# frozen_string_literal: true module Dashboard class QuickStartController < ApplicationController include InputSanitizeHelper before_action :load_project, only: %i(create_task experiment_filter) before_action :load_experiment, only: :create_task before_action :check_task_create_permissions, only: :create_task def create_task my_module = CreateMyModuleService.new(current_user, current_team, project: @project || create_project_params, experiment: @experiment || create_experiment_params).call if my_module.errors.empty? render json: { my_module_path: protocols_my_module_path(my_module) } else render json: { errors: my_module.errors, error_object: my_module.class.name }, status: :unprocessable_entity end end def project_filter projects = current_team.projects.search(current_user, false, params[:query], 1, current_team) .where('user_projects.role <= 1') .select(:id, :name) projects = projects.map { |i| { value: i.id, label: escape_input(i.name) } } if (projects.map { |i| i[:label] }.exclude? params[:query]) && params[:query].present? projects = [{ value: 0, label: params[:query] }] + projects end render json: projects, status: :ok end def experiment_filter if create_project_params.present? && params[:query].present? experiments = [{ value: 0, label: params[:query] }] elsif @project experiments = @project.experiments .search(current_user, false, params[:query], 1, current_team) .select(:id, :name) experiments = experiments.map { |i| { value: i.id, label: escape_input(i.name) } } if (experiments.map { |i| i[:label] }.exclude? params[:query]) && params[:query].present? experiments = [{ value: 0, label: params[:query] }] + experiments end end render json: experiments || [], status: :ok end private def create_project_params params.require(:project).permit(:name, :visibility) end def create_experiment_params params.require(:experiment).permit(:name) end def load_project @project = current_team.projects.find_by(id: params.dig(:project, :id)) end def load_experiment @experiment = @project.experiments.find_by(id: params.dig(:experiment, :id)) if @project end def check_task_create_permissions unless @project render_403 unless can_create_projects?(current_user, current_team) return end unless @experiment render_403 unless can_create_experiments?(current_user, @project) return end render_403 unless can_manage_experiment?(current_user, @experiment) end end end