Commit Graph

  • 7797b37c7e Adding Ability#merge Roger Campos 2011-10-31 14:08:50 +0100
  • 80ceaf8e17 fix uninitialized constant warning in CanCan::Rule#model_adapter soopa 2011-10-14 20:06:43 -0500
  • 9eebeb2155 releasing 1.6.7 with nested resource fix 1.6.7 Ryan Bates 2011-10-04 15:04:28 -0700
  • 67a3038628 quick fix to get nested resources working again - closes #482 Ryan Bates 2011-10-04 15:02:59 -0700
  • 26b40f2b49 releasing version 1.6.6 1.6.6 Ryan Bates 2011-09-28 17:00:32 -0700
  • 98326394f0 removing jruby/rubinius from travis.yml for now until I figure out why they aren't passing Ryan Bates 2011-09-28 16:24:03 -0700
  • b3fc5add34 Correct "return cant jump across threads" error when using check_authorization() Patrick Morgan 2011-09-14 13:39:11 -0500
  • c94de4ab18 include namespace in params when creating/updating resource - closes #349 Ryan Bates 2011-09-28 16:00:46 -0700
  • 6de9e4675a consider specificity when finding relevant rules so generic rules will not override specific ones - closes #321 Ryan Bates 2011-09-28 15:34:08 -0700
  • 1fb2c0160c ignore cannot clause with attributes when not checking for with attributes - closes #406 Ryan Bates 2011-09-28 14:48:26 -0700
  • aa83fee7a4 Add failing example of cannot for attribute, corresponds to #406 Jan Vlnas 2011-09-16 00:21:18 +0200
  • eafd6cfcde fixing spec for new id_param option Ryan Bates 2011-09-28 13:50:46 -0700
  • 67c93619c1 Merge branch 'master' into 2.0 Ryan Bates 2011-09-28 13:45:49 -0700
  • 610d7e3ec4 Merge pull request #425 from skhisma/master Ryan Bates 2011-09-28 13:44:19 -0700
  • 092b510a2f fixing namespace controller resource spec Ryan Bates 2011-09-28 13:43:34 -0700
  • 2160183e86 Merge branch 'master' into 2.0 Ryan Bates 2011-09-28 13:35:52 -0700
  • cfb801ed8d Merge pull request #424 from whilefalse/master Ryan Bates 2011-09-28 13:34:30 -0700
  • 0edd310c41 Merge pull request #476 from kirkconnell/with_model-version-fix Ryan Bates 2011-09-28 11:57:17 -0700
  • 86063e4846 merging 1.6 additions into 2.0 branch Ryan Bates 2011-09-28 11:39:26 -0700
  • 0442634d5a fixing ability generator Ryan Bates 2011-09-28 11:18:12 -0700
  • 6c1d685f2c include tests with cancan:ability generator - closes #350 Ryan Bates 2011-09-28 11:02:18 -0700
  • 6ef2c44f57 fixing model comparison spec, I believe this bug is caused by recent version of with_model Ryan Bates 2011-09-28 10:08:21 -0700
  • 5ab7dea2f0 use version 1.x of with_model to avoid errors in class comparisons kirkconnell 2011-09-20 18:43:39 -0600
  • 916f97fbf3 updating Rails gem dev dependency Ryan Bates 2011-07-23 19:53:18 -0700
  • 2be3f98e11 removing 1.9.2 from .travis.yml Ryan Bates 2011-07-23 19:33:43 -0700
  • 0343f8f0b5 Merge pull request #427 from bai/master Ryan Bates 2011-07-23 19:31:45 -0700
  • 987dce0dc2 Merge pull request #421 from amc-projects/master Ryan Bates 2011-07-23 14:46:37 -0700
  • e0492f5d75 Merge pull request #426 from manuelmeurer/patch-1 Ryan Bates 2011-07-23 13:31:03 -0700
  • 0fc67e4d56 These lines are defaults, should be fine this way beawesomeinstead 2011-07-21 17:02:12 +0300
  • d24ef454e0 Run rake instead of rake test beawesomeinstead 2011-07-21 15:48:20 +0300
  • e561532bab Fixed typos. Manuel Meurer 2011-07-21 05:12:09 -0700
  • 1ab4e2d48c The first try to make cancan pass on Travis CI beawesomeinstead 2011-07-21 14:51:47 +0300
  • 7937a282a3 :id_param option to load_resource allows specification of the param name to find members Geoff Parsons 2011-07-20 13:42:24 -0400
  • d35419fa4c Added the needed camelize to recent patch for engines and namespaced models Steven Anderson 2011-07-20 10:03:50 +0100
  • 6c497b8dd9 Added support for engines and namespaced models. Steven Anderson 2011-07-20 09:31:53 +0100
  • 3b33b36de9 Compatibility fix for using cancan with rspec-instafail and rspec1 Michael MacDonald 2011-07-19 10:27:08 +1000
  • 600a3e16a5 Merge pull request #410 from psanford/improve_datamapper_loading Ryan Bates 2011-07-01 13:01:32 -0700
  • ccd7a94d40 Load datamapper class methods via append_extensions. psanford 2011-07-01 12:48:20 -0700
  • 8f815c422a Merge pull request #409 from nhocki/patch-1 Ryan Bates 2011-07-01 11:44:23 -0700
  • 1c3e61725f Change the i18n default name to :"unauthorized.default" Nicolás Hock Isaza 2011-07-01 13:10:20 -0500
  • 71f60bc4ac Adding tests for i18n translation for default messages Nicolás Hock Isaza 2011-06-30 18:16:47 -0500
  • 596ad235a9 Make CanCan Default Message a translatable text. Default to the one you had. Nicolás Hock Isaza 2011-06-30 13:22:49 -0700
  • b8ff2dbc6a load member through method instead of instance variable to improve decent_exposure support Ryan Bates 2011-06-13 15:16:08 -0700
  • 613ab1c1ab delegating ControllerResource find to model adapter, uses 'get' for DataMapper - closes #373 Ryan Bates 2011-05-21 13:57:17 -0700
  • c031f82dd2 allow :find_by option to be full find method name - closes #335 Ryan Bates 2011-05-19 23:37:36 -0400
  • f6c2054f7e set resource attributes in update action and authorize after set - closes #141 Ryan Bates 2011-05-19 17:12:30 -0400
  • a29e31606b changing the interface for ControllerResource load/authorize so they can be intertwined Ryan Bates 2011-05-19 16:38:33 -0400
  • e24d5d146b merging master into 2.0 Ryan Bates 2011-05-19 16:01:06 -0400
  • 6a01427317 releasing 1.6.5 1.6.5 Ryan Bates 2011-05-18 13:24:14 -0400
  • 843fe89c63 pass action and subject through AccessDenied exception when :through isn't found - closes #366 Ryan Bates 2011-05-18 12:58:02 -0400
  • 74c9d582b2 Merge pull request #363 from rahearn/mongoid-conditions-empty Ryan Bates 2011-05-17 10:22:19 -0700
  • 4e4c5a9a7f adding current_ability to helper methods - closes #361 Ryan Bates 2011-05-17 13:21:11 -0400
  • dde88c92b7 allow :through option to work with private controller methods - closes #360 Ryan Bates 2011-05-17 13:18:31 -0400
  • cb9777be5f ensure Mongoid::Document is defined before loading Mongoid adapter - closes #359 Ryan Bates 2011-05-17 13:16:33 -0400
  • 5a64d94d09 updating version in gemspec to alpha Ryan Bates 2011-05-16 18:02:15 -0400
  • 0882450232 Processes can rules only if no empty conditions rules are present Ryan Ahearn 2011-05-12 09:24:38 -0400
  • ad62d60b20 Fixes bug in mongoid_adapter with empty conditions hash Ryan Ahearn 2011-05-10 11:52:29 -0400
  • ff13a82dda Merge pull request #355 from emmanuel/issue/245. Ryan Bates 2011-05-02 13:52:11 -0700
  • 16bdb8d42e Return empty set early if no can rules are present. Emmanuel Gomez 2011-04-29 12:03:13 -0700
  • d6851debd4 Fix pending spec for DataMapper adapter. Emmanuel Gomez 2011-04-29 00:46:38 -0700
  • 6d39b0ae07 Use dkubb's suggestion for evaluating conditions against a Resource. Emmanuel Gomez 2011-04-29 00:30:30 -0700
  • a6af47d213 Merged pull request #352 from cardagin/topic/mongoid-adapter-enhancements. Ryan Bates 2011-04-27 09:40:28 -0700
  • 17c52a7983 Augments Mongoid adapter by handling case where attribute is an array John Feminella 2011-04-27 09:54:37 -0400
  • 18c1007d3f Merged pull request #343 from rahearn/mongoid-scope. Ryan Bates 2011-04-25 09:19:53 -0700
  • 63865cc7d8 allow SQL conditions to be used with a block Ryan Bates 2011-04-21 00:46:06 -0700
  • 2b6204117f Adds ability to use Scope query with Mongoid Ryan Ahearn 2011-04-15 16:58:19 -0400
  • b1424dfa49 Merge branch 'optional-associations' of https://github.com/socialcast/cancan into socialcast-optional-associations Ryan Bates 2011-04-01 15:13:02 -0700
  • 6aaab9e440 Fixed bug where conditions on an optionally associated object would throw exceptions if the associated object was not present at the rule match time. Mitch Williams 2011-04-01 13:19:15 -0700
  • a10243a569 When using an existing scope, it should be merged properly to the class. May fix ryanb/cancan#328 :) Florent Piteau 2011-04-01 21:25:19 +0200
  • 81f00f9024 Failling test for nested resources with a scope for conditions Florent Piteau 2011-04-01 18:45:33 +0200
  • 7bcfd3d295 releasing 1.6.4 1.6.4 Ryan Bates 2011-03-29 17:51:15 -0700
  • e96cf5bea4 fixing mongoid 'or' error - closes #322 Ryan Bates 2011-03-29 17:49:18 -0700
  • c6f9abb6ab updating some documentation for CanCan 2.0 Ryan Bates 2011-03-25 18:48:37 -0700
  • e5b76210e4 fixing marking fully_authorized on an object instance Ryan Bates 2011-03-25 17:05:36 -0700
  • baa1dacc21 authorize params passed in create and update action Ryan Bates 2011-03-25 17:01:12 -0700
  • f41b39406c don't authorize based on resource name in authorize_resource since this is already handled by enable_authorization Ryan Bates 2011-03-25 16:40:20 -0700
  • 27eba72e4b mark index action as fully authorized when fetching records through accessible_by Ryan Bates 2011-03-25 16:34:13 -0700
  • 5d68caefd0 removing skipping feature in ControllerResource for now Ryan Bates 2011-03-25 16:29:04 -0700
  • 35fbee578f passing block to enable_authorization will be executed when CanCan::Unauthorized exception is raised Ryan Bates 2011-03-25 16:08:09 -0700
  • cf2896f011 renaming AccessDenied exception to Unauthorized Ryan Bates 2011-03-25 14:43:36 -0700
  • bcac159b3e merging with master Ryan Bates 2011-03-25 14:32:29 -0700
  • fb8e9bde57 releasing 1.6.3 1.6.3 Ryan Bates 2011-03-25 14:28:26 -0700
  • 89e40987d8 make sure ActiveRecord::Relation is defined before checking conditions against it so Rails 2 is supported again - closes #312 Ryan Bates 2011-03-25 14:26:33 -0700
  • 1ac8099f7a return subject passed to authorize! - closes #314 Ryan Bates 2011-03-25 14:24:43 -0700
  • 346ca2c74e check authorization is sufficient in an after_filter when doing enable_authorization Ryan Bates 2011-03-25 14:11:59 -0700
  • 242e912519 refactoring fully authorized check and catching bug Ryan Bates 2011-03-25 13:30:45 -0700
  • 488cc2dfdd require attributes to be checked on create/update action in order to be fully authorized Ryan Bates 2011-03-25 13:23:05 -0700
  • 0f3753491d adding fully_authorized? method to Ability to check if conditions are considered in authorize! call Ryan Bates 2011-03-25 12:01:53 -0700
  • 85efbdb8d0 adding attributes as 3rd argument to can and can? calls Ryan Bates 2011-03-25 11:24:10 -0700
  • a03d35272b allow strings along with symbols in Ability definition and checking Ryan Bates 2011-03-24 11:52:54 -0700
  • 7ee942c334 adding enable_authorization method and deprecating some other controller methods Ryan Bates 2011-03-24 11:22:32 -0700
  • 3a825ed0d1 getting all specs passing again Ryan Bates 2011-03-23 19:47:34 -0700
  • 98ed39264e modifying Ability to use symbol for subject instead of class, also adding subject aliases Ryan Bates 2011-03-23 17:00:33 -0700
  • 5d97cfb236 releasing 1.6.2 1.6.2 Ryan Bates 2011-03-18 09:44:39 -0700
  • 7688025404 fixing instance loading with :singleton option - closes #310 Ryan Bates 2011-03-18 09:42:30 -0700
  • 3efa069349 fixing failing MetaWhere spec Ryan Bates 2011-03-18 09:14:17 -0700
  • b0c1646fee releasing 1.6.1 1.6.1 Ryan Bates 2011-03-15 23:40:14 -0700
  • 3f6cecbfcf use Item.new instead of build_item for singleton resource so it doesn't mess up database - closes #304 Ryan Bates 2011-03-15 23:37:05 -0700
  • fdd5ad022d making accessible_by action default to :index and parent action default to :show so we don't check :read action directly - closes #302 Ryan Bates 2011-03-15 23:00:40 -0700
  • 3639ca90eb Fixes inherited_resources collection authorization Adam Wróbel 2011-03-16 01:08:17 +0100