README.md in jsonapi-authorization-0.4.0 vs README.md in jsonapi-authorization-0.5.0
- old
+ new
@@ -29,23 +29,23 @@
Make sure you have a Pundit policy specified for every backing model that your JR resources use. Then hook this gem up to your application like so:
```ruby
JSONAPI.configure do |config|
- config.operations_processor = '::JSONAPI::Authorization::Pundit'
+ config.operations_processor = :jsonapi_authorization
end
```
-Make all your JR controllers specify the following in the `context`:
+Make all your JR controllers specify the user in the `context` if you are using the default authorizer class (see [Configuration](#configuration) below):
```ruby
class BaseResourceController < ActionController::Base
include JSONAPI::ActsAsResourceController
private
def context
- {user: current_user, action: action_name}
+ {user: current_user}
end
end
```
Have your JR resources include the `JSONAPI::Authorization::PunditScopedResource` module.