Corrections in SchedulesController

- Controler file name pluralized
- Load and authorization fixed and improved
- Consider that save can fail in create action
- Eliminate unnecessary if in update action
- Ability and tests related to the schedules link in the admin sidebar fixed

app/controllers/admin/schedules_controller.rb

@@ -0,0 +1,52 @@
+module Admin
+  class SchedulesController < Admin::BaseController
+    # By authorizing 'conference' resource, we can ensure there will be no unauthorized access to
+    # the schedule of a conference, which should not be accessed in the first place
+    load_and_authorize_resource :conference, find_by: :short_title
+    load_and_authorize_resource :program, through: :conference, singleton: true
+    load_and_authorize_resource :schedule, through: :program
+    load_resource :event_schedules, through: :schedule
+    load_resource :selected_schedule, through: :program, singleton: true
+    load_resource :venue, through: :conference, singleton: true
+
+    skip_before_action :verify_authenticity_token, only: [:update]
+
+    def index; end
+
+    def create
+      if @schedule.save
+        redirect_to action: 'show', id: @schedule.id
+      else
+        redirect_to admin_conference_schedules_path(conference_id: @conference.short_title),
+                    error: 'Could not create schedule'
+      end
+    end
+
+    def show
+      @event_schedules = @schedule.event_schedules
+      @unscheduled_events = @program.events.confirmed - @schedule.events
+      @dates = @conference.start_date..@conference.end_date
+      @rooms = (@venue && @venue.rooms.any?) ? @venue.rooms : [Room.new(name: 'No Rooms!', size: 0)]
+    end
+
+    def update
+      if params[:selected_schedule] == 'true'
+        @program.selected_schedule_id = params[:id].to_i
+      elsif params[:selected_schedule] == 'false' && (@selected_schedule.id == params[:id].to_i)
+        @program.selected_schedule_id = nil
+      end
+      @program.save
+      render json: { 'status' => 'ok' }
+    end
+
+    def destroy
+      if @schedule.destroy
+        redirect_to admin_conference_schedules_path(conference_id: @conference.short_title),
+                    notice: 'Schedule successfully deleted.'
+      else
+        redirect_to admin_conference_schedules_path(conference_id: @conference.short_title),
+                    error: "Schedule couldn't be deleted. #{@schedule.errors.full_messages.join('. ')}."
+      end
+    end
+  end
+end