| 12345678910111213141516171819202122 |
- EditorHttpController = require('./EditorHttpController')
- SecurityManager = require('../../managers/SecurityManager')
- module.exports =
- apply: (app, httpAuth) ->
- app.post '/project/:Project_id/doc', SecurityManager.requestCanModifyProject, EditorHttpController.addDoc
- app.post '/project/:Project_id/folder', SecurityManager.requestCanModifyProject, EditorHttpController.addFolder
- app.post '/project/:Project_id/:entity_type/:entity_id/rename', SecurityManager.requestCanModifyProject, EditorHttpController.renameEntity
- app.post '/project/:Project_id/:entity_type/:entity_id/move', SecurityManager.requestCanModifyProject, EditorHttpController.moveEntity
- app.delete '/project/:Project_id/file/:entity_id', SecurityManager.requestCanModifyProject, EditorHttpController.deleteFile
- app.delete '/project/:Project_id/doc/:entity_id', SecurityManager.requestCanModifyProject, EditorHttpController.deleteDoc
- app.delete '/project/:Project_id/folder/:entity_id', SecurityManager.requestCanModifyProject, EditorHttpController.deleteFolder
- app.post '/project/:Project_id/doc/:doc_id/restore', SecurityManager.requestCanModifyProject, EditorHttpController.restoreDoc
- # Called by the real-time API to load up the current project state.
- # This is a post request because it's more than just a getting of data. We take actions
- # whenever a user joins a project, like updating the deleted status.
- app.post '/project/:Project_id/join', httpAuth, EditorHttpController.joinProject
- app.ignoreCsrf('post', '/project/:Project_id/join')
|
