starting a result policy

This commit is contained in:
Mark Moser
2017-05-04 14:02:11 -05:00
parent e009fc3330
commit 3ebb79857e
3 changed files with 73 additions and 9 deletions

View File

@ -1,20 +1,16 @@
# frozen_string_literal: true
module Admin
class ResultController < AdminController
# TODO: change context from Candidate to Quiz
# bypass pundit lockdowns until completed
after_action :skip_policy_scope
# TODO: bypass pundit authorization until a result wrapper class if sorted
after_action :skip_authorization
#
# needed for :view
# TODO: Limit results to the quizzes current_user has access to
def index
sort_case = "(case when review_status = 0 then '' else name end)"
sort_with_case = sort_column == 'name' ? sort_case : sort_column
@candidates = current_user.reviewees.where(completed: true)
.includes(:recruiter)
.order("#{sort_with_case} #{sort_direction}")
.page(params[:page])
@candidates = policy_scope(:result).includes(:recruiter)
.order("#{sort_with_case} #{sort_direction}")
.page(params[:page])
end
def view