pulibrary / tigerdata-app / 7e114010-4302-48ab-8569-6ef727f09d6c

class UsersController < ApplicationController

  before_action :set_breadcrumbs

  before_action :check_user_access, only: %i[index show edit update]

  def index

    @users = User.order("uid ASC NULLS LAST").page params[:page]

  end

  def show

    add_breadcrumb("User")

    @user = User.find(params[:id])

  end

  def edit

    add_breadcrumb("Edit User")

    @user = User.find(params[:id])

  end

  def update

    update_user_with_params

    redirect_to user_path(@user)

  rescue => ex

    short_message = "Error saving user #{params[:id]}"

    Rails.logger.error "#{short_message}: #{ex.message}"

    Honeybadger.notify "#{short_message}: #{ex.message}"

    flash[:alert] = short_message

    redirect_to user_path(id: params[:id])

  end

  def lookup

    query = (params["query"] || "").strip.downcase

    matches = PrincetonUsers.user_list_query(query)

    result = {

      suggestions: matches.take(30).map { |match| { "value": match[:display_name] || "", "data": match[:uid] } }

    }

    render json: result

  end

  private

    def set_breadcrumbs

      add_breadcrumb("Users", users_path)

    end

    def check_user_access

      return if current_user.developer || current_user.sysadmin || current_user.trainer

      flash[:notice] = "You do not have access to this page (#{current_user.uid})"

      redirect_to dashboard_path

    end

    def update_user_with_params

      @user = User.find(params[:id])

      @user.given_name = params["user"]["given_name"]

      @user.family_name = params["user"]["family_name"]

      @user.display_name = params["user"]["display_name"]

      @user.eligible_sponsor = params["user"]["eligible_sponsor"] == "1"

      @user.eligible_manager = params["user"]["eligible_manager"] == "1"

      @user.developer = params["user"]["developer"] == "1"

      @user.sysadmin = params["user"]["sysadmin"] == "1"

      @user.trainer = params["user"]["trainer"] == "1"

      @user.save!

    end

end