37 lines
950 B
JavaScript
37 lines
950 B
JavaScript
/**
|
|
* Copyright (c) HashiCorp, Inc.
|
|
* SPDX-License-Identifier: MPL-2.0
|
|
*/
|
|
|
|
import BaseAbility from './base';
|
|
import { inject as service } from '@ember/service';
|
|
|
|
export default class ACLAbility extends BaseAbility {
|
|
@service('env') env;
|
|
|
|
resource = 'acl';
|
|
segmented = false;
|
|
// Access is very similar to read, but when ACLs are disabled you still need
|
|
// access to ACLs in order to see the ACLs disabled page, which is accessing
|
|
// the ACLs area, but without read
|
|
get canAccess() {
|
|
return this.env.var('CONSUL_ACLS_ENABLED') ? this.canRead : true;
|
|
}
|
|
|
|
get canRead() {
|
|
return this.env.var('CONSUL_ACLS_ENABLED') && super.canRead;
|
|
}
|
|
|
|
get canDuplicate() {
|
|
return this.env.var('CONSUL_ACLS_ENABLED') && super.canWrite;
|
|
}
|
|
|
|
get canDelete() {
|
|
return this.env.var('CONSUL_ACLS_ENABLED') && this.item.ID !== 'anonymous' && super.canWrite;
|
|
}
|
|
|
|
get canUse() {
|
|
return this.env.var('CONSUL_ACLS_ENABLED');
|
|
}
|
|
}
|