Mitch VanDuyn
Mitch VanDuyn
I'll try to get done as well
@janbiedermann sorry abt assigning problem. Fix should be just as shown, but I am concerned about perf impact. You r kind of master if that. If you check it out...
so I'm a little confused by #19. does the PR fix this problem?
Quick look would indicate that the test environment is reporting GMT as -000 instead of expected +000 Failures 10 and 11 are worrisome as they in the auth spec The...
yeah that is not surprising... I am not going to tag this for the 1.0 / 15 release. okay?
Two things about scopes (and relationships) verses normal attributes. 1. Scopes themselves do not present any data, only their aggregates (like count, avg, etc), so what we are protecting is...
The only time these policies are applied is when the request is only for the count without any attributes. Mymodel.all.count # will check ... My model.all.each { |x| x.id }...
Key to understand what is all vectors return data. `Mymodel.all` does nothing
@janbiedermann is correct that the design **must assume** that the API is public and will be attacked. Correct use **cannot** be assumed. 1. default policy is to deny access but...