ae564c97d4
To prevent leaking of users info we reduce amount of user information retrieved via API for normal users. What user can get via API: * if not admin: only id, state, name, username and avatar_url * if admin: all user information * about himself: all informaion Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
37 lines
1.1 KiB
CoffeeScript
37 lines
1.1 KiB
CoffeeScript
$ ->
|
|
userFormatResult = (user) ->
|
|
if user.avatar_url
|
|
avatar = user.avatar_url
|
|
else
|
|
avatar = gon.default_avatar_url
|
|
|
|
"<div class='user-result'>
|
|
<div class='user-image'><img class='avatar s24' src='#{avatar}'></div>
|
|
<div class='user-name'>#{user.name}</div>
|
|
<div class='user-username'>#{user.username}</div>
|
|
</div>"
|
|
|
|
userFormatSelection = (user) ->
|
|
user.name
|
|
|
|
$('.ajax-users-select').each (i, select) ->
|
|
$(select).select2
|
|
placeholder: "Search for a user"
|
|
multiple: $(select).hasClass('multiselect')
|
|
minimumInputLength: 0
|
|
query: (query) ->
|
|
Api.users query.term, (users) ->
|
|
data = { results: users }
|
|
query.callback(data)
|
|
|
|
initSelection: (element, callback) ->
|
|
id = $(element).val()
|
|
if id isnt ""
|
|
Api.user(id, callback)
|
|
|
|
|
|
formatResult: userFormatResult
|
|
formatSelection: userFormatSelection
|
|
dropdownCssClass: "ajax-users-dropdown"
|
|
escapeMarkup: (m) -> # we do not want to escape markup since we are displaying html in results
|
|
m
|