From a2e41bdc2d7d5bebee3ae022786946d7d878d2ff Mon Sep 17 00:00:00 2001
From: ricola <ricola@poivron.org>
Date: Sun, 6 Apr 2025 17:04:31 -0600
Subject: [PATCH] Require being an organizer to edit a draft vote

---
 views/votes_edit.erb       |  2 ++
 views/votes_show_draft.erb | 18 ++++++++++++++++++
 vote.rb                    |  6 +++++-
 3 files changed, 25 insertions(+), 1 deletion(-)
 create mode 100644 views/votes_show_draft.erb

diff --git a/views/votes_edit.erb b/views/votes_edit.erb
index 4004bbc..246748f 100644
--- a/views/votes_edit.erb
+++ b/views/votes_edit.erb
@@ -41,6 +41,8 @@
   <% end %>
 </ul>
 
+<h3>Add organizer</h3>
+
 <form action="/votes/<%= @vote.secure_id %>/organizers" method="post">
   <p>
     <label for="email">Email</label>
diff --git a/views/votes_show_draft.erb b/views/votes_show_draft.erb
new file mode 100644
index 0000000..e63c258
--- /dev/null
+++ b/views/votes_show_draft.erb
@@ -0,0 +1,18 @@
+<h1><%= @vote.title %> (Draft)</h1>
+
+<p><%= @vote.description %></p>
+
+<h2>Organizers</h2>
+
+<ul>
+  <% @vote.organizers.each do |organizer| %>
+  <li><%= organizer.user.email %></li>
+  <% end %>
+</ul>
+
+<h2>Candidates</h2>
+
+<% @vote.candidates.each do |candidate| %>
+<h3><%= candidate.name %></h3>
+<p><%= candidate.description %></p>
+<% end %>
diff --git a/vote.rb b/vote.rb
index fef7c69..d7cc4ac 100644
--- a/vote.rb
+++ b/vote.rb
@@ -116,7 +116,11 @@ get '/votes/:id' do
   when "open"
     erb :votes_show
   when "draft"
-    erb :votes_edit
+    if @vote.users.exists?(current_user.id)
+      erb :votes_edit
+    else
+      erb :votes_show_draft
+    end
   when "closed"
     erb :votes_results
   else