app/controllers/diary_entries_controller.rb

   1 class DiaryEntriesController < ApplicationController
   2   include UserMethods
   3   include PaginationMethods
   4
   5   layout :site_layout, :except => :rss
   6
   7   before_action :authorize_web
   8   before_action :set_locale
   9   before_action :check_database_readable
  10
  11   authorize_resource
  12
  13   before_action :lookup_user, :only => :show
  14   before_action :check_database_writable, :only => [:new, :create, :edit, :update, :hide, :unhide, :subscribe, :unsubscribe]
  15
  16   allow_thirdparty_images :only => [:new, :create, :edit, :update, :index, :show]
  17
  18   def index
  19     if params[:display_name]
  20       lookup_user
  21       return unless @user
  22
  23       @title = t ".user_title", :user => @user.display_name
  24       entries = @user.diary_entries
  25     elsif params[:friends]
  26       require_user
  27       return unless current_user
  28
  29       @title = t ".title_followed"
  30       entries = DiaryEntry.where(:user => current_user.followings)
  31     elsif params[:nearby]
  32       require_user
  33       return unless current_user
  34
  35       @title = t ".title_nearby"
  36       entries = DiaryEntry.where(:user => current_user.nearby)
  37     else
  38       entries = DiaryEntry.joins(:user).where(:users => { :status => %w[active confirmed] })
  39
  40       if params[:language]
  41         @title = t ".in_language_title", :language => Language.find(params[:language]).english_name
  42         entries = entries.where(:language_code => params[:language])
  43       else
  44         candidate_codes = preferred_languages.flat_map(&:candidates).uniq.map(&:to_s)
  45         @languages = Language.where(:code => candidate_codes).in_order_of(:code, candidate_codes)
  46         @title = t ".title"
  47       end
  48     end
  49
  50     entries = entries.visible unless can? :unhide, DiaryEntry
  51
  52     @params = params.permit(:display_name, :friends, :nearby, :language)
  53
  54     @entries, @newer_entries_id, @older_entries_id = get_page_items(entries, :includes => [:user, :language])
  55   end
  56
  57   def show
  58     entries = @user.diary_entries
  59     entries = entries.visible unless can? :unhide, DiaryEntry
  60     @diary_entry = entries.find_by(:id => params[:id])
  61     if @diary_entry
  62       @title = t ".title", :user => params[:display_name], :title => @diary_entry.title
  63       @opengraph_properties = {
  64         "og:title" => @diary_entry.title,
  65         "og:image" => @diary_entry.body.image,
  66         "og:image:alt" => @diary_entry.body.image_alt,
  67         "og:description" => @diary_entry.body.description,
  68         "article:published_time" => @diary_entry.created_at.xmlschema
  69       }
  70       @comments = can?(:unhide, DiaryComment) ? @diary_entry.comments : @diary_entry.visible_comments
  71     else
  72       @title = t "diary_entries.no_such_entry.title", :id => params[:id]
  73       render :action => "no_such_entry", :status => :not_found
  74     end
  75   end
  76
  77   def new
  78     @title = t ".title"
  79     @diary_entry = DiaryEntry.new(entry_params.reverse_merge(:language_code => current_user.default_diary_language))
  80
  81     set_map_location
  82   end
  83
  84   def edit
  85     @title = t ".title"
  86     @diary_entry = DiaryEntry.find(params[:id])
  87
  88     redirect_to diary_entry_path(@diary_entry.user, @diary_entry) if current_user != @diary_entry.user
  89
  90     set_map_location
  91   rescue ActiveRecord::RecordNotFound
  92     render :action => "no_such_entry", :status => :not_found
  93   end
  94
  95   def create
  96     @title = t "diary_entries.new.title"
  97
  98     @diary_entry = DiaryEntry.new(entry_params)
  99     @diary_entry.user = current_user
 100
 101     if @diary_entry.save
 102       current_user.default_diary_language = @diary_entry.language_code
 103
 104       # Subscribe user to diary comments
 105       @diary_entry.subscriptions.create(:user => current_user)
 106
 107       redirect_to diary_entry_path(@diary_entry.user, @diary_entry)
 108     else
 109       render :action => "new"
 110     end
 111   end
 112
 113   def update
 114     @title = t "diary_entries.edit.title"
 115     @diary_entry = DiaryEntry.find(params[:id])
 116
 117     if cannot?(:update, @diary_entry) ||
 118        (params[:diary_entry] && @diary_entry.update(entry_params))
 119       redirect_to diary_entry_path(@diary_entry.user, @diary_entry)
 120     else
 121       set_map_location
 122       render :action => "edit"
 123     end
 124   rescue ActiveRecord::RecordNotFound
 125     render :action => "no_such_entry", :status => :not_found
 126   end
 127
 128   def subscribe
 129     @diary_entry = DiaryEntry.find(params[:id])
 130
 131     if request.post?
 132       @diary_entry.subscriptions.create(:user => current_user) unless @diary_entry.subscribers.exists?(current_user.id)
 133
 134       redirect_to diary_entry_path(@diary_entry.user, @diary_entry)
 135     end
 136   rescue ActiveRecord::RecordNotFound
 137     render :action => "no_such_entry", :status => :not_found
 138   end
 139
 140   def unsubscribe
 141     @diary_entry = DiaryEntry.find(params[:id])
 142
 143     if request.post?
 144       @diary_entry.subscriptions.where(:user => current_user).delete_all if @diary_entry.subscribers.exists?(current_user.id)
 145
 146       redirect_to diary_entry_path(@diary_entry.user, @diary_entry)
 147     end
 148   rescue ActiveRecord::RecordNotFound
 149     render :action => "no_such_entry", :status => :not_found
 150   end
 151
 152   def rss
 153     if params[:display_name]
 154       user = User.active.find_by(:display_name => params[:display_name])
 155
 156       if user
 157         @entries = user.diary_entries
 158         @title = t("diary_entries.feed.user.title", :user => user.display_name)
 159         @description = t("diary_entries.feed.user.description", :user => user.display_name)
 160         @link = url_for :action => "index", :display_name => user.display_name, :host => Settings.server_url, :protocol => Settings.server_protocol
 161       else
 162         head :not_found
 163         return
 164       end
 165     else
 166       @entries = DiaryEntry.joins(:user).where(:users => { :status => %w[active confirmed] })
 167
 168       # Items can't be flagged as deleted in the RSS format.
 169       # For the general feeds, allow a delay before publishing, to help spam fighting
 170       @entries = @entries.where("created_at < :time", :time => Settings.diary_feed_delay.hours.ago)
 171
 172       if params[:language]
 173         @entries = @entries.where(:language_code => params[:language])
 174         @title = t("diary_entries.feed.language.title", :language_name => Language.find(params[:language]).english_name)
 175         @description = t("diary_entries.feed.language.description", :language_name => Language.find(params[:language]).english_name)
 176         @link = url_for :action => "index", :language => params[:language], :host => Settings.server_url, :protocol => Settings.server_protocol
 177       else
 178         @title = t("diary_entries.feed.all.title")
 179         @description = t("diary_entries.feed.all.description")
 180         @link = url_for :action => "index", :host => Settings.server_url, :protocol => Settings.server_protocol
 181       end
 182     end
 183     @entries = @entries.visible.includes(:user).order("created_at DESC").limit(20)
 184   end
 185
 186   def hide
 187     entry = DiaryEntry.find(params[:id])
 188     entry.update(:visible => false)
 189     redirect_to :action => "index", :display_name => entry.user.display_name
 190   end
 191
 192   def unhide
 193     entry = DiaryEntry.find(params[:id])
 194     entry.update(:visible => true)
 195     redirect_to :action => "index", :display_name => entry.user.display_name
 196   end
 197
 198   private
 199
 200   ##
 201   # return permitted diary entry parameters
 202   def entry_params
 203     params.expect(:diary_entry => [:title, :body, :language_code, :latitude, :longitude])
 204   rescue ActionController::ParameterMissing
 205     ActionController::Parameters.new.permit(:title, :body, :language_code, :latitude, :longitude)
 206   end
 207
 208   ##
 209   # decide on a location for the diary entry map
 210   def set_map_location
 211     if @diary_entry.latitude && @diary_entry.longitude
 212       @lon = @diary_entry.longitude
 213       @lat = @diary_entry.latitude
 214       @zoom = 12
 215     elsif !current_user.home_location?
 216       @lon = params[:lon] || -0.1
 217       @lat = params[:lat] || 51.5
 218       @zoom = params[:zoom] || 4
 219     else
 220       @lon = current_user.home_lon
 221       @lat = current_user.home_lat
 222       @zoom = 12
 223     end
 224   end
 225 end