Module: Rbac::Authorizer

Extended by:
ActiveSupport::Concern
Included in:
ActionController::API
Defined in:
lib/rbac/authorizer.rb

Overview

Authorizer module is responsible for checking if user has access to perform some action.

Instance Method Summary collapse

Instance Method Details

#authorize_user(attrs) ⇒ Object 



12
13
14
 
# File 'lib/rbac/authorizer.rb', line 12

def authorize_user(attrs)
  Rbac::User.current = Rbac::User.new(**attrs)
end

#user_role_authorized? ⇒ Boolean

Returns:

  • (Boolean) 


16
17
18
19
20
 
# File 'lib/rbac/authorizer.rb', line 16

def user_role_authorized?
  controller = params[:controller]
  action = params[:action]
  routes_config.dig("features", controller, action)&.include?(Rbac::User.current.role)
end