
+
+  def index?
+    true
+  end
+
+  def create?
+    false
+  end
+
+  def update?
+    false
+  end
+  
+end

data/test/support/mock_user.rb

@@ -0,0 +1,6 @@
+class MockUser
+  attr_accessor :name
+  def initialize(name=nil)
+    @name = name
+  end
+end

data/test/support/test_controller.rb

@@ -0,0 +1,27 @@
+class TestController 
+
+  attr_reader :controller_name, :action_name, :params 
+  
+  def initialize(controller_name, action_name, params)
+    @controller_name = controller_name
+    @action_name = action_name
+    @params = params
+  end
+
+  def current_user
+    @current_user
+  end
+
+  def current_user=(user)
+    @current_user = user
+  end
+
+  def other_user
+    @other_user 
+  end
+
+  def other_user=(user)
+    @other_user = user
+  end
+  
+end

data/test/support/test_helper.rb

@@ -0,0 +1,8 @@
+require 'porteiro'
+require 'minitest/spec'
+require 'minitest/autorun'
+require 'minitest/reporters'
+require 'pry'
+
+report_options = {color: true}
+Minitest::Reporters.use! [Minitest::Reporters::SpecReporter.new(report_options)]

metadata

@@ -1,108 +1,93 @@
 --- !ruby/object:Gem::Specification
 name: porteiro
 version: !ruby/object:Gem::Version
-  version: 0.0.4
+  version: 1.0.0
 platform: ruby
 authors:
 - bradwheel
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-05-02 00:00:00.000000000 Z
+date: 2015-01-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 3.0.0
+        version: '0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 3.0.0
+        version: '0'
 - !ruby/object:Gem::Dependency
-  name: activerecord
+  name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.0.0
+        version: '1.6'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.0.0
+        version: '1.6'
 - !ruby/object:Gem::Dependency
-  name: rspec
+  name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: pry
+  name: minitest-reporters
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: bundler
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ~>
-      - !ruby/object:Gem::Version
-        version: '1.3'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ~>
-      - !ruby/object:Gem::Version
-        version: '1.3'
-- !ruby/object:Gem::Dependency
-  name: rake
+  name: pry
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-description: Authorization for controllers modeled after Pundit.
+description: Pundit for controllers only.
 email:
 - bradley.m.wheel@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- .gitignore
-- .rspec
+- ".gitignore"
 - Gemfile
 - LICENSE.txt
 - README.md
@@ -111,8 +96,13 @@ files:
 - lib/porteiro/policy_finder.rb
 - lib/porteiro/version.rb
 - porteiro.gemspec
-- spec/porteiro_spec.rb
-- spec/spec_helper.rb
+- test/policy_finder_test.rb
+- test/porteiro_test.rb
+- test/support/application_policy.rb
+- test/support/comments_policy.rb
+- test/support/mock_user.rb
+- test/support/test_controller.rb
+- test/support/test_helper.rb
 homepage: ''
 licenses:
 - MIT
@@ -123,20 +113,25 @@ require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.1.11
+rubygems_version: 2.2.2
 signing_key: 
 specification_version: 4
-summary: Authorization for controllers modeled after Pundit.
+summary: API Authorization for controllers.
 test_files:
-- spec/porteiro_spec.rb
-- spec/spec_helper.rb
+- test/policy_finder_test.rb
+- test/porteiro_test.rb
+- test/support/application_policy.rb
+- test/support/comments_policy.rb
+- test/support/mock_user.rb
+- test/support/test_controller.rb
+- test/support/test_helper.rb

data/.rspec

@@ -1 +0,0 @@
---format documentation

data/spec/porteiro_spec.rb

@@ -1,93 +0,0 @@
-require "spec_helper"
-
-describe Porteiro do 
-
-  let!(:current_user) {User.new}
-  let!(:controller) {ControllerClass.new(current_user)}
-
-
-  describe "#porteiro_user" do 
-
-    it "returns the current_user" do 
-      expect(controller.porteiro_user).to eq current_user
-    end
-
-  end
-
-  describe "#policy" do 
-
-    it "returns the instance of policy finder" do 
-      expect(controller.policy.user).to eq(Porteiro.policy(controller.porteiro_user, controller.params).user)
-      expect(controller.policy.params).to eq(Porteiro.policy(controller.porteiro_user, controller.params).params)
-    end
-
-  end
-
-  describe "#default_policy" do 
-
-    it "uses ApplicationPolicy as a default unless specified" do 
-      expect(Porteiro.default_policy).to eq "ApplicationPolicy"
-    end
-
-    it "uses the specified default policy if supplied" do 
-      Porteiro.default_policy=("SuppliedPolicy")
-      expect(Porteiro.default_policy).to eq "SuppliedPolicy"
-    end
-
-  end
-
-  describe Porteiro::PolicyFinder do 
-
-    it "finds the correct policy from controller params" do 
-      policy = Porteiro::PolicyFinder.new(controller.current_user, controller.params)
-      expect(policy.klass).to eq "Document"
-    end
-
-    context "when policy doesn't exist" do 
-
-      it "instantiates the default policy" do 
-        Porteiro.default_policy = "ApplicationPolicy"
-        policy = Porteiro::PolicyFinder.new(controller.current_user, controller.params).find!
-        expect(policy).to be_instance_of(ApplicationPolicy)
-      end
-
-    end
-
-    context "when policy does exist" do 
-
-      
-      before(:each) do 
-        class DocumentPolicy < ApplicationPolicy; end
-      end 
-
-      it "instantiates the correct policy" do 
-        policy = Porteiro::PolicyFinder.new(controller.current_user, controller.params).find!
-        expect(policy).to be_instance_of(DocumentPolicy)
-      end
-
-    end
-
-  end
-
-  describe "#authorize_user_access!" do 
-
-    context "when the action is permitted" do 
-
-      it "returns true" do 
-        expect(controller.authorize_user_access!).to be(true)
-      end
-
-    end
-
-    context "when the action is not permitted" do 
-
-      it "raises Porteiro::NotAuthorizedError" do 
-        controller.params[:action] = "edit"
-        expect {controller.authorize_user_access!}.to raise_error(Porteiro::NotAuthorizedError)
-      end
-
-    end
-
-  end
-
-end

data/spec/spec_helper.rb

@@ -1,42 +0,0 @@
-require "porteiro"
-require "pry"
-
-class User < Struct.new(:name); end
-
-class ControllerClass
-  include Porteiro 
-
-  attr_accessor :current_user
-
-  def initialize(user)
-    @current_user = user
-  end
-  
-  def params
-    @params ||= {controller: "document", action: "index"}
-  end 
-  
-end
-
-
-class ApplicationPolicy
-
-  def initialize(user, params)
-    @user = user 
-    @params = params 
-  end
-  attr_reader :user, :params
-
-  def index?
-    true
-  end
-
-  def show?
-    true
-  end
-
-  def edit?
-    false
-  end
-
-end