# frozen_string_literal: true # Redmine - project management software # Copyright (C) 2006-2023 Jean-Philippe Lang # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. class IssueRelationsController < ApplicationController helper :issues before_action :find_issue, :authorize, :only => [:index, :create] before_action :find_relation, :only => [:show, :destroy] accept_api_auth :index, :show, :create, :destroy def index @relations = @issue.relations respond_to do |format| format.html {head 200} format.api end end def show raise Unauthorized unless @relation.visible? respond_to do |format| format.html {head 200} format.api end end def create saved = false params_relation = params[:relation] unsaved_relations = [] relation_issues_to_id.each do |issue_to_id| params_relation[:issue_to_id] = issue_to_id @relation = IssueRelation.new @relation.issue_from = @issue @relation.safe_attributes = params_relation @relation.init_journals(User.current) begin saved = @relation.save rescue ActiveRecord::RecordNotUnique @relation.errors.add :base, :taken end unsaved_relations << @relation unless saved end respond_to do |format| format.html {redirect_to issue_path(@issue)} format.js do @relations = @issue.reload.relations.select {|r| r.other_issue(@issue) && r.other_issue(@issue).visible?} @unsaved_relations = unsaved_relations end format.api do if saved render :action => 'show', :status => :created, :location => relation_url(@relation) else render_validation_errors(@relation) end end end end def destroy raise Unauthorized unless @relation.deletable? @relation.init_journals(User.current) @relation.destroy respond_to do |format| format.html {redirect_to issue_path(@relation.issue_from)} format.js format.api {render_api_ok} end end private def find_issue @issue = Issue.find(params[:issue_id]) @project = @issue.project rescue ActiveRecord::RecordNotFound render_404 end def find_relation @relation = IssueRelation.find(params[:id]) rescue ActiveRecord::RecordNotFound render_404 end def relation_issues_to_id issue_to_id = params[:relation].require(:issue_to_id) case issue_to_id when String issue_to_id = issue_to_id.split(',').reject(&:blank?) when Integer issue_to_id = [issue_to_id] end issue_to_id rescue ActionController::ParameterMissing => e # We return a empty array just to loop once and return a validation error # ToDo: Find a better method to return an error if the param is missing. [''] end end