Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
66 changes: 38 additions & 28 deletions lib/protector/dsl.rb
Original file line number Diff line number Diff line change
Expand Up @@ -102,23 +102,28 @@ def eval_scope_procs(instance)
# # Can create f1 field with value equal to 'olo'
# can :create, f1: lambda{|x| x == 'olo'}
# end
def can(action, *fields)
action = deprecate_actions(action)
def can(actions, *fields)
Array.wrap(actions).each do |action|
action = deprecate_actions(action)

return @destroyable = true if action == :destroy
if action == :destroy
@destroyable = true
next
end

@access[action] = {} unless @access[action]
@access[action] = {} unless @access[action]

if fields.length == 0
@fields.each { |f| @access[action][f.to_s] = nil }
else
fields.each do |a|
if a.is_a?(Array)
a.each { |f| @access[action][f.to_s] = nil }
elsif a.is_a?(Hash)
@access[action].merge!(a.stringify_keys)
else
@access[action][a.to_s] = nil
if fields.length == 0
@fields.each { |f| @access[action][f.to_s] = nil }
else
fields.each do |a|
if a.is_a?(Array)
a.each { |f| @access[action][f.to_s] = nil }
elsif a.is_a?(Hash)
@access[action].merge!(a.stringify_keys)
else
@access[action][a.to_s] = nil
end
end
end
end
Expand All @@ -133,25 +138,30 @@ def can(action, *fields)
#
# @see #can
# @see #can?
def cannot(action, *fields)
action = deprecate_actions(action)
def cannot(actions, *fields)
Array.wrap(actions).each do |action|
action = deprecate_actions(action)

return @destroyable = false if action == :destroy
if action == :destroy
@destroyable = false
next
end

return unless @access[action]
next unless @access[action]

if fields.length == 0
@access.delete(action)
else
fields.each do |a|
if a.is_a?(Array)
a.each { |f| @access[action].delete(f.to_s) }
else
@access[action].delete(a.to_s)
if fields.length == 0
@access.delete(action)
else
fields.each do |a|
if a.is_a?(Array)
a.each { |f| @access[action].delete(f.to_s) }
else
@access[action].delete(a.to_s)
end
end
end

@access.delete(action) if @access[action].empty?
@access.delete(action) if @access[action].empty?
end
end
end

Expand Down