class MatchesController < ApplicationController before_action :set_match, only: [:show, :edit, :update, :destroy] before_action :check_access, only: [:edit,:update] # GET /matches/1 # GET /matches/1.json def show end # GET /matches/1/edit def edit if params[:match] @match = Match.where(:id => params[:match]).includes(:wrestlers).first end if @match @w1 = @match.wrestler1 @w2 = @match.wrestler2 end end # PATCH/PUT /matches/1 # PATCH/PUT /matches/1.json def update respond_to do |format| if @match.update(match_params) format.html { redirect_to mat_path(@match.mat_id), notice: 'Match was successfully updated.' } format.json { head :no_content } else format.html { render action: 'edit' } format.json { render json: @match.errors, status: :unprocessable_entity } end end end private # Use callbacks to share common setup or constraints between actions. def set_match @match = Match.find(params[:id]) end # Never trust parameters from the scary internet, only allow the white list through. def match_params params.require(:match).permit(:w1, :w2, :g_stat, :r_stat, :winner_id, :win_type, :score, :finished) end def check_access if current_user != @match.tournament.user redirect_to '/static_pages/not_allowed' end end end