ensl.org/app/controllers/groups_controller.rb

class GroupsController < ApplicationController
  before_action :get_group, except: [:index, :new, :create]

  def index
    @groups = Group.all
  end

  def show
  end

  def new
    @group = Group.new
    raise AccessError unless @group.can_create? cuser
  end

  def edit
    @group.users.all
    raise AccessError unless @group.can_update? cuser
  end

  def create
    @group = Group.new(Group.params(params, cuser))
    @group.founder = cuser
    raise AccessError unless @group.can_create? cuser
    if @group.save
      flash[:notice] = t(:groups_create)
      redirect_to @group
    else
      render :new
    end
  end

  def update
    raise AccessError unless @group.can_update? cuser
    if @group.update_attributes(Group.params(params, cuser))
      flash[:notice] = t(:groups_update)
      redirect_to @group
    else
      render :edit
    end
  end

  def destroy
    raise AccessError unless @group.can_destroy? cuser
    @group.destroy
    redirect_to groups_url
  end

  def addUser
    @user = User.where(username: params[:username])
    raise AccessError unless @group.can_update? cuser
    raise Error, t(:duplicate_user) if @group.users.include? @user

    @group.users << @user if @user
    redirect_to edit_group_url(@group, groupTab: "groupTabMembers")
  end

  def delUser
    @user = User.find params[:id2]
    raise AccessError unless @group.can_update? cuser

    @group.users.delete @user
    redirect_to edit_group_url(@group, groupTab: "groupTabMembers")
  end

  private

  def get_group
    @group = Group.find params[:id]
  end
end