Ryan Bates
|
cad425989e
|
supporting deeply nested aliases - closes #98
|
2010-07-19 16:03:09 -07:00 |
|
Ryan Bates
|
1ade44221a
|
load parent resources for collection actions such 'index'
|
2010-05-21 15:22:21 -07:00 |
|
Ryan Bates
|
2a3dd85a18
|
adding :name option to load_and_authorize_resource if it does not match controller - closes #65
|
2010-05-21 14:20:45 -07:00 |
|
Ryan Bates
|
dfd84a10ed
|
improving inline documentation
|
2010-05-21 13:41:24 -07:00 |
|
John Allison
|
7543eedd6a
|
fixing issue when using accessible_by with nil can conditions - closes #66
|
2010-05-20 17:06:10 -07:00 |
|
Logan Raarup
|
605063b974
|
Make sure conditions on associations are pluralized
|
2010-05-21 07:31:29 +08:00 |
|
Ryan Bates
|
06296b0a40
|
support has_many association or arrays in can conditions hash
|
2010-04-22 17:39:22 -07:00 |
|
Ryan Bates
|
e20081454f
|
adding joins clause to accessible_by when conditions are across associations
|
2010-04-20 17:02:28 -07:00 |
|
Ryan Bates
|
4da31c0709
|
can has cheezburger? (thanks Seivan)
|
2010-04-20 14:24:26 -07:00 |
|
Ryan Bates
|
f1ba76b61b
|
supporting arrays, ranges, and nested hashes in ability conditions
|
2010-04-17 11:54:27 -07:00 |
|
Ryan Bates
|
f46696348e
|
allow access to classes when using hash conditions since you'll generally want to narrow it down with a database query
|
2010-04-16 15:56:07 -07:00 |
|
Ryan Bates
|
8903feee70
|
removing unauthorized! in favor of authorize! and including more information in AccessDenied exception - closes #40
|
2010-04-16 14:54:18 -07:00 |
|
Ryan Bates
|
240c281061
|
renaming ActiveRecordAdditions#can method to accessible_by since it flows better and makes more sense
|
2010-04-15 23:54:45 -07:00 |
|
Ryan Bates
|
37f482e8d5
|
default ActiveRecordAdditions#can method action to :read and use 'scoped' if 'where' is not available
|
2010-04-15 23:18:49 -07:00 |
|
Ryan Bates
|
3c68a911d0
|
adding can method to Active Record for fetching records matching a specific ability, still needs documentation
|
2010-04-15 17:04:36 -07:00 |
|
Ryan Bates
|
baeef0b9dd
|
adding conditions behavior to Ability#can and fetch with Ability#conditions - closes #53
|
2010-04-15 16:50:47 -07:00 |
|
Ryan Bates
|
23a5888fe0
|
renaming :class option to :resource for load_and_authorize_resource which now supports a symbol for non models - closes #45
|
2010-04-15 14:14:22 -07:00 |
|
Ryan Bates
|
f2a1695636
|
properly handle Admin::AbilitiesController in params[:controller] - closes #46
|
2010-04-15 13:10:12 -07:00 |
|
Ryan Bates
|
6e1e96c85a
|
allow additional arguments for be_able_to matcher, this requires Ruby 1.8.7 or higher to use matcher
|
2010-04-15 12:04:43 -07:00 |
|
David Chelimsky
|
cf49c5b9de
|
add be_able_to matcher
|
2010-04-16 02:46:03 +08:00 |
|
David Chelimsky
|
35c4864de4
|
simplify paths
|
2010-04-16 02:46:02 +08:00 |
|
Ryan Bates
|
69f7a65914
|
support additional arguments to can? which get passed to the block - closes #48
|
2010-04-15 11:21:44 -07:00 |
|
Ryan Bates
|
7d3b4cdbc2
|
Adding clear_aliased_actions to Ability which removes previously defined actions including defaults
|
2009-12-30 18:01:40 -08:00 |
|
Ryan Bates
|
f99d506050
|
Append aliased actions (don't overwrite them) - closes #20
|
2009-12-30 17:49:49 -08:00 |
|
Ryan Bates
|
ef22de689b
|
adding custom message argument to unauthorized! method - closes #18
|
2009-12-15 10:53:05 -08:00 |
|
Ryan Bates
|
021f33c9a0
|
Adding :class option to load_resource so one can customize which class to use for the model - closes #17
|
2009-12-14 08:31:49 -08:00 |
|
Ryan Bates
|
e9f01300b6
|
Don't fetch parent of nested resource if *_id parameter is missing so it works with shallow nested routes - closes #14
|
2009-12-14 08:18:08 -08:00 |
|
Ryan Bates
|
ffa677b2b0
|
Don't set resource instance variable if it has been set already - closes #13
|
2009-12-13 12:32:09 -08:00 |
|
Ryan Bates
|
a75aee751b
|
Allowing :nested option to accept an array for deep nesting
|
2009-12-13 12:22:05 -08:00 |
|
Ryan Bates
|
51fa61bbae
|
refactoring out resource loading/building logic into separate class
|
2009-12-13 12:11:02 -08:00 |
|
Ryan Bates
|
cd217eb9cf
|
adding :nested option for load_resource - closes #10
|
2009-12-13 11:39:02 -08:00 |
|
Ryan Bates
|
94e031bf96
|
Pass :only and :except options to before filters for load/authorize resource methods.
|
2009-12-13 11:00:12 -08:00 |
|
Ryan Bates
|
63634b4f5d
|
Adding :collection and :new options to load_resource method so we can specify behavior of additional actions if needed.
|
2009-12-13 10:42:10 -08:00 |
|
Ryan Bates
|
a5f98824a0
|
turning load and authorize resource methods into class methods which set up the before filter so they can accept additional arguments
|
2009-12-13 10:03:21 -08:00 |
|
Ryan Bates
|
e32c5d0dfb
|
calling controller's load_resource and authorize_resource from load_and_authorize_resource to maintain backwards compatability, even though it's not the most efficient way
|
2009-11-26 09:53:16 -08:00 |
|
Ryan Bates
|
da5a5c031f
|
refactoring out controller logic into separate ResourceAuthorization class - closes #11
|
2009-11-26 09:29:53 -08:00 |
|
Ryan Bates
|
d4405e6070
|
adding cannot method to define which abilities cannot be done - closes #7
|
2009-11-25 10:25:58 -08:00 |
|
Ryan Bates
|
e60365505c
|
support custom objects (usually symbols) in can definition - closes #8
|
2009-11-25 09:55:50 -08:00 |
|
Ryan Bates
|
b9227eb971
|
adding a lot of inline documentation to code for rdocs
|
2009-11-17 16:56:16 -08:00 |
|
Ryan Bates
|
15a01a579c
|
fixing behavior of load_and_authorize_resource for namespaced controllers - closes #3
|
2009-11-17 11:59:59 -08:00 |
|
Ryan Bates
|
766fe86a9f
|
support arrays being passed to 'can' to specify multiple actions or classes - closes #2
|
2009-11-17 11:46:27 -08:00 |
|
Ryan Bates
|
0f49b5478f
|
adding 'cannot?' method which performs opposite check of 'can?' - closes #1
|
2009-11-17 10:46:16 -08:00 |
|
Ryan Bates
|
1edf583110
|
BACKWARDS INCOMPATIBLE: use Ability#initialize instead of 'prepare' to set up abilities - closes #4
|
2009-11-17 10:25:47 -08:00 |
|
Ryan Bates
|
4b6f538663
|
moving can definition into ability instance instead of class, this removes ugly instance_exec command
|
2009-11-16 19:59:40 -08:00 |
|
Ryan Bates
|
7b299b50fc
|
fix resource loading for new action
|
2009-11-16 19:26:33 -08:00 |
|
Ryan Bates
|
1034c81763
|
adding a before filter for loading and authorizing a resource
|
2009-11-16 19:00:10 -08:00 |
|
Ryan Bates
|
44b36ce2fc
|
adding controller additions with basic behavior.
|
2009-11-16 17:02:49 -08:00 |
|
Ryan Bates
|
c663effc06
|
using instance_exec to change scope of can blocks to instance of ability, this is a bit ugly so I may end up using methods instead
|
2009-11-16 16:24:36 -08:00 |
|
Ryan Bates
|
be1892cca8
|
adding initial aliases for index, show, new and edit
|
2009-11-16 15:09:25 -08:00 |
|
Ryan Bates
|
d5f6e0570c
|
moving class dependency inline in specs
|
2009-11-16 15:04:57 -08:00 |
|