class UserRolesController < ApplicationController
  layout 'site'

  before_filter :authorize_web
  before_filter :require_user
  before_filter :require_administrator

  def grant
    this_user = User.find_by_display_name(params[:display_name], :conditions => {:visible => true})
    if this_user and UserRole::ALL_ROLES.include? params[:role]
      this_user.roles.create(:role => params[:role])
    else
      flash[:notice] = t('user_role.grant.fail', :role => params[:role], :name => params[:display_name])
    end
    redirect_to :controller => 'user', :action => 'view', :display_name => params[:display_name]
  end

  def revoke
    this_user = User.find_by_display_name(params[:display_name], :conditions => {:visible => true})
    if this_user and UserRole::ALL_ROLES.include? params[:role]
      UserRole.delete_all({:user_id => this_user.id, :role => params[:role]})
    else
      flash[:notice] = t('user_role.revoke.fail', :role => params[:role], :name => params[:display_name])
    end
    redirect_to :controller => 'user', :action => 'view', :display_name => params[:display_name]
  end

  private
  def require_administrator
    redirect_to "/403.html" unless @user.administrator?
  end

end