class FriendsController < MyProfileController
  
  protect 'manage_friends', :profile
  
  def index
    @friends = profile.friends
  end

  def add
    @friend = Person.find(params[:id])
    if request.post? && params[:confirmation]
      # FIXME this shouldn't be in Person model?
      AddFriend.create!(:person => profile, :friend => @friend, :group_for_person => params[:group])

      flash[:notice] = _('%s still needs to accept being your friend.') % @friend.name
      # FIXME shouldn't redirect to the friend's page?
      redirect_to :action => 'index' 
    end
  end

  def remove
    @friend = profile.friends.find(params[:id])
    if request.post? && params[:confirmation]
      profile.remove_friend(@friend)
      redirect_to :action => 'index'
    end
  end

end