osem-fcy/app/controllers/admin/schedule_controller.rb

module Admin
  class ScheduleController < Admin::BaseController
    # By authorizing 'conference' resource, we can ensure there will be no unauthorized access to
    # the schedule of a conference, which should not be accessed in the first place
    load_and_authorize_resource :schedule
    load_and_authorize_resource :conference, find_by: :short_title
    load_and_authorize_resource :program, through: :conference, singleton: true
    load_resource :venue, through: :conference, singleton: true

    skip_before_action :verify_authenticity_token, only: [:update]

    def index
      @schedules = @conference.program.schedules
      @selected_schedule = @conference.program.selected_schedule
    end

    def create
      new_schedule = @program.schedules.create
      redirect_to action: 'show', id: new_schedule.id
    end

    def show
      @schedule_id = params[:id].to_i
      @selected_schedule_id = @conference.program.selected_schedule.try(:id)
      @dates = @conference.start_date..@conference.end_date
      @rooms = (@venue && @venue.rooms.any?) ? @venue.rooms : [Room.new(name: 'No Rooms!', size: 0)]
    end

    def update
      if params[:selected_schedule].present?
        if params[:selected_schedule] == 'true'
          @program.selected_schedule_id = params[:id].to_i
        elsif params[:selected_schedule] == 'false' && (@program.selected_schedule_id == params[:id].to_i)
          @program.selected_schedule_id = nil
        end
        @program.save!
        render json: { 'status' => 'ok' }
        return
      end

      event = Event.where(guid: params[:event]).first
      error_message = nil
      if event.nil?
        error_message = "Could not find event GUID: #{params[:event]}"
      end

      event_schedule = event.event_schedule(params[:schedule])

      if params[:date] == 'none'
        event_schedule.destroy if event_schedule.present?
        render json: { 'status' => 'ok' }
        return
      end

      Rails.logger.debug(event_schedule.present?.to_s)
      event_schedule = event.event_schedules.new(schedule_id: params[:schedule]) unless event_schedule.present?
      room = Room.where(guid: room_params).first

      if room.nil?
        error_message = "Could not find room GUID: #{params[:room]}"
      end

      unless error_message.nil?
        render json: { 'status' => 'error', 'message' => error_message }, status: 500
        return
      end

      event_schedule.room = room
      time = "#{params[:date]} #{params[:time]}"

      Rails.logger.debug("Loading #{time}")
      # FIXME: Same here as in events_controller.rb. Event timezone should be applied
      # only on output
      # zone = ActiveSupport::TimeZone::new(@conference.timezone)
      # start_time = DateTime.strptime(time + zone.formatted_offset, "%Y-%m-%d %k:%M %Z")
      start_time = DateTime.strptime(time, '%Y-%m-%d %k:%M')
      event_schedule.start_time = start_time
      event_schedule.save!
      render json: { 'status' => 'ok' }
    end

    def destroy
      if @schedule.destroy
        redirect_to admin_conference_schedule_index_path(conference_id: @conference.short_title),
                    notice: 'Schedule successfully deleted.'
      else
        redirect_to admin_conference_schedule_index_path(conference_id: @conference.short_title),
                    error: "Schedule couldn't be deleted. #{@schedule.errors.full_messages.join('. ')}."
      end
    end

    private

    def room_params
      params.require(:room)
    end
  end
end