lib/proxes/policies/request/search_policy.rb in proxes-0.6.1 vs lib/proxes/policies/request/search_policy.rb in proxes-0.7.0
- old
+ new
@@ -1,11 +1,15 @@
# frozen_string_literal: true
+require 'proxes/policies/request_policy'
+
module ProxES
class Request
class SearchPolicy < RequestPolicy
class Scope < RequestPolicy::Scope
def resolve
+ return false if user.nil?
+
patterns = Permission.for_user(user, 'INDEX').map do |permission|
permission.pattern.gsub(/\{user.(.*)\}/) { |_match| user.send(Regexp.last_match[1].to_sym) }
end
filter scope.index, patterns
end