module Admin class TicketsController < Admin::BaseController load_and_authorize_resource :conference, find_by: :short_title load_and_authorize_resource :ticket, through: :conference def index authorize! :update, Ticket.new(conference_id: @conference.id) end def new @ticket = @conference.tickets.new end def create @ticket = @conference.tickets.new(ticket_params) if @ticket.save(ticket_params) redirect_to admin_conference_tickets_path(conference_id: @conference.short_title), notice: 'Ticket successfully created.' else flash[:error] = "Creating Ticket failed: #{@ticket.errors.full_messages.join('. ')}." render :new end end def edit; end def update if @ticket.update_attributes(ticket_params) redirect_to admin_conference_tickets_path(conference_id: @conference.short_title), notice: 'Ticket successfully updated.' else flash[:error] = "Ticket update failed: #{@ticket.errors.full_messages.join('. ')}." render :edit end end def destroy if @ticket.destroy redirect_to admin_conference_tickets_path(conference_id: @conference.short_title), notice: 'Ticket successfully destroyed.' else redirect_to admin_conference_tickets_path(conference_id: @conference.short_title), error: 'Ticket was successfully destroyed.' \ "#{@ticket.errors.full_messages.join('. ')}." end end private def ticket_params params.require(:ticket).permit(:conference, :title, :url, :description, :conference_id, :price_cents, :price_currency, :price) end end end