Module: Card::Set::All::Permissions::Accounts

Included in:
Right::Account, Right::Email, Right::Password, Right::Salt, Right::Status, Right::Token
Defined in:
tmpsets/set/mod001-01_core/all/permissions.rb

Instance Method Summary collapse

Instance Method Details

#permit(action, verb = nil) ⇒ Object

This is a short-term hack that is used in account-related cards to allow a permissions pattern where permissions are restricted to the owner of the account (and, by default, Admin) That pattern should be permitted by our card representation (without creating separate rules for each account holder) but is not yet.



260
261
262
263
264
265
266
267
268
269
270
 
# File 'tmpsets/set/mod001-01_core/all/permissions.rb', line 260

def permit action, verb=nil
  case
  when action == :comment then @action_ok = false
  when action == :create  then @superleft ? true : super(action, verb)
    # restricts account creation to subcard handling on permitted card
    # (unless explicitly permitted)
  when own_account? then true
  else
    super action, verb
  end
end