authorails 1.0.0

data/configs/databases/sqlite3.yml

@@ -0,0 +1,19 @@
+# SQLite version 3.x
+#   gem install sqlite3-ruby
+development:
+  adapter: sqlite3
+  database: db/development.sqlite3
+  timeout: 5000
+
+# Warning: The database defined as 'test' will be erased and
+# re-generated from your development database when you run 'rake'.
+# Do not set this db to the same as development or production.
+test:
+  adapter: sqlite3
+  database: db/test.sqlite3
+  timeout: 5000
+
+production:
+  adapter: sqlite3
+  database: db/production.sqlite3
+  timeout: 5000

data/configs/lighttpd.conf

@@ -0,0 +1,54 @@
+# Default configuration file for the lighttpd web server
+# Start using ./script/server lighttpd
+
+server.bind = "0.0.0.0"
+server.port = 3000
+
+server.modules           = ( "mod_rewrite", "mod_accesslog", "mod_fastcgi", "mod_compress", "mod_expire" )
+
+server.error-handler-404 = "/dispatch.fcgi"
+server.pid-file          = CWD + "/tmp/pids/lighttpd.pid"
+server.document-root     = CWD + "/public/"
+
+server.errorlog          = CWD + "/log/lighttpd.error.log"
+accesslog.filename       = CWD + "/log/lighttpd.access.log"
+
+url.rewrite              = ( "^/$" => "index.html", "^([^.]+)$" => "$1.html" )
+
+compress.filetype        = ( "text/plain", "text/html", "text/css", "text/javascript" )
+compress.cache-dir       = CWD + "/tmp/cache"
+
+expire.url               = ( "/favicon.ico"  => "access 3 days", 
+                             "/images/"      => "access 3 days", 
+                             "/stylesheets/" => "access 3 days",
+                             "/javascripts/" => "access 3 days" )
+
+
+# Change *-procs to 2 if you need to use Upload Progress or other tasks that
+# *need* to execute a second request while the first is still pending.
+fastcgi.server      = ( ".fcgi" => ( "localhost" => (
+  "min-procs"       => 1, 
+  "max-procs"       => 1,
+  "socket"          => CWD + "/tmp/sockets/fcgi.socket",
+  "bin-path"        => CWD + "/public/dispatch.fcgi",
+  "bin-environment" => ( "RAILS_ENV" => "development" )
+) ) )
+
+mimetype.assign = (  
+  ".css"        =>  "text/css",
+  ".gif"        =>  "image/gif",
+  ".htm"        =>  "text/html",
+  ".html"       =>  "text/html",
+  ".jpeg"       =>  "image/jpeg",
+  ".jpg"        =>  "image/jpeg",
+  ".js"         =>  "text/javascript",
+  ".png"        =>  "image/png",
+  ".swf"        =>  "application/x-shockwave-flash",
+  ".txt"        =>  "text/plain"
+)
+
+# Making sure file uploads above 64k always work when using IE or Safari
+# For more information, see http://trac.lighttpd.net/trac/ticket/360
+$HTTP["useragent"] =~ "^(.*MSIE.*)|(.*AppleWebKit.*)$" {
+  server.max-keep-alive-requests = 0
+}

data/configs/routes.rb

@@ -0,0 +1,23 @@
+ActionController::Routing::Routes.draw do |map|
+  # The priority is based upon order of creation: first created -> highest priority.
+  
+  # Sample of regular route:
+  # map.connect 'products/:id', :controller => 'catalog', :action => 'view'
+  # Keep in mind you can assign values other than :controller and :action
+
+  # Sample of named route:
+  # map.purchase 'products/:id/purchase', :controller => 'catalog', :action => 'purchase'
+  # This route can be invoked with purchase_url(:id => product.id)
+
+  # You can have the root of your site routed by hooking up '' 
+  # -- just remember to delete public/index.html.
+  map.connect '', :controller => 'login'
+
+  # Allow downloading Web Service WSDL as a file with an extension
+  # instead of a file named 'wsdl'
+  map.connect ':controller/service.wsdl', :action => 'wsdl'
+
+  # Install the default route as the lowest priority.
+  map.connect ':controller/:action/:id.:format'
+  map.connect ':controller/:action/:id'
+end

data/controllers/accounts_controller.rb

@@ -0,0 +1,11 @@
+class AccountsController < ApplicationController
+
+def index
+@users=Login.find(:all,:order => "usernameMail")
+end
+
+def show
+@user=Login.find(params[:id])
+end
+
+end

data/controllers/admin_controller.rb

@@ -0,0 +1,76 @@
+class AdminController < ApplicationController
+
+ layout 'login' #same login layout
+ 
+ skip_before_filter :privileges #else before_filter for index actions deny the logout
+ skip_before_filter :find_relations #else an exception will be thrown
+ before_filter :authorize, :except => [:index,:log_admin] 
+  
+  def log_admin     
+   session[:superuser] = nil   
+   session[:name] = nil    
+   if request.post?    
+     login = Admin.autentica(params[:username].to_s,params[:password].to_s) if !params[:username].nil? and !params[:password].nil? 
+     if login 
+      session[:superuser] = true
+      session[:name] = "superuser"
+      redirect_to(:controller => "begin")
+     else 
+      flash[:notice] = "Username/password wrong!"
+      redirect_to(:action => "index")
+     end
+   else  
+    redirect_to(:action => "index")
+   end
+  end
+  
+  def change_pwd  
+   if request.post?  
+     @admin = Admin.find(:first) 
+      Admin.check_pwd(@admin.password,params[:admin][:password]) 
+      if @admin.update_attributes(params[:admin]) 
+       flash[:notice]="Password changed!" 
+       redirect_to :action => 'index', :controller => 'begin'      
+      else 
+       render :action => 'change_pwd'  
+      end
+      
+    end  
+  end
+  
+  def add_user
+    @login=Login.new
+    @roles = Role.find(:all, :order => "role" ).map {|r| [r.role,r.id] } 
+  end
+  
+  def create_user
+    @login=Login.new(params[:login]) 
+    @roles = Role.find(:all, :order => "role" ).map {|r| [r.role,r.id] } 
+    @login.passwordLastChanged=Time.now  
+    @login.expired="n" 
+    @login.flagFirstEntry="s" 
+    if @login.save 
+     flash[:notice]="User's account succesfully created." 
+     redirect_to :controller => 'accounts'
+    else
+     render :action => "add_user"
+    end
+  end  
+  
+  def edit_user
+    @login=Login.find(params[:id])
+    @roles = Role.find(:all, :order => "role" ).map {|r| [r.role,r.id] }
+  end
+  
+  def update_user
+    @login=Login.find(params[:id]) 
+    @roles = Role.find(:all, :order => "role" ).map {|r| [r.role,r.id] } 
+    if @login.update_attributes(params[:login]) 
+     flash[:notice]="User's account succesfully updated." 
+     redirect_to :controller => 'accounts'
+    else
+     render :action => "edit_user"
+    end
+  end  
+  
+end

data/controllers/begin_controller.rb

@@ -0,0 +1,5 @@
+class BeginController < ApplicationController
+
+skip_before_filter :privileges
+
+end

data/controllers/login_controller.rb

@@ -0,0 +1,101 @@
+class LoginController < ApplicationController
+
+  skip_before_filter :privileges #else before_filter for index actions deny the logout
+  skip_before_filter :find_relations #else an exception will be thrown
+  before_filter :authorize, :except => [:index,:login]
+
+  def login   
+   session[:name] = nil  
+   session[:username] = nil 
+   if request.post?   
+     login = Login.autentica(params[:usernameMail].to_s,params[:password].to_s) if !params[:usernameMail].nil? and !params[:password].nil?   
+     if login 
+      if login.flagFirstEntry == "s" 
+       session[:username] = login.usernameMail 
+       flash[:notice] = "This is your first access. Please change the password." 
+       redirect_to(:action => "change_pwd", :id => login)  
+      elsif login.passwordLastChanged < 180.days.ago or login.lastAccess < 180.days.ago  
+       login.expired = "s" 
+       login.password = params[:password] 
+       login.save 
+       session[:username] = login.usernameMail 
+       flash[:notice] = "Password expired!Please change it." 
+       redirect_to(:action => "expired_pwd", :id => login)  
+      else 
+       session[:name] = login.username 
+       session[:username] = login.usernameMail 
+       session[:user_id] = login.id 
+       login.lastAccess = Time.now 
+       login.password = params[:password] 
+       login.save      
+       redirect_to(:controller => "begin") 
+      end
+     else 
+      flash[:notice] = "Username/password wrong!" 
+      redirect_to(:action => "index") 
+     end
+   else
+    redirect_to(:action => "index") 
+   end
+  end
+  
+  def logout   
+   reset_session
+   flash[:notice] = "Logout done succesfully."
+   redirect_to :action => "index"
+  end
+  
+  def change_pwd 
+    if !params[:id].nil? 
+    @user=Login.find(params[:id])   
+    if request.post?  
+      Login.check_pwd(@user.password,params[:login][:password]) 
+      @user.flagFirstEntry = "n"  
+      @user.passwordLastChanged = Time.now 
+      @user.lastAccess = Time.now 
+      if @user.update_attributes(params[:login]) 
+       if session[:admin] 
+        flash[:notice]="Password changed!" 
+        redirect_to :action => 'index', :controller => 'begin'      
+       else       
+        reset_session
+        flash[:notice]="Password changed! Please re-login." 
+        redirect_to :action => 'index'   
+       end    
+      else 
+       render :action => 'change_pwd'  
+      end
+      
+    end
+   else 
+    flash[:notice]="Can't change the password without an id!" 
+    redirect_to :action => 'index'  
+   end 
+  end
+  
+  def expired_pwd 
+   if !params[:id].nil? 
+    @user=Login.find(params[:id]) 
+    if request.post?  
+      Login.check_pwd(@user.password,params[:login][:password]) 
+      @user.passwordLastChanged = Time.now 
+      @user.lastAccess = Time.now 
+      @user.expired = "n" 
+      if @user.update_attributes(params[:login]) 
+       reset_session
+       flash[:notice]="Password changed! Please re-login." 
+       redirect_to :action => 'index'    
+      else
+       render :action => 'expired_pwd'           
+      end
+    else
+      render :action => 'expired_pwd'  
+    end
+   else
+    flash[:notice]="Can't change the password without an id!" 
+    redirect_to :action => 'index'  
+   end   
+  end
+
+  
+end

data/controllers/permission_controller.rb

@@ -0,0 +1,91 @@
+class PermissionController < ApplicationController
+
+def tables
+  @roles=Role.find(:all)
+  @tables=Table.find(:all,:include => :table_fields)
+  @tab_op=TabOperation.find(:all)
+  @field_op=AttrOperation.find(:all)
+end
+
+def roles
+  @roles=Role.find(:all,:order => "role")
+  @tables=Table.find(:all,:include => :table_fields)
+  @tab_op=TabOperation.find(:all)
+  @field_op=AttrOperation.find(:all)
+end
+
+def save
+ TabPermission.transaction do
+  #updating table-level permissions, empting the table and then re-fill it
+  TabPermission.destroy_all
+  @all=params[:table]
+  unless @all.nil?
+  @all.each do |one|
+    #from something like (role,table_name,operation) to ([role],[table_name],[operation])
+    values=one.split(',')
+    TabPermission.create(
+     :role_id => values[0],
+     :table_id => values[1],
+     :tab_operation_id => values[2]
+     )
+  end
+  end
+     
+  #updating field-level permissions, empting the table and then re-fill it     
+  AttrPermission.destroy_all
+  @all=params[:field]
+  unless @all.nil?
+  @all.each do |one|
+    #from something like (role,table_name,operation) to ([role],[table_name],[operation])
+    values=one.split(',')
+    AttrPermission.create(
+     :role_id => values[0],
+     :table_field_id => values[1],
+     :attr_operation_id => values[2]
+     )
+  end
+  end
+ end 
+ 
+ flash[:notice] = "Changes saved."
+ redirect_to(:action => "index")
+end
+
+def relations
+ @relations=Relation.find(:all, :conditions => "for_join_table <> \"yes\"")
+ @roles=Role.find(:all,:order => "role")
+end
+
+def save_relations
+ RelationPermission.transaction do
+  RelationPermission.destroy_all
+  @all=params[:rel_permission]
+  unless @all.nil?
+  @all.each do |one|
+    #from (relation,role) to ([relation],[role])
+    values=one.split(',')
+    RelationPermission.create(
+     :relation_id => values[0],
+     :role_id => values[1],
+     :action => values[4]
+     )
+    #if the relation is many to many we need to add relations between join table and the related tables 
+    if values[2]=="many-to-many"
+     relation=Relation.find_all_by_join_table_and_for_join_table(values[3],"yes")
+     relation.each {|r|
+      RelationPermission.create(
+      :relation_id => r.id,
+      :role_id => values[1],
+      :action => values[4]
+      )
+      }
+     
+    end 
+  end
+  end
+ end
+ flash[:notice] = "Changes saved."
+ redirect_to(:action => "index")
+end
+
+end

data/controllers/roles_controller.rb

@@ -0,0 +1,58 @@
+class RolesController < ApplicationController
+  
+  def index
+    list
+    render :action => 'list'
+  end
+
+  # GETs should be safe (see http://www.w3.org/2001/tag/doc/whenToUseGet.html)
+  verify :method => :post, :only => [ :destroy, :create, :update ],
+         :redirect_to => { :action => :list }
+   
+  verify :session => :superuser, :redirect_to => {:controller => :admin}, :add_flash => {:notice => "Please login first!"} 
+         
+  skip_before_filter :authorize       
+
+  def list
+    @role_pages, @roles = paginate :roles, :per_page => 10
+  end
+
+  def show
+    @role = Role.find(params[:id])
+  end
+
+  def new
+    @role = Role.new
+  end
+
+  def create
+    @role = Role.new(params[:role])
+    if @role.save
+      flash[:notice] = 'Role was succesfully created.'
+      redirect_to :action => 'list'
+    else
+      render :action => 'new'
+    end
+  end
+
+  def edit
+    @role = Role.find(params[:id])
+  end
+
+  def update
+    @role = Role.find(params[:id])
+    if @role.update_attributes(params[:role])
+      flash[:notice] = 'Role was successfully updated.'
+      redirect_to :action => 'list'
+    else
+      render :action => 'edit'
+    end
+  end
+
+  def destroy
+    Role.find(params[:id]).destroy 
+    flash[:notice] = 'Role was succesfully deleted.'
+    redirect_to :action => 'list'
+  end
+
+end