Packages
blossom
0.26.2
0.29.3
0.29.2
0.29.1
0.29.0
0.28.0
0.27.3
0.27.2
0.27.1
0.27.0
0.26.3
0.26.2
0.26.1
0.26.0
0.25.3
0.25.2
0.25.1
0.25.0
0.24.1
0.24.0
0.23.5
0.23.4
0.23.3
0.23.2
0.23.1
0.23.0
0.22.1
0.22.0
0.21.8
0.21.7
0.21.6
0.21.5
0.21.4
0.21.3
0.21.2
0.21.1
0.21.0
0.20.4
0.20.3
0.20.2
0.20.1
0.20.0
0.19.5
0.19.4
0.19.3
0.19.2
0.19.1
0.19.0
0.18.1
0.18.0
0.17.4
0.17.3
0.17.2
0.17.1
0.17.0
0.16.0
0.15.2
0.15.1
0.15.0
0.14.0
0.13.0
0.12.2
0.12.1
0.12.0
0.11.0
0.10.1
0.10.0
0.9.2
0.9.1
0.9.0
0.8.0
0.7.0
0.6.2
0.6.1
0.6.0
0.5.1
0.5.0
0.4.0
0.3.0
0.2.0
0.1.0
Easy identity for easy authentication
Current section
Files
Jump to
Current section
Files
lib/blossom/models/roles_definitions.ex
defmodule Blossom.Models.RolesDefinitions do
alias Blossom.Models.RolesDefinitions
alias Blossom.Utils
alias KilnCore.Builders.Model, as: Builder
alias KilnCore.Utils, as: KilnCoreUtils
def expand_perms(action) do
Utils.expand_perms("realms", "roles-definitions", action)
end
def make_new(params, user, ctx) do
params
|> Builder.handle_params(ctx[:protected_fields], user)
|> ctx[:schema].new()
end
def new(params, user, ctx) do
case user do
:system ->
ctx[:schema].new(params)
%{"sub" => _} ->
perms = RolesDefinitions.expand_perms("create")
case Utils.check_create_item(user, perms, [], [], ctx) do
{:ok, _} -> RolesDefinitions.make_new(params, user, ctx)
e -> e
end
_ ->
{:error, :forbidden}
end
end
def fetch(func, params, user, ctx) do
perms = RolesDefinitions.expand_perms("list")
if ctx[:casks_roles].has_perms?(perms, [], [], user) do
apply(ctx[:schema], func, [Map.put(params, "realm", user["iss"])])
else
apply(ctx[:schema], func, [Map.put(params, "realm", nil)])
end
end
def get(params, user, ctx) do
case user do
:system ->
ctx[:schema].get(params)
%{"sub" => _} ->
RolesDefinitions.fetch(:get, params, user, ctx)
_ ->
[]
end
end
def get_count(params, user, ctx) do
case user do
:system ->
ctx[:schema].get_count(params)
%{"sub" => _} ->
RolesDefinitions.fetch(:get_count, params, user, ctx)
_ ->
0
end
end
def show(id, user, ctx) do
case user do
:system ->
ctx[:schema].show(id)
%{"sub" => _} ->
perms = RolesDefinitions.expand_perms("show")
if Utils.has_item_perms?(id, user, perms, ctx) do
ctx[:schema].show(id)
else
{:error, :forbidden}
end
_ ->
{:error, :forbidden}
end
end
def edit(params, id, user, ctx) do
case user do
:system ->
ctx[:schema].edit(params, id)
%{"sub" => _} ->
perms = RolesDefinitions.expand_perms("edit")
if Utils.has_item_perms?(id, user, perms, ctx) do
params
|> Builder.handle_params(ctx[:protected_fields], user)
|> Map.drop(["id", "realm"])
|> ctx[:schema].edit(id)
else
{:error, :forbidden}
end
_ ->
{:error, :forbidden}
end
end
def delete(id, user, ctx) do
case user do
:system ->
ctx[:schema].delete(id)
%{"sub" => _} ->
perms = RolesDefinitions.expand_perms("delete")
if Utils.has_item_perms?(id, user, perms, ctx) do
ctx[:schema].delete(id)
else
{:error, :forbidden}
end
_ ->
{:error, :forbidden}
end
end
defmacro __using__(opts \\ []) do
quote do
use KilnCore.Model,
protected_fields: Keyword.get(unquote(opts), :protected_fields, []),
schema: unquote(Keyword.get(opts, :schema))
@casks_roles KilnCoreUtils.option_or_mod_replace(
@caller,
unquote(opts),
:casks_roles,
CasksRoles,
2
)
@realms KilnCoreUtils.option_or_mod_replace(
@caller,
unquote(opts),
:realms,
Realms,
2
)
@ctx [
casks_roles: @casks_roles,
protected_fields: @protected_fields,
realms: @realms,
schema: @schema
]
def new(params, user) do
RolesDefinitions.new(params, user, @ctx)
end
def get(params, user) do
RolesDefinitions.get(params, user, @ctx)
end
def get_count(params, user) do
RolesDefinitions.get_count(params, user, @ctx)
end
def show(id, user) do
RolesDefinitions.show(id, user, @ctx)
end
def edit(params, id, user) do
RolesDefinitions.edit(params, id, user, @ctx)
end
def delete(id, user) do
RolesDefinitions.delete(id, user, @ctx)
end
end
end
end