casein 3.1.0

data/app/controllers/casein/users_controller.rb

@@ -0,0 +1,102 @@
+module Casein
+  class UsersController < Casein::CaseinController
+
+    unloadable
+  
+    before_filter :needs_admin, :except => [:show, :destroy, :update, :update_password]
+    before_filter :needs_admin_or_current_user, :only => [:show, :destroy, :update, :update_password]
+ 
+    def index
+      @casein_page_title = "Users"
+    	@users = Casein::User.paginate :order => "login", :page => params[:page]
+    end
+ 
+    def new
+      @casein_page_title = "Add a new user"
+    	@casein_user = Casein::User.new
+    	@casein_user.time_zone = Rails::Application.config.time_zone
+    end
+  
+    def create
+      @casein_user = Casein::User.new params[:casein_user]
+    
+      if @casein_user.save
+        flash[:notice] = "An email has been sent to " + @casein_user.name + " with the new account details"
+        redirect_to casein_users_path
+      else
+        flash.now[:warning] = "There were problems when trying to create a new user"
+        render :action => :new
+      end
+    end
+  
+    def show
+    	@casein_user = Casein::User.find params[:id]
+    	@casein_page_title = @casein_user.name + " | View User"
+    end
+ 
+    def update
+      @casein_user = Casein::User.find params[:id]
+      @casein_page_title = @casein_user.name + " | Update User"
+
+      if @casein_user.update_attributes params[:casein_user]
+        flash[:notice] = @casein_user.name + " has been updated"
+      else
+        flash.now[:warning] = "There were problems when trying to update this user"
+        render :action => :show
+        return
+      end
+      
+      if @session_user.is_admin?
+        redirect_to casein_users_path
+      else
+        redirect_to :controller => :casein, :action => :index
+      end
+    end
+ 
+    def update_password
+      @casein_user = Casein::User.find params[:id]
+      @casein_page_title = @casein_user.name + " | Update Password"
+       
+      if @casein_user.valid_password? params[:form_current_password]
+        if @casein_user.update_attributes params[:casein_user]
+          flash.now[:notice] = "Your password has been changed"
+        else
+          flash.now[:warning] = "There were problems when trying to change the password"
+        end
+      else
+        flash.now[:warning] = "The current password is incorrect"
+      end
+      
+      render :action => :show
+    end
+ 
+    def reset_password
+      @casein_user = Casein::User.find params[:id]
+      @casein_page_title = @casein_user.name + " | Reset Password"
+       
+      @casein_user.notify_of_new_password = true unless @casein_user.id == @session_user.id
+      
+      if @casein_user.update_attributes params[:casein_user]
+        if @casein_user.id == @session_user.id
+          flash.now[:notice] = "Your password has been reset"
+        else    
+          flash.now[:notice] = "Password has been reset and " + @casein_user.name + " has been notified by email"
+        end
+        
+      else
+        flash.now[:warning] = "There were problems when trying to reset this user's password"
+      end
+      render :action => :show
+    end
+ 
+    def destroy
+      user = Casein::User.find params[:id]
+      if user.is_admin? == false || Casein::User.has_more_than_one_admin
+        user.destroy
+        flash[:notice] = user.name + " has been deleted"
+      end
+      redirect_to casein_users_path
+    end
+ 
+  end
+end

data/app/helpers/casein/casein_helper.rb

@@ -0,0 +1,170 @@
+module Casein
+  module CaseinHelper
+	
+	  def casein_get_version_info
+	    YAML::load_file File.join(File.dirname(__FILE__), '..', '..', '..', 'VERSION.yml')
+	  end
+	
+  	def casein_get_full_version_string
+  	  version_info = casein_get_version_info
+  	  "v.#{version_info['major']}.#{version_info['minor']}.#{version_info['patch']}"
+  	end
+	
+  	def casein_get_short_version_string
+  	  version_info = casein_get_version_info
+  	  "v.#{version_info['major']}"
+  	end
+	
+  	def casein_generate_page_title
+		
+  		if @casein_page_title.nil?
+  			return casein_config_website_name
+  		end
+		
+  		@casein_page_title + " > " + casein_config_website_name
+  	end
+	
+  	def casein_get_access_level_text level
+  	  case level
+        when $CASEIN_USER_ACCESS_LEVEL_ADMIN
+          return "Administrator"
+        when $CASEIN_USER_ACCESS_LEVEL_USER
+  	      return "User"
+  	    else
+  	      return "Unknown"
+  	  end
+  	end
+	
+  	def casein_get_access_level_array
+  	  [["Administrator", $CASEIN_USER_ACCESS_LEVEL_ADMIN], ["User", $CASEIN_USER_ACCESS_LEVEL_USER]]
+  	end
+	
+  	def casein_table_cell_link contents, link, options = {}
+	  
+  	  if options.key? :casein_truncate
+  	    contents = truncate(contents, :length => options[:casein_truncate], :omission => "...")
+  	  end
+	  
+    	link_to "#{contents}", link
+    end
+	
+  	def casein_show_icon icon_name
+  		"<div class='icon'><img src='/casein/images/icons/#{icon_name}.png' alt='' /></div>".html_safe
+  	end
+	
+  	def casein_show_row_icon icon_name
+  		"<div class='iconRow'><img src='/casein/images/icons/#{icon_name}.png' alt='' /></div>".html_safe
+  	end
+	
+  	# Styled form tag helpers
+	
+  	def casein_text_field form, obj, attribute, options = {}
+  	  casein_form_tag_wrapper(form.text_field(attribute, options.merge({:class => 'caseinTextField'})), form, obj, attribute, options).html_safe
+  	end
+	
+  	def casein_password_field form, obj, attribute, options = {}
+  		casein_form_tag_wrapper(form.password_field(attribute, options.merge({:class => 'caseinTextField'})), form, obj, attribute, options).html_safe
+  	end
+	
+  	def casein_text_area form, obj, attribute, options = {}
+  	  casein_form_tag_wrapper(form.text_area(attribute, options.merge({:class => 'caseinTextArea'})), form, obj, attribute, options).html_safe
+  	end
+	
+  	def casein_text_area_big form, obj, attribute, options = {}
+  	 casein_form_tag_wrapper(form.text_area(attribute, options.merge({:class => 'caseinTextAreaBig'})), form, obj, attribute, options).html_safe
+  	end
+	
+  	def casein_check_box form, obj, attribute, options = {}
+  	  form_tag = form.check_box(attribute, options)
+	  
+  	  if options.key? :casein_box_label
+  	    form_tag = "<div>" + form_tag + "<span class=\"rcText\">#{options[:casein_box_label]}</span></div>".html_safe
+  	  end
+	  
+  	  casein_form_tag_wrapper(form_tag, form, obj, attribute, options).html_safe
+  	end
+	
+  	def casein_check_box_group form, obj, check_boxes = {}
+      form_tags = ""
+    
+      for check_box in check_boxes
+        form_tags += casein_check_box form, obj, check_box[0], check_box[1]
+      end
+    
+      casein_form_tag_wrapper form_tag, form, obj, attribute, options
+    end
+	
+  	def casein_radio_button form, obj, attribute, tag_value, options = {}
+  	  form_tag = form.radio_button(obj, attribute, tag_value, options)
+	  
+  	  if options.key? :casein_button_label
+  	    form_tag = "<div>" + form_tag + "<span class=\"rcText\">#{options[:casein_button_label]}</span></div>".html_safe
+  	  end
+	  
+  	  casein_form_tag_wrapper(form_tag, form, obj, attribute, options).html_safe
+  	end
+	
+  	def casein_radio_button_group form, obj, radio_buttons = {}
+      form_tags = ""
+    
+      for radio_button in radio_buttons
+        form_tags += casein_radio_button form, obj, check_box[0], check_box[1], check_box[2]
+      end
+    
+      casein_form_tag_wrapper(form_tag, form, obj, attribute, options).html_safe
+    end
+	
+  	def casein_select form, obj, attribute, option_tags, options = {}
+  		casein_form_tag_wrapper(form.select(attribute, option_tags, options, {:class => 'caseinSelect'}), form, obj, attribute, options).html_safe
+  	end
+  	
+  	def casein_time_zone_select form, obj, attribute, option_tags, options = {}
+  	  casein_form_tag_wrapper(form.time_zone_select(attribute, option_tags, options, {:class => 'caseinSelect'}), form, obj, attribute, options).html_safe
+  	end
+	
+  	def casein_collection_select form, obj, object, attribute, collection, value_method, text_method, options = {}
+  		casein_form_tag_wrapper(collection_select(object, attribute, collection, value_method, text_method, options, {:class => 'caseinSelect'}), form, obj, attribute, options).html_safe
+  	end
+  	
+  	def casein_date_select form, obj, attribute, options = {}
+  	  casein_form_tag_wrapper(form.date_select(attribute, options, {:class => 'caseinDateTimeSelect'}), form, obj, attribute, options).html_safe
+  	end
+
+  	def casein_time_select form, obj, attribute, options = {}
+  	  casein_form_tag_wrapper(form.time_select(attribute, options, {:class => 'caseinDateTimeSelect'}), form, obj, attribute, options).html_safe
+  	end
+	
+  	def casein_datetime_select form, obj, attribute, options = {}
+  	  casein_form_tag_wrapper(form.datetime_select(attribute, options, {:class => 'caseinDateTimeSelect'}), form, obj, attribute, options).html_safe
+  	end
+	
+  	def casein_file_field form, obj, object_name, attribute, options = {}
+  	  contents = '<div class="caseinFileFieldContainer">' + file_field(object_name, attribute, options) + '</div>'
+  	  casein_form_tag_wrapper(contents, form, obj, attribute, options).html_safe
+  	end
+	
+  	def casein_hidden_field form, obj, attribute, options = {}
+  	  form.hidden_field(obj, attribute, options).html_safe
+  	end
+	
+  protected
+
+    def casein_form_tag_wrapper form_tag, form, obj, attribute, options = {}
+        unless options.key? :casein_label
+    		  human_attribute_name = attribute.to_s.humanize
+        else
+          human_attribute_name = options[:casein_label]
+        end
+
+    		html = "<p>"
+
+        if obj && obj.errors[attribute].any?
+    			html += "<span class='formError'>#{human_attribute_name} #{obj.errors[attribute].first}</span>".html_safe
+    		else
+    			html += form.label(attribute, human_attribute_name)
+    		end
+
+    		html += "</p>\n<p>#{form_tag}</p>"
+    end
+  end
+end

data/app/mailers/casein/casein_notification.rb

@@ -0,0 +1,44 @@
+module Casein
+  
+  require 'casein/config_helper'
+	include Casein::ConfigHelper
+	  
+  class CaseinNotification < ActionMailer::Base
+	
+  	default :from => casein_config_email_from_address
+
+  	self.prepend_view_path File.join(File.dirname(__FILE__), '..', 'views', 'casein')
+	
+  	def generate_new_password casein_user, host, pass
+  		@name = casein_user.name
+  		@host = host
+  		@login = casein_user.login
+  		@pass = pass
+  		@from_text = casein_config_website_name
+  		
+  		mail(:to => casein_user.email, :subject => "[#{casein_config_website_name}] New password")
+  	end
+  
+  	def new_user_information casein_user, host, pass
+      @name = casein_user.name
+  		@host = host
+  		@login = casein_user.login
+  		@pass = pass
+  		@from_text = casein_config_website_name
+  		
+  		mail(:to => casein_user.email, :subject => "[#{casein_config_website_name}] New user account")
+  	end
+  	
+  	def password_reset_instructions casein_user, host
+  	  ActionMailer::Base.default_url_options[:host] = host.gsub("http://", "")
+      @name = casein_user.name
+      @host = host
+      @login = casein_user.login
+      @reset_password_url = edit_casein_password_reset_url + "/?token=#{casein_user.perishable_token}"
+      @from_text = casein_config_website_name
+
+      mail(:to => casein_user.email, :subject => "[#{casein_config_website_name}] Password reset instructions")
+    end
+
+  end
+end

data/app/models/casein/user.rb

@@ -0,0 +1,55 @@
+include Casein::ConfigHelper
+
+$CASEIN_USER_ACCESS_LEVEL_ADMIN = 0
+$CASEIN_USER_ACCESS_LEVEL_USER = 10
+
+module Casein
+  class User < ActiveRecord::Base
+
+	  def self.table_name
+      self.to_s.gsub("::", "_").tableize
+    end
+
+    acts_as_authentic { |c| c.validate_email_field = false }
+	 
+    attr_accessor :notify_of_new_password
+	 
+    after_create :send_create_notification
+    after_update :send_update_notification
+    before_validation :check_time_zone
+    
+    validates_presence_of :login, :name, :email
+    validates_uniqueness_of :login
+    validates_format_of :email, :with => /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\Z/i
+    validates_presence_of :time_zone
+	  
+  	def self.has_more_than_one_admin
+      Casein::User.where(:access_level => $CASEIN_USER_ACCESS_LEVEL_ADMIN).count > 1
+    end
+	
+  	def send_create_notification
+      Casein::CaseinNotification.new_user_information(self, casein_config_hostname, @password).deliver
+    end
+  
+    def send_update_notification
+      if notify_of_new_password
+        notify_of_new_password = false
+        Casein::CaseinNotification.generate_new_password(self, casein_config_hostname, @password).deliver
+      end
+    end
+    
+    def send_password_reset_instructions
+      reset_perishable_token!
+      Casein::CaseinNotification.password_reset_instructions(self, casein_config_hostname).deliver
+    end
+    
+    def check_time_zone
+      self.time_zone = Rails::Application.config.time_zone unless self.time_zone
+    end
+	
+  	def is_admin?
+  	  access_level == $CASEIN_USER_ACCESS_LEVEL_ADMIN
+  	end
+  
+  end
+end

data/app/models/casein/user_session.rb

@@ -0,0 +1,8 @@
+module Casein
+  class UserSession < ::Authlogic::Session::Base
+    include ActiveModel::Conversion 
+    def persisted? 
+      false 
+    end
+  end
+end

data/app/views/casein/casein/blank.html.erb

@@ -0,0 +1 @@
+<h2>Welcome to the <%= casein_config_website_name %> administration system</h2>

data/app/views/casein/casein_notification/generate_new_password.erb

@@ -0,0 +1,12 @@
+Dear <%= @name %>,<br />
+<br />
+Your password has been reset by an administrator for your account at:<br />
+<br />
+<%= @host %>/casein<br />
+<br />
+Login: <%= @login %><br />
+New password: <%= @pass %><br />
+<br />
+From<br />
+<br />
+<%= @from_text %>

data/app/views/casein/casein_notification/new_user_information.erb

@@ -0,0 +1,12 @@
+Dear <%= @name %>,<br />
+<br />
+A new user account has been created for you at:<br />
+<br />
+<%= @host %>/casein<br />
+<br />
+Login: <%= @login %><br />
+Password: <%= @pass %><br />
+<br />
+From<br />
+<br />
+<%= @from_text %>

data/app/views/casein/casein_notification/password_reset_instructions.erb

@@ -0,0 +1,11 @@
+Dear <%= @name %>,<br />
+<br />
+A request to reset the password for login '<%= @login %>' has been made.<br />  
+If you did not make this request, simply ignore this email.<br />
+Otherwise, click the link below to proceed:<br />
+<br />
+<%= @reset_password_url %><br />
+<br />
+From<br />
+<br />
+<%= @from_text %>

data/app/views/casein/password_resets/edit.html.erb

@@ -0,0 +1,48 @@
+<%= form_for @reset_user, :url => casein_password_reset_path do |f| %>
+
+	<% if @reset_user.errors.any? %>
+		<div class="error">
+			<p>
+				<% @reset_user.errors.keys.each do |key| %>
+					<%= (key.to_s.humanize + " ") unless key == :base %>
+					<%=  @reset_user.errors[key].first %>
+				<% end %>
+			</p>
+		</div>
+	<% end %>
+
+	<% if flash[:warning] %>
+		<div class="error">
+			<p><%= flash[:warning] %></p>
+		</div>
+	<% end %>
+
+	<% if flash[:notice] %>
+		<div class="notice">
+			<p><%= flash[:notice] %></p>
+		</div>
+	<% end %>
+
+	<%= hidden_field_tag :token, params[:token] %>
+
+	<div class="text">
+		<p>
+			<%= f.label :password, "Password:" %>
+		  <%= f.password_field :password, :class => "caseinTextField" %>
+		</p>
+	</div>
+
+	<div class="text">
+		<p>
+			<%= f.label :password_confirmation, "Confirm password:" %>
+		  <%= f.password_field :password_confirmation, :class => "caseinTextField" %>
+		</p>
+	</div>
+	
+	<div class="submit_remember">
+		<p>
+			<%= f.submit "Reset password", :class => "caseinSubmit" %>
+		</p>
+	</div>
+
+<% end %>