pundit: convert bans to pundit.

app/controllers/bans_controller.rb

@@ -1,59 +1,44 @@
 class BansController < ApplicationController
-  before_action :moderator_only, :except => [:show, :index]
   respond_to :html, :xml, :json
   helper_method :search_params
 
   def new
-    @ban = Ban.new(ban_params(:create))
+    @ban = authorize Ban.new(permitted_attributes(Ban))
+    respond_with(@ban)
   end
 
   def edit
-    @ban = Ban.find(params[:id])
+    @ban = authorize Ban.find(params[:id])
+    respond_with(@ban)
   end
 
   def index
-    @bans = Ban.paginated_search(params, count_pages: true)
+    @bans = authorize Ban.paginated_search(params, count_pages: true)
     @bans = @bans.includes(:user, :banner) if request.format.html?
 
     respond_with(@bans)
   end
 
   def show
-    @ban = Ban.find(params[:id])
+    @ban = authorize Ban.find(params[:id])
     respond_with(@ban)
   end
 
   def create
-    @ban = Ban.create(banner: CurrentUser.user, **ban_params(:create))
-
-    if @ban.errors.any?
-      render :action => "new"
-    else
-      redirect_to ban_path(@ban), :notice => "Ban created"
-    end
+    @ban = authorize Ban.new(banner: CurrentUser.user, **permitted_attributes(Ban))
+    @ban.save
+    respond_with(@ban)
   end
 
   def update
-    @ban = Ban.find(params[:id])
-    if @ban.update(ban_params(:update))
-      redirect_to ban_path(@ban), :notice => "Ban updated"
-    else
-      render :action => "edit"
-    end
+    @ban = authorize Ban.find(params[:id])
+    @ban.update(permitted_attributes(@ban))
+    respond_with(@ban)
   end
 
   def destroy
-    @ban = Ban.find(params[:id])
+    @ban = authorize Ban.find(params[:id])
     @ban.destroy
-    redirect_to bans_path, :notice => "Ban destroyed"
-  end
-
-  private
-
-  def ban_params(context)
-    permitted_params = %i[reason duration expires_at]
-    permitted_params += %i[user_id user_name] if context == :create
-
-    params.fetch(:ban, {}).permit(permitted_params)
+    respond_with(@ban)
   end
 end