Initial commit

app/controllers/carto/api/organization_notifications_controller.rb

@@ -0,0 +1,45 @@
+module Carto
+  module Api
+    class OrganizationNotificationsController < ::Api::ApplicationController
+      include Carto::ControllerHelper
+      extend Carto::DefaultRescueFroms
+
+      ssl_required :create, :destroy
+
+      before_filter :owners_only, :load_organization
+      before_filter :load_notification, only: [:destroy]
+
+      setup_default_rescues
+
+      respond_to :json
+
+      def create
+        notification_parameters = params.require(:notification).permit(:icon, :body, :recipients)
+        notification = @organization.notifications.create!(notification_parameters)
+        render_jsonp(NotificationPresenter.new(notification).to_hash, :created)
+      end
+
+      def destroy
+        @notification.destroy
+        head :no_content
+      end
+
+      private
+
+      def load_organization
+        @organization = Carto::Organization.find(current_user.organization_id)
+        unless [@organization.name, @organization.id].include?(params[:organization_id])
+          raise Carto::LoadError.new('Cannot find organization')
+        end
+      end
+
+      def owners_only
+        raise Carto::UnauthorizedError.new('Only organization owners') unless current_user.organization_owner?
+      end
+
+      def load_notification
+        @notification = @organization.notifications.find(params[:id])
+      end
+    end
+  end
+end