adjust abilities

app/controllers/admin/communication/extranets_controller.rb

@@ -58,18 +58,22 @@ class Admin::Communication::ExtranetsController < Admin::Communication::Applicat
   end
 
   def extranet_params
+    allowed_params = [
+      :name,
+      :registration_contact,
+      :logo, :logo_delete, :favicon, :favicon_delete, :color,
+      :home_sentence,
+      :terms, :privacy_policy, :cookies_policy
+    ]
+    if can?(:create, Communication::Extranet)
+      allowed_params = allowed_params + [
+        :host, :about_id, :about_type,
+        :sass,
+        :feature_alumni, :feature_library, :feature_contacts, :feature_jobs, :feature_posts,
+        :has_sso, :sso_target_url, :sso_cert, :sso_name_identifier_format, :sso_mapping, :sso_button_label
+      ]
+    end
     params.require(:communication_extranet)
-          .permit(
-            :about_id, :about_type,
-            :color, :cookies_policy,
-            :favicon, :favicon_delete, :feature_alumni, :feature_library, :feature_contacts, :feature_jobs, :feature_posts,
-            :has_sso, :host, :home_sentence,
-            :logo, :logo_delete,
-            :name,
-            :privacy_policy,
-            :registration_contact,
-            :sass, :sso_target_url, :sso_cert, :sso_name_identifier_format, :sso_mapping, :sso_button_label,
-            :terms,
-          )
+          .permit(allowed_params)
   end
 end

app/models/ability.rb

@@ -102,6 +102,7 @@ class Ability
     can :manage, Communication::Website::Imported::Page, university_id: @user.university_id
     can :manage, Communication::Website::Imported::Post, university_id: @user.university_id
     can :read, Communication::Extranet, university_id: @user.university_id
+    can :update, Communication::Extranet, university_id: @user.university_id
     can :manage, Communication::Extranet::Post, university_id: @user.university_id
     can :manage, Communication::Extranet::Post::Category, university_id: @user.university_id
     can :manage, Communication::Extranet::Document, university_id: @user.university_id

app/views/admin/communication/extranets/_form.html.erb

@@ -6,8 +6,10 @@
     <div class="col-xl-6">
       <%= osuny_panel t('metadata') do %>
         <%= f.input :name %>
-        <%= f.input :host %>
-        <%= render 'admin/communication/abouts', f: f, i18n_key: 'activerecord.attributes.communication/extranet.about_' %>
+        <% if can?(:create, Communication::Extranet) %>
+          <%= f.input :host %>
+          <%= render 'admin/communication/abouts', f: f, i18n_key: 'activerecord.attributes.communication/extranet.about_' %>
+        <% end %>
         <%= f.input :registration_contact %>
       <% end %>
       <%= osuny_panel t('look_feel') do %>
@@ -23,7 +25,8 @@
                     direct_upload: true %>
         <%= f.input :color, as: :color %>
         <%= f.input :home_sentence, as: :summernote, input_html: { data: { 'summernote-config': 'link' } } %>
-        <%= f.input :sass,
+        <% if can?(:create, Communication::Extranet) %>
+          <%= f.input :sass,
                     input_html: {
                       data: {
                         provider: 'codemirror',
@@ -31,15 +34,18 @@
                         "codemirror-indentation": 4
                       }
                     } %>
+        <% end %>
       <% end %>
     </div>
     <div class="col-xl-6">
-      <%= osuny_panel t('extranet.features') do %>
-        <%= f.input :feature_alumni %>
-        <%= f.input :feature_contacts %>
-        <%= f.input :feature_library %>
-        <%= f.input :feature_posts %>
-        <%= f.input :feature_jobs %>
+      <% if can?(:create, Communication::Extranet) %>
+        <%= osuny_panel t('extranet.features') do %>
+          <%= f.input :feature_alumni %>
+          <%= f.input :feature_contacts %>
+          <%= f.input :feature_library %>
+          <%= f.input :feature_posts %>
+          <%= f.input :feature_jobs %>
+        <% end %>
       <% end %>
       <%= osuny_panel t('legal') do %>
         <%= f.input :terms, as: :summernote %>
@@ -49,23 +55,25 @@
     </div>
   </div>
 
-  <%= osuny_panel t('university.sso') do %>
-    <div class="row">
-      <div class="col-xl-6">
-        <%= f.input :has_sso %>
-        <div class="sso-inputs">
-          <%= f.input :sso_target_url, required: true %>
-          <%= f.input :sso_cert, required: true %>
-          <%= f.input :sso_name_identifier_format, required: true %>
-          <%= f.input :sso_button_label %>
+  <% if can?(:create, Communication::Extranet) %>
+    <%= osuny_panel t('university.sso') do %>
+      <div class="row">
+        <div class="col-xl-6">
+          <%= f.input :has_sso %>
+          <div class="sso-inputs">
+            <%= f.input :sso_target_url, required: true %>
+            <%= f.input :sso_cert, required: true %>
+            <%= f.input :sso_name_identifier_format, required: true %>
+            <%= f.input :sso_button_label %>
+          </div>
+        </div>
+        <div class="col-xl-6 sso-inputs">
+          <h4 class="mb-4"><%= University.human_attribute_name('sso_mapping') %></h4>
+          <%= f.error_notification message: f.object.errors[:sso_mapping].to_sentence if f.object.errors[:sso_mapping].present? %>
+          <%= render 'server/universities/sso_mapping', object: extranet %>
         </div>
       </div>
-      <div class="col-xl-6 sso-inputs">
-        <h4 class="mb-4"><%= University.human_attribute_name('sso_mapping') %></h4>
-        <%= f.error_notification message: f.object.errors[:sso_mapping].to_sentence if f.object.errors[:sso_mapping].present? %>
-        <%= render 'server/universities/sso_mapping', object: extranet %>
-      </div>
-    </div>
+    <% end %>
   <% end %>
 
   <% content_for :action_bar_right do %>