Class: CamaleonCms::Ability

Inherits:
Object
  • Object
show all
Includes:
CanCan::Ability
Defined in:
app/models/camaleon_cms/ability.rb

Instance Method Summary collapse

Constructor Details

#initialize(user, current_site = nil) ⇒ Ability

Returns a new instance of Ability.



5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
 
# File 'app/models/camaleon_cms/ability.rb', line 5

def initialize(user, current_site = nil)
  # Define abilities for the passed in user here. For example:
  #
  user ||= CamaleonCms::User.new # guest user (not logged in)
  if user.admin?
    can :manage, :all
  elsif user.client?
    can :read, :all
  else
    # conditions:
    current_user_role = user.get_role(current_site) || current_site.user_roles.new
    @roles_manager ||= current_user_role.get_meta("_manager_#{current_site.id}", {}) || {}
    @roles_post_type ||= current_user_role.get_meta("_post_type_#{current_site.id}", {}) || {}

    ids_publish = @roles_post_type[:publish] || []
    ids_edit = @roles_post_type[:edit] || []
    ids_edit_other = @roles_post_type[:edit_other] || []
    ids_edit_publish = @roles_post_type[:edit_publish] || []
    ids_delete = @roles_post_type[:delete] || []
    ids_delete_other = @roles_post_type[:delete_other] || []
    ids_delete_publish = @roles_post_type[:delete_publish] || []

    can :posts, CamaleonCms::PostType do |pt|
      (ids_edit + ids_edit_other + ids_edit_publish).to_i.include?(pt.id)
    rescue StandardError
      false
    end

    can :create_post, CamaleonCms::PostType do |pt|
      ids_edit.to_i.include?(pt.id)
    rescue StandardError
      false
    end
    can :publish_post, CamaleonCms::PostType do |pt|
      ids_publish.to_i.include?(pt.id)
    rescue StandardError
      false
    end
    can :edit_other, CamaleonCms::PostType do |pt|
      ids_edit_other.to_i.include?(pt.id)
    rescue StandardError
      false
    end
    can :edit_publish, CamaleonCms::PostType do |pt|
      ids_edit_publish.to_i.include?(pt.id)
    rescue StandardError
      false
    end

    can :categories, CamaleonCms::PostType do |pt|
      @roles_post_type[:manage_categories].to_i.include?(pt.id)
    rescue StandardError
      false
    end
    can :post_tags, CamaleonCms::PostType do |pt|
      @roles_post_type[:manage_tags].to_i.include?(pt.id)
    rescue StandardError
      false
    end

    can :update, CamaleonCms::Post do |post|
      pt_id = post.post_type.id
      r = false
      r ||= begin
        ids_edit.to_i.include?(pt_id) && post.user_id == user.id
      rescue StandardError
        false
      end
      r ||= begin
        ids_edit_publish.to_i.include?(pt_id) && post.published?
      rescue StandardError
        false
      end
      r ||= begin
        ids_edit_other.to_i.include?(pt_id) && post.user_id != user.id
      rescue StandardError
        false
      end
      r
    end

    can :destroy, CamaleonCms::Post do |post|
      pt_id = post.post_type.id
      r = false
      r ||= begin
        ids_delete.to_i.include?(pt_id) && post.user_id == user.id
      rescue StandardError
        false
      end
      r ||= begin
        ids_delete_publish.to_i.include?(pt_id) && post.published?
      rescue StandardError
        false
      end
      r ||= begin
        ids_delete_other.to_i.include?(pt_id) && post.user_id != user.id
      rescue StandardError
        false
      end
      r
    end

    # support for custom abilities for each posttype
    # sample: https://camaleon.website/documentation/category/40756-uncategorized/custom-models.html
    @roles_post_type.each do |k, v|
      next if %w[edit edit_other edit_publish publish manage_categories].include?(k.to_s)

      can k.to_sym, CamaleonCms::PostType do |pt|
        v.include?(pt.id.to_s)
      rescue StandardError
        false
      end
    end

    # others
    begin
      can :manage, :media if @roles_manager[:media]
    rescue StandardError
      false
    end
    begin
      can :manage, :comments if @roles_manager[:comments]
    rescue StandardError
      false
    end
    # can :manage, :forms     if @roles_manager[:forms] rescue false
    begin
      can :manage, :themes if @roles_manager[:themes]
    rescue StandardError
      false
    end
    begin
      can :manage, :widgets if @roles_manager[:widgets]
    rescue StandardError
      false
    end
    begin
      can :manage, :nav_menu if @roles_manager[:nav_menu]
    rescue StandardError
      false
    end
    begin
      can :manage, :plugins if @roles_manager[:plugins]
    rescue StandardError
      false
    end
    begin
      can :manage, :users if @roles_manager[:users]
    rescue StandardError
      false
    end
    begin
      can :manage, :settings if @roles_manager[:settings]
    rescue StandardError
      false
    end
    @roles_manager.try(:each) do |rol_manage_key, val_role|
      can :manage, rol_manage_key.to_sym if val_role.to_s.cama_true?
    rescue StandardError
      false
    end
  end
  cannot :impersonate, CamaleonCms::User do |u|
    u.id == user.id
  end
end

Instance Method Details

#can?(action, subject, *extra_args) ⇒ Boolean

overwrite can method to support decorator class names

Returns:

  • (Boolean) 


173
174
175
176
177
178
179
 
# File 'app/models/camaleon_cms/ability.rb', line 173

def can?(action, subject, *extra_args)
  if subject.is_a?(Draper::Decorator)
    super(action, subject.model, *extra_args)
  else
    super(action, subject, *extra_args)
  end
end

#cannot?(*args) ⇒ Boolean

overwrite cannot method to support decorator class names

Returns:

  • (Boolean) 


182
183
184
 
# File 'app/models/camaleon_cms/ability.rb', line 182

def cannot?(*args)
  !can?(*args)
end