UI for toggling asciicasts private/public

app/models/asciicast.rb

@@ -92,6 +92,10 @@ class Asciicast < ActiveRecord::Base
     !image.file || (image.file.filename != image_filename)
   end
 
+  def owner?(user)
+    user && self.user == user
+  end
+
   private
 
   def get_stdout

app/policies/asciicast_policy.rb

@@ -7,9 +7,10 @@ class AsciicastPolicy < ApplicationPolicy
   end
 
   def permitted_attributes
-    if user.admin? || record.user == user
+    if user.admin? || record.owner?(user)
       attrs = [:title, :description, :theme_name, :snapshot_at]
       attrs << :featured if user.admin?
+      attrs << :private if record.owner?(user)
 
       attrs
     else
@@ -20,13 +21,13 @@ class AsciicastPolicy < ApplicationPolicy
   def update?
     return false unless user
 
-    user.admin? || record.user == user
+    user.admin? || record.owner?(user)
   end
 
   def destroy?
     return false unless user
 
-    user.admin? || record.user == user
+    user.admin? || record.owner?(user)
   end
 
   def feature?
@@ -41,4 +42,16 @@ class AsciicastPolicy < ApplicationPolicy
     user.admin?
   end
 
+  def make_public?
+    return false unless user
+
+    record.owner?(user)
+  end
+
+  def make_private?
+    return false unless user
+
+    record.owner?(user)
+  end
+
 end

app/presenters/asciicast_page_presenter.rb

@@ -94,6 +94,14 @@ class AsciicastPagePresenter
     asciicast.featured? && policy.unfeature?
   end
 
+  def show_make_private_link?
+    !asciicast.private? && policy.make_private?
+  end
+
+  def show_make_public_link?
+    asciicast.private? && policy.make_public?
+  end
+
   def show_description?
     asciicast.description.present?
   end

app/views/asciicasts/show.html.slim

@@ -55,6 +55,16 @@
                     = link_to(asciicast_path(page.asciicast, 'asciicast[featured]' => 0), method: :put) do
                       span.glyphicon.glyphicon-eye-close
                       '  Make not featured
+                - if page.show_make_public_link?
+                  li
+                    = link_to(asciicast_path(page.asciicast, 'asciicast[private]' => 0), method: :put) do
+                      span.glyphicon.glyphicon-eye-open
+                      '  Make public
+                - if page.show_make_private_link?
+                  li
+                    = link_to(asciicast_path(page.asciicast, 'asciicast[private]' => 1), method: :put) do
+                      span.glyphicon.glyphicon-eye-close
+                      '  Make private
                 - if page.show_delete_link?
                   li
                     = link_to(asciicast_path(page.asciicast), method: :delete, data: { confirm: 'Really delete this asciicast?' }) do

spec/policies/asciicast_policy_spec.rb

@@ -27,8 +27,8 @@ describe AsciicastPolicy do
       context "and is creator of the asciicast" do
         let(:asciicast) { Asciicast.new(user: user) }
 
-        it "includes form field, but no featured" do
-          expect(subject).to eq([:title, :description, :theme_name, :snapshot_at])
+        it "doesn't include featured but includes private" do
+          expect(subject).to eq([:title, :description, :theme_name, :snapshot_at, :private])
         end
       end
     end
@@ -106,4 +106,44 @@ describe AsciicastPolicy do
     end
   end
 
+  permissions :make_public? do
+    let(:asciicast) { Asciicast.new }
+
+    it "denies access if user is nil" do
+      expect(subject).not_to permit(nil, asciicast)
+    end
+
+    it "grants access if user is owner of the asciicast" do
+      user = stub_model(User)
+      asciicast.user = user
+      expect(subject).to permit(user, asciicast)
+    end
+
+    it "denies access if user isn't owner of the asciicast" do
+      user = stub_model(User)
+      asciicast.user = stub_model(User)
+      expect(subject).not_to permit(user, asciicast)
+    end
+  end
+
+  permissions :make_private? do
+    let(:asciicast) { Asciicast.new }
+
+    it "denies access if user is nil" do
+      expect(subject).not_to permit(nil, asciicast)
+    end
+
+    it "grants access if user is owner of the asciicast" do
+      user = stub_model(User)
+      asciicast.user = user
+      expect(subject).to permit(user, asciicast)
+    end
+
+    it "denies access if user isn't owner of the asciicast" do
+      user = stub_model(User)
+      asciicast.user = stub_model(User)
+      expect(subject).not_to permit(user, asciicast)
+    end
+  end
+
 end