module Api
class TracesController < ApiController
- layout "site", :except => :georss
-
before_action :authorize_web
before_action :set_locale
before_action :authorize
- before_action :api_deny_access_handler
authorize_resource
- before_action :check_database_readable, :except => [:api_read, :api_data]
- before_action :check_database_writable, :only => [:api_create, :api_update, :api_delete]
- before_action :check_api_readable, :only => [:api_read, :api_data]
- before_action :check_api_writable, :only => [:api_create, :api_update, :api_delete]
- before_action :offline_redirect, :only => [:api_create, :api_delete, :api_data]
+ before_action :check_database_readable, :except => [:show, :data]
+ before_action :check_database_writable, :only => [:create, :update, :destroy]
+ before_action :check_api_readable, :only => [:show, :data]
+ before_action :check_api_writable, :only => [:create, :update, :destroy]
+ before_action :offline_error, :only => [:create, :destroy, :data]
around_action :api_call_handle_error
- def api_read
- trace = Trace.visible.find(params[:id])
+ def show
+ @trace = Trace.visible.find(params[:id])
- if trace.public? || trace.user == current_user
- render :xml => trace.to_xml.to_s
- else
- head :forbidden
- end
+ head :forbidden unless @trace.public? || @trace.user == current_user
end
- def api_update
+ def update
trace = Trace.visible.find(params[:id])
if trace.user == current_user
end
end
- def api_delete
+ def destroy
trace = Trace.visible.find(params[:id])
if trace.user == current_user
trace.visible = false
trace.save!
+ TraceDestroyerJob.perform_later(trace) if Settings.trace_use_job_queue
head :ok
else
end
end
- def api_data
+ def data
trace = Trace.visible.find(params[:id])
if trace.public? || trace.user == current_user
end
end
- def api_create
+ def create
tags = params[:tags] || ""
description = params[:description] || ""
visibility = params[:visibility]
trace = do_create(params[:file], tags, description, visibility)
if trace.id
+ TraceImporterJob.perform_later(trace) if Settings.trace_use_job_queue
render :plain => trace.id.to_s
elsif trace.valid?
head :internal_server_error
trace
end
- def offline_redirect
- redirect_to :action => :offline if Settings.status == "gpx_offline"
+ def offline_error
+ report_error "GPX files offline for maintenance", :service_unavailable if Settings.status == "gpx_offline"
end
end
end