tuersteher 0.4.1 → 0.5.0

data/VERSION

@@ -1 +1 @@
-0.4.1
+0.5.0

data/lib/tuersteher.rb

@@ -136,11 +136,24 @@ module Tuersteher
       rule.deny
     end
 
+    # Erweitern des Path um einen Prefix
+    # Ist notwenig wenn z.B. die Rails-Anwendung nicht als root-Anwendung läuft
+    # also root_path != '/' ist.'
+    def extend_path_rules_with_prefix prefix
+      Tuersteher::TLogger.logger.info "extend_path_rules_with_prefix: #{prefix}"
+      @path_prefix = prefix
+      path_rules.each do |rule|
+        rule.path = "#{prefix}#{rule.path}" unless rule.path == :all
+      end
+    end
+
+
   end # of AccessRulesStorage
 
 
   class AccessRules
     class << self
+
       # Pruefen Zugriff fuer eine Web-action
       # user        User, für den der Zugriff geprüft werden soll (muss Methode has_role? haben)
       # path        Pfad der Webresource (String)
@@ -223,6 +236,7 @@ module Tuersteher
   module ControllerExtensions
 
     @@url_path_method = nil
+    @@prefix_checked = nil
 
     # Pruefen Zugriff fuer eine Web-action
     #
@@ -230,6 +244,14 @@ module Tuersteher
     # method      http-Methode (:get, :put, :delete, :post), default ist :get
     #
     def path_access?(path, method = :get)
+      unless @@prefix_checked
+        @@prefix_checked = true
+        prefix = respond_to?(:root_path) && root_path
+        if prefix.size > 1
+          AccessRulesStorage.instance.extend_path_rules_with_prefix(prefix)
+          Rails.logger.info "Tuersteher::ControllerExtensions: set path-prefix to: #{prefix}"
+        end
+      end
       AccessRules.path_access? current_user, path, method
     end
 
@@ -421,6 +443,7 @@ module Tuersteher
   class PathAccessRule < BaseAccessRule
 
     METHOD_NAMES = [:get, :edit, :put, :delete, :post, :all].freeze
+    attr_reader :path
 
     # Zugriffsregel
     #
@@ -429,15 +452,19 @@ module Tuersteher
     def initialize(path)
       raise "wrong path '#{path}'! Must be a String or :all ." unless path==:all or path.is_a?(String)
       super()
-      @path = path
-      if path != :all
+      self.path = path
+    end
+
+    def path= url_path
+      @path = url_path
+      if url_path != :all
         # path in regex ^#{path} wandeln ausser bei "/",
         # dies darf keine Regex mit ^/ werden,
         # da diese ja immer matchen wuerde
-        if path == "/"
-          @path = /^\/$/
+        if url_path == "/"
+          @path_regex = /^\/$/
         else
-          @path = /^#{path}/
+          @path_regex = /^#{url_path}/
         end
       end
     end
@@ -462,7 +489,7 @@ module Tuersteher
     def fired?(path, method, user)
       user = nil if user==:false # manche Authenticate-System setzen den user auf :false
 
-      if @path!=:all && !(@path =~ path)
+      if @path!=:all && !(@path_regex =~ path)
         return false
       end
 

data/spec/acces_rules_storage_spec.rb

@@ -44,5 +44,25 @@ end
 
     end # of context "eval_rules"
 
+
+
+    context "extend path with prefix" do
+      context "eval_rules" do
+        before(:all) do
+          rule_defs = <<-EOR
+  path(:all).grant.role(:ADMIN)
+  path('/special').grant.role(:SPECIAL)
+          EOR
+          AccessRulesStorage.instance.eval_rules rule_defs
+          AccessRulesStorage.instance.extend_path_rules_with_prefix('/test')
+          @path_rules = AccessRulesStorage.instance.path_rules
+        end
+
+        specify{ @path_rules.first.path.should == :all }
+        specify{ @path_rules.last.path.should == '/test/special' }
+
+      end
+    end
+
   end # of describe AccessRulesStorage
 end

data/spec/path_access_rule_spec.rb

@@ -83,13 +83,17 @@ module Tuersteher
 
       context "Rule with no role spezifed => now role needed" do
         before(:all) do
-          @rule = PathAccessRule.new('/admin').method(:get)
+          @rule = PathAccessRule.new('/public').method(:get)
           @user = stub('user')
           @user.stub(:has_role?).and_return(false)
         end
 
         it "should fired for user with no roles" do
-          @rule.fired?("/admin/xyz", :get, @user).should be_true
+          @rule.fired?("/public/xyz", :get, @user).should be_true
+        end
+
+        it "should fired for non user" do
+          @rule.fired?("/public/xyz", :get, nil).should be_true
         end
 
         it "should not be fired with other path" do

data/tuersteher.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = %q{tuersteher}
-  s.version = "0.4.1"
+  s.version = "0.5.0"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Bernd Ledig"]
-  s.date = %q{2010-09-19}
+  s.date = %q{2010-10-29}
   s.description = %q{Security-Layer for Rails-Application acts like a firewall.}
   s.email = %q{bernd@ledig.info}
   s.extra_rdoc_files = [
@@ -41,12 +41,12 @@ Gem::Specification.new do |s|
   s.rubygems_version = %q{1.3.7}
   s.summary = %q{Security-Layer for Rails-Application}
   s.test_files = [
-    "spec/spec_helper.rb",
+    "spec/acces_rules_storage_spec.rb",
      "spec/model_extensions_spec.rb",
-     "spec/access_rules_spec.rb",
      "spec/path_access_rule_spec.rb",
      "spec/model_access_rule_spec.rb",
-     "spec/acces_rules_storage_spec.rb"
+     "spec/access_rules_spec.rb",
+     "spec/spec_helper.rb"
   ]
 
   if s.respond_to? :specification_version then

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: tuersteher
 version: !ruby/object:Gem::Version 
-  hash: 13
+  hash: 11
   prerelease: false
   segments: 
   - 0
-  - 4
-  - 1
-  version: 0.4.1
+  - 5
+  - 0
+  version: 0.5.0
 platform: ruby
 authors: 
 - Bernd Ledig
@@ -15,7 +15,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2010-09-19 00:00:00 +02:00
+date: 2010-10-29 00:00:00 +02:00
 default_executable: 
 dependencies: []
 
@@ -81,9 +81,9 @@ signing_key:
 specification_version: 3
 summary: Security-Layer for Rails-Application
 test_files: 
-- spec/spec_helper.rb
+- spec/acces_rules_storage_spec.rb
 - spec/model_extensions_spec.rb
-- spec/access_rules_spec.rb
 - spec/path_access_rule_spec.rb
 - spec/model_access_rule_spec.rb
-- spec/acces_rules_storage_spec.rb
+- spec/access_rules_spec.rb
+- spec/spec_helper.rb