class NotesController < ApplicationController
- layout "site"
+ include UserMethods
+
+ layout :map_layout
before_action :check_api_readable
before_action :authorize_web
+ before_action :require_oauth
authorize_resource
+ before_action :lookup_user, :only => [:index]
before_action :set_locale
around_action :web_timeout
##
# Display a list of notes by a specified user
def index
- if params[:display_name]
- if @user = User.active.find_by(:display_name => params[:display_name])
- @params = params.permit(:display_name)
- @title = t ".title", :user => @user.display_name
- @page = (params[:page] || 1).to_i
- @page_size = 10
- @notes = @user.notes
- @notes = @notes.visible unless current_user&.moderator?
- @notes = @notes.order("updated_at DESC, id").distinct.offset((@page - 1) * @page_size).limit(@page_size).preload(:comments => :author)
- else
- @title = t "users.no_such_user.title"
- @not_found_user = params[:display_name]
-
- render :template => "users/no_such_user", :status => :not_found
- end
+ param! :page, Integer, :min => 1
+
+ @params = params.permit(:display_name, :status)
+ @title = t ".title", :user => @user.display_name
+ @page = (params[:page] || 1).to_i
+ @page_size = 10
+ @notes = @user.notes
+ @notes = @notes.visible unless current_user&.moderator?
+ @notes = @notes.where(:status => params[:status]) unless params[:status] == "all" || params[:status].blank?
+ @notes = @notes.order("updated_at DESC, id").distinct.offset((@page - 1) * @page_size).limit(@page_size).preload(:comments => :author)
+
+ render :layout => "site"
+ end
+
+ def show
+ @type = "note"
+
+ if current_user&.moderator?
+ @note = Note.find(params[:id])
+ @note_comments = @note.comments.unscope(:where => :visible)
+ else
+ @note = Note.visible.find(params[:id])
+ @note_comments = @note.comments
end
+ rescue ActiveRecord::RecordNotFound
+ render :template => "browse/not_found", :status => :not_found
end
+
+ def new; end
end