# encoding: utf-8 # # Redmine plugin for Document Management System "Features" # # Copyright (C) 2011 Vít Jonáš # Copyright (C) 2011-17 Karel Pičman # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. class DmsfUploadController < ApplicationController unloadable menu_item :dmsf before_action :find_project, :except => [:upload, :delete_dmsf_attachment, :delete_dmsf_link_attachment] before_action :authorize, :except => [:upload, :delete_dmsf_attachment, :delete_dmsf_link_attachment] before_action :authorize_global, :only => [:upload, :delete_dmsf_attachment, :delete_dmsf_link_attachment] before_action :find_folder, :except => [:upload_file, :upload, :commit, :delete_dmsf_attachment, :delete_dmsf_link_attachment] before_action :permissions, :except => [:upload_file, :upload, :commit, :delete_dmsf_attachment, :delete_dmsf_link_attachment] helper :all helper :dmsf_workflows accept_api_auth :upload, :commit def permissions render_403 unless DmsfFolder.permissions?(@folder) true end def upload_files uploaded_files = params[:dmsf_attachments] @uploads = [] if uploaded_files && uploaded_files.is_a?(Hash) # standard file input uploads uploaded_files.each_value do |uploaded_file| upload = DmsfUpload.create_from_uploaded_attachment(@project, @folder, uploaded_file) @uploads.push(upload) if upload end else # plupload multi upload completed uploaded = params[:uploaded] if uploaded && uploaded.is_a?(Hash) uploaded.each_value do |uploaded_file| @uploads.push(DmsfUpload.new(@project, @folder, uploaded_file)) end end end end # async single file upload handling def upload_file @tempfile = params[:file] unless @tempfile.original_filename render_404 return end @disk_filename = DmsfHelper.temp_filename(@tempfile.original_filename) @tempfile_path = "#{DmsfHelper.temp_dir}/#{@disk_filename}" File.open(@tempfile_path, 'wb') do |f| if params[:file].respond_to?(:read) while (buffer = @tempfile.read(8192)) f.write(buffer) end else f.write(@tempfile) end end render :layout => false end # REST API and Redmine attachment form def upload unless request.content_type == 'application/octet-stream' head 406 return end @attachment = Attachment.new(:file => request.raw_post) @attachment.author = User.current @attachment.filename = params[:filename].presence || Redmine::Utils.random_hex(16) @attachment.content_type = params[:content_type].presence saved = @attachment.save respond_to do |format| format.js format.api { if saved render :action => 'upload', :status => :created else render_validation_errors(@attachment) end } end end def commit_files commit_files_internal params[:commited_files] end # REST API file commit def commit @files = [] attachments = params[:attachments] if attachments && attachments.is_a?(Hash) @folder = DmsfFolder.visible.find_by_id attachments[:folder_id].to_i if attachments[:folder_id].present? # standard file input uploads uploaded_files = attachments.select { |key, value| key == 'uploaded_file'} uploaded_files.each_value do |uploaded_file| upload = DmsfUpload.create_from_uploaded_attachment(@project, @folder, uploaded_file) if upload uploaded_file[:disk_filename] = upload.disk_filename uploaded_file[:tempfile_path] = upload.tempfile_path end end commit_files_internal uploaded_files end end def delete_dmsf_attachment attachment = Attachment.find(params[:id]) attachment.destroy rescue ActiveRecord::RecordNotFound render_404 end def delete_dmsf_link_attachment link = DmsfLink.find(params[:id]) link.destroy rescue ActiveRecord::RecordNotFound render_404 end private def commit_files_internal(commited_files) @files, failed_uploads = DmsfUploadHelper.commit_files_internal(commited_files, @project, @folder, self) respond_to do |format| format.js format.api { render_validation_errors(failed_uploads) unless failed_uploads.empty? } format.html { redirect_to dmsf_folder_path(:id => @project, :folder_id => @folder) } end end def find_folder @folder = DmsfFolder.visible.find(params[:folder_id]) if params.keys.include?('folder_id') rescue DmsfAccessError render_403 end end