scinote-web/app/controllers/assets_controller.rb

269 lines
8.3 KiB
Ruby
Raw Normal View History

# frozen_string_literal: true
2016-02-12 23:52:43 +08:00
class AssetsController < ApplicationController
2016-09-29 21:30:55 +08:00
include WopiUtil
2019-06-19 21:19:47 +08:00
include AssetsActions
include ActiveStorage::SetCurrent
2017-03-13 20:20:49 +08:00
include ActionView::Helpers::AssetTagHelper
include ActionView::Helpers::TextHelper
2017-03-13 20:20:49 +08:00
include ActionView::Helpers::UrlHelper
include ActionView::Context
include ActiveStorageFileUtil
include ApplicationHelper
2017-03-13 20:20:49 +08:00
include InputSanitizeHelper
include FileIconsHelper
include MyModulesHelper
2016-09-29 21:30:55 +08:00
2020-10-22 19:41:17 +08:00
helper_method :wopi_file_edit_button_status
2019-03-16 03:59:15 +08:00
before_action :load_vars, except: :create_wopi_file
before_action :check_read_permission, except: %i(edit destroy create_wopi_file toggle_view_mode)
before_action :check_edit_permission, only: %i(edit destroy toggle_view_mode)
2018-03-30 17:50:28 +08:00
def file_preview
2020-10-22 19:41:17 +08:00
render json: { html: render_to_string(
partial: 'shared/file_preview/content.html.erb',
locals: {
asset: @asset,
can_edit: can_manage_asset?(@asset),
2020-11-26 22:35:06 +08:00
gallery: params[:gallery],
preview: params[:preview]
2020-10-19 21:23:34 +08:00
}
2020-10-22 19:41:17 +08:00
) }
end
def toggle_view_mode
2020-09-25 21:06:09 +08:00
@asset.view_mode = toggle_view_mode_params[:view_mode]
if @asset.save(touch: false)
gallery_view_id = if @assoc.is_a?(Step)
@assoc.id
elsif @assoc.is_a?(Result)
@assoc.my_module.id
end
2020-10-27 00:16:31 +08:00
html = render_to_string(partial: 'assets/asset.html.erb', locals: {
2020-10-27 00:20:34 +08:00
asset: @asset,
gallery_view_id: gallery_view_id
})
2020-09-25 21:06:09 +08:00
respond_to do |format|
format.json do
render json: { html: html }, status: :ok
end
end
end
end
def load_asset
gallery_view_id = if @assoc.is_a?(Step)
@assoc.id
elsif @assoc.is_a?(Result)
@assoc.my_module.id
end
render json: { html: render_to_string(partial: 'assets/asset.html.erb',
locals: {
asset: @asset,
gallery_view_id: gallery_view_id
}) }
end
def file_url
return render_404 unless @asset.file.attached?
render plain: @asset.file.blob.service_url
end
def download
redirect_to rails_blob_path(@asset.file, disposition: 'attachment')
end
def edit
action = @asset.file_size.zero? && !@asset.locked? ? 'editnew' : 'edit'
@action_url = append_wd_params(@asset.get_action_url(current_user, action, false))
2016-09-29 18:19:29 +08:00
@favicon_url = @asset.favicon_url('edit')
tkn = current_user.get_wopi_token
@token = tkn.token
@ttl = (tkn.ttl * 1000).to_s
2020-10-22 19:41:17 +08:00
@asset.step&.protocol&.update(updated_at: Time.zone.now)
2016-09-29 21:30:55 +08:00
create_wopi_file_activity(current_user, true)
2016-10-04 02:02:13 +08:00
render layout: false
end
def view
@action_url = append_wd_params(@asset.get_action_url(current_user, 'view', false))
2016-09-29 18:19:29 +08:00
@favicon_url = @asset.favicon_url('view')
tkn = current_user.get_wopi_token
@token = tkn.token
@ttl = (tkn.ttl * 1000).to_s
2016-10-04 02:02:13 +08:00
render layout: false
end
def pdf_preview
return render plain: '', status: :not_acceptable unless previewable_document?(@asset.blob)
return render plain: '', status: :accepted unless @asset.pdf_preview_ready?
redirect_to @asset.file_pdf_preview.service_url
end
2019-06-19 21:19:47 +08:00
def create_start_edit_image_activity
create_edit_image_activity(@asset, current_user, :start_editing)
end
2018-10-19 16:00:58 +08:00
def update_image
@asset = Asset.find(params[:id])
orig_file_size = @asset.file_size
orig_file_name = @asset.file_name
2018-10-19 16:00:58 +08:00
return render_403 unless can_read_team?(@asset.team)
@asset.file.attach(io: params.require(:image), filename: orig_file_name)
2018-10-19 16:00:58 +08:00
@asset.save!
2019-06-19 21:19:47 +08:00
create_edit_image_activity(@asset, current_user, :finish_editing)
# release previous image space
@asset.team.release_space(orig_file_size)
2018-10-19 16:00:58 +08:00
# Post process file here
@asset.post_process_file(@asset.team)
2020-10-22 19:41:17 +08:00
@asset.step&.protocol&.update(updated_at: Time.zone.now)
render_html = if [Result, Step].include?(@assoc.class)
gallery_view_id = if @assoc.is_a?(Step)
@assoc.id
elsif @assoc.is_a?(Result)
@assoc.my_module.id
end
2019-09-26 22:49:56 +08:00
render_to_string(
2020-09-25 21:06:09 +08:00
partial: 'assets/asset.html.erb',
locals: {
asset: @asset,
gallery_view_id: gallery_view_id
},
2019-09-26 22:49:56 +08:00
formats: :html
)
else
render_to_string(
2020-10-22 19:41:17 +08:00
partial: 'assets/asset_link.html.erb',
locals: { asset: @asset, display_image_tag: true },
formats: :html
)
end
respond_to do |format|
format.json do
render json: { html: render_html }
end
end
2018-10-19 16:00:58 +08:00
end
2019-03-18 02:23:17 +08:00
# POST: create_wopi_file_path
2019-03-16 03:59:15 +08:00
def create_wopi_file
2019-03-18 02:23:17 +08:00
# Presence validation
2019-03-21 15:47:52 +08:00
params.require(%i(element_type element_id file_type))
2019-03-19 17:19:27 +08:00
2019-03-18 02:23:17 +08:00
# File type validation
2019-03-19 17:19:27 +08:00
render_403 && return unless %w(docx xlsx pptx).include?(params[:file_type])
2019-03-18 02:23:17 +08:00
# Asset validation
2019-10-04 20:24:19 +08:00
asset = Asset.new(created_by: current_user, team: current_team)
asset.file.attach(io: StringIO.new,
filename: "#{params[:file_name]}.#{params[:file_type]}",
content_type: wopi_content_type(params[:file_type]))
2019-03-18 02:23:17 +08:00
2019-03-21 15:47:52 +08:00
unless asset.valid?(:wopi_file_creation)
render json: {
message: asset.errors
2020-09-25 21:06:09 +08:00
}, status: :bad_request and return
2019-03-19 17:19:27 +08:00
end
2019-03-18 02:23:17 +08:00
2019-03-19 17:19:27 +08:00
# Create file depending on the type
2019-03-18 02:23:17 +08:00
if params[:element_type] == 'Step'
step = Step.find(params[:element_id].to_i)
render_403 && return unless can_manage_protocol_in_module?(step.protocol) ||
2019-03-19 17:19:27 +08:00
can_manage_protocol_in_repository?(step.protocol)
2019-03-18 02:23:17 +08:00
step_asset = StepAsset.create!(step: step, asset: asset)
asset.update!(view_mode: step.assets_view_mode)
2020-10-22 19:41:17 +08:00
step.protocol&.update(updated_at: Time.zone.now)
2019-03-18 02:23:17 +08:00
edit_url = edit_asset_url(step_asset.asset_id)
elsif params[:element_type] == 'Result'
my_module = MyModule.find(params[:element_id].to_i)
render_403 and return unless can_manage_module?(my_module)
2019-03-19 17:19:27 +08:00
# First create result and then the asset
result = Result.create(name: asset.file_name,
2019-03-18 02:23:17 +08:00
my_module: my_module,
user: current_user)
result_asset = ResultAsset.create!(result: result, asset: asset)
edit_url = edit_asset_url(result_asset.asset_id)
else
2019-03-21 15:47:52 +08:00
render_404 and return
end
2019-03-18 02:23:17 +08:00
# Prepare file preview in advance
asset.medium_preview.processed && asset.large_preview.processed
2019-03-19 17:19:27 +08:00
# Return edit url
2019-03-21 15:47:52 +08:00
render json: {
success: true,
edit_url: edit_url
}, status: :ok
2018-10-19 16:00:58 +08:00
end
2020-11-04 20:08:40 +08:00
def destroy
if @asset.destroy
render json: { flash: I18n.t('assets.file_deleted', file_name: @asset.file_name) }
2020-11-04 20:08:40 +08:00
else
render json: {}, status: :unprocessable_entity
end
end
2016-02-12 23:52:43 +08:00
private
def load_vars
2020-09-25 21:06:09 +08:00
@asset = Asset.find_by(id: params[:id])
return render_404 unless @asset
2016-02-12 23:52:43 +08:00
@assoc ||= @asset.step
@assoc ||= @asset.result
@assoc ||= @asset.repository_cell
2016-02-12 23:52:43 +08:00
2016-07-21 19:11:15 +08:00
if @assoc.class == Step
@protocol = @asset.step.protocol
2018-03-10 00:04:54 +08:00
elsif @assoc.class == Result
2016-07-21 19:11:15 +08:00
@my_module = @assoc.my_module
elsif @assoc.class == RepositoryCell
@repository = @assoc.repository_column.repository
2016-07-21 19:11:15 +08:00
end
2016-02-12 23:52:43 +08:00
end
def check_read_permission
render_403 and return unless can_read_asset?(@asset)
2016-02-12 23:52:43 +08:00
end
def check_edit_permission
render_403 and return unless can_manage_asset?(@asset)
2020-10-22 19:41:17 +08:00
end
2016-10-05 00:00:08 +08:00
def append_wd_params(url)
exclude_params = %w(wdPreviousSession wdPreviousCorrelation)
wd_params = params.as_json.select { |key, _value| key[/^wd.*/] && !(exclude_params.include? key) }.to_query
url + '&' + wd_params
2016-10-05 00:00:08 +08:00
end
def asset_params
params.permit(:file)
end
2017-03-13 20:20:49 +08:00
def toggle_view_mode_params
params.require(:asset).permit(:view_mode)
end
2017-03-13 20:20:49 +08:00
def asset_data_type(asset)
return 'wopi' if wopi_file?(asset)
2019-06-28 14:17:09 +08:00
return 'image' if asset.image?
2017-03-13 20:20:49 +08:00
'file'
end
2016-07-21 19:11:15 +08:00
end