module GraphQR::Authorized

This module is the authorization extension created with our PolicyProvider.

To use it add `extend GraphQR::Authorized` on the `GraphQL::Schema::Object` you want it, or add it on your `BaseObject`

Public Instance Methods

authorized?(object, context) click to toggle source

The `authorized? `method always runs before resolving an object.

Our implementation adds a check on the `show?` method from the record Policy.

Calls superclass method
# File lib/graphqr/authorized.rb, line 14
def authorized?(object, context)
  policy_provider = context[:policy_provider]

  super && policy_provider.allowed?(action: :show?, record: object)
end