32145484c2
We disallow repeating a notice (or whatever) if the scope of the notice is too private. So, only notices that are public scope (available to everyone in the world) or site scope (available to everyone on the site) can be repeated. Enforce this rule at a low level in Notice.php, and in the API, commands, and Web UI. Repeat button doesn't appear on tightly-scoped notices in the Web UI.
144 lines
4.4 KiB
PHP
144 lines
4.4 KiB
PHP
<?php
|
|
/**
|
|
* Repeat action.
|
|
*
|
|
* PHP version 5
|
|
*
|
|
* @category Action
|
|
* @package StatusNet
|
|
* @author Evan Prodromou <evan@status.net>
|
|
* @license http://www.fsf.org/licensing/licenses/agpl.html AGPLv3
|
|
* @link http://status.net/
|
|
*
|
|
* StatusNet - the distributed open-source microblogging tool
|
|
* Copyright (C) 2008, 2009, StatusNet, Inc.
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
if (!defined('STATUSNET')) {
|
|
exit(1);
|
|
}
|
|
|
|
/**
|
|
* Repeat action
|
|
*
|
|
* @category Action
|
|
* @package StatusNet
|
|
* @author Evan Prodromou <evan@status.net>
|
|
* @license http://www.fsf.org/licensing/licenses/agpl.html AGPLv3
|
|
* @link http://status.net/
|
|
*/
|
|
class RepeatAction extends Action
|
|
{
|
|
var $user = null;
|
|
var $notice = null;
|
|
|
|
function prepare($args)
|
|
{
|
|
parent::prepare($args);
|
|
|
|
$this->user = common_current_user();
|
|
|
|
if (empty($this->user)) {
|
|
// TRANS: Client error displayed when trying to repeat a notice while not logged in.
|
|
$this->clientError(_('Only logged-in users can repeat notices.'));
|
|
return false;
|
|
}
|
|
|
|
$id = $this->trimmed('notice');
|
|
|
|
if (empty($id)) {
|
|
// TRANS: Client error displayed when trying to repeat a notice while not providing a notice ID.
|
|
$this->clientError(_('No notice specified.'));
|
|
return false;
|
|
}
|
|
|
|
$this->notice = Notice::staticGet('id', $id);
|
|
|
|
if (empty($this->notice)) {
|
|
// TRANS: Client error displayed when trying to repeat a non-existing notice.
|
|
$this->clientError(_('No notice specified.'));
|
|
return false;
|
|
}
|
|
|
|
// Is it OK to repeat that notice (general enough scope)?
|
|
|
|
if ($this->notice->scope != Notice::SITE_SCOPE &&
|
|
$this->notice->scope != Notice::PUBLIC_SCOPE) {
|
|
$this->clientError(_('You may not repeat a private notice.'),
|
|
403);
|
|
}
|
|
|
|
if ($this->user->id == $this->notice->profile_id) {
|
|
// TRANS: Client error displayed when trying to repeat an own notice.
|
|
$this->clientError(_('You cannot repeat your own notice.'));
|
|
return false;
|
|
}
|
|
|
|
$token = $this->trimmed('token-'.$id);
|
|
|
|
if (empty($token) || $token != common_session_token()) {
|
|
$this->clientError(_('There was a problem with your session token. Try again, please.'));
|
|
return false;
|
|
}
|
|
|
|
$profile = $this->user->getProfile();
|
|
|
|
// Can the profile actually see that notice?
|
|
|
|
if (!$this->notice->inScope($profile)) {
|
|
$this->clientError(_('No access to that notice.'), 403);
|
|
}
|
|
|
|
|
|
if ($profile->hasRepeated($id)) {
|
|
// TRANS: Client error displayed when trying to repeat an already repeated notice.
|
|
$this->clientError(_('You already repeated that notice.'));
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Class handler.
|
|
*
|
|
* @param array $args query arguments
|
|
*
|
|
* @return void
|
|
*/
|
|
function handle($args)
|
|
{
|
|
$repeat = $this->notice->repeat($this->user->id, 'web');
|
|
|
|
if ($this->boolean('ajax')) {
|
|
$this->startHTML('text/xml;charset=utf-8');
|
|
$this->elementStart('head');
|
|
// TRANS: Title after repeating a notice.
|
|
$this->element('title', null, _('Repeated'));
|
|
$this->elementEnd('head');
|
|
$this->elementStart('body');
|
|
$this->element('p', array('id' => 'repeat_response',
|
|
'class' => 'repeated'),
|
|
// TRANS: Confirmation text after repeating a notice.
|
|
_('Repeated!'));
|
|
$this->elementEnd('body');
|
|
$this->elementEnd('html');
|
|
} else {
|
|
// @todo FIXME!
|
|
}
|
|
}
|
|
}
|