first commit for object auth,will take new_blog for experiment

app/models/app_auth.rb

@@ -1,94 +1,5 @@
-class AppAuth
-  include Mongoid::Document
-  include Mongoid::Timestamps
- # after_save :update_block_list,:update_privilage_list
-  
-  field :title
-  field :token
-  field :all ,type: Boolean,default: false
+class AppAuth < PrototypeAuth
+
   belongs_to :module_app
   
-  belongs_to :users
-  # belongs_to :users,as: :block_users, :inverse_of => :privilege_apps
-  has_and_belongs_to_many :blocked_users,  :inverse_of => nil, :class_name => "User"
-  has_and_belongs_to_many :privilege_users,  :inverse_of => nil, :class_name => "User"
-
-
-  has_and_belongs_to_many :roles
-  has_and_belongs_to_many :sub_roles
-  
-  attr_protected :roles,:sub_roles,:privilege_users,:blocked_users,:users
-
-  def add_role role
-    add_operation(:roles,role)
-  end
-  
-  def add_sub_role role
-    add_operation(:sub_roles,role)
-  end
-  
-  def remove_role role
-    remove_operation(:roles,role)
-  end
-  
-  def remove_sub_role role
-    remove_operation(:sub_roles,role)
-  end
-  
-  def add_user_to_black_list user
-    add_operation(:blocked_users,user)
-  end
-  
-  def remove_user_from_black_list user
-    remove_operation(:blocked_users,user)
-  end
-  
-  def add_user_to_privilege_list user
-    add_operation(:privilege_users,user)
-  end
-  
-  def remove_user_from_privilege_list user
-    remove_operation(:privilege_users,user)
-  end
-  
-  def remove_operation(item,obj)
-    if (self.send item).include? obj
-       (self.send item).delete obj
-      self.save!
-    else
-      false #should put error message for user not existed in list
-    end    
-  end
-  
-  def add_operation(item,obj)
-    unless (self.send item).include?(obj)
-      (self.send item) << obj
-      self.save!
-    else
-      false #should put error message for user existed in list already
-    end
-  end
-  
-  def auth_users
-    if self.all?
-      User.all.entries
-    else
-      ary=[]
-      [:roles,:sub_roles].each do |t_role|
-        ary += (self.send t_role).collect do |role|
-          role.users
-        end        
-      end
-      ary << self.privilege_users
-      ary.flatten!.uniq  
-    end
-  end
-  
-  def auth_users_after_block_list
-    auth_users - self.blocked_users
-  end
-  
- # protected
-  
-
 end

app/models/object_auth.rb

@@ -0,0 +1,11 @@
+class ObjectAuth  < PrototypeAuth
+
+  belongs_to :obj_authable, polymorphic: true
+  # > - Something.find_with_auth(query)
+  # > - or Something.find(query).auth
+  def auth_obj
+    class_obj = eval(self.obj_authable_type)
+    class_obj.find self.obj_authable_id
+  end
+
+end

app/models/prototype_auth.rb

@@ -0,0 +1,93 @@
+class PrototypeAuth
+  include Mongoid::Document
+  include Mongoid::Timestamps
+ # after_save :update_block_list,:update_privilage_list
+  
+  field :title
+  field :token
+  field :all ,type: Boolean,default: false
+  
+  belongs_to :users
+  # belongs_to :users,as: :block_users, :inverse_of => :privilege_apps
+  has_and_belongs_to_many :blocked_users,  :inverse_of => nil, :class_name => "User"
+  has_and_belongs_to_many :privilege_users,  :inverse_of => nil, :class_name => "User"
+
+
+  has_and_belongs_to_many :roles
+  has_and_belongs_to_many :sub_roles
+  
+  attr_protected :roles,:sub_roles,:privilege_users,:blocked_users,:users
+
+  def add_role role
+    add_operation(:roles,role)
+  end
+  
+  def add_sub_role role
+    add_operation(:sub_roles,role)
+  end
+  
+  def remove_role role
+    remove_operation(:roles,role)
+  end
+  
+  def remove_sub_role role
+    remove_operation(:sub_roles,role)
+  end
+  
+  def add_user_to_black_list user
+    add_operation(:blocked_users,user)
+  end
+  
+  def remove_user_from_black_list user
+    remove_operation(:blocked_users,user)
+  end
+  
+  def add_user_to_privilege_list user
+    add_operation(:privilege_users,user)
+  end
+  
+  def remove_user_from_privilege_list user
+    remove_operation(:privilege_users,user)
+  end
+  
+  def remove_operation(item,obj)
+    if (self.send item).include? obj
+       (self.send item).delete obj
+      self.save!
+    else
+      false #should put error message for user not existed in list
+    end    
+  end
+  
+  def add_operation(item,obj)
+    unless (self.send item).include?(obj)
+      (self.send item) << obj
+      self.save!
+    else
+      false #should put error message for user existed in list already
+    end
+  end
+  
+  def auth_users
+    if self.all?
+      User.all.entries
+    else
+      ary=[]
+      [:roles,:sub_roles].each do |t_role|
+        ary += (self.send t_role).collect do |role|
+          role.users
+        end        
+      end
+      ary << self.privilege_users
+      ary.flatten!.uniq  
+    end
+  end
+  
+  def auth_users_after_block_list
+    auth_users - self.blocked_users
+  end
+  
+ # protected
+  
+
+end