Module: Card::Set::All::Permissions::Accounts

Included in:
Right::Account, Right::Email, Right::Password, Right::Salt, Right::Status, Right::Token
Defined in:
tmpsets/set/mod001-core/all/permissions.rb

Instance Method Summary collapse

Instance Method Details

#permit(action, verb = nil) ⇒ Object

This is a short-term hack that is used in account-related cards to allow a permissions pattern where permissions are restricted to the owner of the account (and, by default, Admin) That pattern should be permitted by our card representation (without creating separate rules for each account holder) but is not yet.



272
273
274
275
276
277
278
279
280
281
 
# File 'tmpsets/set/mod001-core/all/permissions.rb', line 272

def permit action, verb=nil
  if action == :comment then @action_ok = false
  elsif action == :create  then @superleft ? true : super(action, verb)
    # restricts account creation to subcard handling on permitted card
    # (unless explicitly permitted)
  elsif own_account? then true
  else
    super action, verb
  end
end