diff options
Diffstat (limited to 'modules/tag/controllers')
| -rw-r--r-- | modules/tag/controllers/tags.php | 26 |
1 files changed, 15 insertions, 11 deletions
diff --git a/modules/tag/controllers/tags.php b/modules/tag/controllers/tags.php index d87ab8e8..69bc9a48 100644 --- a/modules/tag/controllers/tags.php +++ b/modules/tag/controllers/tags.php @@ -55,19 +55,23 @@ class Tags_Controller extends REST_Controller { } public function _create($tag) { - $form = tag::get_add_form($this->input->post('item_id')); + rest::http_content_type(rest::JSON); + $item = ORM::factory("item", $this->input->post("item_id")); + access::required("edit", $item); + + $form = tag::get_add_form($item->id); if ($form->validate()) { - $item = ORM::factory("item", $this->input->post("item_id")); - if (access::can("edit", $item)) { - tag::add($item, $this->input->post("tag_name")); - rest::http_status(rest::CREATED); - rest::http_location(url::site("tags/{$tag->id}")); - } else { - $form->inputs["add_tag"]->inputs["tag_name"]->add_error("permission denied", 1); - } - } + tag::add($item, $this->input->post("tag_name")); - print $form; + print json_encode( + array("result" => "success", + "resource" => url::site("tags/{$tag->id}"), + "form" => tag::get_add_form($item->id)->__toString())); + } else { + print json_encode( + array("result" => "error", + "form" => $form->__toString())); + } } public function _delete($tag) { |