77 lines
2.2 KiB
Ruby
77 lines
2.2 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
module Api
|
|
module V1
|
|
class RaidGroupsController < Api::V1::ApiController
|
|
before_action :set_raid_group, only: %i[show update destroy]
|
|
before_action :ensure_editor_role, only: %i[create update destroy]
|
|
|
|
# GET /raid_groups
|
|
def index
|
|
groups = RaidGroup.includes(:raids).ordered
|
|
render json: RaidGroupBlueprint.render(groups, view: :full)
|
|
end
|
|
|
|
# GET /raid_groups/:id
|
|
def show
|
|
if @raid_group
|
|
render json: RaidGroupBlueprint.render(@raid_group, view: :full)
|
|
else
|
|
render json: { error: 'Raid group not found' }, status: :not_found
|
|
end
|
|
end
|
|
|
|
# POST /raid_groups
|
|
def create
|
|
raid_group = RaidGroup.new(raid_group_params)
|
|
|
|
if raid_group.save
|
|
render json: RaidGroupBlueprint.render(raid_group, view: :full), status: :created
|
|
else
|
|
render_validation_error_response(raid_group)
|
|
end
|
|
end
|
|
|
|
# PATCH/PUT /raid_groups/:id
|
|
def update
|
|
if @raid_group.update(raid_group_params)
|
|
render json: RaidGroupBlueprint.render(@raid_group, view: :full)
|
|
else
|
|
render_validation_error_response(@raid_group)
|
|
end
|
|
end
|
|
|
|
# DELETE /raid_groups/:id
|
|
def destroy
|
|
if @raid_group.raids.exists?
|
|
render json: ErrorBlueprint.render(nil, error: {
|
|
message: 'Cannot delete group with associated raids',
|
|
code: 'has_dependencies'
|
|
}), status: :unprocessable_entity
|
|
else
|
|
@raid_group.destroy!
|
|
head :no_content
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def set_raid_group
|
|
@raid_group = RaidGroup.find_by(id: params[:id])
|
|
end
|
|
|
|
def raid_group_params
|
|
params.require(:raid_group).permit(
|
|
:name_en, :name_jp, :difficulty, :order, :section, :extra, :hl, :guidebooks, :unlimited
|
|
)
|
|
end
|
|
|
|
def ensure_editor_role
|
|
return if current_user&.role && current_user.role >= 7
|
|
|
|
Rails.logger.warn "[RAID_GROUPS] Unauthorized access attempt by user #{current_user&.id}"
|
|
render json: { error: 'Unauthorized - Editor role required' }, status: :unauthorized
|
|
end
|
|
end
|
|
end
|
|
end
|