forked from External/greenlight
4fc1714db8
* Add roles editor * Add colour selection ability to roles * Add ability to assign roles to users in the UI * Remove rolify and replace it with our own custom roles implemenation * - Fix all existing roles functionality - Fix super admins * Fix bugs with new customers not have default roles * Add can't create room setting * Code improvements * Fix migration * Add tests for new methods * Translate reserved role names * Pull roles from saml/ldap * Fix rspec * Fix scrutinizer issues * Fix email promoted/demoted tests * Apply comments * Redirect directly to the main room * Add comments
49 lines
1.8 KiB
Ruby
49 lines
1.8 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
# BigBlueButton open source conferencing system - http://www.bigbluebutton.org/.
|
|
#
|
|
# Copyright (c) 2018 BigBlueButton Inc. and by respective authors (see below).
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify it under the
|
|
# terms of the GNU Lesser General Public License as published by the Free Software
|
|
# Foundation; either version 3.0 of the License, or (at your option) any later
|
|
# version.
|
|
#
|
|
# BigBlueButton is distributed in the hope that it will be useful, but WITHOUT ANY
|
|
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
|
|
# PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Lesser General Public License along
|
|
# with BigBlueButton; if not, see <http://www.gnu.org/licenses/>.
|
|
|
|
class Ability
|
|
include CanCan::Ability
|
|
|
|
def initialize(user)
|
|
if !user
|
|
cannot :manage, AdminsController
|
|
elsif user.has_role? :super_admin
|
|
can :manage, :all
|
|
else
|
|
highest_role = user.highest_priority_role
|
|
if highest_role.can_edit_site_settings
|
|
can [:index, :site_settings, :server_recordings, :branding, :coloring, :coloring_lighten, :coloring_darken,
|
|
:room_authentication, :registration_method, :room_limit, :default_recording_visibility], :admin
|
|
end
|
|
|
|
if highest_role.can_edit_roles
|
|
can [:index, :roles, :new_role, :change_role_order, :update_role, :delete_role], :admin
|
|
end
|
|
|
|
if highest_role.can_manage_users
|
|
can [:index, :roles, :edit_user, :promote, :demote, :ban_user, :unban_user,
|
|
:approve, :invite], :admin
|
|
end
|
|
|
|
if !highest_role.can_edit_site_settings && !highest_role.can_edit_roles && !highest_role.can_manage_users
|
|
cannot :manage, AdminsController
|
|
end
|
|
end
|
|
end
|
|
end
|