scinote-web/app/controllers/canvas_controller.rb

230 lines
6.6 KiB
Ruby
Raw Normal View History

2016-02-12 23:52:43 +08:00
class CanvasController < ApplicationController
before_action :load_vars
before_action :check_view_canvas, except: %i(edit update)
before_action :check_edit_canvas, only: %i(edit update)
2016-02-12 23:52:43 +08:00
def edit
render partial: 'canvas/edit',
locals: {
experiment: @experiment,
my_modules: @my_modules
}, content_type: 'text/html'
2016-02-12 23:52:43 +08:00
end
def full_zoom
@my_modules = @my_modules.left_outer_joins(:designated_users, :task_comments)
.select('COUNT(DISTINCT users.id) as designated_users_count')
.select('COUNT(DISTINCT comments.id) as task_comments_count')
.select('my_modules.*').group(:id)
render partial: 'canvas/full_zoom', locals: { experiment: @experiment, my_modules: @my_modules }
2016-02-12 23:52:43 +08:00
end
def medium_zoom
render partial: 'canvas/medium_zoom', locals: { experiment: @experiment, my_modules: @my_modules }
2016-02-12 23:52:43 +08:00
end
def small_zoom
render partial: 'canvas/small_zoom', locals: { experiment: @experiment, my_modules: @my_modules }
2016-02-12 23:52:43 +08:00
end
def update
# Make sure that remove parameter is valid
to_archive = []
if update_params[:remove].present?
to_archive = update_params[:remove].split(',')
if to_archive.all? { |id| can_archive_my_module?(MyModule.find_by(id: id)) }
to_archive.collect!(&:to_i)
2016-02-12 23:52:43 +08:00
else
return render_403
2016-02-12 23:52:43 +08:00
end
end
# Make sure connections parameter is valid
connections = []
if update_params[:connections].present?
conns = update_params[:connections].split(',')
if conns.length.even? && conns.all? { |c| c.is_a? String }
2016-02-12 23:52:43 +08:00
conns.each_slice(2).each do |c|
connections << [c[0], c[1]]
end
else
return render_403
2016-02-12 23:52:43 +08:00
end
end
# Make sure positions parameter is valid
positions = {}
if update_params[:positions].present?
poss = update_params[:positions].split(';')
2020-07-21 19:49:59 +08:00
(poss.collect { |pos| pos.split(',') }).each_with_index do |pos, _|
unless pos.length == 3 && pos[0].is_a?(String) && float?(pos[1]) && float?(pos[2])
return render_403
2016-02-12 23:52:43 +08:00
end
x = pos[1].to_i
y = pos[2].to_i
2020-06-17 17:55:43 +08:00
2016-02-12 23:52:43 +08:00
positions[pos[0]] = { x: x, y: y }
end
end
# Make sure that to_add is an array of strings,
# as well as that positions for newly added modules exist
to_add = []
if update_params[:add].present? &&
update_params['add-names'].present?
ids = update_params[:add].split(',')
names = update_params['add-names'].split('|')
if ids.length == names.length &&
ids.all? { |id| id.is_a?(String) && positions.include?(id) } &&
names.all? { |name| name.is_a? String }
2016-02-12 23:52:43 +08:00
ids.each_with_index do |id, i|
to_add << { id: id, name: names[i],
x: positions[id][:x], y: positions[id][:y] }
2016-02-12 23:52:43 +08:00
end
else
return render_403
2016-02-12 23:52:43 +08:00
end
end
# Make sure rename parameter is valid
to_rename = {}
if update_params[:rename].present?
2016-02-12 23:52:43 +08:00
begin
to_rename = JSON.parse(update_params[:rename])
# Okay, JSON parsed!
unless to_rename.is_a?(Hash) &&
to_rename.keys.all? do |id|
id.is_a?(String) &&
can_manage_my_module?(MyModule.find_by(id: id))
end &&
to_rename.values.all? { |new_name| new_name.is_a? String }
return render_403
2016-02-12 23:52:43 +08:00
end
rescue
return render_403
2016-02-12 23:52:43 +08:00
end
end
# Make sure move parameter is valid
2016-08-23 17:08:10 +08:00
to_move = {}
if update_params[:move].present?
begin
to_move = JSON.parse(update_params[:move])
# Okay, JSON parsed!
unless to_move.is_a?(Hash) &&
to_move.keys.all? do |id|
2021-11-24 17:56:25 +08:00
!is_int?(id) || can_move_my_module?(MyModule.find_by(id: id))
end &&
to_move.values.all? do |exp_id|
2020-07-25 00:38:53 +08:00
can_manage_experiment?(Experiment.find_by(id: exp_id))
end
return render_403
end
rescue StandardError
return render_403
end
end
2016-08-22 23:26:21 +08:00
# Distinguish between moving modules/module_groups
2016-08-23 17:08:10 +08:00
to_move_groups = {}
2016-08-22 23:26:21 +08:00
to_move.each do |key, value|
2016-08-23 17:08:10 +08:00
if key =~ /.*,.*/
to_move_groups[key.split(',')] = value
2016-08-22 23:26:21 +08:00
to_move.delete(key)
end
end
2016-02-12 23:52:43 +08:00
# Make sure that to_clone is an array of pairs,
# as well as that all IDs exist
to_clone = {}
if update_params[:cloned].present?
clones = update_params[:cloned].split(';')
(clones.collect { |v| v.split(',') }).each do |val|
if val.length == 2 && is_int?(val[0]) && val[1].is_a?(String) &&
to_add.any? { |m| m[:id] == val[1] }
2016-02-12 23:52:43 +08:00
to_clone[val[1]] = val[0]
else
return render_403
2016-02-12 23:52:43 +08:00
end
end
end
# Call the "master" function to do all the updating for us
unless @experiment.update_canvas(
2016-02-12 23:52:43 +08:00
to_archive,
to_add,
to_rename,
to_move,
2016-08-22 23:26:21 +08:00
to_move_groups,
2016-02-12 23:52:43 +08:00
to_clone,
connections,
positions,
current_user
2016-02-12 23:52:43 +08:00
)
return render_403
2016-02-12 23:52:43 +08:00
end
# Save activities that modules were archived
2016-02-12 23:52:43 +08:00
to_archive.each do |module_id|
my_module = MyModule.find_by_id(module_id)
next if my_module.blank?
2016-02-12 23:52:43 +08:00
end
flash[:success] = t('experiments.canvas.update.success_flash')
redirect_to canvas_experiment_path(@experiment)
2016-02-12 23:52:43 +08:00
end
private
def update_params
params.permit(
:id,
:connections,
:positions,
:add,
"add-names",
:rename,
:move,
2016-02-12 23:52:43 +08:00
:cloned,
:remove,
"module-groups"
)
end
def load_vars
@experiment = Experiment.preload(user_assignments: %i(user user_role)).find_by(id: params[:id])
unless @experiment
2016-02-12 23:52:43 +08:00
respond_to do |format|
format.html { render_404 and return }
format.any(:xml, :json, :js) { render(json: { redirect_url: not_found_url }, status: :not_found) and return }
end
end
@my_modules = @experiment.my_modules
.active
.preload(:tags, outputs: :to, user_assignments: %i(user user_role))
.preload(:my_module_status, :my_module_group)
2016-02-12 23:52:43 +08:00
end
def check_edit_canvas
@experiment_managable = can_manage_experiment?(@experiment)
return render_403 unless @experiment_managable
2016-02-12 23:52:43 +08:00
end
def check_view_canvas
render_403 unless can_read_experiment?(@experiment)
2016-02-12 23:52:43 +08:00
end
# Check if given value is "integer" string (e.g. "15")
def is_int?(val)
/\A[-+]?\d+\z/ === val
end
def float?(val)
true if Float(val)
rescue ArgumentError
false
end
2016-02-12 23:52:43 +08:00
end