biovision 0.0.200518.1 → 0.12.211124.0

data/app/models/uploaded_file.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+# Uploaded file
+#
+# Attributes:
+#   attachment [SimpleFileUploader]
+#   agent_id [Agent], optional
+#   biovision_component_id [BiovisionComponent]
+#   checksum [String]
+#   created_at [DateTime]
+#   data [jsonb]
+#   description [String], optional
+#   ip_address_id [IpAddress], optional
+#   object_count [Integer]
+#   updated_at [DateTime]
+#   user_id [User], optional
+#   uuid [uuid]
+class UploadedFile < ApplicationRecord
+  include Checkable
+  include HasOwner
+  include HasTrack
+  include HasUuid
+
+  META_LIMIT = 255
+
+  mount_uploader :attachment, SimpleFileUploader
+
+  belongs_to :agent, optional: true
+  belongs_to :biovision_component
+  belongs_to :user, optional: true
+  has_many :uploaded_file_tag_files, dependent: :destroy
+  has_many :uploaded_file_tags, through: :uploaded_file_tag_files
+
+  before_save :calculate_checksum
+
+  validates_presence_of :attachment
+  validates_length_of :description, maximum: META_LIMIT
+
+  scope :in_component, ->(v) { where(biovision_component: v) }
+  scope :filtered, ->(v) { where('description ilike ? or attachment ilike ?', "%#{v}%", "%#{v}%") unless v.blank? }
+  scope :list_for_administration, -> { order('attachment asc') }
+
+  def self.entity_parameters
+    %i[attachment description]
+  end
+
+  def name
+    File.basename(attachment.path)
+  end
+
+  def file_size
+    File.size(attachment.path)
+  end
+
+  private
+
+  def calculate_checksum
+    return if attachment&.path.blank?
+
+    self.checksum = Digest::SHA256.file(attachment.path).hexdigest
+  end
+end

data/app/models/uploaded_file_tag.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+# Tag for uploaded file
+#
+# Attributes:
+#   created_at [DateTime]
+#   name [string]
+#   uploaded_files_count [integer]
+#   updated_at [DateTime]
+class UploadedFileTag < ApplicationRecord
+  include Checkable
+  include SimpleTag
+
+  has_many :uploaded_file_tag_files, dependent: :delete_all
+end

data/app/models/uploaded_file_tag_file.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# Link between simple image and tag
+#
+# Attributes:
+#   uploaded_file_id [UploadedFile]
+#   uploaded_file_tag_id [UploadedFileTag]
+class UploadedFileTagFile < ApplicationRecord
+  belongs_to :uploaded_file
+  belongs_to :uploaded_file_tag, counter_cache: :uploaded_files_count
+
+  validates_uniqueness_of :uploaded_file_tag_id, scope: :uploaded_file_id
+end

data/app/models/user.rb

@@ -1,98 +1,126 @@
 # frozen_string_literal: true
 
 # User
-# 
+#
 # Attributes:
 #   agent_id [Agent], optional
 #   allow_mail [boolean]
-#   balance [integer]
 #   banned [boolean]
 #   birthday [date], optional
 #   bot [boolean]
-#   consent [boolean]
 #   created_at [DateTime]
 #   data [jsonb]
 #   deleted [boolean]
 #   email [string], optional
 #   email_confirmed [boolean]
-#   image [UserImageUploader]
+#   image [SimpleImageUploader], optional
 #   inviter_id [User], optional
 #   ip_address_id [IpAddress], optional
 #   language_id [Language], optional
 #   last_seen [datetime], optional
 #   notice [string], optional
 #   password_digest [string]
+#   phone [string], optional
 #   phone_confirmed [boolean]
 #   primary_id [User], optional
+#   profile [Jsonb]
+#   referral_link [string]
 #   screen_name [string]
 #   slug [string]
 #   super_user [boolean]
-#   phone [string], optional
-#   referral_link [string]
 #   updated_at [DateTime]
 #   uuid [uuid]
 class User < ApplicationRecord
   include Checkable
   include HasLanguage
-  include HasSimpleImage
   include HasTrack
   include HasUuid
   include Toggleable
 
   EMAIL_LIMIT = 250
   EMAIL_PATTERN = /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z0-9][-a-z0-9]+)\z/i.freeze
+  FLAG_SKIP_SCREEN_NAME = 'skip_screen_name_validation'
   NOTICE_LIMIT = 255
   PHONE_LIMIT = 50
-  SLUG_LIMIT = 250
+  SLUG_LIMIT = 36
+  SLUG_PATTERN = /\A[_a-z0-9][-_a-z0-9]{0,34}[_a-z0-9]\z/i.freeze
+  SLUG_PATTERN_HTML = '^[_a-zA-Z0-9][-_a-zA-Z0-9]{0,34}[_a-zA-Z0-9]$'
+
+  attr_accessor :code
 
-  toggleable :banned, :allow_mail, :email_confirmed, :phone_confirmed
+  toggleable :email_confirmed, :allow_mail, :phone_confirmed
 
   has_secure_password
-  mount_uploader :image, UserImageUploader
+  mount_uploader :image, SimpleImageUploader
 
   belongs_to :inviter, class_name: User.to_s, optional: true
   has_many :invitees, class_name: User.to_s, foreign_key: :inviter_id, dependent: :nullify
   has_many :tokens, dependent: :delete_all
   has_many :codes, dependent: :delete_all
-  has_many :foreign_users, dependent: :delete_all
+  has_many :foreign_users, dependent: :delete_all if Gem.loaded_specs.key?('biovision-oauth')
   has_many :login_attempts, dependent: :delete_all
   has_many :user_languages, dependent: :delete_all
+  has_many :user_roles, dependent: :destroy
+  has_many :user_groups, dependent: :destroy
 
-  before_validation :normalize_slug
+  after_initialize :prepare_referral_link
 
-  validates_acceptance_of :consent
-  validates_presence_of :screen_name
-  validates_format_of :email, with: EMAIL_PATTERN, allow_blank: true
-  validates :screen_name, uniqueness: { case_sensitive: false }
+  before_validation { self.email = nil if email.blank? }
+  before_validation { self.phone = nil if phone.blank? }
+  after_validation :normalize_slug
+
+  validate do |entity|
+    Biovision::Components::UsersComponent[entity].validate
+  end
+
+  validates :screen_name, presence: true, uniqueness: { case_sensitive: false }
   validates :email, uniqueness: { case_sensitive: false }, allow_nil: true
-  validates_length_of :slug, maximum: SLUG_LIMIT
-  validates_length_of :screen_name, maximum: SLUG_LIMIT
-  validates_length_of :email, maximum: EMAIL_LIMIT
+  validates :phone, uniqueness: { case_sensitive: false }, allow_nil: true
   validates_length_of :phone, maximum: PHONE_LIMIT
   validates_length_of :notice, maximum: NOTICE_LIMIT
 
   scope :bots, ->(f) { where(bot: f.to_i.positive?) unless f.blank? }
   scope :email_like, ->(v) { where('email ilike ?', "%#{v}%") unless v.blank? }
-  scope :with_email, ->(v) { where('lower(email) = lower(?)', v) }
+  scope :with_email, ->(v) { where('lower(email) = lower(?)', v.to_s) }
+  scope :list_for_administration, -> { order('id desc') }
+  scope :search, ->(q) { where('screen_name ilike ?', "%#{q}%") unless q.blank? }
+
+  def self.[](login)
+    find_by(slug: login) || find_by_contact(login)
+  end
+
+  # @param [Integer] page
+  def self.page_for_administration(page = 1)
+    list_for_administration.page(page)
+  end
 
   def self.profile_parameters
-    %i[image allow_mail birthday consent]
+    %i[image allow_mail birthday]
   end
 
   def self.sensitive_parameters
     %i[email phone password password_confirmation]
   end
 
-  # Параметры при регистрации
+  # @param [String] login
+  def self.find_by_contact(login)
+    if login.index('@').to_i.positive?
+      User.with_email(login).first
+    elsif login[0] == '+'
+      User.find_by(phone: login)
+    end
+  end
+
+  # Parameters for registration
   def self.new_profile_parameters
     profile_parameters + sensitive_parameters + %i[screen_name]
   end
 
   # Administrative parameters
   def self.entity_parameters
-    flags = %i[banned bot email_confirmed phone_confirmed foreign_slug]
+    flags = %i[banned bot email_confirmed phone_confirmed]
 
-    new_profile_parameters + flags + %i[screen_name notice balance]
+    new_profile_parameters + flags + %i[notice screen_name slug]
   end
 
   def self.ids_range
@@ -101,6 +129,28 @@ class User < ApplicationRecord
     (min..max)
   end
 
+  # @param [String] role_name
+  def role?(role_name)
+    return true if super_user?
+
+    role = Role[role_name]
+    role_ids.include?(role&.id)
+  end
+
+  def role_ids
+    Array(data[Role::CACHE_KEY]).map(&:to_i)
+  end
+
+  # @param [Role] role
+  def add_role(role)
+    role&.add_user(self)
+  end
+
+  # @param [Role] role
+  def remove_role(role)
+    role&.remove_user(self)
+  end
+
   # Name to be shown as profile
   #
   # This can be redefined for cases when something other than screen name should
@@ -108,18 +158,22 @@ class User < ApplicationRecord
   #
   # @return [String]
   def profile_name
-    screen_name
+    email_as_login? ? email.to_s.split('@').first : screen_name
+  end
+
+  def text_for_link
+    profile_name
   end
 
   def name_for_letter
-    data.dig('profile', 'name').blank? ? profile_name : data['profile']['name']
+    profile['name'].blank? ? profile_name : profile['name']
   end
 
   # @param [TrueClass|FalseClass] include_patronymic
   def full_name(include_patronymic = false)
     result = [name_for_letter]
-    result << data.dig('profile', 'patronymic').to_s.strip if include_patronymic
-    result << data.dig('profile', 'surname').to_s.strip
+    result << profile['patronymic'].to_s.strip if include_patronymic
+    result << profile['surname'].to_s.strip
     result.compact.join(' ')
   end
 
@@ -127,10 +181,49 @@ class User < ApplicationRecord
     allow_mail? && !email.blank?
   end
 
+  def email_as_login?
+    !data[Biovision::Components::UsersComponent::SETTING_EMAIL_AS_LOGIN].blank?
+  end
+
+  def phone_as_login?
+    !data[Biovision::Components::UsersComponent::SETTING_PHONE_AS_LOGIN].blank?
+  end
+
+  # @param [String|Symbol] component_slug
+  def component_data(component_slug)
+    data.dig('components', component_slug.to_s).to_h
+  end
+
+  # @param [String|Symbol] component_slug
+  # @param [Hash] component_data
+  def new_component_data(component_slug, component_data)
+    data['components'] ||= {}
+    data['components'][component_slug.to_s] = component_data.to_h
+  end
+
+  def world_url
+    key = screen_name.downcase == slug ? screen_name : slug
+    "/u/#{CGI.escape(key)}"
+  end
+
+  def age
+    return if birthday.blank?
+
+    now = Time.now.utc.to_date
+    next_month = now.month > birthday.month
+    next_day = (now.month == birthday.month && now.day >= birthday.day)
+    delta = next_month || next_day ? 0 : 1
+    now.year - birthday.year - delta
+  end
+
   private
 
+  def prepare_referral_link
+    self.referral_link = SecureRandom.alphanumeric(12) if referral_link.blank?
+  end
+
   def normalize_slug
-    self.slug = screen_name.to_s if slug.nil?
+    self.slug = screen_name.to_s if slug.blank?
     self.slug = slug.to_s.downcase
   end
 end

data/app/models/user_group.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+# User in ACL group
+#
+# Attributes:
+#   created_at [DateTime]
+#   group_id [Group]
+#   updated_at [DateTime]
+#   user_id [User]
+class UserGroup < ApplicationRecord
+  include HasOwner
+
+  belongs_to :user
+  belongs_to :group, counter_cache: :user_count
+
+  validates_uniqueness_of :group_id, scope: :user_id
+
+  after_create { group.users_changed! }
+  after_destroy { group.users_changed! }
+end

data/app/models/user_role.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# ACL role for user
+#
+# Attributes:
+#   created_at [DateTime]
+#   role_id [Role]
+#   updated_at [DateTime]
+#   user_id [User]
+class UserRole < ApplicationRecord
+  belongs_to :user
+  belongs_to :role
+
+  validates_uniqueness_of :role_id, scope: :user_id
+
+  after_create { role.count_users! }
+  after_destroy { role.count_users! }
+end

data/app/uploaders/simple_file_uploader.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+# Simple file uploader without any processing
+class SimpleFileUploader < CarrierWave::Uploader::Base
+  include Uploaders::PathSlug
+
+  storage :file
+
+  def extension_blacklist
+    %w[
+      htm html action apk app bat bin cmd com command cpl csh exe gadget inf ins
+      inx ipa isu job jse ksh lnk msc msi msp mst osx out paf pif prg ps1 reg
+      rgs run scr sct shb shs u3p vb vbe vbs vbscript workflow ws wsf wsh 0xe
+      73k 89k a6p ac acc acr actm ahk air app arscript as asb awk azw2 beam btm
+      cel celx chm cof crt dek dld dmc docm dotm dxl ear ebm ebs ebs2 ecf eham
+      elf es ex4 exopc ezs fas fky fpi frs fxp gs ham hms hpf hta iim ipf isp
+      jar js jsx kix lo ls mam mcr mel mpx mrc ms ms mxe nexe obs ore otm pex
+      plx potm ppam ppsm pptm prc pvd pwc pyc pyo qpx rbx rox rpj s2a sbs sca
+      scar scb script smm spr tcp thm tlb tms udf upx url vlx vpm wcm widget wiz
+      wpk wpm xap xbap xlam xlm xlsm xltm xqt xys zl9 dmg pkg php rb
+    ]
+  end
+end

data/app/uploaders/simple_image_uploader.rb

@@ -2,18 +2,27 @@
 
 # Uploader for universal simple images
 class SimpleImageUploader < CarrierWave::Uploader::Base
+  include Uploaders::PathSlug
+  include CarrierWave::ImageOptim
   include CarrierWave::MiniMagick
 
   storage :file
 
-  def store_dir
-    "uploads/#{model.class.to_s.underscore}/#{mounted_as}/#{path_slug}"
-  end
-
   def default_url(*)
     ActionController::Base.helpers.asset_path('biovision/placeholders/1x1.svg')
   end
 
+  process :auto_orient
+  process optimize: [{ jpegoptim: true, optipng: true, svgo: true }], if: :optimize_images?
+
+  def auto_orient
+    return unless raster?
+
+    manipulate! do |image|
+      image.tap(&:auto_orient)
+    end
+  end
+
   version :hd, if: :raster_image? do
     resize_to_fit(1920, 1920)
   end
@@ -34,10 +43,12 @@ class SimpleImageUploader < CarrierWave::Uploader::Base
     resize_to_fit(160, 160)
   end
 
-  # Add a white list of extensions which are allowed to be uploaded.
-  # For images you might use something like this:
-  def extension_whitelist
-    %w[jpg jpeg png svg svgz]
+  version :tiny, from_version: :preview, if: :raster_image? do
+    resize_to_fit(48, 48)
+  end
+
+  def extension_allowlist
+    [/jpe?g/, 'png', /svgz?/]
   end
 
   # Text for image alt attribute
@@ -58,10 +69,20 @@ class SimpleImageUploader < CarrierWave::Uploader::Base
     !new_file.extension.match?(/svgz?\z/i)
   end
 
+  def optimize_images?(*)
+    return false unless Rails.application.config.respond_to? :optimize_images
+
+    Rails.application.config.optimize_images
+  end
+
   def raster?
     !File.extname(path).match?(/\.svgz?\z/i)
   end
 
+  def tiny_url
+    raster? ? tiny.url : url
+  end
+
   def preview_url
     raster? ? preview.url : url
   end
@@ -81,16 +102,4 @@ class SimpleImageUploader < CarrierWave::Uploader::Base
   def hd_url
     raster? ? hd.url : url
   end
-
-  private
-
-  def path_slug
-    if model.respond_to?(:uuid)
-      uuid = model&.uuid.to_s
-      "#{uuid[0..2]}/#{uuid[3..5]}/#{uuid[6..7]}/#{uuid}"
-    else
-      id = model&.id.to_i
-      "#{id / 1000}/#{id}"
-    end
-  end
 end

data/app/uploaders/uploaders/path_slug.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+module Uploaders
+  # Using UUID in file path when available
+  module PathSlug
+    def store_dir
+      "uploads/#{model.class.to_s.underscore}/#{mounted_as}/#{path_slug}"
+    end
+
+    private
+
+    def path_slug
+      if model.respond_to?(:uuid)
+        uuid = model.uuid.to_s
+        "#{uuid[0..2]}/#{uuid[3..5]}/#{uuid[6..7]}/#{uuid}"
+      else
+        id = model&.id.to_i
+        "#{id / 1000}/#{id}"
+      end
+    end
+  end
+end

data/app/views/admin/agents/index.html.erb

@@ -7,7 +7,5 @@
 <article>
   <h1><%= t('.heading') %></h1>
   
-  <%= paginate @collection %>
-  <%= render partial: 'shared/admin/list', locals: { collection: @collection } %>
-  <%= paginate @collection %>
+  <%= entity_list(@collection) %>
 </article>

data/app/views/admin/biovision_components/_nav_item.html.erb

@@ -0,0 +1,6 @@
+<div>
+  <%= link_to t('.text'), admin_biovision_components_path %>
+</div>
+<div class="description">
+  <%= t('.description') %>
+</div>

data/app/views/admin/biovision_components/entity/_in_list.html.erb

@@ -0,0 +1,12 @@
+<div class="data">
+  <div><%= admin_entity_link(entity) %></div>
+  <div class="info"><%= entity.slug %></div>
+
+  <% if local_assigns[:handler]&.permit?('edit', entity) %>
+    <%= entity_toggle(entity) %>
+
+    <div class="entity-actions">
+      <%= entity_priority_icons(entity) %>
+    </div>
+  <% end %>
+</div>

data/app/views/admin/biovision_components/index.html.erb

@@ -0,0 +1,11 @@
+<% content_for :meta_title, t('.title') %>
+<% content_for :breadcrumbs do %>
+  <%= admin_biovision_component_link(component_handler.component) %>
+  <span><%= t('admin.biovision_components.nav_item.text') %></span>
+<% end %>
+
+<article>
+  <h1><%= t('.heading') %></h1>
+
+  <%= entity_list(@collection, with_priority: true) %>
+</article>

data/app/views/admin/components/_image.jbuilder

@@ -0,0 +1,18 @@
+json.data do
+  json.id entity.id
+  json.type entity.class.table_name
+  json.attributes do
+    json.call(entity, :uuid, :caption, :image_alt_text, :source_name, :source_link, :object_count)
+  end
+  json.meta do
+    json.name entity.name
+    json.size number_to_human_size(entity.file_size)
+    json.object_count t(:object_count, count: entity.object_count)
+    json.url do
+      json.preview entity.image.preview_url
+      json.small entity.image.small_url
+      json.medium entity.image.medium_url
+      json.hd entity.image.hd_url
+    end
+  end
+end

data/app/views/admin/components/_list.html.erb

@@ -1,7 +1,7 @@
 <% collection.each do |component| %>
   <%
     handler = Biovision::Components::BaseComponent.handler(component, current_user)
-    next if handler.component.nil? || !handler.allow?
+    next if handler.component.nil? || !handler.permit?('view')
   %>
   <%=
     render(

data/app/views/admin/components/entity/_links.html.erb

@@ -1,35 +1,45 @@
 <nav class="biovision-component-nav">
-  <% if handler.allow?('settings') %>
-    <% if handler.use_parameters? || handler.component.settings.any? %>
-      <%=
-        link_to(
-            t('admin.components.settings.nav_text'),
-            admin_component_settings_path(slug: handler.slug),
-            class: 'settings'
-        )
-      %>
-    <% end %>
-  <% end %>
-
-  <% if handler.administrator? %>
+  <% if handler.manage_settings? && handler.permit?('settings.view') %>
     <%=
       link_to(
-          t('admin.components.privileges.nav_text'),
-          admin_component_privileges_path(slug: handler.slug),
-          class: 'privileges'
+        t('admin.components.settings.nav_text'),
+        admin_component_settings_path(slug: handler.slug),
+        class: 'settings'
       )
     %>
   <% end %>
 
   <% prefix = 'admin/components/links/' %>
-  <% if lookup_context.exists?("#{prefix}_#{handler.slug}") %>
-    <ul class="biovision-component-links">
+  <ul class="biovision-component-links">
+    <% if lookup_context.exists?("#{prefix}_#{handler.slug}") %>
+      <%=
+        render(
+          partial: "#{prefix}#{handler.slug}",
+          locals: { handler: handler }
+        )
+      %>
+    <% else %>
+      <% handler.administrative_parts.each do |part| %>
+        <% context = "admin/#{part}/_nav_item" %>
+        <% if handler.permit?("#{part}.view") && lookup_context.exists?(context) %>
+          <li>
+            <%=
+              render(
+                partial: "admin/#{part}/nav_item",
+                locals: { handler: handler }
+              )
+            %>
+          </li>
+        <% end %>
+      <% end %>
+    <% end %>
+    <% if lookup_context.exists?("admin/components/links/extra/_#{handler.slug}") %>
       <%=
         render(
-            partial: "#{prefix}#{handler.slug}",
-            locals: { handler: handler }
+          partial: "admin/components/links/extra/#{handler.slug}",
+          locals: { handler: handler }
         )
       %>
-    </ul>
   <% end %>
+  </ul>
 </nav>

data/app/views/admin/components/image.jbuilder

@@ -0,0 +1 @@
+json.partial! 'image', locals: { entity: @entity }

data/app/views/admin/components/images.jbuilder

@@ -0,0 +1,4 @@
+json.data @collection do |entity|
+  json.partial! 'image', locals: { entity: entity }
+end
+json.partial! 'shared/pagination', locals: { collection: @collection }

data/app/views/admin/components/links/_base.html.erb

@@ -0,0 +1 @@
+<li><%= render 'admin/biovision_components/nav_item' %></li>