Module: Authorization::Maintenance

Included in:
TestHelper
Defined in:
lib/declarative_authorization/maintenance.rb

Overview

Provides a few maintenance methods for modifying data without enforcing authorization.

Defined Under Namespace

Modules: Usage

Class Method Summary collapse

Instance Method Summary collapse

Class Method Details

.without_access_control ⇒ Object

A class method variant of without_access_control. Thus, one can call

Authorization::Maintenance::without_access_control do
  ...
end



35
36
37
38
39
40
 
# File 'lib/declarative_authorization/maintenance.rb', line 35

def self.without_access_control
  Authorization.ignore_access_control(true)
  yield
ensure
  Authorization.ignore_access_control(false)
end

Instance Method Details

#with_user(user) ⇒ Object

Sets the current user for the declarative authorization plugin to the given one for the execution of the supplied block. Suitable for tests on certain users.



45
46
47
48
49
50
51
 
# File 'lib/declarative_authorization/maintenance.rb', line 45

def with_user (user)
  prev_user = Authorization.current_user
  Authorization.current_user = user
  yield
ensure
  Authorization.current_user = prev_user
end

#without_access_control ⇒ Object

Disables access control for the given block. Appropriate for maintenance operation at the Rails console or in test case setup.

For use in the Rails console:

require "vendor/plugins/declarative_authorization/lib/maintenance"
include Authorization::Maintenance

without_access_control do
  SomeModel.find(:first).save
end



24
25
26
27
28
29
 
# File 'lib/declarative_authorization/maintenance.rb', line 24

def without_access_control
  Authorization.ignore_access_control(true)
  yield
ensure
  Authorization.ignore_access_control(false)
end