cb7b79a58f
This opens up many possibilities for more interesting things to be shown on the dashboard, as well as making it easier to find if you have lots of content in your profile.
101 lines
4.1 KiB
Ruby
101 lines
4.1 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class Ability
|
|
include CanCan::Ability
|
|
|
|
def initialize(user)
|
|
can [:relation, :relation_history, :way, :way_history, :node, :node_history,
|
|
:changeset, :note, :new_note, :query], :browse
|
|
can :search, :direction
|
|
can [:index, :permalink, :edit, :help, :fixthemap, :offline, :export, :about, :preview, :copyright, :key, :id], :site
|
|
can [:finish, :embed], :export
|
|
can [:search, :search_latlon, :search_ca_postcode, :search_osm_nominatim,
|
|
:search_geonames, :search_osm_nominatim_reverse, :search_geonames_reverse], :geocoder
|
|
can [:token, :request_token, :access_token, :test_request], :oauth
|
|
|
|
if Settings.status != "database_offline"
|
|
can [:index, :feed], Changeset
|
|
can :index, ChangesetComment
|
|
can [:confirm, :confirm_resend, :confirm_email], :confirmation
|
|
can [:index, :rss, :show, :comments], DiaryEntry
|
|
can [:index], Note
|
|
can [:lost_password, :reset_password], :password
|
|
can [:index, :show], Redaction
|
|
can [:new, :create, :destroy], :session
|
|
can [:index, :show, :data, :georss, :picture, :icon], Trace
|
|
can [:terms, :new, :create, :save, :show, :auth_success, :auth_failure], User
|
|
can [:index, :show, :blocks_on, :blocks_by], UserBlock
|
|
can [:index, :show], Node
|
|
can [:index, :show, :full, :ways_for_node], Way
|
|
can [:index, :show, :full, :relations_for_node, :relations_for_way, :relations_for_relation], Relation
|
|
can [:history, :version], OldNode
|
|
can [:history, :version], OldWay
|
|
can [:history, :version], OldRelation
|
|
end
|
|
|
|
if user
|
|
can :welcome, :site
|
|
can [:revoke, :authorize], :oauth
|
|
|
|
if Settings.status != "database_offline"
|
|
can [:index, :new, :create, :show, :edit, :update, :destroy], ClientApplication
|
|
can [:index, :new, :create, :show, :edit, :update, :destroy], :oauth2_application
|
|
can [:index, :destroy], :oauth2_authorized_application
|
|
can [:new, :show, :create, :destroy], :oauth2_authorization
|
|
can [:show], :dashboard
|
|
can [:new, :create, :edit, :update, :comment, :subscribe, :unsubscribe], DiaryEntry
|
|
can [:make_friend, :remove_friend], Friendship
|
|
can [:new, :create, :reply, :show, :inbox, :outbox, :mark, :destroy], Message
|
|
can [:close, :reopen], Note
|
|
can [:show, :edit, :update], :preference
|
|
can [:edit, :update], :profile
|
|
can [:new, :create], Report
|
|
can [:mine, :new, :create, :edit, :update, :destroy], Trace
|
|
can [:account, :go_public], User
|
|
|
|
if user.moderator?
|
|
can [:hide, :hidecomment], DiaryEntry
|
|
can [:index, :show, :resolve, :ignore, :reopen], Issue
|
|
can :create, IssueComment
|
|
can [:new, :create, :edit, :update, :destroy], Redaction
|
|
can [:new, :edit, :create, :update, :revoke], UserBlock
|
|
end
|
|
|
|
if user.administrator?
|
|
can [:hide, :unhide, :hidecomment, :unhidecomment], DiaryEntry
|
|
can [:index, :show, :resolve, :ignore, :reopen], Issue
|
|
can :create, IssueComment
|
|
can [:set_status, :destroy, :index], User
|
|
can [:grant, :revoke], UserRole
|
|
end
|
|
end
|
|
end
|
|
|
|
# Define abilities for the passed in user here. For example:
|
|
#
|
|
# user ||= User.new # guest user (not logged in)
|
|
# if user.admin?
|
|
# can :manage, :all
|
|
# else
|
|
# can :read, :all
|
|
# end
|
|
#
|
|
# The first argument to `can` is the action you are giving the user
|
|
# permission to do.
|
|
# If you pass :manage it will apply to every action. Other common actions
|
|
# here are :read, :create, :update and :destroy.
|
|
#
|
|
# The second argument is the resource the user can perform the action on.
|
|
# If you pass :all it will apply to every resource. Otherwise pass a Ruby
|
|
# class of the resource.
|
|
#
|
|
# The third argument is an optional hash of conditions to further filter the
|
|
# objects.
|
|
# For example, here the user can only update published articles.
|
|
#
|
|
# can :update, Article, :published => true
|
|
#
|
|
# See the wiki for details:
|
|
# https://github.com/CanCanCommunity/cancancan/wiki/Defining-Abilities
|
|
end
|
|
end
|