cover the other extreme in the map bounary sanitizeation. Ading some documentation...

[rails.git] / app / controllers / user_preference_controller.rb

diff --git a/app/controllers/user_preference_controller.rb b/app/controllers/user_preference_controller.rb
index 53db769efcd8aec57e904ea3ad635633c4e26a2f..5594799293a1c9f79d492c54f79e128225369c04 100644 (file)
--- a/app/controllers/user_preference_controller.rb
+++ b/app/controllers/user_preference_controller.rb
@@ -1,2 +1,100 @@
+# Update and read user preferences, which are arbitrayr key/val pairs
 class UserPreferenceController < ApplicationController
+  before_filter :authorize
+
+  def read_one
+    pref = UserPreference.find(@user.id, params[:preference_key])
+
+    if pref
+      render :text => pref.v.to_s
+    else
+      render :text => 'OH NOES! PREF NOT FOUND!', :status => 404
+    end
+  end
+
+  def update_one
+    begin
+      pref = UserPreference.find(@user.id, params[:preference_key])
+      pref.v = request.raw_post.chomp
+      pref.save
+    rescue ActiveRecord::RecordNotFound 
+      pref = UserPreference.new
+      pref.user = @user
+      pref.k = params[:preference_key]
+      pref.v = request.raw_post.chomp
+      pref.save
+    end
+
+    render :nothing => true
+  end
+
+  def delete_one
+    UserPreference.delete(@user.id, params[:preference_key])
+
+    render :nothing => true
+  end
+
+  # print out all the preferences as a big xml block
+  def read
+    doc = OSM::API.new.get_xml_doc
+
+    prefs = @user.preferences
+
+    el1 = XML::Node.new 'preferences'
+
+    prefs.each do |pref|
+      el1 <<  pref.to_xml_node
+    end
+
+    doc.root << el1
+    render :text => doc.to_s, :content_type => "text/xml"
+  end
+
+  # update the entire set of preferences
+  def update
+    begin
+      p = XML::Parser.new
+      p.string = request.raw_post
+      doc = p.parse
+
+      prefs = []
+
+      keyhash = {}
+
+      doc.find('//preferences/preference').each do |pt|
+        pref = UserPreference.new
+
+        unless keyhash[pt['k']].nil? # already have that key
+          render :text => 'OH NOES! CAN HAS UNIQUE KEYS?', :status => :not_acceptable
+          return
+        end
+
+        keyhash[pt['k']] = 1
+
+        pref.k = pt['k']
+        pref.v = pt['v']
+        pref.user_id = @user.id
+        prefs << pref
+      end
+
+      if prefs.size > 150
+        render :text => 'Too many preferences', :status => :request_entity_too_large
+        return
+      end
+
+      # kill the existing ones
+      UserPreference.delete_all(['user_id = ?', @user.id])
+
+      # save the new ones
+      prefs.each do |pref|
+        pref.save!
+      end
+
+    rescue Exception => ex
+      render :text => 'OH NOES! FAIL!: ' + ex.to_s, :status => :internal_server_error
+      return
+    end
+
+    render :nothing => true
+  end
 end