718370f4c9
Allow plugin to take an etc_type keyword argument for using the TYPE_ETC ubid type, and remove the separate definitions in every model that uses the TYPE_ETC ubid type. This was the cleanest way to DRY things up. You cannot extend the models with a module to do this before including ResourceMethods, because then ResourceMethods::ClassMethods will override it, and you cannot extend the models with a module to do this after including ResourceMethods, because the inclusion will not work correctly due to the eager definition of @ubid_format. Best reviewed without whitespace differences.
55 lines
1.4 KiB
Ruby
55 lines
1.4 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require_relative "../model"
|
|
|
|
class AccessControlEntry < Sequel::Model
|
|
many_to_one :project
|
|
|
|
plugin ResourceMethods
|
|
|
|
# use __id__ if you want the internal object id
|
|
def_column_alias :object_id, :object_id
|
|
|
|
def update_from_ubids(hash)
|
|
update(hash.transform_values { UBID.to_uuid(it) if it })
|
|
end
|
|
|
|
def validate
|
|
if project_id
|
|
{subject_id:, action_id:, object_id:}.each do |field, value|
|
|
next unless value
|
|
ubid = UBID.from_uuidish(value).to_s
|
|
|
|
model = case field
|
|
when :subject_id
|
|
SubjectTag
|
|
when :action_id
|
|
ActionTag
|
|
else
|
|
ObjectTag
|
|
end
|
|
|
|
object = ubid.start_with?("et") ? ApiKey.with_pk(value) : UBID.decode(ubid)
|
|
unless model.valid_member?(project_id, object)
|
|
errors.add(field, "is not related to this project")
|
|
end
|
|
end
|
|
end
|
|
|
|
super
|
|
end
|
|
end
|
|
|
|
# Table: access_control_entry
|
|
# Columns:
|
|
# id | uuid | PRIMARY KEY
|
|
# project_id | uuid | NOT NULL
|
|
# subject_id | uuid | NOT NULL
|
|
# action_id | uuid |
|
|
# object_id | uuid |
|
|
# Indexes:
|
|
# access_control_entry_pkey | PRIMARY KEY btree (id)
|
|
# access_control_entry_project_id_subject_id_action_id_object_id_ | btree (project_id, subject_id, action_id, object_id)
|
|
# Foreign key constraints:
|
|
# access_control_entry_project_id_fkey | (project_id) REFERENCES project(id)
|