class Wco::ProfilesController

def create
  @profile = Wco::Profile.new params[:profile].permit!
  authorize! :create, @profile
  if @profile.save
    flash_notice @profile
    redirect_to action: :index
  else
    flash_alert @profile
    render action: 'new'
  end
end

def edit
  @profile = Wco::Profile.find params[:id]
  authorize! :update, @profile
end

def index
  @profiles = Wco::Profile.all
  authorize! :index, Wco::Profile
  if params[:q]
    q = URI.decode(params[:q])
    @profiles = @profiles.where({ email: /#{q}/i })
  end
end

def new
  @new_profile = Wco::Profile.new
  authorize! :new, @new_profile
end

def update
  @profile = Wco::Profile.find params[:id]
  authorize! :update, @profile
  # if params[:photo]
  #   photo = Photo.new :photo => params[:photo]
  #   @profile.profile_photo = photo
  # end
  flag = @profile.update params[:profile].permit!
  if flag
    flash_notice "Updated profile #{@profile.email}"
  else
    flash_alert "Cannot update profile: #{@profile.errors.full_messages}"
  end
  if params[:redirect_to]
    redirect_to params[:redirect_to]
  else
    redirect_to request.referrer
  end
end