Implement the new security mechanism

1 files changed, 3 insertions, 51 deletions

diff --git a/app/controllers/matches_controller.rb b/app/controllers/matches_controller.rb
index ba6ab16..474ae04 100644
--- a/app/controllers/matches_controller.rb
+++ b/app/controllers/matches_controller.rb
@@ -1,6 +1,6 @@
 class MatchesController < ApplicationController
-	before_action :set_tournament, only: [:index, :new, :create]
-	before_action :set_match, only: [:show, :edit, :update, :destroy]
+	before_action :set_tournament, only: [:index]
+
 	# GET /matches
 	# GET /matches.json
 	def index
@@ -12,58 +12,10 @@ class MatchesController < ApplicationController
 	def show
 	end
 
-	# GET /matches/new
-	def new
-	end
-
-	# GET /matches/1/edit
-	def edit
-	end
-
-	# POST /matches
-	# POST /matches.json
-	def create
-		@match = @tournament.matches.build(match_params)
-
-		respond_to do |format|
-			if @match.save
-				format.html { redirect_to tournament_matches_path, notice: 'Match was successfully created.' }
-				format.json { render action: 'show', status: :created, location: @match }
-			else
-				format.html { render action: 'new' }
-				format.json { render json: @match.errors, status: :unprocessable_entity }
-			end
-		end
-	end
-
-	# PATCH/PUT /matches/1
-	# PATCH/PUT /matches/1.json
-	def update
-		respond_to do |format|
-			if @match.update(match_params)
-				format.html { redirect_to [@tournament, @match], notice: 'Match was successfully updated.' }
-				format.json { head :no_content }
-			else
-				format.html { render action: 'edit' }
-				format.json { render json: @match.errors, status: :unprocessable_entity }
-			end
-		end
-	end
-
-	# DELETE /matches/1
-	# DELETE /matches/1.json
-	def destroy
-		@match.destroy
-		respond_to do |format|
-			format.html { redirect_to tournament_matches_path }
-			format.json { head :no_content }
-		end
-	end
-
 	private
 	# Use callbacks to share common setup or constraints between actions.
 	def set_match
-		@tournament = Tournament.find(params[:tournament_id])
+		set_tournament
 		@match = @tournament.matches.find(params[:id]);
 	end
 	def set_tournament