Sha256: 09dbcbb799b8ff5aa0cc7d478039def6b50cf364c2ac801df4ba8289cad92a3a

Contents?: true

Size: 1.9 KB

Versions: 48

Compression:

Stored size: 1.9 KB

Contents

# frozen_string_literal: true

module Motor
  module LoadAndAuthorizeDynamicResource
    extend ActiveSupport::Concern

    MUTEX = Mutex.new

    INSTANCE_VARIABLE_NAME = 'resource'
    ASSOCIATION_INSTANCE_VARIABLE_NAME = 'associated_resource'

    included do
      before_action :load_and_authorize_resource
      before_action :load_and_authorize_association
    end

    def resource_class
      @resource_class ||= MUTEX.synchronize do
        Motor::Resources::FetchConfiguredModel.call(
          Motor::BuildSchema::Utils.classify_slug(resource_name_prefix + params[:resource]),
          cache_key: Motor::Resource.maximum(:updated_at)
        )
      end
    end

    def resource_name_prefix
      ''
    end

    def load_and_authorize_resource
      options = {
        class: resource_class,
        parent: params[:association].present?,
        instance_name: INSTANCE_VARIABLE_NAME
      }

      if params[:resource_id].present?
        options = options.merge(
          parent: true,
          id_param: :resource_id
        )
      end

      CanCan::ControllerResource.new(
        self,
        options
      ).load_and_authorize_resource
    rescue ActiveRecord::RecordNotFound
      head :not_found
    end

    def load_and_authorize_association
      return if params[:association].blank?

      association = resource_class.reflections[params[:association]]

      if association
        CanCan::ControllerResource.new(
          self,
          class: association.klass,
          parent: false,
          through: :resource,
          through_association: params[:association].to_sym,
          instance_name: params[:action] == 'create' ? ASSOCIATION_INSTANCE_VARIABLE_NAME : INSTANCE_VARIABLE_NAME
        ).load_and_authorize_resource
      else
        render json: { message: 'Unknown association' }, status: :not_found
      end
    rescue ActiveRecord::RecordNotFound
      head :not_found
    end
  end
end

Version data entries

48 entries across 48 versions & 6 rubygems

Version Path
motor-admin-0.4.12 app/controllers/concerns/motor/load_and_authorize_dynamic_resource.rb
motor-admin-0.4.11 app/controllers/concerns/motor/load_and_authorize_dynamic_resource.rb
motor-admin-pz-0.4.10 app/controllers/concerns/motor/load_and_authorize_dynamic_resource.rb
motor-admin-0.4.10 app/controllers/concerns/motor/load_and_authorize_dynamic_resource.rb
motor-admin-pz-0.4.9 app/controllers/concerns/motor/load_and_authorize_dynamic_resource.rb
motor-admin-0.4.9 app/controllers/concerns/motor/load_and_authorize_dynamic_resource.rb
motor-admin-0.4.8 app/controllers/concerns/motor/load_and_authorize_dynamic_resource.rb
motor-admin-0.4.7 app/controllers/concerns/motor/load_and_authorize_dynamic_resource.rb