mysociety/alaveteli

# app/controllers/alaveteli_pro/embargoes_controller.rb
# Controller for embargoes
#
# Copyright (c) 2008 UK Citizens Online Democracy. All rights reserved.
# Email: hello@mysociety.org; WWW: http://www.mysociety.org/

class AlaveteliPro::EmbargoesController < AlaveteliPro::BaseController
  skip_before_action :pro_user_authenticated?, only: [:destroy, :destroy_batch]

  def create
    @info_request = InfoRequest.find(embargo_params[:info_request_id])
    authorize! :create_embargo, @info_request

    # Embargoes cannot be created individually on batch requests
    if @info_request.info_request_batch_id
      # shouldn't be reachable because CanCan should catch it, but just in case
      raise PermissionDenied
    end

    @embargo = AlaveteliPro::Embargo.new(embargo_params)
    if @embargo.save
      flash[:notice] = _("Your request will now be private on " \
                         "{{site_name}} until {{expiry_date}}.",
                         site_name: site_name,
                         expiry_date: I18n.l(
                           @embargo.publish_at, format: '%d %B %Y'))
    else
      flash[:error] = _("Sorry, something went wrong updating your " \
                        "request's privacy settings, please try again.")
    end

    redirect_to request_url(@info_request)
  end

  def destroy
    @embargo = AlaveteliPro::Embargo.find(params[:id])
    authorize! :destroy, @embargo
    @info_request = @embargo.info_request
    # Embargoes cannot be updated individually on batch requests
    raise PermissionDenied if @info_request.info_request_batch_id

    if @embargo.destroy
      @info_request.log_event('expire_embargo', {})
      flash[:notice] = _("Your request is now public!")
    else
      flash[:error] = _("Sorry, something went wrong publishing your " \
                        "request, please try again.")
    end
    redirect_to request_url(@info_request)
  end

  def destroy_batch
    @info_request_batch = InfoRequestBatch.find(
      params[:info_request_batch_id])
    authorize! :destroy_embargo, @info_request_batch
    info_request_ids = @info_request_batch.info_requests.pluck(:id)
    embargoes = AlaveteliPro::Embargo.where(info_request_id: info_request_ids)
    if embargoes.destroy_all
      @info_request_batch.embargo_duration = nil
      @info_request_batch.save!
      @info_request_batch.log_event('expire_embargo', {})
      flash[:notice] = _("Your requests are now public!")
    else
      flash[:error] = _("Sorry, something went wrong publishing your " \
                        "requests, please try again.")
    end
    if params[:info_request_id]
      @info_request = InfoRequest.find(params[:info_request_id])
      redirect_to show_request_path(
        url_title: @info_request.url_title)
    else
      redirect_to show_alaveteli_pro_batch_request_path(@info_request_batch)
    end
  end

  private

  def embargo_params
    params.
      require(:alaveteli_pro_embargo).
      permit(:info_request_id, :embargo_duration)
  end
end