Current section

Files

Jump to
step_flow lib step_flow controllers role_controller.ex
Raw

lib/step_flow/controllers/role_controller.ex

defmodule StepFlow.RoleController do
use StepFlow, :controller
alias StepFlow.Controller.Helpers
alias StepFlow.Roles
action_fallback(ExBackendWeb.FallbackController)
defp forbidden(conn) do
conn
|> put_status(:forbidden)
|> json(%{status: "error", message: "Forbidden access to roles"})
end
def index(%Plug.Conn{assigns: %{current_user: user}} = conn, params) do
if Helpers.has_right?("roles::*", user, "view") do
roles = Roles.list_roles(params)
conn
|> put_view(StepFlow.RoleView)
|> render("index.json", roles: roles)
else
conn
|> forbidden()
end
end
def index(conn, _) do
conn
|> forbidden()
end
defp show_per_id(%Plug.Conn{assigns: %{current_user: user}} = conn, %{"id" => id}) do
role = Roles.get_role(id)
if role != nil && Helpers.has_right?("roles::" <> role.name, user, "view") do
conn
|> put_view(StepFlow.RoleView)
|> render("show.json", role: role)
else
conn
|> forbidden()
end
end
defp show_per_name(%Plug.Conn{assigns: %{current_user: user}} = conn, %{"id" => name}) do
if Helpers.has_right?("roles::" <> name, user, "view") do
role = Roles.get_by(%{"name" => name})
conn
|> put_view(StepFlow.RoleView)
|> render("show.json", role: role)
else
conn
|> forbidden()
end
end
def show(%Plug.Conn{assigns: %{current_user: _user}} = conn, %{"id" => identifier}) do
case Integer.parse(identifier) do
{id, ""} -> show_per_id(conn, %{"id" => id})
_ -> show_per_name(conn, %{"id" => identifier})
end
end
def show(conn, _) do
conn
|> forbidden()
end
def create(%Plug.Conn{assigns: %{current_user: user}} = conn, param) do
if Helpers.has_right?("roles::*", user, "create") do
{:ok, role} = Roles.create_role(param)
conn
|> put_view(StepFlow.RoleView)
|> render("show.json", role: role)
else
conn
|> forbidden()
end
end
def create(conn, _) do
conn
|> forbidden()
end
def update(%Plug.Conn{assigns: %{current_user: user}} = conn, %{"id" => id} = param) do
role =
case Integer.parse(id) do
{id, ""} -> Roles.get_role(id)
_ -> nil
end
if role != nil && Helpers.has_right?("roles::" <> role.name, user, "update") do
{:ok, role} =
role
|> Roles.update_role(param)
conn
|> put_view(StepFlow.RoleView)
|> render("show.json", role: role)
else
conn
|> forbidden()
end
end
def update(conn, _) do
conn
|> forbidden()
end
def delete(%Plug.Conn{assigns: %{current_user: user}} = conn, %{"id" => id}) do
role =
case Integer.parse(id) do
{id, ""} -> Roles.get_role(id)
_ -> nil
end
if role != nil && Helpers.has_right?("roles::" <> role.name, user, "delete") do
{:ok, role} =
role
|> Roles.delete_role()
conn
|> put_view(StepFlow.RoleView)
|> render("show.json", role: role)
else
conn
|> forbidden()
end
end
def delete(conn, _) do
conn
|> forbidden()
end
end