mirror of
https://github.com/czhu12/canine.git
synced 2025-12-16 16:35:10 -06:00
46 lines
1.2 KiB
Ruby
46 lines
1.2 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
module Clusters
|
|
class VisibleToUser
|
|
extend LightService::Action
|
|
|
|
expects :account_user
|
|
promises :clusters
|
|
|
|
executed do |context|
|
|
account_user = context.account_user
|
|
user = account_user.user
|
|
account = account_user.account
|
|
|
|
# Admins can see all clusters in the account
|
|
if account_user.admin?
|
|
context.clusters = Cluster.where(account_id: account.id)
|
|
next context
|
|
end
|
|
|
|
# If account has no teams, user can see all clusters
|
|
if account.teams.empty?
|
|
context.clusters = Cluster.where(account_id: account.id)
|
|
next context
|
|
end
|
|
|
|
# Get user's teams in this account
|
|
user_teams = user.teams.where(account: account)
|
|
|
|
# If user is not in any teams, they can't see any resources
|
|
if user_teams.empty?
|
|
context.clusters = Cluster.none
|
|
next context
|
|
end
|
|
|
|
# Find clusters accessible via direct cluster access via team_resources
|
|
cluster_ids = TeamResource.where(
|
|
team: user_teams,
|
|
resourceable_type: 'Cluster'
|
|
).pluck(:resourceable_id)
|
|
|
|
context.clusters = Cluster.where(id: cluster_ids).distinct
|
|
end
|
|
end
|
|
end
|