debian-mirror-gitlab/app/controllers/projects/notes_controller.rb

170 lines
3.9 KiB
Ruby
Raw Normal View History

2014-09-02 18:07:02 +05:30
class Projects::NotesController < Projects::ApplicationController
# Authorize
2015-09-11 14:41:01 +05:30
before_action :authorize_read_note!
before_action :authorize_create_note!, only: [:create]
before_action :authorize_admin_note!, only: [:update, :destroy]
2015-11-26 14:37:03 +05:30
before_action :find_current_user_notes, except: [:destroy, :delete_attachment, :award_toggle]
2014-09-02 18:07:02 +05:30
def index
current_fetched_at = Time.now.to_i
notes_json = { notes: [], last_fetched_at: current_fetched_at }
@notes.each do |note|
2016-04-02 18:10:28 +05:30
next if note.cross_reference_not_visible_for?(current_user)
notes_json[:notes] << note_json(note)
2014-09-02 18:07:02 +05:30
end
render json: notes_json
end
def create
@note = Notes::CreateService.new(project, current_user, note_params).execute
respond_to do |format|
2016-04-02 18:10:28 +05:30
format.json { render json: note_json(@note) }
2015-10-24 18:46:33 +05:30
format.html { redirect_back_or_default }
2014-09-02 18:07:02 +05:30
end
end
def update
2015-09-11 14:41:01 +05:30
@note = Notes::UpdateService.new(project, current_user, note_params).execute(note)
2014-09-02 18:07:02 +05:30
respond_to do |format|
2016-04-02 18:10:28 +05:30
format.json { render json: note_json(@note) }
2015-10-24 18:46:33 +05:30
format.html { redirect_back_or_default }
2014-09-02 18:07:02 +05:30
end
end
def destroy
2015-04-26 12:48:37 +05:30
if note.editable?
note.destroy
note.reset_events_cache
end
2014-09-02 18:07:02 +05:30
respond_to do |format|
format.js { render nothing: true }
end
end
def delete_attachment
note.remove_attachment!
note.update_attribute(:attachment, nil)
respond_to do |format|
format.js { render nothing: true }
end
end
2015-11-26 14:37:03 +05:30
def award_toggle
noteable = if note_params[:noteable_type] == "issue"
project.issues.find(note_params[:noteable_id])
else
project.merge_requests.find(note_params[:noteable_id])
end
data = {
author: current_user,
is_award: true,
2015-12-23 02:04:40 +05:30
note: note_params[:note].delete(":")
2015-11-26 14:37:03 +05:30
}
note = noteable.notes.find_by(data)
if note
note.destroy
else
Notes::CreateService.new(project, current_user, note_params).execute
end
render json: { ok: true }
end
2014-09-02 18:07:02 +05:30
private
def note
@note ||= @project.notes.find(params[:id])
end
def note_to_html(note)
render_to_string(
"projects/notes/_note",
layout: false,
formats: [:html],
locals: { note: note }
)
end
def note_to_discussion_html(note)
2016-04-02 18:10:28 +05:30
return unless note.for_diff_line?
2015-09-11 14:41:01 +05:30
if params[:view] == 'parallel'
template = "projects/notes/_diff_notes_with_reply_parallel"
locals =
if params[:line_type] == 'old'
{ notes_left: [note], notes_right: [] }
else
{ notes_left: [], notes_right: [note] }
2016-04-02 18:10:28 +05:30
end
2015-09-11 14:41:01 +05:30
else
template = "projects/notes/_diff_notes_with_reply"
locals = { notes: [note] }
end
2014-09-02 18:07:02 +05:30
render_to_string(
2015-09-11 14:41:01 +05:30
template,
2014-09-02 18:07:02 +05:30
layout: false,
formats: [:html],
2015-09-11 14:41:01 +05:30
locals: locals
2014-09-02 18:07:02 +05:30
)
end
def note_to_discussion_with_diff_html(note)
return unless note.for_diff_line?
render_to_string(
"projects/notes/_discussion",
layout: false,
formats: [:html],
locals: { discussion_notes: [note] }
)
end
2016-04-02 18:10:28 +05:30
def note_json(note)
2015-12-23 02:04:40 +05:30
if note.valid?
2016-04-02 18:10:28 +05:30
{
2015-12-23 02:04:40 +05:30
valid: true,
id: note.id,
discussion_id: note.discussion_id,
html: note_to_html(note),
award: note.is_award,
note: note.note,
discussion_html: note_to_discussion_html(note),
discussion_with_diff_html: note_to_discussion_with_diff_html(note)
}
else
2016-04-02 18:10:28 +05:30
{
2015-12-23 02:04:40 +05:30
valid: false,
award: note.is_award,
errors: note.errors
}
end
2014-09-02 18:07:02 +05:30
end
def authorize_admin_note!
return access_denied! unless can?(current_user, :admin_note, note)
end
def note_params
params.require(:note).permit(
:note, :noteable, :noteable_id, :noteable_type, :project_id,
:attachment, :line_code, :commit_id
)
end
2015-04-26 12:48:37 +05:30
def find_current_user_notes
@notes = NotesFinder.new.execute(project, current_user, params)
end
2014-09-02 18:07:02 +05:30
end