pundit 2.1.0 → 2.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (91) hide show
  1. checksums.yaml +4 -4
  2. data/.github/ISSUE_TEMPLATE/bug_report.md +20 -0
  3. data/.github/ISSUE_TEMPLATE/feature_request.md +26 -0
  4. data/.github/PULL_REQUEST_TEMPLATE/gem_release_template.md +8 -0
  5. data/.github/pull_request_template.md +9 -0
  6. data/.github/workflows/main.yml +147 -0
  7. data/.github/workflows/push_gem.yml +33 -0
  8. data/.gitignore +1 -0
  9. data/.rubocop.yml +26 -29
  10. data/.rubocop_ignore_git.yml +7 -0
  11. data/.yardopts +1 -1
  12. data/CHANGELOG.md +120 -21
  13. data/CODE_OF_CONDUCT.md +1 -1
  14. data/CONTRIBUTING.md +3 -5
  15. data/Gemfile +23 -2
  16. data/README.md +175 -78
  17. data/Rakefile +1 -0
  18. data/SECURITY.md +19 -0
  19. data/config/rubocop-rspec.yml +5 -0
  20. data/lib/generators/pundit/install/install_generator.rb +6 -2
  21. data/lib/generators/pundit/install/templates/{application_policy.rb → application_policy.rb.tt} +7 -3
  22. data/lib/generators/pundit/policy/policy_generator.rb +6 -2
  23. data/lib/generators/pundit/policy/templates/policy.rb.tt +16 -0
  24. data/lib/generators/rspec/policy_generator.rb +7 -2
  25. data/lib/generators/rspec/templates/{policy_spec.rb → policy_spec.rb.tt} +1 -1
  26. data/lib/generators/test_unit/policy_generator.rb +7 -2
  27. data/lib/pundit/authorization.rb +251 -0
  28. data/lib/pundit/cache_store/legacy_store.rb +24 -0
  29. data/lib/pundit/cache_store/null_store.rb +27 -0
  30. data/lib/pundit/cache_store.rb +22 -0
  31. data/lib/pundit/context.rb +177 -0
  32. data/lib/pundit/policy_finder.rb +24 -3
  33. data/lib/pundit/railtie.rb +19 -0
  34. data/lib/pundit/rspec.rb +93 -20
  35. data/lib/pundit/version.rb +2 -1
  36. data/lib/pundit.rb +68 -257
  37. data/pundit.gemspec +10 -10
  38. data/spec/authorization_spec.rb +331 -0
  39. data/spec/generators_spec.rb +43 -0
  40. data/spec/policies/post_policy_spec.rb +28 -1
  41. data/spec/policy_finder_spec.rb +84 -17
  42. data/spec/pundit/helper_spec.rb +18 -0
  43. data/spec/pundit_spec.rb +110 -233
  44. data/spec/rspec_dsl_spec.rb +81 -0
  45. data/spec/simple_cov_check_action_formatter.rb +79 -0
  46. data/spec/spec_helper.rb +29 -265
  47. data/spec/support/lib/controller.rb +38 -0
  48. data/spec/support/lib/custom_cache.rb +19 -0
  49. data/spec/support/lib/instance_tracking.rb +20 -0
  50. data/spec/support/models/article.rb +4 -0
  51. data/spec/support/models/article_tag.rb +7 -0
  52. data/spec/support/models/artificial_blog.rb +7 -0
  53. data/spec/support/models/blog.rb +4 -0
  54. data/spec/support/models/comment.rb +5 -0
  55. data/spec/support/models/comment_four_five_six.rb +5 -0
  56. data/spec/support/models/comment_scope.rb +13 -0
  57. data/spec/support/models/comments_relation.rb +15 -0
  58. data/spec/support/models/customer/post.rb +11 -0
  59. data/spec/support/models/default_scope_contains_error.rb +5 -0
  60. data/spec/support/models/dummy_current_user.rb +7 -0
  61. data/spec/support/models/foo.rb +4 -0
  62. data/spec/support/models/post.rb +25 -0
  63. data/spec/support/models/post_four_five_six.rb +9 -0
  64. data/spec/support/models/project_one_two_three/avatar_four_five_six.rb +7 -0
  65. data/spec/support/models/project_one_two_three/tag_four_five_six.rb +11 -0
  66. data/spec/support/models/wiki.rb +4 -0
  67. data/spec/support/policies/article_tag_other_name_policy.rb +13 -0
  68. data/spec/support/policies/base_policy.rb +23 -0
  69. data/spec/support/policies/blog_policy.rb +5 -0
  70. data/spec/support/policies/comment_policy.rb +11 -0
  71. data/spec/support/policies/criteria_policy.rb +5 -0
  72. data/spec/support/policies/default_scope_contains_error_policy.rb +10 -0
  73. data/spec/support/policies/denier_policy.rb +7 -0
  74. data/spec/support/policies/dummy_current_user_policy.rb +9 -0
  75. data/spec/support/policies/nil_class_policy.rb +17 -0
  76. data/spec/support/policies/post_policy.rb +36 -0
  77. data/spec/support/policies/project/admin/comment_policy.rb +15 -0
  78. data/spec/support/policies/project/comment_policy.rb +17 -0
  79. data/spec/support/policies/project/criteria_policy.rb +7 -0
  80. data/spec/support/policies/project/post_policy.rb +13 -0
  81. data/spec/support/policies/project_one_two_three/avatar_four_five_six_policy.rb +6 -0
  82. data/spec/support/policies/project_one_two_three/comment_four_five_six_policy.rb +6 -0
  83. data/spec/support/policies/project_one_two_three/criteria_four_five_six_policy.rb +6 -0
  84. data/spec/support/policies/project_one_two_three/post_four_five_six_policy.rb +6 -0
  85. data/spec/support/policies/project_one_two_three/tag_four_five_six_policy.rb +6 -0
  86. data/spec/support/policies/publication_policy.rb +13 -0
  87. data/spec/support/policies/wiki_policy.rb +8 -0
  88. metadata +80 -130
  89. data/.travis.yml +0 -21
  90. data/lib/generators/pundit/policy/templates/policy.rb +0 -9
  91. /data/lib/generators/test_unit/templates/{policy_test.rb → policy_test.rb.tt} +0 -0
@@ -0,0 +1,36 @@
1
+ # frozen_string_literal: true
2
+
3
+ class PostPolicy < BasePolicy
4
+ class Scope < BaseScope
5
+ def resolve
6
+ scope.published
7
+ end
8
+ end
9
+
10
+ alias post record
11
+
12
+ def update?
13
+ post.user == user
14
+ end
15
+ alias edit? update?
16
+
17
+ def destroy?
18
+ false
19
+ end
20
+
21
+ def show?
22
+ true
23
+ end
24
+
25
+ def permitted_attributes
26
+ if post.user == user
27
+ %i[title votes]
28
+ else
29
+ [:votes]
30
+ end
31
+ end
32
+
33
+ def permitted_attributes_for_revise
34
+ [:body]
35
+ end
36
+ end
@@ -0,0 +1,15 @@
1
+ # frozen_string_literal: true
2
+
3
+ module Project
4
+ module Admin
5
+ class CommentPolicy < BasePolicy
6
+ def update?
7
+ true
8
+ end
9
+
10
+ def destroy?
11
+ false
12
+ end
13
+ end
14
+ end
15
+ end
@@ -0,0 +1,17 @@
1
+ # frozen_string_literal: true
2
+
3
+ module Project
4
+ class CommentPolicy < BasePolicy
5
+ class Scope < BaseScope
6
+ def resolve
7
+ scope
8
+ end
9
+ end
10
+
11
+ def update?
12
+ true
13
+ end
14
+
15
+ alias comment record
16
+ end
17
+ end
@@ -0,0 +1,7 @@
1
+ # frozen_string_literal: true
2
+
3
+ module Project
4
+ class CriteriaPolicy < BasePolicy
5
+ alias criteria record
6
+ end
7
+ end
@@ -0,0 +1,13 @@
1
+ # frozen_string_literal: true
2
+
3
+ module Project
4
+ class PostPolicy < BasePolicy
5
+ class Scope < BaseScope
6
+ def resolve
7
+ scope.read
8
+ end
9
+ end
10
+
11
+ alias post record
12
+ end
13
+ end
@@ -0,0 +1,6 @@
1
+ # frozen_string_literal: true
2
+
3
+ module ProjectOneTwoThree
4
+ class AvatarFourFiveSixPolicy < BasePolicy
5
+ end
6
+ end
@@ -0,0 +1,6 @@
1
+ # frozen_string_literal: true
2
+
3
+ module ProjectOneTwoThree
4
+ class CommentFourFiveSixPolicy < BasePolicy
5
+ end
6
+ end
@@ -0,0 +1,6 @@
1
+ # frozen_string_literal: true
2
+
3
+ module ProjectOneTwoThree
4
+ class CriteriaFourFiveSixPolicy < BasePolicy
5
+ end
6
+ end
@@ -0,0 +1,6 @@
1
+ # frozen_string_literal: true
2
+
3
+ module ProjectOneTwoThree
4
+ class PostFourFiveSixPolicy < BasePolicy
5
+ end
6
+ end
@@ -0,0 +1,6 @@
1
+ # frozen_string_literal: true
2
+
3
+ module ProjectOneTwoThree
4
+ class TagFourFiveSixPolicy < BasePolicy
5
+ end
6
+ end
@@ -0,0 +1,13 @@
1
+ # frozen_string_literal: true
2
+
3
+ class PublicationPolicy < BasePolicy
4
+ class Scope < BaseScope
5
+ def resolve
6
+ scope.published
7
+ end
8
+ end
9
+
10
+ def create?
11
+ true
12
+ end
13
+ end
@@ -0,0 +1,8 @@
1
+ # frozen_string_literal: true
2
+
3
+ class WikiPolicy
4
+ class Scope
5
+ # deliberate typo method
6
+ def initalize; end
7
+ end
8
+ end
metadata CHANGED
@@ -1,15 +1,15 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: pundit
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.1.0
4
+ version: 2.5.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Jonas Nicklas
8
8
  - Varvet AB
9
- autorequire:
9
+ autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2019-08-14 00:00:00.000000000 Z
12
+ date: 2025-03-03 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: activesupport
@@ -25,129 +25,23 @@ dependencies:
25
25
  - - ">="
26
26
  - !ruby/object:Gem::Version
27
27
  version: 3.0.0
28
- - !ruby/object:Gem::Dependency
29
- name: actionpack
30
- requirement: !ruby/object:Gem::Requirement
31
- requirements:
32
- - - ">="
33
- - !ruby/object:Gem::Version
34
- version: 3.0.0
35
- type: :development
36
- prerelease: false
37
- version_requirements: !ruby/object:Gem::Requirement
38
- requirements:
39
- - - ">="
40
- - !ruby/object:Gem::Version
41
- version: 3.0.0
42
- - !ruby/object:Gem::Dependency
43
- name: activemodel
44
- requirement: !ruby/object:Gem::Requirement
45
- requirements:
46
- - - ">="
47
- - !ruby/object:Gem::Version
48
- version: 3.0.0
49
- type: :development
50
- prerelease: false
51
- version_requirements: !ruby/object:Gem::Requirement
52
- requirements:
53
- - - ">="
54
- - !ruby/object:Gem::Version
55
- version: 3.0.0
56
- - !ruby/object:Gem::Dependency
57
- name: bundler
58
- requirement: !ruby/object:Gem::Requirement
59
- requirements:
60
- - - ">="
61
- - !ruby/object:Gem::Version
62
- version: '0'
63
- type: :development
64
- prerelease: false
65
- version_requirements: !ruby/object:Gem::Requirement
66
- requirements:
67
- - - ">="
68
- - !ruby/object:Gem::Version
69
- version: '0'
70
- - !ruby/object:Gem::Dependency
71
- name: pry
72
- requirement: !ruby/object:Gem::Requirement
73
- requirements:
74
- - - ">="
75
- - !ruby/object:Gem::Version
76
- version: '0'
77
- type: :development
78
- prerelease: false
79
- version_requirements: !ruby/object:Gem::Requirement
80
- requirements:
81
- - - ">="
82
- - !ruby/object:Gem::Version
83
- version: '0'
84
- - !ruby/object:Gem::Dependency
85
- name: rake
86
- requirement: !ruby/object:Gem::Requirement
87
- requirements:
88
- - - ">="
89
- - !ruby/object:Gem::Version
90
- version: '0'
91
- type: :development
92
- prerelease: false
93
- version_requirements: !ruby/object:Gem::Requirement
94
- requirements:
95
- - - ">="
96
- - !ruby/object:Gem::Version
97
- version: '0'
98
- - !ruby/object:Gem::Dependency
99
- name: rspec
100
- requirement: !ruby/object:Gem::Requirement
101
- requirements:
102
- - - ">="
103
- - !ruby/object:Gem::Version
104
- version: 2.0.0
105
- type: :development
106
- prerelease: false
107
- version_requirements: !ruby/object:Gem::Requirement
108
- requirements:
109
- - - ">="
110
- - !ruby/object:Gem::Version
111
- version: 2.0.0
112
- - !ruby/object:Gem::Dependency
113
- name: rubocop
114
- requirement: !ruby/object:Gem::Requirement
115
- requirements:
116
- - - '='
117
- - !ruby/object:Gem::Version
118
- version: 0.57.2
119
- type: :development
120
- prerelease: false
121
- version_requirements: !ruby/object:Gem::Requirement
122
- requirements:
123
- - - '='
124
- - !ruby/object:Gem::Version
125
- version: 0.57.2
126
- - !ruby/object:Gem::Dependency
127
- name: yard
128
- requirement: !ruby/object:Gem::Requirement
129
- requirements:
130
- - - ">="
131
- - !ruby/object:Gem::Version
132
- version: '0'
133
- type: :development
134
- prerelease: false
135
- version_requirements: !ruby/object:Gem::Requirement
136
- requirements:
137
- - - ">="
138
- - !ruby/object:Gem::Version
139
- version: '0'
140
28
  description: Object oriented authorization for Rails applications
141
29
  email:
142
30
  - jonas.nicklas@gmail.com
143
- - dev@elabs.se
31
+ - info@varvet.com
144
32
  executables: []
145
33
  extensions: []
146
34
  extra_rdoc_files: []
147
35
  files:
36
+ - ".github/ISSUE_TEMPLATE/bug_report.md"
37
+ - ".github/ISSUE_TEMPLATE/feature_request.md"
38
+ - ".github/PULL_REQUEST_TEMPLATE/gem_release_template.md"
39
+ - ".github/pull_request_template.md"
40
+ - ".github/workflows/main.yml"
41
+ - ".github/workflows/push_gem.yml"
148
42
  - ".gitignore"
149
43
  - ".rubocop.yml"
150
- - ".travis.yml"
44
+ - ".rubocop_ignore_git.yml"
151
45
  - ".yardopts"
152
46
  - CHANGELOG.md
153
47
  - CODE_OF_CONDUCT.md
@@ -156,30 +50,90 @@ files:
156
50
  - LICENSE.txt
157
51
  - README.md
158
52
  - Rakefile
53
+ - SECURITY.md
54
+ - config/rubocop-rspec.yml
159
55
  - lib/generators/pundit/install/USAGE
160
56
  - lib/generators/pundit/install/install_generator.rb
161
- - lib/generators/pundit/install/templates/application_policy.rb
57
+ - lib/generators/pundit/install/templates/application_policy.rb.tt
162
58
  - lib/generators/pundit/policy/USAGE
163
59
  - lib/generators/pundit/policy/policy_generator.rb
164
- - lib/generators/pundit/policy/templates/policy.rb
60
+ - lib/generators/pundit/policy/templates/policy.rb.tt
165
61
  - lib/generators/rspec/policy_generator.rb
166
- - lib/generators/rspec/templates/policy_spec.rb
62
+ - lib/generators/rspec/templates/policy_spec.rb.tt
167
63
  - lib/generators/test_unit/policy_generator.rb
168
- - lib/generators/test_unit/templates/policy_test.rb
64
+ - lib/generators/test_unit/templates/policy_test.rb.tt
169
65
  - lib/pundit.rb
66
+ - lib/pundit/authorization.rb
67
+ - lib/pundit/cache_store.rb
68
+ - lib/pundit/cache_store/legacy_store.rb
69
+ - lib/pundit/cache_store/null_store.rb
70
+ - lib/pundit/context.rb
170
71
  - lib/pundit/policy_finder.rb
72
+ - lib/pundit/railtie.rb
171
73
  - lib/pundit/rspec.rb
172
74
  - lib/pundit/version.rb
173
75
  - pundit.gemspec
76
+ - spec/authorization_spec.rb
77
+ - spec/generators_spec.rb
174
78
  - spec/policies/post_policy_spec.rb
175
79
  - spec/policy_finder_spec.rb
80
+ - spec/pundit/helper_spec.rb
176
81
  - spec/pundit_spec.rb
82
+ - spec/rspec_dsl_spec.rb
83
+ - spec/simple_cov_check_action_formatter.rb
177
84
  - spec/spec_helper.rb
85
+ - spec/support/lib/controller.rb
86
+ - spec/support/lib/custom_cache.rb
87
+ - spec/support/lib/instance_tracking.rb
88
+ - spec/support/models/article.rb
89
+ - spec/support/models/article_tag.rb
90
+ - spec/support/models/artificial_blog.rb
91
+ - spec/support/models/blog.rb
92
+ - spec/support/models/comment.rb
93
+ - spec/support/models/comment_four_five_six.rb
94
+ - spec/support/models/comment_scope.rb
95
+ - spec/support/models/comments_relation.rb
96
+ - spec/support/models/customer/post.rb
97
+ - spec/support/models/default_scope_contains_error.rb
98
+ - spec/support/models/dummy_current_user.rb
99
+ - spec/support/models/foo.rb
100
+ - spec/support/models/post.rb
101
+ - spec/support/models/post_four_five_six.rb
102
+ - spec/support/models/project_one_two_three/avatar_four_five_six.rb
103
+ - spec/support/models/project_one_two_three/tag_four_five_six.rb
104
+ - spec/support/models/wiki.rb
105
+ - spec/support/policies/article_tag_other_name_policy.rb
106
+ - spec/support/policies/base_policy.rb
107
+ - spec/support/policies/blog_policy.rb
108
+ - spec/support/policies/comment_policy.rb
109
+ - spec/support/policies/criteria_policy.rb
110
+ - spec/support/policies/default_scope_contains_error_policy.rb
111
+ - spec/support/policies/denier_policy.rb
112
+ - spec/support/policies/dummy_current_user_policy.rb
113
+ - spec/support/policies/nil_class_policy.rb
114
+ - spec/support/policies/post_policy.rb
115
+ - spec/support/policies/project/admin/comment_policy.rb
116
+ - spec/support/policies/project/comment_policy.rb
117
+ - spec/support/policies/project/criteria_policy.rb
118
+ - spec/support/policies/project/post_policy.rb
119
+ - spec/support/policies/project_one_two_three/avatar_four_five_six_policy.rb
120
+ - spec/support/policies/project_one_two_three/comment_four_five_six_policy.rb
121
+ - spec/support/policies/project_one_two_three/criteria_four_five_six_policy.rb
122
+ - spec/support/policies/project_one_two_three/post_four_five_six_policy.rb
123
+ - spec/support/policies/project_one_two_three/tag_four_five_six_policy.rb
124
+ - spec/support/policies/publication_policy.rb
125
+ - spec/support/policies/wiki_policy.rb
178
126
  homepage: https://github.com/varvet/pundit
179
127
  licenses:
180
128
  - MIT
181
- metadata: {}
182
- post_install_message:
129
+ metadata:
130
+ rubygems_mfa_required: 'true'
131
+ bug_tracker_uri: https://github.com/varvet/pundit/issues
132
+ changelog_uri: https://github.com/varvet/pundit/blob/main/CHANGELOG.md
133
+ documentation_uri: https://github.com/varvet/pundit/blob/main/README.md
134
+ homepage_uri: https://github.com/varvet/pundit
135
+ source_code_uri: https://github.com/varvet/pundit
136
+ post_install_message:
183
137
  rdoc_options: []
184
138
  require_paths:
185
139
  - lib
@@ -194,12 +148,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
194
148
  - !ruby/object:Gem::Version
195
149
  version: '0'
196
150
  requirements: []
197
- rubygems_version: 3.0.3
198
- signing_key:
151
+ rubygems_version: 3.5.11
152
+ signing_key:
199
153
  specification_version: 4
200
154
  summary: OO authorization for Rails
201
- test_files:
202
- - spec/policies/post_policy_spec.rb
203
- - spec/policy_finder_spec.rb
204
- - spec/pundit_spec.rb
205
- - spec/spec_helper.rb
155
+ test_files: []
data/.travis.yml DELETED
@@ -1,21 +0,0 @@
1
- language: ruby
2
- before_install:
3
- - gem install bundler -v 1.17.3
4
-
5
- matrix:
6
- include:
7
- - rvm: 2.5.1 # Pre-installed Ruby version
8
- script: bundle exec rake rubocop # ONLY lint once, first
9
- - rvm: 2.1
10
- - rvm: 2.2
11
- - rvm: 2.3.5
12
- - rvm: 2.4.6
13
- - rvm: 2.5.5
14
- - rvm: 2.6.3
15
- - rvm: jruby-9.1.8.0
16
- env:
17
- - JRUBY_OPTS="--debug"
18
- jdk: openjdk8
19
- - rvm: jruby-9.2.8.0
20
- env:
21
- - JRUBY_OPTS="--debug"
@@ -1,9 +0,0 @@
1
- <% module_namespacing do -%>
2
- class <%= class_name %>Policy < ApplicationPolicy
3
- class Scope < Scope
4
- def resolve
5
- scope.all
6
- end
7
- end
8
- end
9
- <% end -%>