Associate author with snippet

Author: rossta

app/controllers/share/snippets_controller.rb

@@ -2,6 +2,7 @@ class Share::SnippetsController < ApplicationController
   using Refinements::Emojoy
 
   before_action :feature_enabled!
+  before_action :authenticate_user!, only: %i[new create edit update destroy]
 
   # GET /snippets
   def index
@@ -20,18 +21,18 @@ def new
       source: "class User < ApplicationRecord\n\s\shas_many :posts\nend",
       language: "ruby"
     }
-    @snippet = Snippet.new(snippet_params.presence || default_params)
+    @snippet = current_user.snippets.new(snippet_params.presence || default_params)
   end
 
   # GET /snippets/1/edit
   def edit
-    @snippet = Snippet.find(params[:id])
+    @snippet = current_user.snippets.find(params[:id])
     @snippet.assign_attributes(snippet_params)
   end
 
   # POST /snippets
   def create
-    @snippet = Snippet.new(snippet_params)
+    @snippet = current_user.snippets.new(snippet_params)
 
     if @snippet.save
       redirect_to share_snippet_redirect_url(@snippet), notice: "Your snippet has been saved".emojoy, status: :see_other
@@ -42,7 +43,7 @@ def create
 
   # PATCH/PUT /snippets/1
   def update
-    @snippet = Snippet.find(params[:id])
+    @snippet = current_user.snippets.find(params[:id])
     if @snippet.update(snippet_params)
       @snippet.attach_screenshot_from_base64(params[:screenshot]) if params[:screenshot]
 
@@ -54,7 +55,7 @@ def update
 
   # DELETE /snippets/1
   def destroy
-    @snippet = Snippet.find(params[:id])
+    @snippet = current_user.snippets.find(params[:id])
     @snippet.destroy!
     redirect_to share_snippets_url, notice: "Your snippet has been deleted permanently".emojoy, status: :see_other
   end

app/models/snippet.rb

@@ -7,6 +7,8 @@ class Snippet < ApplicationRecord
 
   has_one_attached :screenshot
 
+  belongs_to :author, polymorphic: true, inverse_of: :snippets
+
   attr_reader :auto_detecting
 
   def attach_screenshot_from_base64(data)

app/models/user.rb

@@ -8,6 +8,8 @@ class User < ApplicationRecord
 
   has_one :newsletter_subscription, as: :subscriber, dependent: :destroy
 
+  has_many :snippets, as: :author, dependent: :destroy
+
   scope :confirmed, -> { where.not(confirmed_at: nil) }
   scope :recently_confirmed, -> { where("confirmed_at > ?", 2.weeks.ago) }
   scope :subscribers, -> { confirmed.joins(:newsletter_subscription) }

spec/factories/snippets.rb

@@ -2,5 +2,6 @@
   factory :snippet do
     source { "puts \"Hello, world!\"" }
     language { "ruby" }
+    author { build(:user) }
   end
 end

spec/requests/share/snippets_spec.rb

@@ -27,6 +27,12 @@
       get new_share_snippet_url
       expect(response).to be_successful
     end
+
+    it "redirects when not authenticated" do
+      Flipper.enable(:snippets)
+      get new_share_snippet_url
+      expect(response).to be_not_found
+    end
   end
 
   describe "GET /edit" do