Class: Textus::Manifest::Policy::Predicates::LaneDeletableBy

Inherits:
Object
  • Object
show all
Defined in:
lib/textus/manifest/policy/predicates/lane_deletable_by.rb

Class Method Summary collapse

Class Method Details

.call(manifest:, actor:, action:, key:, schemas: nil, envelope: nil, extra: {}) ⇒ Object 



6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
 
# File 'lib/textus/manifest/policy/predicates/lane_deletable_by.rb', line 6

def self.call(manifest:, actor:, action:, key:, schemas: nil, envelope: nil, extra: {})
  return { pass: true } if key.nil?

  mentry = manifest.resolver.resolve(key).entry
  is_raw = manifest.policy.declared_kind(mentry.lane.to_s) == :raw
  lane_verb = manifest.policy.verb_for_lane(mentry.lane.to_s)
  caps = Set.new(manifest.data.role_caps.fetch(actor.to_s, []))

  pass = if is_raw
           caps.include?("author")
         else
           caps.include?(lane_verb.to_s) || caps.include?("author")
         end
  return { pass: true } if pass

  extra_holders = is_raw ? ["author"] : [lane_verb.to_s, "author"]
  holders = extra_holders.flat_map { |v| manifest.policy.roles_with_capability(v) }.uniq
  { pass: false, error: Textus::WriteForbidden.new(mentry.key, mentry.lane, verb: lane_verb, holders:) }
rescue Textus::UnknownKey
  { pass: true }
end