routes.rb

# config/routes.rb:
# Mapping URLs to controllers for FOIFA.
#
# Copyright (c) 2007 UK Citizens Online Democracy. All rights reserved.
# Email: hello@mysociety.org; WWW: http://www.mysociety.org/

require 'sidekiq/web'

include AlaveteliFeatures::Constraints

# Allow easy extension from themes. Note these will have the highest priority.
$alaveteli_route_extensions.each do |f|
  load File.join('config', f)
end

class AdminConstraint # :nodoc:
  def matches?(request)
    user = User.find_by(
      id: request.session[:user_id],
      login_token: request.session[:user_login_token]
    )
    user && user.is_admin?
  end
end

Rails.application.routes.draw do
  draw :redirects

  mount Sidekiq::Web => '/sidekiq', constraints: AdminConstraint.new

  root to: 'general#frontpage'

  #### General controller
  root :to => 'general#frontpage',
       :as => :frontpage,
       :via => :get
  match '/blog' => 'general#blog',
        :as => :blog,
        :via => :get
  match '/search' => 'general#search_redirect',
        :as => :search_redirect,
        :via => :get
  match '/search/all' => 'general#search_redirect',
        :as => :search_redirect_all,
        :via => :get
  # `combined` is the search query, and then if sorted a "/newest" at the end.
  # Couldn't find a way to do this in routes which also picked up multiple other slashes
  # and dots and other characters that can appear in search query. So we sort it all
  # out in the controller.
  match '/search/*combined/all' => 'general#search',
        :as => :search_general_all,
        :view => 'all',
        :via => :get
  match '/search(/*combined)' => 'general#search',
        :as => :search_general,
        :via => :get
  match '/search/:query/requests' => 'general#search',
        as: :search_requests,
        via: :get
  match '/search/:query/users' => 'general#search',
        as: :search_users,
        via: :get
  match '/advancedsearch' => 'general#search_redirect',
        :as => :advanced_search,
        :advanced => true,
        :via => :get
  match '/version.:format' => 'general#version',
        :as => :version,
        :via => :get

  #####

  ##### Statistics controller
  get '/statistics' => 'statistics#index'
  get '/body_statistics' => redirect('/statistics#public_bodies'), :as => :public_bodies_statistics

  ##### Request controller
  get '/list/all' => redirect('/list')
  get '/list/recent' => redirect('/list')
  match '/list(/:tag)/successful' => 'request#list',
        :as => :request_list_successful,
        :view => 'successful',
        :via => :get
  match '/list(/:tag)/unsuccessful' => 'request#list',
        :as => :request_list_unsuccessful,
        :view => 'unsuccessful',
        :via => :get
  match '/list(/:tag)/awaiting' => 'request#list',
        :as => :request_list_awaiting,
        :view => 'awaiting',
        :via => :get
  match '/list(/:tag)' => 'request#list',
        :as => :request_list,
        :view => 'all',
        :via => :get

  match '/select_authority' => 'request#select_authority',
        :as => :select_authority,
        :via => :get

  match '/new' => 'request#new',
        :as => :new_request,
        :via => [:get, :post]
  match '/new/:url_name' => 'request#new',
        :as => :new_request_to_body,
        :via => [:get, :post]

  match '/request/search_ahead' => 'request#search_typeahead',
        :as => :search_ahead,
        :via => :get

  match '/request/:url_title' => 'request#show',
        :as => :show_request,
        :via => :get
  match '/request/:url_title/new' => 'request#show',
        :as => :show_new_request,
        :via => :get
  match '/request/:url_title/details' => 'request#details',
        :as => :details_request,
        :via => :get
  match '/request/:url_title/similar' => 'request#similar',
        :as => :similar_request,
        :via => :get

  match '/request/:request_url_title/response/:incoming_message_id/attach' \
        '/html/(:part(/*file_name))' => 'attachments#show_as_html',
        :format => false,
        :as => :get_attachment_as_html,
        :via => :get,
        :constraints => { :part => /\d+/ }
  match '/request/:request_url_title/response/:incoming_message_id/attach' \
        '/:part(/*file_name)' => 'attachments#show',
        :format => false,
        :as => :get_attachment,
        :via => :get,
        :constraints => { :part => /\d+/ }

  #### Attachment controller
  resources :attachment_masks, only: [], path: :attachments do
    get 'wait', on: :member, as: :wait_for
    get 'done', on: :member
  end
  ####

  match '/request_event/:info_request_event_id' => 'request#show_request_event',
        :as => :info_request_event,
        :via => :get

  match '/request/:url_title/upload' => 'request#upload_response',
        :as => :upload_response,
        :via => [:get, :post]
  match '/request/:url_title/download' => 'request#download_entire_request',
        :as => :download_entire_request,
        :via => :get
  ####

  #### Public Tokens controller
  resources :public_tokens, only: [:show], path: 'r', param: :public_token

  scope path: 'request/:url_title' do
    post :public_tokens, to: 'public_tokens#create'
    delete :public_tokens, to: 'public_tokens#destroy'
  end

  scope 'r/:public_token/response/:incoming_message_id' do
    get 'attach/html/:part/*file_name' => 'attachments#show_as_html',
        as: :share_attachment_as_html,
        format: false
    get 'attach/:part(/*file_name)' => 'attachments#show',
        as: :share_attachment,
        format: false
  end
  ####

  scope path: 'request/:url_title' do
    #### Citations controller
    resources :citations, only: [:new, :create]
    ####

    #### Classifications controller
    resources :classifications, only: [:create], param: :described_state do
      get :message, on: :member
    end
    ####
  end

  #### Followups controller
  match '/request/:request_url_title/followups/new' => 'followups#new',
        :as => :new_request_followup,
        :via => :get
  match '/request/:request_url_title/followups/new/:incoming_message_id' =>
          'followups#new',
        :as => :new_request_incoming_followup,
        :via => :get
  match '/request/:request_url_title/followups/preview' => 'followups#preview',
        :as => :preview_request_followups,
        :via => :post
  match '/request/:request_url_title/followups' => 'followups#create',
        :as => :request_followups,
        :via => :post
  ####

  #### Projects
  constraints FeatureConstraint.new(:projects) do
    match '/p/:token' => 'projects/invites#create',
          as: :project_invite,
          via: :get

    scope module: :projects do
      resources :projects, only: [:show] do
        resource :extract, only: [:show, :update, :create]
        resource :classify, only: [:show, :update]
        resources :classifications, only: :create, param: :described_state do
          get :message, on: :member
        end

        resources :contributors, only: [:destroy]

        resource :download, only: [:show], format: true
        resource :leaderboard, only: [:show], format: true
      end
    end
  end
  ####

  namespace :health do
    resources :checks, :only => [:index]
    resources :metrics, :only => [:index], :defaults => { :format => 'txt' }
  end
  get '/health_checks' => redirect('/health/checks')

  resources :request, :only => [], param: :url_title do
    resource :report, :only => [:new, :create]
    resource :widget, :only => [:new, :show]
    resources :widget_votes, :only => [:create]
  end

  resources :info_request_batch, :only => :show

  #### OutgoingMessage controller
  resources :outgoing_messages, :only => [] do
    resource :delivery_status, :only => [:show], :module => 'outgoing_messages'
  end
  ####

  #### User controller
  # Use /profile for things to do with the currently signed in user.
  # Use /user/XXXX for things that anyone can see about that user.
  # Note that /profile isn't indexed by search (see robots.txt)
  resources :password_changes,
            :only => [:new, :create, :edit, :update],
            :path => '/profile/change_password',
            :path_names => { :edit => '' }

  resource :one_time_password,
           :only => [:show, :create, :update, :destroy],
           :path => '/profile/two_factor'

  match '/profile/sign_in' => 'users/sessions#new',
        :as => :signin,
        :via => :get
  match '/profile/sign_in' => 'users/sessions#create',
        :as => :create_session,
        :via => :post
  match '/profile/sign_out' => 'users/sessions#destroy',
        :as => :signout,
        :via => :get
  match '/profile/sign_up' => 'user#signup',
        :as => :signup, :via => :post

  match '/tor' => 'user#tor', via: :get

  match '/c/:email_token' => 'users/confirmations#confirm',
        :as => :confirm,
        :via => :get
  match '/user/:url_name' => 'user#show',
        :as => :show_user,
        :via => :get
  match '/user/:url_name/profile' => 'user#show',
        :as => :show_user_profile,
        :view => 'profile',
        :via => :get
  match '/user/:url_name/requests' => 'user#show',
        :as => :show_user_requests,
        :view => 'requests',
        :via => :get
  match '/user/:url_name/wall' => 'user#wall',
        :as => :show_user_wall,
        :via => :get
  match '/user/contact/:url_name' => 'users/messages#contact',
        :as => :contact_user,
        :via => [:get, :post]
  match '/profile/change_email' => 'user#signchangeemail',
        :as => :signchangeemail,
        :via => [:get, :post]
  match '/profile/set_photo' => 'user#set_profile_photo',
        :as => :set_profile_photo,
        :via => [:get, :post]
  match '/profile/clear_photo' => 'user#clear_profile_photo',
        :as => :clear_profile_photo,
        :via => :post
  match '/user/:url_name/photo.png' => 'user#get_profile_photo',
        :as => :get_profile_photo,
        :via => :get
  match '/profile/draft_photo/:id.png' => 'user#get_draft_profile_photo',
        :as => :get_draft_profile_photo,
        :via => :get

  namespace :users do
    get 'email_alerts/disable/:token',
        to: 'email_alerts#destroy',
        as: :disable_email_alerts
  end

  namespace :users, path: 'profile' do
    resource :name, only: [:edit, :update]
  end

  namespace :profile, :module => 'user_profile' do
    resource :about_me, :only => [:edit, :update], :controller => 'about_me'
  end

  # Legacy route for setting about_me
  match '/profile/set_about_me' => redirect('/profile/about_me/edit'),
        :as => :set_profile_about_me,
        :via => [:get, :post]

  match '/profile/set_receive_alerts' => 'user#set_receive_email_alerts',
        :as => :set_receive_email_alerts,
        :via => [:get, :post]

  match '/profile/river' => 'user#river',
        :as => :river,
        :via => :get
  ####

  #### PublicBody controller
  match '/body/search_ahead' => 'public_body#search_typeahead',
        :as => :search_ahead_bodies,
        :via => :get
  match '/body' => 'public_body#list',
        :as => :list_public_bodies,
        :via => :get
  match '/body/list/all' => 'public_body#list',
        :as => :list_public_bodies_default,
        :via => :get
  match '/body/list/:tag' => 'public_body#list',
        :as => :list_public_bodies_by_tag,
        :via => :get
  match '/local/:tag' => 'public_body#list_redirect',
        :as => :list_public_bodies_redirect,
        :via => :get
  match '/body/all-authorities.csv' => 'public_body#list_all_csv',
        :as => :all_public_bodies_csv,
        :via => :get
  match '/body/:url_name' => 'public_body#show',
        :as => :show_public_body, :view => 'all',
        :via => :get
  match '/body/:url_name/all' => 'public_body#show',
        :as => :show_public_body_all,
        :view => 'all',
        :via => :get
  match '/body/:url_name/successful' => 'public_body#show',
        :as => :show_public_body_successful,
        :view => 'successful',
        :via => :get
  match '/body/:url_name/unsuccessful' => 'public_body#show',
        :as => :show_public_body_unsuccessful,
        :view => 'unsuccessful',
        :via => :get
  match '/body/:url_name/awaiting' => 'public_body#show',
        :as => :show_public_body_awaiting,
        :view => 'awaiting',
        :via => :get
  match '/body/:url_name/view_email' => 'public_body#view_email',
        :as => :view_public_body_email,
        :via => [:get, :post]
  match '/body/:url_name/:tag' => 'public_body#show',
        :as => :show_public_body_tag,
        :via => :get
  match '/body/:url_name/:tag/:view' => 'public_body#show',
        :as => :show_public_body_tag_view,
        :via => :get
  ####

  #### PublicBodyChangeRequest controller
  resource :change_request, :only => [:new, :create], :controller => 'public_body_change_requests'
  match 'change_request/new/:body' => 'public_body_change_requests#new',
        :as => :new_change_request_body,
        :via => :get

  #### Comment controller
  match '/request/:url_title/annotate' => 'comment#new',
        :as => :new_comment,
        :type => 'request',
        :via => [:get, :post]
  ####

  #### Services controller
  match '/country_message' => 'services#other_country_message',
        :as => :other_country_message,
        :via => :get
  match '/hidden_user_explanation' => 'services#hidden_user_explanation',
        :as => :hidden_user_explanation,
        :via => :get
  ####

  #### Track controller
  # /track/ is for setting up an email alert for the item
  # /feed/ is a direct RSS feed of the item
  match '/request/:url_title/:feed' => 'track#track_request',
        :as => :track_request,
        :feed => /(track|feed)/,
        :via => :get
  match '/:feed/list/:view' => 'track#track_list',
        :as => :track_list,
        :view => nil,
        :feed => /(track|feed)/,
        :via => :get
  match '/:feed/body/:url_name' => 'track#track_public_body',
        :as => :track_public_body,
        :feed => /(track|feed)/,
        :via => :get
  match '/:feed/user/:url_name' => 'track#track_user',
        :as => :track_user,
        :feed => /(track|feed)/,
        :via => :get
  match '/:feed/search/:query_array' => 'track#track_search_query',
        :as => :track_search,
        :feed => /(track|feed)/,
        :constraints => { :query_array => /.*/ },
        :via => :get

  match '/track/update/:track_id' => 'track#update',
        :as => :update,
        :via => [:get, :post]
  match '/track/delete_all_type' => 'track#delete_all_type',
        :as => :delete_all_type,
        :via => :post
  match '/track/feed/:track_id' => 'track#atom_feed',
        :as => :atom_feed,
        :via => :get
  ####

  #### Refusal Advice controller
  resource :refusal_advice, only: [:create], controller: 'refusal_advice'
  ####

  #### Help controller
  match '/help/unhappy(/:url_title)' => 'help#unhappy',
        :as => :help_unhappy,
        :via => :get
  match '/help/about' => 'help#about',
        :as => :help_about,
        :via => :get
  match '/help/alaveteli' => 'help#alaveteli',
        :as => :help_alaveteli,
        :via => :get
  match '/help/contact' => 'help#contact',
        :as => :help_contact,
        :via => [:get, :post]
  match '/help/officers' => 'help#officers',
        :as => :help_officers,
        :via => :get
  match '/help/requesting' => 'help#requesting',
        :as => :help_requesting,
        :via => :get
  match '/help/privacy' => 'help#privacy',
        :as => :help_privacy,
        :via => :get
  match '/help/api' => 'help#api',
        :as => :help_api,
        :via => :get
  match '/help/credits' => 'help#credits',
        :as => :help_credits,
        :via => :get

  constraints FeatureConstraint.new(:alaveteli_pro) do
    match '/help/pro' => 'help#pro',
          as: :help_pro,
          via: :get
  end

  match '/help/:template' => 'help#action',
        :as => :help_general,
        :via => :get,
        :template => /[-_a-z]+/
  match '/help' => 'help#index',
        :via => :get
  ####

  #### Holiday controller
  match '/due_date/:holiday' => 'holiday#due_date',
        :as => :due_date,
        :via => :get
  ####

  #### RequestGame controller
  match '/categorise/play' => 'request_game#play',
        :as => :categorise_play,
        :via => [:get, :post]
  match '/request/:url_title/categorise' => 'request_game#show',
        :as => :categorise_request,
        :via => :get
  match '/categorise/stop' => 'request_game#stop',
        :as => :categorise_stop,
        :via => :post
  ####

  #### Announcement controller
  resources :announcements, :only => [:destroy]
  ####

  #### Admin::BlogPosts controller
  namespace :admin do
    resources :blog_posts, only: [:index, :edit, :update]
  end
  ####

  #### Admin::Changelog controller
  namespace :admin do
    resources :changelog, only: [:index]
  end

  #### Admin::Citations controller
  namespace :admin do
    resources :citations, only: [:index]
  end
  ####

  ####
  #### AdminTag controller
  namespace :admin do
    resources :tags, param: :tag, only: [:index, :show]
  end
  ####

  #### Admin::InfoRequestBatches controller
  namespace :admin do
    resources :info_request_batches, path: :batches, only: [:show]
  end

  #### AdminNote controller
  namespace :admin do
    resources :notes, except: [:show]
  end

  direct :admin_note_parent do |note|
    if note.notable_tag
      admin_tag_path(tag: note.notable_tag)
    elsif note.notable
      url_for([:admin, note.notable])
    else
      admin_general_index_path
    end
  end
  ####

  #### Admin::PostRedirectsController
  namespace :admin do
    resources :post_redirects, only: [:destroy]
  end
  ####

  #### AdminPublicBody controller
  scope '/admin', :as => 'admin' do
    resources :bodies,
    :controller => 'admin_public_body' do
      post 'mass_tag', on: :collection
      delete 'mass_tag', on: :collection
      get 'import_csv', :on => :collection
      post 'import_csv', :on => :collection
      resources :censor_rules,
        :controller => 'admin_censor_rule',
        :only => [:new, :create]
    end
  end
  direct :admin_public_body do |pb|
    admin_body_path(pb)
  end
  ####

  #### Admin::Categories controller
  namespace :admin do
    resources :categories do
      post 'reorder', on: :member
    end
  end
  ####

  #### AdminHoliday controller
  scope '/admin', :as => 'admin' do
    resources :holidays,
      :controller => 'admin_holidays'
  end
  ####

  #### AdminHolidayImports controller
  scope '/admin', :as => 'admin' do
    resources :holiday_imports,
      :controller => 'admin_holiday_imports',
      :only => [:new, :create]
  end
  ####

  #### AdminPublicBodyChangeRequest controller
  scope '/admin', :as => 'admin' do
    resources :change_requests,
      :controller => 'admin_public_body_change_requests',
      :only => [:edit, :update]
  end
  ####

  #### AdminGeneral controller
  match '/admin' => 'admin_general#index',
        :as => :admin_general_index,
        :via => :get
  match '/admin/timeline' => 'admin_general#timeline',
        :as => :admin_timeline,
        :via => :get
  match '/admin/debug' => 'admin_general#debug',
        :as => :admin_debug,
        :via => :get
  match '/admin/stats' => 'admin_general#stats',
        :as => :admin_stats,
        :via => :get
  ####

  #### AdminRequest controller
  scope '/admin', :as => 'admin' do
    resources :requests,
      :controller => 'admin_request',
    :except => [:new, :create] do
      post 'move', :on => :member
      post 'generate_upload_url', :on => :member
      post 'hide', :on => :member
      resources :censor_rules,
        :controller => 'admin_censor_rule',
        :only => [:new, :create]
    end
  end
  direct :admin_info_request do |ir|
    admin_request_path(ir)
  end
  ####

  #### AdminComment controller
  scope '/admin', :as => 'admin' do
    resources :comments,
      :controller => 'admin_comment',
      :only => [:index, :edit, :update]
  end
  ####

  #### AdminRawEmail controller
  scope '/admin', :as => 'admin' do
    resources :raw_emails,
      :controller => 'admin_raw_email',
      :only => [:show]
  end
  ####

  #### AdminInfoRequestEvent controller
  scope '/admin', :as => 'admin' do
    resources :info_request_events,
      :controller => 'admin_info_request_event',
      :only => [:update]
  end

  #### AdminIncomingMessage controller
  scope '/admin', :as => 'admin' do
    resources :incoming_messages,
      :controller => 'admin_incoming_message',
    :only => [:edit, :update, :destroy] do
      post 'redeliver', :on => :member
    end
    resource :incoming_messages,
      :controller => 'admin_incoming_message',
      :only => [:bulk_destroy] do
        post 'bulk_destroy'
      end
  end
  ####

  #### AdminOutgoingMessage controller
  scope '/admin', :as => 'admin' do
    resources :outgoing_messages,
      :controller => 'admin_outgoing_message',
    :only => [:edit, :update, :destroy] do
      post 'resend', :on => :member
    end
  end
  ####

  #### AdminFoiAttachment controller
  namespace :admin do
    resources :foi_attachments, path: :attachments,
                                only: [:edit, :update]
  end
  ####

  #### AdminUser controller
  scope '/admin', :as => 'admin' do
    resources :users,
      :controller => 'admin_user',
    :except => [:new, :create, :destroy] do
      get 'active', :on => :collection
      get 'banned', :on => :collection
      get 'closed', :on => :collection
      get 'show_bounce_message', :on => :member
      post 'clear_bounce', :on => :member
      post 'clear_profile_photo', :on => :member
      post 'modify_comment_visibility', :on => :collection
      resources :slugs, controller: 'admin_user_slug', only: :destroy
      resources :censor_rules,
        :controller => 'admin_censor_rule',
        :only => [:new, :create]
      end
  end
  ####

  #### AdminUsersAccountSuspensions controller
  scope '/admin', :as => 'admin' do
    resources :users_account_suspensions,
      :controller => 'admin_users_account_suspensions',
      :only => [:create]
  end
  ####

  #### AdminUsersAccountErasing controller
  scope '/admin', :as => 'admin' do
    resources :users_account_erasing,
          :controller => 'admin_users_account_erasing',
          :only => [:create]
  end
  ####

  #### AdminUsersAccountClosing controller
  scope '/admin', :as => 'admin' do
    resources :users_account_closing,
          :controller => 'admin_users_account_closing',
          :only => [:create]
  end
  ####

  #### AdminUsersAccountAnonymising controller
  scope '/admin', :as => 'admin' do
    resources :users_account_anonymising,
          :controller => 'admin_users_account_anonymising',
          :only => [:create]
  end
  ####

  #### AdminUsersSessions controller
  scope '/admin', :as => 'admin' do
    resource :users_sessions,
      :controller => 'admin_users_sessions',
      :only => [:create, :destroy]
  end
  ####

  #### Admin::Users::SignIns controller
  namespace :admin do
    scope module: 'users' do
      resources :sign_ins, only: [:index]
    end
  end
  ####

  #### AdminTrack controller
  scope '/admin', :as => 'admin' do
    resources :tracks,
      :controller => 'admin_track',
      :only => [:index, :destroy]
  end
  ####

  #### AdminCensorRule controller
  scope '/admin', :as => 'admin' do
    resources :censor_rules,
      :controller => 'admin_censor_rule'
  end

  #### AdminSpamAddresses controller
  scope '/admin', :as => 'admin' do
    resources :spam_addresses,
      :controller => 'admin_spam_addresses',
      :only => [:index, :create, :destroy]
  end
  ####

  #### AdminAnnouncement controller
  scope '/admin', :as => 'admin' do
    resources :announcements, :controller => 'admin_announcements'
  end
  ####

  #### Admin::Snippets controller
  namespace :admin do
    scope module: :outgoing_messages do
      resources :snippets, except: [:show]
    end
  end
  ####

  #### Api controller
  match '/api/v2/request.json' => 'api#create_request',
        :as => :api_create_request,
        :via => :post

  match '/api/v2/request/:id.json' => 'api#show_request',
        :as => :api_show_request,
        :via => :get
  match '/api/v2/request/:id.json' => 'api#add_correspondence',
        :as => :api_add_correspondence,
        :via => :post
  match '/api/v2/request/:id/update.json' => 'api#update_state',
        :as => :api_update_state,
        :via => :post

  match '/api/v2/body/:id/request_events.:feed_type' => 'api#body_request_events',
        :as => :api_body_request_events,
        :feed_type => '^(json|atom)$',
        :via => :get
  ####

  #### Pro Pages
  constraints FeatureConstraint.new(:alaveteli_pro) do
    namespace :alaveteli_pro, path: :pro, as: :pro do
      resources :pages, only: [:show]
    end
  end

  #### Pro Pricing
  constraints FeatureConstraint.new(:pro_pricing) do
    namespace :alaveteli_pro, path: :pro, as: :pro do
      resources :plans, only: [:index], path: :pricing
    end

    scope module: :alaveteli_pro do
      resources :plans, only: [:show]

      scope path: :profile do
        resources :invoices, only: [:index]
        resources :subscriptions, only: [:index, :create, :destroy] do
          collection do
            resource :payment_method, only: [:update]
          end
          member do
            get :authorise
          end
        end
      end

      match '/pro/subscriptions/stripe-webhook' => 'stripe_webhooks#receive',
            :via => :post
    end
  end

  #### Alaveteli Pro
  constraints FeatureConstraint.new(:alaveteli_pro) do
    scope module: :alaveteli_pro do
      resources :account_request, :only => [:index, :create], path: :pro do
        collection do
          get :training, to: redirect('/pro')
        end
      end
    end

    namespace :alaveteli_pro, path: 'pro' do
      get :dashboard, to: 'dashboard#index'
      resources :draft_info_requests, :only => [:create, :update]
      resources :info_requests, only: [:new, :create, :index] do
        get :preview, on: :new # /info_request/new/preview
      end
      scope path: 'info_requests/:url_title' do
        resources :classifications, only: :create, param: :described_state do
          get :message, on: :member
        end
      end
      resources :embargoes, :only => [:destroy, :create] do
        collection do
          post :destroy_batch
        end
      end
      resources :embargo_extensions, :only => [:create] do
        collection do
          post :create_batch
        end
      end
      resources :batch_request_authority_searches, :only => [:index, :new]
      resources :draft_info_request_batches, :only => [:create, :update] do
        collection do
          put :update_bodies
        end
      end
      resources :info_request_batches, :only => [:new, :create] do
        get :preview, on: :new # /info_request_batch/new/preview
        resource :batch_download, only: [:show], format: true, path: 'download'
      end
      resources :public_bodies, :only => [:index]
    end

    scope path: :pro do
      # So that we can show a batch request using the existing controller from
      # the pro context
      match '/info_request_batches/:id' => 'info_request_batch#show',
            :as => :show_alaveteli_pro_batch_request,
            :via => :get,
            :defaults => { :pro => '1' }

      # So that we can show the authority selection screen using the existing
      # controller but in a pro context
      match '/select_authority' => 'request#select_authority',
            :as => :alaveteli_pro_select_authority,
            :via => :get,
            :defaults => { :pro => '1' }
    end
  end
  ####
end