Noosfero/noosfero

class WorkAssignmentPluginMyprofileController < MyProfileController
  helper ArticleHelper
  helper CmsHelper

  before_action :protect_if, only: [:edit_visibility]

  def edit_visibility
    unless params[:article_id].blank?
      folder = profile.environment.articles.find_by id: params[:article_id]
      @back_to = url_for(folder.parent.url)
      unless params[:article].blank?
        folder.published = params[:article][:published]
        unless params[:q].nil?
          folder.article_privacy_exceptions = params[:q].split(/,/).map { |n| environment.people.find n.to_i }
        end
        folder.save!
        redirect_to @back_to
      end
    end
   end

  protected

    def protect_if
      article = environment.articles.find_by id: params[:article_id]
      render_access_denied unless (user && !article.nil? && (user.is_member_of? article.profile) &&
      article.parent.allow_visibility_edition && article.folder? &&
      (article.author == user || user.has_permission?("view_private_content", profile)))
    end
end