orbit-basic/app/controllers/admin/object_auths_controller.rb

class Admin::ObjectAuthsController < ApplicationController
  layout "admin"
  before_filter :authenticate_user!
#  before_filter :is_admin? ,:only => :index
  
  def index
    # @roles = Role.all.entries
    # apps = Purchase.where(:type =>"App")
    # @app_auth_data = apps.entries.map do |app|
    #   app_c = eval(app.app_controller)
    #   obj = app_c.new
    #   obj_auth = obj.send  "auth"
    #   [:app_obj => app,:auth_field => obj_auth]
    # end
    # if current_user.admin?
      @object_auths = ObjectAuth.all
    # else
    #       @module_apps = current_user.managing_apps.collect{|t| t.managing_app}
    #     end
  end

  def create_role
    object_auth = ObjectAuth.find(params[:id])
          params[:new].each do |item|
            field = item[0]
            field_value = item[1]
            if field_value!=''
              case field
              when 'role'
                object_auth.send("add_#{field}",(Role.find field_value)) rescue nil
              when 'sub_role'
                object_auth.send("add_#{field}",(SubRole.find field_value)) rescue nil
              when 'privilege_user'
                object_auth.add_user_to_privilege_list (User.find field_value) rescue nil
              when 'blocked_user'  
                object_auth.add_user_to_black_list (User.find field_value) rescue nil
              end
            end
          end
          redirect_to edit_admin_object_auth_path(object_auth)
   end
  
  def remove_role
    object_auth = ObjectAuth.find(params[:id])
         type = params[:type]
         field_value = params[:target_id]
         if field_value!=''
           case type
           when 'role'
             object_auth.remove_role(Role.find field_value) rescue nil
           when 'sub_role'
             object_auth.remove_sub_role(SubRole.find field_value) rescue nil
           when 'privilege_user'
             object_auth.remove_user_from_privilege_list (User.find field_value) rescue nil
           when 'blocked_user'  
             object_auth.remove_user_from_black_list (User.find field_value) rescue nil
           end
         end
       redirect_to edit_admin_object_auth_path(object_auth)
  end

  def edit
    @object_auth = ObjectAuth.find(params[:id])
  end
  


end