dscf-credit 0.4.48 → 0.4.49

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 202f7f16da67e4370a2e290955089d9872866d8c574d3e2a8fb61a980c2dcfff
-  data.tar.gz: 3ce121d8bc09a5dcc475aed9e4376a1558a83da30032ffe4f5534cf3ddc32ba6
+  metadata.gz: 9c586be2c3e6201e240d8ff5676f1f9506f50a5a29e218b2fc597512410c113a
+  data.tar.gz: da306fa00a5696ccf4c08d2c04708ca4728862e14aac69c45d28d0f29f65b0b3
 SHA512:
-  metadata.gz: daaec706ba7d573f78a42d81e9c25c794b3db39c1c68556fdd633c3a013604c5f034f689c2ff34a3f2f0d19c4b385d3da0a14c404f1942f55beed99736917653
-  data.tar.gz: 18dfaee9c7c9b25bcf9847f1c98004e1ec2bace0bbe987613913ff7db164c98cb8b6233e3db6736a1d1dcfb7d233b801a25a145828928fd6f2d3d65ab34741c4
+  metadata.gz: 88e936bb0fa07592fe5cd7d4bcd1a32fefa05e6f769a2241302b9b73d4f89222ec3d031cd01ac3356659c96676ec6a8e601ce2c4def71f6eec97b30272b849e5
+  data.tar.gz: a74a4d06264c133883226d28d2f6dce9c2e9826e2541944125e0cf49de602d2825da3342d3132b600cd2536948f238fad0e291dedfdd46dd4d8fdd0731c90b28

data/app/controllers/dscf/credit/application_controller.rb

@@ -1,8 +1,6 @@
 module Dscf
   module Credit
-    class ApplicationController < ActionController::API
-      include Dscf::Core::Authenticatable
-      include Dscf::Core::JsonResponse
+    class ApplicationController < Dscf::Core::ApplicationController
     end
   end
 end

data/app/controllers/dscf/credit/credit_limit_calculations_controller.rb

@@ -1,6 +1,8 @@
 module Dscf::Credit
   class CreditLimitCalculationsController < ApplicationController
     def create
+      authorize Dscf::Credit::LoanProfile.new, :calculate_facility_limits?
+
       loan_profile = Dscf::Credit::LoanProfile.find(params[:loan_profile_id])
       credit_product = Dscf::Credit::CreditProduct.find(params[:credit_product_id])
 

data/app/controllers/dscf/credit/disbursements_controller.rb

@@ -1,6 +1,8 @@
 module Dscf::Credit
   class DisbursementsController < ApplicationController
     def create
+      raise Pundit::NotAuthorizedError unless current_user.has_permission?("disbursements.create")
+
       amount = disbursement_params[:amount]
       loan_profile = Dscf::Credit::LoanProfile.find(disbursement_params[:loan_profile_id])
       eligible_credit_line = Dscf::Credit::EligibleCreditLine.find(disbursement_params[:eligible_credit_line_id])

data/app/controllers/dscf/credit/repayments_controller.rb

@@ -1,6 +1,8 @@
 module Dscf::Credit
   class RepaymentsController < ApplicationController
     def create
+      raise Pundit::NotAuthorizedError unless current_user.has_permission?("repayments.create")
+
       loan = Dscf::Credit::Loan.find(params[:loan_id])
       payment_amount = params[:amount].to_f
 

data/app/policies/dscf/credit/application_policy.rb

@@ -0,0 +1,75 @@
+module Dscf
+  module Credit
+    class ApplicationPolicy < Dscf::Core::ApplicationPolicy
+      ADMIN_ROLES = %w[ADMIN REVIEWER BANK_ADMIN BANK_STAFF].freeze
+
+      class Scope < Dscf::Core::ApplicationPolicy::Scope
+        def resolve
+          return scope.none unless user.has_permission?(index_permission_code)
+          return scope.all if user.super_admin?
+          return scope.all if admin_role?
+
+          scope.none
+        end
+
+        private
+
+        def admin_role?
+          (user.active_role_codes & ApplicationPolicy::ADMIN_ROLES).any?
+        end
+      end
+
+      def show?
+        return user.has_permission?(permission_code(:show)) if admin_visible?
+
+        user.has_permission?(permission_code(:show)) && owned_record?
+      end
+
+      def update?
+        return user.has_permission?(permission_code(:update)) if admin_visible?
+
+        user.has_permission?(permission_code(:update)) && owned_record?
+      end
+
+      def owned_record?
+        true
+      end
+
+      # Reviewable workflow actions
+      def submit?
+        user.has_permission?(permission_code(:submit))
+      end
+
+      def approve?
+        user.has_permission?(permission_code(:approve))
+      end
+
+      def reject?
+        user.has_permission?(permission_code(:reject))
+      end
+
+      def request_modification?
+        user.has_permission?(permission_code(:request_modification))
+      end
+
+      def resubmit?
+        user.has_permission?(permission_code(:resubmit))
+      end
+
+      # Toggle actions
+      def activate?
+        user.has_permission?(permission_code(:activate))
+      end
+
+      def deactivate?
+        user.has_permission?(permission_code(:deactivate))
+      end
+
+      private
+
+      def admin_visible?
+        user.super_admin? || (ADMIN_ROLES & user.active_role_codes).any?
+      end
+    end
+  end
+end

data/app/policies/dscf/credit/bank_branch_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class BankBranchPolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/bank_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class BankPolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/bank_staff_policy.rb

@@ -0,0 +1,46 @@
+module Dscf
+  module Credit
+    class BankStaffPolicy < ApplicationPolicy
+      class Scope < ApplicationPolicy::Scope
+        def resolve
+          return scope.none unless user.has_permission?(index_permission_code)
+          return scope.all if user.super_admin?
+
+          if user.has_role?("BANK_STAFF")
+            scope.where(user_id: user.id)
+          elsif admin_role?
+            scope.all
+          else
+            scope.none
+          end
+        end
+      end
+
+      def show?
+        return user.has_permission?(permission_code(:show)) if non_bank_staff_admin?
+
+        user.has_permission?(permission_code(:show)) && owned_record?
+      end
+
+      def update?
+        return user.has_permission?(permission_code(:update)) if non_bank_staff_admin?
+
+        user.has_permission?(permission_code(:update)) && owned_record?
+      end
+
+      def owned_record?
+        if user.has_role?("BANK_STAFF")
+          record.user_id == user.id
+        else
+          true
+        end
+      end
+
+      private
+
+      def non_bank_staff_admin?
+        user.super_admin? || ((ApplicationPolicy::ADMIN_ROLES - [ "BANK_STAFF" ]) & user.active_role_codes).any?
+      end
+    end
+  end
+end

data/app/policies/dscf/credit/category_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class CategoryPolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/credit_line_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class CreditLinePolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/credit_line_spec_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class CreditLineSpecPolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/credit_product_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class CreditProductPolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/eligible_credit_line_policy.rb

@@ -0,0 +1,40 @@
+module Dscf
+  module Credit
+    class EligibleCreditLinePolicy < ApplicationPolicy
+      class Scope < ApplicationPolicy::Scope
+        def resolve
+          return scope.none unless user.has_permission?(index_permission_code)
+          return scope.all if user.super_admin?
+          return scope.all if admin_role?
+
+          if user.has_role?("USER")
+            scope.joins(loan_profile: :loan_application)
+                 .where(dscf_credit_loan_applications: { user_id: user.id })
+          elsif user.has_role?("FACILITATOR")
+            scope.joins(loan_profile: :loan_application)
+                 .where(
+                   dscf_credit_loan_applications: { backer_type: "Dscf::Core::User", backer_id: user.id }
+                 )
+          else
+            scope.none
+          end
+        end
+      end
+
+      def owned_record?
+        if user.has_role?("USER")
+          record.loan_profile&.loan_application&.user_id == user.id
+        elsif user.has_role?("FACILITATOR")
+          la = record.loan_profile&.loan_application
+          la&.backer_type == "Dscf::Core::User" && la&.backer_id == user.id
+        else
+          true
+        end
+      end
+
+      def apply_risk?
+        user.has_permission?(permission_code(:apply_risk))
+      end
+    end
+  end
+end

data/app/policies/dscf/credit/facilitator_application_policy.rb

@@ -0,0 +1,31 @@
+module Dscf
+  module Credit
+    class FacilitatorApplicationPolicy < ApplicationPolicy
+      class Scope < ApplicationPolicy::Scope
+        def resolve
+          return scope.none unless user.has_permission?(index_permission_code)
+          return scope.all if user.super_admin?
+          return scope.all if admin_role?
+
+          if user.has_role?("USER") || user.has_role?("FACILITATOR")
+            scope.where(user_id: user.id)
+          else
+            scope.none
+          end
+        end
+      end
+
+      def bulk_create?
+        user.has_permission?("facilitator_applications.bulk_create")
+      end
+
+      def owned_record?
+        if user.has_role?("USER") || user.has_role?("FACILITATOR")
+          record.user_id == user.id
+        else
+          true
+        end
+      end
+    end
+  end
+end

data/app/policies/dscf/credit/facilitator_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class FacilitatorPolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/information_source_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class InformationSourcePolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/loan_accrual_policy.rb

@@ -0,0 +1,42 @@
+module Dscf
+  module Credit
+    class LoanAccrualPolicy < ApplicationPolicy
+      class Scope < ApplicationPolicy::Scope
+        def resolve
+          return scope.none unless user.has_permission?(index_permission_code)
+          return scope.all if user.super_admin?
+          return scope.all if admin_role?
+
+          if user.has_role?("USER")
+            scope.joins(loan: { loan_profile: :loan_application })
+                 .where(dscf_credit_loan_applications: { user_id: user.id })
+          elsif user.has_role?("FACILITATOR")
+            scope.joins(loan: { loan_profile: :loan_application })
+                 .where(dscf_credit_loan_applications: { backer_type: "Dscf::Core::User", backer_id: user.id })
+          else
+            scope.none
+          end
+        end
+      end
+
+      def generate?
+        user.has_permission?(permission_code(:generate))
+      end
+
+      def statistics?
+        user.has_permission?(permission_code(:statistics))
+      end
+
+      def owned_record?
+        if user.has_role?("USER")
+          record.loan&.loan_profile&.loan_application&.user_id == user.id
+        elsif user.has_role?("FACILITATOR")
+          la = record.loan&.loan_profile&.loan_application
+          la&.backer_type == "Dscf::Core::User" && la&.backer_id == user.id
+        else
+          true
+        end
+      end
+    end
+  end
+end

data/app/policies/dscf/credit/loan_application_datum_policy.rb

@@ -0,0 +1,33 @@
+module Dscf
+  module Credit
+    class LoanApplicationDatumPolicy < ApplicationPolicy
+      class Scope < ApplicationPolicy::Scope
+        def resolve
+          return scope.none unless user.has_permission?(index_permission_code)
+          return scope.all if user.super_admin?
+          return scope.all if admin_role?
+
+          if user.has_role?("USER")
+            scope.joins(:loan_application)
+                 .where(dscf_credit_loan_applications: { user_id: user.id })
+          elsif user.has_role?("FACILITATOR")
+            scope.joins(:loan_application)
+                 .where(dscf_credit_loan_applications: { backer_type: "Dscf::Core::User", backer_id: user.id })
+          else
+            scope.none
+          end
+        end
+      end
+
+      def owned_record?
+        if user.has_role?("USER")
+          record.loan_application&.user_id == user.id
+        elsif user.has_role?("FACILITATOR")
+          record.loan_application&.backer_type == "Dscf::Core::User" && record.loan_application&.backer_id == user.id
+        else
+          true
+        end
+      end
+    end
+  end
+end

data/app/policies/dscf/credit/loan_application_policy.rb

@@ -0,0 +1,43 @@
+module Dscf
+  module Credit
+    class LoanApplicationPolicy < ApplicationPolicy
+      class Scope < ApplicationPolicy::Scope
+        def resolve
+          return scope.none unless user.has_permission?(index_permission_code)
+          return scope.all if user.super_admin?
+          return scope.all if admin_role?
+
+          if user.has_role?("USER")
+            scope.where(user_id: user.id)
+          elsif user.has_role?("FACILITATOR")
+            scope.where(backer_type: "Dscf::Core::User", backer_id: user.id)
+          else
+            scope.none
+          end
+        end
+      end
+
+      def owned_record?
+        if user.has_role?("USER")
+          record.user_id == user.id
+        elsif user.has_role?("FACILITATOR")
+          record.backer_type == "Dscf::Core::User" && record.backer_id == user.id
+        else
+          true
+        end
+      end
+
+      def submit_source_data?
+        user.has_permission?(permission_code(:submit_source_data))
+      end
+
+      def scoring_form?
+        user.has_permission?(permission_code(:scoring_form))
+      end
+
+      def calculate_credit_score?
+        user.has_permission?(permission_code(:calculate_credit_score))
+      end
+    end
+  end
+end

data/app/policies/dscf/credit/loan_policy.rb

@@ -0,0 +1,36 @@
+module Dscf
+  module Credit
+    class LoanPolicy < ApplicationPolicy
+      class Scope < ApplicationPolicy::Scope
+        def resolve
+          return scope.none unless user.has_permission?(index_permission_code)
+          return scope.all if user.super_admin?
+          return scope.all if admin_role?
+
+          if user.has_role?("USER")
+            scope.joins(loan_profile: :loan_application)
+                 .where(dscf_credit_loan_applications: { user_id: user.id })
+          elsif user.has_role?("FACILITATOR")
+            scope.joins(loan_profile: :loan_application)
+                 .where(
+                   dscf_credit_loan_applications: { backer_type: "Dscf::Core::User", backer_id: user.id }
+                 )
+          else
+            scope.none
+          end
+        end
+      end
+
+      def owned_record?
+        if user.has_role?("USER")
+          record.loan_profile&.loan_application&.user_id == user.id
+        elsif user.has_role?("FACILITATOR")
+          la = record.loan_profile&.loan_application
+          la&.backer_type == "Dscf::Core::User" && la&.backer_id == user.id
+        else
+          true
+        end
+      end
+    end
+  end
+end

data/app/policies/dscf/credit/loan_profile_policy.rb

@@ -0,0 +1,38 @@
+module Dscf
+  module Credit
+    class LoanProfilePolicy < ApplicationPolicy
+      class Scope < ApplicationPolicy::Scope
+        def resolve
+          return scope.none unless user.has_permission?(index_permission_code)
+          return scope.all if user.super_admin?
+          return scope.all if admin_role?
+
+          if user.has_role?("USER")
+            scope.joins(:loan_application).where(dscf_credit_loan_applications: { user_id: user.id })
+          elsif user.has_role?("FACILITATOR")
+            scope.joins(:loan_application).where(
+              dscf_credit_loan_applications: { backer_type: "Dscf::Core::User", backer_id: user.id }
+            )
+          else
+            scope.none
+          end
+        end
+      end
+
+      def owned_record?
+        if user.has_role?("USER")
+          record.loan_application&.user_id == user.id
+        elsif user.has_role?("FACILITATOR")
+          record.loan_application&.backer_type == "Dscf::Core::User" &&
+            record.loan_application&.backer_id == user.id
+        else
+          true
+        end
+      end
+
+      def calculate_facility_limits?
+        user.has_permission?(permission_code(:calculate_facility_limits))
+      end
+    end
+  end
+end

data/app/policies/dscf/credit/loan_transaction_policy.rb

@@ -0,0 +1,34 @@
+module Dscf
+  module Credit
+    class LoanTransactionPolicy < ApplicationPolicy
+      class Scope < ApplicationPolicy::Scope
+        def resolve
+          return scope.none unless user.has_permission?(index_permission_code)
+          return scope.all if user.super_admin?
+          return scope.all if admin_role?
+
+          if user.has_role?("USER")
+            scope.joins(loan: { loan_profile: :loan_application })
+                 .where(dscf_credit_loan_applications: { user_id: user.id })
+          elsif user.has_role?("FACILITATOR")
+            scope.joins(loan: { loan_profile: :loan_application })
+                 .where(dscf_credit_loan_applications: { backer_type: "Dscf::Core::User", backer_id: user.id })
+          else
+            scope.none
+          end
+        end
+      end
+
+      def owned_record?
+        if user.has_role?("USER")
+          record.loan&.loan_profile&.loan_application&.user_id == user.id
+        elsif user.has_role?("FACILITATOR")
+          la = record.loan&.loan_profile&.loan_application
+          la&.backer_type == "Dscf::Core::User" && la&.backer_id == user.id
+        else
+          true
+        end
+      end
+    end
+  end
+end

data/app/policies/dscf/credit/scoring_parameter_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class ScoringParameterPolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/scoring_table_normalizer_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class ScoringTableNormalizerPolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/scoring_table_parameter_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class ScoringTableParameterPolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/scoring_table_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class ScoringTablePolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/system_config_definition_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class SystemConfigDefinitionPolicy < ApplicationPolicy
+    end
+  end
+end

data/app/policies/dscf/credit/system_config_policy.rb

@@ -0,0 +1,6 @@
+module Dscf
+  module Credit
+    class SystemConfigPolicy < ApplicationPolicy
+    end
+  end
+end