Sha256: 50b7b4aab97f5ade4d5fc07347a9228904e1a70a3e4b414933540921ef99e632
Contents?: true
Size: 1.01 KB
Versions: 3
Compression:
Stored size: 1.01 KB
Contents
# frozen_string_literal: true
module Decidim
module Admin
module Abilities
# Defines the abilities for a user with role 'user_manager' in the admin section.
# Intended to be used with `cancancan`.
class UserManagerAbility < Decidim::Abilities::UserManagerAbility
def define_abilities
super
can :read, :impersonatable_users
can :impersonate, Decidim::User do |user_to_impersonate|
available_authorization_handlers? &&
!user_to_impersonate.admin? &&
user_to_impersonate.roles.empty? &&
Decidim::ImpersonationLog.active.where(admin: user).empty?
end
can :promote, Decidim::User do |user_to_promote|
user_to_promote.managed? && Decidim::ImpersonationLog.active.where(admin: user).empty?
end
end
private
def available_authorization_handlers?
user.organization.available_authorization_handlers.any?
end
end
end
end
end
Version data entries
3 entries across 3 versions & 1 rubygems