Packages
blossom
0.29.3
0.29.3
0.29.2
0.29.1
0.29.0
0.28.0
0.27.3
0.27.2
0.27.1
0.27.0
0.26.3
0.26.2
0.26.1
0.26.0
0.25.3
0.25.2
0.25.1
0.25.0
0.24.1
0.24.0
0.23.5
0.23.4
0.23.3
0.23.2
0.23.1
0.23.0
0.22.1
0.22.0
0.21.8
0.21.7
0.21.6
0.21.5
0.21.4
0.21.3
0.21.2
0.21.1
0.21.0
0.20.4
0.20.3
0.20.2
0.20.1
0.20.0
0.19.5
0.19.4
0.19.3
0.19.2
0.19.1
0.19.0
0.18.1
0.18.0
0.17.4
0.17.3
0.17.2
0.17.1
0.17.0
0.16.0
0.15.2
0.15.1
0.15.0
0.14.0
0.13.0
0.12.2
0.12.1
0.12.0
0.11.0
0.10.1
0.10.0
0.9.2
0.9.1
0.9.0
0.8.0
0.7.0
0.6.2
0.6.1
0.6.0
0.5.1
0.5.0
0.4.0
0.3.0
0.2.0
0.1.0
Easy identity for easy authentication
Current section
Files
Jump to
Current section
Files
lib/blossom/models/realms.ex
defmodule Blossom.Models.Realms do
alias Blossom.Models.Realms
alias Blossom.Utils
alias KilnCore.Builders.Model, as: Builder
alias KilnCore.Utils, as: KilnCoreUtils
def expand_perms(action) do
Utils.expand_perms("realms", "realms", action)
end
def new(params, user, ctx) do
if user == :system do
ctx[:schema].new(params)
else
{:error, :forbidden}
end
end
def set_fetch_params(assignments, params) do
{realms, _casks, _ids} = assignments
Map.put(params, "allowed_ids", realms)
end
def fetch(func, params, user, ctx) do
new_params =
"list"
|> Realms.expand_perms()
|> ctx[:roles_assignments].get_reduced(:any, :any, user)
|> Realms.set_fetch_params(params)
apply(ctx[:schema], func, [new_params])
end
def get(params, user, ctx) do
case user do
:system ->
ctx[:schema].get(params)
%{"sub" => _} ->
Realms.fetch(:get, params, user, ctx)
_ ->
[]
end
end
def get_count(params, user, ctx) do
case user do
:system ->
ctx[:schema].get_count(params)
%{"sub" => _} ->
Realms.fetch(:get_count, params, user, ctx)
_ ->
[]
end
end
def show(id, user, ctx) do
case user do
:system -> ctx[:schema].show(id)
%{"sub" => _} -> ctx[:schema].show(user["iss"])
_ -> {:error, :forbidden}
end
end
def edit(params, id, user, ctx) do
case user do
:system ->
ctx[:schema].edit(params, id)
%{"sub" => _} ->
perms = Realms.expand_perms("edit")
if Utils.has_item_perms?(id, user, perms, ctx) do
params
|> Builder.handle_params(ctx[:protected_fields], user)
|> Map.delete("id")
|> ctx[:schema].edit(id)
else
{:error, :forbidden}
end
_ ->
{:error, :forbidden}
end
end
def delete(id, user, ctx) do
case user do
:system ->
ctx[:schema].delete(id)
%{"sub" => _} ->
perms = Realms.expand_perms("delete")
if Utils.has_item_perms?(id, user, perms, ctx) do
ctx[:schema].delete(id)
else
{:error, :forbidden}
end
_ ->
{:error, :forbidden}
end
end
defmacro __using__(opts \\ []) do
quote do
use KilnCore.Model,
protected_fields: Keyword.get(unquote(opts), :protected_fields, []),
schema: unquote(Keyword.get(opts, :schema))
@roles_assignments KilnCoreUtils.option_or_mod_replace(
@caller,
unquote(opts),
:roles_assignments,
RolesAssignments,
2
)
@users KilnCoreUtils.option_or_mod_replace(
@caller,
unquote(opts),
:users,
Users,
2
)
@ctx [
schema: @schema,
protected_fields: @protected_fields,
roles_assignments: @roles_assignments,
users: @users
]
def new(params, user) do
Realms.new(params, user, @ctx)
end
def get(params, user) do
Realms.get(params, user, @ctx)
end
def get_count(params, user) do
Realms.get_count(params, user, @ctx)
end
def show(id, user) do
Realms.show(id, user, @ctx)
end
def edit(params, id, user) do
Realms.edit(params, id, user, @ctx)
end
def delete(id, user) do
Realms.delete(id, user, @ctx)
end
end
end
end