metamaps--metamaps/app/policies/map_policy.rb

94 lines
1.6 KiB
Ruby
Raw Normal View History

2016-09-24 03:00:46 +00:00
# frozen_string_literal: true
2016-02-28 05:28:28 +00:00
class MapPolicy < ApplicationPolicy
class Scope < Scope
def resolve
visible = %w(public commons)
2016-09-24 04:27:34 +00:00
return scope.where(permission: visible) unless user
scope.where(permission: visible)
.or(scope.where(id: user.shared_maps.map(&:id)))
.or(scope.where(user_id: user.id))
2016-02-28 05:28:28 +00:00
end
end
def index?
true
2016-02-28 05:28:28 +00:00
end
def show?
2016-12-13 03:28:10 +00:00
record.permission.in?(%w(commons public)) ||
2016-09-24 04:27:34 +00:00
record.collaborators.include?(user) ||
record.user == user
2016-02-28 05:28:28 +00:00
end
def conversation?
show? && %w(connorturland@gmail.com devin@callysto.com chessscholar@gmail.com solaureum@gmail.com ishanshapiro@gmail.com).include?(user.email)
end
2016-02-28 05:28:28 +00:00
def create?
2016-02-28 09:24:00 +00:00
user.present?
2016-02-28 05:28:28 +00:00
end
def update?
2016-09-24 04:27:34 +00:00
return false unless user.present?
record.permission == 'commons' ||
record.collaborators.include?(user) ||
record.user == user
2016-02-28 05:28:28 +00:00
end
def destroy?
record.user == user || admin_override
2016-02-28 05:28:28 +00:00
end
def access?
# this is for the map creator to bulk change who can access the map
user.present? && record.user == user
end
def request_access?
# this is to access the page where you can request access to a map
user.present?
end
def access_request?
# this is to actually request access
user.present?
end
def approve_access?
record.user == user
end
def deny_access?
approve_access?
end
def approve_access_post?
approve_access?
end
def deny_access_post?
approve_access?
end
2016-02-28 05:28:28 +00:00
def contains?
show?
end
def events?
show?
2016-02-28 05:28:28 +00:00
end
def export?
show?
end
def star?
unstar?
end
def unstar?
user.present?
end
2016-02-28 05:28:28 +00:00
end