scinote-web/app/controllers/my_module_comments_controller.rb

72 lines
1.9 KiB
Ruby
Raw Normal View History

# frozen_string_literal: true
2016-02-12 23:52:43 +08:00
class MyModuleCommentsController < ApplicationController
include ActionView::Helpers::TextHelper
2017-01-13 00:02:01 +08:00
include InputSanitizeHelper
include ApplicationHelper
include CommentHelper
2016-02-12 23:52:43 +08:00
before_action :load_vars
before_action :load_comment, only: %i(update destroy)
before_action :check_view_permissions, only: :index
before_action :check_create_permissions, only: :create
before_action :check_manage_permissions, only: %i(update destroy)
2016-02-12 23:52:43 +08:00
def index
comments = @my_module.last_comments(@last_comment_id, @per_page)
2021-07-23 17:56:28 +08:00
unless comments.blank?
more_url = url_for(my_module_my_module_comments_url(@my_module, format: :json, from: comments.first.id))
2016-02-12 23:52:43 +08:00
end
comment_index_helper(comments, more_url, @last_comment_id.positive? ? nil : '/my_module_comments/index.html.erb')
2016-02-12 23:52:43 +08:00
end
def create
@comment = TaskComment.new(
2016-02-12 23:52:43 +08:00
message: comment_params[:message],
user: current_user,
my_module: @my_module
)
comment_create_helper(@comment)
end
def update
old_text = @comment.message
@comment.message = comment_params[:message]
comment_update_helper(@comment, old_text)
end
def destroy
comment_destroy_helper(@comment)
end
2016-02-12 23:52:43 +08:00
private
def load_vars
@last_comment_id = params[:from].to_i
@per_page = Constants::COMMENTS_SEARCH_LIMIT
@my_module = MyModule.find_by(id: params[:my_module_id])
2016-02-12 23:52:43 +08:00
render_404 unless @my_module
2016-02-12 23:52:43 +08:00
end
def load_comment
@comment = @my_module.task_comments.find(params[:id])
end
2016-02-12 23:52:43 +08:00
def check_view_permissions
render_403 unless can_read_my_module?(@my_module)
2016-02-12 23:52:43 +08:00
end
def check_create_permissions
render_403 unless can_create_my_module_comments?(@my_module)
end
def check_manage_permissions
render_403 unless can_manage_my_module_comment?(@comment)
end
2016-02-12 23:52:43 +08:00
def comment_params
params.require(:comment).permit(:message)
end
end