scinote-eln/scinote-web
1
1
Fork 0
mirror of https://github.com/scinote-eln/scinote-web.git synced 2024-11-14 21:24:54 +08:00
Code Issues Projects Releases Packages Wiki Activity

Add restore asset permission [SCI-11169]

Browse source
This commit is contained in:
Andrej 2024-10-14 13:56:55 +02:00
parent cfefef8d01
commit 50d2bf53dc
3 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
app/controllers/assets_controller.rb
View file

@ -18,7 +18,8 @@ class AssetsController < ApplicationController
before_action :load_vars, except: :create_wopi_file before_action :load_vars, except: :create_wopi_file
before_action :check_read_permission, except: %i(edit destroy duplicate create_wopi_file toggle_view_mode) before_action :check_read_permission, except: %i(edit destroy duplicate create_wopi_file toggle_view_mode)
before_action :check_manage_permission, only: %i(edit destroy duplicate rename toggle_view_mode restore_version) before_action :check_manage_permission, only: %i(edit destroy duplicate rename toggle_view_mode)
before_action :check_restore_permission, only: :restore_version
def file_preview def file_preview
editable = can_manage_asset?(@asset) && (@asset.repository_asset_value.blank? || editable = can_manage_asset?(@asset) && (@asset.repository_asset_value.blank? ||
@ -475,6 +476,10 @@ class AssetsController < ApplicationController
render_403 and return unless can_manage_asset?(@asset) render_403 and return unless can_manage_asset?(@asset)
end end
def check_restore_permission
render_403 and return unless can_restore_asset?(@asset)
end
def append_wd_params(url) def append_wd_params(url)
exclude_params = %w(wdPreviousSession wdPreviousCorrelation) exclude_params = %w(wdPreviousSession wdPreviousCorrelation)
wd_params = params.as_json.select { |key, _value| key[/^wd.*/] && !(exclude_params.include? key) }.to_query wd_params = params.as_json.select { |key, _value| key[/^wd.*/] && !(exclude_params.include? key) }.to_query

4
app/permissions/asset.rb
View file

@ -32,6 +32,10 @@ Canaid::Permissions.register_for(Asset) do
end end
end end
can :restore_asset do |user, asset|
VersionedAttachments.enabled? && can_manage_asset?(user, asset)
end
can :open_asset_locally do |_user, asset| can :open_asset_locally do |_user, asset|
ENV['ASSET_SYNC_URL'].present? ENV['ASSET_SYNC_URL'].present?
end end

2
app/serializers/asset_serializer.rb
View file

@ -156,7 +156,7 @@ class AssetSerializer < ActiveModel::Serializer
) )
end end
urls[:restore_version] = asset_restore_version_path(object) if VersionedAttachments.enabled? urls[:restore_version] = asset_restore_version_path(object) if can_restore_asset?(user, object)
urls[:open_vector_editor_edit] = edit_gene_sequence_asset_path(object.id) if can_manage_asset?(user, object) urls[:open_vector_editor_edit] = edit_gene_sequence_asset_path(object.id) if can_manage_asset?(user, object)
if can_manage_asset?(user, object) && can_open_asset_locally?(user, object) if can_manage_asset?(user, object) && can_open_asset_locally?(user, object)