2021-05-09 00:06:07 +08:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
|
|
|
module AccessPermissions
|
|
|
|
class ExperimentsController < ApplicationController
|
|
|
|
before_action :set_project
|
|
|
|
before_action :set_experiment
|
|
|
|
before_action :check_read_permissions, only: %i(show)
|
2021-10-28 22:32:05 +08:00
|
|
|
before_action :check_manage_permissions, only: %i(edit update destroy)
|
2021-05-09 00:06:07 +08:00
|
|
|
|
|
|
|
def show
|
|
|
|
respond_to do |format|
|
|
|
|
format.json
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def edit
|
|
|
|
respond_to do |format|
|
|
|
|
format.json
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def update
|
2021-05-22 20:41:56 +08:00
|
|
|
@experiment_member = ExperimentMember.new(current_user, @experiment, @project)
|
2021-06-06 15:54:47 +08:00
|
|
|
@experiment_member.update(permitted_update_params)
|
2021-05-09 00:06:07 +08:00
|
|
|
|
|
|
|
respond_to do |format|
|
|
|
|
format.json do
|
|
|
|
render :experiment_member
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2021-10-28 22:32:05 +08:00
|
|
|
def destroy
|
|
|
|
user = @experiment.users.find(params[:user_id])
|
|
|
|
experiment_member = ExperimentMember.new(current_user, @experiment, @project, user)
|
|
|
|
|
|
|
|
respond_to do |format|
|
|
|
|
if experiment_member.destroy
|
|
|
|
format.json do
|
|
|
|
render(
|
|
|
|
json: {
|
|
|
|
flash:
|
|
|
|
t(
|
|
|
|
'access_permissions.destroy.success',
|
|
|
|
member_name: user.full_name, resource: Experiment.model_name.human.downcase
|
|
|
|
)
|
|
|
|
},
|
|
|
|
status: :ok
|
|
|
|
)
|
|
|
|
end
|
|
|
|
else
|
|
|
|
format.json do
|
|
|
|
render json: { flash: t('access_permissions.destroy.failure') },
|
|
|
|
status: :unprocessable_entity
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2021-05-09 00:06:07 +08:00
|
|
|
private
|
|
|
|
|
|
|
|
def permitted_update_params
|
|
|
|
params.require(:experiment_member)
|
|
|
|
.permit(%i(user_role_id user_id))
|
|
|
|
end
|
|
|
|
|
|
|
|
def set_project
|
|
|
|
@project = current_team.projects.find_by(id: params[:project_id])
|
|
|
|
|
|
|
|
render_404 unless @project
|
|
|
|
end
|
|
|
|
|
|
|
|
def set_experiment
|
|
|
|
@experiment = @project.experiments.includes(user_assignments: %i(user user_role)).find_by(id: params[:id])
|
|
|
|
|
|
|
|
render_404 unless @experiment
|
|
|
|
end
|
|
|
|
|
|
|
|
def check_manage_permissions
|
2021-09-30 17:32:11 +08:00
|
|
|
render_403 unless can_manage_experiment_users?(@experiment)
|
2021-05-09 00:06:07 +08:00
|
|
|
end
|
|
|
|
|
|
|
|
def check_read_permissions
|
|
|
|
render_403 unless can_read_experiment?(@experiment)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|