pulibrary / pdc_describe / cace366a-ffad-45f1-9b60-678e607fa527

coverage: 60.862% (-35.0%) from 95.908%
cace366a-ffad-45f1-9b60-678e607fa527

push

circleci

jrgriffiniii 
wip

1 of 3 new or added lines in 2 files covered. (33.33%)

1194 existing lines in 57 files now uncovered.

2076 of 3411 relevant lines covered (60.86%)

22.71 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

21.05
/app/controllers/reports_controller.rb
1 
# frozen_string_literal: true
2 
class ReportsController < ApplicationController
1✔
3 
  def dataset_list
1✔
UNCOV
4 
    if current_user.super_admin? || current_user.moderator?
×
UNCOV
5 
      @works = Work.where(sql_where(params))
×
6 
    else
UNCOV
7 
      redirect_to "/"
×
8 
    end
9 
  end
10 









11



  private




1✔





12












13



    def sql_where(params)




1✔






UNCOV

14



      sql_where = []




×








UNCOV

15



      if params["status"] == "finished"




×







16



        sql_where << "state = 'approved'"




×








UNCOV

17



      elsif params["status"] == "unfinished"




×







18



        sql_where << "state != 'approved'"




×







19



      end










20













UNCOV

21



      if params["group"].present? && params["group"] != "ALL"




×








UNCOV

22



        group_id = Group.where(code: params["group"]).first.id




×








UNCOV

23



        sql_where << "group_id = #{group_id}"




×







24



      end










25













UNCOV

26



      if params["year"].present? && params["year"] != "ALL"




×







27



        year = params["year"].to_i # Force to int to guard against SQL injection




×







28



        sql_where << "metadata->>'publication_year' = '#{year}'"




×







29



      end











UNCOV

30



      sql_where.join(" AND ")




×







31



    end










32



end
























    

  • 

    •