af0e6be943
Adds 'can access ACLs' which means one of two things 1. When ACLs are disabled I can access the 'please enable ACLs' page 2. When ACLs are enabled, its the same as canRead
32 lines
872 B
JavaScript
32 lines
872 B
JavaScript
import BaseAbility from './base';
|
|
import { inject as service } from '@ember/service';
|
|
|
|
export default class ACLAbility extends BaseAbility {
|
|
@service('env') env;
|
|
|
|
resource = 'acl';
|
|
segmented = false;
|
|
// Access is very similar to read, but when ACLs are disabled you still need
|
|
// access to ACLs in order to see the ACLs disabled page, which is accessing
|
|
// the ACLs area, but without read
|
|
get canAccess() {
|
|
return this.env.var('CONSUL_ACLS_ENABLED') ? this.canRead : true;
|
|
}
|
|
|
|
get canRead() {
|
|
return this.env.var('CONSUL_ACLS_ENABLED') && super.canRead;
|
|
}
|
|
|
|
get canDuplicate() {
|
|
return this.env.var('CONSUL_ACLS_ENABLED') && super.canWrite;
|
|
}
|
|
|
|
get canDelete() {
|
|
return this.env.var('CONSUL_ACLS_ENABLED') && this.item.ID !== 'anonymous' && super.canWrite;
|
|
}
|
|
|
|
get canUse() {
|
|
return this.env.var('CONSUL_ACLS_ENABLED');
|
|
}
|
|
}
|