tramway-api 1.7.1.3 → 1.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 53451b4721b855866ba93863ecf3cb03ddd935a9d899c9e62f8bb541f8b42eb7
-  data.tar.gz: 2f690a27dc53bf3237f55502c82c6a4a1cd94be1992fe1b9832241bbcd746718
+  metadata.gz: fdcaae068ee8dbb36b6cfd6a85c414d5356c4e25d5d9404d8340f1093e18a786
+  data.tar.gz: 893e1421c8296743740e969d7740a536b98cca1c3f308b3b84c2959c717996c7
 SHA512:
-  metadata.gz: 813983c93febd1d95e5d515feac93241d23c3d4954e525c64d366c33245c6fca98b0e5ca254ff9640f4b546084987e9f992d8d3d58fb39995d0b509a774e63b0
-  data.tar.gz: d9ea1ba2d67f3565de42a73805230a0ccff7effab2592482ff8d5745cebd0925b9332e61b19738f45751916da1520e623498259f6b96ea20993678e929e8a4dc
+  metadata.gz: 68691b7551fb533604c7aafb6cb87d0b6770940c6da3d053800b55c6aeb0d191d8c377fe0a00581fb5dcd20206fa0483a1b47205403c9f781da88a72a1161bb7
+  data.tar.gz: b7988845eb7752b6e1f82d3956d52f2d13f419a221ee4aa7f1a4e0bea984417d61b84446b32d4b12cae68ffdf27b28ba0db16d4ff28901b6cc00171ce27d386a

data/app/controllers/tramway/api/v1/records_controller.rb

@@ -29,7 +29,7 @@ module Tramway::Api::V1
     end
 
     def update
-      record_form = form_class.new model_class.active.find_by! uuid: params[:id]
+      record_form = form_class.new record
       if record_form.submit snake_case params[:data][:attributes]
         render json: record_form.model,
                serializer: serializer_class,
@@ -41,7 +41,6 @@ module Tramway::Api::V1
     end
 
     def show
-      record = model_class.active.find_by! uuid: params[:id]
       render json: record,
              serializer: serializer_class,
              include: '*',
@@ -49,7 +48,6 @@ module Tramway::Api::V1
     end
 
     def destroy
-      record = model_class.active.find_by! uuid: params[:id]
       record.remove
       render json: record,
              serializer: serializer_class,
@@ -58,25 +56,46 @@ module Tramway::Api::V1
     end
 
     private
+    
+    def record
+      if params[:id].present?
+        @record = model_class.find_by! uuid: params[:id]
+      end
+    end
 
     def check_available_model_class
-      head(:unprocessable_entity) && return unless model_class
+      unless model_class
+        head(:unauthorized) && return unless current_user
+        head(:unprocessable_entity) && return
+      end
     end
 
     def check_available_model_action
-      open_actions = Tramway::Api.available_models[model_class.to_s][:open]&.map(&:to_s) || []
-      closed_actions = Tramway::Api.available_models[model_class.to_s][:closed]&.map(&:to_s) || []
-      head(:unprocessable_entity) && return unless action_name.in? open_actions + closed_actions
+      action_is_available = checking_roles.map do |role|
+        Tramway::Api.action_is_available?(
+          record: record,
+          action: action_name.to_sym,
+          project: (@application_engine || @application.name),
+          role: role,
+          model_name: params[:model],
+          current_user: current_user
+        )
+      end.include? true
+
+      head(:unprocessable_entity) && return unless action_is_available
     end
 
     def authenticate_user_if_needed
-      if action_name.in?(Tramway::Api.available_models[model_class.to_s][:closed]&.map(&:to_s) || []) && !current_user
-        head(:unauthorized) && return
-      end
+      action_is_open = Tramway::Api.action_is_available?(
+        action: action_name.to_sym,
+        project: (@application_engine || @application.name),
+        model_name: params[:model]
+      )
+      head(:unauthorized) && return if !current_user && !action_is_open
     end
 
     def model_class
-      if params[:model].to_s.in? ::Tramway::Api.available_models.keys.map(&:to_s)
+      if params[:model].to_s.in? available_models_for_current_user
         begin
           params[:model].constantize
         rescue ActiveSupport::Concern::MultipleIncludedBlocks => e
@@ -85,6 +104,16 @@ module Tramway::Api::V1
       end
     end
 
+    def available_models_for_current_user
+      checking_roles.reduce([]) do |models, role|
+        models += ::Tramway::Api.available_models(role: role).map(&:to_s) 
+      end
+    end
+
+    def checking_roles
+      [ :open, current_user&.role ].compact
+    end
+
     def decorator_class(model_name = nil)
       "#{model_name || model_class}Decorator".constantize
     end

data/lib/tramway/api.rb

@@ -1,10 +1,15 @@
 # frozen_string_literal: true
 
 require 'tramway/api/engine'
+require 'tramway/api/records_models'
+require 'tramway/api/singleton_models'
 
 module Tramway
   module Api
     class << self
+      include ::Tramway::Api::RecordsModels
+      include ::Tramway::Api::SingletonModels
+
       def auth_config
         @@auth_config ||= [{ user_model: ::Tramway::User::User, auth_attributes: :email }]
       end
@@ -31,16 +36,48 @@ module Tramway
         end
       end
 
-      def set_available_models(**models)
-        @@available_models ||= {}
-        models = models.reduce({}) do |hash, pair|
-          hash.merge! pair[0].to_s.camelize => pair[1]
+      def get_models_by_key(checked_models, project, role)
+        unless project.present?
+          error = Tramway::Error.new(
+            plugin: :admin,
+            method: :get_models_by_key,
+            message: "Looks like you have not create at lease one instance of #{Tramway::Core.application.model_class} model"
+          )
+          raise error.message
         end
-        @@available_models.merge! models
+        checked_models && checked_models != [] && checked_models[project][role]&.keys || []
+      end
+
+      def models_array(models_type:, role:)
+        instance_variable_get("@#{models_type}_models")&.map do |projects|
+          projects.last[role]&.keys
+        end&.flatten || []
+      end
+
+      def action_is_available?(record: nil, project:, role: :open, model_name:, action:, current_user: nil)
+        actions = select_actions(project: project, role: role, model_name: model_name)
+        availability = actions&.select do |a|
+          if a.is_a? Symbol
+            a == action.to_sym
+          elsif a.is_a? Hash
+            a.keys.first.to_sym == action.to_sym
+          end
+        end&.first
+
+        return false unless availability.present?
+        return true if availability.is_a? Symbol
+
+        availability.values.first.call record, current_user
       end
 
-      def available_models
-        @@available_models ||= {}
+      def select_actions(project:, role:, model_name:)
+        stringify_keys(@singleton_models&.dig(project, role))&.dig(model_name) || stringify_keys(@available_models&.dig(project, role))&.dig(model_name)
+      end
+
+      def stringify_keys(hash)
+        hash&.reduce({}) do |new_hash, pair|
+          new_hash.merge! pair[0].to_s => pair[1]
+        end
       end
     end
   end

data/lib/tramway/api/records_models.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+module Tramway::Api::RecordsModels
+  def set_available_models(*models, project:, role: :open)
+    @available_models ||= {}
+    @available_models[project] ||= {}
+    @available_models[project][role] ||= {}
+    models.each do |model|
+      if model.class == Class
+        @available_models[project][role].merge! model => %i[index show update create destroy]
+      elsif model.class == Hash
+        @available_models[project][role].merge! model
+      end
+    end
+    @available_models = @available_models.with_indifferent_access
+  end
+
+  def available_models_for(project, role: :open)
+    models = get_models_by_key(@available_models, project, role)
+    if project_is_engine?(project)
+      models += engine_class(project).dependencies.map do |dependency|
+        if @available_models&.dig(dependency, role).present?
+          @available_models&.dig(dependency, role).keys
+        else
+          error = Tramway::Error.new(
+            plugin: :admin,
+            method: :available_models_for,
+            message: "There is no dependency `#{dependency}` for plugin: #{project}. Please, check file `tramway-#{project}/lib/tramway/#{project}/#{project}.rb`"
+          )
+          raise error
+        end
+      end.flatten.compact
+    end
+    models
+  end
+
+  def available_models(role:)
+    models_array models_type: :available, role: role
+  end
+end

data/lib/tramway/api/singleton_models.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+module Tramway::Api::SingletonModels
+  def set_singleton_models(*models, project:, role: :open)
+    @singleton_models ||= {}
+    @singleton_models[project] ||= {}
+    @singleton_models[project][role] ||= {}
+    models.each do |model|
+      if model.class == Class
+        @singleton_models[project][role].merge! model => %i[index show update create destroy]
+      elsif model.class == Hash
+        @singleton_models[project][role].merge! model
+      end
+    end
+    @singleton_models = @singleton_models.with_indifferent_access
+  end
+
+  def singleton_models_for(project, role: :open)
+    models = get_models_by_key(@singleton_models, project, role)
+    if project_is_engine?(project)
+      models += engine_class(project).dependencies.map do |dependency|
+        @singleton_models&.dig(dependency, role)&.keys
+      end.flatten.compact
+    end
+    models
+  end
+
+  def singleton_models(role:)
+    models_array models_type: :singleton, role: role
+  end
+end

data/lib/tramway/api/version.rb

@@ -2,6 +2,6 @@
 
 module Tramway
   module Api
-    VERSION = '1.7.1.3'
+    VERSION = '1.8'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tramway-api
 version: !ruby/object:Gem::Version
-  version: 1.7.1.3
+  version: '1.8'
 platform: ruby
 authors:
 - Pavel Kalashnikov
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-03-16 00:00:00.000000000 Z
+date: 2020-03-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: active_model_serializers
@@ -81,6 +81,8 @@ files:
 - lib/tasks/tramway/api_tasks.rake
 - lib/tramway/api.rb
 - lib/tramway/api/engine.rb
+- lib/tramway/api/records_models.rb
+- lib/tramway/api/singleton_models.rb
 - lib/tramway/api/version.rb
 homepage: https://github.com/kalashnikovisme/tramway-dev
 licenses: []