enabled account deletion

mdeiters · mdeiters · commit 03746071c59f · 2016-02-17T18:05:20.000-08:00
diff --git a/README.rdoc b/README.rdoc
@@ -2,7 +2,6 @@
 
 * TODO: Getting avatars/uploads/cdn to work
 * TODO: Dragging files into protip editor https://github.com/feross/drag-drop
-* TODO: Getting Likes / Hearts to work
 * TODO: Check all meta tags, especially on pro tips so SEO is retained
 * TODO: Fix commenting formatting issue (see: http://localhost:5000/p/lhsrcq/one-line-browser-notepad)
 * TODO: Write announcement protip and link it on homepage
diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
@@ -4,6 +4,8 @@ class UsersController < ApplicationController
   def show
     if params[:username] == 'random'
       @user = User.order("random()").first
+    elsif params[:delete_account]
+      @user = current_user
     else
       @user = User.find_by_username(params[:username])
     end
@@ -48,6 +50,19 @@ def impersonate
     end
   end
 
+  def destroy
+    @user = User.find(params[:id])
+    head(:forbidden) unless current_user.can_edit?(@user)
+    @user.destroy
+    if @user == current_user
+      sign_out
+      flash[:notice] = "You are no longer signed in to Coderwall. Your acccount, #{@user.username}, has been deleted."
+    else
+      flash[:notice] = "#{@user.username}'s account deleted."
+    end
+    redirect_to(root_url)
+  end
+
   protected
 
   def new_user_params
diff --git a/app/views/layouts/application.html.haml b/app/views/layouts/application.html.haml
@@ -33,6 +33,8 @@
               %a.btn.active-text.mr2{:href => sign_in_path} Log In
               %a.btn.btn-primary{:href => sign_up_path} Sign Up
       %main.flex-auto.px3.py3
+        -if flash[:notice].present?
+          .clearfix.rounded.py2.mb2.white.bg-navy.bold.center.font-lg=flash[:notice]
         =yield
       %footer.border-top
         %nav.clearfix
diff --git a/app/views/users/show.html.haml b/app/views/users/show.html.haml
@@ -20,6 +20,11 @@
         -if current_user == @user || current_user.try(:admin?)
           .clearfix.mb3
             .right
+              -if current_user.try(:admin?)
+                .inline.diminish.mr1=@user.email
+                .inline.diminish.mr1="accessed #{time_ago_in_words(@user.last_request_at)}"
+              -if current_user.try(:admin?) || params[:delete_account]
+                =link_to(icon('trash'), user_path(@user), method: :delete, class: 'diminish mr1', 'data-confirm': 'This makes us very sad. Are you sure?')
               =link_to('Sign out', sign_out_path, method: :delete, class: 'diminish')
               %a.ml1.btn.btn.bg-green.white{href: edit_user_path(@user)}
                 Edit Profile
diff --git a/config/routes.rb b/config/routes.rb
@@ -16,6 +16,7 @@
   get    '/500'            => "pages#show",    page: 'server_error'
   get    '/helloworld'     => "users#edit",    finish_signup: true, as: :finish_signup
   get    '/styleguide'     => "pages#show",    page: 'styleguide'
+  get    '/delete_account' => 'users#show',    delete_account: true
 
   resources :passwords, controller: "clearance/passwords", only: [:create, :new]
   resource :session, controller: "clearance/sessions", only: [:create]
