members_controller.rb

class MembersController < ApplicationController
  load_and_authorize_resource :except => :create
  
  def index
    @title = "Member List"
    @order = Member.new.has_attribute?(params[:order]) ? params[:order] : Member::Default_sort_key
    
    if params[:desc] == "1"
      @members = @members.order(@order => :desc)
      @order_desc = true
    else
      @members = @members.order(@order)
    end
    
    if params[:active_only] == "1"
      @members = @members.active
    end

    if params[:filter] == "1"
      roles_array = []
      if params[:suspended] == "1"
        roles_array << "suspended"
      end
      if params[:alumni] == "1"
        roles_array << "alumni"
      end
      if params[:general_member] == "1"
        roles_array << "general_member"
      end
      if params[:exec] == "1"
        roles_array << "exec"
      end
      if params[:tracker_management] == "1"
        roles_array << "tracker_management"
      end
      if params[:head_of_tech] == "1"
        roles_array << "head_of_tech"
      end

      @members = @members.where(role: roles_array)
    end
    
    @query = params.permit(:active_only, :filter, :suspended, :alumni, :general_member, :exec, :tracker_management, :head_of_tech, :order, :desc)

    respond_to do |format|
      format.html
      format.vcf { render :layout => false }
    end
  end

  def show
    @title = "Member Display"

    respond_to do |format|
      format.html
      format.vcf { render :layout => false }
    end
  end

  def new
    @title = "New Member"
  end

  def create
    @member = Member.new(member_params)
    authorize! :create, @member
    
    password = SecureRandom.hex(64)
    @member.password = password
    @member.password_confirmation = password
    
    if @member.save
      if not @member.andrew_email?
        raw_token, hashed_token = Devise.token_generator.generate(Member, :reset_password_token)
        @member.reset_password_token = hashed_token
        @member.reset_password_sent_at = Time.now.utc
        @member.save
        
        MemberMailer.new_alumni_account(@member, raw_token).deliver_now
      end
      
      flash[:notice] = 'Member was successfully created.'
      redirect_to members_path
    else
      render :action => 'new'
    end
  end

  def edit
    @title = "Editing Member"
  end

  def update
    if @member.update(member_params)
      if can? :show, Member
        flash[:notice] = 'Member was successfully updated.'
        redirect_to(:action => 'show', :id => @member)
      else
        flash[:notice] = 'Thank you for keeping your information up to date!'
        redirect_to :controller => 'events', :action => 'index'
      end
    else
      render(:action => 'edit')
    end
  end

  def destroy
    @member.destroy
    flash[:notice] = 'Member was successfully destroyed.'
    redirect_to members_path
  end
  
  def tshirts
    @title = "T-Shirt Sizes"

    @shirt_sizes = @members.active.where.not(shirt_size: nil).sort_by {|m| [Member.shirt_size.values.index(m.shirt_size), m.namelast]}.group_by(&:shirt_size)
  end
  
  def roles
    @title = "Members by Role"

    if params[:show] == "all"
      members = Member.all
    else
      members = Member.active
    end
    
    @visible_roles = EventRole::Roles_All - [EventRole::Role_HoT]
    @roles = @visible_roles.map do |role|
      counts = EventRole.where(role: role).group(:member_id).count
      { :role => role, :members =>
        members.reject do |m|
          # m.id == 5 test is so that Sam Abtek doesn't show up in results
          not counts.has_key? m.id or counts[m.id] == 0 or m.id == 5
        end.sort_by do |m|
          counts[m.id]
        end.reverse.map do |m|
          { :member => m, :count => counts[m.id] }
        end
      }
    end
  end

  def choose_filter
    respond_to do |format|
      format.js
    end
  end
  
  def super_tics
    authorize! :manage, SuperTic
    
    @super_tics = SuperTic.days
  end
  
  def update_super_tics
    authorize! :manage, SuperTic
    
    SuperTic.days.each do |d|
      if params[:super_tics][d.day.to_s] == ""
        d.destroy
      else
        d.member_id = params[:super_tics][d.day.to_s].to_i
        
        unless d.save
          @errors = d.errors
          render :super_tics and return
        end
      end
    end
    
    flash[:notice] = "Super TiCs successfully updated."
    redirect_to super_tics_members_url
  end
  
  def bulk_edit
  end
  
  def bulk_update
    params[:members].each do |m|
      member = Member.find m
      
      if params[:zero_payrate] == "1"
        member.payrate = 0.0
      elsif params[:increase_payrate] == "1"
        member.payrate = [10.0, member.payrate + 0.25].min
      end
      
      if params[:set_role] == "1"
        member.role = params[:set_role_to]
      end
      
      if params[:set_on_payroll] == "1"
        if params[:set_on_payroll_to] == "1"
          member.on_payroll = true
        else
          member.on_payroll = false
        end
      end
      
      member.save!
    end
    
    flash[:notice] = "Members edited succesfully!"
    render action: :bulk_edit
  end
  
  private
    def member_params
      if params[:member][:password].blank?
        params[:member].delete(:password)
        params[:member].delete(:password_confirmation)
      end
      
      if params[:member][:role] and (not current_member.is_at_least? params[:member][:role] or cannot? :manage, Member) and not current_member.tracker_dev?
        params[:member].delete(:role)
      end
      
      if cannot? :payrate, Member
        params[:member].delete(:payrate)
      end
      
      if not current_member.tracker_dev? and cannot? :hot, Member
        params[:member].delete(:tracker_dev)
      end

      if params[:member][:officer_position] and (not current_member.is_at_least? :exec or cannot? :update, Member) and not current_member.tracker_dev?
        params[:member].delete(:officer_position)
      end
      
      if cannot? :manage, SuperTic
        params[:member].delete(:super_tics_attributes)
      end
      
      if cannot? :hot, Member
        params[:member].delete(:on_payroll)
      end
      
      params.require(:member).permit(
        :password, :password_confirmation, :email, :namefirst, :namelast, :namenick, :title, :callsign,
        :shirt_size, :phone, :payrate, :role, :tracker_dev, :receives_comment_emails,
        :on_payroll, :pronouns, :favorite_entropy_drink, :major, :grad_year, :interests, :officer_position,
        :super_tics_attributes => [:id, :_destroy, :day]
      )
    end
end