role_based_authorization 0.1.10 → 0.1.11

data/README.rdoc

@@ -1,10 +1,8 @@
 = RoleBasedAuthorization 
 
 
-This library provide a very simple authorization system. It should work fine with
-most of the authentication plugins (and gems) out there, even though little testing
-has been done in this regard. There are a lot of similar plugin/gems and probably
-this is not better than any others (see http://steffenbartsch.com/blog/2008/08/rails-authorization-plugins/ for a nice review).
+This library provide a very simple authorization system. It should work fine with most of the authentication plugins (and gems) out there, even though little testing has been done in this regard. There are a lot of similar plugin/gems and probably this is not better than any others (see http://steffenbartsch.com/blog/2008/08/rails-authorization-plugins/ for a nice review). I already used it in several small projects and it worked great
+for my needs. 
 
 Installation:
 * install the role_based_authorization by issuing:

data/VERSION

@@ -1 +1 @@
-0.1.10
+0.1.11

data/lib/role_based_authorization/role_based_authorization.rb

@@ -111,7 +111,7 @@ module RoleBasedAuthorization
   
   # Returns true if one of the rules defined for this controller matches
   # the given options
-  def exist_rule_matching_options? user, controllers, actions, ids
+  def exists_rule_matching_options? user, controllers, actions, ids
     rules = self.class.role_auth_rules
     AUTHORIZATION_LOGGER.debug("current set of rules: %s" % [rules.inspect])
     
@@ -168,7 +168,7 @@ module RoleBasedAuthorization
           action,
           ids.inspect])
     
-    if exist_rule_matching_options?( user, [controller,'application'], [:all,action] , ids )
+    if exists_rule_matching_options?( user, [controller,'application'], [:all,action] , ids )
       AUTHORIZATION_LOGGER.info('returning true (access granted)')
       return true 
     else      
@@ -197,7 +197,7 @@ module RoleBasedAuthorization
   #   if_authorized?( edit_item_path ) { |opts| link_to('yyy', opts) }
   
   def if_authorized? opts, &block
-    cleanup_url_regexp = %r{(\Ahttps?://[^/]*(#{ActionController::Base.relative_url_root})?)}
+    cleanup_url_regexp = %r{(#{ActionController::Base.relative_url_root})?}
     
     url_options = nil
     if opts.class == String

data/role_based_authorization.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = %q{role_based_authorization}
-  s.version = "0.1.10"
+  s.version = "0.1.11"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Roberto Esposito"]
-  s.date = %q{2010-02-16}
+  s.date = %q{2010-02-17}
   s.description = %q{Provides a simple DSL for specifying the authorization logic of your application. Install the gem, add a role attribute to your user model and your almost ready to go.}
   s.email = %q{boborbt@gmail.com}
   s.extra_rdoc_files = [

data/test/role_based_authorization_test.rb

@@ -10,8 +10,11 @@ class DummyUser
   def role=(new_role)       @role = new_role end
 end
 
-class DummyController < ActionController::Base
-  include RoleBasedAuthorization
+class ApplicationController < ActionController::Base
+  include RoleBasedAuthorization  
+end
+
+class DummyController < ApplicationController
   
   def initialize()          return @user = DummyUser.new end
   def logged_in?()          return true end
@@ -101,9 +104,32 @@ class RoleBasedAuthorizationTest < ActiveSupport::TestCase
   
   
   test "helper method should work" do 
+    got_inside = false
     @controller.if_authorized?(:action => 'very_low_security') {
-      assert true
+      got_inside = true
     }
+    
+    assert got_inside
+  end
+  
+  test "helper_method should work with paths" do
+    got_inside = false
+    @controller.if_authorized?( '/dummy/very_low_security' ) do
+      got_inside = true
+    end
+    
+    assert got_inside
+  end
+  
+  test "helper_method should work with resource paths even when prefixed with the ActionController::Base.relative_url_root" do
+    ActionController::Base.relative_url_root = '/appname'
+
+    got_inside = false
+    @controller.if_authorized?( '/appname/dummy/very_low_security' ) do
+      got_inside = true
+    end
+    
+    assert got_inside
   end
 
   

data/test/test_helper.rb

@@ -1,9 +1,13 @@
 require 'rubygems'
 require 'active_support'
+require 'action_controller'
 require 'active_support/test_case'
+require 'test/unit'
 
-ENV['RAILS_ENV'] = 'test'
-ENV['RAILS_ROOT'] ||= File.dirname(__FILE__) + '/../../../..'
+RAILS_ROOT='.'
+AUTH_LOG_DIR = File.join(RAILS_ROOT,'log')
+Dir.mkdir(AUTH_LOG_DIR) unless File.directory?(AUTH_LOG_DIR)
 
-require 'test/unit'
-require File.expand_path(File.join(ENV['RAILS_ROOT'], 'config/environment.rb'))
+ActionController::Routing::Routes.draw do |map|
+  map.dummy_low_action '/dummy/very_low_security', :controller => :dummy, :action => :very_low_security
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: role_based_authorization
 version: !ruby/object:Gem::Version 
-  version: 0.1.10
+  version: 0.1.11
 platform: ruby
 authors: 
 - Roberto Esposito
@@ -9,7 +9,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2010-02-16 00:00:00 +01:00
+date: 2010-02-17 00:00:00 +01:00
 default_executable: 
 dependencies: []