class PdfresourcesController < ApplicationController before_action :set_pdfresource, only: %i[ show edit update destroy ] before_action :require_admin, only: %i[ new create update destroy ] # GET /pdfresources or /pdfresources.json def index @pdfresources = Pdfresource.all end # GET /pdfresources/1 or /pdfresources/1.json def show end # GET /pdfresources/new def new @pdfresource = Pdfresource.new end # GET /pdfresources/1/edit def edit end # POST /pdfresources or /pdfresources.json def create @pdfresource = Pdfresource.new(pdfresource_params) respond_to do |format| if @pdfresource.save PdfProcessorService.new(@pdfresource).process_pdfs format.html { redirect_to @pdfresource, notice: "Resource was successfully created." } format.json { render :show, status: :created, location: @pdfresource } else format.html { render :new, status: :unprocessable_entity } format.json { render json: @pdfresource.errors, status: :unprocessable_entity } end end end # PATCH/PUT /pdfresources/1 or /pdfresources/1.json def update respond_to do |format| if @pdfresource.update(pdfresource_params) format.html { redirect_to @pdfresource, notice: "Pdfresource was successfully updated." } format.json { render :show, status: :ok, location: @pdfresource } else format.html { render :edit, status: :unprocessable_entity } format.json { render json: @pdfresource.errors, status: :unprocessable_entity } end end end # DELETE /pdfresources/1 or /pdfresources/1.json def destroy @pdfresource.destroy! respond_to do |format| format.html { redirect_to pdfresources_path, status: :see_other, notice: "Pdfresource was successfully destroyed." } format.json { head :no_content } end end private # Use callbacks to share common setup or constraints between actions. def set_pdfresource @pdfresource = Pdfresource.find(params.expect(:id)) end # Only allow a list of trusted parameters through. def pdfresource_params params.expect(pdfresource: [:name, :stripe_product_id, :price, :age_range, :curriculum, :feature_slot, :description, :card_description, pdfs: [], thumbnails: []]) end # must be admin! def require_admin unless Current.session.user&.is_admin redirect_to root_path, notice: "You must be an admin to perform this action." end end end