engine/app/controllers/admin/contents_controller.rb

module Admin
  class ContentsController < BaseController

    sections 'contents'

    before_filter :set_content_type

    respond_to :json, :only => [:update, :sort]

    skip_load_and_authorize_resource

    before_filter :authorize_content

    def index
      @contents = @content_type.list_or_group_contents
    end

    def create
      create! { edit_admin_content_url(@content_type.slug, @content.id) }
    end

    def update
      update! { edit_admin_content_url(@content_type.slug, @content.id) }
    end

    def sort
      @content_type.sort_contents!(params[:children])

      respond_with(@content_type, :location => admin_contents_url(@content_type.slug))
    end

    def destroy
      destroy! { admin_contents_url(@content_type.slug) }
    end

    protected

    def set_content_type
      @content_type ||= current_site.content_types.where(:slug => params[:slug]).first
    end

    def begin_of_association_chain
      set_content_type
    end

    def authorize_content
      authorize! params[:action].to_sym, ContentInstance
    end

  end
end