recourse 7.11.3 → 8.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6e35c26234c6a52cdd8f81deeabc53416701caa7895494f8cc39e61169d469c2
-  data.tar.gz: 0b98268a91af045f9266a0bf3a6d68cd107b0a733111968675d1ef21704c78c1
+  metadata.gz: 7de35fdbec1f8879c4fb6636bf023bd6ed9e585b3d63fc95c0d76c4f0c36fa49
+  data.tar.gz: 5e3a1779c3153d4089d2039f074525986963bbc77a5ff6827995dffed74565cd
 SHA512:
-  metadata.gz: d00986e3679e75328b6f1e946fc60145b9a19a5faf2e6829523242b6a28800474d5bcd4de838ca4718f0e69b7d5bef618b37c71e9a0d94eda3de9e40a88ad6bc
-  data.tar.gz: 18826349bd88037bde697715eff5dd68f6e39d0ce0ff937118062cd6997721f75b4928bbf2174da3231ffd4356aab7e0c1913ecc614d05bea18e00514224e362
+  metadata.gz: 62dcf7cd0da6acb1af4925cebdc9b9186cd28984d19979acfdbaae7642c697bb77ace967cf1fe247dc3220e187f54d45c5ee80a199880d90041788d2f14d8c1b
+  data.tar.gz: dda6c4c65b5d3e72b56bdea47101f979d5d9f6a0c0452b53b5e1d655431d2cf4f238149b20bdd0b6dac9b000bc600d5474a4cfa8b7ac32ac01ae5e57bd55816c

data/CHANGELOG.md

@@ -7,6 +7,26 @@ For more information about changelogs, check [Keep a Changelog](http://keepachan
 
 ## [Unreleased]
 
+## 8.0.1 - 2026-10-14
+
+* [FIX] Guard the screens with `prepend_before_action`, not `before_action`
+
+  Since 8.0.0 a record's pages look it up through `recourse_relation` before any
+  `before_action` of the host's runs, so a relation reading who is signed in -- an admin's
+  own chats -- found nobody and raised. The README, the guides and the comments now say
+  `prepend_before_action :authenticate!`, which runs the guard first.
+
+## 8.0.0 - 2026-10-14
+
+* [BREAKING] A record's own pages find it among the rows `recourse_relation` lists
+
+  `show`, `edit`, `update` and `destroy` looked a record up by id across the whole model,
+  so a host that narrowed its table -- an admin's own chats, a team's memos -- still let
+  anybody read, edit or delete a row the table left out, by typing its id. The record is
+  now found through `recourse_relation`, and one the relation leaves out is not found. A
+  host whose relation filters out records that should still have pages of their own, or
+  selects columns a form cannot save back, finds them in a controller of its own.
+
 ## 7.11.3 - 2026-10-05
 
 * [FIX] A host without Action Cable draws every index

data/README.md

@@ -14,10 +14,10 @@ gem install recourse
 
 ```ruby
 # Gemfile
-gem 'recourse', '~> 7.0'
+gem 'recourse', '~> 8.0'
 ```
 
-`~> 7.0` follows Semantic Versioning: `bundle update` takes every 7.x and never a
+`~> 8.0` follows Semantic Versioning: `bundle update` takes every 8.x and never a
 breaking change. Rails 8.1 and Ruby 3.2 are the minimum; the pages need Turbo, which
 `turbo-rails` brings, and nothing else in the host. Everything a page is styled and
 scripted by — Bootstrap 6, its icons, Turbo, Stimulus and the controllers behind these
@@ -168,13 +168,18 @@ which the host defines to put behavior above every screen at once:
 
 ```ruby
 class RecoursesController < Recourse::BaseController
-  before_action :authenticate!
+  prepend_before_action :authenticate!
 end
 ```
 
+`prepend_before_action`, so the guard runs before the gem's own: a record's pages look
+it up through `recourse_relation`, and a relation that reads who is signed in finds
+nobody yet if the guard comes after.
+
 A controller the app already defines is left alone, and one line of it is usually
 enough: `recourse_relation` puts a scope of your own behind a table the gem draws
-whole, and `find_resource` finds a singular record the parent names no association for.
+whole, and behind the pages of each record in it, and `find_resource` finds a singular
+record the parent names no association for.
 
 ## Step 5. Enjoy the extras
 

data/app/controllers/concerns/recourse/resource_resolution.rb

@@ -4,13 +4,16 @@ module Recourse
   module ResourceResolution
   private
 
+    # A record with an id is found among the rows `recourse_relation` lists, so a host
+    # that narrows its table narrows the record's own pages with it: a row the table
+    # leaves out is not found, rather than read, edited or deleted under that route.
     # A singular resource is reached with no id — `/places/5/memo` names the record by
     # the path it hangs off rather than by a key of its own — so it is read off the
     # parent instead, under the name the route already gives it. Where the parent has
     # no association of that name the record is still the host's to find, in a
     # controller of its own.
     def find_resource
-      return assign resource_class.find(params.expect(:id)) if params.key? :id
+      return assign recourse_relation.find(params.expect(:id)) if params.key? :id
       return unless singular_reflection
 
       record = @recourse_parent.association(singular_reflection.name).reader

data/app/controllers/recourse/base_controller.rb

@@ -1,7 +1,7 @@
 module Recourse
   # Everything a recoursed screen does, in a class of its own so a host can put
   # its own behavior above it — `class RecoursesController < Recourse::BaseController`
-  # with a `before_action :authenticate!` guards every screen the gem serves.
+  # with a `prepend_before_action :authenticate!` guards every screen the gem serves.
   class BaseController < ApplicationController
     include Pagy::Method, Positioned, AttachmentResolution, AttachmentWriting,
             Landing, Paging, ListResolution, ParameterResolution, ParentNaming,
@@ -85,8 +85,9 @@ module Recourse
       @recourse_model.recourse_broadcast if @recourse_model.respond_to? :recourse_broadcast
     end
 
-    # The rows the index lists, before the search, the sort and the page reach them:
-    # every row of the model, narrowed by the parent a nested route names. The one thing
+    # The rows the index lists, before the search, the sort and the page reach them,
+    # and the only rows a record's own pages find: every row of the model, narrowed by
+    # the parent a nested route names. The one thing
     # a host overrides to put a scope of its own behind a screen the gem draws whole —
     # `def recourse_relation = County.with_boosts_for(@recourse_parent)`. Private, so
     # overriding it adds a query and never an action.

data/app/controllers/recourses_controller.rb

@@ -1,6 +1,6 @@
 # The superclass every recoursed controller gets, and what puts its templates
 # under `recourses/`. A host defines this class itself — its `app/controllers`
-# comes first — to put a `before_action` of its own above every screen.
+# comes first — to put a `prepend_before_action` of its own above every screen.
 class RecoursesController < Recourse::BaseController
   # Empty on purpose: the behavior is the base class, so a host redefining this
   # one loses none of it.

data/lib/recourse/version.rb

@@ -1,4 +1,4 @@
 module Recourse
   # Version of the gem, read by the gemspec and by hosts checking compatibility.
-  VERSION = '7.11.3'
+  VERSION = '8.0.1'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: recourse
 version: !ruby/object:Gem::Version
-  version: 7.11.3
+  version: 8.0.1
 platform: ruby
 authors:
 - claudiob
@@ -296,7 +296,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 4.0.20
 specification_version: 4
 summary: A routes.rb DSL that mounts ready-made resource screens.
 test_files: []