WGBH gated discovery solr helper logic example

catalog_controller.rb

class CatalogController < ...
   include AmericanArchive::SolrHelper::Authz
end

solr_helper_authz.rb

module AmericanArchive::SolrHelper::Authz
  def self.included(some_class)
    some_class.solr_search_params_logic += [:apply_authorization_params]
  end

  def apply_authorization_params(solr_parameters, user_parameters)
    return if current_user and (current_user.has_role?(:admin) or current_user.has_role?(:observer))  and user_parameters[:organization_id].nil?

    solr_parameters[:fq] ||= []
    if current_organization
      solr_parameters[:fq] << 'organization_id_i:(' + current_organization.id.to_s  + ')' 
      solr_parameters[:fq] << 'public_b:1' unless current_organization.has_member? current_user or (user_parameters[:persistence_token] and current_organization.persistence_token == user_parameters[:persistence_token])
    else
      # return { } if current_user <-- logged in users may see any records
      solr_parameters[:fq] << 'organization_id_i:(' + current_user.organizations.map(&:id).join(' OR ') + ')' if current_user and not current_user.organizations.empty?
      solr_parameters[:fq] << 'public_b:1' if current_user.nil? or current_user.organizations.empty?
    end

  end
end