lib/authoreyes/authorization.rb in authoreyes-0.1.1 vs lib/authoreyes/authorization.rb in authoreyes-0.2.0
- old
+ new
@@ -1,77 +1,77 @@
# Authorization
-require 'rails'
require 'authoreyes/authorization/engine'
require 'authoreyes/authorization/authorization_rule_set'
require 'authoreyes/authorization/authorization_rule'
require 'authoreyes/authorization/attribute'
require 'authoreyes/authorization/attribute_with_permission'
require 'authoreyes/authorization/anonymous_user'
-require "set"
-require "forwardable"
+require 'set'
+require 'forwardable'
module Authoreyes
module Authorization
# An exception raised if anything goes wrong in the Authorization realm
- class AuthorizationError < StandardError ; end
+ class AuthorizationError < StandardError; end
# NotAuthorized is raised if the current user is not allowed to perform
# the given operation possibly on a specific object.
- class NotAuthorized < AuthorizationError ; end
+ class NotAuthorized < AuthorizationError; end
# AttributeAuthorizationError is more specific than NotAuthorized, signaling
# that the access was denied on the grounds of attribute conditions.
- class AttributeAuthorizationError < NotAuthorized ; end
+ class AttributeAuthorizationError < NotAuthorized; end
# AuthorizationUsageError is used whenever a situation is encountered
# in which the application misused the plugin. That is, if, e.g.,
# authorization rules may not be evaluated.
- class AuthorizationUsageError < AuthorizationError ; end
+ class AuthorizationUsageError < AuthorizationError; end
# NilAttributeValueError is raised by Attribute#validate? when it hits a nil attribute value.
# The exception is raised to ensure that the entire rule is invalidated.
- class NilAttributeValueError < AuthorizationError ; end
+ class NilAttributeValueError < AuthorizationError; end
- AUTH_DSL_FILES = [Pathname.new(Rails.root || '').join("config", "authorization_rules.rb").to_s] unless defined? AUTH_DSL_FILES
+ AUTH_DSL_FILES = [Pathname.new(Rails.root || '').join('config', 'authorization_rules.rb').to_s].freeze unless defined? AUTH_DSL_FILES
# Controller-independent method for retrieving the current user.
# Needed for model security where the current controller is not available.
def self.current_user
- Thread.current["current_user"] || AnonymousUser.new
+ # TODO: get rid of Thread usage
+ Thread.current['current_user'] || AnonymousUser.new
end
# Controller-independent method for setting the current user.
def self.current_user=(user)
- Thread.current["current_user"] = user
+ Thread.current['current_user'] = user
end
# For use in test cases only
def self.ignore_access_control(state = nil) # :nodoc:
- Thread.current["ignore_access_control"] = state unless state.nil?
- Thread.current["ignore_access_control"] || false
+ Thread.current['ignore_access_control'] = state unless state.nil?
+ Thread.current['ignore_access_control'] || false
end
def self.activate_authorization_rules_browser? # :nodoc:
::Rails.env.development?
end
- @@dot_path = "dot"
+ @@dot_path = 'dot'
def self.dot_path
@@dot_path
end
- def self.dot_path= (path)
+ def self.dot_path=(path)
@@dot_path = path
end
@@default_role = :guest
def self.default_role
@@default_role
end
- def self.default_role= (role)
+ def self.default_role=(role)
@@default_role = role.to_sym
end
- def self.is_a_association_proxy? (object)
- if Rails.version < "3.2"
+ def self.is_a_association_proxy?(object)
+ if Rails.version < '3.2'
object.respond_to?(:proxy_reflection)
else
object.respond_to?(:proxy_association)
end
end