authorize_resource
before_action :lookup_user, :only => [:new, :create, :revoke_all, :blocks_on, :blocks_by]
- before_action :lookup_user_block, :only => [:show, :edit, :update, :revoke]
+ before_action :lookup_user_block, :only => [:show, :edit, :update]
before_action :require_valid_params, :only => [:create, :update]
before_action :check_database_readable
- before_action :check_database_writable, :only => [:create, :update, :revoke, :revoke_all]
+ before_action :check_database_writable, :only => [:create, :update, :revoke_all]
def index
@params = params.permit
@show_user_name = true
@show_creator_name = true
- render :partial => "blocks" if turbo_frame_request_id == "pagination"
+ render :partial => "page" if turbo_frame_request_id == "pagination"
end
def show
def update
if @valid_params
- if current_user != @user_block.creator &&
- current_user != @user_block.revoker
- flash[:error] = t(@user_block.revoker ? ".only_creator_or_revoker_can_edit" : ".only_creator_can_edit")
+ if cannot?(:update, @user_block)
+ flash[:error] = @user_block.revoker ? t(".only_creator_or_revoker_can_edit") : t(".only_creator_can_edit")
redirect_to :action => "edit"
else
user_block_was_active = @user_block.active?
@user_block.ends_at = Time.now.utc + @block_period.hours
@user_block.deactivates_at = (@user_block.ends_at unless @user_block.needs_view)
@user_block.revoker = current_user if user_block_was_active && !@user_block.active?
- if !user_block_was_active && @user_block.active?
+ if user_block_was_active && @user_block.active? && current_user != @user_block.creator
+ flash.now[:error] = t(".only_creator_can_edit_without_revoking")
+ render :action => "edit"
+ elsif !user_block_was_active && @user_block.active?
flash.now[:error] = t(".inactive_block_cannot_be_reactivated")
render :action => "edit"
else
end
end
- ##
- # revokes the block, setting the end_time to now
- def revoke
- if request.post? && params[:confirm] && @user_block.revoke!(current_user)
- flash[:notice] = t ".flash"
- redirect_to(@user_block)
- end
- end
-
##
# revokes all active blocks
def revoke_all
@show_user_name = false
@show_creator_name = true
- render :partial => "blocks" if turbo_frame_request_id == "pagination"
+ render :partial => "page" if turbo_frame_request_id == "pagination"
end
##
@show_user_name = true
@show_creator_name = false
- render :partial => "blocks" if turbo_frame_request_id == "pagination"
+ render :partial => "page" if turbo_frame_request_id == "pagination"
end
private