mezis/appfab

# encoding: UTF-8
class Ability
  include CanCan::Ability

  def initialize(user)
    user ||= User.new

    # Idea permissions
    draft_or_submitted = [:draft, :submitted].map { |sym| IdeaStateMachine.state_value(sym) }
    can :read, Idea, account_id: user.account_id
    if user.plays?(:submitter)
      can :create,  Idea, account_id: user.account_id
      can :update,  Idea, author_id: user.id, state: draft_or_submitted
      can :destroy, Idea, author_id: user.id, state: draft_or_submitted
    end

    if user.plays?(:benevolent_dictator)
      can :update,  Idea, account_id: user.account_id, state: draft_or_submitted
    end

    can :vote, Idea, account_id: user.account_id

    can :move, Idea, product_manager: user.id
    can :move, Idea, author_id: user.id
    can :move, Idea if user.plays?(:account_owner)

    can :take_over, Idea do |idea|
      user.plays?(:product_manager) &&
      (idea.account_id == user.account_id) &&
      (idea.product_manager_id != user.id)
    end

    # Comment
    can    :create, Comment, idea: { author: { account_id: user.account_id } }
    can    :read,   Comment, author: { account_id: user.account_id }
    can    :vote,   Comment
    cannot :vote,   Comment, author_id: user.id
    can    [:update, :destroy], Comment do |r|
      r.author_id == user.id && r.recently_created?
    end

    # Attachment
    can :read, Attachment
    [:create, :update, :destroy].each do |action|
      can action, Attachment do |r|
        can?(:update, r.owner)
      end
    end

    # Sizing / Vetting
    if user.plays?(:product_manager, :architect)
      can :size,     Idea
      can :create,   Vetting do |vetting|
        vetting.idea.author_id != user.id
      end

      can :destroy,  Vetting do |r|
        r.user_id == user.id && r.recently_created?
      end
    end

    # Vote
    can :destroy, Vote do |r|
      r.user_id == user.id && r.recently_created?
    end

    # Idea lifecycle
    can :bury,           Idea, account_id: user.account_id if user.plays?(:product_manager)
    can :revive,         Idea, account_id: user.account_id if user.plays?(:product_manager)
    can :archive,        Idea, account_id: user.account_id if user.plays?(:product_manager)
    can :pick,           Idea, account_id: user.account_id if user.plays?(:product_manager)
    can :force_approve,  Idea, product_manager_id: user.id
    can :design,         Idea, product_manager_id: user.id
    can :implement,      Idea, product_manager_id: user.id
    can :force_sign_off, Idea, product_manager_id: user.id
    can :deliver,        Idea, product_manager_id: user.id
    can :abort,          Idea, product_manager_id: user.id

    if user.plays?(:benevolent_dictator)
      can :approve,  Idea
      can :sign_off, Idea
      can :abort,     Idea
    end

    # User
    can :read,   User, account_id:user.account_id, state:User.state_value(:visible)
    can :update, User, id:user.id
    cannot :none, User

    if user.plays?(:account_owner)
      can [:read, :update, :update_admin, :destroy], User, account_id: user.account_id
    end

    # User role
    can :read, User::Role
    if user.plays?(:account_owner)
      can [:create, :destroy], User::Role
    end

    # Notification
    can :read,   Notification::Base, recipient_id: user.id
    can :update, Notification::Base, recipient_id: user.id

    # Account
    can :create, Account
    can :read, Account, id: user.account_id
    if user.plays?(:account_owner)
      can [:update, :destroy], Account, id: user.account_id
    end

    can :invite if user.plays?(:account_owner)
  end

  private

  def draft_or_submitted(idea)
    [:draft, :submitted].include?(idea.state_machine.state_name)
  end
end