pundit_can 0.1.4 → 0.1.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d34cbf6f7fb95547292dfbb214b16a7629178caaa493189b078d5f462beb9f19
-  data.tar.gz: 7093dfdf5fa51f7033514c3d56ad93d37a5b0085a4faa37c5d94d2e1d3ff5c81
+  metadata.gz: 95df5ff56989946351acaa622d23e1aa0d0575e8cce7c47dd4e47b266a02c247
+  data.tar.gz: e9f75be20b4e055f0583657ef05d3dcea4cdb314f6998642bef734c369fd8024
 SHA512:
-  metadata.gz: f8a8a1b4c3ed8d1f81a2f8245834f4bb7e86ccc6b15b34914807539585957e9e5c6d15ccfbb677b435243f554ad523cacdb4d75ff6f3528d0b9dff1efe9e5f5b
-  data.tar.gz: 10f3c693bfc592d46336d2d4ffec05c59ce89d2e32814fbb94bc4999c48554806b45e79f52a589b3f2737c8862580d1c02614d2fd28994bb629b6f58aed00d86
+  metadata.gz: 1ff5fb33b343efd582132d77edeb12651b73dd40f0c035c301997beb6f775cdd3a9dbfb660f16897f0a0f34655beeddab96d32f48732497229dd03900cdeafc6
+  data.tar.gz: 365fbe976dea92ef37d57701f363f6f416a078983e46bd9a6002cdb9283a1341df0ca5c163c7b5de95f2861b483a2e17cc086ba1518d5a6d365ac523cdbdccbd

data/README.md

@@ -49,7 +49,7 @@ When the association name doesn't match the model name, use the `:association` o
 class ArticlesController < ApplicationController
   load_resource model_class: User, parent: true
   load_resource model_class: Article, through: :user, association: :articles
-  
+
   # This passes @user.articles instead of @user.posts to the ArticlePolicy::Scope
 end
 ```
@@ -57,6 +57,22 @@ end
 This is useful when you have associations like `has_many :published_posts, class_name: "Post"`
 or other cases where the association method name differs from the model class name.
 
+When the parent relationship attribute in the model uses a different name than the `:through`
+option, use the `:parent_key` option:
+
+```ruby
+class ArticlesController < ApplicationController
+  load_resource model_class: User, parent: true
+  load_resource model_class: Article, through: :user, parent_key: :admin
+
+  # This builds Article.new(admin: @user) instead of Article.new(user: @user)
+end
+```
+
+This is useful when the model's foreign key or association attribute name differs from the
+parent's instance name. For example, when `belongs_to :admin, class_name: "User"` or
+`belongs_to :author, class_name: "User"` is used instead of a standard `belongs_to :user`.
+
 #### Customized loading
 
 You can customize the loading for cases when the model, controller, and policies don't match up name-wise.

data/lib/pundit_can/load_and_authorize.rb

@@ -78,6 +78,12 @@ module PunditCan
       # differs from the model name. For example, +through: :user, association: :articles+ will
       # pass +@user.articles+ as the scope.
       #
+      # @param [Symbol] parent_key Optional. When used with +:through+, specifies the associated
+      # method on the model and sets the parent. By default the parent_key value = +:through+. Use
+      # this when the parent relationship in the model uses a different name.
+      # For example, +through: :user, parent_key: :admin+ will
+      # pass +Article.new(admin: @user)+ when creating new model instances.
+      #
       # @param [Constant] policy_class Optional. The policy class to use. Defaults from controller name.
       #
       # @param [Constant] policy_scope_class Optional. The policy scope class to use. Defaults from controller name.
@@ -103,17 +109,19 @@ module PunditCan
       policy_kwopts = options.extract!(:policy_class)
       policy_scope_kwopts = options.extract!(:policy_scope_class)
 
+      parent = instance_variable_get("@#{options[:through]}") if options[:through]
+
       loaded = if options[:parent]
         load_parent_instance_var(model_class, param_key, policy_kwopts, policy_scope_kwopts)
       else
         # When :through is specified, pass the parent's association as the scope
-        scope_class = if options[:through] && (parent = instance_variable_get("@#{options[:through]}"))
+        scope_class = if parent
           assoc = options[:association] || model_class.name.underscore.pluralize
           parent.public_send(assoc)
         else
           model_class
         end
-        load_instance_var(model_class, param_key, policy_kwopts, policy_scope_kwopts, scope_class)
+        load_instance_var(model_class, param_key, policy_kwopts, policy_scope_kwopts, scope_class, parent, options[:through] || options[:parent_key])
       end
 
       instance_name = instance_name.pluralize unless loaded.is_a?(model_class)
@@ -134,14 +142,18 @@ module PunditCan
       options[:model_class].name.underscore if options[:model_class].present? && options[:parent]
     end
 
-    def load_instance_var(model_class, param_key, policy_kwopts, policy_scope_kwopts, scope_class = model_class)
+    def load_instance_var(model_class, param_key, policy_kwopts, policy_scope_kwopts, scope_class = model_class, parent = nil, parent_key = nil)
       case params[:action]
       when "index"
         load_scope(scope_class, policy_kwopts, policy_scope_kwopts)
-      when "new"
-        authorize(model_class.new, **policy_kwopts)
-      when "create"
-        authorize(model_class.new(permitted_attributes(model_class)), **policy_kwopts)
+      when "create", "new"
+        parent_attributes = {}
+        parent_attributes[parent_key] = parent if parent
+        if params[:action] == "new"
+          authorize(model_class.new(parent_attributes), **policy_kwopts)
+        else
+          authorize(model_class.new(parent_attributes.merge(permitted_attributes(model_class))), **policy_kwopts)
+        end
       when "edit", "update", "show", "destroy"
         load_model(scope_class, param_key, policy_kwopts, policy_scope_kwopts)
       else

data/lib/pundit_can/version.rb

@@ -1,3 +1,3 @@
 module PunditCan
-  VERSION = "0.1.4"
+  VERSION = "0.1.5"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pundit_can
 version: !ruby/object:Gem::Version
-  version: 0.1.4
+  version: 0.1.5
 platform: ruby
 authors:
 - candland
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-03-19 00:00:00.000000000 Z
+date: 2026-05-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: pundit