scinote-web/app/controllers/project_comments_controller.rb

67 lines
1.8 KiB
Ruby
Raw Normal View History

# frozen_string_literal: true
2016-02-12 23:52:43 +08:00
class ProjectCommentsController < ApplicationController
include ActionView::Helpers::TextHelper
2017-01-13 00:02:01 +08:00
include InputSanitizeHelper
include ApplicationHelper
include CommentHelper
2016-02-12 23:52:43 +08:00
before_action :load_vars
before_action :check_view_permissions, only: :index
before_action :check_create_permissions, only: :create
before_action :check_manage_permissions, only: %i(edit update destroy)
2016-02-12 23:52:43 +08:00
def index
comments = @project.last_comments(@last_comment_id, @per_page)
more_url = project_project_comments_url(@project, format: :json, from: comments.first.id) unless comments.empty?
comment_index_helper(comments, more_url, @last_comment_id.positive? ? nil : '/project_comments/index.html.erb')
2016-02-12 23:52:43 +08:00
end
def create
@comment = ProjectComment.new(
2016-02-12 23:52:43 +08:00
message: comment_params[:message],
user: current_user,
project: @project
)
comment_create_helper(@comment)
end
def update
old_text = @comment.message
@comment.message = comment_params[:message]
comment_update_helper(@comment, old_text)
end
def destroy
comment_destroy_helper(@comment)
end
2016-02-12 23:52:43 +08:00
private
def load_vars
@last_comment_id = params[:from].to_i
@per_page = Constants::COMMENTS_SEARCH_LIMIT
2016-02-12 23:52:43 +08:00
@project = Project.find_by_id(params[:project_id])
render_404 unless @project
2016-02-12 23:52:43 +08:00
end
def check_view_permissions
2018-01-25 19:00:30 +08:00
render_403 unless can_read_project?(@project)
2016-02-12 23:52:43 +08:00
end
def check_create_permissions
render_403 unless can_create_comments_in_project?(@project)
2016-02-12 23:52:43 +08:00
end
def check_manage_permissions
@comment = ProjectComment.find_by_id(params[:id])
2018-01-25 19:00:30 +08:00
render_403 unless @comment.present? &&
can_manage_comment_in_project?(@comment)
end
2016-02-12 23:52:43 +08:00
def comment_params
params.require(:comment).permit(:message)
end
end