brisk-bills 0.6.0

data/vendor/plugins/active_scaffold/lib/active_scaffold/actions/create.rb

@@ -0,0 +1,120 @@
+module ActiveScaffold::Actions
+  module Create
+    def self.included(base)
+      base.before_filter :create_authorized?, :only => [:new, :create]
+      base.prepend_before_filter :constraints_for_nested_create, :only => [:new, :create]
+      base.verify :method => :post,
+                  :only => :create,
+                  :redirect_to => { :action => :index }
+    end
+
+    def new
+      do_new
+
+      respond_to do |type|
+        type.html do
+          if successful?
+            render(:action => 'create')
+          else
+            return_to_main
+          end
+        end
+        type.js do
+          render(:partial => 'create_form')
+        end
+      end
+    end
+
+    def create
+      do_create
+      @insert_row = params[:parent_controller].nil?
+
+      respond_to do |type|
+        type.html do
+          if params[:iframe]=='true' # was this an iframe post ?
+            responds_to_parent do
+              if successful?
+                render :action => 'on_create'
+              else
+                render :action => 'form_messages_on_create'
+              end
+            end
+          else
+            if successful?
+              flash[:info] = as_(:created_model, :model => @record.to_label)
+              if active_scaffold_config.create.edit_after_create
+                redirect_to params.merge(:action => "edit", :id => @record.id)
+              else
+                return_to_main
+              end
+            else
+              if params[:nested].nil? && active_scaffold_config.actions.include?(:list) && active_scaffold_config.list.always_show_create
+                do_list
+                render(:action => 'list')
+              else
+                render(:action => 'create')
+              end
+            end
+          end
+        end
+        type.js do
+          render :action => 'on_create'
+        end
+        type.xml { render :xml => response_object.to_xml, :content_type => Mime::XML, :status => response_status }
+        type.json { render :text => response_object.to_json, :content_type => Mime::JSON, :status => response_status }
+        type.yaml { render :text => response_object.to_yaml, :content_type => Mime::YAML, :status => response_status }
+      end
+    end
+
+    protected
+    def constraints_for_nested_create
+      if params[:parent_column] && params[:parent_id]
+        @old_eid = params[:eid]
+        @remove_eid = true
+        constraints = {params[:parent_column].to_sym => params[:parent_id]}
+        params[:eid] = Digest::MD5.hexdigest(params[:parent_controller] + params[:controller].to_s + constraints.to_s)
+        session["as:#{params[:eid]}"] = {:constraints => constraints}
+      end
+    end
+
+    # A simple method to find and prepare an example new record for the form
+    # May be overridden to customize the behavior (add default values, for instance)
+    def do_new
+      @record = active_scaffold_config.model.new
+      apply_constraints_to_record(@record)
+      params[:eid] = @old_eid if @remove_eid
+      @record
+    end
+
+    # A somewhat complex method to actually create a new record. The complexity is from support for subforms and associated records.
+    # If you want to customize this behavior, consider using the +before_create_save+ and +after_create_save+ callbacks.
+    def do_create
+      begin
+        active_scaffold_config.model.transaction do
+          @record = update_record_from_params(active_scaffold_config.model.new, active_scaffold_config.create.columns, params[:record])
+          apply_constraints_to_record(@record, :allow_autosave => true)
+          params[:eid] = @old_eid if @remove_eid
+          before_create_save(@record)
+          self.successful = [@record.valid?, @record.associated_valid?].all? {|v| v == true} # this syntax avoids a short-circuit
+          if successful?
+            @record.save! and @record.save_associated!
+            after_create_save(@record)
+          end
+        end
+      rescue ActiveRecord::RecordInvalid
+      end
+    end
+
+    # override this method if you want to inject data in the record (or its associated objects) before the save
+    def before_create_save(record); end
+
+    # override this method if you want to do something after the save
+    def after_create_save(record); end
+
+    # The default security delegates to ActiveRecordPermissions.
+    # You may override the method to customize.
+    def create_authorized?
+      authorized_for?(:action => :create)
+    end
+  end
+end

data/vendor/plugins/active_scaffold/lib/active_scaffold/actions/delete.rb

@@ -0,0 +1,46 @@
+module ActiveScaffold::Actions
+  module Delete
+    def self.included(base)
+      base.before_filter :delete_authorized?, :only => [:delete, :destroy]
+    end
+
+    # this method is for html mode. it provides "the missing action" (http://thelucid.com/articles/2006/07/26/simply-restful-the-missing-action).
+    # it also gives us delete confirmation for html mode. woo!
+    def delete
+      @record = find_if_allowed(params[:id], :destroy)
+      render :action => 'delete'
+    end
+
+    def destroy
+      return redirect_to(params.merge(:action => :delete)) if request.get?
+
+      do_destroy
+
+      respond_to do |type|
+        type.html do
+          flash[:info] = as_(:deleted_model, :model => @record.to_label)
+          return_to_main
+        end
+        type.js { render(:action => 'destroy') }
+        type.xml { render :xml => successful? ? "" : response_object.to_xml, :content_type => Mime::XML, :status => response_status }
+        type.json { render :text => successful? ? "" : response_object.to_json, :content_type => Mime::JSON, :status => response_status }
+        type.yaml { render :text => successful? ? "" : response_object.to_yaml, :content_type => Mime::YAML, :status => response_status }
+      end
+    end
+
+    protected
+
+    # A simple method to handle the actual destroying of a record
+    # May be overridden to customize the behavior
+    def do_destroy
+      @record = find_if_allowed(params[:id], :destroy)
+      self.successful = @record.destroy
+    end
+
+    # The default security delegates to ActiveRecordPermissions.
+    # You may override the method to customize.
+    def delete_authorized?
+      authorized_for?(:action => :destroy)
+    end
+  end
+end

data/vendor/plugins/active_scaffold/lib/active_scaffold/actions/field_search.rb

@@ -0,0 +1,46 @@
+module ActiveScaffold::Actions
+  module FieldSearch
+    def self.included(base)
+      base.before_filter :field_search_authorized?, :only => :show_search
+      base.before_filter :do_search
+    end
+
+    # FieldSearch uses params[:search] and not @record because search conditions do not always pass the Model's validations.
+    # This facilitates for example, textual searches against associations via .search_sql
+    def show_search
+      params[:search] ||= {}
+      @record = active_scaffold_config.model.new
+      respond_to do |type|
+        type.html { render(:action => "field_search") }
+        type.js { render(:partial => "field_search") }
+      end
+    end
+
+    protected
+
+    def do_search
+      unless params[:search].nil?
+        like_pattern = active_scaffold_config.field_search.full_text_search? ? '%?%' : '?%'
+        search_conditions = []
+        columns = active_scaffold_config.field_search.columns
+        columns.each do |column|
+          search_conditions << self.class.condition_for_column(column, params[:search][column.name], like_pattern)
+        end
+        search_conditions.compact!
+        self.active_scaffold_conditions = merge_conditions(self.active_scaffold_conditions, *search_conditions)
+        @filtered = !search_conditions.blank?
+
+        includes_for_search_columns = columns.collect{ |column| column.includes}.flatten.uniq.compact
+        self.active_scaffold_joins.concat includes_for_search_columns
+
+        active_scaffold_config.list.user.page = nil
+      end
+    end
+
+    # The default security delegates to ActiveRecordPermissions.
+    # You may override the method to customize.
+    def field_search_authorized?
+      authorized_for?(:action => :read)
+    end
+  end
+end

data/vendor/plugins/active_scaffold/lib/active_scaffold/actions/list.rb

@@ -0,0 +1,77 @@
+module ActiveScaffold::Actions
+  module List
+    def self.included(base)
+      base.before_filter :list_authorized?, :only => [:index, :table, :update_table, :row, :list]
+    end
+
+    def index
+      list
+    end
+
+    def table
+      do_list
+      render(:action => 'list', :layout => false)
+    end
+
+    # This is called when changing pages, sorts and search
+    def update_table
+      respond_to do |type|
+        type.js do
+          do_list
+          render(:partial => 'list')
+        end
+        type.html { return_to_main }
+      end
+    end
+
+    # get just a single row
+    def row
+      render :partial => 'list_record', :locals => {:record => find_if_allowed(params[:id], :read)}
+    end
+
+    def list
+      do_list
+      if active_scaffold_config.list.always_show_create
+        do_new
+      end
+      respond_to do |type|
+        type.html { render :action => 'list' }
+        type.js { render :action => 'list', :layout => false }
+        type.xml { render :xml => response_object.to_xml, :content_type => Mime::XML, :status => response_status }
+        type.json { render :text => response_object.to_json, :content_type => Mime::JSON, :status => response_status }
+        type.yaml { render :text => response_object.to_yaml, :content_type => Mime::YAML, :status => response_status }
+      end
+    end
+
+    protected
+
+    # The actual algorithm to prepare for the list view
+    def do_list
+      includes_for_list_columns = active_scaffold_config.list.columns.collect{ |c| c.includes }.flatten.uniq.compact
+      self.active_scaffold_joins.concat includes_for_list_columns
+
+      options = { :sorting => active_scaffold_config.list.user.sorting,
+                  :count_includes => active_scaffold_config.list.user.count_includes }
+      paginate = (params[:format].nil?) ? (accepts? :html, :js) : [:html, :js].include?(params[:format])
+      if paginate
+        options.merge!({
+          :per_page => active_scaffold_config.list.user.per_page,
+          :page => active_scaffold_config.list.user.page
+        })
+      end
+
+      page = find_page(options);
+      if page.items.empty?
+        page = page.pager.first
+        active_scaffold_config.list.user.page = 1
+      end
+      @page, @records = page, page.items
+    end
+
+    # The default security delegates to ActiveRecordPermissions.
+    # You may override the method to customize.
+    def list_authorized?
+      authorized_for?(:action => :read)
+    end
+  end
+end

data/vendor/plugins/active_scaffold/lib/active_scaffold/actions/live_search.rb

@@ -0,0 +1,46 @@
+module ActiveScaffold::Actions
+  module LiveSearch
+    def self.included(base)
+      base.before_filter :live_search_authorized?, :only => :show_search
+      base.before_filter :do_search
+    end
+
+    def show_search
+      respond_to do |type|
+        type.html do
+          if successful?
+            render(:partial => "live_search", :layout => true)
+          else
+            return_to_main
+          end
+        end
+        type.js { render(:partial => "live_search") }
+      end
+    end
+
+    protected
+
+    def do_search
+      @query = params[:search].to_s.strip rescue ''
+
+      unless @query.empty?
+        columns = active_scaffold_config.live_search.columns
+        like_pattern = active_scaffold_config.live_search.full_text_search? ? '%?%' : '?%'
+        search_conditions = self.class.create_conditions_for_columns(@query.split(' '), columns, like_pattern)
+        self.active_scaffold_conditions = merge_conditions(self.active_scaffold_conditions, search_conditions)
+        @filtered = !search_conditions.blank?
+
+        includes_for_search_columns = columns.collect{ |column| column.includes}.flatten.uniq.compact
+        self.active_scaffold_joins.concat includes_for_search_columns
+
+        active_scaffold_config.list.user.page = nil
+      end
+    end
+
+    # The default security delegates to ActiveRecordPermissions.
+    # You may override the method to customize.
+    def live_search_authorized?
+      authorized_for?(:action => :read)
+    end
+  end
+end

data/vendor/plugins/active_scaffold/lib/active_scaffold/actions/nested.rb

@@ -0,0 +1,215 @@
+module ActiveScaffold::Actions
+  # The Nested module basically handles automatically linking controllers together. It does this by creating column links with the right parameters, and by providing any supporting systems (like a /:controller/nested action for returning associated scaffolds).
+  module Nested
+
+    def self.included(base)
+      super
+      base.module_eval do
+        include ActiveScaffold::Actions::Nested::ChildMethods if active_scaffold_config.model.reflect_on_all_associations.any? {|a| a.macro == :has_and_belongs_to_many}
+      end
+      base.before_filter :include_habtm_actions
+      # TODO: it's a bit wasteful to run this routine every page load.
+      base.before_filter :links_for_associations
+      base.helper_method :nested_habtm?
+    end
+
+    def nested
+      do_nested
+
+      respond_to do |type|
+        type.html { render :partial => 'nested', :layout => true }
+        type.js { render :partial => 'nested' }
+      end
+    end
+
+    protected
+
+    # A simple method to find the record we'll be nesting *from*
+    # May be overridden to customize the behavior
+    def do_nested
+      @record = find_if_allowed(params[:id], :read)
+    end
+
+    # Create the automatic column links. Note that this has to happen when configuration is *done*, because otherwise the Nested module could be disabled. Actually, it could still be disabled later, couldn't it?
+    # TODO: This should really be a post-config routine, instead of a before_filter.
+    def links_for_associations
+      active_scaffold_config.list.columns.each do |column|
+        # if column.link == false we won't create a link. that's how a dev can suppress the auto links.
+        if column.association and column.link.nil?
+          if column.plural_association?
+            # note: we can't create nested scaffolds on :through associations because there's no reverse association.
+            column.set_link('nested', :parameters => {:associations => column.name.to_sym}) #unless column.through_association?
+          elsif not column.polymorphic_association?
+            model = column.association.klass
+            begin
+              controller = self.class.active_scaffold_controller_for(model)
+            rescue ActiveScaffold::ControllerNotFound
+              next
+            end
+
+            actions = controller.active_scaffold_config.actions
+            action = nil
+            if actions.include? :update and column.actions_for_association_links.include? :edit and model.authorized_for? :action => :update
+              action = 'edit'
+            elsif actions.include? :show and column.actions_for_association_links.include? :show and model.authorized_for? :action => :read
+              action = 'show'
+            end
+            column.set_link(action, :controller => controller.controller_path, :parameters => {:parent_controller => params[:controller]}) if action
+          end
+        end
+      end
+    end
+
+    def include_habtm_actions
+      if nested_habtm?
+        # Production mode is ok with adding a link everytime the scaffold is nested - we ar not ok with that.
+        active_scaffold_config.action_links.add('new_existing', :label => 'Add Existing', :type => :table, :security_method => :add_existing_authorized?) unless active_scaffold_config.action_links['new_existing']
+        if active_scaffold_config.nested.shallow_delete
+          active_scaffold_config.action_links.add('destroy_existing', :label => 'Remove', :type => :record, :confirm => 'are_you_sure', :method => :delete, :position => false, :security_method => :delete_existing_authorized?) unless active_scaffold_config.action_links['destroy_existing']
+          active_scaffold_config.action_links.delete("destroy") if active_scaffold_config.action_links['destroy']
+        end
+      else
+        # Production mode is caching this link into a non nested scaffold
+        active_scaffold_config.action_links.delete('new_existing') if active_scaffold_config.action_links['new_existing']
+        
+        if active_scaffold_config.nested.shallow_delete
+          active_scaffold_config.action_links.delete("destroy_existing") if active_scaffold_config.action_links['destroy_existing']
+          active_scaffold_config.action_links.add('destroy', :label => 'Delete', :type => :record, :confirm => 'are_you_sure', :method => :delete, :position => false, :security_method => :delete_authorized?) unless active_scaffold_config.action_links['destroy']
+        end
+        
+      end
+    end
+
+    def nested?
+      !params[:nested].nil?
+    end
+
+    def nested_habtm?
+      begin
+        a = active_scaffold_config.columns[nested_association]
+        return a.association.macro == :has_and_belongs_to_many if a and nested?
+        false
+      rescue
+        raise ActiveScaffold::MalformedConstraint, constraint_error(active_scaffold_config.model, nested_association), caller
+      end
+    end
+
+    def nested_association
+      return active_scaffold_constraints.keys.to_s.to_sym if nested?
+      nil
+    end
+
+    def nested_parent_id
+      return active_scaffold_constraints.values.to_s if nested?
+      nil
+    end
+
+  end
+end
+
+module ActiveScaffold::Actions::Nested
+  module ChildMethods
+
+    def self.included(base)
+      super
+      # This .verify method call is clashing with other non .add_existing actions. How do we do this correctly? Can we make it action specific.
+      # base.verify :method => :post,
+      #             :only => :add_existing,
+      #             :redirect_to => { :action => :index }
+    end
+
+    def new_existing
+      do_new
+
+      respond_to do |type|
+        type.html do
+          if successful?
+            render(:action => 'add_existing_form')
+          else
+            return_to_main
+          end
+        end
+        type.js do
+          render(:partial => 'add_existing_form')
+        end
+      end
+    end
+
+    def add_existing
+      do_add_existing
+
+      respond_to do |type|
+        type.html do
+          if successful?
+            flash[:info] = as_(:created_model, :model => @record.to_label)
+            return_to_main
+          else
+            render(:action => 'add_existing_form')
+          end
+        end
+        type.js do
+          if successful?
+            render :action => 'add_existing'
+          else
+            render :action => 'form_messages'
+          end
+        end
+        type.xml { render :xml => response_object.to_xml, :content_type => Mime::XML, :status => response_status }
+        type.json { render :text => response_object.to_json, :content_type => Mime::JSON, :status => response_status }
+        type.yaml { render :text => response_object.to_yaml, :content_type => Mime::YAML, :status => response_status }
+      end
+    end
+
+    def destroy_existing
+      return redirect_to(params.merge(:action => :delete)) if request.get?
+
+      do_destroy_existing
+
+      respond_to do |type|
+        type.html do
+          flash[:info] = as_(:deleted_model, :model => @record.to_label)
+          return_to_main
+        end
+        type.js { render(:action => 'destroy') }
+        type.xml { render :xml => successful? ? "" : response_object.to_xml, :content_type => Mime::XML, :status => response_status }
+        type.json { render :text => successful? ? "" : response_object.to_json, :content_type => Mime::JSON, :status => response_status }
+        type.yaml { render :text => successful? ? "" : response_object.to_yaml, :content_type => Mime::YAML, :status => response_status }
+      end
+    end
+    
+    protected
+
+    def after_create_save(record)
+      if params[:association_macro] == :has_and_belongs_to_many
+        params[:associated_id] = record
+        do_add_existing
+      end
+    end
+
+    def nested_action_from_params
+      return params[:parent_model].constantize, nested_parent_id, params[:parent_column]
+    end
+
+    # The actual "add_existing" algorithm
+    def do_add_existing
+      parent_model, id, association = nested_action_from_params
+      parent_record = find_if_allowed(id, :update, parent_model)
+      @record = active_scaffold_config.model.find(params[:associated_id])
+      parent_record.send(association) << @record
+      parent_record.save
+    end
+
+    def do_destroy_existing
+      if active_scaffold_config.nested.shallow_delete
+        parent_model, id, association = nested_action_from_params
+        @record = find_if_allowed(id, :update, parent_model)
+        collection = @record.send(association)
+        assoc_record = collection.find(params[:id])
+        collection.delete(assoc_record)
+      else
+        do_destroy
+      end
+    end
+
+  end
+end