app/controllers/diary_entries_controller.rb

   1 class DiaryEntriesController < ApplicationController
   2   layout "site", :except => :rss
   3
   4   before_action :authorize_web
   5   before_action :set_locale
   6   before_action :check_database_readable
   7
   8   authorize_resource
   9
  10   before_action :lookup_user, :only => [:show, :comments]
  11   before_action :check_database_writable, :only => [:new, :create, :edit, :update, :comment, :hide, :hidecomment, :subscribe, :unsubscribe]
  12   before_action :allow_thirdparty_images, :only => [:new, :create, :edit, :update, :index, :show, :comments]
  13
  14   def new
  15     @title = t "diary_entries.new.title"
  16
  17     default_lang = current_user.preferences.where(:k => "diary.default_language").first
  18     lang_code = default_lang ? default_lang.v : current_user.preferred_language
  19     @diary_entry = DiaryEntry.new(entry_params.merge(:language_code => lang_code))
  20     set_map_location
  21     render :action => "new"
  22   end
  23
  24   def create
  25     @title = t "diary_entries.new.title"
  26
  27     @diary_entry = DiaryEntry.new(entry_params)
  28     @diary_entry.user = current_user
  29
  30     if @diary_entry.save
  31       default_lang = current_user.preferences.where(:k => "diary.default_language").first
  32       if default_lang
  33         default_lang.v = @diary_entry.language_code
  34         default_lang.save!
  35       else
  36         current_user.preferences.create(:k => "diary.default_language", :v => @diary_entry.language_code)
  37       end
  38
  39       # Subscribe user to diary comments
  40       @diary_entry.subscriptions.create(:user => current_user)
  41
  42       redirect_to :action => "index", :display_name => current_user.display_name
  43     else
  44       render :action => "new"
  45     end
  46   end
  47
  48   def edit
  49     @title = t "diary_entries.edit.title"
  50     @diary_entry = DiaryEntry.find(params[:id])
  51
  52     redirect_to diary_entry_path(@diary_entry.user, @diary_entry) if current_user != @diary_entry.user
  53
  54     set_map_location
  55   rescue ActiveRecord::RecordNotFound
  56     render :action => "no_such_entry", :status => :not_found
  57   end
  58
  59   def update
  60     @title = t "diary_entries.edit.title"
  61     @diary_entry = DiaryEntry.find(params[:id])
  62
  63     if current_user != @diary_entry.user ||
  64        (params[:diary_entry] && @diary_entry.update(entry_params))
  65       redirect_to diary_entry_path(@diary_entry.user, @diary_entry)
  66     else
  67       set_map_location
  68       render :action => "edit"
  69     end
  70   rescue ActiveRecord::RecordNotFound
  71     render :action => "no_such_entry", :status => :not_found
  72   end
  73
  74   def comment
  75     @entry = DiaryEntry.find(params[:id])
  76     @comments = @entry.visible_comments
  77     @diary_comment = @entry.comments.build(comment_params)
  78     @diary_comment.user = current_user
  79     if @diary_comment.save
  80
  81       # Notify current subscribers of the new comment
  82       @entry.subscribers.visible.each do |user|
  83         UserMailer.diary_comment_notification(@diary_comment, user).deliver_later if current_user != user
  84       end
  85
  86       # Add the commenter to the subscribers if necessary
  87       @entry.subscriptions.create(:user => current_user) unless @entry.subscribers.exists?(current_user.id)
  88
  89       redirect_to diary_entry_path(@entry.user, @entry)
  90     else
  91       render :action => "show"
  92     end
  93   rescue ActiveRecord::RecordNotFound
  94     render :action => "no_such_entry", :status => :not_found
  95   end
  96
  97   def subscribe
  98     diary_entry = DiaryEntry.find(params[:id])
  99
 100     diary_entry.subscriptions.create(:user => current_user) unless diary_entry.subscribers.exists?(current_user.id)
 101
 102     redirect_to diary_entry_path(diary_entry.user, diary_entry)
 103   rescue ActiveRecord::RecordNotFound
 104     render :action => "no_such_entry", :status => :not_found
 105   end
 106
 107   def unsubscribe
 108     diary_entry = DiaryEntry.find(params[:id])
 109
 110     diary_entry.subscriptions.where(:user => current_user).delete_all if diary_entry.subscribers.exists?(current_user.id)
 111
 112     redirect_to diary_entry_path(diary_entry.user, diary_entry)
 113   rescue ActiveRecord::RecordNotFound
 114     render :action => "no_such_entry", :status => :not_found
 115   end
 116
 117   def index
 118     if params[:display_name]
 119       @user = User.active.find_by(:display_name => params[:display_name])
 120
 121       if @user
 122         @title = t "diary_entries.index.user_title", :user => @user.display_name
 123         @entries = @user.diary_entries
 124       else
 125         render_unknown_user params[:display_name]
 126         return
 127       end
 128     elsif params[:friends]
 129       if current_user
 130         @title = t "diary_entries.index.title_friends"
 131         @entries = DiaryEntry.where(:user_id => current_user.friends)
 132       else
 133         require_user
 134         return
 135       end
 136     elsif params[:nearby]
 137       if current_user
 138         @title = t "diary_entries.index.title_nearby"
 139         @entries = DiaryEntry.where(:user_id => current_user.nearby)
 140       else
 141         require_user
 142         return
 143       end
 144     else
 145       @entries = DiaryEntry.joins(:user).where(:users => { :status => %w[active confirmed] })
 146
 147       if params[:language]
 148         @title = t "diary_entries.index.in_language_title", :language => Language.find(params[:language]).english_name
 149         @entries = @entries.where(:language_code => params[:language])
 150       else
 151         @title = t "diary_entries.index.title"
 152       end
 153     end
 154
 155     @params = params.permit(:display_name, :friends, :nearby, :language)
 156
 157     @page = (params[:page] || 1).to_i
 158     @page_size = 20
 159
 160     @entries = @entries.visible unless can? :unhide, DiaryEntry
 161     @entries = @entries.order("created_at DESC")
 162     @entries = @entries.offset((@page - 1) * @page_size)
 163     @entries = @entries.limit(@page_size)
 164     @entries = @entries.includes(:user, :language)
 165   end
 166
 167   def rss
 168     if params[:display_name]
 169       user = User.active.find_by(:display_name => params[:display_name])
 170
 171       if user
 172         @entries = user.diary_entries
 173         @title = t("diary_entries.feed.user.title", :user => user.display_name)
 174         @description = t("diary_entries.feed.user.description", :user => user.display_name)
 175         @link = url_for :action => "index", :display_name => user.display_name, :host => Settings.server_url, :protocol => Settings.server_protocol
 176       else
 177         head :not_found
 178         return
 179       end
 180     else
 181       @entries = DiaryEntry.joins(:user).where(:users => { :status => %w[active confirmed] })
 182
 183       # Items can't be flagged as deleted in the RSS format.
 184       # For the general feeds, allow a delay before publishing, to help spam fighting
 185       @entries = @entries.where("created_at < :time", :time => Settings.diary_feed_delay.hours.ago)
 186
 187       if params[:language]
 188         @entries = @entries.where(:language_code => params[:language])
 189         @title = t("diary_entries.feed.language.title", :language_name => Language.find(params[:language]).english_name)
 190         @description = t("diary_entries.feed.language.description", :language_name => Language.find(params[:language]).english_name)
 191         @link = url_for :action => "index", :language => params[:language], :host => Settings.server_url, :protocol => Settings.server_protocol
 192       else
 193         @title = t("diary_entries.feed.all.title")
 194         @description = t("diary_entries.feed.all.description")
 195         @link = url_for :action => "index", :host => Settings.server_url, :protocol => Settings.server_protocol
 196       end
 197     end
 198     @entries = @entries.visible.includes(:user).order("created_at DESC").limit(20)
 199   end
 200
 201   def show
 202     @entry = @user.diary_entries.visible.where(:id => params[:id]).first
 203     if @entry
 204       @title = t "diary_entries.show.title", :user => params[:display_name], :title => @entry.title
 205       @comments = can?(:unhidecomment, DiaryEntry) ? @entry.comments : @entry.visible_comments
 206     else
 207       @title = t "diary_entries.no_such_entry.title", :id => params[:id]
 208       render :action => "no_such_entry", :status => :not_found
 209     end
 210   end
 211
 212   def hide
 213     entry = DiaryEntry.find(params[:id])
 214     entry.update(:visible => false)
 215     redirect_to :action => "index", :display_name => entry.user.display_name
 216   end
 217
 218   def unhide
 219     entry = DiaryEntry.find(params[:id])
 220     entry.update(:visible => true)
 221     redirect_to :action => "index", :display_name => entry.user.display_name
 222   end
 223
 224   def hidecomment
 225     comment = DiaryComment.find(params[:comment])
 226     comment.update(:visible => false)
 227     redirect_to diary_entry_path(comment.diary_entry.user, comment.diary_entry)
 228   end
 229
 230   def unhidecomment
 231     comment = DiaryComment.find(params[:comment])
 232     comment.update(:visible => true)
 233     redirect_to diary_entry_path(comment.diary_entry.user, comment.diary_entry)
 234   end
 235
 236   def comments
 237     @title = t ".title", :user => @user.display_name
 238
 239     conditions = { :user_id => @user }
 240
 241     conditions[:visible] = true unless can? :unhidecomment, DiaryEntry
 242
 243     @comment_pages, @comments = paginate(:diary_comments,
 244                                          :conditions => conditions,
 245                                          :order => "created_at DESC",
 246                                          :per_page => 20)
 247     @page = (params[:page] || 1).to_i
 248   end
 249
 250   private
 251
 252   ##
 253   # return permitted diary entry parameters
 254   def entry_params
 255     params.require(:diary_entry).permit(:title, :body, :language_code, :latitude, :longitude)
 256   rescue ActionController::ParameterMissing
 257     ActionController::Parameters.new.permit(:title, :body, :language_code, :latitude, :longitude)
 258   end
 259
 260   ##
 261   # return permitted diary comment parameters
 262   def comment_params
 263     params.require(:diary_comment).permit(:body)
 264   end
 265
 266   ##
 267   # decide on a location for the diary entry map
 268   def set_map_location
 269     if @diary_entry.latitude && @diary_entry.longitude
 270       @lon = @diary_entry.longitude
 271       @lat = @diary_entry.latitude
 272       @zoom = 12
 273     elsif current_user.home_lat.nil? || current_user.home_lon.nil?
 274       @lon = params[:lon] || -0.1
 275       @lat = params[:lat] || 51.5
 276       @zoom = params[:zoom] || 4
 277     else
 278       @lon = current_user.home_lon
 279       @lat = current_user.home_lat
 280       @zoom = 12
 281     end
 282   end
 283 end