Class: ConcertoHardware::Ability

Inherits:
Ability
  • Object
show all
Defined in:
app/models/concerto_hardware/ability.rb

Overview

The enigne’s Ability class simply extends the existing Ability class for the application. We rely on the fact that it already includes CanCan::Ability.

Instance Method Summary collapse

Constructor Details

#initialize(accessor) ⇒ Ability

Returns a new instance of Ability.



6
7
8
9
10
 
# File 'app/models/concerto_hardware/ability.rb', line 6

def initialize(accessor)
  super # Get the main application's rules
  # The main app will delegate to user_abilities, etc.
  # Note the inherited rules give Admins rights to manage everything
end

Instance Method Details

#screen_abilities(screen) ⇒ Object

user_abilities



35
36
37
38
39
40
 
# File 'app/models/concerto_hardware/ability.rb', line 35

def screen_abilities(screen)
  # A logged-in screen can read its own Player information.
  can :read, Player, :screen_id => screen.id
  # In the future it may also need to write reporting data, so
  # this will need to be expanded.
end

#user_abilities(user) ⇒ Object 



12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
 
# File 'app/models/concerto_hardware/ability.rb', line 12

def user_abilities(user)
  super # Get the user rules from the main applications

  # For debugging you may want to make all Players readable
  # can :read, Player

  # Let's defer to Concerto's rules for Screen Permissions.
  # This will apply to both users browsing the hardware info
  # as well as public screens in public instances accessing their data.
  #  - Right now, only admins can create players (TODO)
  #  - It may become desirable in the future for reading to be
  #    restricted or curtailed if a lot of sensitive data is stored here.
  can :read, Player do |player|
    !player.screen.nil? and can? :read, player.screen
  end
  can :update, Player do |player|
    !player.screen.nil? and can? :update, player.screen
  end
  can :delete, Player do |player|
    !player.screen.nil? and can? :delete, player.screen
  end
end