event comment delete

app.rb

@@ -896,6 +896,19 @@ post '/event/:event_id/delete' do |event_id|
   return {result: 'error'}.to_json
 end
 
+post '/comment/:comment_id/delete' do |comment_id|
+  require_login
+  content_type :json
+  comment = Comment[id: comment_id]
+
+  if comment.event.site == current_site || comment.actioning_site == current_site
+    comment.delete
+    return {result: 'success'}.to_json
+  end
+
+  return {result: 'error'}.to_json
+end
+
 def require_admin
   redirect '/' unless signed_in? && current_site.is_admin
 end

migrations/026_add_comment_paranoid_delete.rb

@@ -0,0 +1,9 @@
+Sequel.migration do
+  up {
+    DB.add_column :comments, :is_deleted, :boolean, default: false
+  }
+
+  down {
+    DB.drop_column :comments, :is_deleted
+  }
+end

models/comment.rb

@@ -1,4 +1,5 @@
 class Comment < Sequel::Model
+  include Sequel::ParanoidDelete
   many_to_one :event
   many_to_one :actioning_site, class: :Site
 end

public/assets/scripts/news/comment.js

@@ -1,16 +1,19 @@
-var Comment = function(eventId, csrfToken) {
-  this.eventId = eventId
-  this.csrfToken = csrfToken
-}
-
-Comment.prototype.create = function(form) {
-  var self = this
-  var form = $(form)
-  var comment = form.find('[name="comment"]').val()
-  form.remove()
-
-  $.post('/event/'+this.eventId+'/comment', {csrf_token: this.csrfToken, message: comment}, function(res) {
-    console.log(res)
-  })
-  
+var Comment = {
+  create: function(eventId, csrfToken, form) {
+    var form = $(form)
+    var comment = form.find('[name="comment"]').val()
+    form.remove()
+
+    $.post('/event/'+eventId+'/comment', {csrf_token: csrfToken, message: comment}, function(res) {
+      console.log(res)
+      location.reload()
+    })
+  },
+
+  delete: function(commentId, csrfToken) {
+    $.post('/comment/'+commentId+'/delete', {csrf_token: csrfToken}, function(res) {
+      console.log(res)
+      location.reload()
+    })
+  }
 }

views/_news.erb

@@ -15,13 +15,18 @@
     <div class="content">
       <div class="comments">
         <% event.comments.each do |comment| %>
-          <div class="comment">
+          <div class="comment" id="comment_<%= comment.id %>">
             <img class="avatar" src="<%= comment.actioning_site.screenshot_url('index.html', '82x62') %>">
             <a href="" class="user"><%= comment.actioning_site.username %></a>
             <span class="date"><%= comment.created_at.ago %></span>
             <p><%= comment.message %></p>
           </div>
-          <div class="actions"><a href="">Like (1)</a></div>
+          <div class="actions">
+            <a id="like" href="#" onclick="Comment.toggleLike(<%= comment.id %>, '<%= csrf_token %>)">Like (1)</a>
+            <% if event.site_id == current_site.id || comment.actioning_site_id == current_site.id %>
+              <a href="#" onclick="Comment.delete(<%= comment.id %>, '<%= csrf_token %>'); return false">Delete</a>
+            <% end %>
+          </div>
         <% end %>
       </div>
     </div>

views/_news_templates.erb

@@ -1,5 +1,5 @@
 <div id="comment-template" style="display: none">
-  <form onsubmit="new Comment({{ eventId }}, '<%= csrf_token %>').create(this); location.reload(); return false">
+  <form onsubmit="Comment.create({{ eventId }}, '<%= csrf_token %>', this); location.reload(); return false">
     <input name="comment" type="text" autocomplete="off" maxlength="<%= Site::MAX_COMMENT_SIZE %>" style="width: 100%" placeholder="Comment on this...">
     <button class="btn-Action">Post</button>
   </form>