autorizacion para sitios

app/controllers/i18n_controller.rb

@@ -1,13 +1,16 @@
 class I18nController < ApplicationController
+  include Pundit
   before_action :authenticate!
 
   def index
+    authorize :i18n
     @site = find_site
 
     redirect_to site_i18n_edit_path(@site)
   end
 
   def edit
+    authorize :i18n
     @site = find_site
     @lang_from = params.fetch(:from, I18n.locale.to_s)
     @lang_to = params.fetch(:to, @lang_from)
@@ -17,6 +20,7 @@ class I18nController < ApplicationController
   end
 
   def update
+    authorize :i18n
     @site = find_site
     @lang_to = params.require(:i18n).require(:lang_to)
     # No usamos params porque nos obliga a hacer una lista blanca de

app/controllers/sites_controller.rb

@@ -1,15 +1,18 @@
 # Controlador de sitios
 class SitesController < ApplicationController
+  include Pundit
   before_action :authenticate!
 
   # Ver un listado de sitios
   def index
+    authorize Site
     @sites = current_user.sites
   end
 
   # No tenemos propiedades de un sitio aún, así que vamos al listado de
   # artículos
   def show
+    authorize Site
     site = find_site
 
     redirect_to site_posts_path(site)
@@ -17,6 +20,7 @@ class SitesController < ApplicationController
 
   # Envía un archivo del directorio público de Jekyll
   def send_public_file
+    authorize Site
     @site = find_site
     file  = [params[:basename], params[:format]].join('.')
     path  = Pathname.new(File.join(@site.path, 'public', params[:type], file))
@@ -36,6 +40,7 @@ class SitesController < ApplicationController
 
   def enqueue
     @site = find_site
+    authorize @site
     @site.enqueue!
 
     redirect_to sites_path
@@ -43,6 +48,7 @@ class SitesController < ApplicationController
 
   def build_log
     @site = find_site
+    authorize @site
 
     # TODO eliminar ANSI
     render file: @site.build_log,
@@ -52,6 +58,7 @@ class SitesController < ApplicationController
 
   def reorder_posts
     @site = find_site
+    authorize @site
     lang = params.require(:posts).require(:lang)
 
     if params[:posts][:force].present?
@@ -68,5 +75,4 @@ class SitesController < ApplicationController
 
     redirect_to site_posts_path @site
   end
-
 end

app/policies/i18n_policy.rb

@@ -0,0 +1,19 @@
+class I18nPolicy < SuttyPolicy
+
+  def initialize(usuarix, i18n)
+    @usuarix = usuarix
+  end
+
+  # Solo las usuarias
+  def index?
+    usuaria?
+  end
+
+  def edit?
+    update?
+  end
+
+  def update?
+    usuaria?
+  end
+end

app/policies/site_policy.rb

@@ -0,0 +1,39 @@
+class SitePolicy < SuttyPolicy
+  attr_reader :usuarix, :site
+
+  def initialize(usuarix, site)
+    @usuarix = usuarix
+    @site = site
+  end
+
+  # Todxs lxs usuarixs pueden ver el índice
+  def index?
+    true
+  end
+
+  # Todxs lxs usuarixs pueden ver el sitio
+  def show?
+    true
+  end
+
+  # Solo las usuarias
+  def build?
+    usuaria?
+  end
+
+  def send_public_file?
+    true
+  end
+
+  def enqueue?
+    usuaria?
+  end
+
+  def build_log?
+    usuaria?
+  end
+
+  def reorder_posts?
+    usuaria?
+  end
+end

app/policies/sutty_policy.rb

@@ -0,0 +1,11 @@
+class SuttyPolicy
+  attr_reader :usuarix
+
+  def invitadx?
+    usuarix.is_a? Invitadx
+  end
+
+  def usuaria?
+    usuarix.is_a? Usuaria
+  end
+end

app/views/sites/index.haml

@@ -16,16 +16,19 @@
               %h2= link_to site.name, site_path(site)
               %br
                 .btn-group{role: 'group', 'aria-label': t('sites.actions')}
+                  - if policy(site).show?
                     = render 'layouts/btn_with_tooltip',
                       tooltip: t('help.sites.edit_posts'),
                       type: 'success',
                       link: site_path(site),
                       text: t('sites.posts')
+                  - if policy(:i18n).edit?
                     = render 'layouts/btn_with_tooltip',
                       tooltip: t('help.sites.edit_translations'),
                       text: t('i18n.edit'),
                       type: 'info',
                       link: site_i18n_edit_path(site)
+                  - if policy(site).build?
                     - if site.enqueued?
                       = render 'layouts/btn_with_tooltip',
                         tooltip: t('help.sites.enqueued'),
@@ -41,6 +44,7 @@
                           = fa_icon 'building'
                           = t('sites.enqueue')
 
+                  - if policy(site).build_log?
                     - if site.failed?
                       %button.btn.btn-danger= t('sites.failed')
                     - if site.build_log?