David Heinemeier Hansson
39 lines
698 B
Ruby
39 lines
698 B
Ruby
class Cards::CommentsController < ApplicationController
|
|
include CardScoped
|
|
|
|
before_action :set_comment, only: %i[ show edit update destroy ]
|
|
before_action :ensure_authorship, only: %i[ edit update destroy ]
|
|
|
|
def create
|
|
@card.capture Comment.new(comment_params)
|
|
end
|
|
|
|
def show
|
|
end
|
|
|
|
def edit
|
|
end
|
|
|
|
def update
|
|
@comment.update! comment_params
|
|
end
|
|
|
|
def destroy
|
|
@comment.destroy
|
|
redirect_to @card
|
|
end
|
|
|
|
private
|
|
def set_comment
|
|
@comment = @card.comments.find(params[:id])
|
|
end
|
|
|
|
def ensure_authorship
|
|
head :forbidden if Current.user != @comment.creator
|
|
end
|
|
|
|
def comment_params
|
|
params.require(:comment).permit(:body)
|
|
end
|
|
end
|