elabs 2.0.0.pre

data/app/views/elabs/uploads/show.json.jbuilder

@@ -0,0 +1 @@
+json.partial! 'uploads/upload', upload: @upload

data/app/views/elabs/users/_associations.html.haml

@@ -0,0 +1,51 @@
+%aside.tabs
+  %ul.tabs__tabs-list
+    %li.tabs__tabs-list__tab#tab-albums
+      %a{ href: '#tab-content-albums', onclick: 'selectTab(event, "albums")' }= _('Albums')
+    %li.tabs__tabs-list__tab#tab-articles
+      %a{ href: '#tab-content-articles', onclick: 'selectTab(event, "articles")' }= _('Articles')
+    %li.tabs__tabs-list__tab#tab-notes
+      %a{ href: '#tab-content-notes', onclick: 'selectTab(event, "notes")' }= _('Notes')
+    %li.tabs__tabs-list__tab#tab-projects
+      %a{ href: '#tab-content-projects', onclick: 'selectTab(event, "projects")' }= _('Projects')
+    %li.tabs__tabs-list__tab#tab-uploads
+      %a{ href: '#tab-content-uploads', onclick: 'selectTab(event, "uploads")' }= _('Uploads')
+
+  %section.tabs__tab-content.albums-list#tab-content-albums
+    .tabs__tab-content__title
+      %h2= format _('Last %<amount>i albums:'), amount: Elabs.max_related_items
+      .actions= link_to _('Show all'), user_albums_url(user)
+    - user_albums.each do |a|
+      = render 'elabs/albums/album', album: a
+
+  %section.tabs__tab-content.articles-list#tab-content-articles
+    .tabs__tab-content__title
+      %h2= format _('Last %<amount>i articles:'), amount: Elabs.max_related_items
+      .actions= link_to _('Show all'), user_articles_url(user)
+    - user_articles.each do |a|
+      = render 'elabs/articles/article', article: a
+
+  %section.tabs__tab-content.notes-list#tab-content-notes
+    .tabs__tab-content__title
+      %h2= format _('Last %<amount>i notes:'), amount: Elabs.max_related_items
+      .actions= link_to _('Show all'), user_notes_url(user)
+    - user_notes.each do |n|
+      = render 'elabs/notes/note', note: n
+
+  %section.tabs__tab-content.projects-list#tab-content-projects
+    .tabs__tab-content__title
+      %h2= format _('Last %<amount>i projects:'), amount: Elabs.max_related_items
+      .actions= link_to _('Show all'), user_projects_url(user)
+    - user_projects.each do |p|
+      = render 'elabs/projects/project', project: p
+
+  %section.tabs__tab-content.uploads-list#tab-content-uploads
+    .tabs__tab-content__title
+      %h2= format _('Last %<amount>i uploads:'), amount: Elabs.max_related_items
+      .actions= link_to _('Show all'), user_uploads_url(user)
+    - user_uploads.each do |u|
+      = render 'elabs/uploads/upload', upload: u
+
+:javascript
+  initializeTabs ()
+  selectTab('albums')

data/app/views/elabs/users/_filters.html.haml

@@ -0,0 +1,4 @@
+.filter-links
+  .filter-links__group
+    = order_link _('Username'), 'username'
+    = order_link _('Insc. date'), 'created_at'

data/app/views/elabs/users/_user.html.haml

@@ -0,0 +1,31 @@
+.user.user-card
+  %header
+    .icon= icon 'user', %w[3x fw]
+    .headers
+      %h3= link_to user.username, user, class: 'title'
+
+      %ul.informations
+        %li
+          %b= _('Role:')
+          = user.role
+
+        %li
+          %b= _('Since:')
+          = user.created_at
+
+  .content
+    = link_to user_projects_path(user), class: 'btn btn--block' do
+      = icon 'cog'
+      = format(n_('%<nb>i project', '%<nb>i projects', user.projects_count), nb: user.projects_count)
+    = link_to user_articles_path(user), class: 'btn btn--block' do
+      = icon 'font'
+      = format(n_('%<nb>i article', '%<nb>i articles', user.articles_count), nb: user.articles_count)
+    = link_to user_notes_path(user), class: 'btn btn--block' do
+      = icon 'sticky-note'
+      = format(n_('%<nb>i note', '%<nb>i notes', user.notes_count), nb: user.notes_count)
+    = link_to user_uploads_path(user), class: 'btn btn--block' do
+      = icon 'image'
+      = format(n_('%<nb>i upload', '%<nb>i uploads', user.uploads_count), nb: user.uploads_count)
+    = link_to user_albums_path(user), class: 'btn btn--block' do
+      = icon 'book'
+      = format(n_('%<nb>i album', '%<nb>i albums', user.albums_count), nb: user.albums_count)

data/app/views/elabs/users/_user.json.jbuilder

@@ -0,0 +1,2 @@
+json.extract! user, :id, :created_at, :updated_at
+json.url user_url(user, format: :json)

data/app/views/elabs/users/index.html.haml

@@ -0,0 +1,7 @@
+- @page_title = _('Users')
+
+.users-list
+  - @users.each do |user|
+    = render 'user', user: user
+
+= paginate @users

data/app/views/elabs/users/index.json.jbuilder

@@ -0,0 +1 @@
+json.array! @users, partial: 'users/user', as: :user

data/app/views/elabs/users/show.html.haml

@@ -0,0 +1,48 @@
+- @page_title = @user.real_name || @user.username
+.user.user--full
+  %aside
+    %ul
+      %li
+        = icon('user', ['fw'])
+        %strong= _('Username')
+        = @user.username
+      %li
+        = icon('user', ['fw'])
+        %strong= _('Real name')
+        = @user.real_name
+      %li
+        = icon('calendar-check', ['fw'])
+        %strong= _('Subscription date')
+        = @user.created_at
+      %li
+        = icon('amount', ['fw'])
+        %strong= _('Albums:')
+        = @user.albums_count
+      %li
+        = icon('amount', ['fw'])
+        %strong= _('Articles:')
+        = @user.articles_count
+      %li
+        = icon('amount', ['fw'])
+        %strong= _('Notes:')
+        = @user.notes_count
+      %li
+        = icon('amount', ['fw'])
+        %strong= _('Projects:')
+        = @user.projects_count
+      %li
+        = icon('amount', ['fw'])
+        %strong= _('Uploads:')
+        = @user.uploads_count
+  .content
+    - unless @user.biography.nil?
+      %article
+        = markdown @user.biography
+
+    = render 'associations',
+              user: @user,
+              user_albums: @user_albums,
+              user_articles: @user_articles,
+              user_notes: @user_notes,
+              user_projects: @user_projects,
+              user_uploads: @user_uploads

data/app/views/elabs/users/show.json.jbuilder

@@ -0,0 +1 @@
+json.partial! 'users/user', user: @user

data/bin/rails

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+# This command will automatically be run when you run "rails" with Rails gems
+# installed from the root of your application.
+
+ENGINE_ROOT = File.expand_path('..', __dir__)
+ENGINE_PATH = File.expand_path('../lib/elabs/engine', __dir__)
+APP_PATH = File.expand_path('../spec/dummy/config/application', __dir__)
+
+# Set up gems listed in the Gemfile.
+ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../Gemfile', __dir__)
+require 'bundler/setup' if File.exist?(ENV['BUNDLE_GEMFILE'])
+
+require 'rails/all'
+require 'rails/engine/commands'

data/config.ru

@@ -0,0 +1,5 @@
+# This file is used by Rack-based servers to start the application.
+
+require_relative 'config/environment'
+
+run Rails.application

data/config/brakeman.ignore

@@ -0,0 +1,124 @@
+{
+  "ignored_warnings": [
+    {
+      "warning_type": "Unscoped Find",
+      "warning_code": 82,
+      "fingerprint": "14eb16e2efd5474628f981fdff434cb13c73df4d17b93ceea6b82a8f99a09552",
+      "check_name": "UnscopedFind",
+      "message": "Unscoped call to Album#find",
+      "file": "app/controllers/albums_controller.rb",
+      "line": 18,
+      "link": "https://brakemanscanner.org/docs/warning_types/unscoped_find/",
+      "code": "Album.find(params[:id])",
+      "render_path": null,
+      "location": {
+        "type": "method",
+        "class": "AlbumsController",
+        "method": "set_album"
+      },
+      "user_input": "params[:id]",
+      "confidence": "Weak",
+      "note": ""
+    },
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 4,
+      "fingerprint": "74d83c9e5d3fb98de33d9c690a9380c40f0e35f3b85f390e871858bb8d34c1fe",
+      "check_name": "LinkToHref",
+      "message": "Potentially unsafe model attribute in link_to href",
+      "file": "app/views/licenses/show.html.haml",
+      "line": 15,
+      "link": "https://brakemanscanner.org/docs/warning_types/link_to_href",
+      "code": "link_to(_(\"TL; DR\"), License.find(params[:id]).tldr_url, :target => \"_blank\")",
+      "render_path": [{"type":"controller","class":"LicensesController","method":"show","line":18,"file":"app/controllers/licenses_controller.rb"}],
+      "location": {
+        "type": "template",
+        "template": "licenses/show"
+      },
+      "user_input": "License.find(params[:id]).tldr_url",
+      "confidence": "Weak",
+      "note": "URLS are set by admins only"
+    },
+    {
+      "warning_type": "Unscoped Find",
+      "warning_code": 82,
+      "fingerprint": "96f2f0238c7611c20a731155fa4ab107874326d762a84e9b1858c0801c10d741",
+      "check_name": "UnscopedFind",
+      "message": "Unscoped call to Note#find",
+      "file": "app/controllers/notes_controller.rb",
+      "line": 18,
+      "link": "https://brakemanscanner.org/docs/warning_types/unscoped_find/",
+      "code": "Note.find(params[:id])",
+      "render_path": null,
+      "location": {
+        "type": "method",
+        "class": "NotesController",
+        "method": "set_note"
+      },
+      "user_input": "params[:id]",
+      "confidence": "Weak",
+      "note": ""
+    },
+    {
+      "warning_type": "Unscoped Find",
+      "warning_code": 82,
+      "fingerprint": "b65152f1b2c4e9e18bcc4a3fd637b7bd5dd4b79421460a2c764bc3ead2ad1aa0",
+      "check_name": "UnscopedFind",
+      "message": "Unscoped call to Project#find",
+      "file": "app/controllers/projects_controller.rb",
+      "line": 23,
+      "link": "https://brakemanscanner.org/docs/warning_types/unscoped_find/",
+      "code": "Project.find(params[:id])",
+      "render_path": null,
+      "location": {
+        "type": "method",
+        "class": "ProjectsController",
+        "method": "set_project"
+      },
+      "user_input": "params[:id]",
+      "confidence": "Weak",
+      "note": ""
+    },
+    {
+      "warning_type": "Unscoped Find",
+      "warning_code": 82,
+      "fingerprint": "c03df681f497ea4ef182b6236295be2dd61879612b212e7a6ea3a1b2e6faf7d0",
+      "check_name": "UnscopedFind",
+      "message": "Unscoped call to Upload#find",
+      "file": "app/controllers/uploads_controller.rb",
+      "line": 17,
+      "link": "https://brakemanscanner.org/docs/warning_types/unscoped_find/",
+      "code": "Upload.find(params[:id])",
+      "render_path": null,
+      "location": {
+        "type": "method",
+        "class": "UploadsController",
+        "method": "set_upload"
+      },
+      "user_input": "params[:id]",
+      "confidence": "Weak",
+      "note": ""
+    },
+    {
+      "warning_type": "Cross-Site Scripting",
+      "warning_code": 4,
+      "fingerprint": "c125f39a448be85c1445467afabaf1a1992e9e1bf59af040b0277b33fa708901",
+      "check_name": "LinkToHref",
+      "message": "Potentially unsafe model attribute in link_to href",
+      "file": "app/views/licenses/show.html.haml",
+      "line": 12,
+      "link": "https://brakemanscanner.org/docs/warning_types/link_to_href",
+      "code": "link_to(_(\"Home page\"), License.find(params[:id]).url, :target => \"_blank\")",
+      "render_path": [{"type":"controller","class":"LicensesController","method":"show","line":18,"file":"app/controllers/licenses_controller.rb"}],
+      "location": {
+        "type": "template",
+        "template": "licenses/show"
+      },
+      "user_input": "License.find(params[:id]).url",
+      "confidence": "Weak",
+      "note": "URLS are set by admins only"
+    }
+  ],
+  "updated": "2018-08-01 07:04:08 +0200",
+  "brakeman_version": "4.3.1"
+}

data/config/brakeman.yml

@@ -0,0 +1,3 @@
+---
+:run_all_checks: true
+:assume_all_routes: false

data/config/cucumber.yml

@@ -0,0 +1,9 @@
+<%
+rerun = File.file?('rerun.txt') ? IO.read('rerun.txt') : ""
+rerun = rerun.strip.gsub /\s/, ' '
+rerun_opts = rerun.empty? ? "--format #{ENV['CUCUMBER_FORMAT'] || 'progress'} features" : "--format #{ENV['CUCUMBER_FORMAT'] || 'pretty'} #{rerun}"
+std_opts = "--format #{ENV['CUCUMBER_FORMAT'] || 'pretty'} --strict --tags 'not @wip'"
+%>
+default: <%= std_opts %> features
+wip: --tags @wip:3 --wip features
+rerun: <%= rerun_opts %> --format rerun --out rerun.txt --strict --tags 'not @wip'

data/config/routes.rb

@@ -0,0 +1,116 @@
+Elabs::Engine.routes.draw do
+  # Devise routes: use Elabs custom controllers (adds support for username and preferences)
+  devise_for :users, path: 'auth', controllers: {
+    confirmations: 'elabs/auth/confirmations',
+    passwords: 'elabs/auth/passwords',
+    registrations: 'elabs/auth/registrations',
+    sessions: 'elabs/auth/sessions',
+    unlocks: 'elabs/auth/unlocks'
+  }
+  # Resources
+  resources :albums,    only: %i[index show] do
+    resources :uploads, only: %i[index]
+    post 'comment', to: 'albums#create_comment', as: 'create_comment'
+  end
+  resources :articles,  only: %i[index show] do
+    post 'comment', to: 'articles#create_comment', as: 'create_comment'
+  end
+  resources :languages, only: %i[index show] do
+    resources :albums,   only: %i[index]
+    resources :articles, only: %i[index]
+    resources :notes,    only: %i[index]
+    resources :projects, only: %i[index]
+    resources :uploads,  only: %i[index]
+  end
+  resources :licenses, only: %i[index show] do
+    resources :albums,   only: %i[index]
+    resources :articles, only: %i[index]
+    resources :notes,    only: %i[index]
+    resources :projects, only: %i[index]
+    resources :uploads,  only: %i[index]
+  end
+  resources :notes, only: %i[index show] do
+    post 'comment', to: 'notes#create_comment', as: 'create_comment'
+  end
+  resources :projects, only: %i[index show] do
+    resources :articles, only: %i[index]
+    resources :albums,   only: %i[index]
+    resources :notes,    only: %i[index]
+    resources :uploads,  only: %i[index]
+    post 'comment', to: 'projects#create_comment', as: 'create_comment'
+  end
+
+  # Classifiers
+  resources :tags, only: %i[index show] do
+    resources :albums,   only: %i[index]
+    resources :articles, only: %i[index]
+    resources :notes,    only: %i[index]
+    resources :projects, only: %i[index]
+    resources :uploads,  only: %i[index]
+  end
+  resources :uploads, only: %i[index show] do
+    post 'comment', to: 'uploads#create_comment', as: 'create_comment'
+  end
+  resources :users, only: %i[index show] do
+    resources :albums,   only: %i[index]
+    resources :articles, only: %i[index]
+    resources :notes,    only: %i[index]
+    resources :projects, only: %i[index]
+    resources :uploads,  only: %i[index]
+  end
+
+  # Reports
+  post '/reports', to: 'reports#create', as: :create_report
+
+  # Activity
+  get '/activity', to: 'acts#index', as: :activities
+
+  # Member
+  namespace :member do
+    resources :albums, except: %i[show] do
+      put 'toggle_publication', to: 'albums#toggle_publication', as: :toggle_publication
+    end
+    resources :articles, except: %i[show] do
+      put 'toggle_publication', to: 'articles#toggle_publication', as: :toggle_publication
+    end
+    resources :notes, except: %i[show] do
+      put 'toggle_publication', to: 'notes#toggle_publication', as: :toggle_publication
+    end
+    resources :projects, except: %i[show] do
+      put 'toggle_publication', to: 'projects#toggle_publication', as: :toggle_publication
+    end
+    resources :uploads, except: %i[show] do
+      put 'toggle_publication', to: 'uploads#toggle_publication', as: :toggle_publication
+    end
+
+    get '/preferences', to: 'preferences#edit', as: :edit_preferences
+    patch '/preferences', to: 'preferences#update', as: :update_preferences
+    patch '/account', to: 'users#update', as: :update_user
+  end
+
+  # Admin
+  namespace :admin do
+    # Content resources
+    resources :albums, only: %i[index destroy] do
+      put 'toggle_lock', to: 'albums#toggle_lock', as: :toggle_lock
+    end
+    resources :articles, only: %i[index destroy] do
+      put 'toggle_lock', to: 'articles#toggle_lock', as: :toggle_lock
+    end
+    resources :notes, only: %i[index destroy] do
+      put 'toggle_lock', to: 'notes#toggle_lock', as: :toggle_lock
+    end
+    resources :projects, only: %i[index destroy] do
+      put 'toggle_lock', to: 'projects#toggle_lock', as: :toggle_lock
+    end
+    resources :uploads, only: %i[index destroy] do
+      put 'toggle_lock', to: 'uploads#toggle_lock', as: :toggle_lock
+    end
+    # Basic resources
+    resources :languages, except: %i[show]
+    resources :licenses,  except: %i[show]
+    resources :reports,   only:   %i[index destroy]
+    resources :tags,      except: %i[create show]
+    resources :users,     only:   %i[index show destroy]
+  end
+end

data/db/migrate/20180813000000_devise_update_users.rb

@@ -0,0 +1,15 @@
+class DeviseUpdateUsers < ActiveRecord::Migration[5.2]
+  def change
+    add_column :users, :username, :string, null: false
+    add_column :users, :real_name, :string
+    add_column :users, :biography, :text
+    add_column :users, :role, :string, null: false, default: 'user'
+    add_column :users, :albums_count,   :integer, default: 0, null: false
+    add_column :users, :articles_count, :integer, default: 0, null: false
+    add_column :users, :notes_count,    :integer, default: 0, null: false
+    add_column :users, :projects_count, :integer, default: 0, null: false
+    add_column :users, :uploads_count,  :integer, default: 0, null: false
+
+    add_index :users, :username, unique: true
+  end
+end