alchemy_cms 2.0.pre2

data/app/controllers/admin/pictures_controller.rb

@@ -0,0 +1,132 @@
+class Admin::PicturesController < AlchemyController
+  unloadable
+  protect_from_forgery :except => [:create]
+  
+  before_filter :set_translation
+
+  filter_access_to :all
+
+  cache_sweeper :pictures_sweeper, :only => [:update, :destroy]
+
+  def index
+    if params[:per_page] == 'all'
+      @pictures = Picture.where("name LIKE '%#{params[:query]}%'").order(:name)
+    else
+      @pictures = Picture.where("name LIKE '%#{params[:query]}%'").paginate(
+        :page => params[:page] || 1,
+        :per_page => params[:per_page] || 32
+      ).order(:name)
+    end
+  end
+
+  def new
+    @picture = Picture.new
+    @while_assigning = params[:while_assigning] == 'true'
+    if @while_assigning
+      @content = Content.find(params[:content_id], :select => 'id') if !params[:content_id].blank?
+      @element = Element.find(params[:element_id], :select => 'id')
+      @size = params[:size]
+      @options = params[:options]
+      @page = params[:page]
+      @per_page = params[:per_page]
+    end
+    render :layout => false
+  end
+
+  def create
+    @picture = Picture.new(:image_file => params[:Filedata])
+    @picture.name = @picture.image_filename
+    @picture.save
+    @while_assigning = params[:while_assigning] == 'true'
+    if @while_assigning
+      @content = Content.find(params[:content_id], :select => 'id') if !params[:content_id].blank?
+      @element = Element.find(params[:element_id], :select => 'id')
+      @size = params[:size] || 'medium'
+      @options = params[:options]
+      @page = params[:page] || 1
+      @per_page = pictures_per_page_for_size(@size)
+    end
+    if params[:per_page] == 'all'
+      @pictures = Picture.where("name LIKE '%#{params[:query]}%'").order(:name)
+    else
+      @pictures = Picture.where("name LIKE '%#{params[:query]}%'").paginate(
+        :page => (params[:page] || 1),
+        :per_page => (params[:per_page] || @per_page || 32)
+      ).order(:name)
+    end
+    @message = _('Picture %{name} uploaded succesfully') % {:name => @picture.name}
+    if params[Rails.application.config.session_options[:key]].blank?
+      flash[:notice] = @message
+      redirect_to :back
+    end
+  rescue Exception => e
+    exception_handler(e)
+  end
+
+  def archive_overlay
+    @content = Content.find_by_id(params[:content_id], :select => 'id')
+    @element = Element.find_by_id(params[:element_id], :select => 'id')
+    @size = params[:size] || 'medium'
+    @pictures = Picture.where("name LIKE '%#{params[:query]}%'").paginate(
+      :page => params[:page] || 1,
+      :per_page => pictures_per_page_for_size(@size)
+    ).order(:name)
+    @options = params[:options]
+    if params[:remote] == 'true'
+      render :update do |page|
+        page.replace_html 'alchemy_window_body', :partial => 'archive_overlay_images'
+      end
+    else
+      render :layout => false
+    end
+  end
+
+  def update
+    @picture = Picture.find(params[:id])
+    oldname = @picture.name
+    @picture.name = params[:name]
+    @picture.save
+    @message = _("Image renamed successfully from: '%{from}' to '%{to}'") % {:from => oldname, :to => @picture.name}
+  rescue Exception => e
+    exception_handler(e)
+  end
+
+  def destroy
+    @picture = Picture.find(params[:id])
+    name = @picture.name
+    @picture.destroy
+    render :update do |page|
+      flash[:notice] = ( _("Image: '%{name}' deleted successfully") % {:name => name} )
+      page.redirect_to admin_pictures_path(:per_page => params[:per_page], :page => params[:page], :query => params[:query])
+    end
+  end
+
+  def flush
+    Picture.all.each do |picture|
+      FileUtils.rm_rf("#{Rails.root}/public/pictures/show/#{picture.id}")
+      FileUtils.rm_rf("#{Rails.root}/public/pictures/thumbnails/#{picture.id}")
+      expire_page(:controller => '/pictures', :action => 'zoom', :id => picture.id)
+    end
+    render :update do |page|
+      page.call('Alchemy.growl', _('Picture cache flushed'))
+    end
+  end
+
+  def show_in_window
+    @picture = Picture.find(params[:id])
+    render :layout => false
+  end
+  
+private
+  
+  def pictures_per_page_for_size(size)
+    case size
+      when 'small' then per_page = 35
+      when 'large' then per_page = 4
+    else
+      per_page = 12
+    end
+    return per_page
+  end
+  
+end

data/app/controllers/admin/trash_controller.rb

@@ -0,0 +1,25 @@
+class Admin::TrashController < AlchemyController
+  
+  filter_access_to [:index, :clear]
+  
+  def index
+    @elements = Element.trashed
+    @page = Page.find_by_id(params[:page_id])
+    @allowed_elements = Element.all_for_page(@page)
+    render :layout => false
+  end
+  
+  def clear
+    @page = Page.find_by_id(params[:page_id])
+    @elements = Element.trashed
+    @elements.map(&:destroy)
+    render :update do |page|
+      page.call('Alchemy.growl', _("Cleared trash"))
+      page << "Alchemy.refreshTrashWindow(#{@page.id})"
+      page << "jQuery('#element_trash_button .icon').removeClass('full')"
+    end
+  rescue Exception => e
+    exception_handler(e)
+  end
+  
+end

data/app/controllers/admin/users_controller.rb

@@ -0,0 +1,75 @@
+class Admin::UsersController < AlchemyController
+  unloadable
+
+  filter_access_to [:edit, :update, :destroy], :attribute_check => true
+  filter_access_to [:index, :new, :create], :attribute_check => false
+
+  before_filter :set_translation
+
+  def index
+    if !params[:query].blank?
+      @users = User.where([
+        "users.login LIKE ? OR users.email LIKE ? OR users.firstname LIKE ? OR users.lastname LIKE ?",
+        "%#{params[:query]}%",
+        "%#{params[:query]}%",
+        "%#{params[:query]}%",
+        "%#{params[:query]}%"
+      ]).order('login')
+    else
+      @users = User.all
+    end
+  end
+
+  def new
+    @user = User.new
+    render :layout => false
+  end
+
+  def create
+    @user = User.new(params[:user])
+    if @user.save
+      if @user.role == "registered" && params[:send_credentials]
+        Notifications.registered_user_created(@user).deliver
+      elsif params[:send_credentials]
+        Notifications.admin_user_created(@user).deliver
+      end
+    end
+    render_errors_or_redirect(
+      @user,
+      admin_users_path,
+      ( _("User: '%{name}' created") % {:name => @user.name} ),
+      "form#new_user button.button"
+    )
+  rescue
+    exception_handler($!)
+  end
+
+  def edit
+    # User is fetched via before filter from authentication plugin
+    render :layout => false
+  end
+
+  def update
+    # User is fetched via before filter from authentication plugin
+    @user.update_attributes(params[:user])
+    Notifications.admin_user_created(@user).deliver if params[:send_credentials]
+    render_errors_or_redirect(
+      @user,
+      admin_users_path,
+      ( _("User: '%{name}' updated") % {:name => @user.name} ),
+      "form#edit_user_#{@user.id} button.button"
+    )
+  end
+
+  def destroy
+    # User is fetched via before filter from authentication plugin
+    name = @user.name
+    if @user.destroy
+      flash[:notice] = ( _("User: '%{name}' deleted") % {:name => name} )
+    end
+    render :update do |page|
+      page.redirect_to admin_users_path
+    end
+  end
+
+end

data/app/controllers/admin_controller.rb

@@ -0,0 +1,78 @@
+class AdminController < AlchemyController
+  
+  unloadable
+  
+  filter_access_to :index
+  before_filter :set_translation
+  before_filter :check_user_count, :only => :login
+
+  layout 'alchemy'
+
+  def index
+    @alchemy_version = Alchemy::VERSION
+    @clipboard_items = session[:clipboard]
+    @last_edited_pages = Page.all_last_edited_from(current_user)
+    @locked_pages = Page.all_locked
+    @online_users = User.all_online
+  end
+
+  # Signup only works if no user is present in database.
+  def signup
+    if request.get?
+      redirect_to admin_path if User.count != 0
+      @user = User.new({:role => 'admin'})
+    else
+      @user = User.new(params[:user])
+      if @user.save
+        if params[:send_credentials]
+          Notifications.admin_user_created(@user).deliver
+        end
+        redirect_to :action => :index
+      end
+    end
+  end
+
+  def login
+    if request.get?
+      @user_session = UserSession.new()
+      flash.now[:info] = params[:message] || _("welcome_please_identify_notice")
+      render :layout => 'login'
+    else
+      @user_session = UserSession.new(params[:user_session])
+      if @user_session.save
+        if session[:redirect_url].blank?
+          redirect_to :action => :index
+        else
+          redirect_to session[:redirect_url]
+        end
+      else
+        render :layout => 'login'
+      end
+    end
+  end
+
+  def leave
+    render :layout => false
+  end
+
+  def logout
+    message = params[:message] || _("logged_out")
+    @user_session = UserSession.find
+    if @user_session
+      @user_session.destroy
+    end
+    flash[:info] = message
+    redirect_to root_url
+  end
+
+private
+
+  def check_user_count
+    if User.count == 0
+      redirect_to :action => 'signup'
+    else
+      return true
+    end
+  end
+
+end

data/app/controllers/alchemy_controller.rb

@@ -0,0 +1,239 @@
+# This is the main Alchemy controller all other controllers inheret from.
+
+require 'userstamp'
+require 'dynamic_form'
+
+class AlchemyController < ApplicationController
+  
+  include FastGettext::Translation
+  include Alchemy
+  include Userstamp
+  
+  unloadable
+  
+  protect_from_forgery
+  
+  before_filter :init_gettext
+  before_filter :set_translation
+  before_filter :set_language
+  before_filter :mailer_set_url_options
+  
+  helper_method :current_server, :configuration, :multi_language?, :current_user, :clipboard_empty?, :trash_empty?, :get_clipboard
+  helper :errors, :layout
+  
+  def render_errors_or_redirect(object, redicrect_url, flash_notice, button = nil)
+    if object.errors.empty?
+      flash[:notice] = _(flash_notice)
+      render(:update) { |page| page.redirect_to(redicrect_url) }
+    else
+      render_remote_errors(object, button)
+    end
+  end
+  
+  def render_remote_errors(object, button = nil)
+    render :update do |page|
+      page << "jQuery('#errors').html('<ul>" + object.errors.sum{|a, b| "<li>" + _(b) + "</li>"} + "</ul>')"
+      page << "jQuery('#errors').show()"
+      page << "Alchemy.enableButton('#{button}')" unless button.blank?
+    end
+  end
+  
+  # Returns a host string with the domain the app is running on.
+  def current_server
+    # For local development server
+    if request.port != 80
+      "http://#{request.host}:#{request.port}"
+    # For remote production server
+    else
+      "http://#{request.host}"
+    end
+  end
+
+  def configuration(name)
+    return Alchemy::Config.get(name)
+  end
+
+  def set_language_to(language_id)
+    @language = Language.find(language_id)
+    if @language
+      session[:language_id] = @language.id
+      session[:language_code] = @language.code
+      I18n.locale = @language.code
+    else
+      logger.error "+++++++ Language not found for language_id: #{language_id}"
+    end
+  end
+
+  def multi_language?
+    Language.published.count > 1
+  end
+
+  def current_user
+    return @current_user if defined?(@current_user)
+    @current_user = current_user_session && current_user_session.record
+  end
+
+  def current_user_session
+    return @current_user_session if defined?(@current_user_session)
+    @current_user_session = UserSession.find
+  end
+
+  def logged_in?
+    !current_user.blank?
+  end
+
+private
+
+  def last_request_update_allowed?
+    true #action_name =! "update_session_time_left"
+  end
+
+  # Handles exceptions
+  def exception_handler(e)
+    exception_logger(e)
+    show_error_notice(e)
+    # TODO: Exception Mailer!
+  end
+
+  # Logs the current exception to the error log.
+  def exception_logger(e)
+    message = "\n+++++++++ Error: #{e} +++++++++++++\n\n"
+    e.backtrace.each do |line|
+      message += "#{line}\n"
+    end
+    logger.error(message)
+  end
+
+  # Displays an error notice in the Alchemy backend.
+  def show_error_notice(e)
+    notice = "Error: #{e}"
+    if request.xhr?
+      render(:update) { |page| page.call("Alchemy.growl", notice, 'error') }
+    else
+      flash[:error] = notice
+    end
+  end
+
+  def set_language_from_client
+    if params[:lang].blank?
+      lang = request.env['HTTP_ACCEPT_LANGUAGE'][0..1] unless request.env['HTTP_ACCEPT_LANGUAGE'].blank?
+      language_code = lang
+    else
+      language_code = params[:lang]
+    end
+    @language = Language.find_by_code(language_code) || Language.get_default
+    if @language.blank?
+      logger.warn "+++++++ Language not found for code: #{language_code}"
+      render :file => Rails.root + 'public/404.html', :code => 404
+    else
+      session[:language_id] = @language.id
+      session[:language_code] = @language.code
+      I18n.locale = @language.code      
+    end
+  end
+
+  def store_location
+    session[:redirect_url] = request.url
+  end
+
+  def set_stamper
+    FastGettext.text_domain = 'alchemy'
+    User.stamper = self.current_user
+  end
+
+  def reset_stamper
+    User.reset_stamper
+  end
+
+  def mailer_set_url_options
+    ActionMailer::Base.default_url_options[:host] = request.host_with_port
+  end
+
+protected
+
+  def init_gettext#:nodoc:
+    FastGettext.text_domain = 'alchemy'
+    FastGettext.available_locales = configuration(:translations).collect { |l| l[:language_code] }
+  end
+
+  # Setting the Alchemy GUI translation to users preffered language, or to the default translation.
+  # You can set the default_translation in your config/alchemy/config.yml file
+  def set_translation
+    if current_user.blank? || current_user.language.blank?
+      FastGettext.locale = configuration(:default_translation)
+    else
+      FastGettext.locale = current_user.language
+    end
+  end
+
+  def set_language
+    if session[:language_id].blank?
+      set_language_to_default
+    else
+      set_language_to(session[:language_id])
+    end
+  end
+
+  def permission_denied
+    if current_user
+      flash[:error] = _('You are not authorized')
+      if current_user.role == 'registered'
+        redirect_to root_path
+      else
+        if request.referer == login_url
+          render :file => File.join(Rails.root.to_s, 'public', '422.html'), :status => 422, :layout => false
+        else
+          redirect_to admin_path
+        end
+      end
+    else
+      flash[:info] = _('Please log in')
+      if request.xhr?
+        render :update do |page|
+          page.redirect_to login_path
+        end
+      else
+        store_location
+        redirect_to login_path
+      end
+    end
+  end
+
+  def redirect_back_or_to_default(default_path = admin_path)
+    if request.env["HTTP_REFERER"].blank?
+      redirect_to default_path
+    else
+      redirect_to :back
+    end
+  end
+
+  # Setting language relevant stuff to defaults.
+  def set_language_to_default
+    @language = Language.get_default
+    session[:language_id] = @language.id
+    session[:language_code] = @language.code
+    I18n.locale = @language.code
+  rescue
+    exception_logger($!)
+    flash[:error] = _('no_default_language_found')
+  end
+
+  def get_clipboard(category = nil)
+    clipboard = (session[:clipboard] ||= {})
+    clipboard[category.to_sym] ||= [] if category
+  end
+
+  def clipboard_empty?(category = nil)
+    return true if session[:clipboard].blank?
+    if category
+      session[:clipboard][category.to_sym].blank?
+    else
+      false
+    end
+  end
+  
+  def trash_empty?(category)
+    category.singularize.classify.constantize.trashed.blank?
+  end
+  
+end