1 files changed, 54 insertions, 0 deletions
diff --git a/app/controllers/comment_controller.rb b/app/controllers/comment_controller.rb
new file mode 100644
index 000000000..d852ffe17
--- /dev/null
+++ b/app/controllers/comment_controller.rb
@@ -0,0 +1,54 @@
+# app/controllers/comment_controller.rb:
+# Show annotations upon a request or other object.
+#
+# Copyright (c) 2008 UK Citizens Online Democracy. All rights reserved.
+# Email: francis@mysociety.org; WWW: http://www.mysociety.org/
+#
+# $Id: comment_controller.rb,v 1.1 2008-08-13 01:39:41 francis Exp $
+
+class CommentController < ApplicationController
+    
+    def new
+        if params[:type] == 'request'
+            @info_request = InfoRequest.find_by_url_title(params[:url_title])
+            @comment = Comment.new(params[:comment].merge({
+                :comment_type => 'request', 
+                :user => @user
+            }))
+
+        else
+            raise "Unknown type " + params[:type]
+        end
+
+        # XXX this check should theoretically be a validation rule in the model
+        #@existing_comment = Comment.find_by_existing_comment(params[:info_request][:title], params[:info_request][:public_body_id], params[:outgoing_message][:body])
+        
+        # See if values were valid or not
+        if !@comment.valid? || params[:reedit]
+            render :action => 'new'
+            return
+        end
+
+        # Show preview page, if it is a preview
+        if params[:preview].to_i == 1
+            render :action => 'preview'
+            return
+        end
+
+        if authenticated?(
+                :web => "To post your annotation",
+                :email => "Then your annotation to " + @info_request.title + " will be posted.",
+                :email_subject => "Confirm your annotation to " + @info_request.title
+            )
+            @info_request.add_comment(params[:comment][:body], authenticated_user)
+            # This automatically saves dependent objects in the same transaction
+            @info_request.save!
+            flash[:notice] = "Thank you for making an annotation!"
+            redirect_to request_url(@info_request)
+        else
+            # do nothing - as "authenticated?" has done the redirect to signin page for us
+        end
+    end
+
+end
+