module Api
  module V0
    class GuidanceGroupsController  < Api::V0::BaseController
      before_action :authenticate
      #after_action :verify_authorized

      def show
        @guidance_group = GuidanceGroup.find(params[:id])
        raise Pundit::NotAuthorizedError unless Api::V0::GuidanceGroupPolicy.new(@user, @guidance_group).show?
        respond_with @guidance_group
      end

      def index
      raise Pundit::NotAuthorizedError unless Api::V0::GuidanceGroupPolicy.new(@user, :guidance_group).index?
       @all_viewable_groups = GuidanceGroup.all_viewable(@user)
        respond_with @all_viewable_groups
      end

      def pundit_user
        return @user
      end


      private
        def query_params
          params.permit(:id)
        end

    end
  end
end