docbrown/app/controllers/dashboards_controller.rb

class DashboardsController < ApplicationController
  before_action :set_no_cache_header
  before_action :authenticate_user!
  after_action :verify_authorized

  def show
    fetch_and_authorize_user

    target = @user
    not_authorized if params[:org_id] && !@user.org_admin?(params[:org_id] || @user.any_admin?)

    @organizations = @user.admin_organizations.includes(:users)
    @member_organizations = @user.member_organizations

    if params[:which] == "organization" && params[:org_id] && (@user.org_admin?(params[:org_id]) || @user.any_admin?)
      target = @organizations.find_by(id: params[:org_id])
      @organization = target
    end
    @articles = target.articles.sorting(params[:sort]).decorate
    # Updates analytics in background if appropriate:
    ArticleAnalyticsFetcher.new.delay.update_analytics(current_user.id) if @articles && ApplicationConfig["GA_FETCH_RATE"] < 50 # Rate limit concerned, sometimes we throttle down.
  end

  def following
    fetch_and_authorize_user
    @follows = @user.follows_by_type("User").
      order("created_at DESC").includes(:followable).limit(80)
    @followed_tags = @user.follows_by_type("ActsAsTaggableOn::Tag").
      order("points DESC").includes(:followable).limit(80)
    @followed_organizations = @user.follows_by_type("Organization").
      order("created_at DESC").includes(:followable).limit(80)
    @followed_podcasts = @user.follows_by_type("Podcast").
      order("created_at DESC").includes(:followable).limit(80)
  end

  def followers
    fetch_and_authorize_user
    if params[:which] == "user_followers"
      @follows = Follow.where(followable_id: @user.id, followable_type: "User").
        includes(:follower).order("created_at DESC").limit(80)
    elsif params[:which] == "organization_user_followers"
      @follows = Follow.where(followable_id: @user.organization_id, followable_type: "Organization").
        includes(:follower).order("created_at DESC").limit(80)
    end
  end

  def pro
    user_or_org = if params[:org_id]
                    org = Organization.find_by(id: params[:org_id])
                    authorize org, :pro_org_user?
                    org
                  else
                    authorize current_user, :pro_user?
                    current_user
                  end
    @organizations = current_user.member_organizations
    @dashboard = Dashboard::Pro.new(user_or_org)
  end

  private

  def fetch_and_authorize_user
    @user = if params[:username] && current_user.any_admin?
              User.find_by(username: params[:username])
            else
              current_user
            end
    authorize (@user || User), :dashboard_show?
  end
end