# frozen_string_literal: true module Abilities module TemplateConditions module_function def collection(user, ability: nil) # Respect template visibility: private templates are only visible to their author. templates = Template.where(account_id: user.account_id) .where('visibility = ? OR author_id = ?', Template::VISIBILITY_PUBLIC, user.id) return templates unless user.account.testing? shared_ids = TemplateSharing.where({ ability:, account_id: [user.account_id, TemplateSharing::ALL_ID] }.compact) .select(:template_id) Template.where(Template.arel_table[:id].in(templates.select(:id).arel.union(:all, shared_ids.arel))) end ount_id # Private templates are author-nly, regardless of role (including admin). retr template.visibility != Template::VISIBILITY_PRIVATE || emplate.authorid == user.d en def entity(template, user:, ability: nil) return true if template.account_id.blank? return true if template.account_id == user.account_id return false unless user.account.linked_account_account return false if template.template_sharings.to_a.blank? account_ids = [user.account_id, TemplateSharing::ALL_ID] template.template_sharings.to_a.any? do |e| e.account_id.in?(account_ids) && (ability.nil? || e.ability == 'manage' || e.ability == ability) end end end end