First checkin

app/controllers/event_attachments_controller.rb

@@ -0,0 +1,97 @@
+class EventAttachmentsController < ApplicationController
+  before_filter :verify_user
+  skip_before_filter :verify_user, :only => [:show]
+
+  def index
+    @proposal = current_user.person.events.find(params[:proposal_id])
+    @uploads = @proposal.event_attachments
+
+    respond_to do |format|
+      format.html # index.html.erb
+      format.json { render json: @uploads.map{|upload| upload.to_jq_upload } }
+    end
+  end
+
+  def show
+    upload = EventAttachment.find(params[:id])
+    if upload.public?
+      send_file upload.attachment.path
+      return
+    end
+
+    if current_user.nil?
+      verify_user
+      return
+    end
+
+    if organizer_or_admin? || current_user.person == upload.event.submitter
+      send_file upload.attachment.path
+    else
+      raise ActionController::RoutingError.new('Not Found')
+    end
+  end
+
+  def new
+    @upload = EventAttachment.new
+
+    respond_to do |format|
+      format.html # new.html.erb
+      format.json { render json: @upload }
+    end
+  end
+
+  def edit
+    @upload = EventAttachment.find(params[:id])
+  end
+
+  def create
+    params[:event_attachment][:title] = params[:title][0]
+    params[:event_attachment][:public] = false
+    params[:event_attachment][:event_id] = params[:proposal_id]
+
+    if params.has_key?(:public)
+      params[:event_attachment][:public] = true
+    end
+    @upload = EventAttachment.new(params[:event_attachment])
+
+    respond_to do |format|
+      if @upload.save
+        format.html {
+          render :json => [@upload.to_jq_upload].to_json,
+                 :content_type => 'text/html',
+                 :layout => false
+        }
+        format.json { render json: [@upload.to_jq_upload].to_json, status: :created,
+                             location: conference_proposal_event_attachment_path(@upload.event.conference.short_title, @upload.event, @upload) }
+      else
+        format.html { render action: "new" }
+        format.json { render json: @upload.errors, status: :unprocessable_entity }
+      end
+    end
+  end
+
+  def update
+    @upload = EventAttachment.find(params[:proposal_id])
+
+    respond_to do |format|
+      if @upload.update_attributes(params[:upload])
+        format.html { redirect_to @upload, notice: 'Upload was successfully updated.' }
+        format.json { head :no_content }
+      else
+        format.html { render action: "edit" }
+        format.json { render json: @upload.errors, status: :unprocessable_entity }
+      end
+    end
+  end
+
+  def destroy
+    @proposal = current_user.person.events.find(params[:proposal_id])
+    @upload = @proposal.event_attachments.find(params[:id])
+    @upload.destroy
+
+    respond_to do |format|
+      format.html { redirect_to uploads_url }
+      format.json { head :no_content }
+    end
+  end
+end