[91] | 1 | import org.codehaus.groovy.grails.plugins.springsecurity.Secured |
---|
| 2 | |
---|
[298] | 3 | @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager', 'ROLE_TaskUser']) |
---|
[91] | 4 | class EntryDetailedController extends BaseController { |
---|
| 5 | |
---|
[291] | 6 | def authService |
---|
[186] | 7 | def taskService |
---|
[147] | 8 | |
---|
[91] | 9 | def index = { redirect(action:list,params:params) } |
---|
| 10 | |
---|
| 11 | // the delete, save and update actions only accept POST requests |
---|
| 12 | static allowedMethods = [delete:'POST', save:'POST', update:'POST'] |
---|
| 13 | |
---|
| 14 | def list = { |
---|
| 15 | if(!params.max) params.max = 10 |
---|
| 16 | [ entryInstanceList: Entry.list( params ) ] |
---|
| 17 | } |
---|
| 18 | |
---|
| 19 | def show = { |
---|
| 20 | def entryInstance = Entry.get( params.id ) |
---|
| 21 | |
---|
| 22 | if(!entryInstance) { |
---|
| 23 | flash.message = "Entry not found with id ${params.id}" |
---|
[186] | 24 | redirect(controller: 'taskDetailed', action: 'search') |
---|
[91] | 25 | } |
---|
| 26 | else { return [ entryInstance : entryInstance ] } |
---|
| 27 | } |
---|
| 28 | |
---|
| 29 | def delete = { |
---|
| 30 | def entryInstance = Entry.get( params.id ) |
---|
| 31 | if(entryInstance) { |
---|
[291] | 32 | if(entryInstance.enteredBy.loginName == authService.currentUser.loginName) { |
---|
[185] | 33 | def taskID = entryInstance.task.id |
---|
| 34 | entryInstance.delete(flush:true) |
---|
[98] | 35 | flash.message = "Entry ${params.id} deleted" |
---|
[185] | 36 | redirect(controller: 'taskDetailed', action: 'show', id: taskID) |
---|
[98] | 37 | } |
---|
| 38 | else { |
---|
| 39 | flash.message = "You may only delete your own entries." |
---|
| 40 | redirect(action:show,id:entryInstance.id) |
---|
| 41 | } |
---|
| 42 | |
---|
[91] | 43 | } |
---|
| 44 | else { |
---|
| 45 | flash.message = "Entry not found with id ${params.id}" |
---|
[186] | 46 | redirect(controller: "taskDetailed", action:"search") |
---|
[91] | 47 | } |
---|
| 48 | } |
---|
| 49 | |
---|
| 50 | def edit = { |
---|
| 51 | def entryInstance = Entry.get( params.id ) |
---|
| 52 | if(!entryInstance) { |
---|
[98] | 53 | flash.message = "Entry not found with id ${params.id}" |
---|
[186] | 54 | redirect(controller: "taskDetailed", action:"search") |
---|
[91] | 55 | } |
---|
| 56 | else { |
---|
[98] | 57 | |
---|
[291] | 58 | if(entryInstance.enteredBy.loginName == authService.currentUser.loginName) { |
---|
[98] | 59 | return [ entryInstance : entryInstance ] |
---|
| 60 | } |
---|
| 61 | else { |
---|
| 62 | flash.message = "You may only edit your own entries." |
---|
| 63 | redirect(action:show,id:entryInstance.id) |
---|
| 64 | } |
---|
| 65 | |
---|
[91] | 66 | } |
---|
| 67 | } |
---|
| 68 | |
---|
| 69 | def update = { |
---|
| 70 | def entryInstance = Entry.get( params.id ) |
---|
| 71 | if(entryInstance) { |
---|
[185] | 72 | // The update method only accepts post requests, so this is just in case. |
---|
[291] | 73 | if(entryInstance.enteredBy.loginName == authService.currentUser.loginName) { |
---|
[185] | 74 | entryInstance.properties = params |
---|
| 75 | if(!entryInstance.hasErrors() && entryInstance.save(flush: true)) { |
---|
| 76 | flash.message = "Entry ${params.id} updated" |
---|
| 77 | redirect(action:show,id:entryInstance.id) |
---|
| 78 | } |
---|
| 79 | else { |
---|
| 80 | render(view:'edit',model:[entryInstance:entryInstance]) |
---|
| 81 | } |
---|
[91] | 82 | } |
---|
| 83 | else { |
---|
[185] | 84 | flash.message = "You may only edit your own entries." |
---|
| 85 | redirect(action:show,id:entryInstance.id) |
---|
[91] | 86 | } |
---|
| 87 | } |
---|
| 88 | else { |
---|
| 89 | flash.message = "Entry not found with id ${params.id}" |
---|
[186] | 90 | redirect(controller: "taskDetailed", action:"search") |
---|
[91] | 91 | } |
---|
| 92 | } |
---|
| 93 | |
---|
| 94 | def create = { |
---|
[98] | 95 | try { |
---|
| 96 | def taskInstance = Task.get(params.taskInstance.id) |
---|
| 97 | def entryInstance = new Entry() |
---|
| 98 | entryInstance.task = taskInstance |
---|
[191] | 99 | entryInstance.entryType = EntryType.get(params.entryType.id) |
---|
[98] | 100 | return ['entryInstance':entryInstance] |
---|
| 101 | } |
---|
| 102 | catch(Exception e) { |
---|
[186] | 103 | flash.message = "Please select a task, then 'Add Entry'." |
---|
| 104 | redirect(controller:"taskDetailed", action:"search") |
---|
[98] | 105 | } |
---|
[91] | 106 | } |
---|
| 107 | |
---|
| 108 | def save = { |
---|
[186] | 109 | def result = taskService.createEntry(params) |
---|
[91] | 110 | |
---|
[186] | 111 | if(!result.error) { |
---|
| 112 | flash.message = "Entry created." |
---|
| 113 | redirect(controller: "taskDetailed", action: "show", id: result.taskId) |
---|
[91] | 114 | } |
---|
| 115 | else { |
---|
[186] | 116 | if(result.entryInstance) { |
---|
| 117 | render(view:'create',model:[entryInstance: result.entryInstance]) |
---|
| 118 | } |
---|
| 119 | else { |
---|
| 120 | flash.message = "Could not create entry." |
---|
| 121 | redirect(controller: "taskDetailed", action:"search") |
---|
| 122 | } |
---|
| 123 | |
---|
[91] | 124 | } |
---|
| 125 | } |
---|
[186] | 126 | |
---|
[91] | 127 | } |
---|