Packages
blossom
0.23.0
0.29.3
0.29.2
0.29.1
0.29.0
0.28.0
0.27.3
0.27.2
0.27.1
0.27.0
0.26.3
0.26.2
0.26.1
0.26.0
0.25.3
0.25.2
0.25.1
0.25.0
0.24.1
0.24.0
0.23.5
0.23.4
0.23.3
0.23.2
0.23.1
0.23.0
0.22.1
0.22.0
0.21.8
0.21.7
0.21.6
0.21.5
0.21.4
0.21.3
0.21.2
0.21.1
0.21.0
0.20.4
0.20.3
0.20.2
0.20.1
0.20.0
0.19.5
0.19.4
0.19.3
0.19.2
0.19.1
0.19.0
0.18.1
0.18.0
0.17.4
0.17.3
0.17.2
0.17.1
0.17.0
0.16.0
0.15.2
0.15.1
0.15.0
0.14.0
0.13.0
0.12.2
0.12.1
0.12.0
0.11.0
0.10.1
0.10.0
0.9.2
0.9.1
0.9.0
0.8.0
0.7.0
0.6.2
0.6.1
0.6.0
0.5.1
0.5.0
0.4.0
0.3.0
0.2.0
0.1.0
Easy identity for easy authentication
Current section
Files
Jump to
Current section
Files
lib/blossom/models/casks.ex
defmodule Blossom.Models.Casks do
alias Blossom.Models.Casks
alias Blossom.Utils
alias KilnCore.Builders.Model, as: Builder
alias KilnCore.Utils, as: KilnCoreUtils
def allowed_embeds(params, user, ctx) do
if params["embeds"] != nil do
adminships = ctx[:casks_roles].adminships(user)
allowed_orgs = Utils.filter_allowed(params["id"], adminships)
if Enum.count(allowed_orgs) != Enum.count(params["id"]) do
Map.delete(params, "embeds")
else
params
end
else
params
end
end
def fetch_orgs(func, params, user, ctx) do
if ctx[:realms].is_admin?(user["sub"], user["iss"]) do
apply(ctx[:schema], func, [Map.put(params, "realm", user["iss"])])
else
new_params =
params
|> Utils.put_allowed_casks("id", user, ctx[:casks_roles])
|> Casks.allowed_embeds(user, ctx)
apply(ctx[:schema], func, [new_params])
end
end
def is_item_realm_admin?(id, user, ctx) do
case ctx[:schema].show([id]) do
[] ->
false
[item] ->
if ctx[:realms].is_admin?(user["sub"], item.realm) do
true
else
false
end
end
end
def new(params, user, ctx, protected_fields) do
if user == :system do
ctx[:schema].new(params)
else
if ctx[:realms].is_admin?(user["sub"], params["realm"]) do
params
|> Builder.handle_params(protected_fields, user)
|> ctx[:schema].new()
else
{:error, :forbidden}
end
end
end
def get(params, user, ctx) do
case user do
:system ->
ctx[:schema].get(params)
%{"sub" => _} ->
Casks.fetch_orgs(:get, params, user, ctx)
_ ->
[]
end
end
def get_count(params, user, ctx) do
case user do
:system ->
ctx[:schema].get_count(params)
%{"sub" => _} ->
Casks.fetch_orgs(:get_count, params, user, ctx)
_ ->
0
end
end
def show(id, user, ctx) do
case user do
:system ->
ctx[:schema].show([id])
%{"sub" => _} ->
if ctx[:casks_roles].is_member?(id, user) do
ctx[:schema].show([id])
else
if Casks.is_item_realm_admin?(id, user, ctx) do
ctx[:schema].show([id])
else
{:error, :forbidden}
end
end
_ ->
{:error, :forbidden}
end
end
def make_edit(id, user, ctx, params) do
params
|> Builder.handle_params(ctx[:protected_fields], user)
|> Map.drop(["id", "realm"])
|> ctx[:schema].edit([id])
end
def edit(params, id, user, ctx) do
case user do
:system ->
ctx[:schema].edit(params, [id])
%{"sub" => _} ->
if ctx[:casks_roles].is_admin?(id, user) do
Casks.make_edit(params, id, user, ctx)
else
if Casks.is_item_realm_admin?(id, user, ctx) do
Casks.make_edit(params, id, user, ctx)
else
{:error, :forbidden}
end
end
_ ->
{:error, :forbidden}
end
end
def delete(id, user, ctx) do
case user do
:system ->
ctx[:schema].delete(id)
%{"sub" => _} ->
if ctx[:casks_roles].is_admin?(id, user) do
ctx[:schema].delete(id)
else
if Casks.is_item_realm_admin?(id, user, ctx) do
ctx[:schema].delete(id)
else
{:error, :forbidden}
end
end
_ ->
{:error, :forbidden}
end
end
defmacro __using__(opts \\ []) do
quote do
use KilnCore.Model,
protected_fields:
Keyword.get(unquote(opts), :protected_fields, ["enabled"]),
schema: unquote(Keyword.get(opts, :schema))
@casks_roles KilnCoreUtils.option_or_mod_replace(
@caller,
unquote(opts),
:casks_roles,
CasksRoles,
2
)
@realms KilnCoreUtils.option_or_mod_replace(
@caller,
unquote(opts),
:realms,
Realms,
2
)
@ctx [
schema: @schema,
protected_fields: @protected_fields,
casks_roles: @casks_roles,
realms: @realms
]
def new(params, user) do
Casks.new(params, user, @ctx, @protected_fields)
end
def get(params, user) do
Casks.get(params, user, @ctx)
end
def get_count(params, user) do
Casks.get_count(params, user, @ctx)
end
def show(id, user) do
Casks.show(id, user, @ctx)
end
def edit(params, id, user) do
Casks.edit(params, id, user, @ctx)
end
def delete(id, user) do
Casks.delete(id, user, @ctx)
end
end
end
end