Contents

module Ostiary
  module ControllerHelper

    def self.included(base)
      base.extend(ClassMethods)
    end

    module ClassMethods

      def inherited(subclass)
        subclass.ostiary.policies += self.ostiary.policies
        super
      end

      def ostiary
        @ostiary ||= Ostiary.new
      end

      def required_application_role(role, actions = {})
        warn "[DEPRECATION] `required_application_role` is deprecated.  Please use `ostiary_policy` instead."
        ostiary_policy(role, actions)
      end

      # We want to give the option of setting a policy for one action, based on ::Role
      # So we'll copy the way the filters in controllers work.
      # Only apply the role to certain action(s)
      #  only: [*actions]
      # Exclude action(s) from requiring a role
      #  except: [*actions]
      # By default a given role will be required for every action
      # Override role checking by passing a symbol as method;
      #   ostiary_policy method: :master?, only: :show
      # One line creates one policy, which are immediately created with the proper class
      def ostiary_policy(role = nil, only: nil, except: nil, method: nil)
        raise ArgumentError, "Use at least role or method" unless method || role
        raise ArgumentError, "Use either role or method"       if method && role
        raise ArgumentError, "Use either only or except"       if except && only
        raise ArgumentError, "Use a symbol for method:"        if method && !(method.is_a? Symbol)

        if actions.empty?
          ostiary.policies << Policy.new(role, method: method&.to_proc)
        elsif only
          ostiary.policies << PolicyLimited.new(role, only, method: method&.to_proc)
        elsif except
          ostiary.policies << PolicyExempted.new(role, except, method: method&.to_proc)
        end
      end

    end

  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
ostiary-0.11.0	lib/ostiary/controller_helper.rb
ostiary-0.10.0	lib/ostiary/controller_helper.rb