class ContactCurator < BaseCurator
  include Omicron.authorization(ContactAuthorizer)

  def show_action
    def search_action
      pipe(default_response, :through => [
        :search, :filter_readable, :apply_readables, :set_is_editable, :decorate
      ])
    end

    pipe(default_response, :through => [
      :find, :authorize_to_read, :apply_readables, 
      :set_is_editable, :decorate
    ])
  end
end

class ContactAuthorizer < BaseAuthorizer
  apply_default_scopes
  append_scopes :write, "write_members"
  append_scopes :update, "write"

  def can_read?(contact)
    user.member_ids.include?(contact.member_id) ||
      is_user_on_team?(contact.team_id) ||
      user.managed_division_ids.include?(contact.division_id) ||
      auth_object.teamsnap_service
  end

  def can_write?(contact)
    user.member_ids.include?(contact.member_id) ||
      user.owned_team_ids.include?(contact.team_id) ||
      user.managed_division_ids.include?(contact.division_id) ||
      (
        user.managed_team_ids.include?(contact.team_id) &&
        !contact.is_member_team_owner
      ) ||
      auth_object.teamsnap_service
  end
end

  pipe(default_response, :through => [
    :search, :authorize_to_update_plan, :decorate
  ]

  def authorize_to_update_plan(response)
    _, _, collection = response
    auth = Roadblock::Stack.new(
      authentication_response, :scopes => current_scopes
    )
    auth.add(ServiceAuthorizer, authorizer)

    if auth.can?(:update_plan, collection)
      response
    else
      response.with(:status => 403, :collection => [])
    end
  end

# need help from Geoff