cortex 0.1.1

data/app/models/cortex/role.rb

@@ -0,0 +1,12 @@
+module Cortex
+  class Role < Cortex::ApplicationRecord
+    scopify
+
+    has_and_belongs_to_many :users
+    has_and_belongs_to_many :permissions
+
+    validates :resource_type,
+              :inclusion => { :in => Rolify.resource_types },
+              :allow_nil => true
+  end
+end

data/app/models/cortex/tenant.rb

@@ -0,0 +1,41 @@
+module Cortex
+  class Tenant < Cortex::ApplicationRecord
+    acts_as_nested_set
+
+    has_many :content_items
+    has_many :content_types
+    has_many :contracts
+    has_many :decorators
+    has_and_belongs_to_many :users
+    belongs_to :owner, class_name: 'User'
+    has_many :users, foreign_key: :active_tenant_id, class_name: 'User'
+
+    validates_presence_of :name
+    validates_associated :owner
+
+    validates_uniqueness_of :name,
+                            :name_id
+
+    alias_method :organization, :root
+
+    def is_organization?
+      root?
+    end
+
+    def has_children?
+      !leaf?
+    end
+
+    def all_up_organization_for(klass)
+      self_and_ancestors.flat_map do |tenant|
+        tenant.public_send(klass.name.demodulize.underscore.pluralize).all
+      end
+    end
+
+    def search_up_organization_for(klass, attribute, value)
+      all_up_organization_for(klass).select do |record|
+        record[attribute] == value
+      end
+    end
+  end
+end

data/app/models/cortex/user.rb

@@ -0,0 +1,77 @@
+require 'digest/md5'
+
+module Cortex
+  class User < Cortex::ApplicationRecord
+    include HasGravatar
+    include HasFirstnameLastname
+
+    # Include default devise modules. Others available are:
+    # :confirmable, :lockable, :timeoutable and :omniauthable
+    devise :database_authenticatable, :rememberable, :trackable, :validatable, :recoverable
+    rolify role_join_table_name: :roles_users # rolify doesn't obey lexical order for join table names
+
+    has_and_belongs_to_many :tenants
+    belongs_to :active_tenant, class_name: 'Tenant', optional: true
+    has_many :content_items
+
+    validates_presence_of :email, :firstname, :lastname
+
+    before_destroy :prevent_consumed_deletion
+
+    def active_tenant
+      super || tenants.order(:name).first
+    end
+
+    def referenced?
+      [ContentItem].find do |resource|
+        true if resource.where(user: self).count > 0
+      end
+    end
+
+    def anonymous?
+      self.id == nil
+    end
+
+    def has_permission?(resource, permission)
+      return true if self.is_superadmin?
+
+      resource_class = resource.class
+      allowed_perms = allowed_permissions(resource_class, permission)
+
+      if resource_class == Cortex::ContentType
+        allowed_perms.select { |perm| perm.resource_id == resource.id }.any?
+      else
+        allowed_perms.any?
+      end
+    end
+
+    def gravatar
+      "//www.gravatar.com/avatar/#{Digest::MD5.hexdigest email}"
+    end
+
+    def tenants_with_children
+      tenants.flat_map(&:self_and_descendants)
+    end
+
+    private
+
+    def allowed_permissions(resource_class, permission)
+      permissions.select { |perm| perm.resource_type == resource_class.to_s && perm.name == permission }
+    end
+
+    def prevent_consumed_deletion
+      raise Cortex::Exceptions::ResourceConsumed if referenced?
+    end
+
+    class << self
+      def authenticate(username, password)
+        user = User.find_by_email(username)
+        user && user.valid_password?(password) ? user : nil
+      end
+
+      def anonymous
+        User.new
+      end
+    end
+  end
+end

data/app/operations/cortex/database_transact_operation.rb

@@ -0,0 +1,17 @@
+module Cortex
+  DatabaseTransactOperation = -> (input, &block) {
+    extend Dry::Monads::Result::Mixin
+
+    result = nil
+
+    begin
+      ActiveRecord::Base.transaction do
+        result = block.(Success(input))
+        raise ActiveRecord::Rollback if result.failure?
+        result
+      end
+    rescue ActiveRecord::Rollback
+      result
+    end
+  }
+end

data/app/operations/cortex/execute_content_item_state_change_operation.rb

@@ -0,0 +1,16 @@
+require 'dry/transaction/operation'
+
+module Cortex
+  class ExecuteContentItemStateChangeOperation
+    include Dry::Transaction::Operation
+
+    def call(input, state:)
+      if state && input.can_transition?(state)
+        state_method = "#{state}!"
+        input.send(state_method)
+      end
+
+      Success(input)
+    end
+  end
+end

data/app/operations/cortex/parse_content_item_field_items_operation.rb

@@ -0,0 +1,18 @@
+require 'dry/transaction/operation'
+
+module Cortex
+  class ParseContentItemFieldItemsOperation
+    include Dry::Transaction::Operation
+    include Cortex::WidgetParsable
+
+    def call(input)
+      input.field_items.each do |field_item|
+        if field_item.field.metadata && field_item.field.metadata['parse_widgets']
+          parse_widgets!(field_item)
+        end
+      end
+
+      Success(input)
+    end
+  end
+end

data/app/operations/cortex/persist_content_item_operation.rb

@@ -0,0 +1,12 @@
+require 'dry/transaction/operation'
+
+module Cortex
+  class PersistContentItemOperation
+    include Dry::Transaction::Operation
+
+    def call(input)
+      input.save!
+      Success(input)
+    end
+  end
+end

data/app/policies/cortex/application_policy.rb

@@ -0,0 +1,55 @@
+module Cortex
+  class ApplicationPolicy
+    attr_reader :user, :record
+
+    def initialize(user, record)
+      @user = user
+      @record = record
+    end
+
+    def index?
+      false
+    end
+
+    def show?
+      scope.where(:id => record.id).exists?
+    end
+
+    def create?
+      false
+    end
+
+    def new?
+      create?
+    end
+
+    def update?
+      false
+    end
+
+    def edit?
+      update?
+    end
+
+    def destroy?
+      false
+    end
+
+    def scope
+      Pundit.policy_scope!(user, record.class)
+    end
+
+    class Scope
+      attr_reader :user, :scope
+
+      def initialize(user, scope)
+        @user = user
+        @scope = scope
+      end
+
+      def resolve
+        scope
+      end
+    end
+  end
+end

data/app/policies/cortex/content_item_policy.rb

@@ -0,0 +1,49 @@
+module Cortex
+  class ContentItemPolicy
+    attr_reader :user, :content_item
+
+    def initialize(user, content_item)
+      @user = user
+      @content_item = content_item
+      @content_type = @content_item.content_type
+    end
+
+    def index?
+      has_permission?("Index")
+    end
+
+    def show?
+      has_permission?("Show")
+    end
+
+    def create?
+      has_permission?("Create")
+    end
+
+    def new?
+      has_permission?("New")
+    end
+
+    def update?
+      has_permission?("Update")
+    end
+
+    def edit?
+      has_permission?("Edit")
+    end
+
+    def destroy?
+      has_permission?("Destroy")
+    end
+
+    def can_publish?
+      has_permission?("Publish")
+    end
+
+    private
+
+    def has_permission?(permission)
+      @user.has_permission?(@content_type, permission)
+    end
+  end
+end

data/app/policies/cortex/content_type_policy.rb

@@ -0,0 +1,38 @@
+module Cortex
+  class ContentTypePolicy
+    attr_reader :user, :content_type
+
+    def initialize(user, content_type)
+      @user = user
+      @content_type = content_type
+    end
+
+    def index?
+      @user.is_superadmin?
+    end
+
+    def show?
+      @user.is_superadmin?
+    end
+
+    def create?
+      @user.is_superadmin?
+    end
+
+    def new?
+      create?
+    end
+
+    def update?
+      @user.is_superadmin?
+    end
+
+    def edit?
+      update?
+    end
+
+    def destroy?
+      @user.is_superadmin?
+    end
+  end
+end

data/app/transactions/concerns/cortex/content_itemable.rb

@@ -0,0 +1,15 @@
+module Cortex
+  module ContentItemable
+    extend ActiveSupport::Concern
+
+    included do
+      def field_items_attributes(content_item_params)
+        content_item_params['field_items_attributes']
+      end
+
+      def last_updated_by(current_user)
+        { updated_by: current_user }
+      end
+    end
+  end
+end

data/app/transactions/concerns/cortex/field_item_transactor.rb

@@ -0,0 +1,28 @@
+module Cortex
+  module FieldItemTransactor
+    extend ActiveSupport::Concern
+
+    included do
+      # TODO: DRY all this up
+      def plugin_new_transaction_klass(field_item)
+        "new_#{field_type_name(field_item)}_field_item_transaction".classify.safe_constantize
+      end
+
+      def plugin_update_transaction_klass(field_item)
+        "update_#{field_type_name(field_item)}_field_item_transaction".classify.safe_constantize
+      end
+
+      def field_type_name(field_item)
+        field_item.field.field_type.chomp '_field_type'
+      end
+
+      def transact_new(field_item)
+        plugin_new_transaction_klass(field_item)&.new&.call(field_item)&.value!
+      end
+
+      def transact_update(field_item)
+        plugin_update_transaction_klass(field_item)&.new&.call(field_item)&.value!
+      end
+    end
+  end
+end

data/app/transactions/concerns/cortex/widget_parsable.rb

@@ -0,0 +1,19 @@
+module Cortex
+  module WidgetParsable
+    extend ActiveSupport::Concern
+
+    included do
+      def parse_widgets!(field_item)
+        Cortex.tag_parsers.each do |tag_parser|
+          parser_module = tag_parser.constantize
+          field_item.data['text'] = parser_module.parse(field_item.data['text'])
+        end
+      end
+
+      def widget_parsers_as_json
+        # TODO: iterate through, provide JSON of Widget parser for frontend
+        {}.to_json
+      end
+    end
+  end
+end

data/app/transactions/cortex/application_transaction.rb

@@ -0,0 +1,5 @@
+module Cortex
+  class ApplicationTransaction
+    include Dry::Transaction
+  end
+end

data/app/transactions/cortex/create_content_item_transaction.rb

@@ -0,0 +1,35 @@
+module Cortex
+  class CreateContentItemTransaction < Cortex::ApplicationTransaction
+    include Dry::Transaction(container: Cortex::TransactionContainer)
+    include Cortex::ContentItemable
+
+    around :database_transact, with: "cortex.database_transact"
+    step :init
+    step :process
+    step :parse_content_item_field_items, with: "cortex.parse_content_item_field_items"
+    step :persist_content_item, with: "cortex.persist_content_item"
+    step :execute_content_item_state_change, with: "cortex.execute_content_item_state_change"
+
+    def init(input)
+      Success(ContentItemTransactionType.new(input))
+    end
+
+    def process(input)
+      if input.content_item
+        content_item = input.content_item
+      else
+        content_item = ContentItem.new
+        field_items_attributes(input.content_item_params).each do |_key, field_item_attributes|
+          field_item_attributes.delete('id')
+          content_item.field_items << NewFieldItemTransaction.new.call(field_item_attributes).value!
+        end
+
+        content_item.attributes = input.content_item_params.except('field_items_attributes')
+      end
+
+      content_item.tenant = input.current_user.active_tenant # TODO: In future, grab from form/route, rather than current_user + perform authorization checks
+
+      Success(content_item)
+    end
+  end
+end