class OrdersController < ApplicationController include ActionView::Helpers::NumberHelper include ApplicationHelper load_and_authorize_resource def new init @order = @user.orders.build products = (@user.products.for_sale.select("products.*", "sum(order_items.count) as count").group(:product_id).order("count desc") | Product.for_sale) @order.g_order_items products end def create init @order = @user.orders.build order_params if @order.save message = "#{@order.to_sentence} ordered. Enjoy it!" flash[:success] = message slack_notification(@user, message) redirect_to root_path else @order.g_order_items Product.for_sale render 'new' end end def destroy order = Order.find(params[:id]) if order.created_at > 5.minutes.ago order.cancel flash[:success] = "Order has been removed." else flash[:error] = "This order has been placed too long ago, it can't be removed. Please contact a sysadmin." end redirect_to root_path end def overview @users = User.members.publik.order(:uid) end def quickpay user = User.find(params[:user_id]) order = user.orders.build order.order_items << OrderItem.new(count: 1, product: user.dagschotel, order: order) if order.save flash[:success] = "Quick pay succeeded. #{view_context.link_to("Undo", [user, order], method: :delete)}." else flash[:error] = order.errors.full_messages.first end redirect_to root_path end private def init @user = User.find(params[:user_id]) if @user.koelkast? flash[:error] = "Koelkast can't order things." redirect_to root_path end if @user.private && current_user != @user flash[:error] = "You can't order stuff for this person." redirect_to root_path end unless current_user.koelkast? || current_user.admin? || current_user == @user flash[:error] = "Please don't order stuff for other people" redirect_to root_path end end def order_params params.require(:order).permit(order_items_attributes: [:count, :price, product_attributes: [:id]]) end end