class OrdersController < ApplicationController include OrdersHelper load_and_authorize_resource def new @user = User.find(params[:user_id]) @order = @user.orders.build @products = Product.all @order_products = @order.order_products @products.each do |p| @order_products.build(product: p) end end def create @user = User.find(params[:user_id]) @order = @user.orders.build(order_params) @products = Product.all @order_products = @order.order_products if @order.save flash[:success] = "#{@order.to_sentence} ordered. Enjoy it!" redirect_to root_path else render 'new' end end def overview @users_by_name = User.members.order(:name) @users_by_order = User.members.order(:orders_count).reverse_order end def quickpay user = User.find(params[:user_id]) order = user.orders.build order.products << user.dagschotel if order.save flash[:success] = "Quick pay succeeded" else flash[:error] = order.errors.full_messages.first end redirect_to root_path end private def order_params params.require(:order).permit(order_products_attributes: [:count, product_attributes: [:id, :price, :stock]]) end end