Passing authorisation context when calling allowed_to? within policy about action_policy HOT 4 CLOSED

the authorisation context doesn't get passed to the other policy (at least that's how it behaves)

Could you please provide an example?

Authorization contexts is passed to nested policies (see this test bacaa99).

from action_policy.

In this example: https://actionpolicy.evilmartians.io/#/writing_policies?id=calling-other-policies

Say the PostPolicy required an extra bit of context, and I supplied it in the current controller. The CommentPolicy can have access to that context (but doesn't need it), but when we call allowed_to? on the PostPolicy the context is lost. At least it seems that way from my testing.

Let me know if that makes sense. If not I can put together a code example.

from action_policy.

but when we call allowed_to? on the PostPolicy the context is lost

Hm, in that case an exception is raised (AuthorizationContextMissing); unless you specified allow_nil: true.

Could you share your policy classes? Or propose a PR with the failing test

from action_policy.

Thanks @palkan. I've made a failing test case PR: #37

Hope it makes sense :)

from action_policy.