# frozen_string_literal: true module AccessPermissions class MyModulesController < ApplicationController before_action :set_my_module before_action :set_experiment before_action :set_project before_action :check_read_permissions, only: %i(show) before_action :check_manage_permissions, only: %i(edit update) def show; end def edit; end def update user_id = permitted_update_params[:user_id] @user_assignment = @my_module.user_assignments.find_by(user_id: user_id, team: current_team) if permitted_update_params[:user_role_id] == 'reset' @user_assignment.update!( user_role_id: @experiment.user_assignments.find_by(user_id: user_id, team: current_team).user_role_id, assigned: :automatically ) else @user_assignment.update!( user_role_id: permitted_update_params[:user_role_id], assigned: :manually ) end log_change_activity render :my_module_member end private def permitted_update_params params.require(:user_assignment) .permit(%i(user_role_id user_id)) end def set_project @project = @experiment.project end def set_experiment @experiment = @my_module.experiment end def set_my_module @my_module = MyModule.includes(user_assignments: %i(user user_role)).find_by(id: params[:id]) render_404 unless @my_module end def check_manage_permissions render_403 unless can_manage_my_module_users?(@my_module) end def check_read_permissions render_403 unless can_read_my_module?(@my_module) end def log_change_activity Activities::CreateActivityService.call( activity_type: :change_user_role_on_my_module, owner: current_user, subject: @my_module, team: @project.team, project: @project, message_items: { my_module: @my_module.id, user_target: @user_assignment.user_id, role: @user_assignment.user_role.name } ) end end end