Switch to post organization if possible

Author: enricostano

app/controllers/posts_controller.rb

@@ -62,6 +62,7 @@ def edit
   #
   def show
     post = Post.active.of_active_members.find(params[:id])
+    update_current_organization!(post.organization)
 
     instance_variable_set("@#{resource}", post)
   end
@@ -114,4 +115,20 @@ def post_params
       set_user_id(p)
     end
   end
+
+  # TODO: remove this horrible hack ASAP
+  #
+  # This hack set the current organization to the post's
+  # organization, both in session and controller instance variable.
+  #
+  # Before changing the current organization it's important to check that
+  # the current_user is an active member of the organization.
+  #
+  # @param organization [Organization]
+  def update_current_organization!(organization)
+    return unless current_user && current_user.active?(organization)
+
+    session[:current_organization_id] = organization.id
+    @current_organization = organization
+  end
 end

app/views/inquiries/show.html.erb

@@ -1,15 +1,8 @@
-<p class="actions text-right">
-  <% if admin? || @inquiry.user == current_user %>
-    <%= link_to edit_inquiry_path(@inquiry), class: "btn btn-warning" do %>
-      <%= glyph :pencil %>
-      <%= t "global.edit" %>
+<% if @inquiry.organization == current_organization %>
+  <p class="actions text-right">
+    <% if admin? or @inquiry.user == current_user %>
+      <%= render 'shared/post_actions', post: @inquiry %>
     <% end %>
-    <%= link_to @inquiry,
-                data: { method: :delete, confirm: "sure?" },
-                class: "btn btn-danger" do %>
-      <%= glyph :trash %>
-      <%= t "global.delete" %>
-    <% end %>
-  <% end %>
-</p>
+  </p>
+<% end %>
 <%= render "shared/post", post: @inquiry %>

app/views/offers/show.html.erb

@@ -1,22 +1,15 @@
-<p class="actions text-right">
-  <% if admin? or @offer.user == current_user %>
-    <%= link_to edit_offer_path(@offer), class: "btn btn-warning" do %>
-      <%= glyph :pencil %>
-      <%= t "global.edit" %>
+<% if @offer.organization == current_organization %>
+  <p class="actions text-right">
+    <% if admin? or @offer.user == current_user %>
+      <%= render 'shared/post_actions', post: @offer %>
     <% end %>
-    <%= link_to @offer,
-                data: { method: :DELETE, confirm: "sure?" },
-                class: "btn btn-danger" do %>
-      <%= glyph :trash %>
-      <%= t "global.delete" %>
+    <% if current_user and @offer.user != current_user %>
+      <%= link_to new_transfer_path(id: @offer.user.id, offer: @offer.id, destination_account_id: @destination_account.id),
+                  class: "btn btn-success" do %>
+        <%= glyph :time %>
+        <%= t ".give_time_for" %>
+      <% end %>
     <% end %>
-  <% end %>
-  <% if current_user and @offer.user != current_user %>
-    <%= link_to new_transfer_path(id: @offer.user.id, offer: @offer.id, destination_account_id: @destination_account.id),
-                class: "btn btn-success" do %>
-      <%= glyph :time %>
-      <%= t ".give_time_for" %>
-    <% end %>
-  <% end %>
-</p>
+  </p>
+<% end %>
 <%= render "shared/post", post: @offer %>

app/views/shared/_post.html.erb

@@ -27,7 +27,7 @@
         <% end %>
       </div>
     </div>
-    <% if current_user && current_organization %>
+    <% if current_user && current_organization == post.organization %>
       <div class="panel panel-info">
         <div class="panel-heading">
           <h3 class="panel-title">
@@ -60,13 +60,15 @@
     </div>
   </div>
 </div>
-<% unless current_user %>
+<% unless post.organization == current_organization %>
   <div class="alert alert-info">
-    <%= t "posts.show.info",
-          type: post.class.model_name.human,
-          organization: post.organization.name %>
-    <%= link_to t("layouts.application.login"),
-                new_user_session_path,
-                class: "btn btn-primary" %>
+    <%= t 'posts.show.info',
+      type: post.class.model_name.human,
+      organization: post.organization.name %>
+    <% unless current_user %>
+      <%= link_to t("layouts.application.login"),
+        new_user_session_path,
+        class: "btn btn-primary" %>
+    <% end %>
   </div>
 <% end %>

app/views/shared/_post_actions.html.erb

@@ -0,0 +1,9 @@
+<%= link_to post, class: "btn btn-warning" do %>
+  <%= glyph :pencil %>
+  <%= t "global.edit" %>
+<% end %>
+
+<%= link_to post, data: { method: :delete, confirm: "sure?" }, class: "btn btn-danger" do %>
+  <%= glyph :trash %>
+  <%= t "global.delete" %>
+<% end %>

config/locales/en.yml

@@ -404,7 +404,7 @@ en:
       title2: Time Banks
   posts:
     show:
-      info: "%{type} of %{organization} to see person's details you have to"
+      info: "This %{type} belongs to %{organization}."
   reports:
     cat_with_users:
       title: Offered Services

spec/controllers/offers_controller_spec.rb

@@ -112,6 +112,28 @@
           end
         end
       end
+
+      context 'when the user pertains to multiple organizations' do
+        context 'and user\'s current organization is different than offer\'s organization' do
+          let(:another_organization) { Fabricate(:organization) }
+
+          before do
+            Fabricate(:member, user: another_member.user, organization: another_organization)
+            allow(controller).to receive(:@current_organization).and_return(another_organization)
+          end
+
+          it 'displays the offer\'s user details' do
+            get :show, id: offer.id
+            expect(response.body).to include(offer.user.email)
+          end
+
+          it 'sets the offer\'s organization as user\'s current organization' do
+            get :show, id: offer.id
+            expect(session[:current_organization_id]).to eq(offer.organization_id)
+            expect(assigns(:current_organization)).to eq(offer.organization)
+          end
+        end
+      end
     end
 
     context 'when the user is not a member of the organization where the offer is published' do