code-corps/code-corps-api

defmodule CodeCorps.Policy.UserTask do
  @moduledoc """
  Represents an authorization policy for performing actions on UserTask records.
  Used to authorize a controller action.
  """
  import CodeCorps.Policy.Helpers,
    only: [
      contributed_by?: 2,
      get_project: 1,
      get_task: 1,
      task_authored_by?: 2
    ]

  alias CodeCorps.{UserTask, User}
  alias Ecto.Changeset

  @spec create?(User.t, Changeset.t) :: boolean
  def create?(%User{} = user, params) do
    cond do
      params |> get_task |> task_authored_by?(user) -> true
      params |> get_task |> get_project |> contributed_by?(user) -> true
      true -> false
    end
  end

  @spec update?(User.t, UserTask.t) :: boolean
  def update?(%User{} = user, %UserTask{} = user_task) do
    cond do
      user_task |> get_task |> task_authored_by?(user) -> true
      user_task |> get_task |> get_project |> contributed_by?(user) -> true
      true -> false
    end
  end

  @spec delete?(User.t, UserTask.t) :: boolean
  def delete?(%User{} = user, %UserTask{} = user_task) do
    cond do
      user_task |> get_task |> task_authored_by?(user) -> true
      user_task |> get_task |> get_project |> contributed_by?(user) -> true
      true -> false
    end
  end
end