Ryan Bates baa1dacc21 authorize params passed in create and update action

2011-03-25 17:01:12 -07:00

..

model_adapters

merging with master

2011-03-25 14:32:29 -07:00

ability.rb

renaming AccessDenied exception to Unauthorized

2011-03-25 14:43:36 -07:00

controller_additions.rb

removing skipping feature in ControllerResource for now

2011-03-25 16:29:04 -07:00

controller_resource.rb

authorize params passed in create and update action

2011-03-25 17:01:12 -07:00

exceptions.rb

renaming AccessDenied exception to Unauthorized

2011-03-25 14:43:36 -07:00

inherited_resource.rb

Fixes inherited_resources collection authorization

2011-03-16 01:20:35 +01:00

matchers.rb

use RSpec namespace for matcher - closes #119

2010-08-18 16:22:43 -07:00

model_additions.rb

making accessible_by action default to :index and parent action default to :show so we don't check :read action directly - closes #302

2011-03-15 23:00:40 -07:00

rule.rb

require attributes to be checked on create/update action in order to be fully authorized

2011-03-25 13:23:05 -07:00