scinote-web/app/controllers/api/v1/users_controller.rb

23 lines
500 B
Ruby
Raw Normal View History

2018-08-21 19:56:14 +08:00
# frozen_string_literal: true
module Api
module V1
class UsersController < BaseController
before_action :load_user, only: :show
def show
render jsonapi: @user, serializer: UserSerializer
2018-08-21 19:56:14 +08:00
end
private
def load_user
@user = User.joins(:user_teams)
.where('user_teams.team': current_user.teams)
.find_by_id(params[:id])
render jsonapi: {}, status: :forbidden unless @user
2018-08-21 19:56:14 +08:00
end
end
end
end