cdamian-admin 0.0.0 → 0.0.1

data/README.rdoc

@@ -1,6 +1,6 @@
 = admin
 
-Description goes here.
+A drop-in admin interface for existing rails applications.
 
 == Copyright
 

data/Rakefile

@@ -5,11 +5,12 @@ begin
   require 'jeweler'
   Jeweler::Tasks.new do |gem|
     gem.name = "admin"
-    gem.summary = %Q{Core admin interface with user authentication and authorization}
+    gem.summary = %Q{A drop-in admin interface for existing rails applications}
+    gem.description = %Q{A drop-in admin interface for existing rails applications}
     gem.email = "damian.caruso@gmail.com"
     gem.homepage = "http://github.com/cdamian/admin"
     gem.authors = ["Damian Caruso"]
-    gem.files = FileList['lib/**/*.rb', '[A-Z]*', 'test/**/*'].to_a
+    gem.files = FileList['app/**/*', 'config/**/*', 'db/**/*', 'lib/**/*.rb', 'public/**/*', 'tasks/**/*.rake', '[A-Z]*', 'test/**/*'].to_a
     gem.add_dependency("binarylogic-authlogic", ">= 2.1.1")
     # gem is a Gem::Specification... see http://www.rubygems.org/read/chapter/20 for additional settings
   end

data/VERSION

@@ -1 +1 @@
-0.0.0
+0.0.1

data/app/controllers/admin/base_controller.rb

@@ -0,0 +1,59 @@
+class Admin::BaseController < ApplicationController
+  helper :all
+  helper_method :current_moderator_session, :current_moderator
+  protect_from_forgery
+  filter_parameter_logging :password, :password_confirmation
+  before_filter :require_moderator
+  layout "admin"
+  
+  def admin_index
+  	redirect_to admin_dashboard_path
+  end
+  
+  private
+    def current_moderator_session
+      return @current_moderator_session if defined?(@current_moderator_session)
+      @current_moderator_session = ModeratorSession.find
+    end
+    
+    def current_moderator
+      return @current_moderator if defined?(@current_moderator)
+      @current_moderator = current_moderator_session && current_moderator_session.record
+    end
+    
+    def require_moderator
+      unless current_moderator
+        store_location
+        flash[:notice] = "You must be logged in to access this page"
+        redirect_to new_admin_moderator_session_url
+        return false
+      end
+    end
+ 
+    def require_no_moderator
+      if current_moderator
+        store_location
+        flash[:notice] = "You must be logged out to access this page"
+        redirect_to admin_account_url
+        return false
+      end
+    end
+    
+    def require_admin
+      unless current_moderator && current_moderator.admin?
+      	store_location
+      	flash[:notice] = "You must be an administrator to access this page"
+      	redirect_to admin_account_url
+      	return false
+      end
+    end
+    
+    def store_location
+      session[:return_to] = request.request_uri
+    end
+    
+    def redirect_back_or_default(default)
+      redirect_to(session[:return_to] || default)
+      session[:return_to] = nil
+    end
+end

data/app/controllers/admin/dashboard_controller.rb

@@ -0,0 +1,4 @@
+class Admin::DashboardController < Admin::BaseController
+  def index
+  end
+end

data/app/controllers/admin/moderator_sessions_controller.rb

@@ -0,0 +1,26 @@
+class Admin::ModeratorSessionsController < Admin::BaseController
+  skip_before_filter :require_moderator, :only => [:new, :create]
+  before_filter :require_no_moderator, :only => [:new, :create]
+  layout false
+  
+  def new
+    @moderator_session = ModeratorSession.new
+  end
+  
+  def create
+    @moderator_session = ModeratorSession.new(params[:moderator_session])
+    if @moderator_session.save
+      flash[:notice] = "Login successful!"
+      redirect_back_or_default admin_dashboard_url
+    else
+      flash.now[:error] = "Invalid credentials!"
+      render :action => :new
+    end
+  end
+  
+  def destroy
+    current_moderator_session.destroy
+    flash[:notice] = "Logout successful!"
+    redirect_back_or_default new_admin_moderator_session_url
+  end
+end

data/app/controllers/admin/moderators_controller.rb

@@ -0,0 +1,67 @@
+class Admin::ModeratorsController < Admin::BaseController
+  before_filter :require_admin, :except => [:edit, :update, :show]
+  before_filter :set_moderator, :only => [:edit, :update]
+	
+  def index
+  	@moderators = Moderator.find(:all, :conditions => ["id != ?", current_moderator.id])
+  end	
+  
+  def new
+    @moderator = Moderator.new
+  end
+  
+  def create
+    @moderator = Moderator.new(params[:moderator])
+    if @moderator.save
+      flash[:notice] = "Account created!"
+      redirect_to admin_moderators_url
+    else
+      render :action => :new
+    end
+  end
+  
+  def show
+  	@moderator = @current_moderator
+  end
+ 
+  def edit
+  	if current_moderator != @moderator
+	  @title = "Moderators"
+	  @cancel_url = admin_moderators_path
+	else
+	  @title = "Edit Account"
+	  @cancel_url = admin_dashboard_path
+	end
+  end
+  
+  def update
+    if @moderator.update_attributes(params[:moderator])
+      flash[:notice] = "Account updated!"
+      if current_moderator != @moderator
+      	redirect_to admin_moderators_url
+      else
+      	redirect_to admin_dashboard_path
+  	  end
+    else
+      render :action => :edit
+    end
+  end
+  
+  def destroy
+  	@moderator = Moderator.find(params[:id])
+  	@moderator.destroy
+  	flash[:notice] = "Account deleted!"
+  	redirect_to admin_moderators_url
+  end
+  
+  protected
+    def set_moderator
+      if params[:id] && !current_moderator.admin?
+      	redirect_to admin_account_url
+      elsif params[:id].blank?
+      	@moderator = @current_moderator
+      else
+        @moderator = Moderator.find(params[:id])
+      end
+    end
+end

data/app/helpers/admin/base_helper.rb

@@ -0,0 +1,24 @@
+module Admin::BaseHelper
+  def current_url?(options)
+    url = case options
+    when Hash
+      url_for options
+    else
+      options.to_s
+    end
+    request.request_uri =~ Regexp.new('^' + Regexp.quote(clean(url)))
+  end
+  
+  def clean(url)
+   	uri = URI.parse(url)
+   	uri.path.gsub(%r{/+}, '/').gsub(%r{/$}, '')
+  end
+  
+  def nav_link_to(name, options)
+	if current_url?(options)
+  	  %{<strong>#{ link_to name, options }</strong>}
+	else
+	  link_to name, options
+	end
+  end
+end

data/app/helpers/admin/dashboard_helper.rb

@@ -0,0 +1,2 @@
+module Admin::DashboardHelper
+end

data/app/helpers/admin/moderator_sessions_helper.rb

@@ -0,0 +1,2 @@
+module Admin::ModeratorSessionsHelper
+end

data/app/helpers/admin/moderators_helper.rb

@@ -0,0 +1,2 @@
+module Admin::ModeratorsHelper
+end

data/app/models/moderator.rb

@@ -0,0 +1,6 @@
+class Moderator < ActiveRecord::Base
+  acts_as_authentic do |c|
+    c.logged_in_timeout = 1.minute
+  end
+  validates_presence_of :name
+end

data/app/models/moderator_session.rb

@@ -0,0 +1,3 @@
+class ModeratorSession < Authlogic::Session::Base
+  logout_on_timeout true
+end

data/app/views/admin/dashboard/index.html.erb

@@ -0,0 +1,3 @@
+<div class="heading">
+	<h1>Dashboard</h1>
+</div>

data/app/views/admin/moderator_sessions/new.html.erb

@@ -0,0 +1,57 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html>
+  <head>
+    <title>Login</title>
+    <%= javascript_include_tag :defaults %>
+    <%= stylesheet_link_tag "admin/application" %>
+  </head>
+  <body>
+  	<div id="header">
+  		<div class="div1">
+  			<div class="div2">Admin UI</div>
+		</div>
+	</div>
+  	<div id="menu"></div>
+  	<div id="loginbox">
+  		<div class="div1">Please enter your login details.</div>
+  		<div class="div2">
+  			<% flash.each do |name, msg| %>
+  				<%= content_tag :div, msg, :class => "flash_#{name}" %>
+  			<% end %>
+  			<% form_for @moderator_session, :url => admin_moderator_session_path, :html => { :id => "loginfrm" } do |f| %>
+  			<table>
+        		<tbody>
+        			<tr>
+        				<td align="center" rowspan="3">
+        					<%= image_tag "/images/admin/login.png", :alt => "Please enter your login details." %>
+        				</td>
+    				</tr>
+    				<tr>
+    					<td>
+    						<%= f.label :email %>:<br/>
+    						<%= f.text_field :email, :size => 20 %>
+    						<br/>
+    						<br/>
+    						<%= f.label :password %>:<br/>
+    						<%= f.password_field :password, :size => 20 %>
+						</td>
+					</tr>
+					<tr>
+						<td align="right">
+							<a class="button" onclick="$('loginfrm').submit();">
+								<span class="button_left button_login"></span>
+								<span class="button_middle">Login</span>
+								<span class="button_right"></span>
+							</a>
+							<%= f.submit "Login", :class => "nodisp" %>
+						</td>
+					</tr>
+				</tbody>
+			</table>
+  			<% end %>
+  		</div>
+  		<div class="div3"></div>
+  	</div>
+ </body>
+</html>

data/app/views/admin/moderators/_form.erb

@@ -0,0 +1,42 @@
+<table class="form">
+	<tbody>
+		<tr>
+			<td width="25%">
+				<span class="required">*</span>
+				<%= form.label :name %>
+			</td>
+			<td><%= form.text_field :name %></td>
+		</tr>
+		<tr>
+			<td width="25%">
+				<span class="required">*</span>
+				<%= form.label :email %>
+			</td>
+			<td><%= form.text_field :email %></td>
+		</tr>
+		<tr>
+			<td width="25%">
+				<% if form.object.new_record? %>
+					<span class="required">*</span>
+				<% end %>
+				<%= form.label :password, form.object.new_record? ? nil : "Change password" %>
+			</td>
+			<td><%= form.password_field :password %></td>
+		</tr>
+		<tr>
+			<td width="25%">
+				<% if form.object.new_record? %>
+					<span class="required">*</span>
+				<% end %>
+				<%= form.label :password_confirmation %>
+			</td>
+			<td><%= form.password_field :password_confirmation %></td>
+		</tr>
+		<% if current_moderator.admin? %>
+			<tr>
+				<td width="25%"><%= form.label "Administrator" %></td>
+				<td><%= form.check_box :admin %></td>
+			</tr>
+		<% end %>
+	</tbody>
+</table>

data/app/views/admin/moderators/edit.html.erb

@@ -0,0 +1,25 @@
+<div class="heading">
+	<h1><%=h @title %></h1>
+	<div class="buttons">
+		<a class="button" onclick="$('moderatorfrm').submit();">
+			<span class="button_left button_save"></span>
+			<span class="button_middle">Save</span>
+			<span class="button_right"></span>
+		</a>
+		<a class="button" href="<%= @cancel_url %>">
+			<span class="button_left button_cancel"></span>
+			<span class="button_middle">Cancel</span>
+			<span class="button_right"></span>
+		</a>
+	</div>
+</div>
+<div class="tabs">
+	<a class="selected" href="#">General</a>
+</div>
+<% form_for @moderator, :url => admin_moderator_path(@moderator), :html => { :id => "moderatorfrm" } do |f| %>
+	<div class="page">
+  		<%= f.error_messages %>
+  		<%= render :partial => "form", :object => f %>
+		<%= f.submit "Save", :class => "nodisp" %>
+	</div>
+<% end %>

data/app/views/admin/moderators/index.html.erb

@@ -0,0 +1,35 @@
+<div class="heading">
+	<h1>Moderators</h1>
+	<div class="buttons">
+		<a class="button" href="<%= new_admin_moderator_path %>">
+			<span class="button_left button_insert"></span>
+			<span class="button_middle">Add</span>
+			<span class="button_right"></span>
+		</a>
+	</div>
+</div>
+<table class="list">
+	<thead>
+		<tr>
+			<td class="left">Name</td>
+			<td class="left">Email</td>
+			<td class="right">Admin</td>
+			<td class="right">Last Login</td>
+			<td class="right">Action</td>
+		</tr>
+	</thead>
+	<tbody>
+	<% for moderator in @moderators %>
+		<tr class="<%= cycle('even','odd') %>">
+			<td class="left"><%=h moderator.name %></td>
+			<td class="left"><%=h moderator.email %></td>
+			<td class="right"><%= moderator.admin? ? "X" : "" %></td>
+			<td class="right"><%= distance_of_time_in_words_to_now(moderator.last_login_at) %> ago</td>
+			<td class="right">
+				[ <%= link_to "Edit", edit_admin_moderator_path(moderator) %> ]
+				[ <%= link_to "Destroy", admin_moderator_path(moderator), :confirm => "Are you sure?", :method => :delete %> ]
+			</td>
+		</tr>
+	<% end %>
+	</tbody>
+</table>

data/app/views/admin/moderators/new.html.erb

@@ -0,0 +1,25 @@
+<div class="heading">
+	<h1>Moderators</h1>
+	<div class="buttons">
+		<a class="button" onclick="$('moderatorfrm').submit();">
+			<span class="button_left button_save"></span>
+			<span class="button_middle">Save</span>
+			<span class="button_right"></span>
+		</a>
+		<a class="button" href="<%= admin_moderators_path %>">
+			<span class="button_left button_cancel"></span>
+			<span class="button_middle">Cancel</span>
+			<span class="button_right"></span>
+		</a>
+	</div>
+</div>
+<div class="tabs">
+	<a class="selected" href="#">General</a>
+</div>
+<% form_for @moderator, :url => admin_moderators_path, :html => { :id => "moderatorfrm" } do |f| %>
+	<div class="page">
+  		<%= f.error_messages %>
+  		<%= render :partial => "form", :object => f %>
+  		<%= f.submit "Save", :class => "nodisp" %>
+  	</div>
+<% end %>

data/app/views/layouts/admin.html.erb

@@ -0,0 +1,45 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html>
+  <head>
+    <title><%= h(yield(:title) || "Administration") %></title>
+    <%= javascript_include_tag :defaults %>
+    <%= stylesheet_link_tag 'admin/application' %>
+    <%= yield(:head) %>
+  </head>
+  <body>
+  	<div id="header">
+  		<div class="div1">
+  			<div class="div2">Admin UI</div>
+  			<div class="div3">
+  				Welcome
+  				<b><%=h current_moderator.name %></b>
+  				|
+  				<%= link_to "My Account", edit_admin_account_path %>
+  				|
+  				<%= link_to "Logout", admin_moderator_session_path, :method => :delete %><br/>
+  			</div>
+		</div>
+	</div>
+  	<div id="menu">
+  		<ul id="nav">
+  			<% Admin.tabs.each do |tab| %>
+  				<% if tab.display_for?(current_moderator) %>
+  					<li><%= nav_link_to h(tab.name), tab.path %></li>
+  				<% end %>
+			<% end %>
+		</ul>
+  	</div>
+    <div id="container">
+    	<div id="column_left"></div>
+    	<div id="content">
+    		<% flash.each do |name, msg| %>
+    			<%= content_tag :div, msg, :class => "flash_#{name}" %>
+    		<% end %>
+    		<%= yield %>
+    	</div>
+    	<div id="column_right"></div>
+    </div>
+    <div id="footer"></div>
+  </body>
+</html>