dm_core 4.2.1.5

data/app/controllers/dm_core/concerns/profile_controller.rb

@@ -0,0 +1,41 @@
+module DmCore
+  module Concerns
+    module ProfileController
+      extend ActiveSupport::Concern
+      include DmCore::PermittedParams
+      
+      included do
+        before_filter   :authenticate_user!
+      end
+
+      #------------------------------------------------------------------------------
+      def account
+        @user = current_user
+        if put_or_post?
+          if @user.update_with_password(user_params)
+            #--- Sign in the user bypassing validation in case his password changed
+            sign_in @user, :bypass => true
+            if params[:user][:email] != @user.email
+              flash.now[:notice] = I18n.t('core.profile_email_confirmation')
+            else
+              flash.now[:notice] = I18n.t('core.profile_password_updated')
+            end
+          end
+        end
+      end
+  
+      #------------------------------------------------------------------------------
+      def details
+        @user_profile = current_user.user_profile
+        if put_or_post?
+          if @user_profile.update_attributes(user_profile_params)
+            flash.now[:notice] = I18n.t('core.profile_profile_updated')
+          end
+        end
+      end
+
+      module ClassMethods
+      end
+    end
+  end
+end

data/app/controllers/dm_core/profile_controller.rb

@@ -0,0 +1,8 @@
+# Subclass from main ApplicationController, which will subclass from DmCore
+#------------------------------------------------------------------------------
+class DmCore::ProfileController < ::ApplicationController
+  include DmCore::Concerns::ProfileController
+
+  layout 'layouts/general_templates/user_profile'
+  
+end

data/app/datatables/user_datatable.rb

@@ -0,0 +1,75 @@
+class UserDatatable
+  include ActionView::Helpers::TagHelper
+  include DmCore::ApplicationHelper
+  
+  delegate :params, :link_to, :image_tag, :number_to_currency, :time_ago_in_words, to: :@view
+  delegate :url_helpers, to: 'DmCore::Engine.routes'
+  
+  #------------------------------------------------------------------------------
+  def initialize(view)
+    @view = view
+  end
+
+  #------------------------------------------------------------------------------
+  def as_json(options = {})
+    {
+      sEcho: params[:sEcho].to_i,
+      iTotalRecords: User.count,
+      iTotalDisplayRecords: users.total_entries,
+      aaData: data
+    }
+  end
+
+private
+
+  #------------------------------------------------------------------------------
+  def data
+    users.map do |user|
+      [
+        "<div class='avatar'>#{link_to present(user).avatar_for(35), user.user_profile.public_avatar_url}</div>",
+        link_to(user.full_name.to_s_default, url_helpers.edit_admin_user_path(user, :locale => DmCore::Language.locale), :title => "Edit #{user.full_name}"),
+        user.email,
+        user.country.nil? ? 'n/a' : user.country.english_name,
+        "<span style='white-space:nowrap'>#{present(user).last_access}</span>",
+        present(user).role_label
+      ]
+    end
+  end
+
+  #------------------------------------------------------------------------------
+  def users
+    @users ||= fetch_users
+  end
+
+  #------------------------------------------------------------------------------
+  def fetch_users
+    users = User.current_account_users.includes({:user_profile => [ :country ]}).order("#{sort_column} #{sort_direction}")
+    users = users.page(page).per_page(per_page)
+    if params[:sSearch].present?
+      users = users.where("LOWER(user_profiles.first_name) like :search OR LOWER(user_profiles.last_name) like :search OR LOWER(users.email) like :search", search: "%#{params[:sSearch]}%".downcase)
+    end
+    users
+  end
+
+  #------------------------------------------------------------------------------
+  def page
+    params[:iDisplayStart].to_i/per_page + 1
+  end
+
+  #------------------------------------------------------------------------------
+  def per_page
+    params[:iDisplayLength].to_i > 0 ? params[:iDisplayLength].to_i : 50
+  end
+
+  #------------------------------------------------------------------------------
+  def sort_column
+    columns = ['', "LOWER(user_profiles.first_name) #{sort_direction}, LOWER(user_profiles.last_name)", 'LOWER(user_profiles.email)', 'globalize_countries.english_name', 'user_site_profiles.last_access_at']
+    columns[params[:iSortCol_0].to_i]
+  end
+
+  #------------------------------------------------------------------------------
+  def sort_direction
+    params[:sSortDir_0] == "desc" ? "desc" : "asc"
+  end
+
+end

data/app/helpers/devise_helper.rb

@@ -0,0 +1,25 @@
+module DeviseHelper
+  # A simple way to show error messages for the current devise resource. If you need
+  # to customize this method, you can either overwrite it in your application helpers or
+  # copy the views to your application.
+  #
+  # This method is intended to stay simple and it is unlikely that we are going to change
+  # it to add more behavior or options.
+  def devise_error_messages!
+    return "" if resource.errors.empty?
+
+    messages = resource.errors.full_messages.map { |msg| content_tag(:li, msg) }.join
+    sentence = I18n.t("errors.messages.not_saved",
+                      :count => resource.errors.count,
+                      :resource => resource.class.model_name.human.downcase)
+
+    html = <<-HTML
+    <div id="error_explanation" class=" alert alert-error">
+      <p class="alert-heading"><strong>#{sentence}</strong></p>
+      <ul>#{messages}</ul>
+    </div>
+    HTML
+
+    html.html_safe
+  end
+end

data/app/helpers/dm_core/account_helper.rb

@@ -0,0 +1,70 @@
+module DmCore
+  module AccountHelper
+
+    #------------------------------------------------------------------------------
+    def current_account
+      Account.current
+    end
+
+    # Get the account prefix that is used for locating items on the filesystem.
+    #------------------------------------------------------------------------------
+    def account_prefix
+      current_account.account_prefix
+    end
+
+    # Returns the path (from the root of the site) to the site general asset files
+    #   Pass in false not to include leading slash
+    #------------------------------------------------------------------------------
+    def account_site_assets(leading_slash = true)
+      leading_slash ? "/site_assets/#{account_prefix}/site" : "site_assets/#{account_prefix}/site"
+    end
+
+    # Returns the path (from the root of the site) to the protected asset files
+    #   Pass in false not to include leading slash
+    #------------------------------------------------------------------------------
+    def account_protected_assets(leading_slash = true)
+      leading_slash ? "/protected_assets/#{account_prefix}" : "protected_assets/#{account_prefix}"
+    end
+
+    # Returns the path (from the root of the site) to the site's uploadable asset
+    # folder, which is 'media'
+    #   Pass in false not to include leading slash
+    #------------------------------------------------------------------------------
+    def account_site_assets_media(leading_slash = true)
+      account_site_assets(leading_slash) + '/media'
+    end
+
+    # Returns the url of the site's general asset files
+    #   Pass in false not to include leading slash
+    #------------------------------------------------------------------------------
+    def account_site_assets_url
+      Account.current.url_base + account_site_assets(true)
+    end
+
+    # Returns the url of the site's media asset files
+    #   Pass in false not to include leading slash
+    #------------------------------------------------------------------------------
+    def account_site_assets_media_url
+      Account.current.url_base + account_site_assets_media(true)
+    end
+
+  private
+  
+    # setup the account scope, used for scoping models to an Account
+    #------------------------------------------------------------------------------
+    def scope_current_account
+      Account.current           = Account.find_account(request.host)
+      #--- set the current request site url for use where request object is not avail,
+      #    like in ActionMailer
+      Account.current.set_url_parts(request.protocol, request.host_with_port)
+      yield
+    ensure
+      # Ensure that once this request is done, the Account.current (which 
+      # is stored in thread storage) is cleared.
+      # When testing, it's better *not* to clear it, since expectations
+      # after the controller call may need the current account
+      Account.current = nil unless Rails.env.test?
+    end
+
+  end
+end

data/app/helpers/dm_core/admin/application_helper.rb

@@ -0,0 +1,23 @@
+module DmCore::Admin::ApplicationHelper
+
+  # Switch to the different user
+  #------------------------------------------------------------------------------
+  def switch_user(user)
+    sign_in(:user, user)
+  end
+
+  #------------------------------------------------------------------------------
+  def is_current_controller(controller_name)
+    controller.controller_name == controller_name
+  end
+
+  # http://stackoverflow.com/questions/8552763/best-way-to-highlight-current-page-in-rails-3-apply-a-css-class-to-links-con
+  #------------------------------------------------------------------------------
+  def admin_path_active_class?(*paths)
+    active = false
+    # paths.each { |path| active ||= current_page?(path) }
+    paths.each { |path| active ||= request.url.include?(path) }
+    active ? 'active' : nil
+  end
+  
+end

data/app/helpers/dm_core/application_helper.rb

@@ -0,0 +1,58 @@
+module DmCore
+  module ApplicationHelper
+
+    # Used for accessing a models presenter object - can also accept a block
+    #------------------------------------------------------------------------------
+    def present(object, klass = nil)
+      klass ||= "#{object.class}Presenter".constantize
+      presenter = klass.new(object, self)
+      yield presenter if block_given?
+      presenter
+    end
+
+    #------------------------------------------------------------------------------
+    def flash_notices
+      #--- use Bootstrap class values
+      flash_class = {:notice => 'alert-success', :error => 'alert-error', :alert => 'alert-info'}
+      raw([:notice, :error, :alert].collect {|type| content_tag('div', flash[type], :id => type, :class => "alert #{flash_class[type]}") if flash[type] }.join)
+    end
+  
+    #------------------------------------------------------------------------------
+    def is_admin?
+      user_signed_in? && current_user.is_admin?
+    end
+
+    #------------------------------------------------------------------------------
+    def is_sysadmin?
+      user_signed_in? && current_user.is_sysadmin?
+    end
+  
+    # for determining if use is on a paritcular page, for active nav highlighting
+    # http://stackoverflow.com/questions/3705898/best-way-to-add-current-class-to-nav-in-rails-3
+    #------------------------------------------------------------------------------
+    def controller?(*controller)
+      controller.include?(params[:controller])
+    end
+
+    #------------------------------------------------------------------------------
+    def action?(*action)
+      action.include?(params[:action])
+    end
+
+    # Usually don't care if a form submits a PUT or POST.  Was something submitted?
+    #------------------------------------------------------------------------------
+    def put_or_post? 
+      request.put? || request.post? || request.patch?
+    end
+    
+    #------------------------------------------------------------------------------
+    def link_to_add_custom_fields(name, f, association)
+      new_object  = f.object.send(association).klass.new
+      id          = new_object.object_id
+      fields      = f.simple_fields_for(association, new_object, child_index: id) do |builder|
+        render('dm_core/admin/custom_fields/' + association.to_s.singularize + "_fields", f: builder)
+      end
+      link_to(name, '#', class: 'add_custom_fields btn btn-xs btn-default', data: {id: id, fields: fields.gsub("\n", "")})
+    end
+  end
+end

data/app/helpers/dm_core/liquid_helper.rb

@@ -0,0 +1,79 @@
+require 'kramdown'
+
+# Note: do not make a call to current_user in this file.  Was not able to get
+# that helper included in the mailers.
+#------------------------------------------------------------------------------
+module DmCore::LiquidHelper
+
+  # Pass :view in a register so this view (with helpers) can be used inside of a tag
+  # This assumes that the content is from a trusted source
+  #------------------------------------------------------------------------------
+  def liquidize_textile(content, arguments = {})
+    doc = RedCloth.new(Liquid::Template.parse(content).render(arguments, :filters => [LiquidFilters], 
+                              :registers => { :controller => controller, :view => self,
+                                              :account_site_assets => account_site_assets_url }))
+    #doc.hard_breaks = false
+    return doc.to_html.html_safe
+  end
+
+  # use the kramdown library
+  # This assumes that the content is from a trusted source
+  #------------------------------------------------------------------------------
+  def liquidize_markdown(content, arguments = {})
+    doc = ::Kramdown::Document.new(Liquid::Template.parse(content).render(arguments, :filters => [LiquidFilters], 
+                              :registers => { :controller => controller, :view => self, 
+                                              :account_site_assets => account_site_assets_url }),
+                          :parse_block_html => true)
+    return doc.to_html.html_safe
+  end
+
+  # This assumes that the content is from a trusted source
+  #------------------------------------------------------------------------------
+  def liquidize_html(content, arguments = {})
+    doc = Liquid::Template.parse(content).render(arguments, :filters => [LiquidFilters], 
+                              :registers => { :controller => controller, :view => self, 
+                                              :account_site_assets => account_site_assets_url })
+    return doc.html_safe
+  end
+
+  # Use Kramdown for parsing, then sanitize output.
+  # Goal is to allow untrusted users to add comments/text with some formatting and
+  # linking, but provide safe output
+  #------------------------------------------------------------------------------
+  def markdown(content = '', options = {safe: true}, &block)
+    content ||= ''
+    if block_given?
+      html = ::Kramdown::Document.new(capture(&block)).to_html.html_safe
+    else
+      html = ::Kramdown::Document.new(content).to_html.html_safe
+    end
+    return options[:safe] ? sanitize_text(html, level: :relaxed).html_safe : html
+  end
+  
+  # Uses Sanitize gem to fully sanitize any text.  
+  # Note: Default setting will make any markdown source (like user comments, etc) 
+  # safe for sending out in emails
+  #------------------------------------------------------------------------------
+  def sanitize_text(content, options = {level: :default})
+    case options[:level]
+    when :default
+      # strip all html
+      Sanitize.clean(content)
+    when :restricted
+      # Allows only very simple inline formatting markup. No links, images, or block elements.
+      Sanitize.clean(content, Sanitize::Config::RESTRICTED)
+    when :basic
+      #Allows a variety of markup including formatting tags, links, and lists. 
+      # Images and tables are not allowed, links are limited to FTP, HTTP, HTTPS, and 
+      # mailto protocols, and a rel="nofollow" attribute is added to all links to
+      # mitigate SEO spam.
+      Sanitize.clean(content, Sanitize::Config::BASIC)
+    when :relaxed
+      # Allows an even wider variety of markup than BASIC, including images and tables. 
+      # Links are still limited to FTP, HTTP, HTTPS, and mailto protocols, while images
+      # are limited to HTTP and HTTPS. In this mode, rel="nofollow" is not added to links.
+      Sanitize.clean(content, Sanitize::Config::RELAXED)
+    end
+  end
+
+end

data/app/helpers/dm_core/params_helper.rb

@@ -0,0 +1,19 @@
+module DmCore
+  module ParamsHelper
+
+    # given a "width" parameter, make it into a valid css width value
+    #------------------------------------------------------------------------------
+    def css_style_width(width = '')
+      width = width.to_s.as_css_size
+      return width.blank? ? '' : "width:#{width};"
+    end
+
+    # given a "height" parameter, make it into a valid css height value
+    #------------------------------------------------------------------------------
+    def css_style_height(height = '')
+      height = height.to_s.as_css_size
+      return height.blank? ? '' : "height:#{height};"
+    end
+
+  end
+end

data/app/helpers/dm_core/render_helper.rb

@@ -0,0 +1,104 @@
+module DmCore
+  module RenderHelper
+    
+    # gives the public avatar for a user
+    #------------------------------------------------------------------------------
+    def avatar_for(user, size=32)
+      user = User.new(user_profile: UserProfile.new) if user.nil? # avatar comes from the user profile
+      present(user).avatar_for(size)
+    end
+
+    # Used in pagination - get the current page number being displayed
+    #------------------------------------------------------------------------------
+    def page_number
+      @page_number ||= [1, params[:page].to_i].max
+    end
+    
+    # Wrapper to pull the list of countries from our table
+    #------------------------------------------------------------------------------
+    def ut_country_select(object, method, options = {include_blank: true}, html_options = {})    
+      collection = ut_country_select_collection(include_blank: false, as: options[:as])
+      select(object, method, collection, options, html_options)
+    end
+
+    # Wrapper to pull the list of countries from our table
+    #------------------------------------------------------------------------------
+    def ut_country_select_tag(name, selected = nil, options = {include_blank: true}, html_options = {})
+      collection = ut_country_select_collection(options)
+      select_tag(name, options_for_select(collection, selected), html_options)
+    end
+
+    # Just return the collection for the countries
+    # as: :id      return the ids of the Country objects
+    # as: :code    return the 2-letter country code
+    # as: :name    return the country's english name
+    # (old interface passed in only a true or false to indicate include_blank)
+    #------------------------------------------------------------------------------
+    def ut_country_select_collection(options = {include_blank: true, as: :id})
+      options = {include_blank: options, as: :id} if !options.is_a?(Hash)
+      
+      collection = (options[:include_blank] ? [[" ", ""]] : [])
+      case options[:as]
+      when :code
+        collection += ::StateCountryConstants::PRIMARY_COUNTRIES_CODE + DmCore::Country.order('english_name').collect {|p| [ p.english_name, p.code ] }
+      when :name
+        collection += ::StateCountryConstants::PRIMARY_COUNTRIES_NAME + DmCore::Country.order('english_name').collect {|p| [ p.english_name, p.english_name ] }
+      else
+        collection += ::StateCountryConstants::PRIMARY_COUNTRIES + DmCore::Country.order('english_name').collect {|p| [ p.english_name, p.id ] }
+      end
+    end
+
+    # Wrapper to pull a list of countries from our table
+    # It will also call an Ajax function which changes a container with
+    # an id of 'state_select_container' to a drop down with the proper states
+    # for that country.
+    #------------------------------------------------------------------------------
+    def ut_country_select_with_states(object, method, method_state, options = {include_blank: true}, html_options = {})    
+      collection = ut_country_select_collection(include_blank: false, as: options[:as])
+      state_object_method = "#{object.to_s}[#{method_state.to_s}]"
+      html_options[:id] ||= 'country_select'
+      html_options.merge!({data: {progressid: "indicator_country", objectname: state_object_method}})
+
+      select(object, method, collection, options, html_options)
+    end
+
+    # Generates a select menu or a text field, depending on if there are states
+    # associated with the chosen country.
+    # => object_method: name of model 'state' field, used for the tag, such as 'student[state]'
+    # => country_id: globlized id of the selected country
+    # => selected_state: name of the current state selected
+    #------------------------------------------------------------------------------
+    def ut_state_selection(object_method, country_id = 0, selected_state = nil)
+      if country_id == 0 or country_id.nil?
+        select_tag(object_method, "<option value=''>Please select a country".html_safe)
+      else
+        selected_country = ::StateCountryConstants::COUNTRIES_WITH_STATES.find {|x| x[:id] == country_id}
+        if selected_country 
+          select_tag(object_method, state_options_for_select(selected_state, selected_country[:code]), {include_blank: true}).html_safe
+        else
+          text_field_tag(object_method, selected_state)
+        end
+      end
+    end
+    
+    #------------------------------------------------------------------------------
+    def pagination(collection, options = {version: :original})
+      if collection.total_entries > 1
+        if options[:version] == :original
+          content_tag(:div, class: 'pagination') do
+            will_paginate(collection, {inner_window: 8, next_label: I18n.t('core.next_page').html_safe, previous_label: I18n.t('core.prev_page').html_safe}.merge(options))
+          end
+        else
+          will_paginate(collection, {inner_window: 8, next_label: I18n.t('core.next_page').html_safe, previous_label: I18n.t('core.prev_page').html_safe}.merge(options))
+        end
+      end
+    end
+
+    # Return the name of the simple_form wrapper to use, which the theme can 
+    # specify.  Typically either :bs2_horizontal_form or :bs3_horizontal_form.
+    #------------------------------------------------------------------------------
+    def simple_form_theme_wrapper
+      Account.current.theme_option(:simple_form_wrapper) || :bs2_horizontal_form
+    end
+  end
+end