scinote-web/app/permissions/asset.rb
2020-10-29 14:59:14 +01:00

34 lines
1.1 KiB
Ruby

# frozen_string_literal: true
Canaid::Permissions.register_for(Asset) do
can :read_asset do |user, asset|
object = asset.step || asset.result || asset.repository_cell
case object
when Step
protocol = object.protocol
can_read_protocol_in_module?(user, protocol) || can_read_protocol_in_repository?(user, protocol)
when Result
can_read_experiment?(user, object.my_module.experiment)
when RepositoryCell
can_read_repository?(user, object.repository_column.repository)
end
end
can :manage_asset do |user, asset|
object = asset.step || asset.result || asset.repository_cell
case object
when Step
protocol = object.protocol
can_manage_protocol_in_module?(user, protocol) || can_manage_protocol_in_repository?(user, protocol)
when Result
can_manage_experiment?(user, object.my_module.experiment)
when RepositoryCell
return false if object.repository_column.repository.is_a?(RepositorySnapshot)
can_manage_repository?(user, object.repository_column.repository)
end
end
end