Contents

module Saucy
  module AccountAuthorization
    extend ActiveSupport::Concern

    included do
      helper_method :current_account, :current_project, :current_account?, :current_project?
      include InstanceMethods
    end

    module InstanceMethods
      protected

      def current_account
        ::Account.find_by_keyword!(params[:account_id])
      end

      def current_project
        ::Project.find_by_keyword!(params[:project_id])
      end

      def current_project?
        params[:project_id].present?
      end

      def current_account?
        params[:account_id].present?
      end

      def authorize_admin
        unless current_user.admin_of?(current_account)
          deny_access("You must be an admin to access that page.")
        end
      end

      def authorize_member
        unless current_user.member_of?(current_project)
          deny_access("You do not have permission for this project.")
        end
      end

      def ensure_active_account
        if current_account?
          if current_account.past_due?
            redirect_unusable_account account_billing_path(current_account),
                                      "past_due"
          end
          if current_account.expired?
            redirect_unusable_account edit_account_plan_path(current_account),
                                      "expired"
          end
        end
      end

      def redirect_unusable_account(path, failure)
        role = current_user.admin_of?(current_account) ? 'admin' : 'user'
        flash[:alert] = t("saucy.errors.#{failure}.#{role}")
        redirect_to path
      end
    end
  end
end

Version data entries

25 entries across 25 versions & 1 rubygems

Version	Path
saucy-0.2.27	lib/saucy/account_authorization.rb
saucy-0.2.26	lib/saucy/account_authorization.rb
saucy-0.2.25	lib/saucy/account_authorization.rb
saucy-0.2.24	lib/saucy/account_authorization.rb
saucy-0.2.21	lib/saucy/account_authorization.rb