Setup of product variants

app/controllers/suppliers/product_variants_controller.rb

@@ -0,0 +1,62 @@
+module Suppliers
+  class ProductVariantsController < Suppliers::ApplicationController
+    layout 'tablet'
+
+    # GET /product_variants
+    # GET /product_variants.json
+    def index
+    end
+
+    # GET /product_variants/1
+    # GET /product_variants/1.json
+    def show
+    end
+
+    # GET /product_variants/new
+    # GET /product_variants/new.json
+    def new
+    end
+
+    # GET /product_variants/1/edit
+    def edit
+    end
+
+    # POST /product_variants
+    # POST /product_variants.json
+    def create
+    end
+
+    # PUT /product_variants/1
+    # PUT /product_variants/1.json
+    def update
+      @product_variant = ProductVariant.find(params[:id])
+      head :unprocessable_entity and return unless product_id = product_variant_params[:product_id]
+      product = Product.find(product_id)
+      head :forbidden and return unless product.supplier_id == current_supplier.id
+
+      if @product_variant.update_attributes(product_variant_params)
+        render json: @product_variant
+      else
+        render json: {errors: @product_variant.errors}, status: :unprocessable_entity
+      end
+    end
+
+    # DELETE /product_variants/1
+    # DELETE /product_variants/1.json
+    def destroy
+      @product_variant = ProductVariant.find_by_supplier_id_and_id!(current_supplier.id, params[:id])
+      @product_variant.destroy
+
+      respond_to do |format|
+        format.html { redirect_to suppliers_product_variants_url, notice: t('action.destroy.successfull', model: ProductVariant.model_name.human) }
+        format.json { head :no_content }
+      end
+    end
+
+    private
+
+    def product_variant_params
+      params.require(:product_variant).permit(:name, :product_id)
+    end
+  end
+end