class ForemanTasks::Dynflow::ConsoleAuthorizer
Public Class Methods
from_env(env)
click to toggle source
# File lib/foreman_tasks/dynflow/console_authorizer.rb, line 10 def self.from_env(env) new(Rack::Request.new(env)) end
new(request)
click to toggle source
# File lib/foreman_tasks/dynflow/console_authorizer.rb, line 14 def initialize(request) @rack_request = request @user_id = @rack_request.session[:user] @expires_at = @rack_request.session[:expires_at] @user = User.unscoped.where(:id => @user_id).first unless session_expired? end
Public Instance Methods
allow?()
click to toggle source
# File lib/foreman_tasks/dynflow/console_authorizer.rb, line 21 def allow? @user && (unlimited_edit? || authorized_for_task?) end
Private Instance Methods
extract_task()
click to toggle source
# File lib/foreman_tasks/dynflow/console_authorizer.rb, line 55 def extract_task dynflow_id = @rack_request.path_info[/^\/([\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12})/, 1] unless dynflow_id.empty? ForemanTasks::Task::DynflowTask.where(:external_id => dynflow_id).first end end
session_expired?()
click to toggle source
# File lib/foreman_tasks/dynflow/console_authorizer.rb, line 27 def session_expired? Time.now.to_i > @expires_at.to_i end
unlimited_edit?()
click to toggle source
# File lib/foreman_tasks/dynflow/console_authorizer.rb, line 31 def unlimited_edit? return true if @user.admin? # users with unlimited edit_foreman_tasks can operate with the # console no matter what task it is... edit_permission = Permission.where(:name => :edit_foreman_tasks, :resource_type => ForemanTasks::Task.name).first if @user.filters.joins(:filterings).unlimited.where('filterings.permission_id' => edit_permission).first true end end