# Copyright (C) 2012-2014 Zammad Foundation, http://zammad-foundation.org/ class TicketArticlesController < ApplicationController before_filter :authentication_check # GET /articles def index @articles = Ticket::Article.all render :json => @articles end # GET /articles/1 def show @article = Ticket::Article.find( params[:id] ) render :json => @article end # POST /articles def create form_id = params[:ticket_article][:form_id] params[:ticket_article].delete(:form_id) @article = Ticket::Article.new( Ticket::Article.param_validation( params[:ticket_article] ) ) # find attachments in upload cache if form_id @article.attachments = Store.list( :object => 'UploadCache', :o_id => form_id, ) end if @article.save # remove attachments from upload cache Store.remove( :object => 'UploadCache', :o_id => form_id, ) render :json => @article, :status => :created else render :json => @article.errors, :status => :unprocessable_entity end end # PUT /articles/1 def update @article = Ticket::Article.find( params[:id] ) if @article.update_attributes( Ticket::Article.param_validation( params[:ticket_article] ) ) render :json => @article, :status => :ok else render :json => @article.errors, :status => :unprocessable_entity end end # DELETE /articles/1 def destroy @article = Ticket::Article.find( params[:id] ) @article.destroy head :ok end # DELETE /ticket_attachment_upload def ticket_attachment_upload_delete Store.remove_item( params[:store_id] ) # return result render :json => { :success => true, } end # POST /ticket_attachment_upload def ticket_attachment_upload_add # store file file = params[:File] content_type = file.content_type if !content_type || content_type == 'application/octet-stream' if MIME::Types.type_for(file.original_filename).first content_type = MIME::Types.type_for(file.original_filename).first.content_type else content_type = 'application/octet-stream' end end headers_store = { 'Content-Type' => content_type } store = Store.add( :object => 'UploadCache', :o_id => params[:form_id], :data => file.read, :filename => file.original_filename, :preferences => headers_store ) # return result render :json => { :success => true, :data => { :store_id => store.id, :filename => file.original_filename, :size => store.size, } } end # GET /ticket_attachment/1 def attachment # permissin check ticket = Ticket.find( params[:ticket_id] ) if !ticket_permission(ticket) render( :json => 'No such ticket.', :status => :unauthorized ) return end article = Ticket::Article.find( params[:article_id] ) if ticket.id != article.ticket_id render( :json => 'No access, article_id/ticket_id is not matching.', :status => :unauthorized ) return end list = article.attachments || [] access = false list.each {|item| if item.id.to_i == params[:id].to_i access = true end } if !access render( :json => 'Requested file id is not linked with article_id.', :status => :unauthorized ) return end # find file file = Store.find(params[:id]) send_data( file.content, :filename => file.filename, :type => file.preferences['Content-Type'] || file.preferences['Mime-Type'], :disposition => 'inline' ) end # GET /ticket_article_plain/1 def article_plain # permissin check article = Ticket::Article.find( params[:id] ) return if !ticket_permission( article.ticket ) list = Store.list( :object => 'Ticket::Article::Mail', :o_id => params[:id], ) # find file if list file = Store.find(list.first) send_data( file.content, :filename => file.filename, :type => 'message/rfc822', :disposition => 'inline' ) end end end