rosa-build/app/controllers/api/v1/build_lists_controller.rb

class Api::V1::BuildListsController < Api::V1::BaseController
  before_action :authenticate_user!
  skip_before_action :authenticate_user!, only: [:show, :index] if APP_CONFIG['anonymous_access']

  # load_and_authorize_resource :build_list, only: [:show, :create, :cancel, :publish, :reject_publish, :create_container, :publish_into_testing, :rerun_tests]

  def show
    authorize @build_list
    respond_to :json
  end

  def index
    authorize :build_list
    @project = Project.find(params[:project_id]) if params[:project_id].present?
    authorize @project, :show? if @project
    filter = BuildList::Filter.new(@project, current_user, current_ability, params[:filter] || {})
    @build_lists = filter.find.includes(:build_for_platform,
                                        :save_to_repository,
                                        :save_to_platform,
                                        :project,
                                        :user,
                                        :arch)

    @build_lists = @build_lists.recent.paginate(paginate_params)
    respond_to :json
  end

  def create
    bl_params = params[:build_list] || {}
    save_to_repository = Repository.where(id: bl_params[:save_to_repository_id]).first

    bl_params[:save_to_platform_id] = save_to_repository.platform_id if save_to_repository

    @build_list = current_user.build_lists.new(bl_params)
    @build_list.priority = current_user.build_priority # User builds more priority than mass rebuild with zero priority

    create_subject @build_list
  end

  def cancel
    authorize @build_list, :create?
    render_json :cancel
  end

  def publish
    @build_list.publisher = current_user
    render_json :publish
  end

  def reject_publish
    @build_list.publisher = current_user
    render_json :reject_publish
  end

  def create_container
    render_json :create_container, :publish_container
  end

  def rerun_tests
    render_json :rerun_tests
  end

  def publish_into_testing
    @build_list.publisher = current_user
    render_json :publish_into_testing
  end

  private

  def render_json(action_name, action_method = nil)
    if @build_list.try("can_#{action_name}?") && @build_list.send(action_method || action_name)
      render_json_response @build_list, t("layout.build_lists.#{action_name}_success")
    else
      render_validation_error @build_list, t("layout.build_lists.#{action_name}_fail")
    end
  end
end