Skip 6 months of boilerplate

class Organization < ApplicationRecord
  has_prefix_id :org
  
  has_many :memberships, dependent: :destroy
  has_many :users, through: :memberships
  has_many :projects, dependent: :destroy
  
  # Stripe integration with Pay gem
  pay_customer stripe_attributes: :stripe_attributes
  
  validates :name, presence: true, length: { maximum: 100 }
  validates :privacy, inclusion: { in: %w[public private] }
  
  scope :discoverable, -> { where(privacy: 'public') }
  
  def stripe_attributes
    { name: name, email: primary_email }
  end
  
  def primary_email
    memberships.owner.first&.user&.email
  end
end

class Organizations::BaseController < ApplicationController
  before_action :authenticate_user!
  before_action :set_organization
  before_action :authorize_organization_access!
  
  private
  
  def set_organization
    @organization = Organization.find(params[:organization_id])
  end
  
  def authorize_organization_access!
    @membership = current_user.memberships
                             .find_by(organization: @organization)
    
    unless @membership
      redirect_to root_path, 
                  alert: "Access denied to this organization"
    end
  end
  
  def require_subscription
    unless @organization.payment_processor.subscribed?
      redirect_to organization_subscriptions_url(@organization),
                  alert: "Subscription required for this feature"
    end
  end
end