X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/d27ff25473285a8f1b2458285b3ca0c95d401fa5..4358a6adcb2c9d55f2c2fcf53c958ed388cbc31c:/app/controllers/trace_controller.rb diff --git a/app/controllers/trace_controller.rb b/app/controllers/trace_controller.rb index 262dd8d2f..37c74f8e0 100644 --- a/app/controllers/trace_controller.rb +++ b/app/controllers/trace_controller.rb @@ -2,11 +2,13 @@ class TraceController < ApplicationController before_filter :authorize_web before_filter :authorize, :only => [:api_details, :api_data, :api_create] layout 'site' - + # Counts and selects pages of GPX traces for various criteria (by user, tags, public etc.). # target_user - if set, specifies the user to fetch traces for. if not set will fetch all traces # paging_action - the action that will be linked back to from view def list (target_user = nil, paging_action = 'list') + @title = 'public GPS traces' + @title += " tagged with #{params[:tag]}" if params[:tag] @traces_per_page = 20 page_index = params[:page] ? params[:page].to_i - 1 : 0 # nice 1-based page -> 0-based page index @@ -15,6 +17,7 @@ class TraceController < ApplicationController if target_user.nil? and display_name and display_name != '' @paging_action = 'view' @display_name = display_name + @title += " from #{@display_name}" target_user = User.find(:first, :conditions => [ "display_name = ?", display_name]) end @@ -92,7 +95,7 @@ class TraceController < ApplicationController @trace = Trace.find(params[:id]) unless @trace.public if @user - render :nothing, :status => 401 if @trace.user.id != @user.id + render :nothing, :status => :forbidden if @trace.user.id != @user.id end end end @@ -115,17 +118,15 @@ class TraceController < ApplicationController logger.info("id is #{@trace.id}") flash[:notice] = "Your GPX file has been uploaded and is awaiting insertion in to the database. This will usually happen within half an hour, and an email will be sent to you on completion." redirect_to :action => 'mine' - else - # fixme throw an error here - redirect_to :action => 'mine' - flash[:notice] = "You haven't entered a tag or a description for yoru traces." end end def data trace = Trace.find(params[:id]) - if trace.public? or (@user and @user == trace.user) - send_data(File.open("/home/osm/gpx/#{trace.id}.gpx",'r').read , :filename => "#{trace.id}.gpx", :type => 'text/plain', :disposition => 'inline') + if trace and (trace.public? or (@user and @user == trace.user)) + send_file(trace.trace_name, :filename => "#{trace.id}.gpx", :type => trace.mime_type, :disposition => 'attachment') + else + render :nothing, :status => :not_found end end @@ -149,26 +150,55 @@ class TraceController < ApplicationController rss.add(trace.latitude, trace.longitude, trace.name, url_for({:controller => 'trace', :action => 'view', :id => trace.id, :display_name => trace.user.display_name}), " 'icon', :id => trace.id, :user_login => trace.user.display_name})}'> GPX file with #{trace.size} points from #{trace.user.display_name}", trace.timestamp) end - response.headers["Content-Type"] = 'application/xml+rss' - - render :text => rss.to_s + render :text => rss.to_s, :content_type => "application/rss+xml" end def picture - trace = Trace.find(params[:id]) - send_data(trace.large_picture, :filename => "#{trace.id}.gif", :type => 'image/gif', :disposition => 'inline') if trace.public? or (@user and @user == trace.user) + begin + trace = Trace.find(params[:id]) + + if trace.public? or (@user and @user == trace.user) + send_file(trace.large_picture_name, :filename => "#{trace.id}.gif", :type => 'image/gif', :disposition => 'inline') + else + render :nothing, :status => :forbidden + end + rescue ActiveRecord::RecordNotFound + render :nothing => true, :status => :not_found + rescue + render :nothing => true, :status => :internal_server_error + end end def icon - trace = Trace.find(params[:id]) - send_data(trace.icon_picture, :filename => "#{trace.id}_icon.gif", :type => 'image/gif', :disposition => 'inline') if trace.public? or (@user and @user == trace.user) + begin + trace = Trace.find(params[:id]) + + if trace.public? or (@user and @user == trace.user) + send_file(trace.icon_picture_name, :filename => "#{trace.id}_icon.gif", :type => 'image/gif', :disposition => 'inline') + else + render :nothing, :status => :forbidden + end + rescue ActiveRecord::RecordNotFound + render :nothing => true, :status => :not_found + rescue + render :nothing => true, :status => :internal_server_error + end end def api_details - trace = Trace.find(params[:id]) - doc = OSM::API.new.get_xml_doc - doc.root << trace.to_xml_node() if trace.public? or trace.user == @user - render :text => doc.to_s + begin + trace = Trace.find(params[:id]) + + if trace.public? or trace.user == @user + render :text => trace.to_xml.to_s, :content_type => "text/xml" + else + render :nothing => true, :status => :forbidden + end + rescue ActiveRecord::RecordNotFound + render :nothing => true, :status => :not_found + rescue + render :nothing => true, :status => :internal_server_error + end end def api_data @@ -196,8 +226,7 @@ class TraceController < ApplicationController flash[:notice] = "Your GPX file has been uploaded and is awaiting insertion in to the database. This will usually happen within half an hour, and an email will be sent to you on completion." render :nothing => true else - render :nothing => true, :status => 400 # er FIXME what fricking code to return? + render :nothing => true, :status => :internal_server_error end - end end