camaleon_cms_rails6 2.5.0

data/app/controllers/camaleon_cms/admin/installers_controller.rb

@@ -0,0 +1,32 @@
+class CamaleonCms::Admin::InstallersController < CamaleonCms::CamaleonController
+  skip_before_action :cama_site_check_existence
+  skip_before_action :cama_before_actions
+  skip_after_action :cama_after_actions
+  before_action :installer_verification, except: :welcome
+  layout "camaleon_cms/login"
+
+  def index
+    @site ||= CamaleonCms::Site.new
+    @site.slug = request.original_url.to_s.parse_domain
+    render "form"
+  end
+
+  def save
+    @site = CamaleonCms::Site.new(params[:site].permit(:slug, :name )).decorate
+    if @site.save
+      site_after_install(@site, params[:theme])
+      flash[:notice] = t('camaleon_cms.admin.sites.message.created')
+      redirect_to action: :welcome
+    else
+      index
+    end
+  end
+
+  def welcome
+
+  end
+
+  def installer_verification
+    redirect_to cama_root_url unless CamaleonCms::Site.count == 0
+  end
+end

data/app/controllers/camaleon_cms/admin/media_controller.rb

@@ -0,0 +1,109 @@
+require 'will_paginate/array'
+class CamaleonCms::Admin::MediaController < CamaleonCms::AdminController
+  skip_before_action :admin_logged_actions, except: [:index, :download_private_file], raise: false
+  skip_before_action :verify_authenticity_token, only: :upload, raise: false
+  before_action :init_media_vars, except: :download_private_file
+
+  # render media section
+  def index
+    authorize! :manage, :media
+    @show_file_actions = true
+    @files = @tree.paginate(page: params[:page], per_page: 100)
+    @next_page = @files.current_page < @files.total_pages ? @files.current_page + 1 : nil
+    add_breadcrumb I18n.t("camaleon_cms.admin.sidebar.media")
+  end
+
+  # crop a image to save as a new file
+  def crop
+    path_image = cama_tmp_upload(params[:cp_img_path])[:file_path]
+    crop_path = cama_crop_image(path_image, params[:ic_w], params[:ic_h], params[:ic_x], params[:ic_y])
+    res = upload_file(crop_path, {remove_source: true})
+    CamaleonCms::User.find(params[:saved_avatar]).set_meta('avatar', res["url"]) if params[:saved_avatar].present? # save current crop image as avatar
+    render html: res["url"].html_safe
+  end
+
+  # download private files
+  def download_private_file
+    cama_uploader.enable_private_mode!
+
+    file = cama_uploader.fetch_file("private/#{params[:file]}")
+
+    send_file file, disposition: 'inline'
+
+  end
+
+  # render media for modal content
+  def ajax
+    if current_site.get_option('file_actions_in_modals') == 'yes'
+      @show_file_actions = true
+    end
+    @tree = cama_uploader.search(params[:search]) if params[:search].present?
+    @files = @tree.paginate(page: params[:page], per_page: 100)
+    @next_page = @files.current_page < @files.total_pages ? @files.current_page + 1 : nil
+    if params[:partial].present?
+      render json: {next_page: @next_page, html: render_to_string(partial: "render_file_item", locals: { files: @files })}
+    else
+      render "index", layout: false unless params[:partial].present?
+    end
+  end
+
+  # do background actions in fog
+  def actions
+    if params[:media_action] != 'crop_url'
+      authorize! :manage, :media
+    end
+    params[:folder] = params[:folder].gsub("//", "/") if params[:folder].present?
+    case params[:media_action]
+      when "new_folder"
+        params[:folder] = slugify_folder(params[:folder])
+        render partial: "render_file_item", locals: {files: [cama_uploader.add_folder(params[:folder])]}
+      when "del_folder"
+        cama_uploader.delete_folder(params[:folder])
+        render inline: ""
+      when "del_file"
+        cama_uploader.delete_file(params[:folder].gsub("//", "/"))
+        render inline: ""
+      when 'crop_url'
+        unless params[:url].start_with?('data:')
+          params[:url] = (params[:url].start_with?('http') ? '' : current_site.the_url(locale: nil)) + params[:url]
+        end
+        r = cama_tmp_upload( params[:url], formats: params[:formats], name: params[:name])
+        unless r[:error].present?
+          params[:file_upload] = r[:file_path]
+          sett = {remove_source: true}
+          sett[:same_name] = true if params[:same_name].present?
+          sett[:name] = params[:name] if params[:name].present?
+          upload(sett)
+        else
+          render inline: r[:error]
+        end
+    end
+  end
+
+  # upload files from media uploader
+  def upload(settings = {})
+    params[:dimension] = nil if params[:skip_auto_crop].present?
+    f = {error: "File not found."}
+    if params[:file_upload].present?
+      f = upload_file(params[:file_upload], {folder: params[:folder], dimension: params['dimension'], formats: params[:formats], versions: params[:versions], thumb_size: params[:thumb_size]}.merge(settings))
+    end
+    render(partial: "render_file_item", locals:{ files: [f] }) unless f[:error].present?
+    render inline: f[:error] if f[:error].present?
+  end
+
+  private
+
+  # init basic media variables
+  def init_media_vars
+    # @cama_uploader = CamaleonCmsLocalUploader.new({current_site: current_site, private: true})
+
+    cama_uploader.enable_private_mode! if params[:private].present?
+
+    cama_uploader.clear_cache if params[:cama_media_reload] == 'clear_cache'
+    cama_uploader.reload if params[:cama_media_reload] == 'reload'
+    @media_formats = (params[:media_formats] || "").sub("media", ",video,audio").sub("all", "").split(",")
+    @tree = cama_uploader.objects(@folder = params[:folder] || "/")
+    @show_file_actions ||= params[:actions].to_s == 'true'
+  end
+
+end

data/app/controllers/camaleon_cms/admin/plugins_controller.rb

@@ -0,0 +1,46 @@
+class CamaleonCms::Admin::PluginsController < CamaleonCms::AdminController
+  before_action :validate_role
+  add_breadcrumb I18n.t("camaleon_cms.admin.sidebar.plugins")
+  def index
+    PluginRoutes.reload
+  end
+
+  def toggle
+    status = params[:status].to_bool
+    if status == true # to inactivate
+      plugin = plugin_uninstall(params[:id])
+      flash[:notice] = "Plugin \"#{plugin.title}\" #{t('camaleon_cms.admin.message.was_inactivated')}"
+    end
+
+    unless status # to activate
+      plugin = plugin_install(params[:id])
+      flash[:notice] = "Plugin \"#{plugin.title}\" #{t('camaleon_cms.admin.message.was_activated')}"
+    end
+    PluginRoutes.reload
+    redirect_to action: :index
+  end
+
+  # permit to upgrade a plugin for a new version
+  def upgrade
+    plugin = plugin_upgrade(params[:plugin_id])
+    flash[:notice] = "Plugin \"#{plugin.title}\" #{t('camaleon_cms.admin.message.was_upgraded')}"
+    PluginRoutes.reload
+    redirect_to action: :index
+  end
+
+  def destroy
+    plugin = plugin_destroy(params[:id])
+    if plugin.error
+      flash[:notice] = "Plugin \"#{plugin.title}\" #{t('camaleon_cms.admin.message.was_removed')}"
+    else
+      flash[:error] = "Plugin \"#{plugin.title}\" #{t('camaleon_cms.admin.message.can_not_be_removed')}"
+    end
+    redirect_to action: :index
+  end
+
+  private
+
+  def validate_role
+    authorize! :manage, :plugins
+  end
+end

data/app/controllers/camaleon_cms/admin/post_tags_controller.rb

@@ -0,0 +1,81 @@
+class CamaleonCms::Admin::PostTagsController < CamaleonCms::AdminController
+  add_breadcrumb I18n.t("camaleon_cms.admin.sidebar.contents")
+  before_action :set_post_type
+  before_action :set_post_tag, only: ['show','edit','update','destroy']
+
+  def index
+    @post_tags = @post_type.post_tags
+    args = {post_type: @post_type}; hooks_run("before_list_post_tags", args)
+    @post_tags = @post_tags.paginate(:page => params[:page], :per_page => current_site.admin_per_page)
+  end
+
+  # render post tag view
+  def show
+    args = {post_tag: @post_tag, post_type: @post_type}; hooks_run("before_show_post_tag", args)
+  end
+
+  # render post tag edit form
+  def edit
+    add_breadcrumb t("camaleon_cms.admin.button.edit")
+  end
+
+  # save changes of a post tag
+  def update
+    args = {post_tag: @post_tag, post_type: @post_type}; hooks_run("before_update_post_tag", args)
+    if @post_tag.update(params.require(:post_tag).permit!)
+      @post_tag.set_options(params[:meta]) if params[:meta].present?
+      @post_tag.set_field_values(params[:field_options])
+      hooks_run("after_update_post_tag", args)
+      flash[:notice] = t('camaleon_cms.admin.post_type.message.updated')
+      redirect_to action: :index
+    else
+      render edit
+    end
+  end
+
+  # render post tag create form
+  def create
+    @post_tag = @post_type.post_tags.new(params.require(:post_tag).permit!)
+    args = {post_tag: @post_tag, post_type: @post_type}; hooks_run("before_create_post_tag", args)
+    if @post_tag.save
+      @post_tag.set_options(params[:meta]) if params[:meta].present?
+      @post_tag.set_field_values(params[:field_options])
+      hooks_run("after_create_post_tag", args)
+      flash[:notice] = t('camaleon_cms.admin.post_type.message.created')
+      redirect_to action: :index
+    else
+      render 'edit'
+    end
+  end
+
+  # destroy a post tag
+  def destroy
+    args = {post_tag: @post_tag, post_type: @post_type}; hooks_run("before_destroy_post_tag", args)
+    flash[:notice] = t('camaleon_cms.admin.post_type.message.deleted') if @post_tag.destroy
+    redirect_to action: :index
+  end
+
+  # render a json of post tags of a post type
+  def list
+    @post_tags = @post_type.post_tags.pluck("name")
+    render json: @post_tags
+  end
+
+  private
+
+  def set_post_type
+    @post_type = current_site.post_types.find_by_id(params[:post_type_id]).decorate
+    authorize! :post_tags, @post_type
+    add_breadcrumb @post_type.the_title, @post_type.the_admin_url
+    add_breadcrumb t("camaleon_cms.admin.post_type.post_tags"), url_for({action: :index})
+  end
+
+  def set_post_tag
+    begin
+      @post_tag = @post_type.post_tags.find_by_id(params[:id])
+    rescue
+      flash[:error] = t('camaleon_cms.admin.post_type.message.error')
+      redirect_to cama_admin_path
+    end
+  end
+end

data/app/controllers/camaleon_cms/admin/posts/drafts_controller.rb

@@ -0,0 +1,58 @@
+class CamaleonCms::Admin::Posts::DraftsController < CamaleonCms::Admin::PostsController
+  before_action :set_post_data_params, only: [:create, :update]
+
+  def index
+    render json: @post_type
+  end
+
+  def create
+    if params[:post_id].present?
+      @post_draft = CamaleonCms::Post.drafts.where(post_parent: params[:post_id]).first
+      if @post_draft.present?
+        @post_draft.set_option('draft_status', @post_draft.status)
+        @post_draft.attributes = @post_data
+      end
+    end
+    @post_draft = @post_type.posts.new(@post_data) unless @post_draft.present?
+    r = {post: @post_draft, post_type: @post_type}; hooks_run("create_post_draft", r)
+    if @post_draft.save(:validate => false)
+      @post_draft.set_params(params[:meta], params[:field_options], @post_data[:keywords])
+      msg = {draft: {id: @post_draft.id}, _drafts_path: cama_admin_post_type_draft_path(@post_type.id, @post_draft)}
+      r = {post: @post_draft, post_type: @post_type}; hooks_run("created_post_draft", r)
+    else
+      msg = {error: @post_draft.errors.full_messages}
+    end
+
+    render json: msg
+  end
+
+  def update
+    @post_draft = CamaleonCms::Post.drafts.find(params[:id])
+    @post_draft.attributes = @post_data
+    r = {post: @post_draft, post_type: @post_type}; hooks_run("update_post_draft", r)
+    if @post_draft.save(validate: false)
+      @post_draft.set_params(params[:meta], params[:field_options], params[:options])
+      hooks_run("updated_post_draft", {post: @post_draft, post_type: @post_type})
+      msg = {draft: {id: @post_draft.id}}
+    else
+      msg = {error: @post_draft.errors.full_messages}
+    end
+    render json: msg
+  end
+
+  def destroy
+  end
+
+  private
+  def set_post_data_params
+    post_data = params.require(:post).permit!
+    post_data.delete(:created_at) unless params[:post][:created_at].present?
+    post_data.delete(:updated_at) unless params[:post][:updated_at].present?
+    post_data[:status] = 'draft_child'
+    post_data[:post_parent] = params[:post_id]
+    post_data[:user_id] = cama_current_user.id unless post_data[:user_id].present?
+    post_data[:data_tags] = params[:tags].to_s
+    post_data[:data_categories] = params[:categories] || []
+    @post_data = post_data
+  end
+end

data/app/controllers/camaleon_cms/admin/posts_controller.rb

@@ -0,0 +1,212 @@
+class CamaleonCms::Admin::PostsController < CamaleonCms::AdminController
+  add_breadcrumb I18n.t("camaleon_cms.admin.sidebar.contents")
+  before_action :set_post_type, :except => [:ajax]
+  before_action :set_post, only: ['show','edit','update','destroy']
+  skip_before_action :admin_logged_actions, only: [:trash, :restore, :destroy, :ajax], raise: false
+  skip_before_action :verify_authenticity_token, only: [:ajax], raise: false
+
+  def index
+    authorize! :posts, @post_type
+    per_page = current_site.admin_per_page
+    posts_all = @post_type.posts.eager_load(:parent, :post_type)
+    if params[:taxonomy].present? && params[:taxonomy_id].present?
+      if params[:taxonomy] == "category"
+        cat_owner = current_site.full_categories.find(params[:taxonomy_id]).decorate
+        posts_all = cat_owner.posts
+        add_breadcrumb t("camaleon_cms.admin.post_type.category"), @post_type.the_admin_url("category")
+        add_breadcrumb cat_owner.the_title, cat_owner.the_edit_url
+      end
+
+      if params[:taxonomy] == "post_tag"
+        tag_owner = current_site.post_tags.find(params[:taxonomy_id]).decorate
+        posts_all = tag_owner.posts
+        add_breadcrumb t("camaleon_cms.admin.post_type.tags"), @post_type.the_admin_url("tag")
+        add_breadcrumb tag_owner.the_title, tag_owner.the_edit_url
+      end
+    end
+
+    if params[:q].present?
+      params[:q] = (params[:q] || '').downcase
+      posts_all = posts_all.where(
+        "LOWER(#{CamaleonCms::Post.table_name}.title) LIKE ? OR LOWER(#{CamaleonCms::Post.table_name}.slug) LIKE ?",
+        "%#{params[:q]}%", 
+        "%#{params[:q]}%"
+      )  
+    end
+
+    posts_all = posts_all.where(user_id: cama_current_user) if cannot?(:edit_other, @post_type) # filter only own contents 
+    
+    @posts = posts_all
+    params[:s] = 'published' unless params[:s].present?
+    @lists_tab = params[:s]
+    case params[:s]
+      when "published", "pending", "trash"
+        @posts = @posts.send(params[:s])
+      when "draft"
+        @posts = @posts.drafts
+      when "all"
+        @posts = @posts.no_trash
+    end
+
+    @btns = {published: "#{t('camaleon_cms.admin.post_type.published')} (#{posts_all.published.size})", all: "#{t('camaleon_cms.admin.post_type.all')} (#{posts_all.no_trash.size})", pending: "#{t('camaleon_cms.admin.post_type.pending')} (#{posts_all.pending.size})", draft: "#{t('camaleon_cms.admin.post_type.draft')} (#{posts_all.drafts.size})", trash: "#{t('camaleon_cms.admin.post_type.trash')} (#{posts_all.trash.size})"}
+    per_page = 9999999 if @post_type.manage_hierarchy?
+    r = {posts: @posts, post_type: @post_type, btns: @btns, all_posts: posts_all, render: 'index', per_page: per_page }
+    hooks_run("list_post", r)
+    add_breadcrumb "#{@btns[params[:s].to_sym]}" if params[:s].present?
+    @posts = r[:posts].paginate(:page => params[:page], :per_page => r[:per_page])
+    render r[:render]
+  end
+
+  def show
+  end
+
+  def new
+    add_breadcrumb I18n.t("camaleon_cms.admin.button.new")
+    authorize! :create_post, @post_type
+    @post_form_extra_settings = []
+    @post ||= @post_type.posts.new
+    r = {post: @post, post_type: @post_type, extra_settings: @post_form_extra_settings, render: "form"}; hooks_run("new_post", r)
+    render r[:render]
+  end
+
+  def create
+    authorize! :create_post, @post_type
+    post_data = get_post_data(true)
+    CamaleonCms::Post.drafts.find(post_data[:draft_id]).destroy rescue nil
+    @post = @post_type.posts.new(post_data)
+    r = {post: @post, post_type: @post_type}; hooks_run("create_post", r)
+    @post = r[:post]
+    if @post.save
+      @post.set_metas(params[:meta])
+      @post.set_field_values(params[:field_options])
+      @post.set_options(params[:options])
+      flash[:notice] = t('camaleon_cms.admin.post.message.created', post_type: @post_type.decorate.the_title)
+      r = {post: @post, post_type: @post_type}; hooks_run("created_post", r)
+      redirect_to action: :edit, id: @post.id
+    else
+      # render 'form'
+      new
+    end
+  end
+
+  def edit
+    add_breadcrumb I18n.t("camaleon_cms.admin.button.edit")
+    authorize! :update, @post
+    @post_form_extra_settings = []
+    r = {post: @post, post_type: @post_type, extra_settings: @post_form_extra_settings, render: "form"}; hooks_run("edit_post", r)
+    render r[:render]
+  end
+
+  def update
+    post_data = get_post_data
+    delete_drafts = false
+    if @post.draft_child? && @post.parent.present?
+      # This is a draft (as a child of the original post)
+      original_parent = @post.parent.parent
+      post_data[:post_parent] = original_parent.present? ? original_parent.id : nil
+      @post = @post.parent
+      delete_drafts = true
+    elsif @post.draft?
+      # This is a normal draft (post whose status was set to 'draft')
+      @post.status = 'published' if post_data[:status].blank?
+    end
+    authorize! :update, @post
+    r = {post: @post, post_type: @post_type}; hooks_run("update_post", r)
+    @post = r[:post]
+    if @post.update(post_data)
+      # delete drafts only on successful update operation
+      @post.drafts.destroy_all if delete_drafts
+      @post.set_metas(params[:meta])
+      @post.set_field_values(params[:field_options])
+      @post.set_options(params[:options])
+      hooks_run("updated_post", {post: @post, post_type: @post_type})
+      flash[:notice] = t('camaleon_cms.admin.post.message.updated', post_type: @post_type.decorate.the_title)
+      redirect_to action: :edit, id: @post.id
+    else
+      edit
+    end
+  end
+
+  def trash
+    @post = @post_type.posts.find(params[:post_id])
+    authorize! :destroy, @post
+    @post.set_option('status_default', @post.status)
+    # @post.children.destroy_all unless @post.draft? TODO: why delete children?
+    @post.update_column('status', 'trash')
+    @post.update_extra_data
+    hooks_run("trashed_post", {post: @post, post_type: @post_type})
+    flash[:notice] = t('camaleon_cms.admin.post.message.trash', post_type: @post_type.decorate.the_title)
+    redirect_to action: :index, s: params[:s]
+  end
+
+  def restore
+    @post = @post_type.posts.find(params[:post_id])
+    authorize! :update, @post
+    @post.update_column('status', @post.options[:status_default] || 'pending')
+    @post.update_extra_data
+    hooks_run("restored_post", {post: @post, post_type: @post_type})
+    flash[:notice] = t('camaleon_cms.admin.post.message.restore', post_type: @post_type.decorate.the_title)
+    redirect_to action: :index, s: params[:s]
+  end
+
+  def destroy
+    authorize! :destroy, @post
+    r = {post: @post, post_type: @post_type, flag: true}
+    hooks_run("destroy_post", r)
+    if r[:flag]
+      if @post.destroy
+        hooks_run("destroyed_post", {post: @post, post_type: @post_type})
+        flash[:notice] = t('camaleon_cms.admin.post.message.deleted', post_type: @post_type.decorate.the_title)
+        return redirect_to action: :index, s: params[:s]
+      else
+        flash[:error] = @post.errors.full_messages.join(', ')
+      end
+    end
+    redirect_to(request.referer || url_for(action: :index, s: params[:s]))
+  end
+
+  # ajax options
+  def ajax
+    json = {error: 'Not Found'}
+    case params[:method]
+      when 'exist_slug'
+        slug = current_site.get_valid_post_slug(params[:slug].to_s, params[:post_id])
+        json = {slug: slug, index: 1}
+    end
+    render json: json
+  end
+
+  private
+  # define post type parent
+  def set_post_type
+    @post_type = current_site.post_types.find_by_id(params[:post_type_id] )
+    unless @post_type.present?
+      flash[:error] =  t('camaleon_cms.admin.request_error_message')
+      redirect_to cama_admin_path
+      return
+    end
+    @post_type = @post_type.decorate
+    add_breadcrumb @post_type.the_title, @post_type.the_admin_url
+  end
+
+  def set_post
+    begin
+      @post = @post_type.posts.find(params[:id])
+      @post_decorate = @post.decorate
+    rescue
+      flash[:error] =  t('camaleon_cms.admin.post.message.error', post_type: @post_type.decorate.the_title)
+      redirect_to cama_admin_path
+    end
+  end
+
+  # return common params data for posts
+  # is_create: indicate if this info is for create a new post
+  def get_post_data(is_create = false)
+    post_data = params.require(:post).permit!
+    post_data[:user_id] = cama_current_user.id if is_create
+    post_data[:status] = 'pending' if post_data[:status] == 'published' && cannot?(:publish_post, @post_type)
+    post_data[:data_tags] = params[:tags].to_s
+    post_data[:data_categories] = params[:categories] || []
+    post_data
+  end
+end