module Api
- class NotesController < ApplicationController
- layout "site", :only => [:mine]
-
- skip_before_action :verify_authenticity_token
+ class NotesController < ApiController
before_action :check_api_readable
before_action :setup_user_auth, :only => [:create, :comment, :show]
- before_action :authorize, :only => [:close, :reopen, :destroy]
- before_action :api_deny_access_handler
+ before_action :authorize, :only => [:close, :reopen, :destroy, :comment]
authorize_resource
@note.status = "hidden"
@note.save
- add_comment(@note, comment, "hidden", false)
+ add_comment(@note, comment, "hidden", :notify => false)
end
# Return a copy of the updated note
raise OSM::APIBadUserInput, "Date #{params[:to]} is in a wrong format"
end
- @notes = @notes.where(:created_at => from..to)
+ @notes = if params[:sort] == "updated_at"
+ @notes.where(:updated_at => from..to)
+ else
+ @notes.where(:created_at => from..to)
+ end
end
+ # Choose the sort order
+ @notes = if params[:sort] == "created_at"
+ if params[:order] == "oldest"
+ @notes.order("created_at ASC")
+ else
+ @notes.order("created_at DESC")
+ end
+ else
+ if params[:order] == "oldest"
+ @notes.order("updated_at ASC")
+ else
+ @notes.order("updated_at DESC")
+ end
+ end
+
# Find the notes we want to return
- @notes = @notes.order("updated_at DESC").limit(result_limit).preload(:comments)
+ @notes = @notes.distinct.limit(result_limit).preload(:comments)
# Render the result
respond_to do |format|
##
# Add a comment to a note
- def add_comment(note, text, event, notify = true)
+ def add_comment(note, text, event, notify: true)
attributes = { :visible => true, :event => event, :body => text }
if current_user
comment = note.comments.create!(attributes)
note.comments.map(&:author).uniq.each do |user|
- Notifier.note_comment_notification(comment, user).deliver_later if notify && user && user != current_user && user.visible?
+ UserMailer.note_comment_notification(comment, user).deliver_later if notify && user && user != current_user && user.visible?
end
end
end