ontohub/lib/ssh_access.rb

	ssh_access.rb revision 4bdd798555be86bf25e4c3f96582905b674ec106
class SshAccess

  PERMISSIONS = %w{
    read
    write
  }

  PERMISSION_MAP = {
    everyone: %w{read},
    permission: {
      all: %w{write},
      owner: [],
      editor: []
    }
  }

  class << self

    def determine_permission(requested_permission, permission, repository)
      if repository.public_rw?
        true
      elsif repository.public_r? && requested_permission == 'read'
        true
      elsif PERMISSION_MAP[:everyone].include?(requested_permission)
        true
      elsif permission
        return true if PERMISSION_MAP[:permission][:all].
          include?(requested_permission)

        role = permission.role.to_sym
        allowed_permissions = PERMISSION_MAP[:permission][role]
        allowed_permissions.include?(requested_permission)
      else
        false
      end
    end

    def extract_permission_params(params, repository)
      key_field = params[:key_id].sub("key-", "")
      requested_permission = params[:permission]
      user = User.joins(:keys).
        where(keys: {id: key_field}).first
      permission = nil
      permission = repository.highest_permission(user) if user
      [requested_permission, permission]
    end

  end

end