Show More
Commit Description:
fixed seed script
Commit Description:
fixed seed script
References:
File last commit:
Show/Diff file:
Action:
Last Author
Show All-
Jittat Fakcharoenphol-
app/controllers/tasks_controller.rb
| 54 lines
| 1.5 KiB
| text/x-ruby
| RubyLexer
|
jittat
|
r88 | class TasksController < ApplicationController | ||
|
jittat
|
r122 | before_filter :authenticate, :check_viewability | ||
|
jittat
|
r88 | |||
| def index | ||||
| redirect_to :action => 'list' | ||||
| end | ||||
| def list | ||||
| @problems = Problem.find_available_problems | ||||
| @user = User.find(session[:user_id]) | ||||
| end | ||||
|
jittat
|
r130 | def view | ||
Jittat Fakcharoenphol
|
r271 | base_name = params[:file] | ||
| if !check_user_viewability(base_name) | ||||
| redirect_to :action => 'index' and return | ||||
| end | ||||
| base_filename = File.basename("#{base_name}.#{params[:ext]}") | ||||
| filename = "#{Problem.download_file_basedir}/#{base_filename}" | ||||
| if !check_user_viewability(base_name) or !FileTest.exists?(filename) | ||||
|
jittat
|
r130 | redirect_to :action => 'index' and return | ||
| end | ||||
|
jittat
|
r133 | |||
|
jittat
|
r172 | if defined?(USE_APACHE_XSENDFILE) and USE_APACHE_XSENDFILE | ||
| response.headers['Content-Type'] = "application/force-download" | ||||
| response.headers['Content-Disposition'] = "attachment; filename=\"#{File.basename(filename)}\"" | ||||
| response.headers["X-Sendfile"] = filename | ||||
| response.headers['Content-length'] = File.size(filename) | ||||
| render :nothing => true | ||||
| else | ||||
| send_file filename, :stream => false, :filename => base_filename | ||||
| end | ||||
|
jittat
|
r130 | end | ||
|
jittat
|
r122 | protected | ||
| def check_viewability | ||||
|
Jittat Fakcharoenphol
|
r271 | @user = User.find(session[:user_id]) | ||
| if @user==nil or !Configuration.show_tasks_to?(@user) | ||||
|
jittat
|
r122 | redirect_to :controller => 'main', :action => 'list' | ||
| return false | ||||
| end | ||||
| end | ||||
|
Jittat Fakcharoenphol
|
r271 | def check_user_viewability(filename) | ||
| # individual file access control shall be added here | ||||
| return false if not @user | ||||
| return Configuration.show_tasks_to?(@user) | ||||
| end | ||||
|
jittat
|
r88 | end | ||