branston 0.3.2

data/lib/branston/app/controllers/scenarios_controller.rb

@@ -0,0 +1,104 @@
+class ScenariosController < ApplicationController
+
+  layout 'main'
+  before_filter :login_required
+  before_filter :find_story, :except => [:destroy, :set_scenario_title]
+
+  in_place_edit_for :scenario, :title
+
+  def index
+    @scenarios = @story.scenarios
+    respond_to do |format|
+      format.html
+      format.js
+    end
+  end
+
+  # GET /scenarios/1
+  # GET /scenarios/1.xml
+  def show
+    @scenario = Scenario.find(params[:id])
+
+    respond_to do |format|
+      format.html # scenario.html.erb
+      format.xml  { render :xml => @scenario }
+    end
+  end
+
+  # GET /stories/:story_id/scenarios/new
+  # GET /stories/:story_id/scenarios/new.xml
+  def new
+    @scenario = Scenario.new
+    @scenarios = @story.scenarios
+    @scenarios.push @scenario
+    respond_to do |format|
+      format.html # new.html.erb
+      format.xml  { render :xml => @story }
+      format.js
+    end
+  end
+
+
+  # GET /scenarios/1/edit
+  def edit
+    @scenario = Scenario.find(params[:id])
+  end
+
+  # POST /stories/:story_id/scenarios
+  # POST /stories/:story_id/scenarios.xml
+  def create
+    @scenario = Scenario.new(params[:scenario])
+    @scenario.story = @story
+    respond_to do |format|
+      if @scenario.save
+        @scenarios = @story.scenarios
+        flash[:notice] = 'Scenario was successfully created.'
+        format.html { redirect_to story_scenario_path(@story, @scenario) }
+        format.xml  { render :xml => @scenario, :status => :created, :location => @scenario }
+        format.js
+      else
+        format.html { render :action => "new" }
+        format.xml  { render :xml => @scenario.errors, :status => :unprocessable_entity }
+      end
+    end
+  end
+
+  # PUT /scenarios/1
+  # PUT /scenarios/1.xml
+  def update
+    @scenario = Scenario.find(params[:id])
+    respond_to do |format|
+      if @scenario.update_attributes(params[:scenario])
+        flash[:notice] = 'Scenario was successfully updated.'
+        format.html { redirect_to story_scenario_path(@story, @scenario) }
+        format.xml  { head :ok }
+      else
+        format.html { render :action => "edit" }
+        format.xml  { render :xml => @scenario.errors, :status => :unprocessable_entity }
+      end
+    end
+  end
+
+  # DELETE /stories/1
+  # DELETE /stories/1.xml
+  def destroy
+    @scenario = Scenario.find(params[:id])
+    @story = @scenario.story
+    @scenario.destroy
+
+    respond_to do |format|
+      format.html { redirect_to(story_scenarios_path(@story)) }
+      format.xml  { head :ok }
+      format.js
+    end
+  end
+
+
+  private
+
+  def find_story
+    @story = Story.find_by_slug(params[:story_id]) if @story.nil?
+  end
+
+end
+

data/lib/branston/app/controllers/sessions_controller.rb

@@ -0,0 +1,44 @@
+# This controller handles the login/logout function of the site.
+class SessionsController < ApplicationController
+
+  layout 'main'
+
+  # render new.rhtml
+  def new
+  end
+
+  def create
+    logout_keeping_session!
+    user = User.authenticate(params[:login], params[:password])
+    if user
+      # Protects against session fixation attacks, causes request forgery
+      # protection if user resubmits an earlier form using back
+      # button. Uncomment if you understand the tradeoffs.
+      # reset_session
+      self.current_user = user
+      new_cookie_flag = (params[:remember_me] == "1")
+      handle_remember_cookie! new_cookie_flag
+      redirect_back_or_default('/')
+      flash[:notice] = "Logged in successfully"
+    else
+      note_failed_signin
+      @login       = params[:login]
+      @remember_me = params[:remember_me]
+      render :action => 'new'
+    end
+  end
+
+  def destroy
+    logout_killing_session!
+    flash[:notice] = "You have been logged out."
+    redirect_back_or_default('/')
+  end
+
+protected
+  # Track failed login attempts
+  def note_failed_signin
+    flash[:error] = "Couldn't log you in as '#{params[:login]}'"
+    logger.warn "Failed login for '#{params[:login]}' from #{request.remote_ip} at #{Time.now.utc}"
+  end
+end
+

data/lib/branston/app/controllers/stories_controller.rb

@@ -0,0 +1,121 @@
+class StoriesController < ApplicationController
+
+  layout 'main'
+  before_filter :login_required
+  before_filter :retrieve_iterations, :only =>  [:new, :edit, :create, :update, :index, :show] # so everything?
+
+  in_place_edit_for :story, :title
+  in_place_edit_for :story, :description
+  in_place_edit_for :story, :points
+
+  def generate_feature
+    @story = Story.find_by_slug(params[:id])
+    if @story.nil?
+      @story = Story.find(:first, :include => :scenarios, 
+        :conditions => ['slug LIKE ?', "%#{id}%"] )
+    end
+    @story.generate(@story)
+    render :text => 'done'
+  end
+
+  # GET /stories
+  # GET /stories.xml
+  def index
+    @current_stories = Story.in_progress
+    @backlog_stories = Story.find :all, :conditions => "iteration_id IS NULL"
+
+    respond_to do |format|
+      format.html # index.html.erb
+      format.xml  { render :xml => @stories }
+    end
+  end
+
+  # GET /stories/1
+  # GET /stories/1.xml
+  def show
+    @story = Story.find_by_slug(params[:id])
+
+    respond_to do |format|
+      format.html # show.html.erb
+      format.xml  {        
+        if @story.nil?
+          @story = Story.find(:first, :include => :scenarios, 
+            :conditions => ['slug LIKE ?', "%#{params[:id]}%"] )
+        end
+        render :xml => (@story.to_xml :include => { :scenarios => {
+      :include => [:preconditions, :outcomes] } } ) }
+      format.js { @active = true }
+    end
+  end
+
+  # GET /stories/new
+  # GET /stories/new.xml
+  def new
+    @story = Story.new
+
+    respond_to do |format|
+      format.html # new.html.erb
+      format.xml  { render :xml => @story }
+    end
+  end
+
+  # GET /stories/1/edit
+  def edit
+    @story = Story.find_by_slug(params[:id])
+  end
+
+  # POST /stories
+  # POST /stories.xml
+  def create
+    @story = Story.new(params[:story])
+
+    respond_to do |format|
+      if @story.save
+        flash[:notice] = 'Story was successfully created.'
+        format.html { redirect_to stories_url }
+        format.xml  { render :xml => @story, :status => :created, :location => @story }
+      else
+        format.html { render :action => "new" }
+        format.xml  { render :xml => @story.errors, :status => :unprocessable_entity }
+      end
+    end
+  end
+
+  # PUT /stories/1
+  # PUT /stories/1.xml
+  def update
+    @story = Story.find_by_slug(params[:id])
+    respond_to do |format|
+      if @story.update_attributes(params[:story])
+        flash[:notice] = 'Story was successfully updated.'
+        format.html { redirect_to(@story) }
+        format.xml  { head :ok }
+        format.js { redirect_to stories_path }
+      else
+        format.html { render :action => "edit" }
+        format.xml  { render :xml => @story.errors, :status => :unprocessable_entity }
+      end
+    end
+  end
+
+  # DELETE /stories/1
+  # DELETE /stories/1.xml
+  def destroy
+    @story = Story.find_by_slug(params[:id])
+    @story.destroy
+
+    respond_to do |format|
+      format.html { redirect_to(stories_url) }
+      format.xml  { head :ok }
+    end
+  end
+
+
+  private
+
+  def retrieve_iterations
+    @iterations = Iteration.all
+  end
+
+end
+

data/lib/branston/app/controllers/user_roles_controller.rb

@@ -0,0 +1,91 @@
+class UserRolesController < ApplicationController
+
+  layout 'main'
+
+  before_filter :login_required
+
+  # GET /user_roles
+  # GET /user_roles.xml
+  def index
+    @user_roles = UserRole.all
+
+    respond_to do |format|
+      format.html # index.html.erb
+      format.xml  { render :xml => @user_roles }
+    end
+  end
+
+  # GET /user_roles/1
+  # GET /user_roles/1.xml
+  def show
+    @user_role = UserRole.find(params[:id])
+
+    respond_to do |format|
+      format.html # show.html.erb
+      format.xml  { render :xml => @user_role }
+    end
+  end
+
+  # GET /user_roles/new
+  # GET /user_roles/new.xml
+  def new
+    @user_role = UserRole.new
+
+    respond_to do |format|
+      format.html # new.html.erb
+      format.xml  { render :xml => @user_role }
+    end
+  end
+
+  # GET /user_roles/1/edit
+  def edit
+    @user_role = UserRole.find(params[:id])
+  end
+
+  # POST /user_roles
+  # POST /user_roles.xml
+  def create
+    @user_role = UserRole.new(params[:user_role])
+
+    respond_to do |format|
+      if @user_role.save
+        flash[:notice] = 'UserRole was successfully created.'
+        format.html { redirect_to(@user_role) }
+        format.xml  { render :xml => @user_role, :status => :created, :location => @user_role }
+      else
+        format.html { render :action => "new" }
+        format.xml  { render :xml => @user_role.errors, :status => :unprocessable_entity }
+      end
+    end
+  end
+
+  # PUT /user_roles/1
+  # PUT /user_roles/1.xml
+  def update
+    @user_role = UserRole.find(params[:id])
+
+    respond_to do |format|
+      if @user_role.update_attributes(params[:user_role])
+        flash[:notice] = 'UserRole was successfully updated.'
+        format.html { redirect_to(@user_role) }
+        format.xml  { head :ok }
+      else
+        format.html { render :action => "edit" }
+        format.xml  { render :xml => @user_role.errors, :status => :unprocessable_entity }
+      end
+    end
+  end
+
+  # DELETE /user_roles/1
+  # DELETE /user_roles/1.xml
+  def destroy
+    @user_role = UserRole.find(params[:id])
+    @user_role.destroy
+
+    respond_to do |format|
+      format.html { redirect_to(user_roles_url) }
+      format.xml  { head :ok }
+    end
+  end
+end
+

data/lib/branston/app/controllers/users_controller.rb

@@ -0,0 +1,28 @@
+class UsersController < ApplicationController
+
+  layout 'main'
+
+  # render new.rhtml
+  def new
+    @user = User.new
+  end
+
+  def create
+    logout_keeping_session!
+    @user = User.new(params[:user])
+    success = @user && @user.save
+    if success && @user.errors.empty?
+      # Protects against session fixation attacks, causes request forgery
+      # protection if visitor resubmits an earlier form using back
+      # button. Uncomment if you understand the tradeoffs.
+      # reset session
+      self.current_user = @user # !! now logged in
+      redirect_back_or_default('/')
+      flash[:notice] = "Thanks for signing up!  We're sending you an email with your activation code."
+    else
+      flash[:error]  = "We couldn't set up that account, sorry.  Please try again, or contact an admin (link is above)."
+      render :action => 'new'
+    end
+  end
+end
+

data/lib/branston/app/helpers/application_helper.rb

@@ -0,0 +1,14 @@
+module ApplicationHelper
+  # Applies an html class attribute where the controller name contains the 'tab_name'.
+  def tab_on(tab_name, html_class="current_page_item")
+    controller_name.match(Regexp.new("#{tab_name}")) ? " class=\"#{html_class}\"" : ''
+  end
+  
+  # Produces a string id using the type and id of obj plus any field suffix supplied useful when
+  # assigning html ids on index pages.
+  # e.g. element_id(user, 'name') => 'User_23_name'
+  def element_id(obj, field="")
+    obj.class.to_s + '_' + obj.to_param + (field.blank? ? '' : '_' + field)
+  end
+end
+

data/lib/branston/app/helpers/iterations_helper.rb

@@ -0,0 +1,2 @@
+module IterationsHelper
+end

data/lib/branston/app/helpers/outcomes_helper.rb

@@ -0,0 +1,2 @@
+module OutcomesHelper
+end

data/lib/branston/app/helpers/preconditions_helper.rb

@@ -0,0 +1,2 @@
+module PreconditionsHelper
+end

data/lib/branston/app/helpers/releases_helper.rb

@@ -0,0 +1,2 @@
+module ReleasesHelper
+end

data/lib/branston/app/helpers/sessions_helper.rb

@@ -0,0 +1,2 @@
+module SessionsHelper
+end

data/lib/branston/app/helpers/stories_helper.rb

@@ -0,0 +1,2 @@
+module StoriesHelper
+end

data/lib/branston/app/helpers/user_roles_helper.rb

@@ -0,0 +1,2 @@
+module UserRolesHelper
+end

data/lib/branston/app/helpers/users_helper.rb

@@ -0,0 +1,93 @@
+module UsersHelper
+  
+  #
+  # Use this to wrap view elements that the user can't access.
+  # !! Note: this is an *interface*, not *security* feature !!
+  # You need to do all access control at the controller level.
+  #
+  # Example:
+  # <%= if_authorized?(:index,   User)  do link_to('List all users', users_path) end %> |
+  # <%= if_authorized?(:edit,    @user) do link_to('Edit this user', edit_user_path) end %> |
+  # <%= if_authorized?(:destroy, @user) do link_to 'Destroy', @user, :confirm => 'Are you sure?', :method => :delete end %> 
+  #
+  #
+  def if_authorized?(action, resource, &block)
+    if authorized?(action, resource)
+      yield action, resource
+    end
+  end
+
+  #
+  # Link to user's page ('users/1')
+  #
+  # By default, their login is used as link text and link title (tooltip)
+  #
+  # Takes options
+  # * :content_text => 'Content text in place of user.login', escaped with
+  #   the standard h() function.
+  # * :content_method => :user_instance_method_to_call_for_content_text
+  # * :title_method => :user_instance_method_to_call_for_title_attribute
+  # * as well as link_to()'s standard options
+  #
+  # Examples:
+  #   link_to_user @user
+  #   # => <a href="/users/3" title="barmy">barmy</a>
+  #
+  #   # if you've added a .name attribute:
+  #  content_tag :span, :class => :vcard do
+  #    (link_to_user user, :class => 'fn n', :title_method => :login, :content_method => :name) +
+  #          ': ' + (content_tag :span, user.email, :class => 'email')
+  #   end
+  #   # => <span class="vcard"><a href="/users/3" title="barmy" class="fn n">Cyril Fotheringay-Phipps</a>: <span class="email">barmy@blandings.com</span></span>
+  #
+  #   link_to_user @user, :content_text => 'Your user page'
+  #   # => <a href="/users/3" title="barmy" class="nickname">Your user page</a>
+  #
+  def link_to_user(user, options={})
+    raise "Invalid user" unless user
+    options.reverse_merge! :content_method => :login, :title_method => :login, :class => :nickname
+    content_text      = options.delete(:content_text)
+    content_text    ||= user.send(options.delete(:content_method))
+    options[:title] ||= user.send(options.delete(:title_method))
+    link_to h(content_text), user_path(user), options
+  end
+
+  #
+  # Link to login page using remote ip address as link content
+  #
+  # The :title (and thus, tooltip) is set to the IP address 
+  #
+  # Examples:
+  #   link_to_login_with_IP
+  #   # => <a href="/login" title="169.69.69.69">169.69.69.69</a>
+  #
+  #   link_to_login_with_IP :content_text => 'not signed in'
+  #   # => <a href="/login" title="169.69.69.69">not signed in</a>
+  #
+  def link_to_login_with_IP content_text=nil, options={}
+    ip_addr           = request.remote_ip
+    content_text    ||= ip_addr
+    options.reverse_merge! :title => ip_addr
+    if tag = options.delete(:tag)
+      content_tag tag, h(content_text), options
+    else
+      link_to h(content_text), login_path, options
+    end
+  end
+
+  #
+  # Link to the current user's page (using link_to_user) or to the login page
+  # (using link_to_login_with_IP).
+  #
+  def link_to_current_user(options={})
+    if current_user
+      link_to_user current_user, options
+    else
+      content_text = options.delete(:content_text) || 'not signed in'
+      # kill ignored options from link_to_user
+      [:content_method, :title_method].each{|opt| options.delete(opt)} 
+      link_to_login_with_IP content_text, options
+    end
+  end
+
+end