debian-mirror-gitlab/app/policies/personal_snippet_policy.rb

29 lines
878 B
Ruby
Raw Normal View History

2016-09-29 09:46:39 +05:30
class PersonalSnippetPolicy < BasePolicy
2017-09-10 17:25:29 +05:30
condition(:public_snippet, scope: :subject) { @subject.public? }
condition(:is_author) { @user && @subject.author == @user }
condition(:internal_snippet, scope: :subject) { @subject.internal? }
2016-09-29 09:46:39 +05:30
2017-09-10 17:25:29 +05:30
rule { public_snippet }.policy do
enable :read_personal_snippet
enable :comment_personal_snippet
end
2017-08-17 22:00:37 +05:30
2017-09-10 17:25:29 +05:30
rule { is_author }.policy do
enable :read_personal_snippet
enable :update_personal_snippet
enable :destroy_personal_snippet
enable :admin_personal_snippet
enable :comment_personal_snippet
end
2017-08-17 22:00:37 +05:30
2017-09-10 17:25:29 +05:30
rule { ~anonymous }.enable :create_personal_snippet
rule { external_user }.prevent :create_personal_snippet
2016-09-29 09:46:39 +05:30
2017-09-10 17:25:29 +05:30
rule { internal_snippet & ~external_user }.policy do
enable :read_personal_snippet
enable :comment_personal_snippet
2016-09-29 09:46:39 +05:30
end
2017-09-10 17:25:29 +05:30
rule { anonymous }.prevent :comment_personal_snippet
2016-09-29 09:46:39 +05:30
end