rails_admin_authorized_fields 0.0.2 → 0.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c3ddbd9ec37f940016aa0799032308491c2ef5c2
-  data.tar.gz: b11092e3da381667a0dc27ed25479bf09fb67983
+  metadata.gz: 35e8abb44b50cce2e9e0ac0eb25c1f59c451dd29
+  data.tar.gz: fe374a70e10a4e72495dbfa74cb424ad05f191e6
 SHA512:
-  metadata.gz: 1cb18ccf2c9a8447ed2455edf65984ca58dde5c8931d7b39703009ec7e02b751e401c8aa76143d21a82fa702de3911303701335c702b213d65ca7e91a477e09b
-  data.tar.gz: b922e774c0be83c01db94457424e6cc37b0c48c7f574ec3b24e1b3839b12e74b51f81629a0e449b3a1db8ffed5b5861496c6ea012a0ca947e41a45d29a6ad3ef
+  metadata.gz: 58bdc9b82dbb905def88ad28dd239cabf133932b95f79ee0881b91d77b5e60d6e81dd73e1b29455b3d44635b07e5ca957d9efa1de20f62cbf0dc80f6e790aec6
+  data.tar.gz: 1e89f36d6d3fd5059b739f8c12e5bbe70e771da4fe8c18666235fdbfaeaef50969cb0b0f519db82247bb3c39d1094e0ffec3ce2c68b2d69f937a2493220cc3e7

data/README.md

@@ -22,8 +22,8 @@ Just add ```authorized_fields``` section to your model with specified rules:
 
     rails_admin do
       authorized_fields( {
-        [ :enabled, :is_default, :text_slug ] => Proc.new { bindings[:view]._current_user.has_role?( :admin ) },
-        [ :domain ] => Proc.new { !bindings[:view]._current_user.has_role?( :manager ) },
+        [ :enabled, :is_default, :text_slug ] => proc { bindings[:view]._current_user.has_role?( :admin ) },
+        [ :domain ] => proc { !bindings[:view]._current_user.has_role?( :manager ) },
       } )
 
       field :enabled
@@ -33,6 +33,22 @@ Just add ```authorized_fields``` section to your model with specified rules:
       field :text_slug
     end
 
+You can also use ```unauthorized_fields``` section in opposite of ```authorized_fields```. All rules will be checked.
+
+    rails_admin do
+      unauthorized_fields( {
+        [ :enabled, :is_default, :text_slug ] => proc { bindings[:view]._current_user.has_role?( :manager ) },
+      } )
+
+      field :enabled
+      field :name
+      field :domain
+      field :is_default
+      field :text_slug
+    end
+
+Note: all fields are ```authorized``` by default.
+
 TODO: just a small changes needed to make ```authorized_fields``` section overridable in subsection (list, edit)
 
 ## Contributing

data/lib/rails_admin_authorized_fields/section.rb

@@ -1,44 +1,72 @@
 module RailsAdminAuthorizedFields
   module AuthorazedFieldsSection
-    attr_accessor :authorization_rules
-
     def initialize(parent)
-      @authorization_rules = {}
+      @allow_rules, @deny_rules = {}, {}
 
       super(parent)
     end
 
     def authorized_fields(rules)
       rules.each do |fields, rule|
-        fields = [ fields ].flatten
+        fields = [fields].flatten
 
         fields.each do |name|
           name = name.to_sym
-          @authorization_rules[ name ] ||= []
-          @authorization_rules[ name ] << rule
+          @allow_rules[name] ||= []
+          @allow_rules[name] << rule
         end
       end
     end
 
-    def field_authorization_rules( name )
-      return @authorization_rules[ name ] || [] if @authorization_rules.any?
-      return [] if self.parent.nil?
-      parent.field_authorization_rules( name )
+    def unauthorized_fields(rules)
+      rules.each do |fields, rule|
+        fields = [fields].flatten
+
+        fields.each do |name|
+          name = name.to_sym
+          @deny_rules[name] ||= []
+          @deny_rules[name] << rule
+        end
+      end
     end
 
     def visible_fields
       super.select do |field|
         authorized = true
 
-        rules = field.section.field_authorization_rules( field.name )
+        rules = field.section.field_authorization_rules(field.name)
+
+        rules[:allow].each do |rule|
+          authorized &= instance_eval(&rule)
+        end
 
-        rules.each do |rule|
-          authorized &= instance_eval( &rule )
+        rules[:deny].each do |rule|
+          authorized &= !instance_eval(&rule)
         end
 
         authorized
       end
     end
+
+    protected
+  
+      def field_authorization_rules(name)
+        { 
+          allow: extract_rules(name, :allow_rules),
+          deny: extract_rules(name, :deny_rules),
+        }
+      end
+
+      def extract_rules(name, kind, descendant = nil)
+        rules = instance_variable_get(:"@#{kind}")
+
+        return rules[name] || [] if rules.any?
+        return [] if @parent.nil?
+        return [] if self == descendant 
+
+        @parent.extract_rules(name, kind, self)
+      end
+
   end
 end
 
@@ -52,4 +80,3 @@ module RailsAdmin
     end
   end
 end
-

data/lib/rails_admin_authorized_fields/version.rb

@@ -1,3 +1,3 @@
 module RailsAdminAuthorizedFields
-  VERSION = "0.0.2"
+  VERSION = "0.0.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rails_admin_authorized_fields
 version: !ruby/object:Gem::Version
-  version: 0.0.2
+  version: 0.0.3
 platform: ruby
 authors:
 - Sergey Malykh