Contents

module Sufia
  module DepositorsControllerBehavior
    extend ActiveSupport::Concern

    included do
      before_filter :authenticate_user!
      before_filter :validate_users, only: :create
    end

    def create
      grantor = authorize_and_return_grantor
      grantee = ::User.from_url_component(params[:grantee_id])
      if grantor.can_receive_deposits_from.include?(grantee)
        head :ok
      else
        grantor.can_receive_deposits_from << grantee
        render json: { name: grantee.name, delete_path: sufia.user_depositor_path(grantor.user_key, grantee.user_key) }
      end
    end

    def destroy
      grantor = authorize_and_return_grantor
      grantor.can_receive_deposits_from.delete(::User.from_url_component(params[:id]))
      head :ok
    end

    def validate_users
      if params[:user_id] == params[:grantee_id]
        head :ok
      end
    end

    private

    def authorize_and_return_grantor
      grantor = ::User.from_url_component(params[:user_id])
      authorize! :edit, grantor
      return grantor
    end
  end
end

Version data entries

11 entries across 11 versions & 1 rubygems

Version	Path
sufia-5.0.0	app/controllers/concerns/sufia/depositors_controller_behavior.rb
sufia-6.0.0	app/controllers/concerns/sufia/depositors_controller_behavior.rb
sufia-6.0.0.rc4	app/controllers/concerns/sufia/depositors_controller_behavior.rb
sufia-6.0.0.rc3	app/controllers/concerns/sufia/depositors_controller_behavior.rb
sufia-5.0.0.rc1	app/controllers/concerns/sufia/depositors_controller_behavior.rb
sufia-6.0.0.rc2	app/controllers/concerns/sufia/depositors_controller_behavior.rb
sufia-6.0.0.rc1	app/controllers/concerns/sufia/depositors_controller_behavior.rb
sufia-4.3.1	app/controllers/concerns/sufia/depositors_controller_behavior.rb
sufia-6.0.0.beta1	app/controllers/concerns/sufia/depositors_controller_behavior.rb
sufia-4.2.0	app/controllers/concerns/sufia/depositors_controller_behavior.rb
sufia-4.1.0	app/controllers/concerns/sufia/depositors_controller_behavior.rb