Module: Ddr::Auth::RoleBasedAccessControlsEnforcement

Defined in:
lib/ddr/auth/role_based_access_controls_enforcement.rb

Class Method Summary collapse

Instance Method Summary collapse

Class Method Details

.included(controller) ⇒ Object 



5
6
7
8
 
# File 'lib/ddr/auth/role_based_access_controls_enforcement.rb', line 5

def self.included(controller)
  controller.delegate :authorized_to_act_as_superuser?, to: :current_ability
  controller.helper_method :authorized_to_act_as_superuser?
end

Instance Method Details

#current_ability ⇒ Object 



10
11
12
 
# File 'lib/ddr/auth/role_based_access_controls_enforcement.rb', line 10

def current_ability
  @current_ability ||= AbilityFactory.call(current_user, request.env)
end

#enforce_show_permissions ⇒ Object 



14
15
16
 
# File 'lib/ddr/auth/role_based_access_controls_enforcement.rb', line 14

def enforce_show_permissions
  authorize! Permissions::DISCOVER, params[:id]
end