题库调整

app/controllers/question_banks_controller.rb

@@ -1,6 +1,7 @@
 class QuestionBanksController < ApplicationController
   before_action :require_login, :check_auth
   before_action :params_filter, except: [:my_courses]
+  before_action :teacher_or_admin, except: [:bank_list]
 
   # 题库选用列表
   # object_type: #  normal 普通作业题库； group 分组作业题库； poll问卷题库； exercise试卷题库; gtask 毕设选题题库；gtopic 毕设任务
@@ -81,11 +82,15 @@ class QuestionBanksController < ApplicationController
 
   def my_courses
     @courses = current_user.manage_courses.where(is_delete: 0, is_end: 0)
+    unless params[:search].blank?
+      @courses = @courses.where("name like ?", "%#{params[:search].strip}%")
+    end
   end
 
   def send_to_course
-    bank = current_bank
-    course = current_user.manage_courses.find_by(id: params[:course_id])
+    banks = object_banks
+    course = current_user.manage_courses.find_by!(id: params[:course_id])
+    banks.each do |bank|
       case @object_type
       when 'HomeworkBank' # 作业
         quote_homework_bank bank, course
@@ -100,13 +105,14 @@ class QuestionBanksController < ApplicationController
       when 'GtopicBank'
         quote_gtopic_bank bank, course
       end
+    end
     normal_status("发送成功")
   end
 
   def destroy
     bank = current_bank
 
-    unless user.admin? || bank.user_id == user.id
+    unless current_user.admin? || bank.user_id == current_user.id
       render_forbidden
       return
     end
@@ -121,11 +127,32 @@ class QuestionBanksController < ApplicationController
     render_ok
   end
 
+  def multi_delete
+    @objects = object_banks
+    @objects.destroy_all
+    normal_status("删除成功")
+  end
+
+  def multi_public
+    @objects = object_banks
+    @objects.update_all(is_public: true)
+    normal_status("更新成功")
+  end
+
   private
 
+  def object_banks
+    banks ||= @object_type.classify.constantize.where(@object_filter).where(id: params[:object_id])
+    unless current_user.admin?
+      banks = banks.where(user_id: current_user.id)
+    end
+    banks
+  end
+
   def current_bank
     @_current_bank ||= @object_type.classify.constantize.where(@object_filter).find(params[:id])
   end
+
   def params_filter
     type = ["normal", "group", "poll", "exercise", "gtask", "gtopic"]
     tip_exception("object_type类型不正确") unless type.include?(params[:object_type])
@@ -152,6 +179,10 @@ class QuestionBanksController < ApplicationController
     end
   end
 
+  def teacher_or_admin
+    tip_exception(403, "无权限操作") unless current_user.is_certification_teacher || current_user.admin?
+  end
+
   def quote_homework_bank homework, course
     ActiveRecord::Base.transaction do
       # 复制作业的基本信息

config/routes.rb

@@ -632,6 +632,8 @@ Rails.application.routes.draw do
         post :save_banks
         get :my_courses
         post :send_to_course
+        delete :multi_delete
+        post :multi_public
       end
     end