Contents

# frozen_string_literal: true

module ActionPolicy
  module Behaviours
    # Adds `authorized_scop` method to behaviour
    module Scoping
      # Apply scope to the target of the specified type.
      #
      # NOTE: policy lookup consists of the following steps:
      #   - first, check whether `with` option is present
      #   - secondly, try to infer policy class from `target` (non-raising lookup)
      #   - use `implicit_authorization_target` if none of the above works.
      def authorized_scope(target, type: nil, as: :default, scope_options: nil, **options)
        options[:context] && (options[:context] = authorization_context.merge(options[:context]))

        policy = policy_for(record: target, allow_nil: true, **options)
        policy ||= policy_for(record: implicit_authorization_target!, **options)

        type ||= authorization_scope_type_for(policy, target)

        Authorizer.scopify(target, policy, type: type, name: as, scope_options: scope_options)
      end

      # For backward compatibility
      alias authorized authorized_scope

      # Infer scope type for target if none provided.
      # Raises an exception if type couldn't be inferred.
      def authorization_scope_type_for(policy, target)
        policy.resolve_scope_type(target)
      end
    end
  end
end

Version data entries

5 entries across 5 versions & 1 rubygems

Version	Path
action_policy-0.4.4	lib/action_policy/behaviours/scoping.rb
action_policy-0.4.3	lib/action_policy/behaviours/scoping.rb
action_policy-0.4.2	lib/action_policy/behaviours/scoping.rb
action_policy-0.4.1	lib/action_policy/behaviours/scoping.rb
action_policy-0.4.0	lib/action_policy/behaviours/scoping.rb