61 lines
1.6 KiB
Ruby
61 lines
1.6 KiB
Ruby
module IssuableActions
|
|
extend ActiveSupport::Concern
|
|
|
|
included do
|
|
before_action :labels, only: [:show, :new, :edit]
|
|
before_action :authorize_destroy_issuable!, only: :destroy
|
|
before_action :authorize_admin_issuable!, only: :bulk_update
|
|
end
|
|
|
|
def destroy
|
|
issuable.destroy
|
|
destroy_method = "destroy_#{issuable.class.name.underscore}".to_sym
|
|
TodoService.new.public_send(destroy_method, issuable, current_user)
|
|
|
|
name = issuable.human_class_name
|
|
flash[:notice] = "The #{name} was successfully deleted."
|
|
redirect_to polymorphic_path([@project.namespace.becomes(Namespace), @project, issuable.class])
|
|
end
|
|
|
|
def bulk_update
|
|
result = Issuable::BulkUpdateService.new(project, current_user, bulk_update_params).execute(resource_name)
|
|
quantity = result[:count]
|
|
|
|
render json: { notice: "#{quantity} #{resource_name.pluralize(quantity)} updated" }
|
|
end
|
|
|
|
private
|
|
|
|
def labels
|
|
@labels ||= LabelsFinder.new(current_user, project_id: @project.id).execute
|
|
end
|
|
|
|
def authorize_destroy_issuable!
|
|
unless can?(current_user, :"destroy_#{issuable.to_ability_name}", issuable)
|
|
return access_denied!
|
|
end
|
|
end
|
|
|
|
def authorize_admin_issuable!
|
|
unless can?(current_user, :"admin_#{resource_name}", @project)
|
|
return access_denied!
|
|
end
|
|
end
|
|
|
|
def bulk_update_params
|
|
params.require(:update).permit(
|
|
:issuable_ids,
|
|
:assignee_id,
|
|
:milestone_id,
|
|
:state_event,
|
|
:subscription_event,
|
|
label_ids: [],
|
|
add_label_ids: [],
|
|
remove_label_ids: []
|
|
)
|
|
end
|
|
|
|
def resource_name
|
|
@resource_name ||= controller_name.singularize
|
|
end
|
|
end
|