README.rdoc in declarative_authorization-0.4.1 vs README.rdoc in declarative_authorization-0.5
- old
+ new
@@ -275,12 +275,13 @@
privileges do
privilege :manage, :employees, :includes => :increase_salary
end
-For more complex use cases, authorizations need to be based on attributes. E.g.
-if a branch admin should manage only employees of his branch (see
+For more complex use cases, authorizations need to be based on attributes. Note
+that you then also need to set :attribute_check => true in controllers for filter_access_to.
+E.g. if a branch admin should manage only employees of his branch (see
Authorization::Reader in the API docs for a full list of available operators):
authorization do
role :branch_admin do
has_permission_on :employees do
@@ -377,11 +378,11 @@
point,
* add +filter_access_to+, +permitted_to+? and model security as needed.
== Providing the Plugin's Requirements
The requirements are
-* Rails >= 2.1 and Ruby >= 1.8.6, including 1.9
+* Rails >= 2.2, including 3 and Ruby >= 1.8.6, including 1.9
* An authentication mechanism
* A user object returned by Controller#current_user
* An array of role symbols returned by User#role_symbols
* (For model security) Setting Authorization.current_user to the request's user
@@ -488,13 +489,13 @@
sbartsch at tzi.org
= Contributors
-Thanks to John Joseph Bachir, Eike Carls, Kai Chen, Erik Dahlstrand,
-Jeroen van Dijk, Sebastian Dyck, Jeremy Friesen, Daniel Kristensen, Brian Langenfeld,
-Georg Ledermann, Geoff Longman, Olly Lylo, Mark Mansour, Thomas Maurer,
-Mike Vincent
+Thanks to John Joseph Bachir, Eike Carls, Kai Chen, Erik Dahlstrand, Jeroen van Dijk,
+Alexander Dobriakov, Sebastian Dyck, Ari Epstein, Jeremy Friesen, Tim Harper, hollownest,
+Daniel Kristensen, Brian Langenfeld, Georg Ledermann, Geoff Longman, Olly Lylo, Mark Mansour,
+Thomas Maurer, TJ Singleton, Mike Vincent
= Licence
Copyright (c) 2008 Steffen Bartsch, TZI, Universität Bremen, Germany