metamaps--metamaps/app/controllers/maps_controller.rb

224 lines
7.8 KiB
Ruby
Raw Normal View History

class MapsController < ApplicationController
before_filter :require_user, only: [:create, :update, :screenshot, :destroy]
2014-07-31 01:10:10 +00:00
2016-02-05 09:49:59 +00:00
respond_to :html, :json, :csv
2014-07-31 01:10:10 +00:00
autocomplete :map, :name, :full => true, :extra_data => [:user_id]
# GET /explore/active
# GET /explore/featured
# GET /explore/mapper/:id
2014-07-31 01:10:10 +00:00
def index
2016-02-09 03:20:04 +00:00
return redirect_to activemaps_url if request.path == "/explore"
2014-07-31 01:10:10 +00:00
@current = current_user
@maps = []
2016-02-09 03:26:42 +00:00
page = params[:page].present? ? params[:page] : 1
2014-07-31 01:10:10 +00:00
2014-08-10 17:06:58 +00:00
if request.path.index("/explore/active") != nil
@maps = Map.where("maps.permission != ?", "private").order("updated_at DESC").page(page).per(20)
2014-07-31 01:10:10 +00:00
@request = "active"
2014-08-10 17:06:58 +00:00
elsif request.path.index("/explore/featured") != nil
@maps = Map.where("maps.featured = ? AND maps.permission != ?", true, "private").order("updated_at DESC").page(page).per(20)
2014-07-31 01:10:10 +00:00
@request = "featured"
2014-08-10 17:06:58 +00:00
elsif request.path.index('/explore/mine') != nil # looking for maps by me
2016-02-09 03:20:04 +00:00
return redirect_to activemaps_url if !authenticated?
# don't need to exclude private maps because they all belong to you
@maps = Map.where("maps.user_id = ?", @current.id).order("updated_at DESC").page(page).per(20)
2014-08-10 17:06:58 +00:00
@request = "you"
elsif request.path.index('/explore/mapper/') != nil # looking for maps by a mapper
2014-07-31 01:10:10 +00:00
@user = User.find(params[:id])
@maps = Map.where("maps.user_id = ? AND maps.permission != ?", @user.id, "private").order("updated_at DESC").page(page).per(20)
@request = "mapper"
2014-07-31 01:10:10 +00:00
end
respond_to do |format|
format.html {
if @request == "active" && authenticated?
redirect_to root_url and return
end
respond_with(@maps, @request, @user)
}
2014-08-10 17:06:58 +00:00
format.json { render json: @maps }
2014-07-31 01:10:10 +00:00
end
2014-02-10 04:36:23 +00:00
end
2014-07-31 01:10:10 +00:00
# GET maps/:id
def show
@current = current_user
@map = Map.find(params[:id]).authorize_to_show(@current)
if not @map
2014-10-27 16:03:55 +00:00
redirect_to root_url, notice: "Access denied. That map is private." and return
2014-07-31 01:10:10 +00:00
end
2014-08-11 22:57:34 +00:00
respond_to do |format|
format.html {
@allmappers = @map.contributors
@alltopics = @map.topics.to_a.delete_if {|t| t.permission == "private" && (!authenticated? || (authenticated? && @current.id != t.user_id)) }
@allsynapses = @map.synapses.to_a.delete_if {|s| s.permission == "private" && (!authenticated? || (authenticated? && @current.id != s.user_id)) }
@allmappings = @map.mappings.to_a.delete_if {|m|
object = m.mappable
2014-11-11 12:23:44 +00:00
!object || (object.permission == "private" && (!authenticated? || (authenticated? && @current.id != object.user_id)))
2014-11-11 07:23:39 +00:00
}
2015-12-11 19:23:41 +00:00
@allmessages = @map.messages
2014-08-11 22:57:34 +00:00
2015-12-11 19:23:41 +00:00
respond_with(@allmappers, @allmappings, @allsynapses, @alltopics, @allmessages, @map)
2014-08-11 22:57:34 +00:00
}
format.json { render json: @map }
2016-02-05 09:49:59 +00:00
format.csv { send_data @map.to_csv }
format.xls
2014-08-11 22:57:34 +00:00
end
end
# GET maps/:id/contains
def contains
@current = current_user
@map = Map.find(params[:id]).authorize_to_show(@current)
if not @map
2014-10-27 16:03:55 +00:00
redirect_to root_url, notice: "Access denied. That map is private." and return
2014-08-11 22:57:34 +00:00
end
@allmappers = @map.contributors
@alltopics = @map.topics.to_a.delete_if {|t| t.permission == "private" && (!authenticated? || (authenticated? && @current.id != t.user_id)) }
@allsynapses = @map.synapses.to_a.delete_if {|s| s.permission == "private" && (!authenticated? || (authenticated? && @current.id != s.user_id)) }
@allmappings = @map.mappings.to_a.delete_if {|m|
object = m.mappable
2014-11-11 12:23:44 +00:00
!object || (object.permission == "private" && (!authenticated? || (authenticated? && @current.id != object.user_id)))
2014-11-11 07:23:39 +00:00
}
2014-08-10 17:06:58 +00:00
@json = Hash.new()
@json['map'] = @map
@json['topics'] = @alltopics
@json['synapses'] = @allsynapses
@json['mappings'] = @allmappings
@json['mappers'] = @allmappers
2015-12-11 19:23:41 +00:00
@json['messages'] = @map.messages
2014-07-31 01:10:10 +00:00
respond_to do |format|
2014-08-10 17:06:58 +00:00
format.json { render json: @json }
2014-07-31 01:10:10 +00:00
end
end
2014-07-31 01:10:10 +00:00
# POST maps
def create
@user = current_user
@map = Map.new()
@map.name = params[:name]
@map.desc = params[:desc]
@map.permission = params[:permission]
@map.user = @user
@map.arranged = false
if params[:topicsToMap]
@all = params[:topicsToMap]
@all = @all.split(',')
@all.each do |topic|
topic = topic.split('/')
2016-02-09 03:48:07 +00:00
mapping = Mapping.new()
mapping.user = @user
mapping.mappable = Topic.find(topic[0])
mapping.xloc = topic[1]
mapping.yloc = topic[2]
@map.topicmappings << mapping
mapping.save
2014-07-31 01:10:10 +00:00
end
if params[:synapsesToMap]
@synAll = params[:synapsesToMap]
@synAll = @synAll.split(',')
@synAll.each do |synapse_id|
2016-02-09 03:48:07 +00:00
mapping = Mapping.new()
mapping.user = @user
mapping.map = @map
mapping.mappable = Synapse.find(synapse_id)
@map.synapsemappings << mapping
mapping.save
2014-07-31 01:10:10 +00:00
end
end
@map.arranged = true
end
2016-02-09 03:48:07 +00:00
if @map.save
respond_to do |format|
2014-07-31 01:10:10 +00:00
format.json { render :json => @map }
2016-02-09 03:48:07 +00:00
end
else
respond_to do |format|
format.json { render :json => "invalid params" }
end
2014-07-31 01:10:10 +00:00
end
end
2014-07-31 01:10:10 +00:00
# PUT maps/:id
def update
@current = current_user
@map = Map.find(params[:id]).authorize_to_edit(@current)
respond_to do |format|
2014-09-11 12:35:16 +00:00
if !@map
format.json { render json: "unauthorized" }
elsif @map.update_attributes(map_params)
2014-09-11 12:35:16 +00:00
format.json { head :no_content }
else
format.json { render json: @map.errors, status: :unprocessable_entity }
end
2014-07-31 01:10:10 +00:00
end
end
2014-07-31 01:10:10 +00:00
# POST maps/:id/upload_screenshot
def screenshot
@current = current_user
@map = Map.find(params[:id]).authorize_to_edit(@current)
if @map
png = Base64.decode64(params[:encoded_image]['data:image/png;base64,'.length .. -1])
StringIO.open(png) do |data|
data.class.class_eval { attr_accessor :original_filename, :content_type }
data.original_filename = "map-" + @map.id.to_s + "-screenshot.png"
data.content_type = "image/png"
@map.screenshot = data
end
if @map.save
render :json => {:message => "Successfully uploaded the map screenshot."}
else
render :json => {:message => "Failed to upload image."}
end
else
render :json => {:message => "Unauthorized to set map screenshot."}
end
end
2014-07-31 01:10:10 +00:00
# DELETE maps/:id
def destroy
@current = current_user
@map = Map.find(params[:id]).authorize_to_delete(@current)
2014-07-31 01:10:10 +00:00
@map.delete if @map
2014-07-31 01:10:10 +00:00
respond_to do |format|
format.json {
if @map
render json: "success"
else
render json: "unauthorized"
end
}
2014-07-31 01:10:10 +00:00
end
end
2015-09-19 08:26:34 +00:00
private
# Never trust parameters from the scary internet, only allow the white list through.
def map_params
params.require(:map).permit(:id, :name, :arranged, :desc, :permission, :user_id)
end
end