mirror of
https://github.com/discourse/discourse.git
synced 2024-12-15 06:53:40 +08:00
30990006a9
This reduces chances of errors where consumers of strings mutate inputs and reduces memory usage of the app. Test suite passes now, but there may be some stuff left, so we will run a few sites on a branch prior to merging
73 lines
2.4 KiB
Ruby
73 lines
2.4 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require_dependency 'queued_post_serializer'
|
|
|
|
class QueuedPostsController < ApplicationController
|
|
|
|
before_action :ensure_staff
|
|
|
|
def index
|
|
Discourse.deprecate("QueuedPostController#index is deprecated. Please use the Reviewable API instead.", since: "2.3.0beta5", drop_from: "2.4")
|
|
|
|
status = params[:state] || 'pending'
|
|
status = 'pending' if status == 'new'
|
|
|
|
reviewables = Reviewable.list_for(current_user, status: status.to_sym, type: ReviewableQueuedPost.name)
|
|
render_serialized(reviewables,
|
|
QueuedPostSerializer,
|
|
root: :queued_posts,
|
|
rest_serializer: true,
|
|
refresh_queued_posts: "/queued_posts?status=new")
|
|
end
|
|
|
|
def update
|
|
Discourse.deprecate("QueuedPostController#update is deprecated. Please use the Reviewable API instead.", since: "2.3.0beta5", drop_from: "2.4")
|
|
reviewable = Reviewable.find_by(id: params[:id])
|
|
raise Discourse::NotFound if reviewable.blank?
|
|
|
|
update_params = params[:queued_post]
|
|
|
|
reviewable.payload['raw'] = update_params[:raw] if update_params[:raw].present?
|
|
if reviewable.topic_id.blank? && update_params[:state].blank?
|
|
reviewable.payload['title'] = update_params[:title] if update_params[:title].present?
|
|
reviewable.payload['tags'] = update_params[:tags]
|
|
reviewable.category_id = update_params[:category_id].to_i if update_params[:category_id].present?
|
|
end
|
|
|
|
reviewable.save(validate: false)
|
|
|
|
state = update_params[:state]
|
|
begin
|
|
if state == 'approved'
|
|
reviewable.perform(current_user, :approve_post)
|
|
elsif state == 'rejected'
|
|
reviewable.perform(current_user, :reject_post)
|
|
if update_params[:delete_user] == 'true' && guardian.can_delete_user?(reviewable.created_by)
|
|
UserDestroyer.new(current_user).destroy(reviewable.created_by, user_deletion_opts)
|
|
end
|
|
end
|
|
rescue StandardError => e
|
|
return render_json_error e.message
|
|
end
|
|
|
|
render_serialized(reviewable, QueuedPostSerializer, root: :queued_posts)
|
|
end
|
|
|
|
private
|
|
|
|
def user_deletion_opts
|
|
base = {
|
|
context: I18n.t('queue.delete_reason', performed_by: current_user.username),
|
|
delete_posts: true,
|
|
delete_as_spammer: true
|
|
}
|
|
|
|
if Rails.env.production? && ENV["Staging"].nil?
|
|
base.merge!(block_email: true, block_ip: true)
|
|
end
|
|
|
|
base
|
|
end
|
|
|
|
end
|