Contents

require 'uri'

module DataCatalog
    
  module Resource
    
    def self.included(includee)
      includee.instance_eval do
        include SinatraResource::Resource
      end
      includee.helpers do
        def before_authorization(action, role, resource_config)
          unless role
            error 401, convert(body_for(:errors, ["invalid_api_key"]))
          end
          if role == :anonymous && minimum_role(action, resource_config) != :anonymous
            error 401, convert(body_for(:errors, ["missing_api_key"]))
          end
        end

        def convert(object)
          object == "" ? "" : object.to_json
        end
        
        def full_uri(path)
          base_uri = Config.environment_config["base_uri"]
          URI.join(base_uri, path).to_s
        end

        def lookup_role(document=nil)
          api_key = lookup_api_key
          return :anonymous unless api_key
          user = user_for(api_key)
          return nil unless user
          return :owner if document && owner?(user, document)
          user.role.intern
        end

        protected

        def lookup_api_key
          @api_key ||= params.delete("api_key")
        end

        # Is +user+ the owner of +document+?
        #
        # First, checks to see if +user+ and +document+ are the same. After
        # that, try to follow the +document.user+ relationship, if present, to
        # see if that points to +user+.
        #
        # @param [DataCatalog::User] user
        #
        # @param [MongoMapper::Document] user
        #
        # @return [Boolean]
        def owner?(user, document)
          return true if user == document
          return false unless document.respond_to?(:user)
          document.user == user
        end

        def user_for(api_key)
          user = User.first(:conditions => { :_api_key => api_key })
          return nil unless user
          raise Error, "API key found, but user has no role" unless user.role
          user
        end
      end
    end

  end
  
end

Version data entries

26 entries across 26 versions & 1 rubygems

Version	Path
sinatra_resource-0.3.5	examples/datacatalog/lib/resource.rb
sinatra_resource-0.3.4	examples/datacatalog/lib/resource.rb
sinatra_resource-0.3.3	examples/datacatalog/lib/resource.rb
sinatra_resource-0.3.2	examples/datacatalog/lib/resource.rb
sinatra_resource-0.3.1	examples/datacatalog/lib/resource.rb
sinatra_resource-0.3.0	examples/datacatalog/lib/resource.rb