DocSavage / rails-authorization-plugin fork watch download tarball
public
Description: This plugin provides a flexible way to add authorization to Rails.
Homepage: http://www.writertopia.com/developers/authorization
Clone URL: git://github.com/DocSavage/rails-authorization-plugin.git
rails-authorization-plugin / Commit History feed

02/17/08

Minor text changes to the generator usage text and 
authorization_example.rb.  Updated about.yml.
grempe (author)
Sun Feb 17 17:54:19 -0800 2008
commit  1f5012543ffae5a792f24fcaacb0bc0e3982cb23
tree    9896d1344a87f94a48f45f48a596e4ddf79a6e97
parent  dcc0e8b025c8ab02273092aaedeb57a58efc0e91 
Modified db migration generator to create new Rails 2.x 'Sexy Migrations'
grempe (author)
Sun Feb 17 17:32:31 -0800 2008
commit  dcc0e8b025c8ab02273092aaedeb57a58efc0e91
tree    75c277cbeb91333e51a9eb2bf49963ed07386fee
parent  d60b801629ac058a0a1ad407febdcc54fcec79a8 
Removed attr_protected from acts_as_authorized_user, acts_as_authorizable 
methods.
grempe (author)
Sun Feb 17 16:31:23 -0800 2008
commit  d60b801629ac058a0a1ad407febdcc54fcec79a8
tree    30f045f653dcdc07e98db7ba5ec88acae6f0fd47
parent  aa56c2103c198286b916cea71cec24ced6c1bda6

10/06/06

* 2nd part of path for performance improvement for has_role?  [Sean 
Geoghegan]
bkatz (author)
Fri Oct 06 09:19:52 -0700 2006
commit  aa56c2103c198286b916cea71cec24ced6c1bda6
tree    974cb1bfff3b89753182652e2f9c6f8f0369ff9c
parent  39450ba60a2ec86602d3057e120dd5f28e0c9071

10/03/06

* Performance improvement for has_role?  [Sean Geoghegan]
bkatz (author)
Tue Oct 03 09:44:41 -0700 2006
commit  39450ba60a2ec86602d3057e120dd5f28e0c9071
tree    7c5a1f0cd87b00f6c35d9d84c3f1cb569d644189
parent  25978db86c98b95add8403e11a79ebd3c5a51ed8

10/02/06

* Allow customization of message on redirection after failed authorization 
(:redirect_message option) [Joey Geiger]
bkatz (author)
Mon Oct 02 17:49:14 -0700 2006
commit  25978db86c98b95add8403e11a79ebd3c5a51ed8
tree    19e0b7da7febd60c04ff7fa51a3c6cd873ed6ba7
parent  5378fe14beb272759d8fea0bd0cc608cc90ef0aa

09/16/06

Patch to allow authorizable objects that use single table inheritance 
(STI) [Sean Geoghegan]
bkatz (author)
Sat Sep 16 17:40:17 -0700 2006
commit  5378fe14beb272759d8fea0bd0cc608cc90ef0aa
tree    446b0fb36dd29fbbe4b113b4bf56087df9f71c71
parent  3765c280128c3f539c61dc39c748cf1f84858d38

09/13/06

Minor fix in README
bkatz (author)
Wed Sep 13 13:10:49 -0700 2006
commit  3765c280128c3f539c61dc39c748cf1f84858d38
tree    c2aef935ec0992f2f8251d5b5d11b8bb79c0107d
parent  976a0915ae102faf587b8c475de1a8c2259c022e
bkatz (author)
Wed Sep 13 00:01:46 -0700 2006
commit  976a0915ae102faf587b8c475de1a8c2259c022e
tree    4d8b84cc34498fe11a8d6dcfdef8da26bc71d070
parent  fd515011cab42141ad919c07baea2926a0ca791c

09/07/06

Added attr_protected for habtm and has_many role ids to block security 
concern if developers use update_attributes(params[:auth_obj]) on an 
authorizable object [Michael Schuerig]
bkatz (author)
Thu Sep 07 11:01:57 -0700 2006
commit  fd515011cab42141ad919c07baea2926a0ca791c
tree    d11e9efa29c1f6b0203e06b277acd8975bb93c19
parent  32f2fc5cee92dca94e1d9a8b6cde9f34867d0d97

09/06/06

Updated changelog.
bkatz (author)
Wed Sep 06 11:31:04 -0700 2006
commit  32f2fc5cee92dca94e1d9a8b6cde9f34867d0d97
tree    295e1a0c88a606022c01829481687ca8ae394bf6
parent  b960b899523a02386683654784b2718ad4730c88 
Use before_filter rather than prepend_before_filter so necessary instance 
variables (and methods) can be established before trying authorization 
checks. This fix came about for Mephisto blog where a class-level permit 
"admin of site" was used. The site attribute was set in a before_filter. 
If you prepend your authorization filter, it will execute before any other 
before_filter, which is probably not a good idea.
bkatz (author)
Wed Sep 06 11:25:57 -0700 2006
commit  b960b899523a02386683654784b2718ad4730c88
tree    0c59aa1257c75fab8734f9353ca3958564d6e8b1
parent  8f1fe1cf1433f823b68c723587bd1763f9c09a39

09/01/06

Add "about" yaml for future Rails plugin directory.
bkatz (author)
Fri Sep 01 10:41:36 -0700 2006
commit  8f1fe1cf1433f823b68c723587bd1763f9c09a39
tree    56dd958cb77cdb7547c6ce348a1d51a768f9dd13
parent  173e93547197a3f6809daf76bc780a8131e36a46

08/31/06

Cleaned up exception handling a little [due to suggestion by Michael 
Schuerig]
bkatz (author)
Thu Aug 31 15:09:01 -0700 2006
commit  173e93547197a3f6809daf76bc780a8131e36a46
tree    ef55e84c31b94e72d1ab6f35e83fee9872e57ba8
parent  481701660f3c5d758e4fd8ed528dfeebfd0ec9cc

08/21/06

Added usage for generator
bkatz (author)
Mon Aug 21 02:15:15 -0700 2006
commit  481701660f3c5d758e4fd8ed528dfeebfd0ec9cc
tree    14dc837b56f776bdccf9f939162dd812f1a78832
parent  5588f2c004ecfcadc02434d0e0a62c5f634abeba 
Modified documentation for role generator.
bkatz (author)
Mon Aug 21 02:11:06 -0700 2006
commit  5588f2c004ecfcadc02434d0e0a62c5f634abeba
tree    0fcdd2354700a764f6463ce1c8a422394964f41f
parent  73c496a28e86df9e11948f7e34df13854494cbc3 
Add drop_table for join in generated migration template
bkatz (author)
Mon Aug 21 01:57:03 -0700 2006
commit  73c496a28e86df9e11948f7e34df13854494cbc3
tree    ac5da6e97e607073d2bbc0f20f97e94f4215c187
parent  78ba8748226a08c5eb8c9ac11c3d404797ead75c 
Add generator for role model and migration, e.g., "script/generate 
role_model Role". Role model must be called "Role" at this time. More 
general naming as a TO DO. Removed simple_roles_table to simplify plugin.
bkatz (author)
Mon Aug 21 01:52:56 -0700 2006
commit  78ba8748226a08c5eb8c9ac11c3d404797ead75c
tree    26a1b408cb69c32cb1ab42fc86e0b16bb01f4fb9
parent  0cdfeda1eac1519a00d374720c26e238fee29f55

08/20/06

Moved all files in Authorization namespace into /publishare subdirectory 
to reduce danger of clashes in load path [nod to Michael Schuerig].
bkatz (author)
Sun Aug 20 21:22:39 -0700 2006
commit  0cdfeda1eac1519a00d374720c26e238fee29f55
tree    12fbdb6c7dcc2a6db6901e85cd3dbc9589c325d4
parent  80b15784da036beb97de54b11187e9bc8be526b2
bkatz (author)
Sun Aug 20 21:19:36 -0700 2006
commit  80b15784da036beb97de54b11187e9bc8be526b2
tree    4f2e39c285ccf1a6c8fd5a97d8185a26e0391c39
parent  60768903fb8062015ddf6156eb1e2aabc30c1c21 
Small code refinement patch [Michael Schuerig]
bkatz (author)
Sun Aug 20 20:21:43 -0700 2006
commit  60768903fb8062015ddf6156eb1e2aabc30c1c21
tree    4f2e39c285ccf1a6c8fd5a97d8185a26e0391c39
parent  d7c1c547456e85e86e0a42054298b10d01473949

08/18/06

Added note on optional colon for models in auth expressions.
bkatz (author)
Fri Aug 18 14:00:22 -0700 2006
commit  d7c1c547456e85e86e0a42054298b10d01473949
tree    d99c089fea271f61f5997fc8cb1a15b47e768eae
parent  7073d2c2a3136e4a007437a2b573246d72e6c387 
Modify get_model to make colons optional as marker for model names.
bkatz (author)
Fri Aug 18 11:15:16 -0700 2006
commit  7073d2c2a3136e4a007437a2b573246d72e6c387
tree    8fa5c985dcbb5a0a2a926dc29ea9b10e171caa68
parent  d2d5377a6ca8995ecc1cc4b1211a8e3186cbaf29 
Make it more explicit that the ":" preceding a model name is optional. The 
parser uses accepted prepositions to disambiguate models from roles.
bkatz (author)
Fri Aug 18 09:57:02 -0700 2006
commit  d2d5377a6ca8995ecc1cc4b1211a8e3186cbaf29
tree    6833352d6748089cffd6e719127a8e6998ae58b3
parent  2c81c50b157661bee3979a6c0ab9465303d8e1f5

08/17/06

Make sure role.rb is required.
bkatz (author)
Thu Aug 17 12:59:55 -0700 2006
commit  2c81c50b157661bee3979a6c0ab9465303d8e1f5
tree    19990fa25070bb39dc9dff3aee81b306fe383bc5
parent  95f131efb7df7e8e347804376379cbccb53ad8aa 
Add changelog
bkatz (author)
Thu Aug 17 10:02:26 -0700 2006
commit  95f131efb7df7e8e347804376379cbccb53ad8aa
tree    c22c7a99ca7542e5861451a5a16fbe50f6fede19
parent  55de973febf8fd249fbfa8c84137d07e05c3ec9f 
Change default parser from Recursive Descent parser to Eval parser. 
Currently implemented recursive descent parser doesn't handle left-sided 
boolean expressions well. Eval parser relies on Ruby (good thing), but 
wherever there's an eval, we have to be more careful.  Use tainting?
bkatz (author)
Thu Aug 17 10:02:03 -0700 2006
commit  55de973febf8fd249fbfa8c84137d07e05c3ec9f
tree    39b7941c5c49dbee97c7f58577a680d8045d1f8e
parent  5ba265db36028a5cfa9448c018555abd31a0b37e

08/04/06

Added short-circuiting of filters if redirect occurs. This prevents double 
redirection when using class-level authorization (or before_filter 
:login_required) in both superclass and subclass controllers.
bkatz (author)
Fri Aug 04 16:04:13 -0700 2006
commit  5ba265db36028a5cfa9448c018555abd31a0b37e
tree    f191f8a012e0502e846a23bd120d874ba5361629
parent  b2780de718c343382e6d57e00d89c8af0a636da8

07/23/06

Fixed outdated documentation
bkatz (author)
Sun Jul 23 12:03:28 -0700 2006
commit  b2780de718c343382e6d57e00d89c8af0a636da8
tree    18b4a4fe9a568c6993192e5e7e56f5901ab51048
parent  59e043f5cd3b62892c19885f29f76955f5d422c4 
Changed the requires to pull files from the plugin directory. (Necessary 
for name conflicts between plugin and apps)
bkatz (author)
Sun Jul 23 11:52:47 -0700 2006
commit  59e043f5cd3b62892c19885f29f76955f5d422c4
tree    b3b33ee87ec541b15d5072270f69c3e36dee1d63
parent  02e75e39330cf8548b6402d345a9e95349b65272