X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/19c2b92fb736e2b424981ce36c8ffd8f75c44d99..fee3a0836842d32fbeeb8b7e96c5ec77eb356d20:/app/controllers/changeset_comments_controller.rb?ds=sidebyside diff --git a/app/controllers/changeset_comments_controller.rb b/app/controllers/changeset_comments_controller.rb index 31e152560..0b5f6059a 100644 --- a/app/controllers/changeset_comments_controller.rb +++ b/app/controllers/changeset_comments_controller.rb @@ -1,90 +1,15 @@ class ChangesetCommentsController < ApplicationController - before_action :authorize_web, :only => [:comments_feed] - before_action :set_locale, :only => [:comments_feed] - before_action :authorize, :only => [:comment, :hide_comment, :unhide_comment] - before_action :require_moderator, :only => [:hide_comment, :unhide_comment] - before_action :require_allow_write_api, :only => [:comment, :hide_comment, :unhide_comment] - before_action :require_public_data, :only => [:comment] - before_action :check_api_writable, :only => [:comment, :hide_comment, :unhide_comment] - before_action :check_api_readable, :except => [:comment, :comments_feed] - before_action(:only => [:comments_feed]) { |c| c.check_database_readable(true) } - around_action :api_call_handle_error, :except => [:comments_feed] - around_action :api_call_timeout, :except => [:comments_feed] - around_action :web_timeout, :only => [:comments_feed] + before_action :authorize_web + before_action :set_locale - ## - # Add a comment to a changeset - def comment - # Check the arguments are sane - raise OSM::APIBadUserInput, "No id was given" unless params[:id] - raise OSM::APIBadUserInput, "No text was given" if params[:text].blank? - - # Extract the arguments - id = params[:id].to_i - body = params[:text] - - # Find the changeset and check it is valid - changeset = Changeset.find(id) - raise OSM::APIChangesetNotYetClosedError, changeset if changeset.is_open? - - # Add a comment to the changeset - comment = changeset.comments.create(:changeset => changeset, - :body => body, - :author => current_user) - - # Notify current subscribers of the new comment - changeset.subscribers.visible.each do |user| - Notifier.changeset_comment_notification(comment, user).deliver_later if current_user != user - end - - # Add the commenter to the subscribers if necessary - changeset.subscribers << current_user unless changeset.subscribers.exists?(current_user.id) - - # Return a copy of the updated changeset - render :xml => changeset.to_xml.to_s - end - - ## - # Sets visible flag on comment to false - def hide_comment - # Check the arguments are sane - raise OSM::APIBadUserInput, "No id was given" unless params[:id] + authorize_resource - # Extract the arguments - id = params[:id].to_i - - # Find the changeset - comment = ChangesetComment.find(id) - - # Hide the comment - comment.update(:visible => false) - - # Return a copy of the updated changeset - render :xml => comment.changeset.to_xml.to_s - end - - ## - # Sets visible flag on comment to true - def unhide_comment - # Check the arguments are sane - raise OSM::APIBadUserInput, "No id was given" unless params[:id] - - # Extract the arguments - id = params[:id].to_i - - # Find the changeset - comment = ChangesetComment.find(id) - - # Unhide the comment - comment.update(:visible => true) - - # Return a copy of the updated changeset - render :xml => comment.changeset.to_xml.to_s - end + before_action -> { check_database_readable(:need_api => true) } + around_action :web_timeout ## # Get a feed of recent changeset comments - def comments_feed + def index if params[:id] # Extract the arguments id = params[:id].to_i