handle action policy

index.js

@@ -18,10 +18,28 @@ module.exports = function(sails){
                 // make it work for windows
                 controllerName = controllerName.split(path.sep).join('/');
 
+                var actionName = route.actionName
+
                 sails.config.routes[route.method + ' ' + route.url] = {
                     controller: controllerName,
-                    action: route.actionName,
+                    action: actionName,
                 };
+
+
+                // Handle policies
+
+                for(var policy in route.annotations){
+
+                    if(!(controllerName in sails.config.policies)){
+                        sails.config.policies[controllerName] = {};
+                    }
+
+                    if(!(actionName in sails.config.policies[controllerName])){
+                        sails.config.policies[controllerName][actionName] = [];
+                    }
+
+                    sails.config.policies[controllerName][actionName].push(policy);
+                }
             });
         }
     };

test/controllers/rootController.js

@@ -8,3 +8,10 @@ module.exports.getItems = function(req, res){
 module.exports.getItem = function(req, res){
 	res.send(+req.params.id);
 };
+
+// @isLoggedIn()
+// @httpGet()
+// @route('/private')
+module.exports.private = function(req, res){
+	res.ok();
+};

test/index.js

@@ -70,4 +70,10 @@ describe('hook annotation router', function(){
             .get('/test')
             .expect(200, done);
     });
+
+    it('should allow the user to access /private route', function(done){
+        request(sails.hooks.http.app)
+            .get('/private')
+            .expect(403, done);
+    })
 })

test/policies/isLoggedIn.js

@@ -1,5 +1,5 @@
 
 
 module.exports = function(req, res, next){
-	console.log('policy called');
+	res.forbidden();
 }