Contents

event :validate_permission_to_assign_roles, :validate, on: :save do
  return unless (fr = forbidden_roles).present?

  errors.add :permission_denied,
             "You don't have permission to assign the role#{'s' if fr.size > 1} "\
             "#{fr.map(&:name).to_sentence}"   # LOCALIZE
end

def forbidden_roles
  # restore old roles for permission check
  with_old_role_permissions do |new_roles|
    new_roles.reject do |card|
      Card.fetch(card, "*members").ok? :update
    end
  end
end

def with_old_role_permissions
  new_roles = item_cards
  new_content = content
  left.clear_roles
  Auth.update_always_cache nil
  self.content = db_content_before_act
  yield new_roles
ensure
  self.content = new_content
end

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
card-mod-account-0.14.2	set/right/roles.rb
card-mod-account-0.14.1	set/right/roles.rb
card-mod-account-0.14.0	set/right/roles.rb