def create
if @valid_params
- @user_block = UserBlock.new({
+ @user_block = UserBlock.new(
:user_id => @this_user.id,
:creator_id => @user.id,
:reason => params[:user_block][:reason],
:ends_at => Time.now.getutc() + @block_period.hours,
:needs_view => params[:user_block][:needs_view]
- }, :without_protection => true)
+ )
if @user_block.save
flash[:notice] = t('user_block.create.flash', :name => @this_user.display_name)
if @user_block.creator_id != @user.id
flash[:error] = t('user_block.update.only_creator_can_edit')
redirect_to :action => "edit"
- elsif @user_block.update_attributes({
+ elsif @user_block.update_attributes(
:ends_at => Time.now.getutc() + @block_period.hours,
:reason => params[:user_block][:reason],
:needs_view => params[:user_block][:needs_view]
- }, :without_protection => true)
+ )
flash[:notice] = t('user_block.update.success')
redirect_to(@user_block)
else
end
private
- ##
- # require that the user is a moderator, or fill out a helpful error message
- # and return them to the blocks index.
- def require_moderator
- unless @user.moderator?
- if request.get?
- flash[:error] = t('user_block.filter.not_a_moderator')
- redirect_to :action => 'index'
- else
- render :nothing => true, :status => :forbidden
- end
- end
- end
-
- ##
- # ensure that there is a "this_user" instance variable
- def lookup_this_user
- unless @this_user = User.find_by_display_name(params[:display_name])
- @not_found_user = params[:display_name]
- render :template => 'user/no_such_user', :status => :not_found
- end
- end
-
##
# ensure that there is a "user_block" instance variable
def lookup_user_block