summaryrefslogtreecommitdiff
path: root/app/graphql/types/permission_types/base_permission_type.rb
blob: 934ed572e56cb633e6620c191f8612df06b9911d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
module Types
  module PermissionTypes
    class BasePermissionType < BaseObject
      extend Gitlab::Allowable

      RESOLVING_KEYWORDS = [:resolver, :method, :hash_key, :function].to_set.freeze

      def self.abilities(*abilities)
        abilities.each { |ability| ability_field(ability) }
      end

      def self.ability_field(ability, **kword_args)
        unless resolving_keywords?(kword_args)
          kword_args[:resolve] ||= -> (object, args, context) do
            can?(context[:current_user], ability, object, args.to_h)
          end
        end

        permission_field(ability, **kword_args)
      end

      def self.permission_field(name, **kword_args)
        kword_args = kword_args.reverse_merge(
          name: name,
          type: GraphQL::BOOLEAN_TYPE,
          description: "Whether or not a user can perform `#{name}` on this resource",
          null: false)

        field(**kword_args)
      end

      def self.resolving_keywords?(arguments)
        RESOLVING_KEYWORDS.intersect?(arguments.keys.to_set)
      end
      private_class_method :resolving_keywords?
    end
  end
end