2017-05-29 17:22:22 +01:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
|
|
|
module Authorization
|
|
|
|
extend ActiveSupport::Concern
|
2017-11-11 19:23:33 +00:00
|
|
|
|
2017-05-29 17:22:22 +01:00
|
|
|
include Pundit
|
|
|
|
|
|
|
|
def pundit_user
|
|
|
|
current_account
|
|
|
|
end
|
|
|
|
|
|
|
|
def authorize(*)
|
|
|
|
super
|
|
|
|
rescue Pundit::NotAuthorizedError
|
|
|
|
raise Mastodon::NotPermittedError
|
|
|
|
end
|
|
|
|
|
|
|
|
def authorize_with(user, record, query)
|
|
|
|
Pundit.authorize(user, record, query)
|
|
|
|
rescue Pundit::NotAuthorizedError
|
|
|
|
raise Mastodon::NotPermittedError
|
|
|
|
end
|
|
|
|
end
|