Sha256: 27a1a38250651ea259a51243eda28535a34d26af56349d8c63bec327f422c7d6
Contents?: true
Size: 1.5 KB
Versions: 13
Compression:
Stored size: 1.5 KB
Contents
# -*- coding: utf-8 -*-
module ForemanTasks
class Dynflow::ConsoleAuthorizer
def initialize(env)
@rack_request = Rack::Request.new(env)
@user_id, @expires_at = @rack_request.session.values_at('user', 'expires_at')
@user = User.find_by_id(@user_id) unless session_expired?
end
def allow?
@user && (unlimited_edit? || authorized_for_task?)
end
private
def session_expired?
Time.now.to_i > @expires_at.to_i
end
def unlimited_edit?
return true if @user.admin?
# users with unlimited edit_foreman_tasks can operate with the
# console no matter what task it is…
edit_permission = Permission.where(:name => :edit_foreman_tasks, :resource_type => ForemanTasks::Task.name).first
if @user.filters.joins(:filterings).unlimited.where('filterings.permission_id' => edit_permission).first
return true
end
end
def authorized_for_task?
if task = extract_task
begin
original_user = User.current
User.current = @user
return Authorizer.new(@user).can?(:edit_foreman_tasks, task)
ensure
User.current = original_user
end
else
return false
end
end
def extract_task
dynflow_id = @rack_request.path_info[/^\/([\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12})/,1]
unless dynflow_id.empty?
ForemanTasks::Task::DynflowTask.where(:external_id => dynflow_id).first
end
end
end
end
Version data entries
13 entries across 13 versions & 1 rubygems