Files
danbooru/app/controllers/favorite_groups_controller.rb
BrokenEagle 63b3503bfc Add ability to use nested only parameter
- The only string works much the same as before with its comma separation
-- Nested includes are indicated with square brackets "[ ]"
-- The nested include is the value immediately preceding the square brackets
-- The only string is the comma separated string inside those brackets
- Default includes are split between format types when necessary
-- This prevents unnecessary includes from being added on page load
- Available includes are those items which are allowed to be accessible to the user
-- Some aren't because they are sensitive, such as the creator of a flag
-- Some aren't because the number of associated items is too large
- The amount of times the same model can be included to prevent recursions
-- One exception is the root model may include the same model once
--- e.g. the user model can include the inviter which is also the user model
-- Another exception is if the include is a has_many association
--- e.g. artist urls can include the artist, and then artist urls again
2020-02-12 23:58:53 +00:00

84 lines
2.3 KiB
Ruby

class FavoriteGroupsController < ApplicationController
before_action :member_only, :except => [:index, :show]
respond_to :html, :xml, :json, :js
def index
params[:search][:creator_id] ||= params[:user_id]
@favorite_groups = FavoriteGroup.paginated_search(params).includes(model_includes(params))
respond_with(@favorite_groups)
end
def show
limit = params[:limit].presence || CurrentUser.user.per_page
@favorite_group = FavoriteGroup.find(params[:id])
check_read_privilege(@favorite_group)
@posts = @favorite_group.posts.paginate(params[:page], limit: limit, count: @favorite_group.post_count)
respond_with(@favorite_group)
end
def new
@favorite_group = FavoriteGroup.new
respond_with(@favorite_group)
end
def create
@favorite_group = CurrentUser.favorite_groups.create(favgroup_params)
respond_with(@favorite_group)
end
def edit
@favorite_group = FavoriteGroup.find(params[:id])
check_write_privilege(@favorite_group)
respond_with(@favorite_group)
end
def update
@favorite_group = FavoriteGroup.find(params[:id])
check_write_privilege(@favorite_group)
@favorite_group.update(favgroup_params)
unless @favorite_group.errors.any?
flash[:notice] = "Favorite group updated"
end
respond_with(@favorite_group)
end
def destroy
@favorite_group = FavoriteGroup.find(params[:id])
check_write_privilege(@favorite_group)
@favorite_group.destroy!
flash[:notice] = "Favorite group deleted" if request.format.html?
respond_with(@favorite_group, location: favorite_groups_path(search: { creator_name: CurrentUser.name }))
end
def add_post
@favorite_group = FavoriteGroup.find(params[:id])
check_write_privilege(@favorite_group)
@post = Post.find(params[:post_id])
@favorite_group.add!(@post)
end
private
def default_includes(params)
if ["json", "xml"].include?(params[:format])
[]
else
[:creator]
end
end
def check_write_privilege(favgroup)
raise User::PrivilegeError unless favgroup.editable_by?(CurrentUser.user)
end
def check_read_privilege(favgroup)
raise User::PrivilegeError unless favgroup.viewable_by?(CurrentUser.user)
end
def favgroup_params
params.fetch(:favorite_group, {}).permit(%i[name post_ids post_ids_string is_public], post_ids: [])
end
end