Merge pull request chi-otters-2017#39 from chi-otters-2017/admin-delete-users

Admin delete users

Author: rrichardsonv

app/controllers/users_controller.rb

@@ -5,6 +5,16 @@ class UsersController < ApplicationController
   def index
     if admin?
       @users = User.where(is_ken: false)
+    else
+      flash[:not_admin] = "You do not have permission to view this page."
+    end
+  end
+
+  def show
+    if admin?
+      @user = User.find_by(id: friend_id)
+    else
+      @user = User.find_by(id: session[:user_id])
     end
   end
 
@@ -25,11 +35,15 @@ def create
     end
   end
 
-  def show
+  def destroy
     if admin?
-      @user = User.find_by(id: friend_id)
+      @user = User.find(params[:id])
+      @user.destroy
+
+      redirect_to users_path
     else
-      @user = User.find_by(id: session[:user_id])
+      flash[:not_admin] = "You do not have permission to view this page."
+      redirect_to "/"
     end
   end
 

app/views/categories/index.html.erb

@@ -1,5 +1,6 @@
 <h1 class='title'>Welcome to Chez Ken</h1>
 <h3><%= flash[:notice] %></h3>
+<h3><%= flash[:not_admin] %></h3>
 
 <div class='container'>
       <div class='container col-4-md wd-17-m mg-0'>

app/views/users/index.html.erb

@@ -1,12 +1,20 @@
-<h3 class='notice'><%= flash[:notice]  %><h3>
-
+<% if admin? %>
 
 <h1>Friends of Ken</h1>
-
 <h3>Select a friend to view their profile</h3>
 
-<ul>
-<% @users.each do |user| %>
-  <li><%= link_to "#{user.name}", profile_path(user) %></li>
-<% end %>
-</ul>
+<table>
+  <% @users.each do |user| %>
+    <tr>
+    <td><%= link_to "#{user.name}", profile_path(user) %></td>
+    <td><%= link_to "Delete", user_path(user),
+                method: :delete,
+                data: { confirm: 'Are you sure?' } %></td>
+    </tr>
+  <% end %>
+</table>
+
+
+<% else %>
+  <h3 class='notice'><%= flash[:not_admin]  %><h3>
+<% end%>

config/routes.rb

@@ -12,6 +12,8 @@
 
   resources :users, only: :index
 
+  resources :users, only: [:destroy]
+
   resources :categories do
     resources :recipes, except: [:index, :show]
   end