Ruby: Declarative_authorization polymorphic associations

Question

I have two models (element and theme). They both belong to the third user model with the has_many association (the User has many topics and elements). Both Item and Theme are_many: images.

The image model is a polymorphic association, so the table has imageable_id and imageable_type columns. If I had both elements with id 1 and the theme with id 1, the table would look like

id imageable_id imageable_type ------------------------------------ 1 1 Item 2 1 Theme 

I use declarative_authorization to re-record SQL queries in my database so that users do not access items outside their account. I would like to write an authorization rule that allows the user to read the image only if he can read the item that belongs to them. It seems I cannot get the correct syntax (maybe it is not supported):

 has_permission_on [:images], :to => [:manage], :join_as => :and do if_attribute :imageable => is { "Item" } if_permitted_to :manage, :items # Somehow I need to tell declarative_auth to imageable_id is an item_id in this case. end 

Then I will have another rule imitating above, but for those:

 has_permission_on [:images], :to => [:manage], :join_as => :and do if_attribute :imageable => is { "Theme" } if_permitted_to :manage, :themes # Somehow I need to tell declarative_auth to imageable_id is a theme_id in this case. end 

Any ideas? Thanks in advance!

• Korit Malin

Answer 1

It seems that you made a mistake in the has_permission_on method

How I checked has_permission_on and if_attribute

  has_permission_on(:images, :to => :manage, :join_as => :and) do if_attribute :imageable => "Item" if_permitted_to :manage, :items end 

I hope you enjoy this help.