987a5aa221
These permissions need to be explicitly given to the Anonymous role (Admin -> Roles & Permissions -> Anonymous). git-svn-id: http://redmine.rubyforge.org/svn/trunk@919 e93f8b46-1217-0410-a6f0-8f06a7374b81
83 lines
2.6 KiB
Ruby
83 lines
2.6 KiB
Ruby
# redMine - project management software
|
|
# Copyright (C) 2006 Jean-Philippe Lang
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License
|
|
# as published by the Free Software Foundation; either version 2
|
|
# of the License, or (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
class NewsController < ApplicationController
|
|
layout 'base'
|
|
before_filter :find_project, :authorize, :except => :index
|
|
before_filter :find_optional_project, :only => :index
|
|
accept_key_auth :index
|
|
|
|
def index
|
|
@news_pages, @newss = paginate :news,
|
|
:per_page => 10,
|
|
:conditions => (@project ? {:project_id => @project.id} : Project.visible_by(User.current)),
|
|
:include => [:author, :project],
|
|
:order => "#{News.table_name}.created_on DESC"
|
|
respond_to do |format|
|
|
format.html { render :layout => false if request.xhr? }
|
|
format.atom { render_feed(@newss, :title => (@project ? @project.name : Setting.app_title) + ": #{l(:label_news_plural)}") }
|
|
end
|
|
end
|
|
|
|
def show
|
|
end
|
|
|
|
def edit
|
|
if request.post? and @news.update_attributes(params[:news])
|
|
flash[:notice] = l(:notice_successful_update)
|
|
redirect_to :action => 'show', :id => @news
|
|
end
|
|
end
|
|
|
|
def add_comment
|
|
@comment = Comment.new(params[:comment])
|
|
@comment.author = User.current
|
|
if @news.comments << @comment
|
|
flash[:notice] = l(:label_comment_added)
|
|
redirect_to :action => 'show', :id => @news
|
|
else
|
|
render :action => 'show'
|
|
end
|
|
end
|
|
|
|
def destroy_comment
|
|
@news.comments.find(params[:comment_id]).destroy
|
|
redirect_to :action => 'show', :id => @news
|
|
end
|
|
|
|
def destroy
|
|
@news.destroy
|
|
redirect_to :action => 'index', :project_id => @project
|
|
end
|
|
|
|
private
|
|
def find_project
|
|
@news = News.find(params[:id])
|
|
@project = @news.project
|
|
rescue ActiveRecord::RecordNotFound
|
|
render_404
|
|
end
|
|
|
|
def find_optional_project
|
|
return true unless params[:project_id]
|
|
@project = Project.find(params[:project_id])
|
|
authorize
|
|
rescue ActiveRecord::RecordNotFound
|
|
render_404
|
|
end
|
|
end
|