authorize_resource
- before_action :lookup_user, :only => [:new, :create, :revoke_all, :blocks_on, :blocks_by]
+ before_action :lookup_user, :only => [:new, :create]
before_action :lookup_user_block, :only => [:show, :edit, :update]
before_action :require_valid_params, :only => [:create, :update]
before_action :check_database_readable
- before_action :check_database_writable, :only => [:create, :update, :revoke_all]
+ before_action :check_database_writable, :only => [:create, :update]
def index
@params = params.permit
render :action => "new"
end
else
- redirect_to new_user_block_path(:display_name => params[:display_name])
+ redirect_to new_user_block_path(params[:display_name])
end
end
end
end
else
- redirect_to edit_user_block_path(:id => params[:id])
+ redirect_to edit_user_block_path(params[:id])
end
end
- ##
- # revokes all active blocks
- def revoke_all
- if request.post? && params[:confirm]
- @user.blocks.active.each { |block| block.revoke!(current_user) }
- flash[:notice] = t ".flash"
- redirect_to user_blocks_on_path(@user)
- end
- end
-
- ##
- # shows a list of all the blocks on the given user
- def blocks_on
- @params = params.permit(:display_name)
-
- user_blocks = UserBlock.where(:user => @user)
-
- @user_blocks, @newer_user_blocks_id, @older_user_blocks_id = get_page_items(user_blocks, :includes => [:user, :creator, :revoker])
-
- @show_user_name = false
- @show_creator_name = true
-
- render :partial => "page" if turbo_frame_request_id == "pagination"
- end
-
- ##
- # shows a list of all the blocks by the given user.
- def blocks_by
- @params = params.permit(:display_name)
-
- user_blocks = UserBlock.where(:creator => @user)
-
- @user_blocks, @newer_user_blocks_id, @older_user_blocks_id = get_page_items(user_blocks, :includes => [:user, :creator, :revoker])
-
- @show_user_name = true
- @show_creator_name = false
-
- render :partial => "page" if turbo_frame_request_id == "pagination"
- end
-
private
##