Justin Edmund
5597cab95c
* add party_shares table and model with associations * add party share errors and blueprint * add party shares controller and routes * include shared parties in listings and show * add party share factory and model specs * add party shares controller specs * include shares in party response for owners * add crew shared_parties endpoint
67 lines
1.8 KiB
Ruby
67 lines
1.8 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
module Api
|
|
module V1
|
|
class PartySharesController < Api::V1::ApiController
|
|
before_action :restrict_access
|
|
before_action :set_party
|
|
before_action :authorize_party_owner!
|
|
before_action :set_party_share, only: [:destroy]
|
|
|
|
# GET /parties/:party_id/shares
|
|
# List all shares for a party (only for owner)
|
|
def index
|
|
shares = @party.party_shares.includes(:shareable, :shared_by)
|
|
render json: PartyShareBlueprint.render(shares, view: :with_shareable, root: :shares)
|
|
end
|
|
|
|
# POST /parties/:party_id/shares
|
|
# Share a party with the current user's crew
|
|
def create
|
|
crew = current_user.crew
|
|
raise PartyShareErrors::NotInCrewError unless crew
|
|
|
|
# For now, users can only share to their own crew
|
|
# Future: support party_share_params[:crew_id] for sharing to other crews
|
|
share = PartyShare.new(
|
|
party: @party,
|
|
shareable: crew,
|
|
shared_by: current_user
|
|
)
|
|
|
|
if share.save
|
|
render json: PartyShareBlueprint.render(share, view: :with_shareable, root: :share), status: :created
|
|
else
|
|
render_validation_error_response(share)
|
|
end
|
|
end
|
|
|
|
# DELETE /parties/:party_id/shares/:id
|
|
# Remove a share
|
|
def destroy
|
|
@party_share.destroy!
|
|
head :no_content
|
|
end
|
|
|
|
private
|
|
|
|
def set_party
|
|
@party = Party.find(params[:party_id])
|
|
end
|
|
|
|
def set_party_share
|
|
@party_share = @party.party_shares.find(params[:id])
|
|
end
|
|
|
|
def authorize_party_owner!
|
|
return if @party.user_id == current_user.id
|
|
|
|
raise Api::V1::UnauthorizedError
|
|
end
|
|
|
|
def party_share_params
|
|
params.require(:share).permit(:crew_id)
|
|
end
|
|
end
|
|
end
|
|
end
|