crewmate/crewmate

# -*- encoding : utf-8 -*-
class CommentsController < ApplicationController

  before_filter :load_comment, :except => :create

  rescue_from CanCan::AccessDenied do |exception|
    handle_cancan_error(exception)
  end

  def create
    # pass the project so target.project lookup can be skipped
    authorize! :comment, target, @current_project

    comment = target.comments.create_by_user current_user, params[:comment]

    respond_to do |wants|
      wants.any(:html, :m)  {
        if request.xhr? or iframe?
          if comment.new_record?
            output_errors_json(comment)
          else
            render :partial => 'comment', :locals => { :comment => comment, :threaded => true }
          end
        else
          redirect_back_or_to root_path
        end
      }
    end
  end

  def edit
    authorize! :edit, @comment

    respond_to do |wants|
      wants.any(:html, :m) { render :layout => false if request.xhr? }
    end
  end

  def update
    authorize! :update, @comment

    @comment.update_attributes params[:comment]

    respond_to do |wants|
      wants.any(:html, :m) {
        if request.xhr? or iframe?
          render :partial => 'comment', :locals => { :comment => @comment, :threaded => true }
        else
          redirect_to [target.project, target]
        end
      }
    end
  end

  def destroy
    authorize! :destroy, @comment
    @comment.destroy

    if request.xhr?
      head :ok
    else
      redirect_to [target.project, target]
    end
  end

  protected

  def target
    # can't use `memoize` because it freezes the object
    @target ||= if params[:conversation_id]
      @current_project.conversations.find params[:conversation_id]
    else
      @current_project.tasks.find params[:task_id]
    end
  end

  def load_comment
    @comment = target.comments.find params[:id]
  end

end