Initial commit

app/controllers/carto/api/permissions_controller.rb

@@ -0,0 +1,28 @@
+class Carto::Api::PermissionsController < ::Api::ApplicationController
+  include Carto::ControllerHelper
+  extend Carto::DefaultRescueFroms
+
+  ssl_required :update
+
+  def update
+    permission = Carto::Permission.where(id: params[:id]).first
+
+    return head(404) if permission.nil?
+    return head(401) unless permission.is_owner?(current_user)
+
+    begin
+      acl = params[:acl]
+      acl ||= []
+      permission.acl = acl.map(&:deep_symbolize_keys)
+    rescue CartoDB::PermissionError => e
+      CartoDB::Logger.error(exception: e)
+      return head(400)
+    end
+
+    permission.save!
+
+    render json: Carto::Api::PermissionPresenter.new(permission,
+                                                     current_viewer: current_viewer, fetch_user_groups: true).to_poro
+  end
+
+end