hyrax 3.0.0.pre.rc2 → 3.0.0.pre.rc3

data/app/indexers/hyrax/valkyrie_collection_indexer.rb

@@ -3,17 +3,8 @@
 module Hyrax
   ##
   # Indexes properties common to PCDM Collections
-  class ValkyrieCollectionIndexer < Hyrax::ValkyrieIndexer
-    include Hyrax::ResourceIndexer
-    include Hyrax::PermissionIndexer
-    include Hyrax::VisibilityIndexer
-    include Hyrax::Indexer(:core_metadata)
-
-    def to_solr
-      super.tap do |index_document|
-        index_document[:generic_type_sim] = ['Collection']
-        index_document[:thumbnail_path_ss] = Hyrax::CollectionThumbnailPathService.call(resource)
-      end
-    end
+  #
+  # @deprecated use Hyrax::PcdmCollectionIndexer instead
+  class ValkyrieCollectionIndexer < Hyrax::PcdmCollectionIndexer
   end
 end

data/app/indexers/hyrax/valkyrie_indexer.rb

@@ -4,22 +4,22 @@ module Hyrax
   ##
   # @api public
   #
-  # Transforms {Valkyrie::Resource} models to solr-ready key-value hashes. Use
-  # `#to_solr` to retrieve the indexable hash.
+  # Transforms +Valkyrie::Resource+ models to solr-ready key-value hashes. Use
+  # {#to_solr} to retrieve the indexable hash.
   #
   # The default {Hyrax::ValkyrieIndexer} implementation provides minimal
-  # indexing for the Valkyrie id and the reserved `#created_at` and
-  # `#updated_at` attributes.
+  # indexing for the Valkyrie id and the reserved +#created_at+ and
+  # +#updated_at+ attributes.
   #
   # Custom indexers inheriting from others are responsible for providing a full
   # index hash. A common pattern for doing this is to employ method composition
   # to retrieve the parent's data, then modify it:
-  # `def to_solr; super.tap { |index_document| transform(index_document) }; end`.
+  # +def to_solr; super.tap { |index_document| transform(index_document) }; end+.
   # This technique creates infinitely composible index building behavior, with
   # indexers that can always see the state of the resource and the full current
   # index document.
   #
-  # It's recommended to *never* modify the state of `resource` in an indexer.
+  # It's recommended to *never* modify the state of +resource+ in an indexer.
   #
   # @example defining a custom indexer with composition
   #   class MyIndexer < ValkyrieIndexer
@@ -55,17 +55,6 @@ module Hyrax
     #   @return [Valkyrie::Resource]
     attr_reader :resource
 
-    ##
-    # @api public
-    # @param [Valkyrie::Resource] resource
-    #
-    # @return [#to_solr]
-    def self.for(resource:)
-      indexer_class = "#{resource.class}Indexer".safe_constantize || ValkyrieIndexer
-
-      indexer_class.new(resource: resource)
-    end
-
     ##
     # @api private
     # @param [Valkyrie::Resource] resource
@@ -83,5 +72,44 @@ module Hyrax
         "updated_at_dtsi": resource.updated_at
       }
     end
+
+    ##
+    # @api private
+    # @note provided for ActiveFedora compatibility.
+    def generate_solr_document
+      to_solr.stringify_keys
+    end
+
+    class << self
+      ##
+      # @api public
+      # @param resource [Valkyrie::Resource] an instance of a +Valkyrie::Resource+
+      #   or an inherited class
+      # @note This factory will attempt to return an indexer following a naming convention
+      #   where the indexer for a resource class is expected to be the class name
+      #   appended with 'Indexer'.  It will return default {ValkyrieIndexer} if
+      #   an indexer class following the naming convention is not found.
+      #
+      # @return [Valkyrie::Indexer] an instance of ValkyrieIndexer or an inherited class based on naming convention
+      #
+      # @example
+      #     ValkyrieIndexer.for(resource: Book.new) # => #<BookIndexer ...>
+      def for(resource:)
+        indexer_class_for(resource).new(resource: resource)
+      end
+
+      private
+
+      ##
+      # @param [Object]
+      # @return [Class]
+      def indexer_class_for(resource)
+        indexer_class = "#{resource.class.name}Indexer".safe_constantize
+
+        return indexer_class if indexer_class.is_a?(Class) &&
+                                indexer_class.instance_methods.include?(:to_solr)
+        ValkyrieIndexer
+      end
+    end
   end
 end

data/app/indexers/hyrax/valkyrie_work_indexer.rb

@@ -8,5 +8,21 @@ module Hyrax
     include Hyrax::PermissionIndexer
     include Hyrax::VisibilityIndexer
     include Hyrax::Indexer(:core_metadata)
+
+    def to_solr # rubocop:disable Metrics/AbcSize, Metrics/CyclomaticComplexity, Metrics/MethodLength
+      super.tap do |solr_doc|
+        solr_doc['generic_type_sim'] = ['Work']
+        solr_doc['suppressed_bsi'] = suppressed?(resource)
+        solr_doc['admin_set_id_ssim'] = [resource.admin_set_id.to_s]
+        solr_doc['member_of_collection_ids_ssim'] = resource.member_of_collection_ids.map(&:to_s)
+        solr_doc['member_ids_ssim'] = resource.member_ids.map(&:to_s)
+      end
+    end
+
+    private
+
+    def suppressed?(resource)
+      Hyrax::ResourceStatus.new(resource: resource).inactive?
+    end
   end
 end

data/app/jobs/attach_files_to_work_job.rb

@@ -9,8 +9,9 @@ class AttachFilesToWorkJob < Hyrax::ApplicationJob
     case work
     when ActiveFedora::Base
       perform_af(work, uploaded_files, work_attributes)
-    when Valkyrie::Resource
-      perform_valkyrie(work, uploaded_files, work_attributes)
+    else
+      Hyrax::WorkUploadsHandler.new(work: work).add(files: uploaded_files).attach ||
+        raise("Could not complete AttachFilesToWorkJob. Some of these are probably in an undesirable state: #{uploaded_files}")
     end
   end
 
@@ -35,45 +36,6 @@ class AttachFilesToWorkJob < Hyrax::ApplicationJob
     end
   end
 
-  def perform_valkyrie(work, uploaded_files, work_attributes)
-    validate_files!(uploaded_files)
-    depositor = proxy_or_depositor(work)
-    user = User.find_by_user_key(depositor)
-    work_permissions = permissions_map(work.permission_manager.acl.permissions)
-    uploaded_files.each do |uploaded_file|
-      next if uploaded_file.file_set_uri.present?
-      attach_uploaded_file!(uploaded_file, user, work, work_permissions, work_attributes)
-    end
-  end
-
-  def attach_uploaded_file!(uploaded_file, user, work, work_permissions, work_attributes)
-    file_set = Hyrax.persister.save(resource: Hyrax::FileSet.new(user: user))
-    actor = Hyrax::Actors::FileSetActor.new(file_set, user)
-    uploaded_file.add_file_set!(actor.file_set)
-    file_acl = Hyrax::AccessControlList.new(resource: actor.file_set)
-    work_permissions.each { |perm| file_acl.grant(perm[:mode]).to(perm[:agent]).save }
-    file_acl.save
-    metadata = visibility_attributes(work_attributes)
-    actor.create_metadata(metadata)
-    actor.create_content(uploaded_file)
-    actor.attach_to_work(work)
-  end
-
-  # Return array of hashes representing permissions without their :access_to objects
-  # @param permissions [Permission]
-  # @return [Array<Hash>]
-  def permissions_map(permissions)
-    permissions.collect { |p| { agent: agent_object(p.agent), mode: p.mode } }
-  end
-
-  # Converts string representation of Permission.agent to either User or Hyrax::Group
-  # @param agent [String]
-  # @return [User] or [Hyrax::Group]
-  def agent_object(agent)
-    return Hyrax::Group.new(agent.sub(Hyrax::Group.name_prefix, '')) if agent.starts_with?(Hyrax::Group.name_prefix)
-    User.find_by_user_key(agent)
-  end
-
   def create_permissions(work, depositor)
     work.edit_users += [depositor]
     work.edit_users = work.edit_users.dup

data/app/jobs/embargo_expiry_job.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+class EmbargoExpiryJob < Hyrax::ApplicationJob
+  def perform
+    records_with_expired_embargos.each do |id|
+      work = ActiveFedora::Base.find(id)
+      Hyrax::Actors::EmbargoActor.new(work).destroy
+    end
+  end
+
+  ##
+  # @return [Enumerator<String>] ids for all the objects that have expired active embargoes
+  def records_with_expired_embargos
+    Hyrax::EmbargoService.assets_with_expired_embargoes.map(&:id)
+  end
+end

data/app/jobs/event_job.rb

@@ -1,17 +1,18 @@
 # frozen_string_literal: true
-# A generic job for sending events to a user.
-#
+
+##
 # @abstract
+#
+# A generic job for sending events to a user.
 class EventJob < Hyrax::ApplicationJob
   include Rails.application.routes.url_helpers
-  # For link_to
-  include ActionView::Helpers
-  # For link_to_profile
-  include HyraxHelper
+  include ActionView::Helpers # For link_to
+  include HyraxHelper # For link_to_profile
 
   queue_as Hyrax.config.ingest_queue_name
   attr_reader :depositor
 
+  ##
   # @param [User] depositor the user to create the event for
   def perform(depositor)
     @depositor = depositor
@@ -19,8 +20,10 @@ class EventJob < Hyrax::ApplicationJob
     log_user_event(depositor)
   end
 
-  # override to provide your specific action for the event you are logging
+  ##
   # @abstract
+  #
+  # override to provide your specific action for the event you are logging
   def action
     raise(NotImplementedError, "#action should be implemented by an child class of EventJob")
   end
@@ -31,7 +34,11 @@ class EventJob < Hyrax::ApplicationJob
     @event ||= Hyrax::Event.create_now(action)
   end
 
+  ##
   # log the event to the users event stream
+  #
+  # @param [User] depositor the user to create the event for
+  # @return [void]
   def log_user_event(depositor)
     depositor.log_event(event)
   end

data/app/jobs/hyrax/application_job.rb

@@ -6,7 +6,12 @@ module Hyrax
   class ApplicationJob < ::ApplicationJob
     before_enqueue do |job|
       job.arguments.map! do |arg|
-        arg.is_a?(Valkyrie::Resource) ? Hyrax::ActiveJobProxy.new(resource: arg) : arg
+        case arg
+        when Valkyrie::Resource
+          Hyrax::ValkyrieGlobalIdProxy.new(resource: arg)
+        else
+          arg
+        end
       end
     end
   end

data/app/jobs/import_url_job.rb

@@ -3,10 +3,14 @@ require 'uri'
 require 'tmpdir'
 require 'browse_everything/retriever'
 
-# Given a FileSet that has an import_url property,
-# download that file and put it into Fedora
-# Called by AttachFilesToWorkJob (when files are uploaded to s3)
-# and CreateWithRemoteFilesActor when files are located in some other service.
+##
+# Given a {FileSet} that has an +#import_url+ property, download that file and
+# deposit into Fedora.
+#
+# @note this is commonly called during deposit by {AttachFilesToWorkJob} (when
+#   files are uploaded directly as {Hyrax::UploadedFile}) and
+#   {Hyrax::Actors::CreateWithRemoteFilesActor} when files are located in
+#   some other service.
 class ImportUrlJob < Hyrax::ApplicationJob
   queue_as Hyrax.config.ingest_queue_name
   attr_reader :file_set, :operation, :headers, :user, :uri
@@ -16,6 +20,7 @@ class ImportUrlJob < Hyrax::ApplicationJob
     operation.pending_job(job)
   end
 
+  ##
   # @param [FileSet] file_set
   # @param [Hyrax::BatchCreateOperation] operation
   # @param [Hash] headers - header data to use in interaction with remote url
@@ -85,8 +90,9 @@ class ImportUrlJob < Hyrax::ApplicationJob
     Rails.logger.debug("ImportUrlJob: Closing #{File.join(dir, filename)}")
   end
 
+  ##
   # Send message to user on download failure
-  # @param filename [String] the filename of the file to download
+  #
   # @param error_message [String] the download error message
   def send_error(error_message)
     file_set.errors.add('Error:', error_message)

data/app/jobs/inherit_permissions_job.rb

@@ -16,26 +16,11 @@ class InheritPermissionsJob < Hyrax::ApplicationJob
 
   private
 
-  # Return array of hashes representing permissions without their :access_to objects
-  # @param permissions [Permission]
-  # @return [Array<Hash>]
-  def permissions_map(permissions)
-    permissions.collect { |p| { agent: agent_object(p.agent), mode: p.mode } }
-  end
-
   # Returns a list of member file_sets for a work
   # @param work [Resource]
   # @return [Array<Hyrax::File_Set>]
   def file_sets_for(work)
-    Hyrax.query_service.custom_queries.find_child_filesets(resource: work)
-  end
-
-  # Converts string representation of Permission.agent to either User or Hyrax::Group
-  # @param agent [String]
-  # @return [User] or [Hyrax::Group]
-  def agent_object(agent)
-    return Hyrax::Group.new(agent.sub(Hyrax::Group.name_prefix, '')) if agent.starts_with?(Hyrax::Group.name_prefix)
-    User.find_by_user_key(agent)
+    Hyrax.custom_queries.find_child_filesets(resource: work)
   end
 
   # Perform the copy from the work to the contained filesets
@@ -61,15 +46,11 @@ class InheritPermissionsJob < Hyrax::ApplicationJob
   #
   # @param work containing access level and filesets
   def valkyrie_perform(work)
-    work_permissions = permissions_map(work.permission_manager.acl.permissions)
-    file_sets_for(work).each do |file|
-      file_acl = Hyrax::AccessControlList.new(resource: file)
-      file_permissions = permissions_map(file_acl.permissions)
-      # grant new work permissions to member file_sets
-      (work_permissions - file_permissions).each { |perm| file_acl.grant(perm[:mode]).to(perm[:agent]).save }
-      # remove permissions that are not on work from member file_sets
-      (file_permissions - work_permissions).each { |perm| file_acl.revoke(perm[:mode]).from(perm[:agent]).save }
-      file_acl.save
+    work_acl = Hyrax::AccessControlList.new(resource: work)
+
+    file_sets_for(work).each do |file_set|
+      Hyrax::AccessControlList
+        .copy_permissions(source: work_acl, target: file_set)
     end
   end
 end

data/app/jobs/lease_expiry_job.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+class LeaseExpiryJob < Hyrax::ApplicationJob
+  def perform
+    records_with_expired_leases.each do |id|
+      work = ActiveFedora::Base.find(id)
+      Hyrax::Actors::LeaseActor.new(work).destroy
+    end
+  end
+
+  ##
+  # @return [Enumerator<String>] ids for all the objects that have expired active leases
+  def records_with_expired_leases
+    Hyrax::LeaseService.assets_with_expired_leases.map(&:id)
+  end
+end

data/app/models/admin_set.rb

@@ -17,7 +17,7 @@
 # @see Hyrax::DefaultAdminSetActor
 # @see Hyrax::ApplyPermissionTemplateActor
 class AdminSet < ActiveFedora::Base
-  include Hydra::AccessControls::WithAccessRight
+  include Hydra::AccessControls::Permissions
   include Hyrax::Noid
   include Hyrax::HumanReadableType
   include Hyrax::HasRepresentative

data/app/models/concerns/hyrax/ability.rb

@@ -1,5 +1,27 @@
 # frozen_string_literal: true
 module Hyrax
+  ##
+  # Provides Hyrax's engine level user/group permissions.
+  #
+  # @note This is intended as a mixin layered over
+  #   +Blacklight::AccessControls::Ability+ and +Hydra::AccessControls+. Its
+  #   implementation may depend in part on behavioral details of either of those
+  #   two mixins. As of Hyrax 3.0.0 there's an ongoing effort to clarify and
+  #   document the specific dependencies.
+  #
+  # @todo catalog and document the actions we authorize here. everything we
+  #   allow or disable from this module should be clear to application side
+  #   adopters.
+  #
+  # @example creating an application Ability
+  #   # app/models/ability.rb
+  #   class Ability
+  #     include Hydra::Ability
+  #     include Hyrax::Ability
+  #   end
+  #
+  # @see https://www.rubydoc.info/github/CanCanCommunity/cancancan
+  # @see https://www.rubydoc.info/gems/blacklight-access_controls/
   module Ability
     extend ActiveSupport::Concern
 
@@ -11,9 +33,9 @@ module Hyrax
       include Hyrax::Ability::SolrDocumentAbility
 
       class_attribute :admin_group_name, :registered_group_name, :public_group_name
-      self.admin_group_name = 'admin'
-      self.registered_group_name = 'registered'
-      self.public_group_name = 'public' # TODO: find hard coded values and replace with this
+      self.admin_group_name = Hyrax.config.admin_user_group_name
+      self.registered_group_name = Hyrax.config.registered_user_group_name
+      self.public_group_name = Hyrax.config.public_user_group_name
       self.ability_logic += [:admin_permissions,
                              :curation_concerns_permissions,
                              :operation_abilities,
@@ -69,19 +91,12 @@ module Hyrax
 
     private
 
-    # @return [Boolean] true if the user has at least one admin set they can deposit into.
-    def admin_set_with_deposit?
-      ids = PermissionTemplateAccess.for_user(ability: self,
-                                              access: ['deposit', 'manage'])
-                                    .joins(:permission_template)
-                                    .select(:source_id)
-                                    .distinct
-                                    .pluck(:source_id)
-      query = "_query_:\"{!raw f=has_model_ssim}AdminSet\" AND {!terms f=id}#{ids.join(',')}"
-      Hyrax::SolrService.count(query).positive?
-    end
+    # @!group Ability Logic Library
 
-    # This overrides hydra-head, (and restores the method from blacklight-access-controls)
+    ##
+    # @api public
+    #
+    # Overrides hydra-head, (and restores the method from blacklight-access-controls)
     def download_permissions
       can :download, String do |id|
         test_download(id)
@@ -93,13 +108,31 @@ module Hyrax
       end
     end
 
-    # Add this to your ability_logic if you want all logged in users to be able
-    # to submit content
+    ##
+    # @api public
+    #
+    # Add this to your {.ability_logic} if you want all logged in users to be able
+    # to submit content.
+    #
+    # @note this is normally injected into an application +::Ability+ by the
+    #   hyrax install generator.
+    #
+    # @example
+    #   self.ability_logic += [:everyone_can_create_curation_concerns]
     def everyone_can_create_curation_concerns
       return unless registered_user?
       can :create, curation_concerns_models
     end
 
+    ##
+    # @api public
+    #
+    # Allow registered users to create {UploadedFile} and {BatchUploadItem}
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @example
+    #   self.ability_logic += [:uploaded_file_abilities]
     def uploaded_file_abilities
       return unless registered_user?
       can :create, [UploadedFile, BatchUploadItem]
@@ -109,6 +142,15 @@ module Hyrax
       # Note: cannot call `authorized_models` without going recursive.
     end
 
+    ##
+    # @api public
+    #
+    # Permissions for work transfers and proxy deposit models.
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @example
+    #   self.ability_logic += [:proxy_deposit_abilities]
     def proxy_deposit_abilities
       if Flipflop.transfer_works?
         can :transfer, String do |id|
@@ -124,15 +166,48 @@ module Hyrax
       can :destroy, ProxyDepositRequest, sending_user_id: current_user.id, status: 'pending'
     end
 
+    ##
+    # @api public
+    #
+    # Permissions for users to edit themselves and view other users
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @example
+    #   self.ability_logic += [:user_abilities]
     def user_abilities
       can [:edit, :update, :toggle_trophy], ::User, id: current_user.id
       can :show, ::User
     end
 
+    ##
+    # @api public
+    #
+    # Allow admins to manage {FeaturedWork} data.
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @example
+    #   self.ability_logic += [:featured_work_abilities]
     def featured_work_abilities
       can [:create, :destroy, :update], FeaturedWork if admin?
     end
 
+    ##
+    # @api public
+    #
+    # Allow everyone to read {ContentBlock} data.
+    #
+    # Allow admins to read the admin dashboard, update {ContentBlock}, and edit
+    # {SolrDocument}(!?)
+    #
+    # @todo why does this allow so many different things? what is going on with
+    #   `can :edit, ::SolrDocument`.
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @example
+    #   self.ability_logic += [:editor_abilities]
     def editor_abilities
       can :read, ContentBlock
       return unless admin?
@@ -142,26 +217,76 @@ module Hyrax
       can :edit, ::SolrDocument
     end
 
+    ##
+    # @api public
+    #
+    # Allow admins to read {Hyrax::Statistics}; allow read users to do the
+    # +:stats+ action.
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @example
+    #   self.ability_logic += [:stats_abilities]
     def stats_abilities
       can :read, Hyrax::Statistics if admin?
       alias_action :stats, to: :read
     end
 
+    ##
+    # @api public
+    #
+    # Allow read users to do the +:citation+ action
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @example
+    #   self.ability_logic += [:citation_abilities]
     def citation_abilities
       alias_action :citation, to: :read
     end
 
+    ##
+    # @api public
+    #
+    # Allow admin users to manage {Hyrax::Feature} data.
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @example
+    #   self.ability_logic += [:feature_abilities]
     def feature_abilities
       can :manage, Hyrax::Feature if admin?
     end
 
+    ##
+    # @api public
+    #
+    # Allow users to read their own {Hyrax::Operation} data.
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @example
+    #   self.ability_logic += [:operation_abilities]
     def operation_abilities
       can :read, Hyrax::Operation, user_id: current_user.id
     end
 
-    # We check based on the depositor, because the depositor may not have edit
-    # access to the work if it went through a mediated deposit workflow that
-    # removes edit access for the depositor.
+    ##
+    # @api public
+    #
+    # Allow depositors to create and destroy {Trophy} data.
+    #
+    # @note We check based on the depositor, because the depositor may not have
+    #   edit access to the work if it went through a mediated deposit workflow
+    #   that removes edit access for the depositor.
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @todo the note isn't very convincing. why do depositors without edit
+    #   access need trophy management abilities?
+    #
+    # @example
+    #   self.ability_logic += [:trophy_abilities]
     def trophy_abilities
       can [:create, :destroy], Trophy do |t|
         doc = Hyrax::SolrService.search_by_id(t.work_id, fl: 'depositor_ssim')
@@ -169,6 +294,17 @@ module Hyrax
       end
     end
 
+    ##
+    # @api public
+    #
+    # Allow editor to view versions and the file manager; block non-admins from
+    # indexing embargo and lease.
+    #
+    # @note included in {.ability_logic} by default.
+    # @todo make this do one thing. extract embargo/lease rules elsewhere.
+    #
+    # @example
+    #   self.ability_logic += [:curation_concerns_permissions]
     def curation_concerns_permissions
       # user can version if they can edit
       alias_action :versions, to: :update
@@ -179,6 +315,15 @@ module Hyrax
       cannot :index, Hydra::AccessControls::Lease
     end
 
+    ##
+    # @api public
+    #
+    # Give admins sweeping permissions.
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @example
+    #   self.ability_logic += [:admin_permissions]
     def admin_permissions
       return unless admin?
       # TODO: deprecate this. We no longer have a dashboard just for admins
@@ -193,13 +338,39 @@ module Hyrax
       can :manage, :collection_types
     end
 
-    # TODO: elr - How is this used?  How does it fit with collection participants?
+    ##
+    # @api public
+    #
+    # Allow registered users to +:collect+ everything, and to +:files+ thing
+    # they can read.
+    #
+    # @note included in {.ability_logic} by default.
+    #
+    # @todo what in the world does it mean to +:files+? what does "members will
+    #   be filtered separately" mean?
+    #
+    # @example
+    #   self.ability_logic += [:add_to_collection]
     def add_to_collection
       return unless registered_user?
       alias_action :files, to: :read # members will be filtered separately
       can :collect, :all
     end
 
+    # @!endgroup
+
+    # @return [Boolean] true if the user has at least one admin set they can deposit into.
+    def admin_set_with_deposit?
+      ids = PermissionTemplateAccess.for_user(ability: self,
+                                              access: ['deposit', 'manage'])
+                                    .joins(:permission_template)
+                                    .select(:source_id)
+                                    .distinct
+                                    .pluck(:source_id)
+      query = "_query_:\"{!raw f=has_model_ssim}AdminSet\" AND {!terms f=id}#{ids.join(',')}"
+      Hyrax::SolrService.count(query).positive?
+    end
+
     def registered_user?
       return false if current_user.guest?
       user_groups.include? registered_group_name