teddim/gCamp

class ApplicationController < ActionController::Base
  # Prevent CSRF attacks by raising an exception.
  # For APIs, you may want to use :null_session instead.
  protect_from_forgery with: :exception

  helper_method :current_user
  helper_method :authenticate_user
  helper_method :project_member
  helper_method :project_owner
  helper_method :projects_list
  helper_method :previous_page
  helper_method :belong_to_same_project

  before_action :authenticate_user

  def previous_page
    request.fullpath
  end

  def current_user
    User.find_by(id: session[:user_id])
  end

  def projects_list
    if current_user.is_admin
      Project.all
    else
      current_user.projects
    end
  end

  def authenticate_user
    unless current_user
      session[:previous_page] = request.fullpath
      flash[:error] = "You must sign in"
      redirect_to signin_path
    end
  end

  def project_member
    unless (current_user.is_project_member(@project) || current_user.is_admin)
      flash[:error] = "You do not have access to that project"
      redirect_to projects_path
    end
  end

  def project_owner
    unless (current_user.is_project_owner(@project) || current_user.is_admin)
      flash[:error] = "You do not have access"
      redirect_to project_path(@project)
    end
  end

  def belong_to_same_project(user1,user2)
    unless user2.projects.where(id: user1.projects) == []
      true
    end
  end

end