gitlabhq/app/controllers/notes_controller.rb

46 lines
951 B
Ruby
Raw Normal View History

2011-10-09 00:36:38 +03:00
class NotesController < ApplicationController
before_filter :project
2011-10-09 00:36:38 +03:00
# Authorize
before_filter :add_project_abilities
2011-12-15 23:57:46 +02:00
before_filter :authorize_read_note!
before_filter :authorize_write_note!, :only => [:create]
2011-10-09 00:36:38 +03:00
respond_to :js
2012-02-24 09:16:06 +02:00
def index
2012-02-27 20:29:27 +02:00
notes
respond_with(@notes)
2012-02-24 09:16:06 +02:00
end
2011-10-09 00:36:38 +03:00
def create
@note = @project.notes.new(params[:note])
@note.author = current_user
2011-12-17 15:58:35 +02:00
@note.notify = true if params[:notify] == '1'
@note.notify_author = true if params[:notify_author] == '1'
2011-12-17 15:58:35 +02:00
@note.save
2011-10-09 00:36:38 +03:00
respond_to do |format|
format.html {redirect_to :back}
format.js
2011-10-09 00:36:38 +03:00
end
end
def destroy
@note = @project.notes.find(params[:id])
2011-10-17 13:39:03 +03:00
return access_denied! unless can?(current_user, :admin_note, @note)
2011-10-09 00:36:38 +03:00
@note.destroy
respond_to do |format|
format.js { render :nothing => true }
2011-10-09 00:36:38 +03:00
end
end
2012-02-24 09:16:06 +02:00
protected
2012-02-27 20:29:27 +02:00
def notes
@notes = NotesLoad.new(project, current_user, params).execute
2012-02-24 09:16:06 +02:00
end
2011-10-09 00:36:38 +03:00
end