cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge ApiCapability class into ApiAbility

Browse source
This commit is contained in:
Anton Khorev 2024-12-20 17:46:45 +03:00
parent e2904daf77
commit cdce867183
5 changed files with 65 additions and 84 deletions
Download patch file Download diff file Expand all files Collapse all files

45
app/abilities/api_ability.rb
View file

@ -3,12 +3,16 @@
class ApiAbility
include CanCan::Ability
def initialize(user)
def initialize(token)
can :read, [:version, :capability, :permission, :map]
if Settings.status != "database_offline"
user = User.find(token.resource_owner_id) if token
can [:read, :feed, :search], Note
can :create, Note unless token
can [:read, :download], Changeset
can [:read, :create, :feed, :search], Note
can :read, Tracepoint
can :read, User
can :read, Node
@ -18,22 +22,33 @@ class ApiAbility
can :read, UserBlock
if user&.active?
can [:comment, :close, :reopen], Note
can [:read, :create, :update, :destroy], Trace
can [:details, :gpx_files], User
can [:read, :update, :update_all, :destroy], UserPreference
can [:create, :comment, :close, :reopen], Note if scope?(token, :write_notes)
can [:create, :destroy], NoteSubscription if scope?(token, :write_notes)
can :read, Trace if scope?(token, :read_gpx)
can [:create, :update, :destroy], Trace if scope?(token, :write_gpx)
can :details, User if scope?(token, :read_prefs)
can :gpx_files, User if scope?(token, :read_gpx)
can :read, UserPreference if scope?(token, :read_prefs)
can [:update, :update_all, :destroy], UserPreference if scope?(token, :write_prefs)
can [:inbox, :outbox, :read, :update, :destroy], Message if scope?(token, :consume_messages)
can :create, Message if scope?(token, :send_messages)
if user.terms_agreed?
can [:create, :update, :upload, :close, :subscribe, :unsubscribe], Changeset
can :create, ChangesetComment
can [:create, :update, :delete], [Node, Way, Relation]
can [:create, :update, :upload, :close, :subscribe, :unsubscribe], Changeset if scope?(token, :write_api)
can :create, ChangesetComment if scope?(token, :write_api)
can [:create, :update, :delete], [Node, Way, Relation] if scope?(token, :write_api)
end
if user.moderator?
can [:destroy, :restore], ChangesetComment
can :destroy, Note
can [:destroy, :restore], ChangesetComment if scope?(token, :write_api)
can :redact, [OldNode, OldWay, OldRelation] if user.terms_agreed?
can :destroy, Note if scope?(token, :write_notes)
can :redact, [OldNode, OldWay, OldRelation] if user&.terms_agreed? && scope?(token, :write_redactions)
end
end
end
@ -65,4 +80,10 @@ class ApiAbility
# See the wiki for details:
# https://github.com/CanCanCommunity/cancancan/wiki/Defining-Abilities
end
private
def scope?(token, scope)
token&.includes_scope?(scope)
end
end

42
app/abilities/api_capability.rb
View file

@ -1,42 +0,0 @@
# frozen_string_literal: true
class ApiCapability
include CanCan::Ability
def initialize(token)
if Settings.status != "database_offline"
user = User.find(token.resource_owner_id)
if user&.active?
can [:create, :comment, :close, :reopen], Note if scope?(token, :write_notes)
can [:create, :destroy], NoteSubscription if scope?(token, :write_notes)
can [:read, :data], Trace if scope?(token, :read_gpx)
can [:create, :update, :destroy], Trace if scope?(token, :write_gpx)
can [:details], User if scope?(token, :read_prefs)
can [:gpx_files], User if scope?(token, :read_gpx)
can :read, UserPreference if scope?(token, :read_prefs)
can [:update, :update_all, :destroy], UserPreference if scope?(token, :write_prefs)
can [:inbox, :outbox, :read, :update, :destroy], Message if scope?(token, :consume_messages)
can [:create], Message if scope?(token, :send_messages)
if user.terms_agreed?
can [:create, :update, :upload, :close, :subscribe, :unsubscribe], Changeset if scope?(token, :write_api)
can :create, ChangesetComment if scope?(token, :write_api)
can [:create, :update, :delete], [Node, Way, Relation] if scope?(token, :write_api)
end
if user.moderator?
can [:destroy, :restore], ChangesetComment if scope?(token, :write_api)
can :destroy, Note if scope?(token, :write_notes)
can :redact, [OldNode, OldWay, OldRelation] if user&.terms_agreed? && scope?(token, :write_redactions)
end
end
end
end
private
def scope?(token, scope)
token&.includes_scope?(scope)
end
end