tuersteher 0.3.3 → 0.3.4

data/VERSION

@@ -1 +1 @@
-0.3.3
+0.3.4

data/lib/tuersteher.rb

@@ -148,7 +148,7 @@ module Tuersteher
           else
             s = "granted with #{rule}"
           end
-          usr_id = user.respond_to?(:id) ? user.id : user.object_id
+          usr_id = user && user.respond_to?(:id) ? user.id : user.object_id
           Tuersteher::TLogger.logger.debug("Tuersteher: path_access?(user.id=#{usr_id}, path=#{path}, method=#{method})  =>  #{s}")
         end
         !(rule.nil? || rule.deny?)
@@ -171,7 +171,7 @@ module Tuersteher
         end
         access = rule && !rule.deny?
         if Tuersteher::TLogger.logger.debug?
-          usr_id = user.respond_to?(:id) ? user.id : user.object_id
+          usr_id = user && user.respond_to?(:id) ? user.id : user.object_id
           if model.instance_of?(Class)
             Tuersteher::TLogger.logger.debug(
               "Tuersteher: model_access?(user.id=#{usr_id}, model=#{model}, permission=#{permission}) =>  #{access || 'denied'} #{rule}")
@@ -267,7 +267,7 @@ module Tuersteher
       req_method = request.method.downcase.to_sym
       url_path = request.send(@@url_path_method)
       unless path_access?(url_path, req_method)
-        usr_id = current_user.respond_to?(:id) ? current_user.id : current_user.object_id
+        usr_id = current_user && current_user.respond_to?(:id) ? current_user.id : current_user.object_id
         msg = "Tuersteher#check_access: access denied for #{request.request_uri} :#{req_method} user.id=#{usr_id}"
         Tuersteher::TLogger.logger.warn msg
         logger.warn msg  # log message also for Rails-Default logger

data/spec/access_rules_spec.rb

@@ -70,6 +70,18 @@ module Tuersteher
           AccessRules.path_access?(@user, '/admin', :post).should_not be_true
         end
       end
+
+
+      context "without user" do
+        it "should be true for this paths" do
+          AccessRules.path_access?(nil, '/', :get).should be_true
+        end
+
+        it "should not be true for this paths" do
+          AccessRules.path_access?(nil, '/xyz', :get).should_not be_true
+          AccessRules.path_access?(nil, '/admin', :post).should_not be_true
+        end
+      end
     end
 
 
@@ -129,7 +141,18 @@ module Tuersteher
           AccessRules.model_access?(@user, @model2, :create).should_not be_true
         end
       end
-    end
+
+      context "without user" do
+        it "should be true for this paths" do
+          AccessRules.model_access?(nil, @model1, :xyz).should be_true
+          AccessRules.model_access?(nil, @model2, :read).should be_true
+        end
+
+        it "should not be true for this paths" do
+          AccessRules.model_access?(nil, @model2, :update).should_not be_true
+        end
+      end
+    end # of context 'model_access?'
 
 
 

data/spec/model_access_rule_spec.rb

@@ -4,6 +4,22 @@ module Tuersteher
 
   describe ModelAccessRule do
 
+    context "grant without user" do
+      before do
+        @rule = ModelAccessRule.new(String).grant.permission(:all)
+      end
+
+      it "should fired without user" do
+        @rule.fired?("test", :read, nil).should be_true
+      end
+
+      it "should fired with user" do
+        @user = stub('user')
+        @rule.fired?("test", :read, @user).should be_true
+      end
+    end
+
+
     context "grant with roles" do
 
       before(:all) do

data/tuersteher.gemspec

@@ -5,7 +5,7 @@
 
 Gem::Specification.new do |s|
   s.name = %q{tuersteher}
-  s.version = "0.3.3"
+  s.version = "0.3.4"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Bernd Ledig"]

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: tuersteher
 version: !ruby/object:Gem::Version 
-  hash: 21
+  hash: 27
   prerelease: false
   segments: 
   - 0
   - 3
-  - 3
-  version: 0.3.3
+  - 4
+  version: 0.3.4
 platform: ruby
 authors: 
 - Bernd Ledig