openproject/app/controllers/hourly_rates_controller.rb

class HourlyRatesController < ApplicationController
  unloadable
  
  helper :users
  helper :sort
  include SortHelper
  helper :hourly_rates
  include HourlyRatesHelper
  
  before_filter :find_user, :only => [:show, :edit, :set_rate]
  
  before_filter :find_optional_project, :only => [:show]
  before_filter :find_project, :only => [:edit, :set_rate]
  
  # #show has its own authorization
  before_filter :authorize, :except => [:show]
  
  def show
    if @project
      render_403 and return unless (User.current.allowed_to?(:view_all_rates, @project) || (@user == User.current && User.current.allowed_to?(:view_own_rate, @project)))

      @rates = HourlyRate.find(:all,
          :conditions =>  { :user_id => @user, :project_id => @project },
          :order => "#{HourlyRate.table_name}.valid_from desc")
    else
      @rates = HourlyRate.history_for_user(@user, true)
      render_403 and return if @rates.empty?
    end
  end
  
  def edit
    if params[:user].is_a?(Hash)
      new_attributes = params[:user][:new_rate_attributes]
      new_attributes.each {|a| a[1][:project_id] = @project.id} unless new_attributes.nil?
      
      existing_attributes = params[:user][:existing_rate_attributes]
      unless existing_attributes.nil?
        # this selects all rate_ids for the current user and the current project
        rate_ids = HourlyRate.count(:conditions => {:user_id => @user, :project_id => @project},
                         :group => :id,
                         :select => [:id]).to_hash
        
        existing_attributes = existing_attributes.reject{|a| rate_ids.has_key? a.id}
      end
    else
      new_attributes = nil
      existing_attributes = {}
    end
    
    if request.post?
      @user.new_rate_attributes = new_attributes if new_attributes
      @user.existing_rate_attributes = existing_attributes
    end

    if request.post? && @user.save
      flash[:notice] = l(:notice_successful_update)
      redirect_back_or_default(:action => 'show', :id => @user, :project_id => @project)
    else
      @rates = @user.rates.select{|r| r.project_id == @project.id}.sort { |a,b| b.valid_from <=> a.valid_from }
      @rates << @user.rates.build({:valid_from => Date.today, :project_id => @project}) if @rates.empty?
      render :action => "edit", :layout => !request.xhr?
    end 
  end
  
  def set_rate
    today = Date.today
    
    rate = @user.rate_at(today, @project)
    rate ||= HourlyRate.new(:project => @project, :user => @user, :valid_from => today)
    
    rate.rate = clean_currency(params[:rate]).to_f
    if rate.save
      if request.xhr?
        render :update do |page|
          if User.current.allowed_to?(:change_rates, @project) || User.current.allowed_to?(:view_all_rates, @project) || User.current = @user && User.current.allowed_to?(:view_own_rate, @project)
            page.replace_html "rate_for_#{@user.id}", link_to(number_to_currency(rate.rate), :action => User.current.allowed_to?(:change_rates, @project) ? 'edit' : 'show', :id => @user, :project_id => @project)
          end
        end
      else
        flash[:notice] = l(:notice_successful_update)
        redirect_to :action => 'index'
      end
    end
  end
    

private
  def find_project
    @project = Project.find(params[:project_id])
  rescue ActiveRecord::RecordNotFound
    render_404
  end
  
  def find_optional_project
    @project = Project.find(params[:project_id]) unless params[:project_id].blank?
  rescue ActiveRecord::RecordNotFound
    render_404
  end

  def find_user
    @user = User.find(params[:id])
  rescue ActiveRecord::RecordNotFound
    render_404
  end

end