30 lines
703 B
Ruby
30 lines
703 B
Ruby
class UsersController < ApplicationController
|
|
load_and_authorize_resource
|
|
|
|
# GET /users/1
|
|
def show
|
|
@events = @user.events.where(state: :confirmed)
|
|
end
|
|
|
|
# GET /users/1/edit
|
|
def edit
|
|
end
|
|
|
|
# PATCH/PUT /users/1
|
|
def update
|
|
if @user.update(user_params)
|
|
flash[notice] = 'User was successfully updated.'
|
|
redirect_to @user
|
|
else
|
|
flash[:error] = "An error prohibited your Profile from being saved: #{@user.errors.full_messages.join('. ')}."
|
|
render :edit
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
# Only allow a trusted parameter "white list" through.
|
|
def user_params
|
|
params.require(:user).permit(:user_id, :name, :biography, :nickname, :affiliation)
|
|
end
|
|
end
|