ニコニコ漫画と認可(後編)

class Comic < ApplicationRecord
  def official?
    is_official
  end

  def to_each_type
    if official?
      becomes(Comic::OfficialComic)
    else
      becomes(Comic::UserComic)
    end
  end

  # ユーザー漫画と公式漫画に共通のロジック
end

class Comic::UserComic < Comic
  # ユーザー漫画に固有のロジック
end

class Comic::OfficialComic < Comic
  # 公式漫画に固有のロジック
end

class HogesController < ApplicationRecord
  def update
    if hoge_id?(params[:id])
      Hoge.find(params[:id]).update!(update_params)
    else
      Fuga.find(params[:id]).update!(update_params)
    end
  end
end

class FreeViewingTermsController < ApplicationRecord
  def create
    ActiveRecord::Base.transaction do
      create_params[:requests].each do |create_param|
        FreeViewingTerm.create!(create_param)
      end
    end
  end
end

class EpisodesController
  def create
    Authorizer.authorize!(
      user_id: parse_authorization_header['user_id'],
      action: Enums::Authorizers::Actions::Episode::CREATE,
      target_ids: Authorizers::TargetIds::Episode::Create.new(comic_id: create_params['comic_id'])
    )

    @episode = Episodes.create!(create_params)
  end
end

module Authorizer
  def self.authorize(action:, user_id:, target_ids: [])
    target_ids = Array(target_ids)
    case action.target
    when Enums::Authorizers::Target::EPISODE
      Authorizer::EpisodeAuthorizer.authorize(user_id: user_id, action: action, target_ids: target_ids)
    when Enums::Authorizers::Target::OFFICIAL_COMIC
      Authorizer::OfficialComicAuthorizer.authorize(user_id: user_id, action: action, target_ids: target_ids)
    # その他の客体のAuthorizer
    end
  end

  def self.authorize!(action:, user_id:, target_ids: [])
    raise NicomangaError::ResourceForbiddenError unless authorize(user_id: user_id, action: action, target_ids: target_ids)

    true
  end
end

class Enums::Authorizers::Target < Inum::Base
  define :OFFICIAL_COMIC
  define :USER_COMIC
  define :EPISODE
  # その他の客体
end

class Enums::Authorizers::Actions::Episode < Inum::Base
  def target
    Enums::Authorizers::Target::EPISODE
  end

  define :CREATE
  define :DESTROY
  define :INDEX
  define :SHOW
  define :UPDATE
end

class Authorizers::TargetIds::Episode::Create
  attr_reader :comic_id

  def initialize(comic_id:)
    @comic_id = comic_id
  end

  def eql?(other)
    hash == other.hash
  end

  def hash
    {
      comic_id: @comic_id
    }.hash
  end
end

class UserAuthority < ApplicationRecord
  attribute :user_id, :integer # 権限を付与する主体のID

  enum target_type: [ # 権限を付与する範囲
    :COMIC,                # 漫画作品単体
    :OFFICIAL_COMIC_GROUP, # 公式漫画作品グループ
    :ALL_OFFICIAL_COMIC,   # 全公式漫画作品
  ]
  attribute :target_id, :integer # 権限を付与する範囲のID

  enum action: [ # 付与する権限の種類
    :WATCH,   # 非公開状態の作品の閲覧ができる
    :PUBLISH, # 公開期間の設定ができる
    :EDIT,    # 新規エピソードの作成と原稿納入、作品のメタ情報の変更などができる
    :ALL,     # 全ての操作ができる
    # その他の権限
  ]
end

module Authorizer::EpisodeAuthorizer
  def self.authorize(user_id: user_id, action: action, target_ids: target_ids)
    case action.target
    when Enums::Authorizers::Actions::Episode::CREATE
      create?(user_id: user_id, action: action, target_ids: target_ids)
    when Enums::Authorizers::Actions::Episode::UPDATE
      update?(user_id: user_id, action: action, target_ids: target_ids)
    # その他の操作の認可処理への振り分け
    end
  end

  def self.create?(user_id:, action:, target_ids:)
    actions_of_user_authority_to_be_allow = [
      Enums::UserAuthority::Action::Edit,
      Enums::UserAuthority::Action::All,
    ]

    authorities = UserAuthority.where(user_id: user_id, action: actions_of_user_authority_to_be_allow)
    return true if authorized_by_all_official_comic_authority?(authorities, actions_of_user_authority_to_be_allow)

    official_comics = official_comics_by_comic_ids(comic_ids: target_ids.map(&:comic_id))

    official_comics -= authorized_official_comics_by_official_comic_group_authority(authorities, official_comics, actions_of_user_authority_to_be_allow)
    official_comics -= authorized_official_comics_by_comic_authority(authorities, official_comics, actions_of_user_authority_to_be_allow)

    official_comics.empty?
  end
  # その他の操作の認可処理の実装
end

describe Authorizer do
  subject do
    Authorizer.authorize(
      user_id: request_user.id,
      action: action,
      target_ids: target_ids
    )
  end

  let :comic do
    create(:official_comic)
  end

  describe 'Episodeについて' do
    describe 'CREATEの場合' do
      before :each do
        authority
      end

      let :request_user do
        create(:user, id: comic.user_id + 1)
      end

      let :action do
        Enums::Authorizers::Actions::Episode::CREATE
      end

      let :target_ids do
        Authorizers::TargetIds::Episode::Create.new(comic_id: comic.id)
      end

      let :authority do
        nil
      end

      it '権限がなければ認可されない' do
        expect(subject).to eq(false)
      end

      context 'comic_authorityについて' do
        let :authority do
          create(:comic_authority,
                 user: request_user,
                 target_id: comic.id,
                 action: authority_action)
        end

        where(:authority_action, :expected_result) do
          [
            [Enums::UserAuthority::Action::Watch, false],
            [Enums::UserAuthority::Action::Publish, false],
            [Enums::UserAuthority::Action::Edit, true],
            [Enums::UserAuthority::Action::All, true],
          ]
        end

        with_them do
          it do
            expect(subject).to eq(expected_result)
          end
        end
      end

      # official_comic_group_authorityとall_official_comic_authorityについては省略
    end
  end
end