@@ -2,17 +2,17 @@ class Api::V1::VodReviewsController < Api::V1::BaseController
22 before_action :set_vod_review , only : [ :show , :update , :destroy ]
33
44 def index
5- vod_reviews = organization_scoped ( VodReview ) . includes ( :match , :reviewed_by )
5+ authorize VodReview
6+ vod_reviews = organization_scoped ( VodReview ) . includes ( :match , :reviewer )
67
78 # Apply filters
89 vod_reviews = vod_reviews . where ( status : params [ :status ] ) if params [ :status ] . present?
9- vod_reviews = vod_reviews . where ( vod_platform : params [ :platform ] ) if params [ :platform ] . present?
1010
1111 # Match filter
1212 vod_reviews = vod_reviews . where ( match_id : params [ :match_id ] ) if params [ :match_id ] . present?
1313
1414 # Reviewed by filter
15- vod_reviews = vod_reviews . where ( reviewed_by_id : params [ :reviewed_by_id ] ) if params [ :reviewed_by_id ] . present?
15+ vod_reviews = vod_reviews . where ( reviewer_id : params [ :reviewer_id ] ) if params [ :reviewer_id ] . present?
1616
1717 # Search by title
1818 if params [ :search ] . present?
@@ -35,6 +35,7 @@ def index
3535 end
3636
3737 def show
38+ authorize @vod_review
3839 vod_review_data = VodReviewSerializer . render_as_hash ( @vod_review )
3940 timestamps = VodTimestampSerializer . render_as_hash (
4041 @vod_review . vod_timestamps . includes ( :target_player , :created_by ) . order ( :timestamp_seconds )
@@ -47,9 +48,10 @@ def show
4748 end
4849
4950 def create
51+ authorize VodReview
5052 vod_review = organization_scoped ( VodReview ) . new ( vod_review_params )
5153 vod_review . organization = current_organization
52- vod_review . reviewed_by = current_user
54+ vod_review . reviewer = current_user
5355
5456 if vod_review . save
5557 log_user_action (
@@ -73,6 +75,7 @@ def create
7375 end
7476
7577 def update
78+ authorize @vod_review
7679 old_values = @vod_review . attributes . dup
7780
7881 if @vod_review . update ( vod_review_params )
@@ -98,6 +101,7 @@ def update
98101 end
99102
100103 def destroy
104+ authorize @vod_review
101105 if @vod_review . destroy
102106 log_user_action (
103107 action : 'delete' ,
@@ -124,8 +128,10 @@ def set_vod_review
124128
125129 def vod_review_params
126130 params . require ( :vod_review ) . permit (
127- :title , :vod_url , :vod_platform , :game_start_timestamp ,
128- :status , :notes , :match_id
131+ :title , :description , :review_type , :review_date ,
132+ :video_url , :thumbnail_url , :duration ,
133+ :status , :is_public , :match_id ,
134+ tags : [ ] , shared_with_players : [ ]
129135 )
130136 end
131137end
0 commit comments