lib/stif/permission_translator.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

module Stif
  module PermissionTranslator extend self

    def translate(sso_extra_permissions)
      sso_extra_permissions
        .sort
        .flat_map(&method(:extra_permission_translation))
        .uniq
    end

    private

    def all_destructive_permissions
      destructive_permissions_for( all_resources )
    end

    def all_resources
      %w[
        access_points
        connection_links
        calendars
        footnotes
        imports
        journey_patterns
        referentials
        routes
        routing_constraint_zones
        time_tables
        vehicle_journeys
        api_keys
        compliance_controls
        compliance_controls_sets
        compliance_controls_blocks
        compliance_check_sets
      ]
    end

    def destructive_permissions_for(models)
        models.product( %w{create destroy update} ).map{ |model_action| model_action.join('.') }
    end

    def extra_permission_translation extra_permission
      translation_table.fetch(extra_permission, [])
    end

    def translation_table
      {
        "boiv:read-offer" => %w{sessions.create},
        "boiv:edit-offer" => all_destructive_permissions + %w{sessions.create},
      }
    end
  end
end