2022-01-01 13:38:12 +00:00
|
|
|
# Copyright (C) 2012-2022 Zammad Foundation, https://zammad-foundation.org/
|
2021-06-01 12:20:20 +00:00
|
|
|
|
2020-03-19 09:39:51 +00:00
|
|
|
class Controllers::ApplicationControllerPolicy < ApplicationPolicy
|
|
|
|
class_attribute(:action_permissions_map, default: {})
|
|
|
|
|
|
|
|
def self.inherited(subclass)
|
2020-09-30 09:07:01 +00:00
|
|
|
super
|
|
|
|
|
2020-03-19 09:39:51 +00:00
|
|
|
subclass.action_permissions_map = action_permissions_map.deep_dup
|
|
|
|
end
|
|
|
|
|
|
|
|
def self.default_permit!(permissions)
|
|
|
|
action_permissions_map.default = permissions
|
|
|
|
end
|
|
|
|
|
|
|
|
def self.permit!(actions, to:)
|
|
|
|
Array(actions).each do |action|
|
|
|
|
action_permissions_map[:"#{action}?"] = to
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def method_missing(missing_method, *)
|
|
|
|
case (permission = action_permissions_map[missing_method])
|
|
|
|
when String, Array
|
|
|
|
user.permissions!(permission) || true
|
|
|
|
when Proc
|
|
|
|
user.permissions!(instance_exec(&permission)) || true
|
|
|
|
else
|
|
|
|
super
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def respond_to_missing?(missing_method)
|
|
|
|
action_permissions_map[missing_method] || super
|
|
|
|
end
|
|
|
|
|
|
|
|
end
|