// posting edited comment
@RequestMapping(
value = "/posts/{postId:\\d+}/comments/{commentId:\\d+}/edit",
method = RequestMethod.POST)
public String onPostCommentEdit(
@PathVariable long postId,
@PathVariable long commentId,
Model model,
Principal principal,
@Valid Comment editedComment,
BindingResult result) {
Comment oldComment = commentService.findById(commentId);
Post post = postService.findById(postId);
if (oldComment != null
&& post != null
&& post.getPostId() == oldComment.getPost().getPostId()) {
if (result.hasErrors()) {
model.addAttribute("logged_user", principal.getName());
model.addAttribute("post", post);
model.addAttribute("comments", commentService.findAllCommentsOfPost(postId));
return "comment_edit";
} else {
commentService.merge(oldComment, editedComment);
return "redirect:/posts/" + postId + "/comments";
}
} else return "404";
}
// comment permalink
@RequestMapping(
value = "/posts/{postId:\\d+}/comments/{commentId:\\d+}",
method = RequestMethod.GET)
public String commentPermalink(
@PathVariable long postId, @PathVariable long commentId, Model model, Principal principal) {
Comment comment = commentService.findById(commentId);
if (comment != null) {
model.addAttribute("comment", comment);
model.addAttribute("logged_user", principal.getName());
return "comment_view";
} else return "404";
}
// comment edit page
@RequestMapping(
value = "/posts/{postId:\\d+}/comments/{commentId:\\d+}/edit",
method = RequestMethod.GET)
public String onGetCommentEdit(
@PathVariable long postId, @PathVariable long commentId, Model model, Principal principal) {
Comment comment = commentService.findById(commentId);
Post post = postService.findById(postId);
if (comment != null && post != null && post.getPostId() == comment.getPost().getPostId()) {
if (comment.getUser().getUserName().equals(principal.getName())) {
model.addAttribute("logged_user", principal.getName());
model.addAttribute("post", post);
model.addAttribute("comments", commentService.findAllCommentsOfPost(postId));
model.addAttribute("comment", comment);
return "comment_edit";
} else {
logger.warn("NO Permission: " + principal.getName() + ". " + new Date().toString());
return "redirect:/no_permission_to_edit";
}
} else return "404";
}