Contents

module ActiveModel
  module MassAssignmentSecurity

    protected

    def mass_assignment_authorizer(roles)
      active_authorizer = self.class.active_authorizer

      composite_role_name, roles_array = compile_role_name roles, active_authorizer

      if !composite_role_name
        active_authorizer[:default]

      elsif active_authorizer.has_key? composite_role_name
        active_authorizer[composite_role_name]

      else
        build_new_attrs_config roles_array, composite_role_name
        self.class.active_authorizer[composite_role_name]
      end
    end

    private

    def compile_role_name(roles, active_authorizer)
      roles_array = if roles.is_a? Array
        roles
      elsif roles.respond_to? :roles
        [roles.send(:roles)].flatten
      else
        [roles]
      end

      roles_array = roles_array.find_all { |role| active_authorizer.has_key? role }

      if roles_array.any?
        [ roles_array.map(&:to_s).join('_').to_sym, roles_array ]
      else
        [ nil, roles_array ]
      end
    end

    def build_new_attrs_config(roles_array, new_role_name)
      fields = roles_array.inject([]) do |result, role_name|
        result += self.class.active_authorizer[role_name].to_a
      end

      method_name = if self.class.active_authorizer[ roles_array[0] ].is_a? ActiveModel::MassAssignmentSecurity::WhiteList
        :attr_accessible
      else
        :attr_protected
      end

      self.class.send method_name, *fields, :as => new_role_name
    end
  end
end

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
mass_assignment_with_multiple_roles-0.0.1	lib/mass_assignment_with_multiple_roles/mass_assignment_security.rb