Class: Authorization::ControllerPermission

Inherits:
Object
  • Object
show all
Defined in:
lib/declarative_authorization/in_controller.rb

Overview

:nodoc:

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(actions, privilege, context, namespace, attribute_check = false, load_object_model = nil, load_object_method = nil, filter_block = nil) ⇒ ControllerPermission

Returns a new instance of ControllerPermission.



293
294
295
296
297
298
299
300
301
302
303
304
 
# File 'lib/declarative_authorization/in_controller.rb', line 293

def initialize (actions, privilege, context, namespace, attribute_check = false, 
                load_object_model = nil, load_object_method = nil,
                filter_block = nil)
  @actions = actions.to_set
  @privilege = privilege
  @context = context
  @namespace = namespace
  @load_object_model = load_object_model
  @load_object_method = load_object_method
  @filter_block = filter_block
  @attribute_check = attribute_check
end

Instance Attribute Details

#actions ⇒ Object (readonly)

Returns the value of attribute actions.



292
293
294
 
# File 'lib/declarative_authorization/in_controller.rb', line 292

def actions
  @actions
end

#attribute_check ⇒ Object (readonly)

Returns the value of attribute attribute_check.



292
293
294
 
# File 'lib/declarative_authorization/in_controller.rb', line 292

def attribute_check
  @attribute_check
end

#context ⇒ Object (readonly)

Returns the value of attribute context.



292
293
294
 
# File 'lib/declarative_authorization/in_controller.rb', line 292

def context
  @context
end

#namespace ⇒ Object (readonly)

Returns the value of attribute namespace.



292
293
294
 
# File 'lib/declarative_authorization/in_controller.rb', line 292

def namespace
  @namespace
end

#privilege ⇒ Object (readonly)

Returns the value of attribute privilege.



292
293
294
 
# File 'lib/declarative_authorization/in_controller.rb', line 292

def privilege
  @privilege
end

Instance Method Details

#controller_context(contr) ⇒ Object 



306
307
308
309
310
311
312
313
314
315
 
# File 'lib/declarative_authorization/in_controller.rb', line 306

def controller_context(contr)
  case @namespace
    when true
      "#{contr.class.name.gsub(/::/, "_").gsub(/Controller$/, "").underscore}".to_sym
    when String, Symbol
      "#{@namespace.to_s}_#{contr.class.controller_name}".to_sym
    else
      contr.class.controller_name.to_sym
  end
end

#matches?(action_name) ⇒ Boolean

Returns:



317
318
319
 
# File 'lib/declarative_authorization/in_controller.rb', line 317

def matches? (action_name)
  @actions.include?(action_name.to_sym)
end

#permit!(contr) ⇒ Object 



321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
 
# File 'lib/declarative_authorization/in_controller.rb', line 321

def permit! (contr)
  if @filter_block
    return contr.instance_eval(&@filter_block)
  end
  context = @context || controller_context(contr)
  object = @attribute_check ? load_object(contr, context) : nil
  privilege = @privilege || :"#{contr.action_name}"
  
  #puts "Trying permit?(#{privilege.inspect}, "
  #puts "               :user => #{contr.send(:current_user).inspect}, "
  #puts "               :object => #{object.inspect}," 
  #puts "               :skip_attribute_test => #{!@attribute_check}," 
  #puts "               :context => #{contr.class.controller_name.pluralize.to_sym})"
  res = contr.authorization_engine.permit!(privilege, 
                                     :user => contr.send(:current_user),
                                     :object => object,
                                     :skip_attribute_test => !@attribute_check,
                                     :context => context)
  #puts "permit? result: #{res.inspect}"
  res
end

#remove_actions(actions) ⇒ Object 



343
344
345
346
 
# File 'lib/declarative_authorization/in_controller.rb', line 343

def remove_actions (actions)
  @actions -= actions
  self
end