2
0
mirror of https://github.com/moebooru/moebooru synced 2025-08-22 01:47:48 +00:00
moebooru/app/controllers/user_record_controller.rb
petopeto 30ff4fccd3 --HG--
branch : moe
extra : convert_revision : svn%3A2d28d66d-8d94-df11-8c86-00306ef368cb/trunk/moe%405
2010-04-20 23:05:11 +00:00

41 lines
1.3 KiB
Ruby

class UserRecordController < ApplicationController
layout "default"
before_filter :privileged_only, :only => [:create, :destroy]
def index
if params[:user_id]
@user = User.find(params[:user_id])
@user_records = UserRecord.paginate :per_page => 20, :order => "created_at desc", :conditions => ["user_id = ?", params[:user_id]], :page => params[:page]
else
@user_records = UserRecord.paginate :per_page => 20, :order => "created_at desc", :page => params[:page]
end
end
def create
@user = User.find(params[:user_id])
if request.post?
if @user.id == @current_user.id
flash[:notice] = "You cannot create a record for yourself"
else
@user_record = UserRecord.create(params[:user_record].merge(:user_id => params[:user_id], :reported_by => @current_user.id))
flash[:notice] = "Record updated"
end
redirect_to :action => "index", :user_id => @user.id
end
end
def destroy
if request.post?
@user_record = UserRecord.find(params[:id])
if @current_user.is_mod_or_higher? || @current_user.id == @user_record.reported_by
UserRecord.destroy(params[:id])
respond_to_success("Record updated", :action => "index", :user_id => params[:id])
else
access_denied()
end
end
end
end