lib/godmin/authorization.rb in godmin-1.5.0 vs lib/godmin/authorization.rb in godmin-2.0.0

- old
+ new

@@ -1,34 +1,20 @@ +require "pundit" require "godmin/authorization/policy" -require "godmin/authorization/policy_finder" module Godmin module Authorization extend ActiveSupport::Concern - included do - helper_method :policy + include Pundit - rescue_from NotAuthorizedError do + included do + rescue_from Pundit::NotAuthorizedError do render plain: "You are not authorized to do this", status: 403, layout: "godmin/login" end end - def authorize(record, query = nil) - policy = policy(record) - - unless policy.public_send(query || action_name + "?") - fail NotAuthorizedError - end + def pundit_user + admin_user end - - def policy(record) - policies[record] ||= PolicyFinder.find(record, engine_wrapper.namespace).new(admin_user, record) - end - - def policies - @_policies ||= {} - end - - class NotAuthorizedError < StandardError; end end end