datacite/volpino

# frozen_string_literal: true

class Ability
  include CanCan::Ability

  def initialize(user)
    user ||= User.new(role_id: "anonymous") # Guest user

    if user.role_id == "staff_admin"
      can :manage, :all
    elsif user.role_id == "staff_user"
      can :read, :all
      can [:update], User, id: user.id
    elsif user.role_id == "provider_admin"
      can [:read], Phrase
      can [:manage], User, provider_id: user.provider_id
      can [:manage], User, provider_id: nil
      can [:manage], Claim, orcid: user.uid
    elsif user.role_id == "provider_user"
      can [:read], Phrase
      can [:read], User
      can [:read], User, provider_id: user.provider_id
      can [:manage], Claim, orcid: user.uid
    elsif user.role_id == "client_admin"
      can [:read], Phrase
      can [:manage], User, client_id: user.client_id
      can [:manage], User, client_id: nil
      can [:manage], Claim, orcid: user.uid
    elsif user.role_id == "client_user"
      can [:read], Phrase
      can [:read], User, client_id: user.client_id
      can [:update], User, id: user.id
      can [:manage], Claim, orcid: user.uid
    elsif user.role_id == "user"
      can [:read], Phrase
      can [:read], Claim
      can [:manage], Claim, orcid: user.uid
      can %i[update show], User, id: user.id
    end
  end
end