Contents

module YariiEditor
  module ControllerAuthorization
    extend ActiveSupport::Concern

    included do
      before_action :check_if_yarii_is_authorized
      
      rescue_from YariiEditor::NotAuthorizedError, with: :handle_yarii_authorization_failure
    end

    def check_if_yarii_is_authorized
      yarii_user = YariiEditor::CurrentUser.from_controller(self)
      unless yarii_user&.can_access_yarii?
        raise YariiEditor::NotAuthorizedError
      end
    end
    
    def handle_yarii_authorization_failure
      render plain: "503 Not Authorized", status: 503
    end
  end
end

Version data entries

9 entries across 9 versions & 1 rubygems

Version	Path
yarii-editor-0.4.8	app/controllers/concerns/yarii_editor/controller_authorization.rb
yarii-editor-0.4.7	app/controllers/concerns/yarii_editor/controller_authorization.rb
yarii-editor-0.4.6	app/controllers/concerns/yarii_editor/controller_authorization.rb
yarii-editor-0.4.5	app/controllers/concerns/yarii_editor/controller_authorization.rb
yarii-editor-0.4.4	app/controllers/concerns/yarii_editor/controller_authorization.rb
yarii-editor-0.4.3	app/controllers/concerns/yarii_editor/controller_authorization.rb
yarii-editor-0.4.2	app/controllers/concerns/yarii_editor/controller_authorization.rb
yarii-editor-0.4.1	app/controllers/concerns/yarii_editor/controller_authorization.rb
yarii-editor-0.4.0	app/controllers/concerns/yarii_editor/controller_authorization.rb