+ @title = t 'diary_entry.no_such_entry.title', :id => params[:id]
+ render :action => 'no_such_entry', :status => :not_found
+ end
+ end
+
+ def hide
+ entry = DiaryEntry.find(params[:id])
+ entry.update_attributes(:visible => false)
+ redirect_to :action => "list", :display_name => entry.user.display_name
+ end
+
+ def hidecomment
+ comment = DiaryComment.find(params[:comment])
+ comment.update_attributes(:visible => false)
+ redirect_to :action => "view", :display_name => comment.diary_entry.user.display_name, :id => comment.diary_entry.id
+ end
+
+ def comments
+ @comment_pages, @comments = paginate(:diary_comments,
+ :conditions => {
+ :user_id => @this_user,
+ :visible => true
+ },
+ :order => 'created_at DESC',
+ :per_page => 20)
+ @page = (params[:page] || 1).to_i
+ end
+private
+ ##
+ # return permitted diary entry parameters
+ def entry_params
+ params.require(:diary_entry).permit(:title, :body, :language_code, :latitude, :longitude)
+ end
+
+ ##
+ # return permitted diary comment parameters
+ def comment_params
+ params.require(:diary_comment).permit(:body)
+ end
+
+ ##
+ # require that the user is a administrator, or fill out a helpful error message
+ # and return them to the user page.
+ def require_administrator
+ unless @user.administrator?
+ flash[:error] = t('user.filter.not_an_administrator')
+ redirect_to :controller => 'diary_entry', :action => 'view', :display_name => params[:id]
+ end
+ end