scinote-web/app/controllers/api/v1/reports_controller.rb

# frozen_string_literal: true

module Api
  module V1
    class ReportsController < BaseController
      before_action :load_team
      before_action :load_project
      before_action :load_report, only: :show

      def index
        reports = @project.reports
                          .page(params.dig(:page, :number))
                          .per(params.dig(:page, :size))

        render jsonapi: reports,
               each_serializer: ReportSerializer,
               hide_project: true
      end

      def show
        render jsonapi: @report,
               serializer: ReportSerializer,
               hide_project: true,
               include: :user
      end

      private

      def load_team
        @team = Team.find(params.require(:team_id))
        render jsonapi: {}, status: :forbidden unless can_read_team?(@team)
      end

      def load_project
        @project = @team.projects.find(params.require(:project_id))
        render jsonapi: {}, status: :forbidden unless can_read_project?(
          @project
        )
      end

      def load_report
        @report = @project.reports.find(params.require(:id))
        render jsonapi: {}, status: :not_found if @report.nil?
      end
    end
  end
end