scinote-web/app/controllers/result_comments_controller.rb

69 lines
1.7 KiB
Ruby
Raw Normal View History

# frozen_string_literal: true
2016-02-12 23:52:43 +08:00
class ResultCommentsController < ApplicationController
include ActionView::Helpers::TextHelper
2017-01-13 00:02:01 +08:00
include InputSanitizeHelper
include ApplicationHelper
include CommentHelper
2016-02-12 23:52:43 +08:00
before_action :load_vars
2016-09-20 23:06:07 +08:00
before_action :check_view_permissions, only: [:index]
2016-11-19 23:54:55 +08:00
before_action :check_add_permissions, only: [:create]
before_action :check_manage_permissions, only: %i(update destroy)
2016-02-12 23:52:43 +08:00
def index
comments = @result.last_comments(@last_comment_id, @per_page)
2021-07-23 17:56:28 +08:00
more_url = result_result_comments_path(@result, format: :json, from: comments.first.id) unless comments.blank?
comment_index_helper(comments, more_url)
2016-02-12 23:52:43 +08:00
end
def create
@comment = ResultComment.new(
2016-02-12 23:52:43 +08:00
message: comment_params[:message],
user: current_user,
result: @result
)
comment_create_helper(@comment)
end
def update
old_text = @comment.message
@comment.message = comment_params[:message]
comment_update_helper(@comment, old_text)
end
def destroy
comment_destroy_helper(@comment)
end
2016-02-12 23:52:43 +08:00
private
def load_vars
@last_comment_id = params[:from].to_i
@per_page = Constants::COMMENTS_SEARCH_LIMIT
2016-02-12 23:52:43 +08:00
@result = Result.find_by_id(params[:result_id])
@my_module = @result.my_module
render_404 unless @result
2016-02-12 23:52:43 +08:00
end
def check_view_permissions
render_403 unless can_read_my_module?(@my_module)
2016-02-12 23:52:43 +08:00
end
def check_add_permissions
render_403 unless can_create_my_module_result_comments?(@my_module)
end
def check_manage_permissions
@comment = @result.result_comments.find_by(id: params[:id])
render_403 unless @comment.present? &&
can_manage_result_comment?(@comment)
end
2016-02-12 23:52:43 +08:00
def comment_params
params.require(:comment).permit(:message)
end
end