Contents

module Administrate
  module Punditize
    if Object.const_defined?(:Pundit)
      extend ActiveSupport::Concern

      if Pundit.const_defined?(:Authorization)
        include Pundit::Authorization
      else
        include Pundit
      end

      private

      def policy_namespace
        []
      end

      def scoped_resource
        namespaced_scope = policy_namespace + [super]
        policy_scope!(pundit_user, namespaced_scope)
      end

      def authorize_resource(resource)
        namespaced_resource = policy_namespace + [resource]
        authorize namespaced_resource
      end

      def authorized_action?(resource, action)
        namespaced_resource = policy_namespace + [resource]
        policy = Pundit.policy!(pundit_user, namespaced_resource)
        policy.send(:"#{action}?")
      end

      def policy_scope!(user, scope)
        policy_scope_class = Pundit::PolicyFinder.new(scope).scope!

        begin
          policy_scope = policy_scope_class.new(user, pundit_model(scope))
        rescue ArgumentError
          raise(Pundit::InvalidConstructorError,
            "Invalid #<#{policy_scope_class}> constructor is called")
        end

        if policy_scope.respond_to? :resolve_admin
          Administrate.deprecator.warn(
            "Pundit policy scope `resolve_admin` method is deprecated. " \
            "Please use a namespaced pundit policy instead."
          )
          policy_scope.resolve_admin
        else
          policy_scope.resolve
        end
      end

      def pundit_model(record)
        record.is_a?(Array) ? record.last : record
      end
    end
  end
end

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
administrate-1.0.0.beta3	app/controllers/concerns/administrate/punditize.rb
administrate-1.0.0.beta2	app/controllers/concerns/administrate/punditize.rb
administrate-1.0.0.beta1	app/controllers/concerns/administrate/punditize.rb