rabarber 4.1.4 → 5.1.0

data/lib/rabarber/audit/events/base.rb

@@ -1,49 +0,0 @@
-# frozen_string_literal: true
-
-require_relative "../logger"
-
-module Rabarber
-  module Audit
-    module Events
-      class Base
-        attr_reader :roleable, :specifics
-
-        def self.trigger(roleable, specifics)
-          new(roleable, specifics).send(:log)
-        end
-
-        private
-
-        def initialize(roleable, specifics)
-          @roleable = roleable
-          @specifics = specifics
-        end
-
-        def log
-          Rabarber::Audit::Logger.log(log_level, message)
-        end
-
-        def log_level
-          raise NotImplementedError
-        end
-
-        def message
-          raise NotImplementedError
-        end
-
-        def identity
-          roleable.log_identity
-        end
-
-        def human_context
-          case context
-          in { context_type: nil, context_id: nil } then "Global"
-          in { context_type:, context_id: nil } then context_type
-          in { context_type:, context_id: } then "#{context_type}##{context_id}"
-          else raise Rabarber::Error, "Unexpected context: #{context.inspect}"
-          end
-        end
-      end
-    end
-  end
-end

data/lib/rabarber/audit/events/roles_assigned.rb

@@ -1,31 +0,0 @@
-# frozen_string_literal: true
-
-module Rabarber
-  module Audit
-    module Events
-      class RolesAssigned < Base
-        private
-
-        def log_level
-          :info
-        end
-
-        def message
-          "[Role Assignment] #{identity} | context: #{human_context} | assigned: #{roles_to_assign} | current: #{current_roles}"
-        end
-
-        def context
-          specifics.fetch(:context)
-        end
-
-        def roles_to_assign
-          specifics.fetch(:roles_to_assign)
-        end
-
-        def current_roles
-          specifics.fetch(:current_roles)
-        end
-      end
-    end
-  end
-end

data/lib/rabarber/audit/events/roles_revoked.rb

@@ -1,31 +0,0 @@
-# frozen_string_literal: true
-
-module Rabarber
-  module Audit
-    module Events
-      class RolesRevoked < Base
-        private
-
-        def log_level
-          :info
-        end
-
-        def message
-          "[Role Revocation] #{identity} | context: #{human_context} | revoked: #{roles_to_revoke} | current: #{current_roles}"
-        end
-
-        def context
-          specifics.fetch(:context)
-        end
-
-        def roles_to_revoke
-          specifics.fetch(:roles_to_revoke)
-        end
-
-        def current_roles
-          specifics.fetch(:current_roles)
-        end
-      end
-    end
-  end
-end

data/lib/rabarber/audit/events/unauthorized_attempt.rb

@@ -1,27 +0,0 @@
-# frozen_string_literal: true
-
-module Rabarber
-  module Audit
-    module Events
-      class UnauthorizedAttempt < Base
-        private
-
-        def log_level
-          :warn
-        end
-
-        def message
-          "[Unauthorized Attempt] #{identity} | request: #{request_method} #{path}"
-        end
-
-        def path
-          specifics.fetch(:path)
-        end
-
-        def request_method
-          specifics.fetch(:request_method)
-        end
-      end
-    end
-  end
-end

data/lib/rabarber/audit/logger.rb

@@ -1,23 +0,0 @@
-# frozen_string_literal: true
-
-require "singleton"
-
-module Rabarber
-  module Audit
-    class Logger
-      include Singleton
-
-      attr_reader :logger
-
-      def initialize
-        @logger = ::Logger.new(Rails.root.join("log/rabarber_audit.log"))
-      end
-
-      def self.log(log_level, message)
-        return unless Rabarber::Configuration.instance.audit_trail_enabled
-
-        instance.logger.public_send(log_level, message)
-      end
-    end
-  end
-end

data/lib/rabarber/core/null_roleable.rb

@@ -1,23 +0,0 @@
-# frozen_string_literal: true
-
-module Rabarber
-  module Core
-    class NullRoleable
-      def roles(context:) # rubocop:disable Lint/UnusedMethodArgument
-        []
-      end
-
-      def all_roles
-        {}
-      end
-
-      def has_role?(*role_names, context: nil) # rubocop:disable Lint/UnusedMethodArgument
-        false
-      end
-
-      def log_identity
-        "Unauthenticated #{Rabarber::HasRoles.roleable_class.model_name.human.downcase}"
-      end
-    end
-  end
-end

data/lib/rabarber/core/permissions_integrity_checker.rb

@@ -1,36 +0,0 @@
-# frozen_string_literal: true
-
-module Rabarber
-  module Core
-    class PermissionsIntegrityChecker
-      attr_reader :controller
-
-      def initialize(controller = nil)
-        @controller = controller
-      end
-
-      def run!
-        return if missing_list.empty?
-
-        raise(
-          Rabarber::Error,
-          "Following actions were passed to 'grant_access' method but are not defined in the controller:\n#{missing_list.to_yaml}"
-        )
-      end
-
-      private
-
-      def missing_list
-        @missing_list ||= action_rules.each_with_object([]) do |(controller, hash), arr|
-          missing_actions = hash.keys - controller.action_methods.map(&:to_sym)
-          arr << { controller => missing_actions } if missing_actions.any?
-        end
-      end
-
-      def action_rules
-        rules = Rabarber::Core::Permissions.action_rules
-        controller ? rules.slice(controller) : rules
-      end
-    end
-  end
-end