brisk-bills 0.6.0

data/app/controllers/admin/proposals_controller.rb

@@ -0,0 +1,22 @@
+class Admin::ProposalsController < ApplicationController
+  include AdminLayoutHelper
+  include ExtensibleObjectHelper
+  
+  include Admin::ActivityTypeControllerHelper
+  
+  active_scaffold "Activity::Proposal" do |config|
+    add_activity_type_config config, :except_columns => [:apply_tax]
+    
+    config.label = "Proposals"
+    
+    %w(update create).each do |crud_action|
+      config.send(crud_action).columns.add_subgroup('Proposals') { |g| g.add [:proposed_on, :label, :comments] }
+    end
+    
+    config.columns << [:label, :comments, :created_at, :updated_at]
+    config.list.columns = [:occurred_on, :proposed_on, :client, :label, :cost, :tax]
+    config.show.columns = [ :occurred_on,:is_published, :client, :label, :cost, :tax, :comments, :updated_at, :created_at ]
+  end
+
+  handle_extensions
+end

data/app/controllers/admin/settings_controller.rb

@@ -0,0 +1,23 @@
+class Admin::SettingsController < ApplicationController
+  include AdminLayoutHelper
+  include ExtensibleObjectHelper
+
+  active_scaffold :setting do |config|
+    config.label = "Site Settings"
+
+    config.create.link = nil
+
+    config.columns = [:label, :keyname, :keyval, :description, :created_at, :updated_at]
+    
+    config.columns[:label].label = 'Setting'
+    config.columns[:keyval].label = 'Value'
+    
+    config.list.columns =[:label, :keyval ]
+    
+    config.list.sorting = [{:label => :asc}]
+    
+    config.create.columns = config.update.columns = [:label, :description, :keyval]
+  end
+  
+  handle_extensions
+end

data/app/controllers/application_controller.rb

@@ -0,0 +1,22 @@
+# Filters added to this controller apply to all controllers in the application.
+# Likewise, all the methods added will be available for all controllers.
+
+require "#{BRISKBILLS_ROOT}/lib/utilities.rb"
+
+class ApplicationController < ActionController::Base
+  before_filter :validate_credentials
+
+  def validate_credentials
+    @active_credential = Credential.find session[:credential_id] if session[:credential_id]
+
+    unless Credential.guest_permitted? params[:controller], params[:action]
+      if @active_credential
+        render :file => "#{RAILS_ROOT}/public/500.html", :status => 500 unless @active_credential.is_request_permitted?( params[:controller], params[:action] )
+      else
+        session[:uncredentialed_request_uri] = request.request_uri
+
+        redirect_to login_url
+      end
+    end
+  end
+end

data/app/controllers/authentication_controller.rb

@@ -0,0 +1,131 @@
+class AuthenticationController < ApplicationController
+  include ApplicationHelper
+
+  layout 'public'
+
+  # Login Messages
+  MSG_INVALID_EMAIL  = "Invalid e-mail address. Let&#39;s try it again?"
+  MSG_UNKNOWN_BUTTON = 'An unknown error occurred while processing your request. How very odd...'
+
+  # Reset Messages
+  MSG_MISMATCHED_PASSWORD = "Your passwords don&#39;t match. Try re-entering your password again, and make sure that both fields contain the same password."
+  MSG_UNRECOGNIZED_EMAIL  = "Oh dear, there&#39;s no record of this e-mail address in our database. Perhaps you mispelled this page&#39;s  address?" 
+  MSG_BAD_TOKEN           = 'Invalid reset token. Perhaps you&#39;re having this problem because you arrived here by clicking the link on an outdated e-mail?'
+  MSG_RESET_SUCCESS       = 'Password Successfully Reset. Please use your new password to Login.'
+
+  def index
+    redirect_to login_url
+  end
+
+  def login
+    respond_to do |format|
+      format.html do
+        define_application_layout_variables
+        @page_title = 'Sign-in'
+
+        if @active_credential
+          redirect_to @active_credential.default_post_login_url_to
+        else     
+          render :action => 'login.rhtml'
+        end
+      end
+      format.js do
+        begin
+          @flash_error = nil
+          @button_press = 'sign_in_error'
+          @button_press = params[:commit][0] if /^(login|email)$/.match(params[:commit][0])
+
+          case @button_press
+            when 'login'
+              @active_credential = Credential.find_using_auth params[:email_address], params[:password]
+
+              if @active_credential
+                session[:credential_id] = @active_credential.id
+
+                @redirect_to = session[:uncredentialed_request_uri]
+
+                session[:uncredentialed_request_uri] = nil
+              end
+            when 'email'
+              credential = Credential.find_by_email params[:email_address]
+
+              if credential
+                reset_token = credential.generate_reset_token!
+
+                credential_name = (credential.user and credential.user.respond_to? :name) ? 
+                  credential.user.name : 
+                  credential.email_address
+
+                mail = Notifier.deliver_reset_password_requested(
+                  credential_name, 
+                  credential.email_address,
+                  reset_token,
+                  request_full_host
+                )
+              else
+                raise StandardError, MSG_INVALID_EMAIL
+              end
+
+            else
+              raise StandardError, MSG_UNKNOWN_BUTTON
+          end
+        rescue
+          @flash_error = $!
+        ensure
+          render :action => "#{@button_press}.rjs"
+        end
+      end
+    end
+  end
+  
+  def logout
+    session[:credential_id] = nil
+    redirect_to login_url
+  end
+  
+  def reset_password_via_token
+    @email_address = params[:email_address][0]
+    @token = params[:token]
+
+    respond_to do |format|
+      format.html do
+        define_application_layout_variables
+        @page_title = 'Reset Password'
+
+        render :action => :reset_password_via_token
+      end
+      format.js do
+        begin
+          raise StandardError, MSG_MISMATCHED_PASSWORD if params[:password_verify] != params[:password]
+
+          active_credential = Credential.find_by_email params[:email_address]
+
+          raise StandardError, MSG_UNRECOGNIZED_EMAIL unless active_credential
+          
+          raise StandardError, MSG_BAD_TOKEN unless active_credential.reset_password_by_token!(params[:token], params[:password])
+          
+          flash[:notice] = MSG_RESET_SUCCESS
+        rescue
+          @flash_error = $!
+        ensure
+          render :action => "reset_password_via_token.rjs"
+        end
+      end
+    end
+  end
+
+  private
+
+  def request_full_host
+    server_address = "#{request.server_name}"
+    if (
+      (request.protocol == 'http://' and request.port != 80) or
+      (request.protocol == 'https://' and request.port != 443)
+    )
+      server_address += ":#{request.port}" 
+    end
+
+    server_address
+  end
+
+end

data/app/helpers/activity_type_model_helper.rb

@@ -0,0 +1,194 @@
+module ActivityTypeModelHelper 
+  
+  def self.append_features(base)
+    super
+    
+    base.class_eval do
+      belongs_to :activity, :class_name => "::Activity"
+      belongs_to :client, :class_name => "::Client"
+      
+      hack_an_association_join(:client) do |association|
+        " LEFT OUTER JOIN %s ON %s.%s = %s.%s " % [
+          association.klass.table_name, 
+          association.aliased_table_name, 
+          association.reflection.klass.primary_key,
+          'activities', 
+          association.klass.to_s.foreign_key
+        ]
+      end
+      
+      # Client hacks
+      def []=(field,value)
+        return activity.nil? ? nil : ( activity[:client_id] = value ) if field.to_sym == :client_id
+        
+        super field, value
+      end
+      
+      def [](field)
+        return activity.nil? ? nil : activity[:client_id] if field.to_sym == :client_id
+    
+        super field
+      end
+      
+      def client=(value)
+        build_activity if activity.nil? and value
+        activity.client = value
+      end
+    
+      class << self
+        def client_arrange_include_param(args)
+          # THis forces the :activity to always occur before :client in an :include
+          args.each do |arg|
+            if (
+              arg.respond_to? :has_key? and
+              arg.has_key? :include and
+              arg[:include].respond_to? :include? and
+              arg[:include].include? :client
+            )
+              arg[:include] = ([:activity] + arg[:include]).uniq
+            end
+          end
+        end
+        
+        def find(*args)
+          client_arrange_include_param args
+          super(*args)
+        end
+    
+        def count(*args)
+          client_arrange_include_param args
+          super(*args)
+        end
+      end
+      # /Client Hacks
+      
+      # We use this when printing invoices, probably not the best way to do this, but its fine enough for now
+      def as_legacy_ledger_row
+        begin
+          # We just do this to help when writing your activity types, as a starting point
+          if label and comments and label.length > 0 and comments.length > 0
+            description = '%s - %s' % [label, comments]
+          else
+            description = (label and label.length > 0) ? label : comments
+          end
+        rescue
+          description = 'TODO: Lorem ipsum dolor sit amet, consectetuer adipiscing elit. '
+        end
+        
+        [
+         1,
+         activity.cost,
+         activity.cost,
+         activity.activity_type.capitalize,
+         occurred_on.strftime('%m/%d/%y'),
+         description
+        ]
+      end
+
+      # Generally useful accessors & utils for the activity association
+      
+      def column_for_attribute(name)
+        # My hack to support the execute_callstack_for_multiparameter_attributes() set for occurred_on
+        (name.to_sym == :occurred_on) ? OpenStruct.new( :klass => Time ) : super(name)
+      end
+      
+      def is_published
+        activity.is_published if activity
+      end
+      
+      def occurred_on
+        self.activity.occurred_on if activity
+      end
+      
+      def cost
+        self.activity.cost if activity
+      end
+      
+      def tax
+        self.activity.tax if activity
+      end
+      
+      def type_quick_namer(*args)
+        nil_label = '(None)'
+        
+        namer_format = args.shift
+        
+        args.map! do |a|   
+          if a.nil?
+            nil_label
+          elsif a.respond_to? :name
+            a.name
+          else
+            a.to_s
+          end
+        end
+        
+        args << ((activity.nil?) ? nil_label : activity.occurred_on.strftime("%m/%d/%Y %I:%M %p"))
+        
+        namer_format % args
+      end
+      
+      # Activity hacks:
+      alias build_activity_without_type_helper build_activity
+      
+      def build_activity(record = {})
+        if /^[^\:]+\:\:(.+)$/.match(self.class.to_s)
+          record[:activity_type] = $1.downcase
+        end
+        
+        build_activity_without_type_helper record
+      end
+      
+      # Published handling:
+      def is_paid?
+        (activity.nil?) ? false : activity.is_paid?
+      end
+      
+      def is_published?
+        (activity.nil?) ? false : activity.is_published?
+      end
+      
+      before_destroy :ensure_not_published
+        
+      def ensure_not_published
+        if is_published?
+          errors.add_to_base "Can't destroy an activity once its invoice is published"
+          return false
+        end
+      end
+      
+      def validate_on_update
+        errors.add_to_base "Activity can't be adjusted once its invoice is published" if is_published? and changed_attributes.length > 0 
+      end
+      # /No updates/destroys
+      
+      # Event handlers:
+      alias initialize_without_activity_type_helper initialize
+      def initialize(*args)
+        initialize_without_activity_type_helper(*args)
+        build_activity if new_record? and activity.nil?
+      end
+  
+      after_destroy { |record| record.activity.destroy }
+      
+      before_save { |record| record.activity.save if record.activity and record.activity.changed? }
+      
+      attr :dont_validate_activity_association
+      def validate
+        super
+        
+        unless dont_validate_activity_association
+          if activity.nil?
+            errors.add :activity, 'missing'
+          else
+            activity.dont_validate_type_associations = true
+            activity.valid?
+            activity.errors.each { |attr, msg| errors.add attr, msg }
+          end
+        end
+      end
+      
+    end
+  end
+
+end

data/app/helpers/admin/activities_helper.rb

@@ -0,0 +1,110 @@
+module Admin::ActivitiesHelper
+  include ::Admin::ActivityTaxFieldHelper
+  include ExtensibleObjectHelper
+
+  def active_scaffold_observe_field(col_name, observation)
+    # This is slightly hackish - but it should work
+    # We Make sure we're supposed to be rendering here based on the :for_activities option
+
+    (observation[:for_activities].include? @record.activity_type) ? super(col_name, observation) : String.new
+  end
+
+  def override_form_field(*args)
+    ret = super(*args)
+
+    ret
+  end
+
+  # List Helpers:
+  def render_list_column(text, column, record)
+    return super unless column.name == :activity
+    
+    activity_partial = "#{record.activity_type}_column"
+    
+    if FileTest.exists? "#{activity_partial_path}/_#{activity_partial}.rhtml"
+      render :partial => activity_partial, :locals => { :record => record }
+    else
+      '-'
+    end
+  end
+  
+  def get_column_value(record, column)
+    return super unless column.name == :activity
+    
+    nil
+  end
+  
+  def column_class(column, column_value)
+     return super unless column.name == :activity
+      
+    "#{column.name}-column"
+  end
+
+  def cost_column(record)
+    h_money record.cost
+  end
+
+  def tax_column(record)
+    h_money record.tax
+  end
+    
+  # Form Helper Routing:
+  def active_scaffold_input_for(column, scope = nil)
+    super column, scope unless column.name == :activity
+  end
+  
+  def override_form_field(column)
+    subtype_override_method = "#{@record.activity_type}_#{column.name}_form_column"
+    
+    respond_to?(subtype_override_method) ? subtype_override_method : "#{column.name}_form_column"
+  end
+
+  # Generic helpers:
+  
+  def cost_form_column(record, input_name)
+    text_field_tag input_name, money_for_input(@record.cost), options_for_column('cost').merge({:size => 10 })
+  end
+  
+  def client_id_form_column(record, input_name)
+    select_tag(
+      input_name, 
+      options_for_select(
+        # NOTE: We don't do a find_active here, but see the conditions...
+        [ ['(Unknown)', nil] ]+Client.find(
+         :all, 
+         :select => 'id, company_name', 
+         :order => 'company_name ASC',
+         :conditions => ['is_active = ? OR id = ?', true, @record.client_id]
+        ).collect {|c| [ c.company_name, c.id ] },
+        @record.client_id
+      ),
+      options_for_column('client_id')
+    )
+  end
+  
+  def label_form_column(record, input_name)
+    label_value = (@record.respond_to?(@record.activity_type)) ? @record.send("#{@record.activity_type}").label : nil
+    
+    text_field_tag input_name, label_value, options_for_column('label').merge({:size => 30 })
+  end
+  
+  def comments_form_column(record, input_name)
+    comments_value = (@record.respond_to?(@record.activity_type)) ? @record.send("#{@record.activity_type}").comments : nil
+    
+    text_area_tag input_name, comments_value, options_for_column('comments').merge({:cols => 72, :rows => 20})
+  end
+  
+  def submit_tag(*args)
+    args[0] = 'Approve' if args[0] == 'Update' and (!params.has_key?(:nested) or params[:nested] == false)
+    super(*args)
+  end
+
+
+  private
+  
+  def activity_partial_path
+    "#{BRISKBILLS_ROOT}/app/views/admin/activities"
+  end
+  
+  handle_extensions
+end