Add support for ACL blocks on note commenting

This commit is contained in:
Tom Hughes 2014-06-03 20:59:25 +01:00
parent 1f5615f022
commit 098c2675ba
3 changed files with 21 additions and 0 deletions

View file

@ -53,6 +53,9 @@ class NotesController < ApplicationController
##
# Create a new note
def create
# Check the ACLs
raise OSM::APIAccessDenied if Acl.no_note_comment(request.remote_ip)
# Check the arguments are sane
raise OSM::APIBadUserInput.new("No lat was given") unless params[:lat]
raise OSM::APIBadUserInput.new("No lon was given") unless params[:lon]
@ -86,6 +89,9 @@ class NotesController < ApplicationController
##
# Add a comment to an existing note
def comment
# Check the ACLs
raise OSM::APIAccessDenied if Acl.no_note_comment(request.remote_ip)
# Check the arguments are sane
raise OSM::APIBadUserInput.new("No id was given") unless params[:id]
raise OSM::APIBadUserInput.new("No text was given") if params[:text].blank?