mirror of
https://github.com/we-promise/sure.git
synced 2026-04-09 23:34:50 +00:00
* Initial account sharing changes * Update schema.rb * Update schema.rb * Change sharing UI to modal * UX fixes and sharing controls * Scope include in finances better * Update totals.rb * Update totals.rb * Scope reports to finance account scope * Update impersonation_sessions_controller_test.rb * Review fixes * Update schema.rb * Update show.html.erb * FIX db validation * Refine edit permissions * Review items * Review * Review * Add application level helper * Critical review * Address remaining review items * Fix modals * more scoping * linter * small UI fix * Fix: Sync broadcasts push unscoped balance sheet to all users * Update sync_complete_event.rb The fix removes the sidebar broadcasts (which rendered unscoped account groups using family.balance_sheet without user context) along with the now-unused sidebar_targets, account_group, and family_balance_sheet private methods. The sidebar will still update correctly — when the sync completes, Family::SyncCompleteEvent#broadcast fires family.broadcast_refresh, which triggers a morph-based page refresh for each user with their own authenticated session, rendering properly scoped sidebar content.
124 lines
3.9 KiB
Ruby
124 lines
3.9 KiB
Ruby
class ValuationsController < ApplicationController
|
|
include EntryableResource, StreamExtensions
|
|
|
|
def confirm_create
|
|
@account = accessible_accounts.find(params.dig(:entry, :account_id))
|
|
|
|
unless @account.permission_for(Current.user).in?([ :owner, :full_control ])
|
|
respond_to do |format|
|
|
format.html { redirect_back_or_to account_path(@account), alert: t("accounts.not_authorized") }
|
|
format.turbo_stream { stream_redirect_back_or_to(account_path(@account), alert: t("accounts.not_authorized")) }
|
|
end
|
|
return
|
|
end
|
|
|
|
@entry = @account.entries.build(entry_params.merge(currency: @account.currency))
|
|
|
|
@reconciliation_dry_run = @entry.account.create_reconciliation(
|
|
balance: entry_params[:amount],
|
|
date: entry_params[:date],
|
|
dry_run: true
|
|
)
|
|
|
|
render :confirm_create
|
|
end
|
|
|
|
def confirm_update
|
|
@entry = Current.accessible_entries.find(params[:id])
|
|
|
|
unless @entry.account.permission_for(Current.user).in?([ :owner, :full_control ])
|
|
respond_to do |format|
|
|
format.html { redirect_back_or_to account_path(@entry.account), alert: t("accounts.not_authorized") }
|
|
format.turbo_stream { stream_redirect_back_or_to(account_path(@entry.account), alert: t("accounts.not_authorized")) }
|
|
end
|
|
return
|
|
end
|
|
|
|
@account = @entry.account
|
|
@entry.assign_attributes(entry_params.merge(currency: @account.currency))
|
|
|
|
@reconciliation_dry_run = @entry.account.update_reconciliation(
|
|
@entry,
|
|
balance: entry_params[:amount],
|
|
date: entry_params[:date],
|
|
dry_run: true
|
|
)
|
|
|
|
render :confirm_update
|
|
end
|
|
|
|
def create
|
|
account = accessible_accounts.find(params.dig(:entry, :account_id))
|
|
|
|
unless account.permission_for(Current.user).in?([ :owner, :full_control ])
|
|
respond_to do |format|
|
|
format.html { redirect_back_or_to account_path(account), alert: t("accounts.not_authorized") }
|
|
format.turbo_stream { stream_redirect_back_or_to(account_path(account), alert: t("accounts.not_authorized")) }
|
|
end
|
|
return
|
|
end
|
|
|
|
result = account.create_reconciliation(
|
|
balance: entry_params[:amount],
|
|
date: entry_params[:date],
|
|
)
|
|
|
|
if result.success?
|
|
respond_to do |format|
|
|
format.html { redirect_back_or_to account_path(account), notice: "Account updated" }
|
|
format.turbo_stream { stream_redirect_back_or_to(account_path(account), notice: "Account updated") }
|
|
end
|
|
else
|
|
@error_message = result.error_message
|
|
render :new, status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
def update
|
|
unless can_edit_entry?
|
|
respond_to do |format|
|
|
format.html { redirect_back_or_to account_path(@entry.account), alert: t("accounts.not_authorized") }
|
|
format.turbo_stream { stream_redirect_back_or_to(account_path(@entry.account), alert: t("accounts.not_authorized")) }
|
|
end
|
|
return
|
|
end
|
|
|
|
# Notes updating is independent of reconciliation, just a simple CRUD operation
|
|
@entry.update!(notes: entry_params[:notes]) if entry_params[:notes].present?
|
|
|
|
if entry_params[:date].present? && entry_params[:amount].present?
|
|
result = @entry.account.update_reconciliation(
|
|
@entry,
|
|
balance: entry_params[:amount],
|
|
date: entry_params[:date],
|
|
)
|
|
end
|
|
|
|
if result.nil? || result.success?
|
|
@entry.reload
|
|
|
|
respond_to do |format|
|
|
format.html { redirect_back_or_to account_path(@entry.account), notice: "Entry updated" }
|
|
format.turbo_stream do
|
|
render turbo_stream: [
|
|
turbo_stream.replace(
|
|
dom_id(@entry, :header),
|
|
partial: "valuations/header",
|
|
locals: { entry: @entry }
|
|
),
|
|
turbo_stream.replace(@entry)
|
|
]
|
|
end
|
|
end
|
|
else
|
|
@error_message = result.error_message
|
|
render :show, status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
private
|
|
def entry_params
|
|
params.require(:entry).permit(:date, :amount, :notes)
|
|
end
|
|
end
|