Initial commit

app/controllers/carto/api/columns_controller.rb

@@ -0,0 +1,67 @@
+require_relative '../../../models/carto/permission'
+
+module Carto
+  module Api
+    class ColumnsController < ::Api::ApplicationController
+
+      ssl_required :index, :show, :create, :update, :destroy
+
+      before_filter :load_user_table, only: [:index, :show, :create, :update, :destroy]
+      before_filter :read_privileges?, only: [:index, :show]
+      before_filter :write_privileges?, only: [:create, :update, :destroy]
+
+      def index
+        render_jsonp(@user_table.service.schema(cartodb_types: true))
+      end
+
+      def show
+        resp = @user_table.service.schema(cartodb_types: true).select { |e| e[0] == params[:id].to_sym }.first.last
+        render_jsonp(type: resp)
+      rescue => e
+        CartoDB::Logger.error(message: 'Error loading column', exception: e,
+                              column_id: params[:id], user_table: @user_table)
+        render_jsonp({ errors: "Column #{params[:id]} doesn't exist" }, 404)
+      end
+
+      def create
+        render_jsonp(@user_table.service.add_column!(params.slice(:type, :name)))
+      rescue => e
+        errors = e.is_a?(CartoDB::InvalidType) ? [e.db_message] : [translate_error(e.message.split("\n").first)]
+        render_jsonp({ errors: errors }, 400)
+      end
+
+      def update
+        render_jsonp(@user_table.service.modify_column!(name: params[:id],
+                                                        type: params[:type],
+                                                        new_name: params[:new_name]))
+      rescue => e
+        errors = e.is_a?(CartoDB::InvalidType) ? [e.db_message] : [translate_error(e.message.split("\n").first)]
+        render_jsonp({ errors: errors }, 400)
+      end
+
+      def destroy
+        @user_table.service.drop_column!(name: params[:id])
+
+        head :no_content
+      rescue => e
+        errors = e.is_a?(CartoDB::InvalidType) ? [e.db_message] : [translate_error(e.message.split("\n").first)]
+        render_jsonp({ errors: errors }, 400)
+      end
+
+      protected
+
+      def load_user_table
+        @user_table = Carto::Helpers::TableLocator.new.get_by_id_or_name(params[:table_id], current_user)
+        raise RecordNotFound unless @user_table
+      end
+
+      def read_privileges?
+        head(401) unless current_user && @user_table.visualization.is_viewable_by_user?(current_user)
+      end
+
+      def write_privileges?
+        head(401) unless current_user && @user_table.visualization.writable_by?(current_user)
+      end
+    end
+  end
+end