# frozen_string_literal: true class EventsController < ApplicationController def authorize! authorize(@event || @events) end private :authorize! def create @event = Event.new(event_params) authorize! respond_to do |format| if @event.save format.html { head :created } format.json { head :created } else format.html { head :unprocessable_entity } format.json { head :unprocessable_entity } end end end def event_params # The file ID processed here is the context of the exercise (template), # not in the context of the submission! params[:event] &.permit(:category, :data, :exercise_id, :file_id) &.merge(user: current_user) end private :event_params end