CHANGELOG.markdown in authority-2.6.0 vs CHANGELOG.markdown in authority-2.7.0

- old
+ new

@@ -1,13 +1,17 @@ # Changelog Authority does its best to use [semantic versioning](http://semver.org). +## 2.7.0 + +Allows setting authorizer by class (`authorizer = FooAuthorizer`) as well as by name (`authorizer_name = 'FooAuthorizer'`), thanks to [mguymon](https://github.com/mguymon) + ## v2.6.0 -- Now dependent on ActiveSupport, not all of Rails, as a step toward easier use with other frameworks -- Testing with Rails 4.0 +- Now dependent on ActiveSupport, not all of Rails, as a step toward easier use with other frameworks. Thanks to [christhekeele](https://github.com/christhekeele) +- Testing with Rails 4.0, thanks to [sanemat](https://github.com/sanemat) - Clearer backtraces in certain situations ## v2.5.0 Models whose `authorizer_name` is not specified will now check for an authorizer with their own name before falling back to `ApplicationAuthorizer`. Eg, `Comment` will look for `CommentAuthorizer`. Namespacing is respected. @@ -42,11 +46,11 @@ - Renamed `authority_action` to `authority_actions` (plural) to reflect the fact that you can set multiple actions at once. Use of the old method will raise a deprecation warning. - Lots of test cleanup so that test output is clearer - run rspec with `--format doc --order default` to see it. ## v2.2.0 -Allow passing options hash to `authorize_action_for`, like `authorize_action_for(@llama, :sporting => @hat_style)`. +Allow passing options hash to `authorize_action_for`, like `authorize_action_for(@llama, :sporting => @hat_style)`. Thanks to [MP211](https://github.com/MP211). ## v2.1.0 Allow passing options hash, like `current_user.can_create?(Comment, :for => @post)`. @@ -59,10 +63,10 @@ - **Breaking change**: models now assume their authorizer is `ApplicationAuthorizer` unless told otherwise. Generator creates a blank `ApplicationAuthorizer`. This, combined with the change in v1.1.0, makes the `default_strategy` proc obsolete in favor of straightforward inheritance of a `default` method, so support for `config.default_strategy` is removed. - Added accessors to `Authority::SecurityViolation` for user, action and resource, for use in custom security violation handlers. ## v1.1.0 -- Added `Authority::Authorizer.default` class method which is called before the `default_strategy` proc and delegates to that proc. This can be overridden per authorizer. +- Added `Authority::Authorizer.default` class method which is called before the `default_strategy` proc and delegates to that proc. This can be overridden per authorizer. Thanks to [kevmoo](https://github.com/kevmoo) ## v1.0.0 - Added `config.security_violation_handler` so users can specify which controller method to use when rescuing `SecurityViolation`s - Removed generator to make blank authorizers. On further consideration, one authorizer per model is counterproductive for most use cases, and I'd rather not encourage misuse.