rhino-rails 0.9.0 → 4.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c47ef7cba815b432540160ea4e7f7c59b409165faac4f8c212ebaa0da7b7de8c
-  data.tar.gz: 30dd4573a15a7670bad146d0863ddc7e76cf94d7899351a3e7d3e40cea4cafe4
+  metadata.gz: 547b86334ce61b25d13d6dccaa977a5821b8bdb3b275a5fb13a8b5b62d1cd0ee
+  data.tar.gz: 35f4ffa23101a49ab7c1403abd51aa15a2f1f57ff1c437000e49e394b6d1b8c0
 SHA512:
-  metadata.gz: d7934218616ccf17d3b8a8e1c52888d5fd38002f82e95850742998ff07f82123a519b2fe2619f4c952263d828443acf81ff367ac3ce3fee1170a657016b1c0f4
-  data.tar.gz: 01c2439d3c3580470ff47bc030485075fa292e5649e85ba33e5400e45f5e14766b42ad877ca930cc580b824ddbead606cfdb78974dca0412f7dce136ac406308
+  metadata.gz: 68dc8254b5a402eb13ca75a7a2d3b2919aef8e1bd6f5f2ffdae273ff5bad6eb69dc34a4aa3ee5bf6c20cd66dc1cdff5b301d1989c54c2101ae4eb4b8b042caae
+  data.tar.gz: aae80fedc9b6b03cc433204487b0f03fb6bffeed9805aea056cad1f74398f707882c02e9a434f88cce16618ec83c6b5a617c11d1c00230b45c5edfbc0a8aee23

data/lib/rhino/commands/install_command.rb

@@ -155,7 +155,7 @@ module Rhino
 
         templates_dir = File.expand_path("../../templates/multi_tenant/policies", __FILE__)
 
-        %w[organization_policy role_policy].each do |policy|
+        %w[organization_policy role_policy user_policy].each do |policy|
           template = File.join(templates_dir, "#{policy}.rb.erb")
           next unless File.exist?(template)
 

data/lib/rhino/templates/multi_tenant/policies/user_policy.rb.erb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+# Policy for the User model.
+#
+# Required for Rhino's per-include authorization: when a resource exposes a
+# User relation (e.g. ?include=assignee on Task, ?include=author on Comment,
+# ?include=owner on Project), Pundit looks up UserPolicy. Without this class
+# Pundit raises Pundit::NotDefinedError and the include returns 403, even for
+# roles that have the `users.index` / `users.show` permission granted.
+#
+# Customize per-action behavior or attribute permissions as needed; defaults
+# inherited from Rhino::ResourcePolicy enforce `users.<action>` permission
+# slugs against the user's `user_roles.permissions` array.
+class UserPolicy < Rhino::ResourcePolicy
+end

data/lib/rhino/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Rhino
-  VERSION = "0.9.0"
+  VERSION = "4.0.1"
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: rhino-rails
 version: !ruby/object:Gem::Version
-  version: 0.9.0
+  version: 4.0.1
 platform: ruby
 authors:
 - Bruno Cipolla
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-05-25 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -249,6 +248,7 @@ files:
 - lib/rhino/templates/multi_tenant/models/user_role.rb.erb
 - lib/rhino/templates/multi_tenant/policies/organization_policy.rb.erb
 - lib/rhino/templates/multi_tenant/policies/role_policy.rb.erb
+- lib/rhino/templates/multi_tenant/policies/user_policy.rb.erb
 - lib/rhino/templates/multi_tenant/seeders/organization_seeder.rb.erb
 - lib/rhino/templates/multi_tenant/seeders/role_seeder.rb.erb
 - lib/rhino/templates/rhino.rb
@@ -260,7 +260,6 @@ homepage: https://github.com/rhino-project/rhino-rails
 licenses:
 - MIT
 metadata: {}
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -275,8 +274,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.22
-signing_key:
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Automatic REST API generation for Rails models
 test_files: []