Class: Authorization::DevelopmentSupport::ChangeSupporter

Inherits:
AbstractAnalyzer show all
Defined in:
lib/declarative_authorization/development_support/change_supporter.rb

Overview

Ideas for improvement

  • Algorithm

    • Objective function:

      • affected user count,

      • as specific as possible (roles, privileges) -> counter-productive?

      • as little changes as necessary

    • Modify role, privilege hierarchy

    • Merge, split roles

    • Add privilege to existing rules

  • Features

    • Improve review facts: impact, affected users count

    • group similar candidates: only show abstract methods?

    • restructure GUI layout: more room for analyzing suggestions

    • changelog, previous tests, etc.

    • different permissions in tests

  • Evaluation of approaches with Analyzer algorithms

  • Authorization constraints

Algorithm

  • for each candidate

    • abstract actions: solving first failing test (remove privilege from role)

    • for each abstract action

      • specific actions: concrete steps (remove privilege from specific role)

      • for each specific action

        • next if reversal action of previous step

        • apply specific action on candidate

        • save as solution if no failing tests on changed_candidate

        • else: queue as candidate

  • equivalent states

NOTE:

  • user.clone needs to clone role_symbols

  • user.role_symbols needs to respond to <<

  • user.login is needed

Defined Under Namespace

Classes: AbstractAction, AbstractCompoundAction, AddPrivilegeAndAssignRoleToUserAction, Approach, ApproachChecker, AssignPrivilegeToRoleAction, AssignRoleToUserAction, CreateAndAssignRoleToUserAction, RemovePrivilegeFromRoleAction, RemoveRoleFromUserAction, Test

Instance Attribute Summary

Attributes inherited from AbstractAnalyzer

#engine

Instance Method Summary collapse

Methods inherited from AbstractAnalyzer

#initialize, #roles, #rules

Constructor Details

This class inherits a constructor from Authorization::DevelopmentSupport::AbstractAnalyzer

Instance Method Details

#find_approaches_for(options, &tests) ⇒ Object 



44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
 
# File 'lib/declarative_authorization/development_support/change_supporter.rb', line 44

def find_approaches_for (options, &tests)
  @prohibited_actions = (options[:prohibited_actions] || []).to_set

  @approaches_by_actions = {}

  candidates = []
  suggestions = []
  approach_checker = ApproachChecker.new(self, tests)

  starting_candidate = Approach.new(@engine, options[:users], [])
  if starting_candidate.check(approach_checker)
    suggestions << starting_candidate
  else
    candidates << starting_candidate
  end

  checked_candidates = 0
  while !candidates.empty? and checked_candidates < 200
    checked_candidates += next_step(suggestions, candidates, approach_checker)
  end

  # remove subsets

  suggestions.sort!
end