gitcoinco/code_fund_ads

class OrganizationUsersController < ApplicationController
  before_action :authenticate_user!
  before_action :set_organization
  before_action :set_organization_user, only: [:edit, :update, :destroy]
  before_action :authorize_edit!, except: [:index]

  def index
    organization_users = @organization.organization_users.includes(:user).order(role: :asc)
    @pagy, @organization_users = pagy(organization_users)
  end

  def update
    @organization_user.update(organization_user_params)

    respond_to do |format|
      if @organization_user.save
        format.html { redirect_to organization_users_path(@organization), notice: "User's membership in the organization was successfully updated." }
        format.json { render :show, status: :ok, location: @organization_user }
      else
        format.html { render :edit }
        format.json { render json: @organization_user.errors, status: :unprocessable_entity }
      end
    end
  end

  def new
    @organization_user = OrganizationUser.new
  end

  def create
    @organization_user = OrganizationUser.new(organization_user_params)

    respond_to do |format|
      if @organization_user.save
        format.html { redirect_to organization_users_path(@organization), notice: "User was successfully added to the organization." }
        format.json { render :show, status: :created, location: @organization_user }
      else
        format.html { render :new }
        format.json { render json: @organization_user.errors, status: :unprocessable_entity }
      end
    end
  end

  def destroy
    respond_to do |format|
      if @organization_user.destroy
        format.html { redirect_to organization_users_path(@organization), notice: "User was successfully removed from the organization." }
        format.json { head :no_content }
      else
        format.html { redirect_to organization_users_path(@organization), notice: @organization.errors.messages.to_s }
        format.json { render json: @organization_user.errors, status: :unprocessable_entity }
      end
    end
  end

  private

  def authorize_edit!
    unless authorized_user.can_edit_organization_users?(@organization)
      redirect_to organization_users_path(@organization), notice: "You do not have permission to update membership settings."
    end
  end

  def set_organization
    @organization = Current.organization
  end

  def set_organization_user
    @organization_user = Current.organization&.organization_users&.find(params[:id])
  end

  def organization_user_params
    params.require(:organization_user).permit(:role, :user_id, :organization_id)
  end
end