unclesp1d3r/CipherSwarm

# frozen_string_literal: true

# SPDX-FileCopyrightText:  2024 UncleSp1d3r
# SPDX-License-Identifier: MPL-2.0

class AdminController < ApplicationController
  before_action :authenticate_user!

  # Retrieves all users and projects and renders the index view.
  #
  # This method is responsible for authorizing the user to manage all resources,
  # retrieving all users and projects from the database, and then rendering the
  # index view with the retrieved data.
  def index
    authorize! :read, :admin_dashboard
    @users = User.order(:name)
    @projects = Project.all
  end

  def create_user
    authorize! :create, :user

    @user = User.new(user_params)

    respond_to do |format|
      if @user.save
        @user.lock_access!
        format.html { redirect_to admin_index_path, notice: "User was successfully created." }
        format.json { render :show, status: :created, location: @user }
      else
        format.html { render :new_user, status: :unprocessable_entity }
        format.json { render json: @user.errors, status: :unprocessable_entity }
      end
    end
  end

  # Locks the access for a user.
  #
  # This method is used to lock the access for a specific user. It requires the user to have the ability to manage all resources.
  #
  # Params:
  # - params[:id] (Integer): The ID of the user to lock.
  #
  # Returns:
  # - None
  #
  # Example:
  #   lock_user
  #
  def lock_user
    authorize! :manage, :all
    user = User.find(params[:id])
    user.lock_access!
    redirect_to admin_index_path
  end

  def new_user
    authorize! :manage, :all
    @user = User.new
  end

  # Unlocks a user's access.
  #
  # This method is responsible for unlocking a user's access by calling the `unlock_access!` method on the user object.
  # It requires the user to have the necessary authorization to manage all resources.
  #
  # Params:
  # - params[:id] (Integer) - The ID of the user to unlock.
  #
  # Returns:
  # - None
  #
  # Example usage:
  #   unlock_user
  #
  def unlock_user
    authorize! :manage, :all
    user = User.find(params[:id])
    user.unlock_access!
    redirect_to admin_index_path
  end

  private

  def user_params
    params.require(:user).permit(:name, :email, :password, :password_confirmation, :role)
  end
end