strongbolt 0.3.6 → 0.3.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: b2be7a6357fe3a1bac22a246b34013f1c5109c5e
-  data.tar.gz: 145bb831919b70d9e9165328f097f77249c83726
+  metadata.gz: baf025ec21753dc7118e68781d9bb7b2daa018ce
+  data.tar.gz: d2d254b7e26d55c1c8f5ec0ce76dd4a02dada6d5
 SHA512:
-  metadata.gz: 4a4612a54b4b84c47381bae52e9e8aca1a2992a23c6d7c48981beab4da8beaebbd5f45084c6ca4427d3513a491b530de9efebf5ca595cf7b0087a59aff5c35c6
-  data.tar.gz: f933dd404243f00ed6a081619b997aa04b10af0924cf82c42504b331dfe7c1b33851ab352da04ee9a7c0a64d1ac47ebb01ab4dad0c1cbe6bb79c316d71539d6a
+  metadata.gz: 9704256eb913654a8051046032810c01d731c42fdb4e216adabd9004d0cb2342dac42974ea281a4b414fe3d4f285885560a02640868b344b212a9fff481d070e
+  data.tar.gz: 715958487be1fe8ecd319d1a1a35979cff78c2a5a933dd4f42832d02c9177240f50ad369f42f200d08bdc382e2129682dd2f4b7ae827967779ceaf23cee01d2b

data/Gemfile.lock

@@ -4,6 +4,7 @@ PATH
     strongbolt (0.3.6)
       awesome_nested_set (~> 3.0.0)
       grant (~> 3.0)
+      simple_form (~> 3.0)
 
 GEM
   remote: https://rubygems.org/
@@ -96,6 +97,9 @@ GEM
     ruby-progressbar (1.6.0)
     shoulda-matchers (2.7.0)
       activesupport (>= 3.0.0)
+    simple_form (3.2.1)
+      actionpack (> 4, < 5.1)
+      activemodel (> 4, < 5.1)
     sprockets (2.12.3)
       hike (~> 1.2)
       multi_json (~> 1.0)

data/README.md

@@ -8,8 +8,7 @@ Only works with Rails 4.
 
 Add this line to your application's Gemfile:
 
-    gem 'grant', '>= 2.2', git: "git@github.com:AnalyticsMediaGroup/grant.git"
-    gem 'strongbolt', git: "git@github.com:AnalyticsMediaGroup/strongbolt.git"
+    gem 'strongbolt'
 
 And then execute:
 
@@ -73,7 +72,7 @@ skip_controller_authorization, except: [:update]
 You can also specify a list of controllers in the initializer `config/initializers/strongbolt.rb`. It is useful for third-party controllers, like devise for instance. The syntax is:
 
 ```ruby
-config.skip_controller_authorization_for "Devise::SessionsController", "Devise::RegistrationsController"
+config.skip_controller_authorization_for "Devise::Sessions", "Devise::Registrations"
 ```
 
 You can also skip ALL authorization checks (BAD IDEA) using:
@@ -123,10 +122,12 @@ Strongbolt comes with a table, `strongbolt_users_tenants`, that will store what
 
 When a tenant is declared, it will add some features to the _User class_ that has been defined in the initializer.
 
-First, an association between the _User class_ and the _Tenant class_ will be created, named after the _Tenant class_ name. It is a `has_many :trough => :users_tenants_` association.
+First, an association between the _User class_ and the _Tenant class_ will be created, named after the _Tenant class_ name. It is a `has_many :trough => :users_tenants_` association. You can grant or revoke access to tenants just by interacting with that association.
 
 > For instance, a `Company` tenant will generate a `companies` association.
 
+> To grant access to `companyA` to the user `myUser`, you just add it to the association `myUser.companies << companyA`. To revoke access to all companies the user might have, you would use `myUser.companies.clear`.
+
 A convenient instance method will also be created on the _User class_ to directly access the list of _Tenant class_ a _User_ can access. It is name `accessible_{tenants}` where `{tenants}` is the pluralize version of the _Tenant class_ name.
 
 > `Company` will create an `accessible_companies` instance method
@@ -149,7 +150,7 @@ Strongbolt will then create a `has_one` association on every tenanted model, so
 
 Strongbolt's capabilites have a boolean attribute, `require_tenant_access`, that specify whether the user can access all _tenanted models_ or only the ones that belong to the _Tenants_ he has access to.
 
-> Let's look back at the example. Each companies has several _projects_. The normal user, belonging to a company, would only have access to his company's projects. You would then define for normal user a capability *requiring tenant access*
+> Let's look back at the example. Each company has several _projects_. The normal user, belonging to a company, would only have access to his companies projects. You would then define a capability *requiring tenant access* for the normal user.
 
 > An admin user, on the other hand, like an engineer of the application, could have access to all the companies' projects. An engineer's projects' permissions would then *not require tenant access*
 

data/app/views/strongbolt/roles/_form.html.erb

@@ -7,6 +7,6 @@
   <%= f.input :parent_id, collection: Role.where.not(id: @role.id).order('parent_id IS NOT NULL', :parent_id, :name) %>
   <%= f.input :description %>
 
-  <%= f.button :wrapped, class: 'btn-primary', value: 'Save' %>
+  <%= f.button :submit, class: 'btn-primary', value: 'Save' %>
 
-<% end %>
+<% end %>

data/app/views/strongbolt/user_groups/_form.html.erb

@@ -8,5 +8,5 @@
 
   <%= f.association :roles, as: :check_boxes %>
 
-  <%= f.button :wrapped, class: 'btn-primary', value: 'Save' %>
-<% end %>
+  <%= f.button :submit, class: 'btn-primary', value: 'Save' %>
+<% end %>

data/lib/strongbolt.rb

@@ -1,5 +1,6 @@
 require "active_record"
 require "awesome_nested_set"
+require "simple_form"
 
 require "grant/grantable"
 require "grant/status"
@@ -58,7 +59,7 @@ module Strongbolt
   def self.table_name_prefix
     'strongbolt_'
   end
-  
+
   # Delegates to the configuration the access denied
   def_delegators Configuration, :access_denied, :logger, :tenants, :user_class, :user_class_constant,
     :default_capabilities
@@ -198,7 +199,7 @@ end
 
 #
 # We add a method to any object to quickly tell which method
-# should not have any authorization check perform 
+# should not have any authorization check perform
 #
 class Object
   def self.perform_without_authorization *method_names

data/lib/strongbolt/bolted_controller.rb

@@ -13,7 +13,7 @@ module Strongbolt
       :create   => :create,
       :destroy  => :destroy
     }
-    
+
     module ClassMethods
       #
       # Allows defining a specific model for this controller,
@@ -26,7 +26,7 @@ module Strongbolt
         when nil then nil
         else
           raise ArgumentError, "Model for authorization must be a Class or the name of the Class"
-        end 
+        end
       end
 
       #
@@ -136,7 +136,7 @@ module Strongbolt
       end
 
     end
-    
+
     module InstanceMethods
 
       def can? *args
@@ -208,7 +208,7 @@ module Strongbolt
             # rescue Strongbolt::ModelNotFound
             #   Strongbolt.logger.warn "No class found or defined for controller #{controller_name}"
             #   return
-            # end 
+            # end
 
             # Unless it is authorized for this action
             unless Strongbolt.current_user.can? crud_operation_of(action_name), obj
@@ -256,9 +256,9 @@ module Strongbolt
         Strongbolt.without_authorization { yield }
         Strongbolt.logger.warn "Authorization were disabled!"
       end
-      
+
     end
-    
+
     def self.included(receiver)
       receiver.class_eval do
         # Compulsory filters
@@ -294,4 +294,4 @@ module Strongbolt
     end # End self.included
 
   end
-end
+end

data/lib/strongbolt/helpers.rb

@@ -15,4 +15,4 @@ module Strongbolt
       ! can? *args, &block
     end
   end
-end
+end

data/lib/strongbolt/version.rb

@@ -1,3 +1,3 @@
 module Strongbolt
-  VERSION = "0.3.6"
+  VERSION = "0.3.7"
 end

data/strongbolt.gemspec

@@ -17,9 +17,10 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
   spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
   spec.require_paths = ["lib"]
-  
+
   spec.add_dependency 'awesome_nested_set', '~> 3.0.0'
   spec.add_dependency 'grant', '~> 3.0'
+  spec.add_dependency 'simple_form', '~> 3.0'
 
   spec.add_development_dependency "rails", "~> 4.1.0"
   spec.add_development_dependency "bundler", "> 1.7.0"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: strongbolt
 version: !ruby/object:Gem::Version
-  version: 0.3.6
+  version: 0.3.7
 platform: ruby
 authors:
 - Thomas Césaré-Herriau
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-01-27 00:00:00.000000000 Z
+date: 2016-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: awesome_nested_set
@@ -39,6 +39,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: simple_form
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: rails
   requirement: !ruby/object:Gem::Requirement