class Lato::OperationsController

def show
  @operation = Lato::Operation.find(params[:id])
  return unless validate_user_access_to_operation
end

def show_legacy
  Rails.logger.warn('🚨 Legacy route used: operations/show/:id. Please replace operation_show_path with operation_path.')
  redirect_to lato.operation_path(params[:id])
end

def validate_user_access_to_operation
  return true if @operation.lato_user_id == @session.user_id
  respond_to do |format|
    format.html { redirect_to lato.root_path }
    format.json { render plain: '', status: :unauthorized }
  end
  false
end