scinote-web/app/controllers/my_module_status_flow_controller.rb

# frozen_string_literal: true

class MyModuleStatusFlowController < ApplicationController
  before_action :load_my_module
  before_action :check_view_permissions

  def show
    my_module_statuses = @my_module.my_module_status_flow.my_module_statuses.sort_by_position
    render json: { html: render_to_string(partial: 'my_modules/modals/status_flow_modal_body.html.erb',
                                          locals: { my_module_statuses: my_module_statuses }) }
  end

  private

  def load_my_module
    @my_module = MyModule.find_by(id: params[:my_module_id])
    render_404 unless @my_module
  end

  def check_view_permissions
    render_403 unless can_read_experiment?(@my_module.experiment)
  end
end