* permission api on user model

1 files changed, 5 insertions, 3 deletions

diff --git a/app/models/permission.rb b/app/models/permission.rb
index 3914c9c..438538e 100644
--- a/app/models/permission.rb
+++ b/app/models/permission.rb
@@ -1,11 +1,13 @@
 class Permission < ActiveRecord::Base
   # Validations
-  validates_presence_of :user_id, :node_id, :granted
+  validates_presence_of   :user_id, :node_id, :granted
+  validates_inclusion_of  :granted, :in => [true, false]
   
   # Associations
   belongs_to :user
   belongs_to :node
   
-  # Security
-  attr_protected :user_id, :node_id, :granted # Allow no mass assignments
+  # Named scopes
+  named_scope :for_node, lambda { |node| { :conditions => ['node_id = ?', (node.is_a? Node ? node.id : node)] } }
+  named_scope :for_user, lambda { |user| { :conditions => ['user_id = ?', (user.is_a? User ? user.id : user)] } }
 end