canvas-lms/app/controllers/wiki_pages_controller.rb

#
# Copyright (C) 2011 Instructure, Inc.
#
# This file is part of Canvas.
#
# Canvas is free software: you can redistribute it and/or modify it under
# the terms of the GNU Affero General Public License as published by the Free
# Software Foundation, version 3 of the License.
#
# Canvas is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
# A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
# details.
#
# You should have received a copy of the GNU Affero General Public License along
# with this program. If not, see <http://www.gnu.org/licenses/>.
#
class WikiPagesController < ApplicationController
  include Api::V1::WikiPage
  include KalturaHelper

  before_filter :require_context
  before_filter :get_wiki_page
  before_filter :set_js_rights, :only => [:pages_index, :show_page, :edit_page]
  before_filter :set_js_wiki_data, :only => [:pages_index, :show_page, :edit_page]
  add_crumb(proc { t '#crumbs.wiki_pages', "Pages"}) do |c|
    context = c.instance_variable_get('@context')
    if context.draft_state_enabled?
      c.send :polymorphic_path, [context, :pages]
    else
      c.send :named_context_url, c.instance_variable_get("@context"), :context_wiki_pages_url
    end
  end
  before_filter { |c| c.active_tab = "pages" }

  def js_rights
    [:wiki, :page]
  end

  def show
    if @context.draft_state_enabled?
      redirect_to polymorphic_url([@context, :named_page], :wiki_page_id => @page)
      return
    end
    hash = { :CONTEXT_ACTION_SOURCE => :wiki }
    append_sis_data(hash)
    js_env(hash)
    @editing = true if Canvas::Plugin.value_to_boolean(params[:edit])
    if @page.deleted?
      flash[:notice] = t('notices.page_deleted', 'The page "%{title}" has been deleted.', :title => @page.title)
      if @wiki.has_front_page? && !@page.is_front_page?
        redirect_to named_context_url(@context, :context_wiki_page_url, @wiki.get_front_page_url)
      else
        redirect_to named_context_url(@context, :context_url)
      end
      return
    end
    if is_authorized_action?(@page, @current_user, :read)
      add_crumb(@page.title)
      @page.increment_view_count(@current_user, @context)
      log_asset_access(@page, "wiki", @wiki)
      respond_to do |format|
        format.html {render :action => "show" }
        format.json {render :json => @page.to_json }
      end
    else
      render_unauthorized_action(@page)
    end
  end

  def index
    return unless tab_enabled?(@context.class::TAB_PAGES)

    if @context.draft_state_enabled?
      front_page
    else
      redirect_to named_context_url(@context, :context_wiki_page_url, @context.wiki.get_front_page_url || Wiki::DEFAULT_FRONT_PAGE_URL)
    end
  end

  def update
    if authorized_action(@page, @current_user, :update_content)
      unless @page.grants_right?(@current_user, session, :update)
        params[:wiki_page] = {:body => params[:wiki_page][:body]}
      end
      perform_update
    end
  end

  def create
    if authorized_action(@page, @current_user, :create)
      perform_update
      unless @wiki.grants_right?(@current_user, session, :manage)
        @page.workflow_state = 'active'
        @page.editing_roles = (@context.default_wiki_editing_roles rescue nil) || @page.default_roles
        @page.save!
      end
    end
  end

  def perform_update
    initialize_wiki_page

    if @page.update_attributes(params[:wiki_page].merge(:user_id => @current_user.id))
      unless @page.context.draft_state_enabled?
        @page.set_as_front_page! if !@page.wiki.has_front_page? and @page.url == Wiki::DEFAULT_FRONT_PAGE_URL
      end

      log_asset_access(@page, "wiki", @wiki, 'participate')
      generate_new_page_view
      @page.context_module_action(@current_user, @context, :contributed)
      flash[:notice] = t('notices.page_updated', 'Page was successfully updated.')
      respond_to do |format|
        format.html { return_to(params[:return_to], context_wiki_page_url(:edit => params[:action] == 'create')) }
        format.json {
          json = @page.as_json
          json[:success_url] = context_wiki_page_url(:edit => params[:action] == 'create')
          render :json => json
        }
      end
    else
      respond_to do |format|
        format.html { render :action => "show" }
        format.json { render :json => @page.errors.to_json, :status => :bad_request }
      end
    end
  end

  def destroy
    if authorized_action(@page, @current_user, :delete)
      if !@page.is_front_page?
        flash[:notice] = t('notices.page_deleted', 'The page "%{title}" has been deleted.', :title => @page.title)
        @page.workflow_state = 'deleted'
        @page.save
        respond_to do |format|
          format.html { redirect_to(named_context_url(@context, :context_wiki_pages_url)) }
        end
      else #they dont have permissions to destroy this page
        respond_to do |format|
          format.html { 
            flash[:error] = t('errors.cannot_delete_front_page', 'You cannot delete the front page.')
            redirect_to(named_context_url(@context, :context_wiki_pages_url))
          }
        end
      end
    end
  end

  def front_page
    return unless tab_enabled?(@context.class::TAB_PAGES)

    if @context.wiki.has_front_page?
      redirect_to polymorphic_url([@context, :named_page], :wiki_page_id => @context.wiki.front_page)
    else
      redirect_to polymorphic_url([@context, :pages])
    end
  end

  def pages_index
    if !@context.draft_state_enabled?
      redirect_to polymorphic_url([@context, :wiki_pages])
      return
    end

    if authorized_action(@context.wiki, @current_user, :read)
      @padless = true
    end
  end

  def show_page
    if !@context.draft_state_enabled?
      redirect_to polymorphic_url([@context, :named_wiki_page], :id => @page)
      return
    end

    if @page.deleted?
      flash[:notice] = t('notices.page_deleted', 'The page "%{title}" has been deleted.', :title => @page.title)
      return front_page # delegate to front_page logic
    end

    if authorized_action(@page, @current_user, :read)
      add_crumb(@page.title)
      @page.increment_view_count(@current_user, @context)
      log_asset_access(@page, 'wiki', @wiki)

      @padless = true
      render
    end
  end

  def edit_page
    if !@context.draft_state_enabled?
      redirect_to polymorphic_url([@context, :named_wiki_page], :id => @page) + '#edit'
      return
    end

    if @page.deleted?
      flash[:notice] = t('notices.page_deleted', 'The page "%{title}" has been deleted.', :title => @page.title)
      return front_page # delegate to front_page logic
    end

    if is_authorized_action?(@page, @current_user, [:update, :update_content])
      add_crumb(@page.title)

      @padless = true
      render
    else
      if authorized_action(@page, @current_user, :read)
        flash[:error] = t('notices.cannot_edit', 'You are not allowed to edit the page "%{title}".', :title => @page.title)
        redirect_to polymorphic_url([@context, :named_page], :wiki_page_id => @page)
      end
    end
  end

  protected

  def context_wiki_page_url(opts={})
    page_name = @page.url
    res = named_context_url(@context, :context_wiki_page_url, page_name)
    if opts && opts[:edit]
      res += "#edit"
    end
   res
  end

  def set_js_wiki_data
    hash = {}

    hash[:DEFAULT_EDITING_ROLES] = @context.default_wiki_editing_roles if @context.respond_to?(:default_wiki_editing_roles)
    hash[:WIKI_PAGES_PATH] = polymorphic_path([@context, :pages])

    if @page
      hash[:WIKI_PAGE] = wiki_page_json(@page, @current_user, session)
      hash[:WIKI_PAGE_REVISION] = (current_version = @page.versions.current) ? current_version.number : nil
      hash[:WIKI_PAGE_SHOW_PATH] = polymorphic_path([@context, :named_page], :wiki_page_id => @page)
      hash[:WIKI_PAGE_EDIT_PATH] = polymorphic_path([@context, :edit_named_page], :wiki_page_id => @page)
      hash[:COURSE_ID] = @context.id
      hash[:WIKI_PAGE_HISTORY_PATH] = polymorphic_path([@context, @page, :wiki_page_revisions])
    end

    js_env hash
  end
end