1315103a7d
This new role allows users to create invoices without role_finance. Users can then only modify their own created invoices until somebody with the role_finance sets the paid_on value.
65 lines
1.5 KiB
Ruby
65 lines
1.5 KiB
Ruby
class Finance::InvoicesController < ApplicationController
|
|
|
|
before_filter :find_invoice, only: [:show, :edit, :update, :destroy]
|
|
before_filter :ensure_can_edit, only: [:edit, :update, :destroy]
|
|
|
|
def index
|
|
@invoices = Invoice.includes(:supplier, :deliveries, :orders).order('date DESC').page(params[:page]).per(@per_page)
|
|
end
|
|
|
|
def show
|
|
end
|
|
|
|
def new
|
|
@invoice = Invoice.new :supplier_id => params[:supplier_id]
|
|
@invoice.deliveries << Delivery.find_by_id(params[:delivery_id]) if params[:delivery_id]
|
|
@invoice.orders << Order.find_by_id(params[:order_id]) if params[:order_id]
|
|
end
|
|
|
|
def edit
|
|
end
|
|
|
|
def create
|
|
@invoice = Invoice.new(params[:invoice])
|
|
@invoice.created_by = current_user
|
|
|
|
if @invoice.save
|
|
flash[:notice] = I18n.t('finance.create.notice')
|
|
if @invoice.orders.count == 1
|
|
# Redirect to balancing page
|
|
redirect_to new_finance_order_url(order_id: @invoice.orders.first.id)
|
|
else
|
|
redirect_to [:finance, @invoice]
|
|
end
|
|
else
|
|
render :action => "new"
|
|
end
|
|
end
|
|
|
|
def update
|
|
if @invoice.update_attributes(params[:invoice])
|
|
redirect_to [:finance, @invoice], notice: I18n.t('finance.update.notice')
|
|
else
|
|
render :edit
|
|
end
|
|
end
|
|
|
|
def destroy
|
|
@invoice.destroy
|
|
|
|
redirect_to finance_invoices_url
|
|
end
|
|
|
|
private
|
|
|
|
def find_invoice
|
|
@invoice = Invoice.find(params[:id])
|
|
end
|
|
|
|
# Returns true if @current_user can edit the invoice..
|
|
def ensure_can_edit
|
|
unless @invoice.user_can_edit?(current_user)
|
|
deny_access
|
|
end
|
|
end
|
|
end
|