app/models/orvos_model.rb

   1 class OrvosModel < ActiveRecord::Base
   2   self.abstract_class = true
   3
   4   include CurrentApiClient      # current_user, current_api_client, etc.
   5
   6   attr_protected :created_at
   7   attr_protected :modified_by_user
   8   attr_protected :modified_by_client
   9   attr_protected :modified_at
  10   before_update :permission_to_update
  11   before_create :update_modified_by_fields
  12   before_update :update_modified_by_fields
  13
  14   def self.kind_class(kind)
  15     kind.match(/^orvos\#(.+?)(_list|List)?$/)[1].pluralize.classify.constantize rescue nil
  16   end
  17
  18   def eager_load_associations
  19     self.class.columns.each do |col|
  20       re = col.name.match /^(.*)_kind$/
  21       if (re and
  22           self.respond_to? re[1].to_sym and
  23           (auuid = self.send((re[1] + '_uuid').to_sym)) and
  24           (aclass = self.class.kind_class(self.send(col.name.to_sym))) and
  25           (aobject = aclass.where('uuid=?', auuid).first))
  26         self.instance_variable_set('@'+re[1], aobject)
  27       end
  28     end
  29   end
  30
  31   protected
  32
  33   def permission_to_update
  34     return false unless current_user
  35     return true if current_user.is_admin
  36     if self.owner_changed? and
  37         self.owner_was != current_user.uuid and
  38         0 == Link.where(link_class: 'permission',
  39                         name: 'can_pillage',
  40                         tail_uuid: self.owner,
  41                         head_uuid: current_user.uuid).count
  42       logger.warn "User #{current_user.uuid} tried to change owner of #{self.class.to_s} #{self.uuid} to #{self.owner}"
  43       return false
  44     end
  45     self.owner == current_user.uuid or
  46       current_user.is_admin or
  47       current_user.uuid == self.uuid or
  48       Link.where(link_class: 'permission',
  49                  name: 'can_write',
  50                  tail_uuid: self.owner,
  51                  head_uuid: current_user.uuid).count > 0
  52   end
  53
  54   def update_modified_by_fields
  55     if self.changed?
  56       self.created_at ||= Time.now
  57       self.owner ||= current_user.uuid
  58       self.modified_at = Time.now
  59       self.modified_by_user = current_user.uuid
  60       self.modified_by_client = current_api_client ? current_api_client.uuid : nil
  61     end
  62   end
  63 end