module V1
  class UsersController < UsersBaseController

    skip_before_filter :verify_authenticity_token
    before_filter :fetch_user, :only => [:update]
    before_filter :authorize, :only => [:update]
    before_filter :authorize_admin, :only => [:index]

    respond_to :json

    def index
      if params[:query]
        @users = User.by_login.startkey(params[:query]).endkey(params[:query].succ)
        respond_with @users.map(&:login).sort
      else
        render :json => {'error' => 'query required', 'status' => :unprocessable_entity}
      end
    end

    def create
      @user = User.create(params[:user])
      respond_with @user # return ID instead?
    end

    def update
      @user = User.find_by_param(params[:id])
      @user.update_attributes params[:user]
      if @user.valid?
        flash[:notice] = t(:user_updated_successfully)
      end
      respond_with @user
    end

  end
end