docbrown/app/controllers/internal/buffer_updates_controller.rb
Mac Siri 465a676d75 Adjust BufferUpdatesController's authorization (#4070)
* Add back validation and add test

* Move article_admin?

* Adjust Buffer policy

* Create buffer_update_policy_spec
2019-09-20 11:50:34 -07:00

33 lines
1.1 KiB
Ruby

class Internal::BufferUpdatesController < Internal::ApplicationController
skip_before_action :authorize_admin # Instead, specific admin via authorize([:internal, Article])
def create
authorize([:internal, BufferUpdate])
article_id = params[:article_id]
article = Article.find(article_id) if article_id.present?
fb_post = params[:fb_post]
tweet = params[:tweet]
listing_id = params[:listing_id]
listing = ClassifiedListing.find(params[:listing_id]) if listing_id.present?
case params[:social_channel]
when "main_twitter"
Bufferizer.new("article", article, tweet).main_tweet!
render body: nil
when "satellite_twitter"
Bufferizer.new("article", article, tweet).satellite_tweet!
render body: nil
when "facebook"
Bufferizer.new("article", article, fb_post).facebook_post!
render body: nil
when "listings_twitter"
Bufferizer.new("listing", listing, tweet).listings_tweet!
render body: nil
end
end
def update
authorize([:internal, BufferUpdate])
BufferUpdate.upbuff!(params[:id], current_user.id, params[:body_text], params[:status])
render body: nil
end
end