talho/openphin

class Admin::RoleAssignmentsController < ApplicationController
  before_filter :admin_required, :except => :destroy
  app_toolbar "admin"
  
  
  def new
  end
  
  def create
    jurisdiction = Jurisdiction.find(params[:role_assigns][:jurisdiction_id]) unless params[:role_assigns][:jurisdiction_id].blank?
    if jurisdiction.nil?
      flash[:error] = "No jurisdiction was specified"
      redirect_to new_role_assignment_path
    elsif current_user.is_admin_for?(jurisdiction)
      role = Role.find(params[:role_assigns][:role_id]) unless params[:role_assigns][:role_id].blank?
      if role.nil?
        flash[:error] = "No role was specified"
        redirect_to new_role_assignment_path
      else
          params[:role_assigns][:user_ids].each_with_index{|userid, i| params[:role_assigns][:user_ids].delete_at(i) if userid.blank?}
        users = User.find_all_by_id(params[:role_assigns][:user_ids]) unless params[:role_assigns][:user_ids].blank?
        if users.nil?
          flash[:error] = "No users were specified"
          redirect_to new_role_assignment_path
        else
          User.assign_role(role, jurisdiction, users)
          users.each do |user|
            AppMailer.role_assigned(role, jurisdiction, user, current_user).deliver
          end
          connector = users.size == 1 ? "has" : "have"
          flash[:notice] = "#{users.map(&:email).to_sentence} #{connector} been approved for the role #{role.name} in #{jurisdiction.name}"
          redirect_to new_role_assignment_path
        end 
      end
    else
      flash[:notice] = "The role assignment is outside of your authorized jurisdiction."
      redirect_to new_role_assignment_path
    end
  end

  def destroy
    role_assignment = RoleMembership.find(params[:id])
    if role_assignment.blank?
      flash[:error] = "Invalid role membership specified"
      if session[:return_to].blank?
        redirect_to root_path
      else
        redirect_to session[:return_to]
      end
    elsif current_user.is_admin_for?(role_assignment.jurisdiction) || current_user.id == role_assignment.user_id
      name = role_assignment.role.name
      jurisdiction = role_assignment.jurisdiction.name
      user = role_assignment.user.display_name
      role_assignment.destroy
      flash[:notice] = "Role #{name} removed from #{user} in #{jurisdiction}"
      if session[:return_to].blank?
        redirect_to root_path
      else
        redirect_to session[:return_to]
      end
    else
      flash[:error] = "This resource does not exist or is not available."
      redirect_to root_path
    end
  end
end