Guard against non-numeric lat and lons in nodes and notes

[rails.git] / app / controllers / user_preference_controller.rb

diff --git a/app/controllers/user_preference_controller.rb b/app/controllers/user_preference_controller.rb
index 53db769efcd8aec57e904ea3ad635633c4e26a2f..df5f279b8de2699114e8c8b93d2a19a1f92fec2f 100644 (file)
--- a/app/controllers/user_preference_controller.rb
+++ b/app/controllers/user_preference_controller.rb
@@ -1,2 +1,92 @@
+# Update and read user preferences, which are arbitrayr key/val pairs
 class UserPreferenceController < ApplicationController
+  skip_before_filter :verify_authenticity_token
+  before_filter :authorize
+  before_filter :require_allow_read_prefs, :only => [:read_one, :read]
+  before_filter :require_allow_write_prefs, :except => [:read_one, :read]
+  around_filter :api_call_handle_error
+
+  ##
+  # return all the preferences as an XML document
+  def read
+    doc = OSM::API.new.get_xml_doc
+
+    prefs = @user.preferences
+
+    el1 = XML::Node.new 'preferences'
+
+    prefs.each do |pref|
+      el1 <<  pref.to_xml_node
+    end
+
+    doc.root << el1
+    render :text => doc.to_s, :content_type => "text/xml"
+  end
+
+  ##
+  # return the value for a single preference
+  def read_one
+    pref = UserPreference.find(@user.id, params[:preference_key])
+
+    render :text => pref.v.to_s, :content_type => "text/plain"
+  end
+
+  # update the entire set of preferences
+  def update
+    old_preferences = @user.preferences.reduce({}) do |preferences,preference|
+      preferences[preference.k] = preference
+      preferences
+    end
+
+    new_preferences = {}
+
+    doc = XML::Parser.string(request.raw_post).parse
+
+    doc.find('//preferences/preference').each do |pt|
+      if preference = old_preferences.delete(pt["k"])
+        preference.v = pt["v"]
+      elsif new_preferences.include?(pt["k"])
+        raise OSM::APIDuplicatePreferenceError.new(pt["k"])
+      else
+        preference = @user.preferences.build(:k => pt["k"], :v => pt["v"])
+      end
+
+      new_preferences[preference.k] = preference
+    end
+
+    old_preferences.each_value do |preference|
+      preference.delete
+    end
+
+    new_preferences.each_value do |preference|
+      preference.save!
+    end
+
+    render :nothing => true, :content_type => "text/plain"
+  end
+
+  ##
+  # update the value of a single preference
+  def update_one
+    begin
+      pref = UserPreference.find(@user.id, params[:preference_key])
+    rescue ActiveRecord::RecordNotFound 
+      pref = UserPreference.new
+      pref.user = @user
+      pref.k = params[:preference_key]
+    end
+
+    pref.v = request.raw_post.chomp
+    pref.save!
+
+    render :nothing => true, :content_type => "text/plain"
+  end
+
+  ##
+  # delete a single preference
+  def delete_one
+    UserPreference.find(@user.id, params[:preference_key]).delete
+
+    render :nothing => true, :content_type => "text/plain"
+  end
 end