From: Tom Hughes Date: Thu, 27 Jul 2023 19:42:03 +0000 (+0100) Subject: Merge remote-tracking branch 'upstream/pull/4108' X-Git-Tag: live~1958 X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/e932972a4a3683bbebc99659f9fb8739beb4eba3?hp=0a66990911baf62807d6bd50b8d0885a227c6e09 Merge remote-tracking branch 'upstream/pull/4108' --- diff --git a/app/controllers/api/changesets_controller.rb b/app/controllers/api/changesets_controller.rb index 56070951a..a08edff53 100644 --- a/app/controllers/api/changesets_controller.rb +++ b/app/controllers/api/changesets_controller.rb @@ -19,6 +19,9 @@ module Api # Helper methods for checking consistency include ConsistencyValidations + DEFAULT_QUERY_LIMIT = 100 + MAX_QUERY_LIMIT = 100 + ## # Return XML giving the basic info about the changeset. Does not # return anything about the nodes, ways and relations in the changeset. @@ -171,7 +174,7 @@ module Api changesets = conditions_ids(changesets, params["changesets"]) # sort and limit the changesets - changesets = changesets.order("created_at DESC").limit(100) + changesets = changesets.order("created_at DESC").limit(result_limit) # preload users, tags and comments, and render result @changesets = changesets.preload(:user, :changeset_tags, :comments) @@ -383,5 +386,19 @@ module Api changesets.where(:id => ids) end end + + ## + # Get the maximum number of results to return + def result_limit + if params[:limit] + if params[:limit].to_i.positive? && params[:limit].to_i <= MAX_QUERY_LIMIT + params[:limit].to_i + else + raise OSM::APIBadUserInput, "Changeset limit must be between 1 and #{MAX_QUERY_LIMIT}" + end + else + DEFAULT_QUERY_LIMIT + end + end end end diff --git a/app/controllers/traces_controller.rb b/app/controllers/traces_controller.rb index 855bbb78a..0b7dbc94a 100644 --- a/app/controllers/traces_controller.rb +++ b/app/controllers/traces_controller.rb @@ -40,30 +40,38 @@ class TracesController < ApplicationController # 2 - all traces, not logged in = all public traces # 3 - user's traces, logged in as same user = all user's traces # 4 - user's traces, not logged in as that user = all user's public traces - @traces = if target_user.nil? # all traces - if current_user - Trace.visible_to(current_user) # 1 - else - Trace.visible_to_all # 2 - end - elsif current_user && current_user == target_user - current_user.traces # 3 (check vs user id, so no join + can't pick up non-public traces by changing name) - else - target_user.traces.visible_to_all # 4 - end + traces = if target_user.nil? # all traces + if current_user + Trace.visible_to(current_user) # 1 + else + Trace.visible_to_all # 2 + end + elsif current_user && current_user == target_user + current_user.traces # 3 (check vs user id, so no join + can't pick up non-public traces by changing name) + else + target_user.traces.visible_to_all # 4 + end - @traces = @traces.tagged(params[:tag]) if params[:tag] + traces = traces.tagged(params[:tag]) if params[:tag] - @params = params.permit(:display_name, :tag) + traces = traces.visible - @page = (params[:page] || 1).to_i - @page_size = 20 + @params = params.permit(:display_name, :tag, :before, :after) - @traces = @traces.visible - @traces = @traces.order(:id => :desc) - @traces = @traces.offset((@page - 1) * @page_size) - @traces = @traces.limit(@page_size) + @traces = if params[:before] + traces.where("gpx_files.id < ?", params[:before]).order(:id => :desc) + elsif params[:after] + traces.where("gpx_files.id > ?", params[:after]).order(:id => :asc) + else + traces.order(:id => :desc) + end + + @traces = @traces.limit(20) @traces = @traces.includes(:user, :tags) + @traces = @traces.sort.reverse + + @newer_traces = @traces.count.positive? && traces.exists?(["gpx_files.id > ?", @traces.first.id]) + @older_traces = @traces.count.positive? && traces.exists?(["gpx_files.id < ?", @traces.last.id]) # final helper vars for view @target_user = target_user diff --git a/app/views/traces/_trace_paging_nav.html.erb b/app/views/traces/_trace_paging_nav.html.erb index 25e35d226..29e0d37f6 100644 --- a/app/views/traces/_trace_paging_nav.html.erb +++ b/app/views/traces/_trace_paging_nav.html.erb @@ -1,8 +1,8 @@