Received: by 10.14.194.132 with SMTP id m4mr1698203een.0.1346928472464;
        Thu, 06 Sep 2012 03:47:52 -0700 (PDT)
X-BeenThere: declarative_authorization@googlegroups.com
Received: by 10.14.177.133 with SMTP id d5ls381561eem.4.gmail; Thu, 06 Sep
 2012 03:47:51 -0700 (PDT)
Received: by 10.14.194.132 with SMTP id m4mr1698177een.0.1346928471890;
        Thu, 06 Sep 2012 03:47:51 -0700 (PDT)
Received: by 10.14.194.132 with SMTP id m4mr1698174een.0.1346928471844;
        Thu, 06 Sep 2012 03:47:51 -0700 (PDT)
Return-Path: <sbart...@tzi.de>
Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de. [2001:638:708:30c9::12])
        by gmr-mx.google.com with ESMTPS id v3si2365193eep.1.2012.09.06.03.47.51
        (version=TLSv1/SSLv3 cipher=OTHER);
        Thu, 06 Sep 2012 03:47:51 -0700 (PDT)
Received-SPF: neutral (google.com: 2001:638:708:30c9::12 is neither permitted nor denied by best guess record for domain of sbart...@tzi.de) client-ip=2001:638:708:30c9::12;
Authentication-Results: gmr-mx.google.com; spf=neutral (google.com: 2001:638:708:30c9::12 is neither permitted nor denied by best guess record for domain of sbart...@tzi.de) smtp.mail=sbart...@tzi.de
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120])
	by informatik.uni-bremen.de (8.14.3/8.14.3) with ESMTP id q86AljCF023988
	for <declarative_authorization@googlegroups.com>; Thu, 6 Sep 2012 12:47:45 +0200 (CEST)
Received: from [10.0.1.60] (gate.cdc.informatik.tu-darmstadt.de [130.83.167.1])
	(using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
	(No client certificate requested)
	by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id 22F2544A
	for <declarative_authorization@googlegroups.com>; Thu,  6 Sep 2012 12:47:45 +0200 (CEST)
Message-ID: <50487F50.30202@tzi.de>
Date: Thu, 06 Sep 2012 12:47:44 +0200
From: Steffen Bartsch <sbart...@tzi.de>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:15.0) Gecko/20120827 Thunderbird/15.0
MIME-Version: 1.0
To: declarative_authorization@googlegroups.com
Subject: Re: [decl_auth] permissions on has_many relationships
References: <a538bdef-0f8c-4f32-8a62-9a2c65d76339@googlegroups.com>
In-Reply-To: <a538bdef-0f8c-4f32-8a62-9a2c65d76339@googlegroups.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Am 01.09.2012 04:28, schrieb Edward Rudd:
> has_permission_on :developers, :to => :read do
>    if_permitted_to :read, :games
> end

I just checked the test cases.  There actually is a similar case that 
works in authorization_tests#test_attribute_with_has_many_permissions:

         role :test_role do
           has_permission_on :permissions, :to => :test do
             if_attribute :test_attr => 1
           end
           has_permission_on :permission_children, :to => :test do
             if_permitted_to :test, :permissions
           end
         end

Or is this somehow different?

Steffen