scinote-web/app/controllers/api/v1/projects_controller.rb

38 lines
901 B
Ruby
Raw Normal View History

2018-09-10 22:20:02 +08:00
# frozen_string_literal: true
module Api
module V1
class ProjectsController < BaseController
before_action :load_team
before_action :load_project, only: :show
def index
projects = @team.projects
.page(params.dig(:page, :number))
.per(params.dig(:page, :size))
render jsonapi: projects, each_serializer: ProjectSerializer
end
def show
render jsonapi: @project, serializer: ProjectSerializer
end
private
def load_team
@team = Team.find(params.require(:team_id))
render jsonapi: {}, status: :forbidden unless can_read_team?(@team)
end
def load_project
@project = @team.projects.find(params.require(:id))
render jsonapi: {}, status: :forbidden unless can_read_project?(
@project
)
end
end
end
end