Sha256: 3a244648639a1ddbdea75f93af4f85e2b09a431c6640929854880c8ee9b45374
Contents?: true
Size: 1.85 KB
Versions: 114
Compression:
Stored size: 1.85 KB
Contents
# frozen_string_literal: true
module Motor
module LoadAndAuthorizeDynamicResource
extend ActiveSupport::Concern
INSTANCE_VARIABLE_NAME = 'resource'
ASSOCIATION_INSTANCE_VARIABLE_NAME = 'associated_resource'
included do
before_action :load_and_authorize_resource
before_action :load_and_authorize_association
end
def resource_class
@resource_class ||=
Motor::Resources::FetchConfiguredModel.call(
Motor::BuildSchema::Utils.classify_slug(resource_name_prefix + params[:resource]),
cache_key: Motor::Resource.maximum(:updated_at)
)
end
def resource_name_prefix
''
end
def load_and_authorize_resource
options = {
class: resource_class,
parent: params[:association].present?,
instance_name: INSTANCE_VARIABLE_NAME
}
if params[:resource_id].present?
options = options.merge(
parent: true,
id_param: :resource_id
)
end
CanCan::ControllerResource.new(
self,
options
).load_and_authorize_resource
rescue ActiveRecord::RecordNotFound
head :not_found
end
def load_and_authorize_association
return if params[:association].blank?
association = resource_class.reflections[params[:association]]
if association
CanCan::ControllerResource.new(
self,
class: association.klass,
parent: false,
through: :resource,
through_association: params[:association].to_sym,
instance_name: params[:action] == 'create' ? ASSOCIATION_INSTANCE_VARIABLE_NAME : INSTANCE_VARIABLE_NAME
).load_and_authorize_resource
else
render json: { message: 'Unknown association' }, status: :not_found
end
rescue ActiveRecord::RecordNotFound
head :not_found
end
end
end
Version data entries
114 entries across 114 versions & 2 rubygems