biovision 0.4.210512.0 → 0.12.211124.0

data/app/controllers/concerns/restricted_access.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+# Adds method for restricting access
+module RestrictedAccess
+  extend ActiveSupport::Concern
+
+  private
+
+  # Restrict access for anonymous users
+  def restrict_anonymous_access
+    return unless current_user.nil?
+
+    handle_http_401(t('application.errors.restricted_access'))
+  end
+
+  def restrict_access
+    user_action = role_end_from_action
+    role_name = "#{component_handler.slug}.#{user_action}"
+    error = t('admin.errors.unauthorized.missing_role', role: role_name)
+
+    handle_http_401(error) unless component_handler.permit?(user_action)
+  end
+
+  def role_end_from_action
+    role = action_to_role_map.select { |k| k.include?(action_name) }.values.last
+    role || 'default'
+  end
+
+  def action_to_role_map
+    view = %w[index show search]
+    edit = %w[create destroy edit new priority toggle update]
+    {
+      view => "#{controller_name}.view",
+      edit => "#{controller_name}.edit"
+    }
+  end
+end

data/app/controllers/errors_controller.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+# Errors
+class ErrorsController < ApplicationController
+  before_action :set_message
+
+  # get /400
+  def bad_request
+    render :error
+  end
+
+  # get /401
+  def unauthorized
+    render :error
+  end
+
+  # get /403
+  def forbidden
+    render :error
+  end
+
+  # get /422
+  def unprocessable_entity
+    render :error
+  end
+
+  # get /500
+  def internal_server_error
+    render :error
+  end
+
+  private
+
+  def set_message
+    @message = t("application.errors.#{action_name}")
+  end
+end

data/app/controllers/my/components_controller.rb

@@ -2,4 +2,25 @@
 
 # User-side component handling
 class My::ComponentsController < ProfileController
+  before_action :restrict_component_access, except: :index
+
+  # get /my/components
+  def index
+    @collection = BiovisionComponent.list_for_user
+  end
+
+  # get /my/components/:slug
+  def show
+  end
+
+  private
+
+  def restrict_component_access
+    slug = params[:slug]
+    @handler = Biovision::Components::BaseComponent.handler(slug, current_user)
+    role_name = "#{@handler.slug}.default"
+    error = t('admin.errors.unauthorized.missing_role', role: role_name)
+
+    handle_http_401(error) unless @handler.permit?(role_name)
+  end
 end

data/app/controllers/my/index_controller.rb

@@ -1,9 +1,7 @@
 # frozen_string_literal: true
 
 # Main page for user
-class My::IndexController < ApplicationController
-  before_action :restrict_anonymous_access
-
+class My::IndexController < ProfileController
   # get /my
   def index
   end

data/app/controllers/my/profiles_controller.rb

@@ -3,6 +3,8 @@
 # Managing profile for current user
 class My::ProfilesController < ApplicationController
   include Authentication
+  include ProcessedForms
+  include RestrictedAccess
 
   before_action :redirect_authorized_user, only: %i[new create]
   before_action :restrict_anonymous_access, except: %i[check new create]

data/app/controllers/oembed_controller.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+# Receiving oembed data by URLs
+class OembedController < ApplicationController
+  # get /oembed?url=
+  def code
+    url = param_from_request(:url)
+    receiver = Biovision::Components::Content::Oembed::Receiver[url]
+
+    render json: { meta: { code: receiver.code } }
+  end
+end

data/app/controllers/profile_controller.rb

@@ -2,6 +2,8 @@
 
 # Controllers for logged-in users only
 class ProfileController < ApplicationController
+  include RestrictedAccess
+
   before_action :restrict_access
 
   protected

data/app/controllers/users_controller.rb

@@ -2,6 +2,8 @@
 
 # Users for visitors
 class UsersController < ApplicationController
+  include RestrictedAccess
+
   before_action :restrict_anonymous_access, only: %i[ban follow unban unfollow]
   before_action :set_socialization, only: %i[ban follow unban unfollow]
   before_action :set_entity

data/app/helpers/biovision_helper.rb

@@ -8,7 +8,7 @@ module BiovisionHelper
   def admin_entity_link(entity, handler: nil, **options)
     return '∅' if entity.nil?
 
-    component = (handler || Biovision::Components::BaseComponent[])
+    component = (handler || component_handler)
     text = options.delete(:text) { component.text_for_link(entity) }
 
     if handler.nil? || handler.permit?('view', entity)
@@ -35,6 +35,7 @@ module BiovisionHelper
   # @param [Hash] options
   def entity_link(entity, **options)
     return '' if entity.nil?
+    return '' if entity.respond_to?(:visible?) && !entity.visible?
 
     handler = Biovision::Components::BaseComponent[]
     text = options.delete(:text) { handler.text_for_link(entity) }
@@ -53,6 +54,8 @@ module BiovisionHelper
   # @param [Hash] options
   def world_icon(path, title = t(:view_as_visitor), options = {})
     if path.is_a? ApplicationRecord
+      return '' if path.respond_to?(:visible?) && !path.visible?
+
       table_name = path.class.table_name
       path = path.respond_to?(:world_url) ? path.world_url : "/#{table_name}/#{path.id}"
     end
@@ -152,4 +155,16 @@ module BiovisionHelper
   def email_link(email, options = {})
     link_to(email, "mailto:#{email}", options)
   end
+
+  # @param [ApplicationRecord] entity
+  # @deprecated use #entity_priority_icons
+  def admin_priority_icons(entity)
+    render(partial: 'shared/admin/priority', locals: { entity: entity })
+  end
+
+  # @param [ApplicationRecord] entity
+  # @deprecated use #entity_toggle
+  def admin_toggle_block(entity)
+    render(partial: 'shared/admin/toggle', locals: { entity: entity })
+  end
 end

data/app/helpers/entity_helper.rb

@@ -0,0 +1,77 @@
+# frozen_string_literal: true
+
+# Helpers for displaying common entity-related blocks
+module EntityHelper
+  # @param [Enumerable] collection
+  # @param [Symbol|String|nil] scope
+  # @param [Biovision::Components::BaseComponent|nil] handler
+  # @param [TrueClass|FalseClass] with_priority
+  def entity_list(collection, scope: nil, handler: component_handler, with_priority: false)
+    scope = controller.class.module_parent_name.to_s.downcase if scope.nil?
+    suffix = with_priority ? '_with_priority' : ''
+
+    render(
+      partial: "shared/entity/list#{suffix}",
+      locals: { collection: collection, handler: handler, scope: scope.to_sym }
+    )
+  end
+
+  # @param [ApplicationRecord] entity
+  # @param [Symbol|String|nil] scope
+  def entity_toggle(entity, scope: nil)
+    scope = controller.class.module_parent_name.to_s.downcase if scope.nil?
+
+    render(
+      partial: 'shared/entity/toggle',
+      locals: { entity: entity, scope: scope.to_sym }
+    )
+  end
+
+  # @param [ApplicationRecord] entity
+  # @param [Symbol|String|nil] scope
+  def entity_priority_icons(entity, scope: nil)
+    scope = controller.class.module_parent_name.to_s.downcase if scope.nil?
+
+    render(
+      partial: 'shared/entity/priority_icons',
+      locals: { entity: entity, scope: scope.to_sym }
+    )
+  end
+
+  # @param [ApplicationRecord] entity
+  # @param [String] text
+  def linked_entity_block(entity, text: nil)
+    return '' if entity.blank?
+
+    render(
+      partial: 'shared/entity/linked_entity',
+      locals: { entity: entity, text: text }
+    )
+  end
+
+  # @param [ApplicationRecord] entity
+  # @param [String|Symbol] types
+  def entity_partial_block(entity, *types)
+    permitted = %i[
+      priority uuid slug timestamps language simple_image meta_texts track
+    ]
+
+    buffer = ''
+    types.select { |i| permitted.include?(i.to_sym)}.each do |type|
+      buffer += render(partial: "shared/entity/#{type}", locals: { entity: entity })
+    end
+
+    raw buffer
+  end
+
+  def entity_form_block(f, *types)
+    permitted = %i[priority entity_flags simple_image]
+
+    buffer = ''
+    types.select { |i| permitted.include?(i.to_sym)}.each do |type|
+      buffer += render partial: "shared/forms/#{type}", locals: { f: f }
+    end
+
+    raw buffer
+  end
+end

data/app/helpers/my_helper.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# Helper methods for user context
+module MyHelper
+  # @param [ApplicationRecord] entity
+  # @param [Hash] options
+  def my_edit_icon(entity, options = {})
+    title = options.delete(:title) { t(:edit) }
+    key = entity.respond_to?(:uuid) ? entity.uuid : entity.id
+    path = "/my/#{entity.class.table_name}/#{key}/edit"
+    my_icon_with_link('biovision/icons/edit.svg', path, title.to_s, options)
+  end
+
+  # @param [ApplicationRecord] entity
+  # @param [Hash] options
+  def my_destroy_icon(entity, options = {})
+    title = options.delete(:title) { t(:edit) }
+    key = entity.respond_to?(:uuid) ? entity.uuid : entity.id
+    path = "/my/#{entity.class.table_name}/#{key}"
+    default = {
+      class: 'danger',
+      data: { confirm: t(:are_you_sure) },
+      method: :delete,
+    }
+    my_icon_with_link('biovision/icons/destroy.svg', path, title.to_s, default.merge(options))
+  end
+
+  # @param [String|ApplicationRecord] path
+  # @param [String] title
+  # @param [Hash] options
+  def my_icon_with_link(source, path, title = '', options = {})
+    link_to(image_tag(source, alt: title), path, options)
+  end
+end

data/app/lib/biovision/components/base/component_parameters.rb

@@ -9,7 +9,7 @@ module Biovision
           false
         end
 
-        def use_images?
+        def use_files?
           false
         end
 
@@ -36,7 +36,7 @@ module Biovision
         # @param [String] key
         # @return [String]
         def [](key)
-          @component.get(key)
+          @component.get(key, nil)
         end
 
         # Set parameter
@@ -44,7 +44,10 @@ module Biovision
         # @param [String] key
         # @param [String] value
         def []=(key, value)
-          @component[key] = value unless key.blank?
+          return if key.blank?
+
+          @component.parameters[key.to_s] = value
+          @component.save!
         end
       end
     end

data/app/lib/biovision/components/base/component_privileges.rb

@@ -14,7 +14,7 @@ module Biovision
           model = model_from_context(context)
           parts << model.table_name if model.respond_to?(:table_name)
           parts << action
-          owner?(context) || role?(parts.join('.'))
+          owner?(context) || role?(parts.join('.')) || role?("#{slug}.all")
         end
 
         # @param [ApplicationRecord|nil] entity
@@ -42,13 +42,14 @@ module Biovision
         end
 
         def crud_table_names
-          tables = self.class.dependent_models.map(&:table_name)
+          tables = administrative_parts
           tables << 'simple_images' if use_images?
+          tables << 'uploaded_files' if use_files?
           tables
         end
 
         def role_tree
-          tree = { nil => %w[default view] }
+          tree = { nil => %w[all default view] }
           tree['settings'] = %w[view edit] if use_settings?
           crud_table_names.each do |table_name|
             tree[table_name] = %w[view edit]

data/app/lib/biovision/components/base/component_stories.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+module Biovision
+  module Components
+    module Base
+      # Methods for handling component stories
+      module ComponentStories
+        # @param [String] story_slug
+        def story_class(story_slug)
+          namespace = "biovision/components/#{self.class.slug}"
+          handler_name = "#{namespace}/stories/#{story_slug}_story".classify
+          handler_name.safe_constantize || Biovision::Stories::ComponentStory
+        end
+
+        # @param [String] story_slug
+        # @param [ApplicationRecord|nil] entity
+        def story(story_slug, entity = nil)
+          story_class(story_slug).new(self, entity)
+        end
+
+        # @param [String] story_slug
+        # @param [Hash] story_parameters
+        # @param [ApplicationRecord|String|nli] entity
+        def perform_story(story_slug, story_parameters, entity = nil)
+          story(story_slug, entity).perform(story_parameters)
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/base/entity_links.rb

@@ -13,10 +13,24 @@ module Biovision
         # @param [ApplicationRecord] entity
         # @param [Symbol|String] scope
         def entity_link(entity, scope = '')
-          default = "#{scope}/#{entity.class.table_name}/#{entity.id}"
           prefix = %i[admin my].include?(scope.to_sym) ? scope : 'world'
           message = "#{prefix}_url".to_sym
-          entity.respond_to?(message) ? entity.send(message) : "/#{default}"
+          if entity.respond_to?(message)
+            entity.send(message)
+          else
+            rest_entity_link(entity, scope.to_sym)
+          end
+        end
+
+        # @param [ApplicationRecord] entity
+        # @param [Symbol] scope
+        def rest_entity_link(entity, scope)
+          collection = "/#{scope}/#{entity.class.table_name}".gsub('//', '/')
+          if entity.attributes.key?('uuid') && scope != :admin
+            "#{collection}/#{entity.uuid}"
+          else
+            "#{collection}/#{entity.id}"
+          end
         end
       end
     end

data/app/lib/biovision/components/base/image_handling.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+module Biovision
+  module Components
+    module Base
+      # Handling simple images
+      module ImageHandling
+        def use_images?
+          false
+        end
+
+        # @param [Hash] parameters
+        def upload_image(parameters)
+          return if parameters[:image].blank?
+
+          checksum = Digest::SHA256.file(parameters[:image].path).hexdigest
+          SimpleImage[checksum] || create_image(parameters, checksum)
+        end
+
+        private
+
+        # @param [Hash] parameters
+        # @param [String] checksum
+        def create_image(parameters, checksum)
+          image = component.simple_images.new(parameters)
+          image.data[SimpleImage::ORIGINAL_CHECKSUM] = checksum
+          image.save
+          image
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/base_component.rb

@@ -8,17 +8,18 @@ module Biovision
       include Base::ComponentPrivileges
       include Base::ComponentParameters
       include Base::EntityLinks
+      include Base::ImageHandling
 
-      attr_reader :component, :slug, :name, :user, :user_link
+      attr_reader :component, :slug, :name
+      attr_accessor :user
 
       # @param [BiovisionComponent] component
       # @param [User|nil] user
       def initialize(component, user = nil)
         @component = component
-        @slug = component&.slug || 'base'
+        self.slug = component&.slug || 'base'
         self.user = user
-
-        @name = I18n.t("biovision.components.#{@slug}.name", default: @slug)
+        self.name = I18n.t("biovision.components.#{slug}.name", default: slug)
       end
 
       # Receive component-specific handler by component slug
@@ -76,28 +77,6 @@ module Biovision
         }.merge(options)
       end
 
-      # @param [User] user
-      def user=(user)
-        @user = user
-
-        if @user.nil?
-          @user_link = nil
-        else
-          criteria = { biovision_component: @component, user: user }
-          @user_link = BiovisionComponentUser.find_by(criteria)
-        end
-      end
-
-      def user_link!(force_create = false)
-        if @user_link.nil?
-          criteria = { biovision_component: @component, user: user }
-          @user_link = BiovisionComponentUser.new(criteria)
-          @user_link.save if force_create
-        end
-
-        @user_link
-      end
-
       def use_settings?
         use_parameters? || @component.settings.any?
       end
@@ -115,7 +94,7 @@ module Biovision
       # @param [String] name
       # @param [Integer] quantity
       def register_metric(name, quantity = 1)
-        metric = Metric.find_by(name: name)
+        metric = Metric[name]
         if metric.nil?
           attributes = {
             biovision_component: @component,

data/app/lib/biovision/components/content/oembed/receiver.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+# Receiver for OEmbed-wrapped content
+module Biovision
+  module Components
+    module Content
+      module Oembed
+        # Default receiver for embedded media
+        class Receiver
+          PATTERN = %r{<oembed url="([^"]+)"></oembed>}
+
+          # @param [String] url
+          def initialize(url = '')
+            @url = url
+          end
+
+          # @param [String] url
+          def self.[](url)
+            host = URI.parse(url).host
+            slug = OembedDomain[host]&.receiver_slug
+            receiver_path = "biovision/components/content/oembed/#{slug}_receiver"
+            receiver_class = receiver_path.classify.safe_constantize
+
+            receiver_class.nil? ? new(url) : receiver_class.new(url)
+          end
+
+          # @param [String] text
+          def self.convert(text)
+            text.gsub(PATTERN) do |fragment|
+              url = fragment.match(PATTERN)[1].to_s
+              return '' if url.blank?
+
+              receiver = self[url]
+              receiver.code
+            end
+          end
+
+          def self.slug
+            to_s.demodulize.to_s.underscore.gsub('_receiver', '')
+          end
+
+          def self.domains
+            %w[]
+          end
+
+          def self.seed
+            receiver_entity = OembedReceiver.find_or_create_by(slug: slug)
+            domains.each do |domain|
+              receiver_entity.oembed_domains.create(name: domain)
+            end
+          end
+
+          def code
+            @link = OembedLink[@url]
+            @link.code || receive_and_update
+          end
+
+          def fallback
+            attributes = %(rel="external nofollow noreferrer" target="_blank")
+            %(<a href="#{@url}" #{attributes}>#{URI.parse(@url).host}</a>)
+          end
+
+          private
+
+          def receive_and_update
+            code = receive(code_url)
+            @link.code = code
+            @link.save
+
+            code
+          end
+
+          # @param [String] embed_url
+          def receive(embed_url)
+            response = RestClient.get(embed_url)
+            parse(response.body)
+          rescue RestClient::Exception => e
+            Rails.logger.warn("Cannot receive data for #{embed_url}: #{e}")
+            fallback
+          end
+
+          # @param [String] response
+          def parse(response)
+            json = JSON.parse(response)
+            json['html'] || fallback
+          rescue JSON::ParserError => e
+            Rails.logger.warn("Cannot parse response #{response}: #{e}")
+            fallback
+          end
+
+          def code_url
+            "https://#{@host}/oembed?url=#{CGI.escape(@url)}&format=json"
+          end
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/content/oembed/twitter_receiver.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Biovision
+  module Components
+    module Content
+      module Oembed
+        # OEmbed receiver for Twitter
+        class TwitterReceiver < Receiver
+          def code_url
+            "https://publish.twitter.com/oembed?url=#{CGI.escape(@url)}"
+          end
+
+          def self.domains
+            %w[twitter.com www.twitter.com]
+          end
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/content/oembed/vimeo_receiver.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Biovision
+  module Components
+    module Content
+      module Oembed
+        # OEmbed receiver for vimeo.com
+        class VimeoReceiver < Receiver
+          def code_url
+            "https://vimeo.com/api/oembed.json?url=#{CGI.escape(@url)}&responsive=true"
+          end
+
+          def self.domains
+            %w[www.vimeo.com vimeo.com]
+          end
+        end
+      end
+    end
+  end
+end

data/app/lib/biovision/components/content/oembed/youtube_receiver.rb

@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+module Biovision
+  module Components
+    module Content
+      module Oembed
+        # OEmbed receiver for YouTube
+        class YoutubeReceiver < Receiver
+          def code_url
+            "https://www.youtube.com/oembed?url=#{CGI.escape(@url)}&format=json"
+          end
+
+          def self.domains
+            %w[www.youtube.com youtube.com youtu.be]
+          end
+        end
+      end
+    end
+  end
+end