class Users < Application
  #before_filter :check_admin
  #provides :html, :xml

  def check_admin
    #render :template=>'admin/users/not_auth' unless session[:user].admin
  end

  # GET /users
  # GET /users.xml
  def index
    @users = User.find(:all)
    render
  end

  # GET /users/1
  # GET /users/1.xml
  def show
    @user = User.find(params[:id])
    render
  end

  # GET /users/new
  # GET /users/new.xml
  def new
    @user = User.new
  end

  # GET /users/1/edit
  def edit
    @user = User.find(params[:id])
    render
  end

  # POST /users
  # POST /userss.xml
  def create
    @user = User.new(params[:user])

    if @user.save
      redirect(:user,@user)
    else
      render :action => "new"
    end

  end

  # PUT /users/1
  # PUT /users/1.xml
  def update
    @user = User.find(params[:id])

    #if params[:user][:password] != @user.password
    #    params[:user][:password] = Password::update(params[:user][:password])
    #end

    if @user.update_attributes(params[:user])
        #flash[:notice] = 'User was successfully updated.'
        redirect(url(:user,@user))
    else
        render :action => "edit"
    end
  end

end