#  lib/tasks/reset_permissions.rb

namespace :db do
  desc "Setup the Roles database to provision permissions properly"
  task :permissions => :environment do
    delete_old_permissions
    make_roles
    assign_roles
  end
end


def delete_old_permissions
  Role.delete_all
  Right.delete_all
  Grant.delete_all
  Assignment.delete_all
end


def make_roles
  @communications_role = Role.create!(:name => 'communications')
  @communications_role.rights.create!(:resource => "users", :operation => "READ")
  @communications_role.rights.create!(:resource => "news_posts", :operation => "READ")
  @communications_role.rights.create!(:resource => "news_posts", :operation => "UPDATE")
  @communications_role.rights.create!(:resource => "news_posts", :operation => "CREATE")
  @communications_role.rights.create!(:resource => "news_posts", :operation => "DELETE")
  @communications_role.rights.create!(:resource => "news_blasts", :operation => "READ")
  @communications_role.rights.create!(:resource => "news_blasts", :operation => "UPDATE")
  @communications_role.rights.create!(:resource => "news_blasts", :operation => "CREATE")
  @communications_role.rights.create!(:resource => "news_blasts", :operation => "DELETE")
  @communications_role.rights.create!(:resource => "bio_records", :operation => "READ")
  @communications_role.rights.create!(:resource => "bio_records", :operation => "UPDATE")
  @communications_role.rights.create!(:resource => "bio_records", :operation => "CREATE")
  @communications_role.rights.create!(:resource => "bio_records", :operation => "DELETE")


  @management_role = Role.create!(:name => 'management')
  #@management_role.rights.create!(:resource => "users", :operation => "READ")
  #@management_role.rights.create!(:resource => "users", :operation => "UPDATE")
  #@management_role.rights.create!(:resource => "users", :operation => "CREATE")
  #@management_role.rights.create!(:resource => "users", :operation => "DELETE")
  puts "i'm about to do the thing I've been trying to add to this file..."
  @management_role.rights.create!(:resource => "real_time_interaction", :operation => "READ")

  @customer_role = Role.create!(:name => 'customer')
  @customer_role.rights.create!(:resource => "users", :operation => "READ")
end

def assign_roles
  .
  .
  .
end