From 7b984328e3a8906fe548a0149e365c24a69fd9a4 Mon Sep 17 00:00:00 2001
From: lukemelia <lukemelia@a4c988fc-2ded-0310-b66e-134b36920a42>
Date: Sat, 10 Jun 2006 06:05:01 +0000
Subject: [PATCH] Exclude user_id from projects, contexts and notes xml. My
 rationale here is that if tracks is a multi-user application, user_id is
 always set by authenticated credentials and so there is no valid reason to
 expose it with the data.

git-svn-id: http://www.rousette.org.uk/svn/tracks-repos/trunk@259 a4c988fc-2ded-0310-b66e-134b36920a42
---
 tracks/app/controllers/context_controller.rb | 2 +-
 tracks/app/controllers/note_controller.rb    | 2 +-
 tracks/app/controllers/project_controller.rb | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/tracks/app/controllers/context_controller.rb b/tracks/app/controllers/context_controller.rb
index 51788a9d..019ddc38 100644
--- a/tracks/app/controllers/context_controller.rb
+++ b/tracks/app/controllers/context_controller.rb
@@ -18,7 +18,7 @@ class ContextController < ApplicationController
     @page_title = "TRACKS::List Contexts"
     respond_to do |wants|
       wants.html
-      wants.xml { render :xml => @contexts.to_xml }
+      wants.xml { render :xml => @contexts.to_xml( :except => :user_id ) }
     end
   end
 
diff --git a/tracks/app/controllers/note_controller.rb b/tracks/app/controllers/note_controller.rb
index cfe20473..964e9f78 100644
--- a/tracks/app/controllers/note_controller.rb
+++ b/tracks/app/controllers/note_controller.rb
@@ -10,7 +10,7 @@ class NoteController < ApplicationController
     @page_title = "TRACKS::All notes"
     respond_to do |wants|
       wants.html
-      wants.xml { render :xml => @all_notes.to_xml }
+      wants.xml { render :xml => @all_notes.to_xml( :except => :user_id )  }
     end
   end
 
diff --git a/tracks/app/controllers/project_controller.rb b/tracks/app/controllers/project_controller.rb
index 282f2422..f98f0f29 100644
--- a/tracks/app/controllers/project_controller.rb
+++ b/tracks/app/controllers/project_controller.rb
@@ -20,7 +20,7 @@ class ProjectController < ApplicationController
     @page_title = "TRACKS::List Projects"
     respond_to do |wants|
       wants.html
-      wants.xml { render :xml => @projects.to_xml }
+      wants.xml { render :xml => @projects.to_xml( :except => :user_id )  }
     end
   end