PhoenixKitAgent.Web.Access (PhoenixKitAgent v0.1.0)

The permission checks of the module's admin pages, made again on every event.

A LiveView keeps the scope it got at mount, so a role taken away while the page is open, a switch to another role or a logout would still read as the rights of the mount. Each check here asks for two scopes and passes only if both hold:

the socket's (:phoenix_kit_current_scope, set by core's on_mount);
the scope of the session as it is now (PhoenixKit.Users.Auth.SessionRef.scope_for_session/2): the session must still be live, its user active and confirmed, and the scope is narrowed to the role the session acts as — not the user's default role.

The page calls assign_session/2 in its mount/3. The session reference is read from the signed session only in the connected mount; the static render has none and is checked against the socket's scope alone, which core's on_mount has just built from this session. A connected page without a live session is refused everything.

Summary

Functions

assign_session(socket, session)

Keeps the reference of the session the page runs in (see the moduledoc): read from session in the connected mount, nil in the static render.

may_manage?(socket)

Whether the signed-in session holds agent.manage now (see the moduledoc).

owner?(socket)

Whether the signed-in session is an Owner's now (see the moduledoc).

session_scope(socket)

The scope of the session as it is now (nil if it can no longer act, see the moduledoc): what a context function that checks a permission itself is given.

user_uuid(socket)

The uuid of the signed-in user, or nil.