Complaints can now be geted individually identified by the id code (show) and...

Complaints can now be geted individually identified by the id code (show) and only editors and administrators can see the complaints.

app/controllers/v1/complaints_controller.rb

@@ -21,7 +21,8 @@ class V1::ComplaintsController < ApplicationController
   include ::DeletedObjectsController
   include ::Paginator
 
-  before_action :authenticate_user!, only: [:create]
+  before_action :set_complaint, only:[:show]
+  before_action :authenticate_user!, only: [:index, :show, :create]
 
   # GET v1/complaints
   # GET v1/complaints.json
@@ -30,6 +31,12 @@ class V1::ComplaintsController < ApplicationController
     render json: complaints
   end
 
+  # GET /v1/coplaints/1
+  # GET /v1/coplaints/1.json
+  def show
+    render json: @complaint
+  end
+
   # POST v1/complaints
   # POST v1/complaints.json
   def create
@@ -53,4 +60,7 @@ class V1::ComplaintsController < ApplicationController
     params.require(:complaint).permit(:user_id, :description,:complainable_id, :complaint_reason_id, :complainable_type)
   end
 
+  def set_complaint
+    @complaint = Complaint.find(params[:id])
+  end
 end

app/policies/complaint_policy.rb

@@ -22,4 +22,12 @@ class ComplaintPolicy < ApplicationPolicy
   def create?
     record if user_exists?
   end
+
+  def index?
+    record if user_can_edit?
+  end
+
+  def show?
+    record if user_can_edit?
+  end
 end

config/routes.rb

@@ -184,7 +184,7 @@ Rails.application.routes.draw do
       end
     end
 
-    resources :complaints, only: [:index, :create], concerns: :deletable
+    resources :complaints, only: [:index, :show, :create], concerns: :deletable
     resources :languages, except: [:new, :edit]
     resources :licenses, except: [:new, :edit]
     resources :mime_types, except: [:new, :edit]