Merge pull request #15 from tiroc/master

support for authorization adapter

Author: Fivell

lib/active_admin_import.rb

@@ -5,5 +5,6 @@
 require 'active_admin_import/dsl'
 require 'active_admin_import/importer'
 require 'active_admin_import/model'
+require 'active_admin_import/authorization'
 ::ActiveAdmin::DSL.send(:include, ActiveAdminImport::DSL)
 

lib/active_admin_import/authorization.rb

@@ -0,0 +1,8 @@
+module ActiveAdminImport
+  # Default Authorization permission for ActiveAdminImport
+  module Authorization
+    IMPORT = :import
+  end
+
+  Auth = Authorization
+end

lib/active_admin_import/dsl.rb

@@ -33,21 +33,25 @@ def active_admin_import options = {}, &block
           headers_rewrites: {}
       }
       options = default_options.deep_merge(options)
-      options[:template_object] = ActiveAdminImport::Model.new if options[:template_object].blank?
-      params_key = ActiveModel::Naming.param_key(options[:template_object])
+      params_key = ActiveModel::Naming.param_key(options[:template_object] || ActiveAdminImport::Model.new)
 
       collection_action :import, method: :get do
-        @active_admin_import_model = options[:template_object]
+        authorize!(ActiveAdminImport::Auth::IMPORT, active_admin_config.resource_class)
+
+        @active_admin_import_model = options[:template_object] || ActiveAdminImport::Model.new
         render template: options[:template]
       end
 
       action_item only: :index do
-        link_to(I18n.t('active_admin_import.import_model', model: options[:resource_label]), action: 'import')
+        if authorized?(ActiveAdminImport::Auth::IMPORT, active_admin_config.resource_class)
+          link_to(I18n.t('active_admin_import.import_model', model: options[:resource_label]), action: 'import')
+        end
       end
 
       collection_action :do_import, method: :post do
+        authorize!(ActiveAdminImport::Auth::IMPORT, active_admin_config.resource_class)
 
-        @active_admin_import_model = options[:template_object]
+        @active_admin_import_model = options[:template_object] || ActiveAdminImport::Model.new
         @active_admin_import_model.assign_attributes(params[params_key].try(:deep_symbolize_keys) || {})
         #go back to form
         return render template: options[:template] unless @active_admin_import_model.valid?