228 lines
6.9 KiB
Ruby
228 lines
6.9 KiB
Ruby
class TracesController < ApplicationController
|
|
include UserMethods
|
|
include PaginationMethods
|
|
|
|
layout "site"
|
|
|
|
before_action :authorize_web
|
|
before_action :set_locale
|
|
before_action :check_database_readable
|
|
|
|
authorize_resource
|
|
|
|
before_action :check_database_writable, :only => [:new, :create, :edit, :destroy]
|
|
before_action :offline_warning, :only => [:mine, :show]
|
|
before_action :offline_redirect, :only => [:new, :create, :edit, :destroy]
|
|
|
|
# Counts and selects pages of GPX traces for various criteria (by user, tags, public etc.).
|
|
# target_user - if set, specifies the user to fetch traces for. if not set will fetch all traces
|
|
def index
|
|
# from display name, pick up user id if one user's traces only
|
|
display_name = params[:display_name]
|
|
if display_name.present?
|
|
target_user = User.active.find_by(:display_name => display_name)
|
|
if target_user.nil?
|
|
render_unknown_user display_name
|
|
return
|
|
end
|
|
end
|
|
|
|
# set title
|
|
@title = if target_user.nil?
|
|
t ".public_traces"
|
|
elsif current_user && current_user == target_user
|
|
t ".my_gps_traces"
|
|
else
|
|
t ".public_traces_from", :user => target_user.display_name
|
|
end
|
|
|
|
@title += t ".tagged_with", :tags => params[:tag] if params[:tag]
|
|
|
|
# four main cases:
|
|
# 1 - all traces, logged in = all public traces + all user's (i.e + all mine)
|
|
# 2 - all traces, not logged in = all public traces
|
|
# 3 - user's traces, logged in as same user = all user's traces
|
|
# 4 - user's traces, not logged in as that user = all user's public traces
|
|
traces = if target_user.nil? # all traces
|
|
if current_user
|
|
Trace.visible_to(current_user) # 1
|
|
else
|
|
Trace.visible_to_all # 2
|
|
end
|
|
elsif current_user && current_user == target_user
|
|
current_user.traces # 3 (check vs user id, so no join + can't pick up non-public traces by changing name)
|
|
else
|
|
target_user.traces.visible_to_all # 4
|
|
end
|
|
|
|
traces = traces.tagged(params[:tag]) if params[:tag]
|
|
|
|
traces = traces.visible
|
|
|
|
@params = params.permit(:display_name, :tag, :before, :after)
|
|
|
|
@traces, @newer_traces_id, @older_traces_id = get_page_items(traces, :includes => [:user, :tags])
|
|
|
|
# final helper vars for view
|
|
@target_user = target_user
|
|
|
|
render :partial => "page" if turbo_frame_request_id == "pagination"
|
|
end
|
|
|
|
def show
|
|
@trace = Trace.visible.find(params[:id])
|
|
|
|
if @trace.public? || @trace.user == current_user
|
|
@title = t ".title", :name => @trace.name
|
|
else
|
|
flash[:error] = t ".trace_not_found"
|
|
redirect_to :action => "index"
|
|
end
|
|
rescue ActiveRecord::RecordNotFound
|
|
flash[:error] = t ".trace_not_found"
|
|
redirect_to :action => "index"
|
|
end
|
|
|
|
def new
|
|
@title = t ".upload_trace"
|
|
@trace = Trace.new(:visibility => default_visibility)
|
|
end
|
|
|
|
def edit
|
|
@trace = Trace.visible.find(params[:id])
|
|
|
|
if current_user.nil? || @trace.user != current_user
|
|
head :forbidden
|
|
else
|
|
@title = t ".title", :name => @trace.name
|
|
end
|
|
rescue ActiveRecord::RecordNotFound
|
|
head :not_found
|
|
end
|
|
|
|
def create
|
|
@title = t ".upload_trace"
|
|
|
|
logger.info(params[:trace][:gpx_file].class.name)
|
|
|
|
if params[:trace][:gpx_file].respond_to?(:read)
|
|
@trace = do_create(params[:trace][:gpx_file], params[:trace][:tagstring],
|
|
params[:trace][:description], params[:trace][:visibility])
|
|
|
|
if @trace.id
|
|
flash[:notice] = t ".trace_uploaded"
|
|
flash[:warning] = t ".traces_waiting", :count => current_user.traces.where(:inserted => false).count if current_user.traces.where(:inserted => false).count > 4
|
|
|
|
@trace.schedule_import
|
|
redirect_to :action => :index, :display_name => current_user.display_name
|
|
else
|
|
flash.now[:error] = t(".upload_failed") if @trace.valid?
|
|
|
|
render :action => "new"
|
|
end
|
|
else
|
|
@trace = Trace.new(:name => "Dummy",
|
|
:tagstring => params[:trace][:tagstring],
|
|
:description => params[:trace][:description],
|
|
:visibility => params[:trace][:visibility],
|
|
:inserted => false, :user => current_user,
|
|
:timestamp => Time.now.utc)
|
|
@trace.valid?
|
|
@trace.errors.add(:gpx_file, "can't be blank")
|
|
|
|
render :action => "new"
|
|
end
|
|
end
|
|
|
|
def update
|
|
@trace = Trace.visible.find(params[:id])
|
|
|
|
if current_user.nil? || @trace.user != current_user
|
|
head :forbidden
|
|
elsif @trace.update(trace_params)
|
|
flash[:notice] = t ".updated"
|
|
redirect_to :action => "show", :display_name => current_user.display_name
|
|
else
|
|
@title = t "traces.edit.title", :name => @trace.name
|
|
render :action => "edit"
|
|
end
|
|
rescue ActiveRecord::RecordNotFound
|
|
head :not_found
|
|
end
|
|
|
|
def destroy
|
|
trace = Trace.visible.find(params[:id])
|
|
|
|
if current_user.nil? || (trace.user != current_user && !current_user.administrator? && !current_user.moderator?)
|
|
head :forbidden
|
|
else
|
|
trace.visible = false
|
|
trace.save
|
|
flash[:notice] = t ".scheduled_for_deletion"
|
|
trace.schedule_destruction
|
|
redirect_to :action => :index, :display_name => trace.user.display_name
|
|
end
|
|
rescue ActiveRecord::RecordNotFound
|
|
head :not_found
|
|
end
|
|
|
|
def mine
|
|
redirect_to :action => :index, :display_name => current_user.display_name
|
|
end
|
|
|
|
private
|
|
|
|
def do_create(file, tags, description, visibility)
|
|
# Sanitise the user's filename
|
|
name = file.original_filename.gsub(/[^a-zA-Z0-9.]/, "_")
|
|
|
|
# Create the trace object
|
|
trace = Trace.new(
|
|
:name => name,
|
|
:tagstring => tags,
|
|
:description => description,
|
|
:visibility => visibility,
|
|
:inserted => false,
|
|
:user => current_user,
|
|
:timestamp => Time.now.utc,
|
|
:file => file
|
|
)
|
|
|
|
# Save the trace object
|
|
if trace.save
|
|
# Finally save the user's preferred privacy level
|
|
if pref = current_user.preferences.find_by(:k => "gps.trace.visibility")
|
|
pref.v = visibility
|
|
pref.save
|
|
else
|
|
current_user.preferences.create(:k => "gps.trace.visibility", :v => visibility)
|
|
end
|
|
end
|
|
|
|
trace
|
|
end
|
|
|
|
def offline_warning
|
|
flash.now[:warning] = t "traces.offline_warning.message" if Settings.status == "gpx_offline"
|
|
end
|
|
|
|
def offline_redirect
|
|
render :action => :offline if Settings.status == "gpx_offline"
|
|
end
|
|
|
|
def default_visibility
|
|
visibility = current_user.preferences.find_by(:k => "gps.trace.visibility")
|
|
|
|
if visibility
|
|
visibility.v
|
|
elsif current_user.preferences.find_by(:k => "gps.trace.public", :v => "default").nil?
|
|
"private"
|
|
else
|
|
"public"
|
|
end
|
|
end
|
|
|
|
def trace_params
|
|
params.require(:trace).permit(:description, :tagstring, :visibility)
|
|
end
|
|
end
|