Fix remote editing security policy

[rails.git] / app / controllers / old_relation_controller.rb

diff --git a/app/controllers/old_relation_controller.rb b/app/controllers/old_relation_controller.rb
index 3f4b884f6ff88c59211b0f31278535903017cc98..78eca324cb4cb819e0450f089b179de947b074f3 100644 (file)
--- a/app/controllers/old_relation_controller.rb
+++ b/app/controllers/old_relation_controller.rb
@@ -1,31 +1,11 @@
-class OldRelationController < ApplicationController
-  require 'xml/libxml'
+class OldRelationController < OldController
+  private
 
-  before_filter :check_api_readable
-  after_filter :compress_output
-  around_filter :api_call_handle_error, :api_call_timeout
-
-  def history
-    relation = Relation.find(params[:id])
-    doc = OSM::API.new.get_xml_doc
-    
-    relation.old_relations.each do |old_relation|
-      doc.root << old_relation.to_xml_node
-    end
-    
-    render :text => doc.to_s, :content_type => "text/xml"
+  def lookup_old_element
+    @old_element = OldRelation.find([params[:id], params[:version]])
   end
-  
-  def version
-    if old_relation = OldRelation.where(:id => params[:id], :version => params[:version]).first
-      response.headers['Last-Modified'] = old_relation.timestamp.rfc822
-
-      doc = OSM::API.new.get_xml_doc
-      doc.root << old_relation.to_xml_node
 
-      render :text => doc.to_s, :content_type => "text/xml"
-    else
-      render :nothing => true, :status => :not_found
-    end
+  def lookup_old_element_versions
+    @elements = OldRelation.where(:relation_id => params[:id]).order(:version)
   end
 end