mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-24 19:33:02 +03:00
74549ddc59
closes #3446, closes #3086 - Authors can only ever get to their own posts - Editors only ever see authors in the user list
99 lines
3.3 KiB
JavaScript
99 lines
3.3 KiB
JavaScript
import base from 'ghost/mixins/editor-route-base';
|
|
|
|
var EditorEditRoute = Ember.Route.extend(SimpleAuth.AuthenticatedRouteMixin, base, {
|
|
classNames: ['editor'],
|
|
|
|
model: function (params) {
|
|
var self = this,
|
|
post,
|
|
postId,
|
|
paginationSettings;
|
|
|
|
postId = Number(params.post_id);
|
|
|
|
if (!_.isNumber(postId) || !_.isFinite(postId) || postId % 1 !== 0 || postId <= 0) {
|
|
return this.transitionTo('error404', 'editor/' + params.post_id);
|
|
}
|
|
|
|
post = this.store.getById('post', postId);
|
|
|
|
if (post) {
|
|
return post;
|
|
}
|
|
|
|
paginationSettings = {
|
|
id: postId,
|
|
status: 'all',
|
|
staticPages: 'all'
|
|
};
|
|
|
|
return this.store.find('user', 'me').then(function (user) {
|
|
if (user.get('isAuthor')) {
|
|
paginationSettings.author = user.get('slug');
|
|
}
|
|
|
|
return self.store.find('post', paginationSettings).then(function (records) {
|
|
var post = records.get('firstObject');
|
|
|
|
if (user.get('isAuthor') && post.isAuthoredByUser(user)) {
|
|
// do not show the post if they are an author but not this posts author
|
|
post = null;
|
|
}
|
|
|
|
if (post) {
|
|
return post;
|
|
}
|
|
|
|
return self.transitionTo('posts.index');
|
|
});
|
|
});
|
|
},
|
|
|
|
serialize: function (model) {
|
|
return {post_id: model.get('id')};
|
|
},
|
|
|
|
setupController: function (controller, model) {
|
|
this._super(controller, model);
|
|
controller.set('scratch', model.get('markdown'));
|
|
// used to check if anything has changed in the editor
|
|
controller.set('previousTagNames', model.get('tags').mapBy('name'));
|
|
|
|
// attach model-related listeners created in editor-route-base
|
|
this.attachModelHooks(controller, model);
|
|
},
|
|
|
|
actions: {
|
|
willTransition: function (transition) {
|
|
var controller = this.get('controller'),
|
|
isDirty = controller.get('isDirty'),
|
|
|
|
model = controller.get('model'),
|
|
isSaving = model.get('isSaving'),
|
|
isDeleted = model.get('isDeleted'),
|
|
modelIsDirty = model.get('isDirty');
|
|
|
|
// when `isDeleted && isSaving`, model is in-flight, being saved
|
|
// to the server. when `isDeleted && !isSaving && !modelIsDirty`,
|
|
// the record has already been deleted and the deletion persisted.
|
|
//
|
|
// in either case we can probably just transition now.
|
|
// in the former case the server will return the record, thereby updating it.
|
|
// @TODO: this will break if the model fails server-side validation.
|
|
if (!(isDeleted && isSaving) && !(isDeleted && !isSaving && !modelIsDirty) && isDirty) {
|
|
transition.abort();
|
|
this.send('openModal', 'leave-editor', [controller, transition]);
|
|
return;
|
|
}
|
|
|
|
// since the transition is now certain to complete..
|
|
window.onbeforeunload = null;
|
|
|
|
// remove model-related listeners created in editor-route-base
|
|
this.detachModelHooks(controller, model);
|
|
}
|
|
}
|
|
});
|
|
|
|
export default EditorEditRoute;
|