class PapermillController < ApplicationController
unloadable
prepend_before_filter :load_asset, :only => [ "show", "destroy", "update", "edit", "crop" ]
skip_before_filter :verify_authenticity_token, :only => [:create] # not needed (Flash same origin policy)
def show
# first escaping is done by rails prior to route recognition, need to do a second one on MSWIN systems to get original one.
params[:style] = CGI::unescape(params[:style]) if Papermill::MSWIN
if @asset.has_valid_url_key?(params[:url_key], params[:style]) && @asset.create_thumb_file(params[:style])
redirect_to @asset.url(params[:style])
else
render :nothing => true, :status => 404
end
end
def create
@asset = params[:asset_class].constantize.new(params.reject{|k, v| !(PapermillAsset.columns.map(&:name)+["Filedata", "Filename"]).include?(k)})
if @asset.save
output = render_to_string(:partial => "papermill/asset", :object => @asset, :locals => { :gallery => params[:gallery], :thumbnail_style => params[:thumbnail_style], :targetted_size => params[:targetted_size], :field_name => params[:field_name], :field_id => params[:field_id] })
render :update do |page|
page << %{ jQuery('##{params[:Fileid]}').replaceWith('#{escape_javascript output}') }
page << %{ jQuery('##{params[:Oldfileid]}').remove() } if params[:Oldfileid]
end
else
render :update do |page|
page << %{ notify('#{@asset.name}', '#{escape_javascript @asset.errors.full_messages.join("
")}', 'error') }
page << %{ jQuery('##{params[:Fileid]}').remove() }
page << %{ jQuery('##{params[:Oldfileid]}').show() } if params[:Oldfileid]
end
end
end
def edit
render :action => "edit", :layout => false
end
def crop
render :action => "crop", :layout => false
end
def update
@asset.create_thumb_file(params[:target], params[:papermill_asset].merge({ :geometry => "#{params[:target]}#" })) if params[:target]
render :update do |page|
if @asset.update_attributes(params[:papermill_asset])
page << %{ notify('#{@asset.name}', '#{ escape_javascript t("papermill.updated", :resource => @asset.name)}', 'notice'); close_popup(self); }
else
page << %{ jQuery('#error').html('#{ escape_javascript @asset.errors.full_messages.join("
") }'); jQuery('#error').show(); }
end
end
end
def add_list
@assets = PapermillAsset.find(params[:ids]).sort_by{|asset|params[:ids].index(asset.id.to_s)} unless params[:ids].blank?
output = render_to_string(:partial => "papermill/asset", :collection => (@assets || []), :locals => { :gallery => params[:gallery], :thumbnail_style => params[:thumbnail_style], :targetted_size => params[:targetted_size], :field_name => params[:field_name], :field_id => params[:field_id] })
render :update do |page|
page << %{ close_popup(); jQuery('##{params[:field_id]}').html('#{escape_javascript output}'); }
end
end
def browser
ids_list = params[params[:field_id] + "_papermill_asset"]
@selected_assets = ids_list.blank? ? [] : params[:asset_class].constantize.find(ids_list).sort_by{|asset| ids_list.index(asset.id.to_s)}
@other_assets = params[:asset_class].constantize.all - @selected_assets
render :action => "browser", :layout => false
end
def mass_edit
@assets = (params[(params[:list_id] + "_papermill_asset").to_sym] || []).map{ |id| PapermillAsset.find(id, :include => "assetable") }
@assets.each { |asset| asset.update_attribute(params[:attribute], params[:value]) }
render :update do |page|
page << %{ notify("", "#{ escape_javascript t("papermill.updated", :resource => @assets.map(&:name).to_sentence) }", "notice"); } unless @assets.blank?
end
end
private
def load_asset
@asset = PapermillAsset.find(params[:id] || (params[:id0] + params[:id1] + params[:id2]).to_i)
end
end