Class: Decidim::Admin::Abilities::AdminAbility

Inherits:
Decidim::Abilities::AdminAbility
  • Object
show all
Defined in:
app/models/decidim/admin/abilities/admin_ability.rb

Overview

Defines the abilities for a user in the admin section. Intended to be used with ‘cancancan`.

Instance Method Summary collapse

Instance Method Details

#define_abilities ⇒ Object 



9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
 
# File 'app/models/decidim/admin/abilities/admin_ability.rb', line 9

def define_abilities
  super

  can :read, :admin_log

  can :manage, Category
  can :manage, ParticipatoryProcessUserRole

  can [:create, :update, :index, :new, :read], StaticPage

  can([:update_slug, :destroy], [StaticPage, StaticPageForm]) do |page|
    !StaticPage.default?(page.slug)
  end

  can([:read, :update], Decidim::Organization) do |organization|
    organization == user.organization
  end

  can :manage, Component
  can :manage, :admin_users

  can :read, :impersonatable_users

  can(:impersonate, Decidim::User) do |user_to_impersonate|
    available_authorization_handlers? &&
      !user_to_impersonate.admin? &&
      user_to_impersonate.roles.empty? &&
      Decidim::ImpersonationLog.active.where(admin: user).empty?
  end

  can(:promote, Decidim::User) do |user_to_promote|
    user_to_promote.managed? && Decidim::ImpersonationLog.active.where(admin: user).empty?
  end

  can :manage, Moderation
  can :manage, Attachment
  can :manage, AttachmentCollection
  can :manage, Scope
  can :manage, ScopeType
  can :manage, Area
  can :manage, AreaType
  can :manage, Newsletter
  can :manage, :oauth_applications
  can :manage, OAuthApplication

  can [:create, :index, :new, :read, :invite], User

  can([:destroy], [User]) do |user_to_destroy|
    user != user_to_destroy
  end

  can [:index, :verify, :reject], UserGroup
  can [:index, :new, :create, :destroy], :officializations

  can :index, :authorization_workflows

  can [:index, :update], Authorization
end