Exchange the POST and PUT http methods (#84)

* exchange the behaviour of PUT and POST

* assert post and put in respect of their privileges

* bump the version number

project.clj

@@ -1,4 +1,4 @@
-(defproject com.flexiana/framework "0.2.1"
+(defproject com.flexiana/framework "0.2.2"
   :description "Framework"
   :url "https://github.com/Flexiana/framework"
   :license {:name "FIXME" :url "FIXME"}

src/framework/acl/core.clj

@@ -6,8 +6,8 @@
 
 (def action-mapping
   {:get    :read
-   :post   :update
-   :put    :create
+   :post   :create
+   :put    :update
    :delete :delete})
 
 (defn- ->resource
@@ -35,8 +35,8 @@
   |req:    | action: |
   |------- |---------|
   |:get    | :read   |
-  |:post   | :update |
-  |:put    | :create |
+  |:post   | :create |
+  |:put    | :update |
   |:delete | :delete |"
   ([{{user :user}             :session-data
      roles                    :acl/roles

test/framework/acl/core_test.clj

@@ -115,6 +115,10 @@
          (get-error (is-allowed (state-with-user-request guest "/items/" :post)))))
   (is (= :own
          (get-ok (is-allowed (state-with-user-request member "/addresses/" :post)))))
+  (is (= :own
+         (get-ok (is-allowed (state-with-user-request member "/users/" :put)))))
+  (is (= {:status 401, :body "Authorization error"}
+         (get-error (is-allowed (state-with-user-request member "/users/" :post)))))
   (is (= :all
          (get-ok (is-allowed (state-with-user-request admin "/items/" :get)))))
   (is (= :all