v0.7.1

• AR::Base.new {} fixed
• Potential recursion in complicated lambda conditions fixed
• Automatic restriction extended to associations internal builders

v0.7.0

:view rule has been replaced with :read for better semantic. The first is now deprecated and will be turned into a custom rule on 1.0 milestone.

v0.6.4

Critical bug leading to accidental unrestriction of relation fixed

v0.6.3

• strong_parameters integration fixed (broken in 0.6.2)

v0.6.2

• Consistency between custom and built-in rules improved on the Meta DSL level (interface is still same but expected to be more bulletproof in edge cases)
• Added .creatable? on a base class level: Model.restrict!(current_user).creatable?

v0.6.1

• Compatibility with eager loading made from within of protection scopes improved
• create and create! made to work properly

v0.6.0

Protection block scope calls made to merge

v0.6.0.beta.1

Protection block scope calls made to merge

The release can break backward compatibility (but it should not). Please try it out before we mark it as stable and raise issues if something goes wrong.

v0.5.5

Important bug making Protector to interfere model initialization even when it's unprotected fixed.

v0.5.4

Invalidation exception extended with an interpolation argument called field. Default localization is now: "Access denied to '%{field}'".