protector 0.3.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: a4544fde1b90889d1e926680840bb297773b22b4
-  data.tar.gz: cfded5e0203be65fbdb567aaf6f084ec6bfe6b6c
+  metadata.gz: 8c70a6f5702f927759d3ad9177aa24b1f9045fe6
+  data.tar.gz: 55afe52810b3195c78434062caf155a3804eb19e
 SHA512:
-  metadata.gz: f0482cf550b009f96d6576c7ddb7bab0b02727e9f63a558c597480caff8b153c32d3c1186ade91279746a418a509c8e30f325ce161cce6a3ce8a37d2208064ce
-  data.tar.gz: 3b9ad469e3b4cf815c2b72699bcf9234d067328831d93c8ffdc3c14703a127a279f60c2da8a8173e2bd53aa21ad6cbe0c7e50ec8c7fe662f1b96ba5d2e425376
+  metadata.gz: 5198ddee45f36de0862c08363863bde24b375620c8e901ca21fdcb1f2cf4bba846074b71a87d3b10a1972a58ee36e1384c0a11475b22e8895143890443bcf72e
+  data.tar.gz: 9203703fe70cad667f9861091d8b3f2dddf03241a5928dea9986936ac12a5e8e24e96480cf3580ca5bca64ecbb0e14bce6f3608332e4563fc6d8444c0fc57565

data/README.md

@@ -152,6 +152,18 @@ model.can?(:drink)            # Checks if model can drink any field
 
 As you can see you don't have to use fields. You can use `can :foo` and `can? :foo`. While they will bound to fields internally it will work like you expect for empty sets.
 
+## Global switch
+
+Sometimes for different reasons (like debug or whatever) you might want to run piece of code having Protector totally disabled. There is a way to do that:
+
+```ruby
+Protector.insecurely do
+  # anything here
+end
+```
+
+No matter what happens inside, all your entities will act unprotected. So use with **EXTREME** caution.
+
 ## Ideology
 
 Protector is a successor to [Heimdallr](https://github.com/inossidabile/heimdallr). The latter being a proof-of-concept appeared to be way too paranoid and incompatible with the rest of the world. Protector re-implements same idea keeping the Ruby way:

data/lib/protector.rb

@@ -9,4 +9,15 @@ require "protector/adapters/sequel"
 I18n.load_path += Dir[File.expand_path File.join('..', 'locales', '*.yml'), File.dirname(__FILE__)]
 
 Protector::Adapters::ActiveRecord.activate! if defined?(ActiveRecord)
-Protector::Adapters::Sequel.activate! if defined?(Sequel)
+Protector::Adapters::Sequel.activate! if defined?(Sequel)
+
+module Protector
+
+  # Allows executing any code having Protector globally disabled
+  def self.insecurely(&block)
+    Thread.current[:protector_disabled] = true
+    yield
+  ensure
+    Thread.current[:protector_disabled] = false
+  end
+end

data/lib/protector/adapters/active_record/relation.rb

@@ -37,6 +37,16 @@ module Protector
           super.restrict!(protector_subject)
         end
 
+        def except(*args)
+          return super unless protector_subject?
+          super.restrict!(protector_subject)
+        end
+
+        def only(*args)
+          return super unless protector_subject?
+          super.restrict!(protector_subject)
+        end
+
         # @note This is here cause `NullRelation` can return `nil` from `count`
         def count(*args)
           super || 0

data/lib/protector/dsl.rb

@@ -19,14 +19,16 @@ module Protector
           @scope_proc  = false
           @destroyable = false
 
-          blocks.each do |b|
-            case b.arity
-            when 2
-              instance_exec subject, entry, &b
-            when 1
-              instance_exec subject, &b
-            else
-              instance_exec &b
+          Protector.insecurely do
+            blocks.each do |b|
+              case b.arity
+              when 2
+                instance_exec subject, entry, &b
+              when 1
+                instance_exec subject, &b
+              else
+                instance_exec &b
+              end
             end
           end
         end
@@ -242,7 +244,7 @@ module Protector
 
       # Checks if model was restricted
       def protector_subject?
-        @protector_subject_set == true
+        @protector_subject_set == true && !Thread.current[:protector_disabled]
       end
     end
 

data/lib/protector/version.rb

@@ -1,4 +1,4 @@
 module Protector
   # Gem version
-  VERSION = "0.3.0"
+  VERSION = "0.3.1"
 end

data/spec/lib/adapters/active_record_spec.rb

@@ -71,6 +71,8 @@ if defined?(ActiveRecord)
 
       it "saves subject" do
         Dummy.restrict!('!').where(number: 999).protector_subject.should == '!'
+        Dummy.restrict!('!').except(:order).protector_subject.should == '!'
+        Dummy.restrict!('!').only(:order).protector_subject.should == '!'
       end
 
       it "forwards subject" do

data/spec/spec_helpers/examples/model.rb

@@ -1,8 +1,9 @@
 shared_examples_for "a model" do
   it "evaluates meta properly" do
     dummy.instance_eval do
-      protect do |subject, dummy|
+      protect do |subject, entry|
         subject.should == '!'
+        entry.protector_subject?.should == false
 
         scope { limit(5) }
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: protector
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.3.1
 platform: ruby
 authors:
 - Boris Staal
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-07-05 00:00:00.000000000 Z
+date: 2013-07-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport