active_scaffold_vho 3.0.6

data/frontends/default/views/_show.html.erb

@@ -0,0 +1,8 @@
+<h4><%= active_scaffold_config.show.label -%></h4>
+
+<%= render :partial => 'show_columns', :locals => {:columns => active_scaffold_config.show.columns} -%>
+
+<p class="form-footer">
+  <%= link_to as_(:close), main_path_to_return, :class => 'as_cancel', :remote => request.xhr?, 'data-refresh' => false %>
+  <%= loading_indicator_tag(:action => :create, :id => params[:id]) %>
+</p>

data/frontends/default/views/_show_columns.html.erb

@@ -0,0 +1,15 @@
+<dl>
+<% columns.each :for => @record do |column| %>
+  <dt><%= column.label -%></dt>
+<% if column.is_a? ActiveScaffold::DataStructures::ActionColumns -%>
+  <dd>
+    <%= render :partial => 'show_columns', :locals => {:columns => column} %>
+<% else -%>
+    <% css_class = "#{column.name}-view"
+     css_class.concat(" #{column.css_class}") unless column.css_class.nil? %>
+    <dd class="<%= css_class.strip %>">
+    <%= show_column_value(@record, column) -%> &nbsp;
+<% end -%>
+  </dd>
+<% end -%>
+</dl>

data/frontends/default/views/_update_actions.html.erb

@@ -0,0 +1,9 @@
+<div class="active-scaffold-header">
+  <div class="actions">
+    <% active_scaffold_config.action_links.member.each do |link| -%>
+      <% next unless link.action == 'nested' -%>
+      <% next if skip_action_link(link) -%>
+      <%= record.authorized_for?(:crud_type => link.crud_type, :action => link.action) ? render_action_link(link, url_options, record) : "<a class='disabled'>#{link.label}</a>" -%>
+    <% end -%>
+  </div>
+</div>

data/frontends/default/views/_update_form.html.erb

@@ -0,0 +1,6 @@
+<% cancel_link = true if cancel_link.nil? %>
+<%= render :partial => "base_form", :locals => {:xhr => xhr ||= nil,
+                                                :form_action => form_action ||= :update,
+                                                :method => method ||= :put,
+                                                :cancel_link => cancel_link,
+                                                :headline => headline ||= @record.to_label.nil? ? active_scaffold_config.update.label : as_(:update_model, :model => clean_column_value(@record.to_label))} %>

data/frontends/default/views/_vertical_subform.html.erb

@@ -0,0 +1,12 @@
+<div id="<%= sub_form_list_id(:association => column.name) %>">
+  <% associated.each_index do |index| %>
+  <% @record = associated[index] -%>
+  <% if @record.errors.count -%>
+  <div class="association-record-errors" id="<%= element_messages_id :action => @record.class.name.underscore, :id => "#{parent_record.id}-#{index}" %>">
+    <%= active_scaffold_error_messages_for :record, :object_name => @record.class.model_name.human.downcase %>
+  </div>
+  <% end %>
+  <%= render :partial => 'vertical_subform_record', :locals => {:scope => column_scope(column), :parent_record => parent_record, :column => column, :locked => @record.new_record? && @record == associated.last} %>
+  <% end -%>
+</div>
+<%= render :partial => 'form_association_footer', :locals => {:parent_record => parent_record, :column => column, :associated => associated} -%>

data/frontends/default/views/_vertical_subform_record.html.erb

@@ -0,0 +1,38 @@
+<%
+  record_column = column
+  readonly = (@record.readonly? or not @record.authorized_for?(:crud_type => :update))
+  crud_type = @record.new_record? ? :create : (readonly ? :read : nil)
+  show_actions = false
+  config = active_scaffold_config_for(@record.class)
+  options = active_scaffold_input_options(config.columns[@record.class.primary_key], scope)
+  tr_id = "association-#{options[:id]}"
+-%>
+<ol id="<%= tr_id %>" class="association-record <%= 'association-record-new' if @record.new_record? -%> <%= 'locked' if locked -%>">
+<% config.subform.columns.each :for => @record, :crud_type => crud_type, :flatten => true do |column| %>
+<%
+  next unless in_subform?(column, parent_record)
+  show_actions = true
+  column = column.clone
+  column.form_ui ||= :select if column.association
+-%>
+  <li class="form-element <%= 'required' if column.required? %> <%= column.css_class unless column.css_class.nil? %>">
+    <% unless readonly -%>
+      <%= render :partial => form_partial_for_column(column), :locals => { :column => column, :scope => scope } -%>
+    <% else -%>
+      <p><%= get_column_value(@record, column) -%></p>
+    <% end -%>
+  </li>
+<% end -%>
+<% if show_actions -%>
+  <li class="actions">
+    <% if record_column.plural_association? and (@record.authorized_for?(:crud_type => :delete) or not [:destroy, :delete_all].include?(record_column.association.options[:dependent])) %>
+      <% destroy_id = "#{options[:id]}-destroy" %>
+      <%= link_to as_(:remove), '#', :class => 'destroy', :id => destroy_id , :onclick => "ActiveScaffold.remove(\"#{tr_id}\"); return false;", :style=> "display: none;" %>
+      <%= javascript_tag("ActiveScaffold.show('#{destroy_id}');") if !locked %>
+    <% end %> 
+    <% unless @record.new_record? %>
+      <input type="hidden" name="<%= options[:name] -%>" id="<%= options[:id] -%>" value="<%= @record.id -%>" />
+    <% end -%>
+  </li>
+<% end -%>
+</ol>

data/frontends/default/views/action_confirmation.html.erb

@@ -0,0 +1,13 @@
+<div class="active-scaffold">
+  <div class="delete-view view">
+    <%= form_tag params_for(:action => link.action, :id => params[:id]), { :method => link.method } %>
+      <h4><%= link.confirm(record.try(:to_label)) -%></h4>
+
+      <p class="form-footer">
+        <%= submit_tag as_(link.label), :class => 'submit' %>
+        <%= link_to as_(:cancel), main_path_to_return, :class => 'cancel' %>
+      </p>
+
+    </form>
+  </div>
+</div>

data/frontends/default/views/add_existing.js.rjs

@@ -0,0 +1,17 @@
+new_row = render :partial => 'list_record', :locals => {:record => @record}
+page << "ActiveScaffold.create_record_row('#{active_scaffold_id}','#{escape_javascript(new_row)}', #{{:insert_at => :top}.to_json});"
+page.call 'ActiveScaffold.replace', active_scaffold_calculations_id, render(:partial => 'list_calculations') if active_scaffold_config.list.columns.any? {|c| c.calculation?}
+
+if (form_stays_open = true)
+  # why not just re-render the form? that wouldn't utilize a possible do_new override which sets default values.
+  page.call 'ActiveScaffold.reset_form', element_form_id
+  page.call 'ActiveScaffold.replace_html', element_messages_id(:action => :add_existing), render(:partial => 'form_messages')
+  # have to delay the focus, because there's no "firstElement" in prototype until at least one element is not disabled
+  if ActiveScaffold.js_framework == :prototype
+    page.delay 0.1 do
+      page << "ActiveScaffold.focus_first_element_of_form('#{element_form_id}');"
+    end
+  end
+else
+  page << "ActiveScaffold.find_action_link('#{element_form_id(:action => :new_existing)}').close();"
+end

data/frontends/default/views/add_existing_form.html.erb

@@ -0,0 +1,5 @@
+<div class="active-scaffold">
+  <div class="create-view <%= "#{params[:controller]}-view" %> view">
+    <%= render :partial => 'add_existing_form' -%>
+  </div>
+</div>

data/frontends/default/views/create.html.erb

@@ -0,0 +1,5 @@
+<div class="active-scaffold">
+  <div class="create-view <%= "#{params[:controller]}-view" %> view">
+    <%= render :partial => 'create_form' -%>
+  </div>
+</div>

data/frontends/default/views/delete.html.erb

@@ -0,0 +1,13 @@
+<div class="active-scaffold">
+  <div class="delete-view view">
+    <%= form_tag params_for(:action => :destroy, :id => params[:id]), { :method => :delete } %>
+      <h4><%= as_(:are_you_sure_to_delete, :label => @record.try(:to_label)) -%></h4>
+
+      <p class="form-footer">
+        <%= submit_tag as_(:delete), :class => 'submit' %>
+        <%= link_to as_(:cancel), main_path_to_return, :class => 'cancel' %>
+      </p>
+
+    </form>
+  </div>
+</div>

data/frontends/default/views/destroy.js.rjs

@@ -0,0 +1,11 @@
+if controller.send(:successful?)
+  if (active_scaffold_config.delete.refresh_list)
+    page.call 'ActiveScaffold.replace_html', active_scaffold_content_id, render(:partial => 'list', :layout => false)
+  else
+    page << "ActiveScaffold.delete_record_row('#{element_row_id(:action => 'list', :id => params[:id])}','#{url_for(params_for(:action => :index, :id => nil, :page => [active_scaffold_config.list.user.page.to_i - 1, 1].max, :escape => false))}');"
+    page.call 'ActiveScaffold.replace',  active_scaffold_calculations_id, render(:partial => 'list_calculations') if active_scaffold_config.list.columns.any? {|c| c.calculation?}
+  end
+else
+  flash[:error] = active_scaffold_error_messages_for(@record, :object_name => "#{@record.class.model_name.human.downcase}#{@record.new_record? ? '' : ": #{@record.to_label}"}", :header_message => '', :message => "#{@record.class.model_name.human.downcase}#{@record.new_record? ? '' : ": #{@record.to_label}"}", :container_tag => nil, :list_type => :br)
+end
+page.call 'ActiveScaffold.replace_html', active_scaffold_messages_id, render(:partial => 'messages')

data/frontends/default/views/edit_associated.js.rjs

@@ -0,0 +1,11 @@
+associated_form = render :partial => "#{subform_partial_for_column(@column)}_record", :locals => {:scope => @scope, :parent_record => @parent_record, :column => @column, :locked => @record.new_record? && @column.singular_association?}
+options = {:singular => false}
+if @column.singular_association?
+  options[:singular] = true
+else
+  unless @record.new_record?
+    column = active_scaffold_config_for(@record.class).columns[@record.class.primary_key]
+    options[:id] = active_scaffold_input_options(column, @scope)[:id]
+  end
+end
+page.call 'ActiveScaffold.create_associated_record_form', sub_form_list_id(:association => @column.name), associated_form, options

data/frontends/default/views/field_search.html.erb

@@ -0,0 +1,5 @@
+<div class="active-scaffold">
+  <div class="search-view view">
+    <%= render :partial => 'field_search' -%>
+  </div>
+</div>

data/frontends/default/views/form_messages.js.rjs

@@ -0,0 +1 @@
+page.replace_html element_messages_id, :partial => 'form_messages'

data/frontends/default/views/list.html.erb

@@ -0,0 +1 @@
+<%= render :partial => 'list_with_header' -%>

data/frontends/default/views/list.js.rjs

@@ -0,0 +1 @@
+page.call 'ActiveScaffold.replace_html', active_scaffold_content_id, render(:partial => 'list', :layout => false)

data/frontends/default/views/on_action_update.js.rjs

@@ -0,0 +1,8 @@
+page.call 'ActiveScaffold.replace_html', active_scaffold_messages_id, render(:partial => 'messages')
+if controller.send :successful?
+  page.call 'ActiveScaffold.update_row', element_row_id(:action => :list, :id => @record.id), render(:partial => 'list_record', :locals => {:record => @record}) if @record
+  page.call 'ActiveScaffold.replace', active_scaffold_calculations_id, render(:partial => 'list_calculations') if active_scaffold_config.list.columns.any? {|c| c.calculation?}
+else
+  page.call 'ActiveScaffold.scroll_to', active_scaffold_messages_id
+end
+

data/frontends/default/views/on_create.js.rjs

@@ -0,0 +1,41 @@
+form_selector = "#{element_form_id(:action => :create)}"
+insert_at ||= :top
+page << "var action_link = ActiveScaffold.find_action_link('#{form_selector}');"
+page << "action_link.update_flash_messages('#{escape_javascript(render(:partial => 'messages').strip)}');"
+if controller.send :successful?
+  if render_parent? && respond_to?(:render_component)
+    parent_rendered = render_component(render_parent_options)
+    if nested?
+      page << "action_link.close('#{escape_javascript(parent_rendered)}');"
+    else
+      if render_parent_action == :row
+        page << "ActiveScaffold.create_record_row(action_link.scaffold(),'#{escape_javascript(parent_rendered)}', #{{:insert_at => insert_at}.to_json});"
+      elsif render_parent_action == :index
+        page << parent_rendered
+      end
+      page << "action_link.close();"
+    end
+    #page.call 'ActiveScaffold.replace', active_scaffold_calculations_id, render(:partial => 'list_calculations') if active_scaffold_config.list.columns.any? {|c| c.calculation?}
+  elsif (active_scaffold_config.create.refresh_list)
+    page.call 'ActiveScaffold.replace_html', active_scaffold_content_id, render(:partial => 'list', :layout => false)
+  elsif params[:parent_controller].nil?
+    new_row = render :partial => 'list_record', :locals => {:record => @record}
+    page << "ActiveScaffold.create_record_row(action_link.scaffold(),'#{escape_javascript(new_row)}', #{{:insert_at => insert_at}.to_json});"
+    page.call 'ActiveScaffold.replace', active_scaffold_calculations_id, render(:partial => 'list_calculations') if active_scaffold_config.list.columns.any? {|c| c.calculation?}
+  end
+
+  unless render_parent?
+    if (active_scaffold_config.create.persistent)
+      page << "action_link.reload();"
+    else
+      page << "action_link.close();"
+    end
+    if (active_scaffold_config.create.edit_after_create)
+      page << "var link = $('#{action_link_id 'edit', @record.id}');"
+      page << "if (link) (function() { link.action_link.open() }).defer();"
+    end
+  end
+else
+  page.call 'ActiveScaffold.replace', form_selector, render(:partial => 'create_form', :locals => {:xhr => true})
+  page.call 'ActiveScaffold.scroll_to', form_selector
+end

data/frontends/default/views/on_update.js.rjs

@@ -0,0 +1,28 @@
+form_selector = "#{element_form_id(:action => :update)}"
+
+page << "var action_link = ActiveScaffold.find_action_link('#{form_selector}');"
+page << "action_link.update_flash_messages('#{escape_javascript(render(:partial => 'messages').strip)}');"
+if controller.send :successful?
+  if render_parent? && respond_to?(:render_component)
+    parent_rendered = render_component(render_parent_options)
+    if nested?
+      page << "action_link.close('#{escape_javascript(parent_rendered)}');"
+    else
+      if render_parent_action == :row
+        page << "action_link.close('#{escape_javascript(parent_rendered)}');"
+      elsif render_parent_action == :index
+        page << parent_rendered
+      end
+    end
+    #page.call 'ActiveScaffold.replace', active_scaffold_calculations_id, render(:partial => 'list_calculations') if active_scaffold_config.list.columns.any? {|c| c.calculation?}
+  elsif (active_scaffold_config.update.refresh_list)
+    page.call 'ActiveScaffold.replace_html', active_scaffold_content_id, render(:partial => 'list', :layout => false)
+  else
+    updated_row = render :partial => 'list_record', :locals => {:record => @record}
+    page << "action_link.close('#{escape_javascript(updated_row)}');"
+    page.call 'ActiveScaffold.replace', active_scaffold_calculations_id, render(:partial => 'list_calculations') if active_scaffold_config.list.columns.any? {|c| c.calculation?}
+  end
+else
+  page.call 'ActiveScaffold.replace', form_selector, render(:partial => 'update_form', :locals => {:xhr => true})
+  page.call 'ActiveScaffold.scroll_to', form_selector
+end

data/frontends/default/views/search.html.erb

@@ -0,0 +1,5 @@
+<div class="active-scaffold">
+  <div class="search-view <%= "#{params[:controller]}-view" %> view">
+    <%= render :partial => 'search' -%>
+  </div>
+</div>

data/frontends/default/views/show.html.erb

@@ -0,0 +1,5 @@
+<div class="active-scaffold">
+  <div class="show-view <%= "#{params[:controller]}-view" %> view">
+    <%= render :partial => 'show' -%>
+  </div>
+</div>

data/frontends/default/views/update.html.erb

@@ -0,0 +1,8 @@
+<div class="active-scaffold">
+  <div class="update-view <%= "#{params[:controller]}-view" %> view">
+    <% if active_scaffold_config.update.nested_links and active_scaffold_config.action_links.member.empty? -%>
+    <%= render :partial => 'update_actions', :locals => {:record => @record, :url_options => params_for(:action => :list, :id => @record.id)} %>
+    <% end -%>
+    <%= render :partial => 'update_form' -%>
+  </div>
+</div>

data/frontends/default/views/update_column.js.rjs

@@ -0,0 +1,13 @@
+column_span_id ||= element_cell_id(:id => @record.id.to_s, :action => 'update_column', :name => params[:column])
+unless controller.send :successful?
+  page.call 'alert', @record.errors.full_messages(active_scaffold_config).join("\n")
+  @record.reload
+end
+column = active_scaffold_config.columns[params[:column]]
+if column.inplace_edit
+  page.call 'ActiveScaffold.replace_html', column_span_id, format_inplace_edit_column(@record, column)
+else
+  formatted_value = get_column_value(@record, column)
+  page.call 'ActiveScaffold.replace_html', column_span_id, formatted_value
+end
+page.call 'ActiveScaffold.replace_html', active_scaffold_calculations_id(column), render_column_calculation(column) if column.calculation?

data/frontends/default/views/update_row.js.rjs

@@ -0,0 +1 @@
+page.call 'ActiveScaffold.update_row', element_row_id(:action => 'list', :id => @record.id), render(:partial => 'list_record', :locals => {:record => @record})

data/init.rb

@@ -0,0 +1,9 @@
+ACTIVE_SCAFFOLD_PLUGIN = true
+
+require 'active_scaffold'
+
+begin
+  ActiveScaffoldAssets.copy_to_public(ActiveScaffold.root, {:clean_up_destination => true})
+rescue
+  raise $! unless Rails.env == 'production'
+end

data/lib/active_record_permissions.rb

@@ -0,0 +1,134 @@
+# This module attempts to create permissions conventions for your ActiveRecord models. It supports english-based
+# methods that let you restrict access per-model, per-record, per-column, per-action, and per-user. All at once.
+#
+# You may define instance methods in the following formats:
+#  def #{column}_authorized_for_#{action}?
+#  def #{column}_authorized?
+#  def authorized_for_#{action}?
+#
+# Your methods should allow for the following special cases:
+#   * cron scripts
+#   * guest users (or nil current_user objects)
+module ActiveRecordPermissions
+  # ActiveRecordPermissions needs to know what method on your ApplicationController will return the current user,
+  # if available. This defaults to the :current_user method. You may configure this in your environment.rb if you
+  # have a different setup.
+  def self.current_user_method=(v); @@current_user_method = v; end
+  def self.current_user_method; @@current_user_method; end
+  @@current_user_method = :current_user
+
+  # Whether the default permission is permissive or not
+  # If set to true, then everything's allowed until configured otherwise
+  def self.default_permission=(v); @@default_permission = v; end
+  def self.default_permission; @@default_permission; end
+  @@default_permission = true
+
+  # This is a module aimed at making the current_user available to ActiveRecord models for permissions.
+  module ModelUserAccess
+    module Controller
+      def self.included(base)
+        base.prepend_before_filter :assign_current_user_to_models
+      end
+
+      # We need to give the ActiveRecord classes a handle to the current user. We don't want to just pass the object,
+      # because the object may change (someone may log in or out). So we give ActiveRecord a proc that ties to the
+      # current_user_method on this ApplicationController.
+      def assign_current_user_to_models
+        ActiveRecord::Base.current_user_proc = proc {send(ActiveRecordPermissions.current_user_method)}
+      end
+    end
+
+    module Model
+      def self.included(base)
+        base.extend ClassMethods
+      end
+
+      module ClassMethods
+        # The proc to call that retrieves the current_user from the ApplicationController.
+        attr_accessor :current_user_proc
+
+        # Class-level access to the current user
+        def current_user
+          ActiveRecord::Base.current_user_proc.call if ActiveRecord::Base.current_user_proc
+        end
+      end
+
+      # Instance-level access to the current user
+      def current_user
+        self.class.current_user
+      end
+    end
+  end
+
+  module Permissions
+    def self.included(base)
+      base.extend SecurityMethods
+      base.send :include, SecurityMethods
+    end
+
+    # Because any class-level queries get delegated to the instance level via a new record,
+    # it's useful to know when the authorization query is meant for a specific record or not.
+    # But using new_record? is confusing, even though accurate. So this is basically just a wrapper.
+    def existing_record_check?
+      !new_record?
+    end
+
+    module SecurityMethods
+      # A generic authorization query. This is what will be called programatically, since
+      # the actual permission methods can't be guaranteed to exist. And because we want to
+      # intelligently combine multiple applicable methods.
+      #
+      # options[:crud_type] should be a CRUD verb (:create, :read, :update, :destroy)
+      # options[:column] should be the name of a model attribute
+      # options[:action] is the name of a method
+      def authorized_for?(options = {})
+        raise ArgumentError, "unknown crud type #{options[:crud_type]}" if options[:crud_type] and ![:create, :read, :update, :delete].include?(options[:crud_type])
+
+        # column_authorized_for_crud_type? has the highest priority over other methods,
+        # you can disable a crud verb and enable that verb for a column
+        # (for example, disable update and enable inplace_edit in a column)
+        method = column_and_crud_type_security_method(options[:column], options[:crud_type])
+        return send(method) if method and respond_to?(method)
+
+        # authorized_for_action? has higher priority than other methods,
+        # you can disable a crud verb and enable an action with that crud verb
+        # (for example, disable update and enable an action with update as crud type)
+        method = action_security_method(options[:action])
+        return send(method) if method and respond_to?(method)
+
+        # collect other possibly-related methods that actually exist
+        methods = [
+          column_security_method(options[:column]),
+          crud_type_security_method(options[:crud_type]),
+        ].compact.select {|m| respond_to?(m)}
+
+        # if any method returns false, then return false
+        return false if methods.any? {|m| !send(m)}
+
+        # if any method actually exists then it must've returned true, so return true
+        return true unless methods.empty?
+
+        # if no method exists, return the default permission
+        return ActiveRecordPermissions.default_permission
+      end
+
+      private
+
+      def column_security_method(column)
+        "#{column}_authorized?" if column
+      end
+
+      def crud_type_security_method(crud_type)
+        "authorized_for_#{crud_type}?" if crud_type
+      end
+
+      def action_security_method(action)
+        "authorized_for_#{action}?" if action
+      end
+
+      def column_and_crud_type_security_method(column, crud_type)
+        "#{column}_authorized_for_#{crud_type}?" if column and crud_type
+      end
+    end
+  end
+end

data/lib/active_scaffold/actions/common_search.rb

@@ -0,0 +1,22 @@
+module ActiveScaffold::Actions
+  module CommonSearch
+    protected
+    def store_search_params_into_session
+      active_scaffold_session_storage[:search] = params.delete :search if params[:search]
+    end
+    
+    def search_params
+      active_scaffold_session_storage[:search]
+    end
+
+    def search_ignore?
+      active_scaffold_config.list.always_show_search
+    end
+    
+    # The default security delegates to ActiveRecordPermissions.
+    # You may override the method to customize.
+    def search_authorized?
+      authorized_for?(:crud_type => :read)
+    end
+  end
+end