35a2d66e19
This has been set to true for 6 years in production. Refs #2097 As per other user settings, we set the terms as seen by default for tests, and we can override that when necessary for specific tests.
39 lines
1.7 KiB
Ruby
39 lines
1.7 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class Capability
|
|
include CanCan::Ability
|
|
|
|
def initialize(token)
|
|
can [:create, :comment, :close, :reopen], Note if capability?(token, :allow_write_notes)
|
|
can [:api_read, :api_data], Trace if capability?(token, :allow_read_gpx)
|
|
can [:api_create, :api_update, :api_delete], Trace if capability?(token, :allow_write_gpx)
|
|
can [:api_details], User if capability?(token, :allow_read_prefs)
|
|
can [:api_gpx_files], User if capability?(token, :allow_read_gpx)
|
|
can [:read, :read_one], UserPreference if capability?(token, :allow_read_prefs)
|
|
can [:update, :update_one, :delete_one], UserPreference if capability?(token, :allow_write_prefs)
|
|
|
|
if token&.user&.terms_agreed?
|
|
can [:create, :update, :upload, :close, :subscribe, :unsubscribe, :expand_bbox], Changeset if capability?(token, :allow_write_api)
|
|
can :create, ChangesetComment if capability?(token, :allow_write_api)
|
|
can [:create, :update, :delete], Node if capability?(token, :allow_write_api)
|
|
can [:create, :update, :delete], Way if capability?(token, :allow_write_api)
|
|
can [:create, :update, :delete], Relation if capability?(token, :allow_write_api)
|
|
end
|
|
|
|
if token&.user&.moderator?
|
|
can [:destroy, :restore], ChangesetComment if capability?(token, :allow_write_api)
|
|
can :destroy, Note if capability?(token, :allow_write_notes)
|
|
if token&.user&.terms_agreed?
|
|
can :redact, OldNode if capability?(token, :allow_write_api)
|
|
can :redact, OldWay if capability?(token, :allow_write_api)
|
|
can :redact, OldRelation if capability?(token, :allow_write_api)
|
|
end
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def capability?(token, cap)
|
|
token&.read_attribute(cap)
|
|
end
|
|
end
|