scinote-web/app/controllers/form_responses_controller.rb

# frozen_string_literal: true

class FormResponsesController < ApplicationController
  before_action :load_form, only: :create
  before_action :load_parent, only: :create
  before_action :load_form_response, except: :create

  def create
    case @parent
    when Step
      render_403 and return unless can_create_protocol_form_responses?(@parent.protocol)

      ActiveRecord::Base.transaction do
        @form_response = FormResponse.create!(form: @form, created_by: current_user)
        @parent.step_orderable_elements.create!(orderable: @form_response)
      end
    else
      render_422
    end

    render json: @form_response, serializer: FormResponseSerializer, user: current_user
  end

  def submit
    render_403 and return unless can_submit_form_response?(@form_response)

    @form_response.submit!(current_user)

    render json: @form_response, serializer: FormResponseSerializer, user: current_user
  end

  def reset
    render_403 and return unless can_reset_form_response?(@form_response)

    @form_response.reset!(current_user)

    render json: @form_response, serializer: FormResponseSerializer, user: current_user
  end

  private

  def form_response_params
    params.require(:form_response).permit(:form_id, :parent_id, :parent_type)
  end

  def load_form
    @form = Form.find_by(id: form_response_params[:form_id])

    render_404 unless @form && can_read_form?(@form)
  end

  def load_parent
    case form_response_params[:parent_type]
    when 'Step'
      @parent = Step.find_by(id: form_response_params[:parent_id])
    else
      return render_422
    end

    render_404 unless @parent
  end

  def load_form_response
    @form_response = FormResponse.find_by(id: params[:id])

    render_404 unless @form_response
  end
end