jro_apps/redmine Commit - r12901:c1f17037e4b5

1

# Redmine - project management software

1

# Redmine - project management software

2

3

#

3

#

4

# This program is free software; you can redistribute it and/or

4

# This program is free software; you can redistribute it and/or

5

# modify it under the terms of the GNU General Public License

5

# modify it under the terms of the GNU General Public License

6

# as published by the Free Software Foundation; either version 2

6

# as published by the Free Software Foundation; either version 2

7

# of the License, or (at your option) any later version.

7

# of the License, or (at your option) any later version.

8

#

8

#

9

# This program is distributed in the hope that it will be useful,

9

# This program is distributed in the hope that it will be useful,

10

# but WITHOUT ANY WARRANTY; without even the implied warranty of

10

# but WITHOUT ANY WARRANTY; without even the implied warranty of

11

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

11

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

12

# GNU General Public License for more details.

12

# GNU General Public License for more details.

13

#

13

#

14

# You should have received a copy of the GNU General Public License

14

# You should have received a copy of the GNU General Public License

15

# along with this program; if not, write to the Free Software

15

# along with this program; if not, write to the Free Software

16

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

16

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

17

18

class AttachmentsController < ApplicationController

18

class AttachmentsController < ApplicationController

19

before_filter :find_project, :except => :upload

19

before_filter :find_project, :except => :upload

20

before_filter :file_readable, :read_authorize, :only => [:show, :download, :thumbnail]

20

before_filter :file_readable, :read_authorize, :only => [:show, :download, :thumbnail]

21

before_filter :delete_authorize, :only => :destroy

21

before_filter :delete_authorize, :only => :destroy

22

before_filter :authorize_global, :only => :upload

22

before_filter :authorize_global, :only => :upload

23

24

accept_api_auth :show, :download, :upload

24

accept_api_auth :show, :download, :upload

25

26

def show

26

def show

27

respond_to do |format|

27

respond_to do |format|

28

format.html {

28

format.html {

29

if @attachment.is_diff?

29

if @attachment.is_diff?

30

@diff = File.new(@attachment.diskfile, "rb").read

30

@diff = File.new(@attachment.diskfile, "rb").read

31

@diff_type = params[:type] || User.current.pref[:diff_type] || 'inline'

31

@diff_type = params[:type] || User.current.pref[:diff_type] || 'inline'

32

@diff_type = 'inline' unless %w(inline sbs).include?(@diff_type)

32

@diff_type = 'inline' unless %w(inline sbs).include?(@diff_type)

33

# Save diff type as user preference

33

# Save diff type as user preference

34

if User.current.logged? && @diff_type != User.current.pref[:diff_type]

34

if User.current.logged? && @diff_type != User.current.pref[:diff_type]

35

User.current.pref[:diff_type] = @diff_type

35

User.current.pref[:diff_type] = @diff_type

36

User.current.preference.save

36

User.current.preference.save

37

end

37

end

38

render :action => 'diff'

38

render :action => 'diff'

39

elsif @attachment.is_text? && @attachment.filesize <= Setting.file_max_size_displayed.to_i.kilobyte

39

elsif @attachment.is_text? && @attachment.filesize <= Setting.file_max_size_displayed.to_i.kilobyte

40

@content = File.new(@attachment.diskfile, "rb").read

40

@content = File.new(@attachment.diskfile, "rb").read

41

render :action => 'file'

41

render :action => 'file'

42

else

42

else

43

download

43

download

44

end

44

end

45

}

45

}

46

format.api

46

format.api

47

end

47

end

48

end

48

end

49

50

def download

50

def download

51

if @attachment.container.is_a?(Version) || @attachment.container.is_a?(Project)

51

if @attachment.container.is_a?(Version) || @attachment.container.is_a?(Project)

52

@attachment.increment_download

52

@attachment.increment_download

53

end

53

end

54

55

if stale?(:etag => @attachment.digest)

55

if stale?(:etag => @attachment.digest)

56

# images are sent inline

56

# images are sent inline

57

send_file @attachment.diskfile, :filename => filename_for_content_disposition(@attachment.filename),

57

send_file @attachment.diskfile, :filename => filename_for_content_disposition(@attachment.filename),

58

:type => detect_content_type(@attachment),

58

:type => detect_content_type(@attachment),

59

:disposition => (@attachment.image? ? 'inline' : 'attachment')

59

:disposition => (@attachment.image? ? 'inline' : 'attachment')

60

end

60

end

61

end

61

end

62

63

def thumbnail

63

def thumbnail

64

if @attachment.thumbnailable? && t~~hum~~bnail = @attachment.thumbnail(:size => params[:size])

64

if @attachment.thumbnailable? && tbnail = @attachment.thumbnail(:size => params[:size])

65

if stale?(:etag => t~~hum~~bnail)

65

if stale?(:etag => tbnail)

66

send_file t~~hum~~bnail,

66

send_file tbnail,

67

:filename => filename_for_content_disposition(@attachment.filename),

67

:filename => filename_for_content_disposition(@attachment.filename),

68

:type => detect_content_type(@attachment),

68

:type => detect_content_type(@attachment),

69

:disposition => 'inline'

69

:disposition => 'inline'

70

end

70

end

71

else

71

else

72

# No thumbnail for the attachment or thumbnail could not be created

72

# No thumbnail for the attachment or thumbnail could not be created

73

render :nothing => true, :status => 404

73

render :nothing => true, :status => 404

74

end

74

end

75

end

75

end

76

77

def upload

77

def upload

78

# Make sure that API users get used to set this content type

78

# Make sure that API users get used to set this content type

79

# as it won't trigger Rails' automatic parsing of the request body for parameters

79

# as it won't trigger Rails' automatic parsing of the request body for parameters

80

unless request.content_type == 'application/octet-stream'

80

unless request.content_type == 'application/octet-stream'

81

render :nothing => true, :status => 406

81

render :nothing => true, :status => 406

82

return

82

return

83

end

83

end

84

85

@attachment = Attachment.new(:file => request.raw_post)

85

@attachment = Attachment.new(:file => request.raw_post)

86

@attachment.author = User.current

86

@attachment.author = User.current

87

@attachment.filename = params[:filename].presence || Redmine::Utils.random_hex(16)

87

@attachment.filename = params[:filename].presence || Redmine::Utils.random_hex(16)

88

saved = @attachment.save

88

saved = @attachment.save

89

90

respond_to do |format|

90

respond_to do |format|

91

format.js

91

format.js

92

format.api {

92

format.api {

93

if saved

93

if saved

94

render :action => 'upload', :status => :created

94

render :action => 'upload', :status => :created

95

else

95

else

96

render_validation_errors(@attachment)

96

render_validation_errors(@attachment)

97

end

97

end

98

}

98

}

99

end

99

end

100

end

100

end

101

102

def destroy

102

def destroy

103

if @attachment.container.respond_to?(:init_journal)

103

if @attachment.container.respond_to?(:init_journal)

104

@attachment.container.init_journal(User.current)

104

@attachment.container.init_journal(User.current)

105

end

105

end

106

if @attachment.container

106

if @attachment.container

107

# Make sure association callbacks are called

107

# Make sure association callbacks are called

108

@attachment.container.attachments.delete(@attachment)

108

@attachment.container.attachments.delete(@attachment)

109

else

109

else

110

@attachment.destroy

110

@attachment.destroy

111

end

111

end

112

113

respond_to do |format|

113

respond_to do |format|

114

format.html { redirect_to_referer_or project_path(@project) }

114

format.html { redirect_to_referer_or project_path(@project) }

115

format.js

115

format.js

116

end

116

end

117

end

117

end

118

119

private

119

private

120

def find_project

120

def find_project

121

@attachment = Attachment.find(params[:id])

121

@attachment = Attachment.find(params[:id])

122

# Show 404 if the filename in the url is wrong

122

# Show 404 if the filename in the url is wrong

123

raise ActiveRecord::RecordNotFound if params[:filename] && params[:filename] != @attachment.filename

123

raise ActiveRecord::RecordNotFound if params[:filename] && params[:filename] != @attachment.filename

124

@project = @attachment.project

124

@project = @attachment.project

125

rescue ActiveRecord::RecordNotFound

125

rescue ActiveRecord::RecordNotFound

126

render_404

126

render_404

127

end

127

end

128

129

# Checks that the file exists and is readable

129

# Checks that the file exists and is readable

130

def file_readable

130

def file_readable

131

if @attachment.readable?

131

if @attachment.readable?

132

true

132

true

133

else

133

else

134

logger.error "Cannot send attachment, #{@attachment.diskfile} does not exist or is unreadable."

134

logger.error "Cannot send attachment, #{@attachment.diskfile} does not exist or is unreadable."

135

render_404

135

render_404

136

end

136

end

137

end

137

end

138

139

def read_authorize

139

def read_authorize

140

@attachment.visible? ? true : deny_access

140

@attachment.visible? ? true : deny_access

141

end

141

end

142

143

def delete_authorize

143

def delete_authorize

144

@attachment.deletable? ? true : deny_access

144

@attachment.deletable? ? true : deny_access

145

end

145

end

146

147

def detect_content_type(attachment)

147

def detect_content_type(attachment)

148

content_type = attachment.content_type

148

content_type = attachment.content_type

149

if content_type.blank?

149

if content_type.blank?

150

content_type = Redmine::MimeType.of(attachment.filename)

150

content_type = Redmine::MimeType.of(attachment.filename)

151

end

151

end

152

content_type.to_s

152

content_type.to_s

153

end

153

end

154

end

154

end

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

             # Redmine - project management software
             # Copyright (C) 2006-2014  Jean-Philippe Lang
             #
             # This program is free software; you can redistribute it and/or
             # modify it under the terms of the GNU General Public License
             # as published by the Free Software Foundation; either version 2
             # of the License, or (at your option) any later version.
             #
             # This program is distributed in the hope that it will be useful,
             # but WITHOUT ANY WARRANTY; without even the implied warranty of
             # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
             # GNU General Public License for more details.
             #
             # You should have received a copy of the GNU General Public License
             # along with this program; if not, write to the Free Software
             # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
             class AttachmentsController < ApplicationController
               before_filter :find_project, :except => :upload
               before_filter :file_readable, :read_authorize, :only => [:show, :download, :thumbnail]
               before_filter :delete_authorize, :only => :destroy
               before_filter :authorize_global, :only => :upload
               accept_api_auth :show, :download, :upload
               def show
                 respond_to do |format|
                   format.html {
                     if @attachment.is_diff?
                       @diff = File.new(@attachment.diskfile, "rb").read
                       @diff_type = params[:type] || User.current.pref[:diff_type] || 'inline'
                       @diff_type = 'inline' unless %w(inline sbs).include?(@diff_type)
                       # Save diff type as user preference
                       if User.current.logged? && @diff_type != User.current.pref[:diff_type]
                         User.current.pref[:diff_type] = @diff_type
                         User.current.preference.save
                       end
                       render :action => 'diff'
                     elsif @attachment.is_text? && @attachment.filesize <= Setting.file_max_size_displayed.to_i.kilobyte
                       @content = File.new(@attachment.diskfile, "rb").read
                       render :action => 'file'
                     else
                       download
                     end
                   }
                   format.api
                 end
               end
               def download
                 if @attachment.container.is_a?(Version) || @attachment.container.is_a?(Project)
                   @attachment.increment_download
                 end
                 if stale?(:etag => @attachment.digest)
                   # images are sent inline
                   send_file @attachment.diskfile, :filename => filename_for_content_disposition(@attachment.filename),
                                                   :type => detect_content_type(@attachment),
                                                   :disposition => (@attachment.image? ? 'inline' : 'attachment')
                 end
               end
               def thumbnail
-                if @attachment.thumbnailable? && thumbnail = @attachment.thumbnail(:size => params[:size])
+                if @attachment.thumbnailable? && tbnail = @attachment.thumbnail(:size => params[:size])
-                  if stale?(:etag => thumbnail)
+                  if stale?(:etag => tbnail)
-                    send_file thumbnail,
+                    send_file tbnail,
                       :filename => filename_for_content_disposition(@attachment.filename),
                       :type => detect_content_type(@attachment),
                       :disposition => 'inline'
                   end
                 else
                   # No thumbnail for the attachment or thumbnail could not be created
                   render :nothing => true, :status => 404
                 end
               end
               def upload
                 # Make sure that API users get used to set this content type
                 # as it won't trigger Rails' automatic parsing of the request body for parameters
                 unless request.content_type == 'application/octet-stream'
                   render :nothing => true, :status => 406
                   return
                 end
                 @attachment = Attachment.new(:file => request.raw_post)
                 @attachment.author = User.current
                 @attachment.filename = params[:filename].presence || Redmine::Utils.random_hex(16)
                 saved = @attachment.save
                 respond_to do |format|
                   format.js
                   format.api {
                     if saved
                       render :action => 'upload', :status => :created
                     else
                       render_validation_errors(@attachment)
                     end
                   }
                 end
               end
               def destroy
                 if @attachment.container.respond_to?(:init_journal)
                   @attachment.container.init_journal(User.current)
                 end
                 if @attachment.container
                   # Make sure association callbacks are called
                   @attachment.container.attachments.delete(@attachment)
                 else
                   @attachment.destroy
                 end
                 respond_to do |format|
                   format.html { redirect_to_referer_or project_path(@project) }
                   format.js
                 end
               end
             private
               def find_project
                 @attachment = Attachment.find(params[:id])
                 # Show 404 if the filename in the url is wrong
                 raise ActiveRecord::RecordNotFound if params[:filename] && params[:filename] != @attachment.filename
                 @project = @attachment.project
               rescue ActiveRecord::RecordNotFound
                 render_404
               end
               # Checks that the file exists and is readable
               def file_readable
                 if @attachment.readable?
                   true
                 else
                   logger.error "Cannot send attachment, #{@attachment.diskfile} does not exist or is unreadable."
                   render_404
                 end
               end
               def read_authorize
                 @attachment.visible? ? true : deny_access
               end
               def delete_authorize
                 @attachment.deletable? ? true : deny_access
               end
               def detect_content_type(attachment)
                 content_type = attachment.content_type
                 if content_type.blank?
                   content_type = Redmine::MimeType.of(attachment.filename)
                 end
                 content_type.to_s
               end
             end