Contents

# frozen_string_literal: true

require 'ditty/db'
require 'proxes/models/permission'
require 'proxes/policies/request_policy'

module ProxES
  class Request
    class IndexPolicy < RequestPolicy
      class Scope < RequestPolicy::Scope
        def resolve
          return [] if user.nil?

          patterns = Permission.for_user(user, 'INDEX').map do |permission|
            permission.pattern.gsub(/\{user.(.*)\}/) { |_match| user.send(Regexp.last_match[1].to_sym) }
          end
          result = filter(scope.index, patterns)
          return [] unless result.count > 0
          %w[POST PUT].include?(scope.request_method) ? scope.index : result
        end
      end
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
proxes-0.8.1	lib/proxes/policies/request/index_policy.rb
proxes-0.8.0	lib/proxes/policies/request/index_policy.rb