mirror of
https://github.com/astuto/astuto.git
synced 2025-12-15 19:27:52 +01:00
Add button to toggle comment is post update
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
class CommentsController < ApplicationController
|
||||
before_action :authenticate_user!, only: [:create]
|
||||
before_action :authenticate_user!, only: [:create, :update]
|
||||
|
||||
def index
|
||||
comments = Comment
|
||||
@@ -33,12 +33,32 @@ class CommentsController < ApplicationController
|
||||
end
|
||||
end
|
||||
|
||||
def update
|
||||
comment = Comment.find_by(post_id: params[:post_id])
|
||||
comment.assign_attributes(comment_params)
|
||||
|
||||
if !current_user.power_user? && current_user.id != post.user_id
|
||||
render json: I18n.t('errors.unauthorized'), status: :unauthorized
|
||||
return
|
||||
end
|
||||
|
||||
if comment.save
|
||||
render json: comment.attributes.merge(
|
||||
{ user_full_name: current_user.full_name, user_email: current_user.email}
|
||||
)
|
||||
else
|
||||
render json: {
|
||||
error: I18n.t('errors.comment.update', message: comment.errors.full_messages)
|
||||
}, status: :unprocessable_entity
|
||||
end
|
||||
end
|
||||
|
||||
private
|
||||
|
||||
def comment_params
|
||||
params
|
||||
.require(:comment)
|
||||
.permit(:body, :parent_id)
|
||||
.permit(:body, :parent_id, :is_post_update)
|
||||
.merge(
|
||||
user_id: current_user.id,
|
||||
post_id: params[:post_id]
|
||||
|
||||
Reference in New Issue
Block a user