Class: CurrentScope::ScopedRoleAssignment

Inherits:
ApplicationRecord show all
Defined in:
app/models/current_scope/scoped_role_assignment.rb

Overview

A role held on ONE specific record: "Editor of Project #7" grants nothing on Project #8. Never touches the subject's org-wide role — the two are independent axes.

Rows survive host resource destruction by design (polymorphic, no dependent:). Since #65 those orphan grants open nothing (empty list = 403) but still rendered like live access until labeled (#90).

Class Method Summary collapse

Instance Method Summary collapse

Class Method Details

.preload_resolvable_resources!(assignments) ⇒ Object

Batch-load polymorphic resources for resolvable types only. A global includes(:resource) NameErrors when any resource_type is stale; this constantizes per type and skips unresolvable ones so they stay lazy and orphaned_resource? labels them inert (#90 / PR #104 review).



22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
 
# File 'app/models/current_scope/scoped_role_assignment.rb', line 22

def self.preload_resolvable_resources!(assignments)
  list = Array(assignments)
  return list if list.empty?

  list.group_by(&:resource_type).each do |type, rows|
    next if type.blank?

    klass =
      begin
        type.constantize
      rescue NameError
        next
      end
    next unless klass.respond_to?(:where)

    records = klass.where(id: rows.map(&:resource_id).uniq).index_by { |r| r.id }
    rows.each do |row|
      assoc = row.association(:resource)
      assoc.target = records[row.resource_id]
      assoc.loaded!
    end
  end

  list
end

Instance Method Details

#orphaned_resource? ⇒ Boolean

True when the pointed-at resource is gone (deleted row or unresolvable type). The grant is inert for authorization (#65) but still a console row. Memoized: views call this plus the label helper once each; a reset-every- call would re-query the resource twice per row (PR #104 cubic follow-up).

Returns:

  • (Boolean) 


52
53
54
55
56
57
58
59
60
61
62
63
 
# File 'app/models/current_scope/scoped_role_assignment.rb', line 52

def orphaned_resource?
  return @orphaned_resource if defined?(@orphaned_resource)

  @orphaned_resource =
    if resource_id.blank?
      false
    else
      resource.nil?
    end
rescue NameError, ActiveRecord::RecordNotFound
  @orphaned_resource = true
end