2014-01-31 06:10:36 +08:00
|
|
|
class GroupsController < ApplicationController
|
|
|
|
|
2016-11-29 16:25:02 +08:00
|
|
|
before_filter :ensure_logged_in, only: [
|
|
|
|
:set_notifications,
|
|
|
|
:mentionable,
|
2016-12-11 23:36:15 +08:00
|
|
|
:update,
|
|
|
|
:messages,
|
2017-06-13 16:10:14 +08:00
|
|
|
:histories,
|
|
|
|
:request_membership
|
2016-11-29 16:25:02 +08:00
|
|
|
]
|
|
|
|
|
2016-03-19 00:19:45 +08:00
|
|
|
skip_before_filter :preload_json, :check_xhr, only: [:posts_feed, :mentions_feed]
|
2015-12-15 06:17:09 +08:00
|
|
|
|
2016-12-14 17:26:16 +08:00
|
|
|
def index
|
2016-12-22 14:14:03 +08:00
|
|
|
unless SiteSetting.enable_group_directory?
|
|
|
|
raise Discourse::InvalidAccess.new(:enable_group_directory)
|
|
|
|
end
|
|
|
|
|
2016-12-14 17:26:16 +08:00
|
|
|
page_size = 30
|
|
|
|
page = params[:page]&.to_i || 0
|
|
|
|
|
2017-02-03 16:51:32 +08:00
|
|
|
groups = Group.visible_groups(current_user)
|
2016-12-20 14:38:27 +08:00
|
|
|
count = groups.count
|
2016-12-20 14:26:15 +08:00
|
|
|
groups = groups.offset(page * page_size).limit(page_size)
|
2016-12-14 17:26:16 +08:00
|
|
|
|
2016-12-21 20:58:51 +08:00
|
|
|
group_user_ids = GroupUser.where(group: groups, user: current_user).pluck(:group_id)
|
|
|
|
|
|
|
|
render_json_dump(
|
|
|
|
groups: serialize_data(groups, BasicGroupSerializer),
|
|
|
|
extras: {
|
|
|
|
group_user_ids: group_user_ids
|
|
|
|
},
|
2016-12-20 14:38:27 +08:00
|
|
|
total_rows_groups: count,
|
2016-12-14 17:26:16 +08:00
|
|
|
load_more_groups: groups_path(page: page + 1)
|
2016-12-21 20:58:51 +08:00
|
|
|
)
|
2016-12-14 17:26:16 +08:00
|
|
|
end
|
|
|
|
|
2014-01-31 06:10:36 +08:00
|
|
|
def show
|
2016-11-25 15:26:49 +08:00
|
|
|
render_serialized(find_group(:id), GroupShowSerializer, root: 'basic_group')
|
2014-01-31 06:10:36 +08:00
|
|
|
end
|
|
|
|
|
2016-12-13 15:15:20 +08:00
|
|
|
def edit
|
|
|
|
end
|
|
|
|
|
2016-11-29 16:25:02 +08:00
|
|
|
def update
|
|
|
|
group = Group.find(params[:id])
|
|
|
|
guardian.ensure_can_edit!(group)
|
|
|
|
|
|
|
|
if group.update_attributes(group_params)
|
2016-12-11 23:36:15 +08:00
|
|
|
GroupActionLogger.new(current_user, group).log_change_group_settings
|
|
|
|
|
2016-11-29 16:25:02 +08:00
|
|
|
render json: success_json
|
|
|
|
else
|
|
|
|
render_json_error(group)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2014-02-07 23:44:03 +08:00
|
|
|
def posts
|
2014-02-19 05:43:02 +08:00
|
|
|
group = find_group(:group_id)
|
2014-02-13 03:00:45 +08:00
|
|
|
posts = group.posts_for(guardian, params[:before_post_id]).limit(20)
|
2014-02-07 23:44:03 +08:00
|
|
|
render_serialized posts.to_a, GroupPostSerializer
|
|
|
|
end
|
|
|
|
|
2016-03-19 00:19:45 +08:00
|
|
|
def posts_feed
|
|
|
|
group = find_group(:group_id)
|
|
|
|
@posts = group.posts_for(guardian).limit(50)
|
|
|
|
@title = "#{SiteSetting.title} - #{I18n.t("rss_description.group_posts", group_name: group.name)}"
|
|
|
|
@link = Discourse.base_url
|
|
|
|
@description = I18n.t("rss_description.group_posts", group_name: group.name)
|
|
|
|
render 'posts/latest', formats: [:rss]
|
|
|
|
end
|
|
|
|
|
2015-12-01 13:52:43 +08:00
|
|
|
def topics
|
|
|
|
group = find_group(:group_id)
|
|
|
|
posts = group.posts_for(guardian, params[:before_post_id]).where(post_number: 1).limit(20)
|
|
|
|
render_serialized posts.to_a, GroupPostSerializer
|
|
|
|
end
|
|
|
|
|
|
|
|
def mentions
|
|
|
|
group = find_group(:group_id)
|
|
|
|
posts = group.mentioned_posts_for(guardian, params[:before_post_id]).limit(20)
|
|
|
|
render_serialized posts.to_a, GroupPostSerializer
|
|
|
|
end
|
|
|
|
|
2016-03-19 00:19:45 +08:00
|
|
|
def mentions_feed
|
|
|
|
group = find_group(:group_id)
|
|
|
|
@posts = group.mentioned_posts_for(guardian).limit(50)
|
|
|
|
@title = "#{SiteSetting.title} - #{I18n.t("rss_description.group_mentions", group_name: group.name)}"
|
|
|
|
@link = Discourse.base_url
|
|
|
|
@description = I18n.t("rss_description.group_mentions", group_name: group.name)
|
|
|
|
render 'posts/latest', formats: [:rss]
|
|
|
|
end
|
|
|
|
|
2015-12-08 06:19:33 +08:00
|
|
|
def messages
|
|
|
|
group = find_group(:group_id)
|
|
|
|
posts = if guardian.can_see_group_messages?(group)
|
|
|
|
group.messages_for(guardian, params[:before_post_id]).where(post_number: 1).limit(20).to_a
|
|
|
|
else
|
|
|
|
[]
|
|
|
|
end
|
|
|
|
render_serialized posts, GroupPostSerializer
|
|
|
|
end
|
2015-12-01 13:52:43 +08:00
|
|
|
|
2014-02-07 02:06:19 +08:00
|
|
|
def members
|
2014-02-19 05:43:02 +08:00
|
|
|
group = find_group(:group_id)
|
2014-11-25 04:12:48 +08:00
|
|
|
|
2016-12-07 17:28:43 +08:00
|
|
|
limit = (params[:limit] || 20).to_i
|
2015-01-06 01:51:45 +08:00
|
|
|
offset = params[:offset].to_i
|
2016-12-08 14:26:50 +08:00
|
|
|
dir = (params[:desc] && !params[:desc].blank?) ? 'DESC' : 'ASC'
|
2016-12-22 14:55:24 +08:00
|
|
|
order = ""
|
2016-12-07 17:28:43 +08:00
|
|
|
|
|
|
|
if params[:order] && %w{last_posted_at last_seen_at}.include?(params[:order])
|
2016-12-22 14:55:24 +08:00
|
|
|
order = "#{params[:order]} #{dir} NULLS LAST"
|
2016-12-07 17:28:43 +08:00
|
|
|
end
|
|
|
|
|
2015-01-06 01:51:45 +08:00
|
|
|
total = group.users.count
|
2016-12-07 17:28:43 +08:00
|
|
|
members = group.users
|
|
|
|
.order('NOT group_users.owner')
|
|
|
|
.order(order)
|
2016-12-08 14:26:50 +08:00
|
|
|
.order(:username_lower => dir)
|
2016-12-07 17:28:43 +08:00
|
|
|
.limit(limit)
|
|
|
|
.offset(offset)
|
|
|
|
|
|
|
|
owners = group.users
|
|
|
|
.order(order)
|
2016-12-08 14:26:50 +08:00
|
|
|
.order(:username_lower => dir)
|
2016-12-07 17:28:43 +08:00
|
|
|
.where('group_users.owner')
|
2015-01-06 01:51:45 +08:00
|
|
|
|
|
|
|
render json: {
|
|
|
|
members: serialize_data(members, GroupUserSerializer),
|
2015-11-09 21:52:04 +08:00
|
|
|
owners: serialize_data(owners, GroupUserSerializer),
|
2015-01-06 01:51:45 +08:00
|
|
|
meta: {
|
|
|
|
total: total,
|
|
|
|
limit: limit,
|
|
|
|
offset: offset
|
|
|
|
}
|
|
|
|
}
|
2014-02-07 02:06:19 +08:00
|
|
|
end
|
|
|
|
|
2015-01-09 07:35:52 +08:00
|
|
|
def add_members
|
2015-11-09 21:52:04 +08:00
|
|
|
group = Group.find(params[:id])
|
2016-12-07 12:06:56 +08:00
|
|
|
group.public ? ensure_logged_in : guardian.ensure_can_edit!(group)
|
|
|
|
|
|
|
|
users =
|
|
|
|
if params[:usernames].present?
|
|
|
|
User.where(username: params[:usernames].split(","))
|
|
|
|
elsif params[:user_ids].present?
|
|
|
|
User.find(params[:user_ids].split(","))
|
|
|
|
elsif params[:user_emails].present?
|
|
|
|
User.where(email: params[:user_emails].split(","))
|
|
|
|
else
|
|
|
|
raise Discourse::InvalidParameters.new(
|
|
|
|
'user_ids or usernames or user_emails must be present'
|
|
|
|
)
|
|
|
|
end
|
2015-11-09 21:52:04 +08:00
|
|
|
|
2016-12-07 12:06:56 +08:00
|
|
|
raise Discourse::NotFound if users.blank?
|
|
|
|
|
|
|
|
if group.public
|
2016-12-13 16:39:44 +08:00
|
|
|
if !guardian.can_log_group_changes?(group) && current_user != users.first
|
|
|
|
raise Discourse::InvalidAccess
|
|
|
|
end
|
2016-12-07 12:06:56 +08:00
|
|
|
|
|
|
|
unless current_user.staff?
|
|
|
|
RateLimiter.new(current_user, "public_group_membership", 3, 1.minute).performed!
|
|
|
|
end
|
2015-11-09 21:52:04 +08:00
|
|
|
end
|
|
|
|
|
|
|
|
users.each do |user|
|
|
|
|
if !group.users.include?(user)
|
|
|
|
group.add(user)
|
2016-12-11 23:36:15 +08:00
|
|
|
GroupActionLogger.new(current_user, group).log_add_user_to_group(user)
|
2015-11-09 21:52:04 +08:00
|
|
|
else
|
|
|
|
return render_json_error I18n.t('groups.errors.member_already_exist', username: user.username)
|
2015-01-09 07:35:52 +08:00
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2015-11-09 21:52:04 +08:00
|
|
|
if group.save
|
|
|
|
render json: success_json
|
|
|
|
else
|
|
|
|
render_json_error(group)
|
|
|
|
end
|
2015-01-09 07:35:52 +08:00
|
|
|
end
|
|
|
|
|
2016-11-25 16:45:15 +08:00
|
|
|
def mentionable
|
|
|
|
group = find_group(:name)
|
|
|
|
|
|
|
|
if group
|
|
|
|
render json: { mentionable: Group.mentionable(current_user).where(id: group.id).present? }
|
|
|
|
else
|
|
|
|
raise Discourse::InvalidAccess.new
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2015-01-09 07:35:52 +08:00
|
|
|
def remove_member
|
2015-11-09 21:52:04 +08:00
|
|
|
group = Group.find(params[:id])
|
2016-12-07 12:06:56 +08:00
|
|
|
group.public ? ensure_logged_in : guardian.ensure_can_edit!(group)
|
|
|
|
|
|
|
|
user =
|
|
|
|
if params[:user_id].present?
|
|
|
|
User.find_by(id: params[:user_id])
|
|
|
|
elsif params[:username].present?
|
|
|
|
User.find_by_username(params[:username])
|
|
|
|
elsif params[:user_email].present?
|
|
|
|
User.find_by_email(params[:user_email])
|
|
|
|
else
|
|
|
|
raise Discourse::InvalidParameters.new('user_id or username must be present')
|
|
|
|
end
|
2015-11-09 21:52:04 +08:00
|
|
|
|
2016-12-07 12:06:56 +08:00
|
|
|
raise Discourse::NotFound unless user
|
|
|
|
|
|
|
|
if group.public
|
2016-12-13 16:39:44 +08:00
|
|
|
if !guardian.can_log_group_changes?(group) && current_user != user
|
|
|
|
raise Discourse::InvalidAccess
|
|
|
|
end
|
2016-12-07 12:06:56 +08:00
|
|
|
|
|
|
|
unless current_user.staff?
|
|
|
|
RateLimiter.new(current_user, "public_group_membership", 3, 1.minute).performed!
|
|
|
|
end
|
2015-11-09 21:52:04 +08:00
|
|
|
end
|
|
|
|
|
|
|
|
user.primary_group_id = nil if user.primary_group_id == group.id
|
|
|
|
|
2016-12-11 23:36:15 +08:00
|
|
|
group.remove(user)
|
|
|
|
GroupActionLogger.new(current_user, group).log_remove_user_from_group(user)
|
2015-01-09 07:35:52 +08:00
|
|
|
|
2015-11-09 21:52:04 +08:00
|
|
|
if group.save && user.save
|
|
|
|
render json: success_json
|
|
|
|
else
|
|
|
|
render_json_error(group)
|
2015-01-09 07:35:52 +08:00
|
|
|
end
|
2017-06-13 16:10:14 +08:00
|
|
|
end
|
|
|
|
|
|
|
|
def request_membership
|
|
|
|
unless current_user.staff?
|
|
|
|
RateLimiter.new(current_user, "request_group_membership", 1, 1.day).performed!
|
|
|
|
end
|
2015-01-09 07:35:52 +08:00
|
|
|
|
2017-06-13 16:10:14 +08:00
|
|
|
group = find_group(:id)
|
|
|
|
group_name = group.name
|
2017-06-15 11:36:09 +08:00
|
|
|
|
|
|
|
usernames = [current_user.username].concat(
|
|
|
|
group.users.where('group_users.owner')
|
|
|
|
.order("users.last_seen_at DESC")
|
|
|
|
.limit(5)
|
|
|
|
.pluck("users.username")
|
|
|
|
)
|
2017-06-13 16:10:14 +08:00
|
|
|
|
|
|
|
post = PostCreator.new(current_user,
|
|
|
|
title: I18n.t('groups.request_membership_pm.title', group_name: group_name),
|
|
|
|
raw: I18n.t('groups.request_membership_pm.body', group_name: group_name),
|
|
|
|
archetype: Archetype.private_message,
|
2017-06-15 11:36:09 +08:00
|
|
|
target_usernames: usernames.join(','),
|
2017-06-13 16:10:14 +08:00
|
|
|
skip_validations: true
|
|
|
|
).create!
|
|
|
|
|
|
|
|
render json: success_json.merge(relative_url: post.topic.relative_url)
|
2015-01-09 07:35:52 +08:00
|
|
|
end
|
|
|
|
|
2015-12-15 06:17:09 +08:00
|
|
|
def set_notifications
|
|
|
|
group = find_group(:id)
|
|
|
|
notification_level = params.require(:notification_level)
|
|
|
|
|
2017-04-21 03:47:25 +08:00
|
|
|
user_id = current_user.id
|
|
|
|
if guardian.is_staff?
|
|
|
|
user_id = params[:user_id] || user_id
|
|
|
|
end
|
|
|
|
|
2015-12-15 06:17:09 +08:00
|
|
|
GroupUser.where(group_id: group.id)
|
2017-04-21 03:47:25 +08:00
|
|
|
.where(user_id: user_id)
|
2015-12-15 06:17:09 +08:00
|
|
|
.update_all(notification_level: notification_level)
|
|
|
|
|
|
|
|
render json: success_json
|
|
|
|
end
|
|
|
|
|
2016-12-11 23:36:15 +08:00
|
|
|
def histories
|
|
|
|
group = find_group(:group_id)
|
|
|
|
guardian.ensure_can_edit!(group)
|
|
|
|
|
|
|
|
page_size = 25
|
|
|
|
offset = (params[:offset] && params[:offset].to_i) || 0
|
|
|
|
|
|
|
|
group_histories = GroupHistory.with_filters(group, params[:filters])
|
|
|
|
.limit(page_size)
|
|
|
|
.offset(offset * page_size)
|
|
|
|
|
|
|
|
render_json_dump(
|
|
|
|
logs: serialize_data(group_histories, BasicGroupHistorySerializer),
|
|
|
|
all_loaded: group_histories.count < page_size
|
|
|
|
)
|
|
|
|
end
|
|
|
|
|
2014-02-19 05:43:02 +08:00
|
|
|
private
|
|
|
|
|
2016-11-29 16:25:02 +08:00
|
|
|
def group_params
|
2016-12-05 16:18:24 +08:00
|
|
|
params.require(:group).permit(
|
|
|
|
:flair_url,
|
|
|
|
:flair_bg_color,
|
|
|
|
:flair_color,
|
2016-12-07 10:26:28 +08:00
|
|
|
:bio_raw,
|
2016-12-13 16:16:26 +08:00
|
|
|
:full_name,
|
2016-12-12 22:46:45 +08:00
|
|
|
:public,
|
|
|
|
:allow_membership_requests
|
2016-12-05 16:18:24 +08:00
|
|
|
)
|
2016-11-29 16:25:02 +08:00
|
|
|
end
|
|
|
|
|
|
|
|
def find_group(param_name)
|
|
|
|
name = params.require(param_name)
|
|
|
|
group = Group.find_by("lower(name) = ?", name.downcase)
|
|
|
|
guardian.ensure_can_see!(group)
|
|
|
|
group
|
|
|
|
end
|
2014-02-19 05:43:02 +08:00
|
|
|
|
2014-01-31 06:10:36 +08:00
|
|
|
end
|