93 lines
2.7 KiB
Ruby
93 lines
2.7 KiB
Ruby
module Projects
|
|
module Boards
|
|
class IssuesController < Boards::ApplicationController
|
|
before_action :authorize_read_issue!, only: [:index]
|
|
before_action :authorize_create_issue!, only: [:create]
|
|
before_action :authorize_update_issue!, only: [:update]
|
|
|
|
def index
|
|
issues = ::Boards::Issues::ListService.new(project, current_user, filter_params).execute
|
|
issues = issues.page(params[:page]).per(params[:per] || 20)
|
|
make_sure_position_is_set(issues)
|
|
|
|
render json: {
|
|
issues: serialize_as_json(issues),
|
|
size: issues.total_count
|
|
}
|
|
end
|
|
|
|
def create
|
|
service = ::Boards::Issues::CreateService.new(project, current_user, issue_params)
|
|
issue = service.execute
|
|
|
|
if issue.valid?
|
|
render json: serialize_as_json(issue)
|
|
else
|
|
render json: issue.errors, status: :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
def update
|
|
service = ::Boards::Issues::MoveService.new(project, current_user, move_params)
|
|
|
|
if service.execute(issue)
|
|
head :ok
|
|
else
|
|
head :unprocessable_entity
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def make_sure_position_is_set(issues)
|
|
issues.each do |issue|
|
|
issue.move_to_end && issue.save unless issue.relative_position
|
|
end
|
|
end
|
|
|
|
def issue
|
|
@issue ||=
|
|
IssuesFinder.new(current_user, project_id: project.id)
|
|
.execute
|
|
.where(iid: params[:id])
|
|
.first!
|
|
end
|
|
|
|
def authorize_read_issue!
|
|
return render_403 unless can?(current_user, :read_issue, project)
|
|
end
|
|
|
|
def authorize_create_issue!
|
|
return render_403 unless can?(current_user, :admin_issue, project)
|
|
end
|
|
|
|
def authorize_update_issue!
|
|
return render_403 unless can?(current_user, :update_issue, issue)
|
|
end
|
|
|
|
def filter_params
|
|
params.merge(board_id: params[:board_id], id: params[:list_id]).compact
|
|
end
|
|
|
|
def move_params
|
|
params.permit(:board_id, :id, :from_list_id, :to_list_id, :move_before_iid, :move_after_iid)
|
|
end
|
|
|
|
def issue_params
|
|
params.require(:issue).permit(:title).merge(board_id: params[:board_id], list_id: params[:list_id], request: request)
|
|
end
|
|
|
|
def serialize_as_json(resource)
|
|
resource.as_json(
|
|
labels: true,
|
|
only: [:id, :iid, :title, :confidential, :due_date, :relative_position],
|
|
include: {
|
|
assignees: { only: [:id, :name, :username], methods: [:avatar_url] },
|
|
milestone: { only: [:id, :title] }
|
|
},
|
|
user: current_user
|
|
)
|
|
end
|
|
end
|
|
end
|
|
end
|