How to reset rule cache ?

[nflorentin]

Hi,

First of all, thanks for your amazing work, I'm really appreciate action_policy, by far the best gem for authorization !

My little issue is I'm wondering how to reset a rule cached.

I seemed to have understand that it takes place here in @__rules_cache__.
https://github.com/palkan/action_policy/blob/1f7b80bab2b79b82cc1ffe0cdd417cfa7f4b328d/lib/action_policy/policy/cached_apply.rb

I browsed the doc with no success and did not find an answer reading the codebase.

My use-case is very simple:
1/ I'm the owner of a project, so I'm allowed to transfer the ownership (the policy returns true)
2/ I transfer the ownership of the project to another user
3/ I'm no longer the owner, I can't transfer the ownership anymore (the policy should returns false)

In step 1, I call allowed_to?(:edit, project, with: Projects::OwnershipPolicy).

In step 3, when I render the view in my server response, I call the same allowed_to? again and it returns true because the result is in cache. I would like to reset the cache in my controller action, in order to make it worked.

I could use Projects::OwnershipPolicy.new(project).edit? but I found it ugly to have authorizations computed with different syntaxes.

Thanks in advance for your answer !

[nflorentin]

I just found out that using Projects::OwnershipPolicy.new(project).edit? is not an option. Because it does not run pre_check ... and I'm using pre_checks everywhere with action_policy to simplify policies.

[gnepud]

Hi
I have the same problem. Please resolve this issue.

[palkan]

Currently, you can achieve this by busting the authorization context like this:

# add additional context value (anything would work) to cache the policy using a non-default key
authorize! project, to: :transfer?, context: {skip_cache: true}

project.transfer(new_user)

allowed_to?(:transfer?, project)

This way, you can separate caching contexts for actions (at all levels, not just rules cache).

You can play with this implementation here: https://runruby.dev/?gist=edddad2f3de94673cae7ca6254910ee7

See also palkan/action_policy-graphql#53

[nflorentin]

Oh, many thanks for your quick reply! 🙏
It's cristal clear and working like a charm.

Have a nice day