apispree_core 0.0.0

data/LICENSE

@@ -0,0 +1,26 @@
+Copyright (c) 2007-2010, Rails Dog LLC and other contributors
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+    * Redistributions of source code must retain the above copyright notice,
+      this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright notice,
+      this list of conditions and the following disclaimer in the documentation
+      and/or other materials provided with the distribution.
+    * Neither the name Spree nor the names of its contributors may be used to
+      endorse or promote products derived from this software without specific
+      prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
+CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

data/README.md

@@ -0,0 +1,15 @@
+Testing
+=======
+
+Create the test site
+
+    rake test_app
+
+Run the tests
+
+    rake spec
+
+Run the coverage. After the rake task open coverage/index.html
+
+    rake rcov
+

data/app/controllers/admin/adjustments_controller.rb

@@ -0,0 +1,10 @@
+class Admin::AdjustmentsController < Admin::ResourceController
+  belongs_to :order, :find_by => :number
+  destroy.after :reload_order
+
+  private
+  
+  def reload_order
+    @order.reload
+  end
+end

data/app/controllers/admin/base_controller.rb

@@ -0,0 +1,63 @@
+class Admin::BaseController < Spree::BaseController
+  ssl_required
+
+  before_filter :check_alerts if Rails.env.production?
+
+  helper :search
+  helper 'admin/navigation'
+  layout 'admin'
+
+  protected
+  def check_alerts
+    return unless current_user and should_check_alerts?
+
+    unless session.has_key? :alerts
+      begin
+        session[:alerts] = Spree::Alert.current(request.host)
+        filter_dismissed_alerts
+        Spree::Config.set :last_check_for_spree_alerts => DateTime.now.to_s
+      rescue
+        session[:alerts] = nil
+      end
+    end
+  end
+
+  def should_check_alerts?
+    return false if not Spree::Config[:check_for_spree_alerts]
+
+    last_check = Spree::Config[:last_check_for_spree_alerts]
+    return true if last_check.blank?
+
+    DateTime.parse(last_check) < 12.hours.ago
+  end
+
+  def filter_dismissed_alerts
+    return unless session[:alerts]
+    dismissed = (Spree::Config[:dismissed_spree_alerts] || '').split(',')
+    session[:alerts].reject! { |a| dismissed.include? a.id.to_s }
+  end
+
+  def flash_message_for(object, event_sym)
+    resource_desc  = object.class.model_name.human
+    resource_desc += " \"#{object.name}\"" if object.respond_to?(:name)
+    I18n.t(event_sym, :resource => resource_desc)  
+  end
+  
+  def render_js_for_destroy
+    render :partial => "/admin/shared/destroy"
+  end
+  
+  # Index request for JSON needs to pass a CSRF token in order to prevent JSON Hijacking
+  def check_json_authenticity
+    return unless request.format.js? or request.format.json?
+    auth_token = params[request_forgery_protection_token]
+    unless (auth_token and form_authenticity_token == auth_token.gsub(' ', '+'))
+      raise(ActionController::InvalidAuthenticityToken)
+    end
+  end
+
+  # def require_object_editable_by_current_user
+  #   return access_denied unless object.editable_by?(current_user)
+  #   true
+  # end
+end

data/app/controllers/admin/configurations_controller.rb

@@ -0,0 +1,2 @@
+class Admin::ConfigurationsController < Admin::BaseController
+end

data/app/controllers/admin/general_settings_controller.rb

@@ -0,0 +1,22 @@
+class Admin::GeneralSettingsController < Admin::BaseController
+
+  def update
+    Spree::Config.set(params[:preferences])
+
+    respond_to do |format|
+      format.html {
+        redirect_to admin_general_settings_path
+      }
+    end
+  end
+
+  def dismiss_alert
+    if request.xhr? and params[:alert_id]
+      dismissed = Spree::Config[:dismissed_spree_alerts] || ''
+      Spree::Config.set :dismissed_spree_alerts => dismissed.split(',').push(params[:alert_id]).join(',')
+      filter_dismissed_alerts
+      render :nothing => true
+    end
+  end
+
+end

data/app/controllers/admin/images_controller.rb

@@ -0,0 +1,49 @@
+class Admin::ImagesController < Admin::ResourceController
+  before_filter :load_data
+
+  create.before :set_viewable
+  update.before :set_viewable
+  destroy.before :destroy_before
+
+  def update_positions
+    params[:positions].each do |id, index|
+      Image.update_all(['position=?', index], ['id=?', id])
+    end
+
+    respond_to do |format|
+      format.js  { render :text => 'Ok' }
+    end
+  end
+
+  private
+  
+  def location_after_save
+    admin_product_images_url(@product)
+  end
+
+  def load_data
+    @product = Product.find_by_permalink(params[:product_id])
+    @variants = @product.variants.collect do |variant|
+      [variant.options_text, variant.id ]
+    end
+    @variants.insert(0, [I18n.t("all"), "All"])
+  end
+
+  def set_viewable
+    if params[:image].has_key? :viewable_id
+      if params[:image][:viewable_id] == "All"
+        @image.viewable = @product
+      else
+        @image.viewable_type = 'Variant'
+        @image.viewable_id = params[:image][:viewable_id]
+      end
+    else
+      @image.viewable = @product
+    end
+  end
+
+  def destroy_before
+    @viewable = @image.viewable
+  end
+
+end

data/app/controllers/admin/inventory_settings_controller.rb

@@ -0,0 +1,13 @@
+class Admin::InventorySettingsController < Admin::BaseController
+
+  def update
+    Spree::Config.set(params[:preferences])
+
+    respond_to do |format|
+      format.html {
+        redirect_to admin_inventory_settings_path
+      }
+    end
+  end
+
+end

data/app/controllers/admin/inventory_units_controller.rb

@@ -0,0 +1,2 @@
+class Admin::InventoryUnitsController < Admin::BaseController
+end

data/app/controllers/admin/line_items_controller.rb

@@ -0,0 +1,60 @@
+class Admin::LineItemsController < Admin::BaseController
+
+  before_filter :load_order
+  before_filter :load_line_item, :only => [:destroy, :update]
+
+  respond_to :html
+
+  def create
+    variant = Variant.find(params[:line_item][:variant_id])
+    @line_item = @order.add_variant(variant, params[:line_item][:quantity].to_i)
+
+    if @order.save
+      respond_with(@line_item) do |format| 
+        format.html { render :partial => "admin/orders/form", :locals => {:order => @order.reload}, :layout => false }
+      end
+    else
+      #TODO Handle failure gracefully, patches welcome.
+    end
+  end
+
+  def destroy
+    if @line_item.destroy
+      respond_with(@line_item) do |format| 
+        format.html { render :partial => "admin/orders/form", :locals => {:order => @order.reload}, :layout => false }
+      end
+    else
+      respond_with(@line_item) do |format| 
+        format.html { render :partial => "admin/orders/form", :locals => {:order => @order.reload}, :layout => false }
+      end
+    end
+  end
+
+  def new
+    respond_with do |format| 
+      format.html { render :action => :new, :layout => false }
+    end
+  end
+
+  def update
+    if @line_item.update_attributes(params[:line_item])
+      respond_with(@line_item) do |format| 
+        format.html { render :partial => "admin/orders/form", :locals => {:order => @order.reload}, :layout => false}
+      end
+    else
+      respond_with(@line_item) do |format| 
+        format.html { render :partial => "admin/orders/form", :locals => {:order => @order.reload}, :layout => false}
+      end
+    end
+  end
+
+
+  def load_order
+    @order = Order.find_by_number! params[:order_id]
+  end
+
+  def load_line_item
+    @line_item = @order.line_items.find params[:id]
+  end
+
+end

data/app/controllers/admin/mail_methods_controller.rb

@@ -0,0 +1,8 @@
+class Admin::MailMethodsController < Admin::ResourceController
+  after_filter :initialize_mail_settings
+
+  private
+  def initialize_mail_settings
+    Spree::MailSettings.init
+  end
+end

data/app/controllers/admin/mail_settings_controller.rb

@@ -0,0 +1,14 @@
+class Admin::MailSettingsController < Admin::BaseController
+
+  def update
+    Spree::Config.set(params[:preferences])
+    Spree::Preferences::MailSettings.init
+
+    respond_to do |format|
+      format.html {
+        redirect_to admin_mail_settings_path
+      }
+    end
+  end
+
+end

data/app/controllers/admin/option_types_controller.rb

@@ -0,0 +1,65 @@
+class Admin::OptionTypesController < Admin::ResourceController
+  before_filter :load_product, :only => [:selected, :available, :remove]
+
+  def available
+    set_available_option_types
+    render :layout => false
+  end
+
+  def selected
+    @option_types = @product.option_types
+  end
+
+  def remove
+    @product.option_types.delete(@option_type)
+    @product.save
+    flash.notice = I18n.t("notice_messages.option_type_removed")
+    redirect_to selected_admin_product_option_types_url(@product)
+  end
+
+  def update_positions
+    params[:positions].each do |id, index|
+      OptionType.update_all(['position=?', index], ['id=?', id])
+    end
+    
+    respond_to do |format|
+      format.html { redirect_to admin_product_variants_url(params[:product_id]) }
+      format.js  { render :text => 'Ok' }
+    end
+  end
+
+  # AJAX method for selecting an existing option type and associating with the current product
+  def select
+    @product = Product.find_by_param!(params[:product_id])
+    product_option_type = ProductOptionType.new(:product => @product, :option_type => OptionType.find(params[:id]))
+    product_option_type.save
+    @product.reload
+    @option_types = @product.option_types
+    set_available_option_types
+  end
+
+  protected
+    
+    def location_after_save
+      if @option_type.created_at == @option_type.updated_at
+        edit_admin_option_type_url(@option_type)
+      else
+        admin_option_types_url
+      end
+    end
+
+
+  private
+    def load_product
+      @product = Product.find_by_param!(params[:product_id])
+    end
+  
+    def set_available_option_types
+      @available_option_types = OptionType.all
+      selected_option_types = []
+      @product.options.each do |option|
+        selected_option_types << option.option_type
+      end
+      @available_option_types.delete_if {|ot| selected_option_types.include? ot}
+    end
+end

data/app/controllers/admin/orders_controller.rb

@@ -0,0 +1,136 @@
+class Admin::OrdersController < Admin::BaseController
+  require 'spree/gateway_error'
+  before_filter :initialize_txn_partials
+  before_filter :initialize_order_events
+  before_filter :load_order, :only => [:fire, :resend, :history, :user]
+
+  respond_to :html
+
+  def index
+    params[:search] ||= {}
+    params[:search][:completed_at_is_not_null] ||= '1' if Spree::Config[:show_only_complete_orders_by_default]
+    @show_only_completed = params[:search][:completed_at_is_not_null].present?
+    params[:search][:meta_sort] ||= @show_only_completed ? 'completed_at.desc' : 'created_at.desc'
+
+    @search = Order.metasearch(params[:search])
+
+    if !params[:search][:created_at_greater_than].blank?
+      params[:search][:created_at_greater_than] = Time.zone.parse(params[:search][:created_at_greater_than]).beginning_of_day rescue ""
+    end
+
+    if !params[:search][:created_at_less_than].blank?
+      params[:search][:created_at_less_than] = Time.zone.parse(params[:search][:created_at_less_than]).end_of_day rescue ""
+    end
+
+    if @show_only_completed
+      params[:search][:completed_at_greater_than] = params[:search].delete(:created_at_greater_than)
+      params[:search][:completed_at_less_than] = params[:search].delete(:created_at_less_than)
+    end
+
+    @orders = Order.metasearch(params[:search]).paginate(
+                                   :include  => [:user, :shipments, :payments],
+                                   :per_page => Spree::Config[:orders_per_page],
+                                   :page     => params[:page])
+
+    respond_with(@orders)
+  end
+
+  def show
+    load_order
+    respond_with(@order)
+  end
+
+  def new
+    @order = Order.create
+    respond_with(@order)
+  end
+
+  def edit
+    load_order
+    respond_with(@order)
+  end
+
+  def update
+    return_path = nil
+    load_order
+    if @order.update_attributes(params[:order]) && @order.line_items.present?
+      unless @order.complete?
+      
+        if params[:order].key?(:email)
+          shipping_method = @order.available_shipping_methods(:front_end).first
+          if shipping_method
+            @order.shipping_method = shipping_method
+            @order.create_shipment!
+            return_path = edit_admin_order_shipment_path(@order, @order.shipment)
+          else
+            flash[:error] = t('errors.messages.no_shipping_methods_available')
+            return_path = user_admin_order_path(@order)
+          end
+        else
+          return_path = user_admin_order_path(@order)
+        end
+        
+      else
+        return_path = admin_order_path(@order)
+      end
+    else
+      @order.errors.add(:line_items, t('errors.messages.blank'))
+    end
+    
+    respond_with(@order) do |format|
+      format.html do
+        if return_path
+          redirect_to return_path
+        else
+          render :action => :edit
+        end
+      end
+    end
+  end
+
+
+  def fire
+    # TODO - possible security check here but right now any admin can before any transition (and the state machine
+    # itself will make sure transitions are not applied in the wrong state)
+    event = params[:e]
+    if @order.send("#{event}")
+      flash.notice = t('order_updated')
+    else
+      flash[:error] = t('cannot_perform_operation')
+    end
+  rescue Spree::GatewayError => ge
+    flash[:error] = "#{ge.message}"
+  ensure
+    respond_with(@order) { |format| format.html { redirect_to :back } }
+  end
+
+  def resend
+    OrderMailer.confirm_email(@order, true).deliver
+    flash.notice = t('order_email_resent')
+
+    respond_with(@order) { |format| format.html { redirect_to :back } }
+  end
+
+  def user
+    @order.build_bill_address(:country_id => Spree::Config[:default_country_id]) if @order.bill_address.nil?
+    @order.build_ship_address(:country_id => Spree::Config[:default_country_id]) if @order.ship_address.nil?
+  end
+
+  private
+
+  def load_order
+    @order ||= Order.find_by_number(params[:id], :include => :adjustments) if params[:id]
+    @order
+  end
+
+  # Allows extensions to add new forms of payment to provide their own display of transactions
+  def initialize_txn_partials
+    @txn_partials = []
+  end
+
+  # Used for extensions which need to provide their own custom event links on the order details view.
+  def initialize_order_events
+    @order_events = %w{cancel resume}
+  end
+
+end