37 lines
934 B
Ruby
37 lines
934 B
Ruby
# Copyright (C) 2012-2022 Zammad Foundation, https://zammad-foundation.org/
|
|
|
|
class Controllers::ApplicationControllerPolicy < ApplicationPolicy
|
|
class_attribute(:action_permissions_map, default: {})
|
|
|
|
def self.inherited(subclass)
|
|
super
|
|
|
|
subclass.action_permissions_map = action_permissions_map.deep_dup
|
|
end
|
|
|
|
def self.default_permit!(permissions)
|
|
action_permissions_map.default = permissions
|
|
end
|
|
|
|
def self.permit!(actions, to:)
|
|
Array(actions).each do |action|
|
|
action_permissions_map[:"#{action}?"] = to
|
|
end
|
|
end
|
|
|
|
def method_missing(missing_method, *)
|
|
case (permission = action_permissions_map[missing_method])
|
|
when String, Array
|
|
user.permissions!(permission) || true
|
|
when Proc
|
|
user.permissions!(instance_exec(&permission)) || true
|
|
else
|
|
super
|
|
end
|
|
end
|
|
|
|
def respond_to_missing?(missing_method)
|
|
action_permissions_map[missing_method] || super
|
|
end
|
|
|
|
end
|