browsercms_s3 3.0.3

data/app/controllers/cms/sessions_controller.rb

@@ -0,0 +1,64 @@
+# This controller handles the login/logout function of the site.  
+class Cms::SessionsController < Cms::ApplicationController
+
+  before_filter :redirect_to_cms_site, :only => [:new]
+  layout "cms/login"
+  
+  def new
+    
+  end
+  
+  def create
+    logout_keeping_session!
+    user = User.authenticate(params[:login], params[:password])
+    if user
+      # Protects against session fixation attacks, causes request forgery
+      # protection if user resubmits an earlier form using back
+      # button. Uncomment if you understand the tradeoffs.
+      # reset_session
+      self.current_user = user
+      new_cookie_flag = (params[:remember_me] == "1")
+      handle_remember_cookie! new_cookie_flag
+      flash[:notice] = "Logged in successfully"
+      if params[:success_url] # Coming from login portlet
+        redirect_to(session[:return_to] || params[:success_url] || "/")          
+        session[:return_to] = nil
+      else
+        redirect_back_or_default(cms_home_url)
+      end
+    else
+      note_failed_signin
+      @login       = params[:login]
+      @remember_me = params[:remember_me]
+      flash[:login_error] = "Log in failed"  
+      if params[:success_url] # Coming from login portlet
+        if params[:success_url].blank?
+          success_url = session[:return_to] || "/"
+        else
+          success_url = params[:success_url]
+        end
+        flash[:login] = params[:login]
+        flash[:remember_me] = params[:remember_me]
+        flash[:success_url] = success_url
+        redirect_to request.referrer
+      else
+        render :action => "new" 
+      end 
+    end
+  end
+
+  def destroy
+    logout_killing_session!
+    cookies.delete :openSectionNodes
+    flash[:notice] = "You have been logged out."
+    redirect_back_or_default("/")
+  end
+
+protected
+  # Track failed login attempts
+  def note_failed_signin
+    flash[:error] = "Couldn't log you in as '#{params[:login]}'"
+    logger.warn "Failed login for '#{params[:login]}' from #{request.remote_ip} at #{Time.now.utc}"
+  end
+  
+end

data/app/controllers/cms/tags_controller.rb

@@ -0,0 +1,9 @@
+class Cms::TagsController < Cms::ContentBlockController
+  def index
+    load_blocks
+    respond_to do |format| 
+      format.html { render "#{template_directory}/index" }
+      format.js { render :inline => "var tags = #{@blocks.map{|e| e.name}.to_json}" }
+    end
+  end
+end

data/app/controllers/cms/tasks_controller.rb

@@ -0,0 +1,52 @@
+class Cms::TasksController < Cms::BaseController
+  
+  before_filter :set_toolbar_tab
+  before_filter :load_page, :only => [:new, :create]
+  
+  def new
+    @task = @page.tasks.build(:assigned_by => current_user)
+  end
+  
+  def create
+    @task = @page.tasks.build(params[:task])
+    @task.assigned_by = current_user
+    if @task.save
+      flash[:notice] = "Page was assigned to '#{@task.assigned_to.login}'"
+      redirect_to @page.path
+    else
+      render :action => 'new'
+    end
+  end
+  
+  def complete
+    if params[:task_ids]
+      Task.all(:conditions => ["id in (?)", params[:task_ids]]).each do |t|
+        if t.assigned_to == current_user
+          t.mark_as_complete!
+        end
+      end
+      flash[:notice] = "Tasks marked as complete"
+      redirect_to cms_dashboard_path
+    else
+      @task = Task.find(params[:id])
+      if @task.assigned_to == current_user
+        if @task.mark_as_complete!
+          flash[:notice] = "Task was marked as complete"
+        end
+      else
+        flash[:error] = "You cannot complete tasks that are not assigned to you"
+      end
+      redirect_to @task.page.path
+    end
+  end
+  
+  private
+    def load_page
+      @page = Page.find(params[:page_id])
+    end
+  
+    def set_toolbar_tab
+      @toolbar_tab = :sitemap
+    end  
+  
+end

data/app/controllers/cms/toolbar_controller.rb

@@ -0,0 +1,12 @@
+class Cms::ToolbarController < Cms::BaseController
+
+  def index
+    if params[:page_toolbar] != "0"
+      @mode = params[:mode]
+      @page_toolbar_enabled = true
+    end
+    @page_version = params[:page_version]    
+    @page = Page.find(params[:page_id]).as_of_version(params[:page_version])
+  end  
+  
+end

data/app/controllers/cms/users_controller.rb

@@ -0,0 +1,100 @@
+class Cms::UsersController < Cms::ResourceController
+  layout 'cms/administration'
+
+  check_permissions :administrate, :except => [:show, :change_password, :update_password]
+  before_filter :only_self_or_administrator, :only => [:show, :change_password, :update_password]
+  
+  before_filter :set_menu_section
+  after_filter :update_group_membership, :only => [:update, :create]
+  after_filter :update_flash, :only => [ :update, :create ]
+  
+  verify :method => :put, :only => [ :enable, :disable, :update_password ]
+  
+  def index
+    query, conditions = [], []
+    
+    unless params[:show_expired]
+      query << "expires_at IS NULL OR expires_at >= ?"
+      conditions << Time.now.utc
+    end
+
+    unless params[:key_word].blank?
+      query << %w(login email first_name last_name).collect { |f| "lower(#{f}) LIKE lower(?)" }.join(" OR ")
+      4.times { conditions << "%#{params[:key_word]}%" }
+    end
+    
+    unless params[:group_id].to_i == 0
+      query << "user_group_memberships.group_id = ?"
+      conditions << params[:group_id]
+    end
+    
+    query.collect! { |q| "(#{q})"}
+    conditions = conditions.unshift(query.join(" AND "))
+    per_page = params[:per_page] || 10
+    
+    @users = User.paginate(:page => params[:page], :per_page => per_page, :include => :user_group_memberships, :conditions => conditions, :order => "first_name, last_name, email")
+  end
+
+  def change_password
+    user
+  end
+
+  def update_password
+    if user.update_attributes(params[:user])
+      flash[:notice] = "Password for '#{user.login}' was changed"
+      redirect_to(current_user.able_to?(:administrate) ? cms_users_path : cms_user_path(user))
+    else
+      render :action => 'change_password'
+    end
+  end
+
+  def disable
+    begin
+      user.disable!
+      flash[:notice] = "User #{user.login} disabled"
+    rescue Exception => e
+      flash[:error] = e.message
+    end
+    redirect_to cms_users_path
+  end
+  
+  def enable
+    user.enable!
+    redirect_to cms_users_path
+  end
+
+  protected
+    def after_create_url
+      index_url
+    end
+
+    def after_update_url
+      index_url
+    end
+
+    def update_flash
+      if params[:on_fail_action] == "change_password"
+        flash[:notice] = "Password for '#{@object.login}' changed"
+      elsif params[:action] == "create"
+        flash[:notice] = "User '#{@object.login}' was created"
+      else
+        flash[:notice] = "User '#{@object.login}' was updated"
+      end
+    end
+
+    def update_group_membership
+      @object.group_ids = params[:group_ids] unless params[:on_fail_action] == "change_password"
+    end
+
+  private
+    def user
+      @user ||= User.find(params[:id])
+    end
+    def set_menu_section
+      @menu_section = 'users'
+    end
+    
+    def only_self_or_administrator
+      raise Cms::Errors::AccessDenied if !current_user.able_to?(:administrate) && params[:id].to_i != current_user.id
+    end
+end

data/app/helpers/application_helper.rb

@@ -0,0 +1,3 @@
+# Any code for core CMS should go in /cms/application_helper.rb rather than here.
+module ApplicationHelper
+end

data/app/helpers/cms/application_helper.rb

@@ -0,0 +1,169 @@
+# Methods added to this helper will be available to all templates in the cms.
+module Cms
+  module ApplicationHelper
+    
+    def searchable_sections(selected = nil)
+      root = Section.root.first
+      options = [['All sections', 'all'], [root.name, root.id]]
+      root.all_children_with_name.each { |s|  options << [s.full_path, s.id] }
+      options_for_select(options, selected.to_i)
+    end
+
+    def select_per_page
+      options = [10, 20, 50, 100].collect { |c| ["#{c} per page", c] }
+      select_tag("per_page", options_for_select(options, params[:per_page].to_i))
+    end
+
+    def page_versions(page)
+      text = select_tag(:version, 
+                        options_for_select(page.versions.all(:order => "version desc").map { |r| 
+                                             ["v#{r.version}: #{r.version_comment} by #{r.updated_by.login} at #{time_on_date(r.updated_at)}", r.version] 
+                                           }, page.version), 
+                        :onchange => 'this.form.submit(); return false')
+      text << javascript_tag("$('version').selectedIndex = 0") if page.live?
+      text
+    end
+
+    def render_connector_and_connectable(connector, connectable)
+      if logged_in? && @mode == "edit" && current_user.able_to_edit?(connector.page)
+        render :partial => 'cms/pages/edit_connector', 
+          :locals => { :connector => connector, :connectable => connectable}
+      else
+        render_connectable(connectable)
+      end
+    end
+    
+    def render_connectable(content_block)
+      if content_block
+        if content_block.class.renderable?
+          logger.info "..... Rendering connectable #{content_block.class} ##{content_block.id} #{"v#{content_block.version}" if content_block.respond_to?(:version)}"
+          content_block.perform_render(@controller)
+        else
+          logger.warn "Connectable #{content_block.class} ##{content_block.id} is not renderable"
+        end
+      else
+        logger.warn "Connectable is null"
+      end    
+    rescue Exception => e
+      logger.error "Error occurred while rendering #{content_block.class}##{content_block.id}: #{e.message}\n#{e.backtrace.join("\n")}"
+      "ERROR: #{e.message}"
+    end
+    
+    def action_icon_src(name)
+      "cms/icons/actions/#{name}.png"
+    end
+    
+    def action_icon(name, options={})
+      image_tag action_icon_src(name), {:alt => name.to_s.titleize}.merge(options)
+    end
+
+    def status_icon(status, options={})
+      image_tag "cms/icons/status/#{status.to_s.underscore}.gif", {:alt => status.to_s.titleize}.merge(options)
+    end
+    
+    def render_cms_toolbar(tab=:dashboard)
+      render :partial => 'layouts/cms_toolbar', :locals => {:tab => tab}    
+    end
+    
+    def link_to_usages(block)
+      count = block.connected_pages.count
+      if count > 0
+        # Would love a cleaner solution to this problem, see http://stackoverflow.com/questions/702728
+        path = Portlet === block ? usages_cms_portlet_path(block) : [:usages, :cms, block]
+        link_to count, path, :id => block.id, :block_type => block.content_block_type
+      else
+        count
+      end
+    end
+    
+    def time_on_date(time)
+      time && "#{time.strftime("%l:%M %p")} on #{time.strftime("%b %e, %Y")}"
+    end
+
+    def format_date(time)
+      time && "#{time.strftime("%b %e, %Y")}"
+    end
+    
+    def link_to_check_all(selector, name="Check All")
+      link_to_function name, "$('#{selector}').attr('checked', true)"
+    end
+
+    def link_to_uncheck_all(selector, name="Uncheck All")
+      link_to_function name, "$('#{selector}').attr('checked', false)"
+    end
+    
+    def able_to?(*perms, &block)
+      yield if current_user.able_to?(*perms)
+    end
+    
+    def span_tag(content)
+      content_tag :span, content
+    end
+    def lt_button_wrapper(content)
+<<LBW
+  <div class="lt_button">
+    <img src="/images/cms/lt_button_l.gif" alt="" />
+    <div class="lt_button_content">
+      <span>#{ content }</span>
+    </div>
+    <img src="/images/cms/lt_button_r.gif" alt="" style="margin-right: 10px;" />
+  </div>
+LBW
+    end
+
+    def dk_button_wrapper(content)
+      lt_button_wrapper(content).gsub("lt_button_","dk_button_")
+    end
+    def group_ids
+      (params[:group_ids] || @user.group_ids).collect { |g| g.to_i }
+    end
+
+    def group_filter
+      select_tag("group_id", options_from_collection_for_select(Group.all.insert(0, Group.new(:id => nil, :name => "Show All Groups")), "id", "name", params[:group_id].to_i))
+    end	  	  
+    
+    def categories_for(category_type_name, order="name")
+      cat_type = CategoryType.named(category_type_name).first
+      cat_type ? cat_type.category_list(order) : []
+    end	  
+    
+    def render_pagination(collection, collection_name, options={})
+      if collection.blank?
+        content_tag(:div, "No Content", :class => "pagination")
+      else
+        render :partial => "cms/shared/pagination", :locals => {
+          :collection => collection,
+          :first_page_path => send("cms_#{collection_name}_path", {:page => 1}.merge(options)),
+          :previous_page_path => send("cms_#{collection_name}_path", {:page => collection.previous_page ? collection.previous_page : 1}.merge(options)),
+          :current_page_path => send("cms_#{collection_name}_path", options),
+          :next_page_path => send("cms_#{collection_name}_path", {:page => collection.next_page ? collection.next_page : collection.current_page}.merge(options)),
+          :last_page_path => send("cms_#{collection_name}_path", {:page => collection.total_pages}.merge(options))
+        }
+      end
+    end	  
+
+    def url_with_mode(url, mode)
+      uri = URI.parse(url)
+      if uri.query =~ /mode=[^&]*/
+        "#{uri.path}?#{uri.query.gsub(/((^|&)mode=)[^&]*/) {|s| "#{$1}#{mode}" }}"
+      elsif uri.query
+        "#{uri.path}?#{uri.query}&mode=#{mode}"
+      else
+        "#{uri.path}?mode=#{mode}"
+      end
+    end
+    
+    def determine_order(current_order, order)
+      if current_order == order
+        if order =~ / desc$/i
+          order.sub(/ desc$/i, '')
+        else
+          order << ' desc'
+        end
+      else
+        order
+      end 
+    end
+    
+  end
+end

data/app/helpers/cms/form_builder.rb

@@ -0,0 +1,101 @@
+class Cms::FormBuilder < ActionView::Helpers::FormBuilder
+  
+  # These are the new fields we are adding
+  
+  # A JavaScript/CSS styled select
+  def drop_down(method, choices, options = {}, html_options = {})
+    @template.drop_down(@object_name, method, choices, objectify_options(options), add_tabindex!(@default_options.merge(html_options)))
+  end
+
+  def text_editor(method, options = {})
+    @template.send(
+      "text_editor",
+      @object_name,
+      method,
+      objectify_options(options))
+  end
+
+  def date_picker(method, options={})
+    text_field(method, {:size => 10, :class => "date_picker"}.merge(options))
+  end
+  
+  def tag_list(options={})
+    field_name = options.delete(:name) || :tag_list
+    text_field(field_name, {:size => 50, :class => "tag-list"}.merge(options))
+  end
+
+  # These are the higher-level fields, 
+  # that get wrapped in divs with labels, instructions, etc.
+  
+  %w[date_picker datetime_select text_area text_field file_field].each do |f|
+    src = <<-end_src
+      def cms_#{f}(method, options={})
+        add_tabindex!(options)
+        set_default_value!(method, options)
+        cms_options = options.extract!(:label, :instructions, :default_value)
+        render_cms_form_partial :#{f},
+          :object_name => @object_name, :method => method,
+          :options => options, :cms_options => cms_options
+      end
+    end_src
+    class_eval src, __FILE__, __LINE__
+  end
+  
+  def cms_drop_down(method, choices, options={}, html_options={})
+    add_tabindex!(html_options)
+    set_default_value!(method, options)    
+    cms_options = options.extract!(:label, :instructions, :default_value)
+    render_cms_form_partial :drop_down,
+      :object_name => @object_name, :method => method,
+      :choices => choices, :options => options, 
+      :cms_options => cms_options, :html_options => html_options
+  end  
+    
+  def cms_tag_list(options={})
+    add_tabindex!(options)
+    set_default_value!(:tag_list, options)    
+    cms_options = options.extract!(:label, :instructions, :default_value)
+    render_cms_form_partial :tag_list, 
+      :options => options, :cms_options => cms_options
+  end
+
+  def cms_text_editor(method, options = {})
+    add_tabindex!(options)
+    set_default_value!(method, options)    
+    cms_options = options.extract!(:label, :instructions, :default_value)
+    render_cms_form_partial :text_editor, 
+      :id => (options[:id] || "#{@object_name}_#{method}"), 
+      :editor_enabled => (cookies["editorEnabled"].blank? ? true : (cookies["editorEnabled"] == 'true' || cookies["editorEnabled"] == ['true'])),
+      :object_name => @object_name, :method => method, 
+      :options => options, :cms_options => cms_options
+  end
+
+  private
+
+    def set_default_value!(method, options={})
+      if options.has_key?(:default_value) && @object.send(method).blank?
+        @object.send("#{method}=", options[:default_value])
+      end
+    end
+  
+    def add_tabindex!(options)
+      if options.has_key?(:tabindex)
+        options.delete(:tabindex) if options[:tabindex].blank?
+      else 
+        options[:tabindex] = @template.next_tabindex
+      end
+      options
+    end
+  
+    def cookies
+      #Ugly, is there an easier way to get to the cookies?
+      @template.instance_variable_get("@_request").cookies || {}
+    end
+  
+    def render_cms_form_partial(field_type_name, locals)
+      @template.render :partial => "cms/form_builder/cms_#{field_type_name}",
+        :locals => {:f => self}.merge(locals)
+    end
+  
+end
+

data/app/helpers/cms/form_tag_helper.rb

@@ -0,0 +1,32 @@
+module Cms
+  module FormTagHelper
+    
+    # A drop-down is just a specialized HTML select
+    
+    def drop_down_tag(name, option_tags = nil, options = {}) 
+      select_tag(name, option_tags, options)
+    end
+    
+    def drop_down(object, method, choices, options = {}, html_options = {})
+      select(object, method, choices, options, html_options)
+    end
+    
+    # A text editor is an HTML WYSIWYG editor.  The result of this
+    # will be a div with a select and a textarea in it.
+    
+    def text_editor_options(options={})
+      opts = options.dup
+      (opts[:class] ||= "") << " editor"
+      opts
+    end
+    
+    def text_editor_tag(name, content = nil, options = {})
+      text_area_tag(name, content, text_editor_options(options))
+    end
+    
+    def text_editor(object_name, method, options = {})
+      text_area(object_name, method, text_editor_options(options))
+    end
+        
+  end
+end