X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/c91b86a1d1271c2bc801ee9dfc3a30fb2758aa9b..851de28303fc9c24d095b9452b862bea618ec0da:/app/controllers/old_way_controller.rb diff --git a/app/controllers/old_way_controller.rb b/app/controllers/old_way_controller.rb index 451ddf4ea..e2ee5f0c5 100644 --- a/app/controllers/old_way_controller.rb +++ b/app/controllers/old_way_controller.rb @@ -1,21 +1,75 @@ class OldWayController < ApplicationController - def history - response.headers["Content-Type"] = 'text/xml' - way = Way.find(params[:id]) + require 'xml/libxml' - unless way - render :nothing => true, :staus => 404 - return - end - - doc = get_xml_doc + skip_before_filter :verify_authenticity_token + before_filter :setup_user_auth, :only => [ :history, :version ] + before_filter :authorize, :only => [ :redact ] + before_filter :authorize_moderator, :only => [ :redact ] + before_filter :require_allow_write_api, :only => [ :redact ] + before_filter :check_api_readable + before_filter :check_api_writable, :only => [ :redact ] + before_filter :lookup_old_way, :except => [ :history ] + after_filter :compress_output + around_filter :api_call_handle_error, :api_call_timeout - way.old_ways.each do |old_way| + def history + way = Way.find(params[:id].to_i) + + doc = OSM::API.new.get_xml_doc + + visible_ways = if @user and @user.moderator? and params[:show_redactions] == "true" + way.old_ways + else + way.old_ways.unredacted + end + + visible_ways.each do |old_way| doc.root << old_way.to_xml_node end + + render :text => doc.to_s, :content_type => "text/xml" + end + + def version + if @old_way.redacted? and not (@user and @user.moderator? and params[:show_redactions] == "true") + render :nothing => true, :status => :forbidden + else - render :text => doc.to_s + response.last_modified = @old_way.timestamp + + doc = OSM::API.new.get_xml_doc + doc.root << @old_way.to_xml_node + + render :text => doc.to_s, :content_type => "text/xml" + end end + def redact + redaction_id = params['redaction'] + unless redaction_id.nil? + # if a redaction ID was specified, then set this way to + # be redacted in that redaction. (TODO: check that the + # user doing the redaction owns the redaction object too) + redaction = Redaction.find(redaction_id.to_i) + @old_way.redact!(redaction) + + else + # if no redaction ID was provided, then this is an unredact + # operation. + @old_way.redact!(nil) + end + + # just return an empty 200 OK for success + render :nothing => true + end + private + + def lookup_old_way + @old_way = OldWay.where(:way_id => params[:id], :version => params[:version]).first + if @old_way.nil? + render :nothing => true, :status => :not_found + return false + end + end end