trustieforge/app/controllers/system_messages_controller.rb

class SystemMessagesController < ApplicationController

  # before_filter :message_author, :only => [:show]
  #
  # def message_author
  #   if(!User.current.logged? && !token.nil?)
  #
  #     User.current =try_to_autologin1
  #   end
  #   if @system_messages
  #     render_403 :message => :notice_not_authorized_message
  #   else
  #     deny_access
  #   end
  # end

  def index
    @system_messages = SystemMessage.all
  end

  # def show
  #   @system_messages = SystemMessage.find(params[:id])
  # end

  # GET /products/new
  # def new
  #   @product = Product.new
  # end

  # GET /products/1/edit
  # def edit
  # end

  # POST /products
  # POST /products.json
  def create
    unless User.current.admin?
      render_403
      return
    end
    @system_messages = SystemMessage.new
    @system_messages.description = params[:system_message][:description]
    @system_messages.subject = params[:system_message][:subject]
    @system_messages.user_id = User.current.id
    # @system_messages.save_attachments(params[:attachments])
    respond_to do |format|
      if @system_messages.save
        format.html {redirect_to user_system_messages_path(User.current)}
        flash[:notice] = l(:notice_successful_message)
      else
        if params[:system_messages][:description].empty?
          flash[:error] = l(:label_content_blank_fail)
        else
          flash[:error] = l(:label_admin_message_fail)
        end
        format.html {redirect_to admin_messages_path}
      end
    end
  end

  # PATCH/PUT /products/1
  # PATCH/PUT /products/1.json
  # def update
  #   respond_to do |format|
  #     if @product.update(product_params)
  #       format.html { redirect_to @product, notice: 'Product was successfully updated.' }
  #       format.json { render :show, status: :ok, location: @product }
  #     else
  #       format.html { render :edit }
  #       format.json { render json: @product.errors, status: :unprocessable_entity }
  #     end
  #   end
  # end

  # DELETE /products/1
  # DELETE /products/1.json
  # def destroy
  #   @system_messages.destroy
  #   respond_to do |format|
  #     format.html { redirect_to products_url, notice: 'Product was successfully destroyed.' }
  #     format.json { head :no_content }
  #   end
  # end

  # private
  # # Use callbacks to share common setup or constraints between actions.
  # def set_product
  #   @product = Product.find(params[:id])
  # end
  #
  # # Never trust parameters from the scary internet, only allow the white list through.
  # def message_params
  #   params.require(:admin_system_messages).permit(:content)
  # end


end