28 lines
738 B
Ruby
28 lines
738 B
Ruby
|
class Carto::Api::PermissionsController < ::Api::ApplicationController
|
||
|
|
extend Carto::DefaultRescueFroms
|
||
|
|
|
||
|
|
ssl_required :update
|
||
|
|
|
||
|
|
def update
|
||
|
|
permission = Carto::Permission.where(id: params[:id]).first
|
||
|
|
|
||
|
|
return head(404) if permission.nil?
|
||
|
|
return head(401) unless permission.is_owner?(current_user)
|
||
|
|
|
||
|
|
begin
|
||
|
|
acl = params[:acl]
|
||
|
|
acl ||= []
|
||
|
|
permission.acl = acl.map(&:deep_symbolize_keys)
|
||
|
|
rescue CartoDB::PermissionError => e
|
||
|
|
log_error(exception: e)
|
||
|
|
return head(400)
|
||
|
|
end
|
||
|
|
|
||
|
|
permission.save!
|
||
|
|
|
||
|
|
render json: Carto::Api::PermissionPresenter.new(permission,
|
||
|
|
current_viewer: current_viewer, fetch_user_groups: true).to_poro
|
||
|
|
end
|
||
|
|
|
||
|
|
end
|