comunit-base 0.37.200628.0

data/app/controllers/decision_users_controller.rb

@@ -0,0 +1,2 @@
+class DecisionUsersController < ApplicationController
+end

data/app/controllers/decisions_controller.rb

@@ -0,0 +1,2 @@
+class DecisionsController < ApplicationController
+end

data/app/controllers/deed_categories_controller.rb

@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+# Managing deed categories
+class DeedCategoriesController < AdminController
+  before_action :set_entity, only: %i[edit update destroy]
+
+  # post /deed_categories/check
+  def check
+    @entity = DeedCategory.instance_for_check(params[:entity_id], entity_parameters)
+
+    render 'shared/forms/check'
+  end
+
+  # get /deed_categories/new
+  def new
+    @entity = DeedCategory.new
+  end
+
+  # post /deed_categories
+  def create
+    @entity = DeedCategory.new(creation_parameters)
+    if @entity.save
+      NetworkEntitySyncJob.perform_later(@entity.class.to_s, @entity.id)
+      form_processed_ok(admin_deed_category_path(id: @entity.id))
+    else
+      form_processed_with_error(:new)
+    end
+  end
+
+  # get /deed_categories/:id/edit
+  def edit
+  end
+
+  # patch /deed_categories/:id
+  def update
+    if @entity.update(entity_parameters)
+      NetworkEntitySyncJob.perform_later(@entity.class.to_s, @entity.id)
+      form_processed_ok(admin_deed_category_path(id: @entity.id))
+    else
+      form_processed_with_error(:edit)
+    end
+  end
+
+  # delete /deed_categories/:id
+  def destroy
+    if @entity.destroy
+      flash[:notice] = t('deed_categories.destroy.success')
+    end
+    redirect_to(admin_deed_categories_path)
+  end
+
+  protected
+
+  def component_class
+    Biovision::Components::DeedsComponent
+  end
+
+  def set_entity
+    @entity = DeedCategory.find_by(id: params[:id])
+    handle_http_404('Cannot find deed_category') if @entity.nil?
+  end
+
+  def creation_parameters
+    params.require(:deed_category).permit(DeedCategory.creation_parameters)
+  end
+
+  def entity_parameters
+    params.require(:deed_category).permit(DeedCategory.entity_parameters)
+  end
+end

data/app/controllers/deeds_controller.rb

@@ -0,0 +1,95 @@
+# frozen_string_literal: true
+
+# Management of deeds
+class DeedsController < ApplicationController
+  before_action :restrict_anonymous_access, only: %i[new create]
+  before_action :set_entity, only: %i[edit show update destroy]
+
+  # post /deeds/check
+  def check
+    @entity = Deed.instance_for_check(params[:entity_id], entity_parameters)
+
+    render 'shared/forms/check'
+  end
+
+  # get /deeds/regions
+  def regions
+    @collection = Region.visible.for_tree(nil, params[:parent_id])
+  end
+
+  # get /deeds
+  def index
+    # @collection = Deed.page_for_visitors(current_page)
+  end
+
+  # get /deeds/new
+  def new
+    @entity = Deed.new
+  end
+
+  # post /deeds
+  def create
+    @entity = Deed.new(creation_parameters)
+    if @entity.save
+      apply_categories if params.key?(:category)
+      NetworkEntitySyncJob.perform_later(@entity.class.to_s, @entity.id)
+      form_processed_ok(deed_path(id: @entity.id))
+    else
+      form_processed_with_error(:new)
+    end
+  end
+
+  # get /deeds/:id
+  def show
+    @entity.increment! :view_count
+  end
+
+  # get /deeds/:id/edit
+  def edit
+  end
+
+  # patch /deeds/:id
+  def update
+    if @entity.update(entity_parameters)
+      apply_categories if params.key?(:category)
+      NetworkEntitySyncJob.perform_later(@entity.class.to_s, @entity.id)
+      form_processed_ok(deed_path(id: @entity.id))
+    else
+      form_processed_with_error(:edit)
+    end
+  end
+
+  # delete /deeds/:id
+  def destroy
+    flash[:notice] = t('deeds.destroy.success') if @entity.destroy
+    redirect_to(admin_deeds_path)
+  end
+
+  protected
+
+  def component_class
+    Biovision::Components::DeedsComponent
+  end
+
+  def restrict_editing
+    error = 'Entity is not editable by current user'
+    handle_http_401(error) unless component_handler.editable?(@entity)
+  end
+
+  def set_entity
+    @entity = Deed.list_for_visitors.find_by(id: params[:id])
+    handle_http_404('Cannot find deed') if @entity.nil?
+  end
+
+  def entity_parameters
+    params.require(:deed).permit(Deed.entity_parameters)
+  end
+
+  def creation_parameters
+    entity_parameters.merge(owner_for_entity(true))
+  end
+
+  def apply_categories
+    @entity.deed_category_ids = Array(params[:category])
+  end
+end

data/app/controllers/editorial/index_controller.rb

@@ -0,0 +1,11 @@
+class Editorial::IndexController < AdminController
+  # get /editorial
+  def index
+  end
+
+  private
+
+  def restrict_access
+    require_privilege_group(:editors)
+  end
+end

data/app/controllers/editorial/users_controller.rb

@@ -0,0 +1,34 @@
+class Editorial::UsersController < AdminController
+  include ToggleableEntity
+
+  before_action :set_entity, except: [:index]
+  before_action :restrict_toggle, only: [:toggle]
+
+  # get /editorial/users
+  def index
+    site_id     = ENV['SITE_ID'].to_i
+    @search     = param_from_request(:q)
+    @collection = User.where(site_id: site_id).page_for_administration current_page, @search
+  end
+
+  # get /editorial/users/:id
+  def show
+  end
+
+  protected
+
+  def restrict_access
+    require_privilege_group(:editors)
+  end
+
+  def restrict_toggle
+    require_privilege(:chief_editor)
+  end
+
+  def set_entity
+    @entity = User.find_by(id: params[:id])
+    if @entity.nil?
+      handle_http_404('Cannot find user')
+    end
+  end
+end

data/app/controllers/entries_controller.rb

@@ -0,0 +1,140 @@
+class EntriesController < ApplicationController
+  before_action :restrict_anonymous_access, except: [:index, :show]
+  before_action :restrict_adding, only: [:new, :create]
+  before_action :set_entity, except: [:index, :new, :create, :archive]
+  before_action :restrict_editing, only: [:edit, :update, :destroy]
+  before_action :restrict_reposting, only: [:new_repost, :create_repost]
+
+  # get /entries
+  def index
+    @collection = Entry.page_for_visitors(current_user, current_page)
+  end
+
+  # get /entries/new
+  def new
+    @entity = Entry.new
+  end
+
+  # post /entries
+  def create
+    @entity = Entry.new creation_parameters
+    if @entity.save
+      redirect_to @entity
+    else
+      render :new, status: :bad_request
+    end
+  end
+
+  # get /entries/:id
+  def show
+    @entity.increment! :view_count
+    set_adjacent_entities
+  end
+
+  # get /entries/:id/edit
+  def edit
+  end
+
+  # patch /entries/:id
+  def update
+    if @entity.update entity_parameters
+      redirect_to @entity, notice: t('entries.update.success')
+    else
+      render :edit, status: :bad_request
+    end
+  end
+
+  # delete /entries/:id
+  def destroy
+    if @entity.update(deleted: true)
+      flash[:notice] = t('entries.destroy.success')
+    end
+
+    redirect_to entries_path
+  end
+
+  # get /entries/archive/(:year)/(:month)
+  def archive
+    collect_months
+    unless params[:month].nil?
+      @collection = Entry.archive(params[:year], params[:month]).page_for_visitors current_user, current_page
+    end
+  end
+
+  # get /entries/:id/reposts/new
+  def new_repost
+    @news = @entity.news.new
+  end
+
+  # post /entries/:id/reposts
+  def create_repost
+    @news = @entity.news.new(repost_parameters)
+    if @news.save
+      redirect_to @news
+    else
+      render :new_repost, status: :bad_request
+    end
+  end
+
+  private
+
+  def set_entity
+    @entity = Entry.find_by(id: params[:id], deleted: false)
+    if @entity.nil?
+      handle_http_404('Cannot find non-deleted entry')
+    end
+    unless @entity&.visible_to?(current_user)
+      handle_http_401("Entity is not visible to user #{current_user&.id}")
+    end
+  end
+
+  def restrict_editing
+    raise record_not_found unless @entity.editable_by? current_user
+  end
+
+  def creation_parameters
+    entry_parameters = params.require(:entry).permit(Entry.creation_parameters)
+    entry_parameters.merge(owner_for_entity(true))
+  end
+
+  def entity_parameters
+    params.require(:entry).permit(Entry.entity_parameters)
+  end
+
+  def collect_months
+    @dates = Hash.new
+    Entry.not_deleted.distinct.pluck("date_trunc('month', created_at)").sort.each do |date|
+      @dates[date.year] = [] unless @dates.has_key? date.year
+      @dates[date.year] << date.month
+    end
+  end
+
+  def set_adjacent_entities
+    privacy   = Entry.privacy_for_user(current_user)
+    @adjacent = {
+        prev: Entry.with_privacy(privacy).where('id < ?', @entity.id).order('id desc').first,
+        next: Entry.with_privacy(privacy).where('id > ?', @entity.id).order('id asc').first
+    }
+  end
+
+  def restrict_adding
+    unless current_user_has_privilege?(:blogger)
+      redirect_to entries_path, alert: t('entries.new.restricted')
+    end
+  end
+
+  def restrict_reposting
+    unless @entity.generally_accessible?
+      redirect_to @entity, alert: t('entries.new_repost.forbidden')
+    end
+  end
+
+  def repost_parameters
+    entry_parameters = {
+        body: 'repost',
+        title: @entity.title.blank? ? t(:untitled) : @entity.title
+    }
+    post_parameters = params.require(:news).permit(News.repost_parameters)
+    post_parameters.merge(owner_for_entity(true)).merge(entry_parameters)
+  end
+end

data/app/controllers/event_materials_controller.rb

@@ -0,0 +1,55 @@
+class EventMaterialsController < AdminController
+  before_action :set_entity, except: [:new, :create]
+
+  # post /event_materials
+  def create
+    @entity = EventMaterial.new(creation_parameters)
+    if @entity.save
+      redirect_to(admin_event_path(id: @entity.event_id))
+    else
+      render :new, status: :bad_request
+    end
+  end
+
+  # get /event_materials/:id/edit
+  def edit
+  end
+
+  # patch /event_materials/:id
+  def update
+    if @entity.update(entity_parameters)
+      redirect_to admin_event_path(id: @entity.event_id), notice: t('event_materials.update.success')
+    else
+      render :edit, status: :bad_request
+    end
+  end
+
+  # delete /event_materials/:id
+  def destroy
+    if @entity.destroy
+      flash[:notice] = t('event_materials.destroy.success')
+    end
+    redirect_to admin_event_path(id: @entity.event_id)
+  end
+
+  private
+
+  def restrict_access
+    require_privilege :event_manager
+  end
+
+  def set_entity
+    @entity = EventMaterial.find_by(id: params[:id])
+    if @entity.nil?
+      handle_http_404('Cannot find event material')
+    end
+  end
+
+  def entity_parameters
+    params.require(:event_material).permit(EventMaterial.entity_parameters)
+  end
+
+  def creation_parameters
+    params.require(:event_material).permit(EventMaterial.creation_parameters)
+  end
+end

data/app/controllers/event_participants_controller.rb

@@ -0,0 +1,44 @@
+class EventParticipantsController < ApplicationController
+  before_action :restrict_access, except: [:create]
+  before_action :set_entity, only: [:destroy]
+
+  def create
+    @entity = EventParticipant.new(creation_parameters)
+    if @entity.save
+      Metric.register(EventParticipant::METRIC_CREATED)
+      redirect_to event_path(id: @entity.event_id), notice: t('event_participants.create.success')
+    else
+      render :new, status: :bad_request
+    end
+  end
+
+  # delete /event_participants/:id
+  def destroy
+    @entity.destroy
+    redirect_to admin_event_path(id: @entity.event_id)
+  end
+
+  private
+
+  def set_entity
+    @entity = EventParticipant.find_by(id: params[:id])
+    if @entity.nil?
+      handle_http_404('Cannot find event_participant')
+    end
+  end
+
+  def restrict_access
+    require_privilege(:event_manager)
+  end
+
+  def entity_parameters
+    permitted = EventParticipant.entity_parameters
+    params.require(:event_participant).permit(permitted)
+  end
+
+  def creation_parameters
+    permitted  = EventParticipant.creation_parameters
+    parameters = params.require(:event_participant).permit(permitted)
+    parameters.merge(owner_for_entity(true))
+  end
+end