talho/openphin

class Admin::UsersController < ApplicationController
  before_filter :admin_required
  app_toolbar "admin"

  def new
    @user = User.new

    respond_to do |format|
      format.html # new.html.erb
      format.xml  { render :xml => @user }
    end
  end
  
  def create
    I18n.locale = "#{I18n.locale}_signup_create"

    if params[:user][:organization_membership_requests_attributes].blank? || params[:user][:organization_membership_requests_attributes]["0"].blank? || params[:user][:organization_membership_requests_attributes]["0"]["organization_id"].blank?
      params[:user].delete("organization_membership_requests_attributes")
    else
      @selected_org = params[:user][:organization_membership_requests_attributes]["0"][:organization_id].to_i
    end

    unless params[:health_professional]
      params[:user][:role_requests_attributes]['0']['role_id'] = Role.public.id if params[:user].has_key?(:role_requests_attributes)
      params[:user].delete("organization_membership_requests_attributes")
      params[:user].delete("description")
    end

    if params[:user].has_key?(:role_requests_attributes)
      remove_blank_role_requests
      if params[:user][:role_requests_attributes]['0']['role_id'].blank? && params[:user][:role_requests_attributes]['0']['jurisdiction_id'].blank?
        params[:user][:role_requests_attributes]['0'] = {} if params[:user][:role_requests_attributes]['0'].nil?
        params[:user][:role_requests_attributes]['0']['role_id'] = Role.public.id
      end
    end
    if params[:user].has_key?(:jurisdiction) && !params[:user][:jurisdiction].blank?
      j = Jurisdiction.find_by_name(params[:user][:jurisdiction])
      params[:user][:role_requests_attributes] = {0 => {:jurisdiction => j, :role => Role.public}}
    end

    @user = User.new params[:user]
    @user.email = @user.email.downcase
    @user.role_requests.each { |role_request|
      role_request.requester = current_user
      role_request.approver = current_user if current_user.is_admin_for?(role_request.jurisdiction)
    }
    @user.organization_membership_requests.each { |omr| omr.requester = current_user }

    errors = Array.new
    if @user.save
      @user.confirm_email!

      # Handle new devices, role requests and organizations (ext only)
      success = true
      if params[:user].has_key?(:new_devices)
        dev_success,dev_errors = @user.update_devices(params[:user][:new_devices], current_user)
        success &&= dev_success
        errors.concat(dev_errors)
      end
      if params[:user].has_key?(:new_roles)
        result,rq_errors = @user.handle_role_requests(params[:user][:new_roles], current_user)
        success &&= (result == "success")
        errors.concat(rq_errors)
      end
      if params[:user].has_key?(:new_orgs)
        org_success,org_errors = @user.handle_org_requests(params[:user][:new_orgs], current_user)
        success &&= (org_success == "success")
        errors.concat(org_errors)
      end
 
      if success
        flash[:notice] = 'The user has been successfully created.'
        respond_to do |format|
          format.html { redirect_to new_admin_user_path }
          format.json { render :json => {:flash => flash[:notice], :type => :completed, :success => true} }
          format.xml  { render :xml => @user, :status => :created, :location => @user }
        end
        return
      end
#      @user.destroy
    end

    respond_to do |format|
      format.html { render :action => "new" }
      format.json { render :json => {:flash => nil, :type => :error, :errors => @user.errors.full_messages + errors} }
      format.xml  { render :xml => @user.errors, :status => :unprocessable_entity }
    end        
  end

  def deactivate
    user_ids = params[:users][:user_ids].reject{|u| ["",current_user.id.to_s].include? u } # avoid current user deleting self
    @users = user_ids.present? ? User.find_all_by_id(user_ids) : []
    if @users.empty?
      flash[:error] ||= ""
      flash[:error] += "A valid user was not selected."
    end
    @users.each do |user|
      # Make sure current_user has admin privileges over the user to be deleted
      if user.editable_by?(current_user)
        user.destroy
      else
        flash[:error] ||= ""
        flash[:error] += "User #{current_user.email} does not have permission to delete #{user.email}.<br>"
      end
    end
    respond_to do |format|
      format.html {}
      format.json { render :json => {:delete_result => flash[:error].blank?, :success => true} }
    end
  end

end