Contents

module Lanes::API::Handlers

    class Asset

        def self.saver
            lambda do
                Lanes.logger.debug "Saving File. Root=#{CarrierWave.root}"

                path = "#{params['extension_id']}/#{params['owner_type']}"
                model = path.underscore.camelize.constantize

                authentication = Lanes::API::AuthenticationProvider.new(request)
                authentication.wrap_model_access(model, self) do
                    owner = model.find(params['owner_id'])
                    asset = if params['id']
                                ::Lanes::Asset.find(params['id'])
                            else
                                owner.send("build_#{params['owner_association']}")
                            end
                    asset.store_uploaded_file(params['file'])

                    json_reply std_api_reply asset.new_record? ? :update : :create,
                                             asset,
                                             success: asset.save
                end
            end
        end

        def self.getter
            lambda do
                # files are stored using a random string, therefore we assume that anyone who
                # knows the filename has access and don't empose any further restrictions
                send_file CarrierWave::Uploader::Base.root.call + '/' + params['splat'].first
            end
        end
    end
end

Version data entries

3 entries across 3 versions & 1 rubygems

Version	Path
lanes-0.5.6	lib/lanes/api/handlers/asset.rb
lanes-0.5.5	lib/lanes/api/handlers/asset.rb
lanes-0.5.0	lib/lanes/api/handlers/asset.rb