Add user admin

app/controllers/admin/users_controller.rb

@@ -0,0 +1,70 @@
+module Admin
+  class UsersController < BaseController
+    before_action :set_user, only: [:show, :edit, :update, :destroy]
+
+    def index
+      @users = User.order(created_at: :desc)
+    end
+
+    def show
+    end
+
+    def new
+      @user = User.new
+    end
+
+    def create
+      @user = User.new(user_params)
+      @user.password = SecureRandom.alphanumeric(16) if user_params[:password].blank?
+
+      if @user.save
+        redirect_to admin_users_path, notice: "User created successfully."
+      else
+        render :new, status: :unprocessable_entity
+      end
+    end
+
+    def edit
+    end
+
+    def update
+      # Prevent changing params for the current user's email and admin status
+      # to avoid locking themselves out
+      update_params = user_params.dup
+
+      if @user == Current.session.user
+        update_params.delete(:admin)
+      end
+
+      # Only update password if provided
+      update_params.delete(:password) if update_params[:password].blank?
+
+      if @user.update(update_params)
+        redirect_to admin_users_path, notice: "User updated successfully."
+      else
+        render :edit, status: :unprocessable_entity
+      end
+    end
+
+    def destroy
+      # Prevent admin from deleting themselves
+      if @user == Current.session.user
+        redirect_to admin_users_path, alert: "You cannot delete your own account."
+        return
+      end
+
+      @user.destroy
+      redirect_to admin_users_path, notice: "User deleted successfully."
+    end
+
+    private
+
+    def set_user
+      @user = User.find(params[:id])
+    end
+
+    def user_params
+      params.require(:user).permit(:email_address, :password, :admin, :status)
+    end
+  end
+end