format.json { head @status }
end
end
+
+ # Filter for actions that provide an API response
+ # but have no HTML representation for non admin users
+ def require_admin_or_api_request
+ return true if api_request?
+ if User.current.admin?
+ true
+ elsif User.current.logged?
+ render_error(:status => 406)
+ else
+ deny_access
+ end
+ end
# Picks which layout to use based on the request
#
class TrackersController < ApplicationController
layout 'admin'
- before_filter :require_admin
+ before_filter :require_admin, :except => :index
+ before_filter :require_admin_or_api_request, :only => :index
+ accept_api_auth :index
verify :method => :post, :only => :destroy, :redirect_to => { :action => :index }
def index
- @tracker_pages, @trackers = paginate :trackers, :per_page => 10, :order => 'position'
- render :action => "index", :layout => false if request.xhr?
+ respond_to do |format|
+ format.html {
+ @tracker_pages, @trackers = paginate :trackers, :per_page => 10, :order => 'position'
+ render :action => "index", :layout => false if request.xhr?
+ }
+ format.api {
+ @trackers = Tracker.all
+ }
+ end
end
def new
--- /dev/null
+api.array :trackers do
+ @trackers.each do |tracker|
+ api.tracker do
+ api.id tracker.id
+ api.name tracker.name
+ end
+ end
+end
map.resources :groups
#left old routes at the bottom for backwards compat
+ map.connect 'trackers.:format', :controller => 'trackers', :action => 'index'
map.connect 'projects/:project_id/issues/:action', :controller => 'issues'
map.connect 'projects/:project_id/documents/:action', :controller => 'documents'
map.connect 'projects/:project_id/boards/:action/:id', :controller => 'boards'
assert_response :success
assert_template 'index'
end
+
+ def test_index_by_anonymous_should_redirect_to_login_form
+ @request.session[:user_id] = nil
+ get :index
+ assert_redirected_to '/login?back_url=http%3A%2F%2Ftest.host%2Ftrackers'
+ end
+
+ def test_index_by_user_should_respond_with_406
+ @request.session[:user_id] = 2
+ get :index
+ assert_response 406
+ end
def test_get_new
get :new
--- /dev/null
+# Redmine - project management software
+# Copyright (C) 2006-2011 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require File.expand_path('../../../test_helper', __FILE__)
+
+class ApiTest::TrackersTest < ActionController::IntegrationTest
+ fixtures :trackers
+
+ def setup
+ Setting.rest_api_enabled = '1'
+ end
+
+ context "/trackers" do
+ context "GET" do
+
+ should "return trackers" do
+ get '/trackers.xml'
+
+ assert_response :success
+ assert_equal 'application/xml', @response.content_type
+ assert_tag :tag => 'trackers',
+ :attributes => {:type => 'array'},
+ :child => {
+ :tag => 'tracker',
+ :child => {
+ :tag => 'id',
+ :content => '2',
+ :sibling => {
+ :tag => 'name',
+ :content => 'Feature request'
+ }
+ }
+ }
+ end
+ end
+ end
+end