2019-07-07 11:18:12 +05:30
|
|
|
# frozen_string_literal: true
|
|
|
|
|
|
|
|
|
|
class IdentityProviderPolicy < BasePolicy
|
|
|
|
|
desc "Provider is SAML or CAS3"
|
|
|
|
|
condition(:protected_provider, scope: :subject, score: 0) { %w(saml cas3).include?(@subject.to_s) }
|
|
|
|
|
|
|
|
|
|
rule { anonymous }.prevent_all
|
|
|
|
|
|
|
|
|
|
rule { default }.policy do
|
|
|
|
|
enable :unlink
|
|
|
|
|
enable :link
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
rule { protected_provider }.prevent(:unlink)
|
|
|
|
|
end
|
2019-12-04 20:38:33 +05:30
|
|
|
|
2021-06-08 01:23:25 +05:30
|
|
|
IdentityProviderPolicy.prepend_mod_with('IdentityProviderPolicy')
|
