petities/petitions.eu

class UpdatesController < ApplicationController
  before_action :load_update, only: [:show, :edit, :update]
  before_action :load_updates, only: [:index, :show]

  def index
    respond_to :html, :js, :rss
  end

  def new
    @offices = Office.all
    @petitions = Petition.live
    @update = Update.new
    # authorize @update
  end

  def show
  end

  def create
    @update = Update.new(update_params)
    authorize @update

    respond_to do |format|
      if @update.save
        if @update.petition
          format.html { redirect_to @update.petition, flash: { success: t('update.created') } }
        end
        format.html { redirect_to @update, flash: { success: t('update.created') } }
        format.json { render :show, status: :created, location: @update }
      else
        format.html { render :new }
        format.json { render json: @update.errors, status: :unprocessable_entity }
      end
    end
  end

  def edit
    authorize @update
  end

  def update
    authorize @update

    respond_to do |format|
      if @update.update_attributes(update_params)
        format.html { redirect_to @update, flash: { success: t('update.updated') } }
        format.json { render :show, status: :created, location: @update }
      else
        format.html { render :edit }
        format.json { render json: @update.errors, status: :unprocessable_entity }
      end
    end
  end

  private

  def load_update
    @update = Update.friendly.find(params[:id])
  end

  def load_updates
    @page = cleanup_page(params[:page])
    per_page = request.xhr? ? 3 : 8

    @updates = Update.all.page(@page).per(per_page)
  end

  # Never trust parameters from the scary internet, only allow the white list through.
  def update_params
    params.require(:update).permit(
      :title, :text, :show_on_home, :show_on_office, :show_on_petition,
      :petition_id, :office_id
    )
  end
end