tuersteher 0.7.2 → 1.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 6c9a87b5dd44b07d9d007776268488b17bc54eac69e7b2ca9c34ead5dd9e5ca7
+  data.tar.gz: e899723582f2090efd837a7a2d308d40c2cbc43a089ca0b8a6dcd4a6fe1e3de4
+SHA512:
+  metadata.gz: eb765c3d95fcbd938c675e0396128aead6cfd81f5cfa037cec31e04a188ae8f7e6bbae7f9fa6113066e6e685e5679f37e3b7377e4ff5bad08f33a3f7a3e83a96
+  data.tar.gz: 71893a402e3327ecd40c9b2e2d9932da4df596c328ad0ce7d91fe469203e629c0b79b64fde50b3b0ba500befe5e378eaeb0d4f07bb1dccf806239745b58e44a5

data/lib/tuersteher.rb

@@ -194,13 +194,13 @@ module Tuersteher
     class << self
 
       # Pruefen Zugriff fuer eine Web-action
-      # user        User, für den der Zugriff geprüft werden soll (muss Methode has_role? haben)
-      # path        Pfad der Webresource (String)
-      # method      http-Methode (:get, :put, :delete, :post), default ist :get
+      # @param login_contex  Login-Contex, für den der Zugriff geprüft werden soll (muss Methode has_role? haben)
+      # @param path          Pfad der Webresource (String)
+      # @param method        http-Methode (:get, :put, :delete, :post), default ist :get
       #
-      def path_access?(user, path, method = :get)
+      def path_access?(login_contex, path, method = :get)
         rule = AccessRulesStorage.instance.path_rules.detect do |r|
-          r.fired?(path, method, user)
+          r.fired?(path, method, login_contex)
         end
         if Tuersteher::TLogger.logger.debug?
           if rule.nil?
@@ -208,8 +208,8 @@ module Tuersteher
           else
             s = "fired with #{rule}"
           end
-          usr_id = user && user.respond_to?(:id) ? user.id : user.object_id
-          Tuersteher::TLogger.logger.debug("Tuersteher: path_access?(user.id=#{usr_id}, path=#{path}, method=#{method})  =>  #{s}")
+          lc_id = login_contex && login_contex.respond_to?(:id) ? login_contex.id : login_contex.object_id
+          Tuersteher::TLogger.logger.debug("Tuersteher: path_access?(login_contex.id=#{lc_id}, path=#{path}, method=#{method})  =>  #{s}")
         end
         !(rule.nil? || rule.deny?)
       end
@@ -217,38 +217,38 @@ module Tuersteher
 
       # Pruefen Zugriff auf ein Model-Object
       #
-      # user        User, für den der Zugriff geprüft werden soll (muss Methode has_role? haben)
-      # model       das Model-Object
-      # permission  das geforderte Zugriffsrecht (:create, :update, :destroy, :get)
+      # @param login_contex Login-Contex, für den der Zugriff geprüft werden soll (muss Methode has_role? haben)
+      # @param model        das Model-Object
+      # @param permission   das geforderte Zugriffsrecht (:create, :update, :destroy, :get)
       #
       # liefert true/false
-      def model_access? user, model, permission
+      def model_access? login_contex, model, permission
         raise "Wrong call! Use: model_access(model-instance-or-class, permission)" unless permission.is_a? Symbol
         return false unless model
 
         rule = AccessRulesStorage.instance.model_rules.detect do |rule|
-          rule.fired? model, permission, user
+          rule.fired? model, permission, login_contex
         end
         access = rule && !rule.deny?
         if Tuersteher::TLogger.logger.debug?
-          usr_id = user && user.respond_to?(:id) ? user.id : user.object_id
+          lc_id = login_contex && login_contex.respond_to?(:id) ? login_contex.id : login_contex.object_id
           if model.instance_of?(Class)
             Tuersteher::TLogger.logger.debug(
-              "Tuersteher: model_access?(user.id=#{usr_id}, model=#{model}, permission=#{permission}) =>  #{access || 'denied'} #{rule}")
+              "Tuersteher: model_access?(login_contex.id=#{lc_id}, model=#{model}, permission=#{permission}) =>  #{access || 'denied'} #{rule}")
           else
             Tuersteher::TLogger.logger.debug(
-              "Tuersteher: model_access?(user.id=#{usr_id}, model=#{model.class}(#{model.respond_to?(:id) ? model.id : model.object_id }), permission=#{permission}) =>  #{access || 'denied'} #{rule}")
+              "Tuersteher: model_access?(login_contex.id=#{lc_id}, model=#{model.class}(#{model.respond_to?(:id) ? model.id : model.object_id }), permission=#{permission}) =>  #{access || 'denied'} #{rule}")
           end
         end
         access
       end
 
       # Bereinigen (entfernen) aller Objecte aus der angebenen Collection,
-      # wo der angegebene User nicht das angegebene Recht hat
+      # wo der angegebene login_contex nicht das angegebene Recht hat
       #
       # liefert ein neues Array mit den Objecten, wo der spez. Zugriff arlaubt ist
-      def purge_collection user, collection, permission
-        collection.select{|model| model_access?(user, model, permission)}
+      def purge_collection login_contex, collection, permission
+        collection.select{|model| model_access?(login_contex, model, permission)}
       end
     end # of Class-Methods
   end # of AccessRules
@@ -258,10 +258,10 @@ module Tuersteher
   # Module zum Include in Controllers
   # Dieser muss die folgenden Methoden bereitstellen:
   #
-  #   current_user : akt. Login-User
+  #   login_contex : akt. Login-Contex
   #   access_denied :  Methode aus dem authenticated_system, welche ein redirect zum login auslöst
   #
-  # Der Loginuser muss fuer die hier benoetigte Funktionalitaet
+  # Der Loginlogin_contex muss fuer die hier benoetigte Funktionalitaet
   # die Methode:
   #   has_role?(role)  # role the Name of the Role as Symbol
   # besitzen.
@@ -272,15 +272,13 @@ module Tuersteher
   #
   module ControllerExtensions
 
-    @@url_path_method = nil
-
     # Pruefen Zugriff fuer eine Web-action
     #
     # path        Pfad der Webresource (String)
     # method      http-Methode (:get, :put, :delete, :post), default ist :get
     #
     def path_access?(path, method = :get)
-      AccessRules.path_access? current_user, path, method
+      AccessRules.path_access? login_contex, path, method
     end
 
     # Pruefen Zugriff auf ein Model-Object
@@ -290,15 +288,15 @@ module Tuersteher
     #
     # liefert true/false
     def model_access? model, permission
-      AccessRules.model_access? current_user, model, permission
+      AccessRules.model_access? login_contex, model, permission
     end
 
     # Bereinigen (entfernen) aller Objecte aus der angebenen Collection,
-    # wo der akt. User nicht das angegebene Recht hat
+    # wo der akt. login_contex nicht das angegebene Recht hat
     #
     # liefert ein neues Array mit den Objecten, wo der spez. Zugriff arlaubt ist
     def purge_collection collection, permission
-      AccessRules.purge_collection(current_user, collection, permission)
+      AccessRules.purge_collection(login_contex, collection, permission)
     end
 
 
@@ -311,7 +309,7 @@ module Tuersteher
 
     protected
 
-    # Pruefen, ob Zugriff des current_user
+    # Pruefen, ob Zugriff des login_contex
     # fuer aktullen Request erlaubt ist
     def check_access
 
@@ -325,21 +323,18 @@ module Tuersteher
         ar_storage.read_rules
       end
 
-      # Rails3/4 hat andere url-path-methode als Rails2
-      @@url_path_method ||= Rails.version[0..1]=='2.' ? :request_uri : :fullpath
-
-      # bind current_user on the current thread
-      Thread.current[:user] = current_user
+      # bind login_contex on the current thread
+      Thread.current[:login_contex] = login_contex
 
       req_method = request.method
       req_method = req_method.downcase.to_sym if req_method.is_a?(String)
-      url_path = request.send(@@url_path_method)
+      url_path = request.fullpath
       unless path_access?(url_path, req_method)
-        usr_id = current_user && current_user.respond_to?(:id) ? current_user.id : current_user.object_id
-        msg = "Tuersteher#check_access: access denied for #{url_path} :#{req_method} user.id=#{usr_id}"
+        lc_id = login_contex && login_contex.respond_to?(:id) ? login_contex.id : login_contex.object_id
+        msg = "Tuersteher#check_access: access denied for #{url_path} :#{req_method} login_contex.id=#{lc_id}"
         Tuersteher::TLogger.logger.warn msg
         logger.warn msg  # log message also for Rails-Default logger
-        access_denied  # Methode aus dem authenticated_system, welche ein redirect zum login auslöst
+        access_denied  # Methode aus dem authenticated_system, welche z.B. ein redirect zum login auslöst
       end
     end
 
@@ -349,7 +344,7 @@ module Tuersteher
 
   # Module for include in Model-Object-Classes
   #
-  # The module get the current-user from Thread.current[:user]
+  # The module get the login_contex from Thread.current[:login_contex]
   #
   # Sample for ActiveRecord-Class
   #   class Sample < ActiveRecord::Base
@@ -369,9 +364,9 @@ module Tuersteher
     #
     # raise a SecurityError-Exception if access denied
     def check_access permission
-      user = Thread.current[:user]
-      unless AccessRules.model_access? user, self, permission
-        raise SecurityError, "Access denied! Current user have no permission '#{permission}' on Model-Object #{self}."
+      login_contex = Thread.current[:login_contex]
+      unless AccessRules.model_access? login_contex, self, permission
+        raise SecurityError, "Access denied! Current login_contex have no permission '#{permission}' on Model-Object #{self}."
       end
     end
 
@@ -382,12 +377,12 @@ module Tuersteher
     module ClassMethods
 
       # Bereinigen (entfernen) aller Objecte aus der angebenen Collection,
-      # wo der akt. User nicht das angegebene Recht hat
+      # wo der akt. login_contex nicht das angegebene Recht hat
       #
       # liefert ein neues Array mit den Objecten, wo der spez. Zugriff arlaubt ist
       def purge_collection collection, permission
-        user = Thread.current[:user]
-        AccessRules.purge_collection(user, collection, permission)
+        login_contex = Thread.current[:login_contex]
+        AccessRules.purge_collection(login_contex, collection, permission)
       end
     end # of ClassMethods
 
@@ -645,7 +640,7 @@ module Tuersteher
 
     # check, if this rule fired for specified parameter
     def fired? path_or_model, method, login_ctx
-      login_ctx = nil if login_ctx==:false # manche Authenticate-System setzen den login_ctx/user auf :false
+      login_ctx = nil if login_ctx==:false # manche Authenticate-System setzen den login_ctx/login_contex auf :false
       @rule_spezifications.all?{|spec| spec.grant?(path_or_model, method, login_ctx)}
     end
 

data/tuersteher.gemspec

@@ -3,14 +3,15 @@ $:.push File.expand_path("../lib", __FILE__)
 
 Gem::Specification.new do |s|
   s.name        = 'tuersteher'
-  s.version     = '0.7.2'
+  s.version     = '1.0.1'
   s.authors     = ["Bernd Ledig"]
-  s.email       = ["bernd@ledig.info"]
-  s.homepage    = "http://github.com/bledig/tuersteher"
-  s.summary     = "summary of the gem"
+  s.email       = ["bernd@ledig.info","bernd.ledig@ottogroup.com"]
+  s.homepage    = "https://gitlab.com/bledig/tuersteher"
+  s.summary     = "Access-Handling for Rails-Apps"
   s.description = <<-EOT
     Security-Layer for Rails-Application acts like a firewall.
   EOT
+  s.licenses = ["GPL-3.0-or-later"]
 
   s.rubyforge_project = "tuersteher"
 
@@ -19,11 +20,12 @@ Gem::Specification.new do |s|
   s.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
   s.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
   s.require_paths = ["lib"]
+  s.required_ruby_version = '> 2.5'
 
   #s.add_runtime_dependency "i18n"
 
-  s.add_development_dependency "rake"
-  s.add_development_dependency "rspec", '>2.7', '<3.0'
+  s.add_development_dependency "rake", '~> 10.5'
+  s.add_development_dependency "rspec", '~> 2.14'
 
 end
 

metadata

@@ -1,65 +1,53 @@
 --- !ruby/object:Gem::Specification
 name: tuersteher
 version: !ruby/object:Gem::Version
-  version: 0.7.2
-  prerelease: 
+  version: 1.0.1
 platform: ruby
 authors:
 - Bernd Ledig
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-03-10 00:00:00.000000000 Z
+date: 2020-02-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
-    none: false
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '10.5'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
-    none: false
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '10.5'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
-    none: false
     requirements:
-    - - ! '>'
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.7'
-    - - <
-      - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '2.14'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
-    none: false
     requirements:
-    - - ! '>'
-      - !ruby/object:Gem::Version
-        version: '2.7'
-    - - <
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
-description: ! '    Security-Layer for Rails-Application acts like a firewall.
-
-'
+        version: '2.14'
+description: "    Security-Layer for Rails-Application acts like a firewall.\n"
 email:
 - bernd@ledig.info
+- bernd.ledig@ottogroup.com
 executables: []
 extensions: []
 extra_rdoc_files:
 - README.rdoc
 files:
-- .gitignore
+- ".gitignore"
 - Gemfile
 - README.rdoc
 - Rakefile
@@ -76,28 +64,28 @@ files:
 - spec/spec.opts
 - spec/spec_helper.rb
 - tuersteher.gemspec
-homepage: http://github.com/bledig/tuersteher
-licenses: []
+homepage: https://gitlab.com/bledig/tuersteher
+licenses:
+- GPL-3.0-or-later
+metadata: {}
 post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
-  none: false
   requirements:
-  - - ! '>='
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '2.5'
 required_rubygems_version: !ruby/object:Gem::Requirement
-  none: false
   requirements:
-  - - ! '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
 rubyforge_project: tuersteher
-rubygems_version: 1.8.24
+rubygems_version: 2.7.6.2
 signing_key: 
-specification_version: 3
-summary: summary of the gem
+specification_version: 4
+summary: Access-Handling for Rails-Apps
 test_files: []