scinote-web/app/controllers/project_activities_controller.rb

class ProjectActivitiesController < ApplicationController
  before_action :load_vars, only: [ :index ]
  before_action :check_view_permissions, only: [ :index ]

  def index
    @activities = @project.last_activities

    render json: {
      html: render_to_string({ partial: 'index', formats: :html })
    }
  end

  private

  def load_vars
    @project = Project.find_by_id(params[:project_id])
    unless @project
      render_404
    end
  end

  def check_view_permissions
    render_403 unless can_read_project?(@project)
  end

end