app/controllers/application_controller.rb

	application_controller.rb revision f79d91b6b40a627cf127c6bc0b22392b1c5018a2
class ApplicationController < ActionController::Base

  before_filter do
    if current_user && current_user.is_admin?
      Rack::MiniProfiler.authorize_request
    end
  end

  protect_from_forgery
  ensure_security_headers

  include Pagination
  include PathHelpers
  include ApplicationHelper

  PARAMS_TO_PASS_ON_REDIRECT = %i(access-token)

  # CanCan Authorization
  rescue_from CanCan::AccessDenied do |exception|
    if request.format.html?
      redirect_to root_url, alert: exception.message
    else
      render \
        status:       :forbidden,
        content_type: 'text/plain',
        text:         exception.message
    end
  end

  if defined? PG
    # A foreign key constraint exception from the database
    rescue_from PG::Error do |exception|
      message = exception.message
      if message.include?('foreign key constraint')
        logger.warn(message)
        # shorten the message
        message = message.match(/DETAIL: .+/).to_s

        redirect_to :back,
          flash: {error: "Whatever you tried to do - the server is unable to process your request because of a foreign key constraint. (#{message})" }
      else
        # anything else
        raise exception
      end
    end
  end


  protected

  def current_ability
    @current_ability ||= Ability.new(current_user, params[:'access-token'])
  end

  def params_to_pass_on_redirect
    params.select { |k, _v| PARAMS_TO_PASS_ON_REDIRECT.include?(k) }
  end

  def authenticate_admin!
    unless admin?
      flash[:error] = 'you need admin privileges for this action'
      redirect_to :root
    end
  end

  def after_sign_in_path_for(resource)
    root_path
  end

  def after_sign_out_path_for(resource)
    request.referrer
  end

  def display_all?
    params[:all].present?
  end

  def paginate_for(collection)
    Kaminari.paginate_array(collection).page(params[:page])
  end

  def locid_for(resource, *commands, **query_components)
    locid = URI.escape(resource.locid)
    iri = "#{request.base_url}#{locid}"
    iri << "///#{commands.join('///')}" if commands.any?
    iri << "?#{query_components.to_query}" if query_components.any?
    iri
  end

  helper_method :display_all?
  helper_method :locid_for

end