hensei-api/app/controllers/api/v1/crew_memberships_controller.rb
Justin Edmund a3a0138526 add request specs for crew controllers (phases 1-2)
- add crews_spec.rb (18 examples)
- add crew_memberships_spec.rb (13 examples)
- add crew_invitations_spec.rb (15 examples)
- fix crew_memberships authorize_crew_captain! as before_action
- update crew_invitations factory to auto-set invited_by officer

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-03 23:47:25 -08:00

66 lines
2 KiB
Ruby

# frozen_string_literal: true
module Api
module V1
class CrewMembershipsController < Api::V1::ApiController
include CrewAuthorizationConcern
before_action :restrict_access
before_action :set_crew
before_action :set_membership, only: %i[update destroy promote demote]
before_action :authorize_crew_officer!, only: %i[destroy]
before_action :authorize_crew_captain!, only: %i[update promote demote]
# PUT /crews/:crew_id/memberships/:id
def update
if @membership.update(membership_params)
render json: CrewMembershipBlueprint.render(@membership, view: :with_user, root: :membership)
else
render_validation_error_response(@membership)
end
end
# DELETE /crews/:crew_id/memberships/:id
def destroy
raise CrewErrors::CannotRemoveCaptainError if @membership.captain?
@membership.retire!
head :no_content
end
# POST /crews/:crew_id/memberships/:id/promote
def promote
raise CrewErrors::CannotRemoveCaptainError if @membership.captain?
# Check vice captain limit
current_vc_count = @crew.crew_memberships.where(role: :vice_captain, retired: false).count
raise CrewErrors::ViceCaptainLimitError if current_vc_count >= 3 && !@membership.vice_captain?
@membership.update!(role: :vice_captain)
render json: CrewMembershipBlueprint.render(@membership, view: :with_user, root: :membership)
end
# POST /crews/:crew_id/memberships/:id/demote
def demote
raise CrewErrors::CannotDemoteCaptainError if @membership.captain?
@membership.update!(role: :member)
render json: CrewMembershipBlueprint.render(@membership, view: :with_user, root: :membership)
end
private
def set_crew
@crew = Crew.find(params[:crew_id])
end
def set_membership
@membership = @crew.crew_memberships.find(params[:id])
end
def membership_params
params.require(:membership).permit(:role)
end
end
end
end