1 # frozen_string_literal: true
 
   3 class DiaryCommentsController < ApplicationController
 
   6   before_action :authorize_web
 
   7   before_action :set_locale
 
   8   before_action :check_database_readable
 
  12   before_action :check_database_writable
 
  14   allow_thirdparty_images :only => :create
 
  17     @diary_entry = DiaryEntry.find(params[:id])
 
  18     @comments = @diary_entry.visible_comments
 
  19     @diary_comment = @diary_entry.comments.build(comment_params)
 
  20     @diary_comment.user = current_user
 
  21     if @diary_comment.save
 
  23       # Notify current subscribers of the new comment
 
  24       @diary_entry.subscribers.visible.each do |user|
 
  25         UserMailer.diary_comment_notification(@diary_comment, user).deliver_later if current_user != user
 
  28       # Add the commenter to the subscribers if necessary
 
  29       @diary_entry.subscriptions.create(:user => current_user) unless @diary_entry.subscribers.exists?(current_user.id)
 
  31       redirect_to diary_entry_path(@diary_entry.user, @diary_entry, :anchor => "comment#{@diary_comment.id}")
 
  33       render :action => "new"
 
  35   rescue ActiveRecord::RecordNotFound
 
  36     render "diary_entries/no_such_entry", :status => :not_found
 
  40     comment = DiaryComment.find(params[:comment])
 
  41     comment.update(:visible => false)
 
  42     redirect_to diary_entry_path(comment.diary_entry.user, comment.diary_entry)
 
  46     comment = DiaryComment.find(params[:comment])
 
  47     comment.update(:visible => true)
 
  48     redirect_to diary_entry_path(comment.diary_entry.user, comment.diary_entry)
 
  54   # return permitted diary comment parameters
 
  56     params.expect(:diary_comment => [:body])