rack-autocrud 0.1.7 → 0.1.8

data/README.md

@@ -63,9 +63,9 @@ _config.ru_. This middleware will dynamically create a _Sinatra::Base_ subclass
 | Route       |           Action               | HTTP Response Code |
 | ----------- | -------------------------------| ------------------ |
 | get /       | List all _Person_ entries      |      403           |
-| post /      | Create a new _Person_          |      201 / 403     |
+| post /      | Create a new _Person_          |      201 / 402     |
 | get /:id    | Retrieve a _Person_            |      200           |
-| put /:id    | Update a _Person_              |      201 / 403     |
+| put /:id    | Update a _Person_              |      201 / 402     |
 | delete /:id | Destroy a _Person_             |      204           |
 
 The middleware will route based on the URI. Thus, _/person_ would correspond to *Endpoints::Person*'s _get /_ route.
@@ -118,6 +118,49 @@ Parameters:
 If any of these hooks returns anything other than _nil_, it is assumed to be a response object, which
 is returned immediately, and no further processing is performed.
 
+Selective Exposure
+==================
+
+All models in the namespace passed to _Rack::AutoCRUD_ are exposed by default.
+
+You can selectively hide models by defining a constant called _EXPOSE_ in your model definition.
+A value of 0 will cause _Rack::AutoCRUD_ to *not* create and endpoint for that particular model.
+
+Example:
+```ruby
+module Models
+  class Person
+    include DataMapper::Resource
+
+    property :id,   Serial
+    property :name, String
+
+    # Don't expose this model via AutoCRUD
+    EXPOSE = 0
+  end
+end
+```
+
+If you want to *not* expose all models by default, simply define the constant as part of the _Models_ module:
+
+```ruby
+module Models
+  # Hide all models by default
+  EXPOSE = 0
+end
+
+module Models
+  class ExposeMe
+    include DataMapper::Resource
+
+    property :id, Serial
+
+    # Expose this model
+    EXPOSE = 1
+  end
+end
+```
+
 Helper Functions
 ================
 

data/lib/rack/autocrud.rb

@@ -22,6 +22,7 @@ module Rack
       @endpoint_namespace = options[:endpoint_namespace]
       @includes           = options[:includes]
       @endpoint_mod       = nil
+      @model_mod          = nil
     end
 
     def call(env)
@@ -43,15 +44,27 @@ module Rack
         endpoint_klass = klass if String(klass.name).downcase == String(@endpoint_namespace + '::' + endpoint).downcase
       }
 
+      # Lazily locate the model namespace module (if we haven't already)
+      if @model_mod.nil?
+        ObjectSpace.each_object(Module) { |klass|
+          @model_mod = klass if String(klass.name).downcase == @model_namespace.downcase
+        }
+      end
+
       # Lazily locate the endpoint namespace module (if we haven't already)
       if endpoint_klass.nil? && @endpoint_mod.nil?
         ObjectSpace.each_object(Module) { |klass|
-          @endpoint_mod = klass if String(klass.name).downcase == @endpoint_namespace.downcase 
+          @endpoint_mod = klass if String(klass.name).downcase == @endpoint_namespace.downcase
         }
       end
 
+      # Make sure we copy the :EXPOSE constant if it's defined upstream
+      if !model_klass.const_defined?(:EXPOSE) && @model_mod.const_defined?(:EXPOSE)
+        model_klass.const_set(:EXPOSE,@model_mod.const_get(:EXPOSE))
+      end
+
       # Now, if we've got something, do our magic.
-      if !model_klass.nil?
+      if !model_klass.nil? && (!model_klass.const_defined?(:EXPOSE) || model_klass.const_get(:EXPOSE))
         # If we don't have an endpoint class, make one
         if endpoint_klass.nil?
           endpoint_klass = Class.new(Sinatra::Base)
@@ -87,8 +100,8 @@ module Rack
             # Attempt to create the model object
             obj = nil
             begin
-              obj = model.create(JSON.parse(request.body.read))
-              halt [ 403, '{ "error": "Failed to save ' + endpoint + '" }' ] unless obj && obj.saved?
+              obj = model.new(JSON.parse(request.body.read))
+              halt [ 402, '{ "error": "Failed to save ' + endpoint + '" }' ] unless obj && obj.saved?
             rescue JSON::ParserError
               halt [ 400, { 'error' => 'Invalid JSON in request body.', 'details' => $! }.to_json ]
             end
@@ -133,7 +146,7 @@ module Rack
             # Attempt to update the model
             begin
               saved = model.update(JSON.parse(request.body.read).merge(:id => params[:id]))
-              halt [ 403, '{ "error": "Access Denied" }' ] unless saved
+              halt [ 402, '{ "error": "Access Denied" }' ] unless saved
             rescue JSON::ParserError
               halt [ 400, { 'error' => 'Invalid JSON in request body.', 'details' => $! }.to_json ]
             end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rack-autocrud
 version: !ruby/object:Gem::Version
-  version: 0.1.7
+  version: 0.1.8
   prerelease: 
 platform: ruby
 authors:
@@ -93,7 +93,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 1.8.23
+rubygems_version: 1.8.24
 signing_key: 
 specification_version: 3
 summary: Rack middleware that automagically handles basic CRUD operations