agenda-libre-ruby/app/controllers/moderations_controller.rb

# Event management life cycle
class ModerationsController < ApplicationController
  before_action :authenticate_user!
  before_action :set_moderation, :set_mailer_host, only:
    [:show, :edit, :preview, :update, :validate, :accept, :refuse, :destroy]
  before_action :set_old_mod, only: [:update]
  rescue_from ActiveRecord::StaleObjectError, with: :locked

  def index
    @events = Event.unmoderated
  end

  def preview
    @moderation.attributes = moderation_params
    @moderation.valid?
    render action: :edit
  end

  # PATCH/PUT /moderations/1
  # PATCH/PUT /moderations/1.json
  def update
    respond_to do |format|
      if @moderation.update_attributes(moderation_params) && send_mails
        format.html { redirect_to :moderations, notice: t('.ok') }
        format.json { head :no_content }
      else
        format.html { render action: 'edit' }
        # 422 means :unprocessable_entity
        format.json { render json: @moderation.errors, status: 422 }
      end
    end
  end

  # PATCH/PUT /accept/1
  # PATCH/PUT /accept/1.json
  def accept
    @moderation.update moderated: true
    send_accept_mails
    respond_to do |format|
      format.html { redirect_to :moderations, notice: t('.ok') }
      format.json { head :no_content }
    end
  end

  # DELETE /events/1
  # DELETE /events/1.json
  def destroy
    send_destroy_mails if @moderation.destroy
    respond_to do |format|
      format.html { redirect_to :moderations, notice: t('.ok') }
      format.json { head :no_content }
    end
  end

  private

  # Use callbacks to share common setup or constraints between actions.
  def set_moderation
    @event = Event.find params[:id]
    @moderation = @event
  end

  def set_old_mod
    @older_mod = Event.new @event.attributes
  end

  # Never trust parameters from the scary internet, only allow the white list
  # through.
  def moderation_params
    params.require(:event)
      .permit :lock_version, :title, :start_time, :end_time, :description,
              :place_name, :address, :city, :region_id, :locality, :url,
              :contact, :submitter, :tags
  end

  # Useful to manage absolute url in mails
  def set_mailer_host
    ActionMailer::Base.default_url_options[:host] = request.host_with_port
  end

  def send_mails
    # Send an update mail to moderators
    ModerationMailer.update(@older_mod, @moderation, current_user).deliver_now
  end

  def send_accept_mails
    tweet

    # Send an acceptation mail to its author
    EventMailer.accept(@moderation, current_user).deliver_now

    # Send an acceptation mail to moderators
    ModerationMailer.accept(@moderation, current_user).deliver_now
  end

  # Tweet this event, if configured using apache/system variables!
  def tweet
    client = Twitter::REST::Client.new do |config|
      config.consumer_key        = ENV['TWITTER_CONSUMER_KEY']
      config.consumer_secret     = ENV['TWITTER_CONSUMER_SECRET']
      config.access_token        = ENV['TWITTER_ACCESS_TOKEN']
      config.access_token_secret = ENV['TWITTER_ACCESS_SECRET']
    end
    client.update "#{@event.to_tweet event_url(@event)}" if client.consumer_key
  end

  def send_destroy_mails
    # Send a notification to its author
    if params[:reason] == 'r_4'
      @reason = params[:reason_text]
    else
      @reason = t "moderations.refuse.reason_#{params[:reason]}_long"
    end

    EventMailer.destroy(@moderation, current_user, @reason).deliver_now
    ModerationMailer.destroy(@moderation, current_user, @reason).deliver_now
  end

  def locked
    redirect_to edit_moderation_url(@moderation), alert: t('staleObjectError')
  end
end