restful_acl 2.1.2 → 2.1.3
Sign up to get free protection for your applications and to get access to all the features.
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
2.1.
|
1
|
+
2.1.3
|
@@ -7,7 +7,7 @@ module RestfulAclController
|
|
7
7
|
|
8
8
|
module ClassMethods
|
9
9
|
|
10
|
-
attr_accessor :
|
10
|
+
attr_accessor :restful_object, :restful_parent, :restful_klass, :restful_user
|
11
11
|
|
12
12
|
def has_permission?
|
13
13
|
return true if administrator?
|
@@ -17,11 +17,11 @@ module RestfulAclController
|
|
17
17
|
begin
|
18
18
|
# Let's let the Model decide what is acceptable
|
19
19
|
permission_denied unless case params[:action]
|
20
|
-
when "index" then @
|
21
|
-
when "new", "create" then @
|
22
|
-
when "show" then @
|
23
|
-
when "edit", "update" then @
|
24
|
-
when "destroy" then @
|
20
|
+
when "index" then @restful_klass.is_indexable_by(@restful_user, @restful_parent)
|
21
|
+
when "new", "create" then @restful_klass.is_creatable_by(@restful_user, @restful_parent)
|
22
|
+
when "show" then @restful_object.is_readable_by(@restful_user, @restful_parent)
|
23
|
+
when "edit", "update" then @restful_object.is_updatable_by(@restful_user, @restful_parent)
|
24
|
+
when "destroy" then @restful_object.is_deletable_by(@restful_user, @restful_parent)
|
25
25
|
else check_non_restful_route
|
26
26
|
end
|
27
27
|
|
@@ -37,45 +37,45 @@ module RestfulAclController
|
|
37
37
|
private
|
38
38
|
|
39
39
|
def load_actors(id)
|
40
|
-
@
|
40
|
+
@restful_user = current_user
|
41
41
|
|
42
42
|
# Load the Model based on the controller name
|
43
|
-
@
|
43
|
+
@restful_klass = self.controller_name.classify.demodulize.constantize
|
44
44
|
|
45
45
|
if id.present?
|
46
46
|
# Load the object and possible parent requested
|
47
|
-
@
|
48
|
-
@
|
47
|
+
@restful_object = @restful_klass.find(params[:id])
|
48
|
+
@restful_parent = @restful_object.get_mom if @restful_klass.has_parent?
|
49
49
|
else
|
50
50
|
# No object was requested, so we need to go to the URI to figure out the parent
|
51
|
-
@
|
51
|
+
@restful_parent = get_morestful_frorestful_request_uri(@restful_klass) if @restful_klass.has_parent?
|
52
52
|
|
53
|
-
if @
|
54
|
-
@
|
53
|
+
if @restful_klass.is_singleton?
|
54
|
+
@restful_object = @restful_parent.send(@restful_klass.to_s.tableize.singularize.to_sym)
|
55
55
|
else
|
56
56
|
# No object was requested (index, create actions)
|
57
|
-
@
|
57
|
+
@restful_object = nil
|
58
58
|
end
|
59
59
|
end
|
60
60
|
end
|
61
61
|
|
62
62
|
def check_non_restful_route
|
63
|
-
if @
|
64
|
-
@
|
65
|
-
elsif @
|
66
|
-
@
|
63
|
+
if @restful_object
|
64
|
+
@restful_object.is_readable_by(@restful_user, @restful_parent)
|
65
|
+
elsif @restful_klass
|
66
|
+
@restful_klass.is_indexable_by(@restful_user, @restful_parent)
|
67
67
|
else
|
68
68
|
false # If all else fails, deny access
|
69
69
|
end
|
70
70
|
end
|
71
71
|
|
72
|
-
def
|
72
|
+
def get_method_frorestful_error(error)
|
73
73
|
error.message.gsub('`', "'").split("'").at(1)
|
74
74
|
end
|
75
75
|
|
76
76
|
def raise_error(error)
|
77
|
-
method =
|
78
|
-
message = (is_class_method?(method)) ? "#{@
|
77
|
+
method = get_method_frorestful_error(error)
|
78
|
+
message = (is_class_method?(method)) ? "#{@restful_klass}#self.#{method}" : "#{@restful_klass}##{method}"
|
79
79
|
raise NoMethodError, "[RESTful_ACL] #{message}(user, parent = nil) seems to be missing?"
|
80
80
|
end
|
81
81
|
|
@@ -83,7 +83,7 @@ module RestfulAclController
|
|
83
83
|
method =~ /[index|creat]able/
|
84
84
|
end
|
85
85
|
|
86
|
-
def
|
86
|
+
def get_morestful_frorestful_request_uri(child_klass)
|
87
87
|
parent_klass = child_klass.mom.to_s
|
88
88
|
bits = request.request_uri.split('/')
|
89
89
|
parent_id = bits.at(bits.index(parent_klass.pluralize) + 1)
|
@@ -92,11 +92,11 @@ module RestfulAclController
|
|
92
92
|
end
|
93
93
|
|
94
94
|
def administrator?
|
95
|
-
@
|
95
|
+
@restful_user.respond_to?("is_admin?") && @restful_user.is_admin?
|
96
96
|
end
|
97
97
|
|
98
98
|
def blame
|
99
|
-
@
|
99
|
+
@restful_user.respond_to?(:login) ? @restful_user.login : @restful_user.username
|
100
100
|
end
|
101
101
|
|
102
102
|
def permission_denied
|
File without changes
|
File without changes
|
data/lib/restful_acl.rb
CHANGED
@@ -1,3 +1,3 @@
|
|
1
|
-
require 'controller'
|
2
|
-
require 'helper'
|
3
|
-
require 'model'
|
1
|
+
require 'restful_acl/controller'
|
2
|
+
require 'restful_acl/helper'
|
3
|
+
require 'restful_acl/model'
|
data/restful_acl.gemspec
CHANGED
@@ -5,7 +5,7 @@
|
|
5
5
|
|
6
6
|
Gem::Specification.new do |s|
|
7
7
|
s.name = %q{restful_acl}
|
8
|
-
s.version = "2.1.
|
8
|
+
s.version = "2.1.3"
|
9
9
|
|
10
10
|
s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
|
11
11
|
s.authors = ["Matt Darby"]
|
@@ -21,10 +21,10 @@ Gem::Specification.new do |s|
|
|
21
21
|
"Rakefile",
|
22
22
|
"VERSION",
|
23
23
|
"init.rb",
|
24
|
-
"lib/controller.rb",
|
25
|
-
"lib/helper.rb",
|
26
|
-
"lib/model.rb",
|
27
24
|
"lib/restful_acl.rb",
|
25
|
+
"lib/restful_acl/controller.rb",
|
26
|
+
"lib/restful_acl/helper.rb",
|
27
|
+
"lib/restful_acl/model.rb",
|
28
28
|
"rails/init.rb",
|
29
29
|
"restful_acl.gemspec",
|
30
30
|
"uninstall.rb"
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: restful_acl
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 2.1.
|
4
|
+
version: 2.1.3
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Matt Darby
|
@@ -36,10 +36,10 @@ files:
|
|
36
36
|
- Rakefile
|
37
37
|
- VERSION
|
38
38
|
- init.rb
|
39
|
-
- lib/controller.rb
|
40
|
-
- lib/helper.rb
|
41
|
-
- lib/model.rb
|
42
39
|
- lib/restful_acl.rb
|
40
|
+
- lib/restful_acl/controller.rb
|
41
|
+
- lib/restful_acl/helper.rb
|
42
|
+
- lib/restful_acl/model.rb
|
43
43
|
- rails/init.rb
|
44
44
|
- restful_acl.gemspec
|
45
45
|
- uninstall.rb
|