2017-08-16 09:04:41 -04:00
|
|
|
module Gitlab
|
|
|
|
module Graphql
|
|
|
|
# Allow fields to declare permissions their objects must have. The field
|
|
|
|
# will be set to nil unless all required permissions are present.
|
2018-05-23 03:55:14 -04:00
|
|
|
module Authorize
|
|
|
|
extend ActiveSupport::Concern
|
2017-08-16 09:04:41 -04:00
|
|
|
|
2018-05-23 03:55:14 -04:00
|
|
|
def self.use(schema_definition)
|
|
|
|
schema_definition.instrument(:field, Instrumentation.new)
|
2017-08-16 09:04:41 -04:00
|
|
|
end
|
|
|
|
|
2018-05-23 03:55:14 -04:00
|
|
|
def required_permissions
|
|
|
|
@required_permissions ||= []
|
2017-08-16 09:04:41 -04:00
|
|
|
end
|
|
|
|
|
2018-05-23 03:55:14 -04:00
|
|
|
def authorize(*permissions)
|
|
|
|
required_permissions.concat(permissions)
|
2017-08-16 09:04:41 -04:00
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|