X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/d8a2794c2c0be24cf78945cdbf4af57c4468499c..370fe0855e8eef97bbe58dc559957ac303decc33:/app/controllers/api/changeset_comments_controller.rb diff --git a/app/controllers/api/changeset_comments_controller.rb b/app/controllers/api/changeset_comments_controller.rb index 756e56dcc..2f4a361ba 100644 --- a/app/controllers/api/changeset_comments_controller.rb +++ b/app/controllers/api/changeset_comments_controller.rb @@ -1,30 +1,39 @@ module Api class ChangesetCommentsController < ApiController - before_action :check_api_writable - before_action :check_api_readable, :except => [:create] - before_action :authorize + include QueryMethods + + before_action :check_api_writable, :except => [:index] + before_action :authorize, :except => [:index] authorize_resource before_action :require_public_data, :only => [:create] + before_action :set_request_formats - around_action :api_call_handle_error - around_action :api_call_timeout + + ## + # show all comments or search for a subset + def index + @comments = ChangesetComment.includes(:author).where(:visible => true).order("created_at DESC") + @comments = query_conditions_time(@comments) + @comments = query_conditions_user(@comments, :author) + @comments = query_limit(@comments) + end ## # Add a comment to a changeset def create # Check the arguments are sane - raise OSM::APIBadUserInput, "No id was given" unless params[:id] + raise OSM::APIBadUserInput, "No id was given" unless params[:changeset_id] raise OSM::APIBadUserInput, "No text was given" if params[:text].blank? raise OSM::APIRateLimitExceeded if rate_limit_exceeded? # Extract the arguments - id = params[:id].to_i + changeset_id = params[:changeset_id].to_i body = params[:text] # Find the changeset and check it is valid - changeset = Changeset.find(id) + changeset = Changeset.find(changeset_id) raise OSM::APIChangesetNotYetClosedError, changeset if changeset.open? # Add a comment to the changeset @@ -50,62 +59,12 @@ module Api end end - ## - # Sets visible flag on comment to false - def destroy - # Check the arguments are sane - raise OSM::APIBadUserInput, "No id was given" unless params[:id] - - # Extract the arguments - id = params[:id].to_i - - # Find the changeset - comment = ChangesetComment.find(id) - - # Hide the comment - comment.update(:visible => false) - - # Return a copy of the updated changeset - @changeset = comment.changeset - render "api/changesets/show" - - respond_to do |format| - format.xml - format.json - end - end - - ## - # Sets visible flag on comment to true - def restore - # Check the arguments are sane - raise OSM::APIBadUserInput, "No id was given" unless params[:id] - - # Extract the arguments - id = params[:id].to_i - - # Find the changeset - comment = ChangesetComment.find(id) - - # Unhide the comment - comment.update(:visible => true) - - # Return a copy of the updated changeset - @changeset = comment.changeset - render "api/changesets/show" - - respond_to do |format| - format.xml - format.json - end - end - private ## # Check if the current user has exceed the rate limit for comments def rate_limit_exceeded? - recent_comments = current_user.changeset_comments.where("created_at >= ?", Time.now.utc - 1.hour).count + recent_comments = current_user.changeset_comments.where(:created_at => Time.now.utc - 1.hour..).count recent_comments >= current_user.max_changeset_comments_per_hour end