curupira 0.1.0

data/app/controllers/curupira/roles_controller.rb

@@ -0,0 +1,43 @@
+class Curupira::RolesController < Curupira::AuthorizedController
+  def index
+    @roles = Role.all
+  end
+
+  def show
+    @role = Role.find params[:id]
+  end
+
+  def new
+    @role = Role.new
+  end
+
+  def edit
+    @role = Role.find params[:id]
+  end
+
+  def create
+    @role = Role.new role_params
+    
+    if @role.save
+      redirect_to @role, notice: "Perfil criado com sucesso"
+    else
+      render :new
+    end
+  end
+
+  def update
+    @role = Role.find params[:id]
+
+    if @role.update(role_params)
+      redirect_to @role, notice: "Perfil atualizado com sucesso"
+    else
+      render :edit
+    end
+  end
+
+  private
+
+  def role_params
+    params.require(:role).permit(:name, :active, authorizations_attributes: [:id, :feature_id, :_destroy])
+  end
+end

data/app/controllers/curupira/sessions_controller.rb

@@ -0,0 +1,30 @@
+class Curupira::SessionsController < ApplicationController
+  before_filter :redirect_to_root_with_errors, if: :current_user, except: :destroy
+
+  def new
+    @user = User.new
+  end
+
+  def create
+    @user = login(params[:user][:username], params[:user][:password])
+
+    if @user
+      redirect_back_or_to(root_path, notice: 'Bem vindo!')
+    else
+      @user = User.new username: params[:user][:username]
+      flash[:alert] = "Login ou senha inválidos"
+      render :new
+    end
+  end
+
+  def destroy
+    logout
+    redirect_to new_session_path
+  end
+
+  private
+
+  def redirect_to_root_with_errors
+    redirect_to root_path, alert: "Você já está logado"
+  end
+end

data/app/controllers/curupira/users_controller.rb

@@ -0,0 +1,47 @@
+class Curupira::UsersController < Curupira::AuthorizedController
+  def index
+    if current_user.admin?
+      @users = User.all
+    else
+      @users = User.all_belonging_to(current_user)
+    end
+  end
+
+  def show
+    @user = User.find(params[:id])
+  end
+
+  def new
+    @user = User.new
+  end
+
+  def edit
+    @user = User.find(params[:id])
+  end
+
+  def create
+    @user = User.new(user_params)
+
+    if @user.save
+      redirect_to @user, notice: "Usuário criado com sucesso"
+    else
+      render :new
+    end
+  end
+
+  def update
+    @user = User.find(params[:id])
+
+    if @user.update user_params
+      redirect_to @user, notice: "Usuário atualizado com sucesso"
+    else
+      render :edit
+    end
+  end
+
+  private
+  
+  def user_params
+    params.require(:user).permit(:email, :name, :username, :password, group_users_attributes: [:id, :group_id, :_destroy, role_group_users_attributes: [:id, :role_id]])
+  end
+end

data/app/helpers/curupira/authorize_helper.rb

@@ -0,0 +1,21 @@
+module Curupira::AuthorizeHelper
+  def link_to_authorize(name = nil, options = nil, html_options = nil, &block)
+    html_options, options, name = options, name, block if block_given?
+    options ||= {}
+
+    html_options = convert_options_to_data_attributes(options, html_options)
+    
+    url = url_for(options)
+
+    request_data = Rails.application.routes.recognize_path(url)
+
+    if has_authorization_for(request_data)
+      html_options['href'] ||= url
+    else
+      html_options['style'] = "cursor: not-allowed;"
+      html_options['class'] = "not-allowed";
+    end
+
+    content_tag(:a, name || url, html_options, &block)
+  end
+end

data/app/helpers/curupira/relationship_select_options_helper.rb

@@ -0,0 +1,17 @@
+module Curupira::RelationshipSelectOptionsHelper
+  def active_user_groups_select_options(user)
+    [["Selecione um grupo", nil]] + Group.joins(:users).where(users: { id: user }, active: true).map { |g| [g.name, g.id] }
+  end
+
+  def active_features_select_options
+    [["Selecione uma funcionalidade", nil]] + Feature.all.map { |f| [f.name, f.id] }
+  end
+
+  def active_roles_select_options
+    [["Selecione um perfil", nil]] + Role.all.map { |r| [r.name, r.id] }
+  end
+
+  def active_role_groups_select_options(group)
+    [["Selecione um perfil", nil]] + Role.joins(:groups).where(groups:{id:group}).map { |r| [r.name, r.id] }
+  end
+end

data/app/mailers/curupira/reset_password_mailer.rb

@@ -0,0 +1,13 @@
+class Curupira::ResetPasswordMailer < ActionMailer::Base
+  default from: 'notifications@example.com'
+
+  def instructions(user)
+    @user = user
+    mail(to: @user.email, subject: 'Recuperar senha')
+  end
+
+  def reseted(user)
+    @user = user
+    mail(to: @user.email, subject: 'Você criou uma nova senha')
+  end
+end

data/app/views/curupira/groups/_form.html.erb

@@ -0,0 +1,28 @@
+<%= form_for @group do |f| %>
+  <div class="field">
+    <%= f.label :name, "Nome" %><br>
+    <%= f.text_field :name %>
+  </div>
+
+  <div class="field">
+    <%= f.label :active, "Ativo" %><br>
+    <%= f.check_box :active %>
+  </div>
+
+  <div class="roles">
+    <h3>Perfis</h3>
+
+    <%= f.fields_for :role_groups do |b| %>
+      <%= render 'role_group_fields', :f => b %>
+    <% end %>
+
+    <div class="links">
+      <%= link_to_add_association 'Adicionar perfil', f, :role_groups %>
+    </div>
+  </div>
+
+  <div class="actions">
+    <%= f.submit %><br>
+    or <%= link_to "Cancelar", groups_path %>
+  </div>
+<% end %>

data/app/views/curupira/groups/_role_group_fields.html.erb

@@ -0,0 +1,9 @@
+<div class="nested-fields">
+  <% if f.object.role.blank? || f.object.role.active? %>
+    <%= f.select :role_id, active_roles_select_options %>
+  <% else %>
+    <%= f.object.role.name %>
+  <% end %>
+
+  <%= link_to_remove_association "Remover", f %>
+</div>

data/app/views/curupira/groups/edit.html.erb

@@ -0,0 +1,3 @@
+<h1>Editar Grupo de Usuários</h1>
+
+<%= render "form" %>

data/app/views/curupira/groups/index.html.erb

@@ -0,0 +1,24 @@
+<h1>Grupo de Usuários</h1>
+
+<div class="actions">
+  <%= link_to "Novo", new_group_path %>
+</div>
+
+<table>
+  <thead>
+    <tr>
+      <th>Nome</th>
+      <th>Ativo</th>
+      <th></th>
+    </tr>
+  </thead>
+  <tbody>
+    <% @groups.each do |group| %>
+      <tr>
+        <td><%= link_to group.name, group %></td>
+        <td><%= group.active %></td>
+        <td><%= link_to "Editar", edit_group_path(group) %></td>
+      </tr>
+    <% end %>
+  </tbody>
+</table>

data/app/views/curupira/groups/new.html.erb

@@ -0,0 +1,3 @@
+<h1>Novo Grupo de Usuários</h1>
+
+<%= render "form" %>

data/app/views/curupira/groups/show.html.erb

@@ -0,0 +1,32 @@
+<h1>Grupo de Usuário</h1>
+
+<div class="actions">
+  <%= link_to "Editar", edit_group_path(@group) %>
+</div>
+
+<ul>
+  <li>Nome: <%= @group.name %></li>
+  <li>Ativo: <%= @group.active %></li>
+</ul>
+
+<div id="role_groups">
+  <h3>Perfis</h3>
+
+  <ul>
+    <% @group.role_groups.each do |g| %>
+      <li><%= g.role.name %></li>
+    <% end %>
+  </ul>
+</div>
+
+<div id="group_users">
+  <h3>Usuários vinculados</h3>
+
+  <ul>
+    <% @group.group_users.each do |g| %>
+      <li><%= link_to g.user.name, g.user %></li>
+    <% end %>
+  </ul>
+</div>
+
+<%= link_to "Voltar", groups_path %>

data/app/views/curupira/passwords/edit.html.erb

@@ -0,0 +1,14 @@
+<h1>Reiniciar senha</h1>
+
+<%= form_for @user, url: password_path(id: @user.reset_password_token) do |f| %>
+  <div class="field">
+    <%= f.label :password, "Nova senha" %>
+    <%= f.password_field :password %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit "Criar nova senha" %>
+  </div>
+<% end %>
+
+<%= link_to "Cancelar", new_session_path%>

data/app/views/curupira/passwords/new.html.erb

@@ -0,0 +1,14 @@
+<h1>Esqueci minha senha</h1>
+
+<%= form_for @user, url: passwords_path do |f| %>
+  <div class="field">
+    <%= f.label :email, "Email" %>
+    <%= f.text_field :email %>
+  </div>
+
+  <div class="actions">
+    <%= f.submit "Me envie instruções por email" %>
+  </div>
+<% end %>
+
+<%= link_to "Cancelar", new_session_path%>

data/app/views/curupira/reset_password_mailer/instructions.html.erb

@@ -0,0 +1,19 @@
+<p>
+  Olá <%= @user.name %>,
+</p>
+
+<p>
+  Este é um email automático.
+</p>
+
+<p>
+  Você solicitou instruções para recuperar sua senha.
+</p>
+
+<p>
+  <%= link_to "Clique aqui para crirar uma nova senha", edit_password_url(id: @user.reset_password_token) %>
+</p>
+
+<p>
+  Caso você não tenha feito esta solicitação, por favor, desconsidere este email.
+</p>

data/app/views/curupira/reset_password_mailer/reseted.html.erb

@@ -0,0 +1,7 @@
+<p>
+  Olá <%= @user.name %>,
+</p>
+
+<p>
+  Este é um email automático de segurança para confirmar que você criou uma nova senha.<br>
+</p>

data/app/views/curupira/roles/_authorization_fields.html.erb

@@ -0,0 +1,10 @@
+<div class="nested-fields">
+  <% if f.object.feature.blank? ||
+   f.object.feature.active? %>
+    <%= f.select :feature_id, active_features_select_options %>
+  <% else %>
+    <%= f.object.feature.name %>
+  <% end %>
+
+  <%= link_to_remove_association "Remover", f %>
+</div>

data/app/views/curupira/roles/_form.html.erb

@@ -0,0 +1,23 @@
+<%= form_for @role do |f| %>
+  <div class="field">
+    <%= f.label :name, "Nome" %><br>
+    <%= f.text_field :name %>
+  </div>
+
+  <div class="features">
+    <h3>Funcionalidades</h3>
+
+    <%= f.fields_for :authorizations do |b| %>
+      <%= render 'authorization_fields', :f => b %>
+    <% end %>
+
+    <div class="links">
+      <%= link_to_add_association 'Adicionar funcionalidade', f, :authorizations %>
+    </div>
+  </div>
+
+  <div class="actions">
+    <%= f.submit %><br>
+    or <%= link_to :cancel, roles_path %>
+  </div>
+<% end %>

data/app/views/curupira/roles/edit.html.erb

@@ -0,0 +1,3 @@
+<h1>Editar Perfil</h1>
+
+<%= render "form" %>

data/app/views/curupira/roles/index.html.erb

@@ -0,0 +1,24 @@
+<h1>Perfis</h1>
+
+<div class="actions">
+  <%= link_to "Novo Perfil", new_role_path %>
+</div>
+
+<table>
+  <thead>
+    <tr>
+      <th>Nome</th>
+      <th>Ativo</th>
+      <th></th>
+    </tr>
+  </thead>
+  <tbody>
+    <% @roles.each do |role| %>
+      <tr>
+        <td><%= link_to role.name, role %></td>
+        <td><%= role.active %></td>
+        <td><%= link_to "Editar", edit_role_path(role) %></td>
+      </tr>
+    <% end %>
+  </tbody>
+</table>

data/app/views/curupira/roles/new.html.erb

@@ -0,0 +1,3 @@
+<h2>Novo Perfil</h2>
+
+<%= render "form" %>

data/app/views/curupira/roles/show.html.erb

@@ -0,0 +1,37 @@
+<h1>Perfil</h1>
+
+<div class="actions">
+  <%= link_to "Editar", edit_role_path(@role) %>
+</div>
+
+<ul>
+  <li>Name: <%= @role.name %></li>
+  <li>Active: <%= @role.active %></li>
+</ul>
+
+<div id="features">
+  <h3>Funcionalidades</h3>
+
+  <ul>
+    <% @role.features.each do |feature| %>
+      <li><%= link_to feature.name, feature %></li>
+    <% end %>
+  </ul>
+</div>
+
+<div id="user_groups">
+  <h3>Usuários vinculados</h3>
+
+  <ul>
+    <% @role.group_users.group(:group_id).each do |gu| %>
+      <h4>Grupo <%= link_to gu.group.name, gu.group %></h4>
+      <% @role.group_users.where(group_id:gu.group_id).each do |group_user|%>      
+        <ul>
+        <li><%= link_to group_user.user.name, group_user.user %></li>
+        </ul>  
+      <% end %>
+    <% end %>
+  </ul>
+</div>
+
+<%= link_to "Voltar", roles_path %>