PerfectMemory/mongoid-multitenancy

module Mongoid
  module Multitenancy
    # Validates whether or not a tenant field is correct.
    #
    # @example Define the tenant validator
    #
    #   class Person
    #     include Mongoid::Document
    #     include Mongoid::Multitenancy::Document
    #     field :title
    #     tenant :client
    #
    #     validates_tenancy_of :client
    #   end
    class TenancyValidator < ActiveModel::EachValidator
      def validate_each(object, attribute, value)
        # Immutable Check
        if options[:immutable]
          if object.send(:attribute_changed?, attribute) && object.send(:attribute_was, attribute)
            object.errors.add(attribute, 'is immutable and cannot be updated')
          end
        end

        # Ownership check
        if value && Mongoid::Multitenancy.current_tenant && value != Mongoid::Multitenancy.current_tenant.id
          object.errors.add(attribute, 'not authorized')
        end

        # Optional Check
        if !options[:optional] && value.nil?
          object.errors.add(attribute, 'is mandatory')
        end
      end
    end
  end
end