Contents

module Sufia
  module Ability
    extend ActiveSupport::Concern

    included do
      self.ability_logic += [:sufia_abilities]
    end

    def sufia_abilities
      generic_file_abilities
      user_abilities
      featured_work_abilities
      editor_abilities
      stats_abilities
      proxy_deposit_abilities
    end

    def proxy_deposit_abilities
      can :transfer, String do |id|
        depositor_for_document(id) == current_user.user_key
      end
      can :create, ProxyDepositRequest if registered_user?
      can :accept, ProxyDepositRequest, receiving_user_id: current_user.id, status: 'pending'
      can :reject, ProxyDepositRequest, receiving_user_id: current_user.id, status: 'pending'
      # a user who sent a proxy deposit request can cancel it if it's pending.
      can :destroy, ProxyDepositRequest, sending_user_id: current_user.id, status: 'pending'
    end

    def user_abilities
      can [:edit, :update, :toggle_trophy], ::User, id: current_user.id
    end

    def featured_work_abilities
      can [:create, :destroy, :update], FeaturedWork if admin_user?
    end

    def generic_file_abilities
      can :view_share_work, [GenericFile]
      can :create, [GenericFile, Collection] if registered_user?
    end

    def editor_abilities
      if admin_user?
        can :create, TinymceAsset
        can [:create, :update], ContentBlock
      end
      can :read, ContentBlock
    end

    def stats_abilities
      alias_action :stats, to: :read
    end

    private

      def depositor_for_document(document_id)
        ::GenericFile.load_instance_from_solr(document_id).depositor
      end

      def registered_user?
        user_groups.include? 'registered'
      end

      def admin_user?
        user_groups.include? 'admin'
      end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
sufia-models-6.2.0	app/models/concerns/sufia/ability.rb
sufia-models-6.1.0	app/models/concerns/sufia/ability.rb