pundit-plus 0.1.0 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6e24b7b92951d89eacea12daeb0883a4210e1f900d3dd472fd069119f197a978
-  data.tar.gz: 2de203579d764e39b71c72c3bc3dc0c13138ae7d97d87f0b0676ee0925156fd7
+  metadata.gz: ce22ded18b7ecf472d8fa7f35e15e5a6653a57d5222cc28d88326da396470f1e
+  data.tar.gz: ecf9b251f941b71687937a9acf5e63b7459ad8919271213a3402b98b2606b94f
 SHA512:
-  metadata.gz: f6fa345e74e3a2dd1a3756782226fab68a0d1e005f9f993b0273132c18648fe8616c938a2fce78df2ed3d26b3744fe42e08a7ff80876ad3ca0e755f3e9ab3a80
-  data.tar.gz: 29c5545f4294059194b327dbbc7f3b8ff81463e97dcfcc767a30d053ed29e782d7c53bdfe9a67f69e9ed92a4790ec59ebe432510eaff2d62a5b34aafdee7a13e
+  metadata.gz: e5836505f3537b4d8399c09933edab89ab3ce0730816c3d7f38aad5003399d587ab4d600ce187ed218b99386345d1f7fe4d4c16c190b16475e69030b754568db
+  data.tar.gz: 8f022172f750e43af4724da0a480324c946a0ed90ed8cab0d0547132b01ea76ab14803a6027d53faa3740455f0308617ea8f35be06db47b51c4cee850e7e6fee

data/CHANGELOG.md

@@ -2,7 +2,17 @@
 
 All notable changes to this project will be documented in this file.
 
-## [2024-04-10]
+## [0.1.2] - 2024-04-10
+
+### Added
+- Fixed the missing changelog information for the previous version.
+
+## [0.1.1] - 2024-04-10
+
+### Added
+- Added params_for_action support in controller Authorization
+
+## [0.1.0] - 2024-04-10
 
 ### Added
 - Initial project setup with basic Pundit integration.

data/README.md

@@ -42,6 +42,18 @@ class MyPolicy < ApplicationPolicy
       super
     end
   end
+
+  def initialize(user, record)
+    @user = user
+    @record = record
+  end
+
+  # Return the params for the action but require a special key
+  def params_for_create(params)
+    params_for(@record, params, :create).tap do |params|
+      params.require(:special_key)
+    end
+  end
 end
 ```
 

data/lib/pundit/plus/authorization.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+require "pundit"
+
+module Pundit
+  module Plus
+    # This module adds to the Pundit::Authorization module so that anywhere it is
+    # included will also receive the methods added in this.
+    module Authorization
+      # Return the params that are required or permitted for the given action.
+      #
+      # Define a method in your policy class called `params_for_#{action}` to
+      # return the params for that action. If no such method exists, then
+      # `permitted_attributes` is called to return the params.
+      #
+      # In your policy, define the relevant method to receive parameters and
+      # specify permitted or required parameters.
+      #
+      # @example
+      #   class MyPolicy < ApplicationPolicy
+      #      def params_for_create(params)
+      #        params.require(:user).permit(*permitted_attributes_for_create).tap do |permitted|
+      #          permitted.require(:special_value)
+      #        end
+      #      end
+      #    end
+      def params_for_action(record, action = action_name)
+        if policy(record).respond_to?(:"params_for_#{action}")
+          policy(record).send(:"params_for_#{action}", params)
+        else
+          permitted_attributes(record, action)
+        end
+      end
+    end
+  end
+end
+Pundit::Authorization.include(Pundit::Plus::Authorization)

data/lib/pundit/plus/version.rb

@@ -2,6 +2,6 @@
 
 module Pundit
   module Plus
-    VERSION = "0.1.0"
+    VERSION = "0.1.2"
   end
 end

data/lib/pundit/plus.rb

@@ -2,11 +2,33 @@
 
 require_relative "plus/version"
 require_relative "plus/custom_exception"
+require_relative "plus/authorization"
 
 module Pundit
   module Plus
+    # The default exception to raise when authorization fails.
     def exception_from(query:)
       Pundit::NotAuthorizedError
     end
+
+    # Return the params that are required or permitted for the given action.
+    #
+    # This assumes that you will define a `permitted_attributes` method in your
+    # policy class to return the permitted attributes for the record. Or you may
+    # define a method called `permitted_attributes_for_#{action}` to return the
+    # permitted attributes for that action.
+    protected def params_for(record, params, action_name)
+      param_method = if respond_to?(:"permitted_attributes_for_#{action_name}")
+        "permitted_attributes_for_#{action_name}"
+      else
+        "permitted_attributes"
+      end
+
+      required = params.require(
+        PolicyFinder.new(record).param_key
+      ).permit(
+        *send(param_method)
+      )
+    end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pundit-plus
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.2
 platform: ruby
 authors:
 - Jim Gay
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-04-10 00:00:00.000000000 Z
+date: 2024-04-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: pundit
@@ -50,6 +50,7 @@ files:
 - README.md
 - Rakefile
 - lib/pundit/plus.rb
+- lib/pundit/plus/authorization.rb
 - lib/pundit/plus/custom_exception.rb
 - lib/pundit/plus/version.rb
 homepage: https://github.com/SOFware/pundit-plus