gitlabhq/lib/api/helpers.rb

42 lines
996 B
Ruby
Raw Normal View History

2012-06-27 13:32:56 +02:00
module Gitlab
module APIHelpers
def current_user
@current_user ||= User.find_by_authentication_token(params[:private_token])
end
2012-07-06 15:08:17 +02:00
def user_project
2012-07-25 14:24:28 +02:00
if @project ||= current_user.projects.find_by_id(params[:id]) ||
current_user.projects.find_by_code(params[:id])
else
error!({'message' => '404 Not found'}, 404)
end
@project
2012-07-06 15:08:17 +02:00
end
2012-09-03 13:46:29 +02:00
def paginate(object)
object.page(params[:page]).per(params[:per_page].to_i)
end
2012-06-27 13:32:56 +02:00
def authenticate!
2012-06-29 12:52:20 +02:00
error!({'message' => '401 Unauthorized'}, 401) unless current_user
2012-06-27 13:32:56 +02:00
end
2012-09-10 08:06:11 +02:00
def authorize! action, subject
unless abilities.allowed?(current_user, action, subject)
error!({'message' => '403 Forbidden'}, 403)
end
end
private
def abilities
@abilities ||= begin
abilities = Six.new
abilities << Ability
abilities
end
end
2012-06-27 13:32:56 +02:00
end
end