biovision 0.1.210414.0 → 0.12.211128.0

data/app/lib/biovision/components/base/component_privileges.rb

@@ -5,22 +5,16 @@ module Biovision
     module Base
       # Handling component privileges
       module ComponentPrivileges
-        # @param [String|Array] privileges
-        # @deprecated use #role? or #permit?
-        def allow?(*privileges)
-          permit?(*privileges)
-        end
-
         # @param [String] action
         # @param [Object] context
         def permit?(action = 'default', context = nil)
           return false if user.nil?
 
-          parts = []
+          parts = [slug]
           model = model_from_context(context)
           parts << model.table_name if model.respond_to?(:table_name)
           parts << action
-          owner?(context) || role?(parts.join('.'))
+          owner?(context) || role?(parts.join('.')) || role?("#{slug}.all")
         end
 
         # @param [ApplicationRecord|nil] entity
@@ -33,12 +27,12 @@ module Biovision
         # @param [String] role_name
         def role?(role_name)
           return false if user.nil?
-          return true if user.super_user? || administrator?
+          return true if user.super_user?
 
           role = Role[role_name]
           return false if role.nil?
 
-          Array(user.data['role_cache']).include?(role.id)
+          user.role_ids.include?(role.id)
         end
 
         # @param [Class|Object] context
@@ -47,18 +41,34 @@ module Biovision
           context.is_a?(Class) ? context : context.class
         end
 
-        def create_roles
-          slugs = %w[view edit]
-          model_roles = %w[list view create edit destroy]
-          model_roles.each { |role| slugs << "simple_images.#{role}" }
-          self.class.dependent_models.each do |model|
-            model_roles.each { |role| slugs << "#{model.table_name}.#{role}" }
+        def crud_table_names
+          tables = administrative_parts
+          tables << 'simple_images' if use_images?
+          tables << 'uploaded_files' if use_files?
+          tables
+        end
+
+        def role_tree
+          tree = { nil => %w[all default view] }
+          tree['settings'] = %w[view edit] if use_settings?
+          crud_table_names.each do |table_name|
+            tree[table_name] = %w[view edit]
           end
+          tree
+        end
 
-          slugs.each do |slug|
-            Role.create(biovision_component: component, slug: slug)
+        def create_roles
+          role_tree.each do |prefix, postfixes|
+            postfixes.each do |postfix|
+              slug = prefix.blank? ? postfix : "#{prefix}.#{postfix}"
+              Role.create(biovision_component: component, slug: slug)
+            end
           end
         end
+
+        def administrative_parts
+          self.class.dependent_models.map(&:table_name)
+        end
       end
     end
   end

data/app/lib/biovision/components/base/component_settings.rb

@@ -17,6 +17,14 @@ module Biovision
           []
         end
 
+        def default_settings
+          {}
+        end
+
+        def reset_settings
+          BiovisionComponent[slug]&.update(settings: default_settings)
+        end
+
         # @param [Hash] data
         def normalize_settings(data)
           result = {}

data/app/lib/biovision/components/base/component_stories.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+module Biovision
+  module Components
+    module Base
+      # Methods for handling component stories
+      module ComponentStories
+        # @param [String] story_slug
+        def story_class(story_slug)
+          namespace = "biovision/components/#{self.class.slug}"
+          handler_name = "#{namespace}/stories/#{story_slug}_story".classify
+          handler_name.safe_constantize || Biovision::Stories::ComponentStory
+        end
+
+        # @param [String] story_slug
+        # @param [ApplicationRecord|nil] entity
+        def story(story_slug, entity = nil)
+          story_class(story_slug).new(self, entity)
+        end
+
+        # @param [String] story_slug
+        # @param [Hash] story_parameters
+        # @param [ApplicationRecord|String|nli] entity
+        def perform_story(story_slug, story_parameters, entity = nil)
+          story(story_slug, entity).perform(story_parameters)
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/base/entity_links.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+module Biovision
+  module Components
+    module Base
+      # Links for entities in context of current user
+      module EntityLinks
+        # @param [ApplicationRecord] entity
+        def text_for_link(entity)
+          entity.respond_to?(:text_for_link) ? entity.text_for_link : entity.id
+        end
+
+        # @param [ApplicationRecord] entity
+        # @param [Symbol|String] scope
+        def entity_link(entity, scope = '')
+          prefix = %i[admin my].include?(scope.to_sym) ? scope : 'world'
+          message = "#{prefix}_url".to_sym
+          if entity.respond_to?(message)
+            entity.send(message)
+          else
+            rest_entity_link(entity, scope.to_sym)
+          end
+        end
+
+        # @param [ApplicationRecord] entity
+        # @param [Symbol] scope
+        def rest_entity_link(entity, scope)
+          collection = "/#{scope}/#{entity.class.table_name}".gsub('//', '/')
+          if entity.attributes.key?('uuid') && scope != :admin
+            "#{collection}/#{entity.uuid}"
+          else
+            "#{collection}/#{entity.id}"
+          end
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/base/image_handling.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+module Biovision
+  module Components
+    module Base
+      # Handling simple images
+      module ImageHandling
+        def use_images?
+          false
+        end
+
+        # @param [Hash] parameters
+        def upload_image(parameters)
+          return if parameters[:image].blank?
+
+          checksum = Digest::SHA256.file(parameters[:image].path).hexdigest
+          SimpleImage[checksum] || create_image(parameters, checksum)
+        end
+
+        private
+
+        # @param [Hash] parameters
+        # @param [String] checksum
+        def create_image(parameters, checksum)
+          image = component.simple_images.new(parameters)
+          image.data[SimpleImage::ORIGINAL_CHECKSUM] = checksum
+          image.save
+          image
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/base_component.rb

@@ -7,8 +7,11 @@ module Biovision
       extend Base::ComponentSettings
       include Base::ComponentPrivileges
       include Base::ComponentParameters
+      include Base::EntityLinks
+      include Base::ImageHandling
 
-      attr_reader :component, :slug, :name, :user, :user_link
+      attr_reader :component, :slug, :name
+      attr_accessor :user
 
       # @param [BiovisionComponent] component
       # @param [User|nil] user
@@ -16,8 +19,7 @@ module Biovision
         @component = component
         @slug = component&.slug || 'base'
         self.user = user
-
-        @name = I18n.t("biovision.components.#{@slug}.name", default: @slug)
+        @name = I18n.t("biovision.components.#{slug}.name", default: slug)
       end
 
       # Receive component-specific handler by component slug
@@ -53,27 +55,13 @@ module Biovision
         handler_name.safe_constantize || BaseComponent
       end
 
-      # Privilege names for using in biovision_component_user.data
-      # @deprecated use roles instead
-      def self.privilege_names
-        []
-      end
-
       # Model list for automatic role creation
       def self.dependent_models
         []
       end
 
-      # @param [User] user
-      def self.privileged?(user)
-        return false if user.nil? || user.banned?
-        return true if user.super_user?
-
-        BiovisionComponentUser.owned_by(user).each do |link|
-          return true if link.administrator? || !link.data['privileges'].blank?
-        end
-
-        false
+      def self.create
+        BiovisionComponent.create(slug: slug, settings: default_settings)
       end
 
       # @param [ApplicationRecord] entity
@@ -89,35 +77,10 @@ module Biovision
         }.merge(options)
       end
 
-      # @param [User] user
-      def user=(user)
-        @user = user
-
-        criteria = { biovision_component: @component, user: user }
-
-        @user_link = BiovisionComponentUser.find_by(criteria)
-      end
-
-      def user_link!(force_create = false)
-        if @user_link.nil?
-          criteria = { biovision_component: @component, user: user }
-          @user_link = BiovisionComponentUser.new(criteria)
-          @user_link.save if force_create
-        end
-
-        @user_link
-      end
-
       def use_settings?
         use_parameters? || @component.settings.any?
       end
 
-      def administrator?
-        return false if user.nil?
-
-        user.super_user? || @user_link&.administrator?
-      end
-
       # @param [Hash] data
       def settings=(data)
         @component.settings.merge!(self.class.normalize_settings(data))
@@ -131,7 +94,7 @@ module Biovision
       # @param [String] name
       # @param [Integer] quantity
       def register_metric(name, quantity = 1)
-        metric = Metric.find_by(name: name)
+        metric = Metric[name]
         if metric.nil?
           attributes = {
             biovision_component: @component,
@@ -144,10 +107,6 @@ module Biovision
         metric << quantity
       end
 
-      def privilege_handler
-        @privilege_handler ||= Base::PrivilegeHandler.new(self)
-      end
-
       # @param [User] user
       # @param [String] code_type
       # @param [Integer] quantity
@@ -169,6 +128,18 @@ module Biovision
         data[key.to_s] = new_value
         user.new_component_data(data)
       end
+
+      # @param [ApplicationRecord] entity
+      # @param [Hash] new_attributes
+      def update_entity(entity, new_attributes)
+        entity.update(new_attributes)
+      end
+
+      # @param [Class] model_class
+      # @param [Hash] parameters
+      def new_entity(model_class, parameters)
+        model_class.new(parameters)
+      end
     end
   end
 end

data/app/lib/biovision/components/contact_component.rb

@@ -10,8 +10,12 @@ module Biovision
         [SETTING_FEEDBACK_MAIL]
       end
 
+      def self.default_settings
+        { SETTING_FEEDBACK_MAIL => '' }
+      end
+
       def self.dependent_models
-        [ContactMethod, ContactType, FeedbackResponse, FeedbackMessage]
+        [FeedbackMessage, FeedbackResponse, ContactType, ContactMethod]
       end
 
       def use_parameters?

data/app/lib/biovision/components/content/oembed/receiver.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+# Receiver for OEmbed-wrapped content
+module Biovision
+  module Components
+    module Content
+      module Oembed
+        # Default receiver for embedded media
+        class Receiver
+          PATTERN = %r{<oembed url="([^"]+)"></oembed>}
+
+          # @param [String] url
+          def initialize(url = '')
+            @url = url
+          end
+
+          # @param [String] url
+          def self.[](url)
+            host = URI.parse(url).host
+            slug = OembedDomain[host]&.receiver_slug
+            receiver_path = "biovision/components/content/oembed/#{slug}_receiver"
+            receiver_class = receiver_path.classify.safe_constantize
+
+            receiver_class.nil? ? new(url) : receiver_class.new(url)
+          end
+
+          # @param [String] text
+          def self.convert(text)
+            text.gsub(PATTERN) do |fragment|
+              url = fragment.match(PATTERN)[1].to_s
+              return '' if url.blank?
+
+              receiver = self[url]
+              receiver.code
+            end
+          end
+
+          def self.slug
+            to_s.demodulize.to_s.underscore.gsub('_receiver', '')
+          end
+
+          def self.domains
+            %w[]
+          end
+
+          def self.seed
+            receiver_entity = OembedReceiver.find_or_create_by(slug: slug)
+            domains.each do |domain|
+              receiver_entity.oembed_domains.create(name: domain)
+            end
+          end
+
+          def code
+            @link = OembedLink[@url]
+            @link.code || receive_and_update
+          end
+
+          def fallback
+            attributes = %(rel="external nofollow noreferrer" target="_blank")
+            %(<a href="#{@url}" #{attributes}>#{URI.parse(@url).host}</a>)
+          end
+
+          private
+
+          def receive_and_update
+            code = receive(code_url)
+            @link.code = code
+            @link.save
+
+            code
+          end
+
+          # @param [String] embed_url
+          def receive(embed_url)
+            response = RestClient.get(embed_url)
+            parse(response.body)
+          rescue RestClient::Exception => e
+            Rails.logger.warn("Cannot receive data for #{embed_url}: #{e}")
+            fallback
+          end
+
+          # @param [String] response
+          def parse(response)
+            json = JSON.parse(response)
+            json['html'] || fallback
+          rescue JSON::ParserError => e
+            Rails.logger.warn("Cannot parse response #{response}: #{e}")
+            fallback
+          end
+
+          def code_url
+            "https://#{@host}/oembed?url=#{CGI.escape(@url)}&format=json"
+          end
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/content/oembed/twitter_receiver.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Biovision
+  module Components
+    module Content
+      module Oembed
+        # OEmbed receiver for Twitter
+        class TwitterReceiver < Receiver
+          def code_url
+            "https://publish.twitter.com/oembed?url=#{CGI.escape(@url)}"
+          end
+
+          def self.domains
+            %w[twitter.com www.twitter.com]
+          end
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/content/oembed/vimeo_receiver.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Biovision
+  module Components
+    module Content
+      module Oembed
+        # OEmbed receiver for vimeo.com
+        class VimeoReceiver < Receiver
+          def code_url
+            "https://vimeo.com/api/oembed.json?url=#{CGI.escape(@url)}&responsive=true"
+          end
+
+          def self.domains
+            %w[www.vimeo.com vimeo.com]
+          end
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/content/oembed/youtube_receiver.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Biovision
+  module Components
+    module Content
+      module Oembed
+        # OEmbed receiver for YouTube
+        class YoutubeReceiver < Receiver
+          def code_url
+            "https://www.youtube.com/oembed?url=#{CGI.escape(@url)}&format=json"
+          end
+
+          def self.domains
+            %w[www.youtube.com youtube.com youtu.be]
+          end
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/content_component.rb

@@ -4,24 +4,61 @@ module Biovision
   module Components
     # Content
     class ContentComponent < BaseComponent
-      def self.privilege_names
-        %w[content_manager]
+      def self.dependent_models
+        [
+          DynamicPage, NavigationGroup, NavigationGroupPage, DynamicBlock,
+          OembedReceiver, OembedDomain, OembedLink
+        ]
       end
 
-      def self.dependent_models
-        [DynamicBlock, NavigationGroupPage, NavigationGroup, DynamicPage]
+      def self.seed
+        [
+          Biovision::Components::Content::Oembed::VimeoReceiver,
+          Biovision::Components::Content::Oembed::YoutubeReceiver,
+          Biovision::Components::Content::Oembed::TwitterReceiver
+        ].each(&:seed)
       end
 
       def use_parameters?
         true
       end
 
-      # @param [ApplicationRecord] entity
-      # @deprecated use #permit?
-      def editable?(entity)
-        return false if entity.nil?
+      def use_images?
+        true
+      end
+
+      def crud_table_names
+        super - %w[navigation_group_pages oembed_receivers oembed_domains]
+      end
+
+      def administrative_parts
+        %w[navigation_groups dynamic_blocks dynamic_pages oembed_links]
+      end
+
+      def navigation
+        @navigation ||= prepare_navigation
+      end
+
+      private
+
+      def prepare_navigation
+        result = {}
+        NavigationGroup.connection.execute(grouped_links_query).each do |row|
+          result[row['slug']] = [] unless result.key?(row['slug'])
+          result[row['slug']] << { text: row['name'], url: row['url'] }
+        end
+        result
+      end
 
-        permit?('edit', entity)
+      def grouped_links_query
+        <<~SQL
+          select g.slug, p.name, p.url
+          from "#{NavigationGroupPage.table_name}" gp
+          join "#{NavigationGroup.table_name}" g on gp.navigation_group_id = g.id
+          join "#{DynamicPage.table_name}" p on gp.dynamic_page_id = p.id
+          where p.visible = true
+          order by g.slug asc, gp.priority asc
+        SQL
       end
     end
   end

data/app/lib/biovision/components/track_component.rb

@@ -5,7 +5,7 @@ module Biovision
     # Component for tracking UA and IP
     class TrackComponent < BaseComponent
       def self.dependent_models
-        [IpAddress, Agent, Browser]
+        [Browser, Agent, IpAddress]
       end
     end
   end

data/app/lib/biovision/components/users_component.rb

@@ -33,8 +33,8 @@ module Biovision
 
       def self.dependent_models
         [
-          Notification, Code, BiovisionComponentUser, UserLanguage,
-          LoginAttempt, Token, User
+          User, Token, LoginAttempt, UserLanguage, BiovisionComponentUser, Code,
+          Notification
         ]
       end
 
@@ -51,6 +51,24 @@ module Biovision
         [SETTING_INVITE_COUNT, SETTING_BOUNCE_COUNT, SETTING_BOUNCE_TIMEOUT]
       end
 
+      def self.default_settings
+        {
+          SETTING_OPEN => true,
+          SETTING_EMAIL_AS_LOGIN => false,
+          SETTING_PHONE_AS_LOGIN => false,
+          SETTING_CONFIRM_EMAIL => false,
+          SETTING_REQUIRE_EMAIL => false,
+          SETTING_USE_PHONE => false,
+          SETTING_REQUIRE_PHONE => false,
+          SETTING_CONFIRM_PHONE => false,
+          SETTING_INVITE_ONLY => false,
+          SETTING_USE_INVITES => false,
+          SETTING_INVITE_COUNT => 5,
+          SETTING_BOUNCE_COUNT => 10,
+          SETTING_BOUNCE_TIMEOUT => 3,
+        }
+      end
+
       # @param [User] user
       def self.created_user(user)
         BiovisionComponent.active.pluck(:slug).each do |slug|
@@ -105,6 +123,20 @@ module Biovision
 
         user.attributes[attribute_name.to_s]
       end
+
+      def role_tree
+        result = super
+        result['users'] << 'log_in'
+        result
+      end
+
+      def crud_table_names
+        super - %w[user_languages biovision_component_users]
+      end
+
+      def administrative_parts
+        %w[users tokens login_attempts codes notifications]
+      end
     end
   end
 end