require 'set'
module Audited
# Audit saves the changes to ActiveRecord models. It has the following attributes:
#
# * auditable: the ActiveRecord model that was changed
# * user: the user that performed the change; a string or an ActiveRecord model
# * action: one of create, update, or delete
# * audited_changes: a hash of all the changes
# * comment: a comment set with the audit
# * version: the version of the model
# * request_uuid: a uuid based that allows audits from the same controller request
# * created_at: Time that the change was performed
#
class YAMLIfTextColumnType
class << self
def load(obj)
if Audited.audit_class.columns_hash["audited_changes"].sql_type == "text"
ActiveRecord::Coders::YAMLColumn.new(Object).load(obj)
else
obj
end
end
def dump(obj)
if Audited.audit_class.columns_hash["audited_changes"].sql_type == "text"
ActiveRecord::Coders::YAMLColumn.new(Object).dump(obj)
else
obj
end
end
end
end
class Audit < ::ActiveRecord::Base
belongs_to :auditable, polymorphic: true
belongs_to :user, polymorphic: true
belongs_to :associated, polymorphic: true
before_create :set_version_number, :set_audit_user, :set_request_uuid, :set_remote_address
cattr_accessor :audited_class_names
self.audited_class_names = Set.new
serialize :audited_changes, YAMLIfTextColumnType
scope :ascending, ->{ reorder(version: :asc) }
scope :descending, ->{ reorder(version: :desc)}
scope :creates, ->{ where(action: 'create')}
scope :updates, ->{ where(action: 'update')}
scope :destroys, ->{ where(action: 'destroy')}
scope :up_until, ->(date_or_time){ where("created_at <= ?", date_or_time) }
scope :from_version, ->(version){ where('version >= ?', version) }
scope :to_version, ->(version){ where('version <= ?', version) }
scope :auditable_finder, ->(auditable_id, auditable_type){ where(auditable_id: auditable_id, auditable_type: auditable_type)}
# Return all audits older than the current one.
def ancestors
self.class.ascending.auditable_finder(auditable_id, auditable_type).to_version(version)
end
# Return an instance of what the object looked like at this revision. If
# the object has been destroyed, this will be a new record.
def revision
clazz = auditable_type.constantize
(clazz.find_by_id(auditable_id) || clazz.new).tap do |m|
self.class.assign_revision_attributes(m, self.class.reconstruct_attributes(ancestors).merge(version: version))
end
end
# Returns a hash of the changed attributes with the new values
def new_attributes
(audited_changes || {}).inject({}.with_indifferent_access) do |attrs, (attr, values)|
attrs[attr] = values.is_a?(Array) ? values.last : values
attrs
end
end
# Returns a hash of the changed attributes with the old values
def old_attributes
(audited_changes || {}).inject({}.with_indifferent_access) do |attrs, (attr, values)|
attrs[attr] = Array(values).first
attrs
end
end
# Allows user to be set to either a string or an ActiveRecord object
# @private
def user_as_string=(user)
# reset both either way
self.user_as_model = self.username = nil
user.is_a?(::ActiveRecord::Base) ?
self.user_as_model = user :
self.username = user
end
alias_method :user_as_model=, :user=
alias_method :user=, :user_as_string=
# @private
def user_as_string
user_as_model || username
end
alias_method :user_as_model, :user
alias_method :user, :user_as_string
# Returns the list of classes that are being audited
def self.audited_classes
audited_class_names.map(&:constantize)
end
# All audits made during the block called will be recorded as made
# by +user+. This method is hopefully threadsafe, making it ideal
# for background operations that require audit information.
def self.as_user(user, &block)
::Audited.store[:audited_user] = user
yield
ensure
::Audited.store[:audited_user] = nil
end
# @private
def self.reconstruct_attributes(audits)
attributes = {}
result = audits.collect do |audit|
attributes.merge!(audit.new_attributes)[:version] = audit.version
yield attributes if block_given?
end
block_given? ? result : attributes
end
# @private
def self.assign_revision_attributes(record, attributes)
attributes.each do |attr, val|
record = record.dup if record.frozen?
if record.respond_to?("#{attr}=")
record.attributes.key?(attr.to_s) ?
record[attr] = val :
record.send("#{attr}=", val)
end
end
record
end
# use created_at as timestamp cache key
def self.collection_cache_key(collection = all, timestamp_column = :created_at)
super(collection, :created_at)
end
private
def set_version_number
max = self.class.auditable_finder(auditable_id, auditable_type).descending.first.try(:version) || 0
self.version = max + 1
end
def set_audit_user
self.user ||= ::Audited.store[:audited_user] # from .as_user
self.user ||= ::Audited.store[:current_user] # from Sweeper
nil # prevent stopping callback chains
end
def set_request_uuid
self.request_uuid ||= ::Audited.store[:current_request_uuid]
self.request_uuid ||= SecureRandom.uuid
end
def set_remote_address
self.remote_address ||= ::Audited.store[:current_remote_address]
end
end
end