app/serializers/deploy_keys/deploy_key_entity.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

# frozen_string_literal: true

module DeployKeys
  class DeployKeyEntity < BasicDeployKeyEntity
    expose :deploy_keys_projects, using: DeployKeysProjectEntity do |deploy_key|
      deploy_key.deploy_keys_projects.select do |deploy_key_project|
        !deploy_key_project.project&.pending_delete? &&
        (allowed_to_read_project?(deploy_key_project.project) || options[:user].can_admin_all_resources?)
      end
    end

    private

    def allowed_to_read_project?(project)
      if options[:readable_project_ids]
        options[:readable_project_ids].include?(project.id)
      else
        Ability.allowed?(options[:user], :read_project, project)
      end
    end
  end
end