Class: ApplicationPermitter

Inherits:
Object
  • Object
show all
Defined in:
lib/application_permitter.rb

Overview

from Adam Hawkins’s gist: gist.github.com/3150306 www.broadcastingadam.com/2012/07/parameter_authorization_in_rails_apis/

Defined Under Namespace

Classes: PermittedAttribute

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(params, user, ability = nil) ⇒ ApplicationPermitter

Returns a new instance of ApplicationPermitter.



27
28
29
 
# File 'lib/application_permitter.rb', line 27

def initialize(params, user, ability = nil)
  @params, @user, @ability = params, user, ability
end

Class Method Details

.permit(*args) ⇒ Object 



12
13
14
15
16
17
18
 
# File 'lib/application_permitter.rb', line 12

def permit(*args)
  options = args.extract_options!

  args.each do |name|
    self.permitted_attributes += [PermittedAttribute.new(name, options)]
  end
end

.scope(name) ⇒ Object 



20
21
22
23
24
 
# File 'lib/application_permitter.rb', line 20

def scope(name)
  with_options :scope => name do |nested|
    yield nested
  end
end

Instance Method Details

#permitted_params ⇒ Object 



31
32
33
34
 
# File 'lib/application_permitter.rb', line 31

def permitted_params
  authorize_params!
  filtered_params
end

#resource_name ⇒ Object 



36
37
38
 
# File 'lib/application_permitter.rb', line 36

def resource_name
  self.class.to_s.match(/(.+)Permitter/)[1].underscore.to_sym
end