Module: Card::Set::All::Permissions::Accounts

Included in:
Right::Account, Right::Email, Right::Password, Right::Salt, Right::Status, Right::Token
Defined in:
tmpsets/set/mod001-01_core/all/permissions.rb

Instance Method Summary collapse

Instance Method Details

#permit(action, verb = nil) ⇒ Object

This is a short-term hack that is used in account-related cards to allow a permissions pattern where permissions are restricted to the owner of the account (and, by default, Admin) That pattern should be permitted by our card representation (without creating separate rules for each account holder) but is not yet.



249
250
251
252
253
254
255
256
257
 
# File 'tmpsets/set/mod001-01_core/all/permissions.rb', line 249

def permit action, verb=nil
  case
  when action==:comment  ; @action_ok = false
  when action==:create   ; @superleft ? true : super( action, verb )
    #restricts account creation to subcard handling on permitted card (unless explicitly permitted)
  when is_own_account?   ; true
  else                   ; super action, verb
  end
end