32 lines
767 B
Ruby
32 lines
767 B
Ruby
# frozen_string_literal: true
|
|
|
|
class EventsController < ApplicationController
|
|
def authorize!
|
|
authorize(@event || @events)
|
|
end
|
|
private :authorize!
|
|
|
|
def create
|
|
@event = Event.new(event_params)
|
|
authorize!
|
|
respond_to do |format|
|
|
if @event.save
|
|
format.html { head :created }
|
|
format.json { head :created }
|
|
else
|
|
format.html { head :unprocessable_entity }
|
|
format.json { head :unprocessable_entity }
|
|
end
|
|
end
|
|
end
|
|
|
|
def event_params
|
|
# The file ID processed here is the context of the exercise (template),
|
|
# not in the context of the submission!
|
|
params[:event]
|
|
&.permit(:category, :data, :exercise_id, :file_id)
|
|
&.merge(user: current_user)
|
|
end
|
|
private :event_params
|
|
end
|