fae-railsz 2.1.0

data/app/controllers/fae/images_controller.rb

@@ -0,0 +1,37 @@
+module Fae
+  class ImagesController < ApplicationController
+
+    #ajax delete action
+    #
+    #post 'images/:id/delete_image' => 'images#delete_image', as: :delete_image
+    #here we just remove the asset from the attached image model, because if we deleted
+    #the model itself, re-uploading a new one would break.
+    def delete_image
+      image = Image.find_by_id(params[:id])
+      image.remove_asset = true
+      image.save
+      CarrierWave.clean_cached_files!
+      head :ok
+    end
+
+    # ajax action
+    #
+    # Called from the Trumbowyg JS wysiwyg editor when embedding images to a
+    # HTML field.
+    def create_html_embedded
+      image = Image.create! asset: params[:image]
+      render json: { success: true, file: image.asset.url }
+    end
+
+  private
+
+    #allow mass assignment
+    def image_params
+      if params[:image].present?
+        params.require(:image).permit!
+      else
+        nil
+      end
+    end
+  end
+end

data/app/controllers/fae/nested_base_controller.rb

@@ -0,0 +1,100 @@
+module Fae
+  class NestedBaseController < Fae::ApplicationController
+
+    before_action :set_class_variables
+    before_action :set_item, only: [:show, :edit, :update, :destroy]
+
+    layout false, except: :index
+    helper Fae::ApplicationHelper
+
+    def new
+      @item = @klass.new
+      raise_undefined_parent if @item.fae_nested_foreign_key.blank?
+
+      item_id = params[:item_id].to_i || nil
+      @item.send("#{parent_foreign_key}=", item_id)
+      build_assets
+    end
+
+    def edit
+      build_assets
+    end
+
+    def create
+      @item = @klass.new(permitted_params)
+      raise_undefined_parent if @item.fae_nested_parent.blank?
+
+      if @item.save
+        @parent_item = @item.send(nested_parent)
+        flash[:notice] = t('fae.save_notice')
+        render template: table_template_path
+      else
+        build_assets
+        render action: 'new'
+      end
+    end
+
+    def update
+      raise_undefined_parent if @item.fae_nested_parent.blank?
+
+      if @item.update(permitted_params)
+        @parent_item = @item.send(nested_parent)
+        flash[:notice] = t('fae.save_notice')
+        render template: table_template_path
+      else
+        build_assets
+        render action: 'edit'
+      end
+    end
+
+    def destroy
+      raise_undefined_parent if @item.fae_nested_parent.blank?
+      @parent_item = @item.send(nested_parent)
+
+      if @item.destroy
+        flash[:notice] = t('fae.delete_notice')
+      else
+        flash[:alert] = t('fae.delete_error')
+      end
+      render template: table_template_path
+    end
+
+    private
+
+    def set_class_variables
+      @klass_name = params[:controller].split('/').last
+      @klass = @klass_name.classify.constantize
+      @klass_singular = @klass_name.singularize
+    end
+
+    def set_item
+      @item = @klass.find(params[:id])
+    end
+
+    # only allow trusted parameters, override to white-list
+    def permitted_params
+      params.require(@klass_singular).permit!
+    end
+
+    # if model has images or files, build them here for nesting
+    def build_assets
+    end
+
+    def raise_undefined_parent
+      raise "Define `fae_nested_parent` as a instance method of #{@klass.name}"
+    end
+
+    def table_template_path
+      "#{fae.root_path.gsub('/', '')}/#{@klass_name}/table"
+    end
+
+    def parent_foreign_key
+      @item.fae_nested_foreign_key
+    end
+
+    def nested_parent
+      @item.fae_nested_parent
+    end
+
+  end
+end

data/app/controllers/fae/options_controller.rb

@@ -0,0 +1,29 @@
+module Fae
+  class OptionsController < ApplicationController
+
+    before_action :super_admin_only
+
+    def edit
+      @option = Option.first || Option.instance
+      @option.build_logo if @option.logo.blank?
+      @option.build_favicon if @option.favicon.blank?
+    end
+
+    # PATCH/PUT /options/1
+    def update
+      if @option.update(option_params)
+        flash[:notice] = 'Option was successfully updated.'
+        redirect_to :action => :edit
+      else
+        render :edit
+      end
+    end
+
+    private
+
+      # Only allow a trusted parameter "white list" through.
+      def option_params
+        params.require(:option).permit(:title, :time_zone, :colorway, :stage_url, :live_url, logo_attributes: [:id, :asset, :asset_cache, :attached_as, :alt], favicon_attributes: [:id, :asset, :asset_cache, :attached_as, :alt])
+      end
+  end
+end

data/app/controllers/fae/pages_controller.rb

@@ -0,0 +1,44 @@
+module Fae
+  class PagesController < ApplicationController
+
+    before_action :authenticate_user!
+
+    def home
+      @list = recently_updated
+      @models = all_models
+    end
+
+    def help
+      require 'browser'
+      @browser = Browser.new(request.user_agent, accept_language: 'en-us')
+    end
+
+    def activity_log
+      @items = Fae::Change.order(id: :desc).page(params[:page])
+    end
+
+    def activity_log_filter
+      if params[:commit] == "Reset Search"
+        @items = Fae::Change.order(id: :desc).page(params[:page])
+      else
+        @items = Fae::Change.filter(params).fae_sort(params).page(params[:page])
+      end
+
+      render :activity_log, layout: false
+    end
+
+    def error404
+      return show_404
+    end
+
+  private
+
+    def recently_updated(num=25)
+      list = []
+      all_models.each do |m|
+        list << m.all.sort_by(&:updated_at).flatten
+      end
+      list.flatten.sort_by(&:updated_at).reverse.first(num)
+    end
+  end
+end

data/app/controllers/fae/setup_controller.rb

@@ -0,0 +1,54 @@
+module Fae
+  class SetupController < ActionController::Base
+
+    helper Fae::FormHelper
+
+    before_action :check_roles
+
+    layout 'devise'
+
+    def first_user
+      @option = Fae::Option.instance
+      return show_404 if Fae::User.live_super_admins.present?
+
+      @user = Fae::User.new
+    end
+
+    def create_first_user
+      return show_401 if Fae::User.live_super_admins.present?
+
+      @user         = Fae::User.new(user_params)
+      super_admin   = Fae::Role.find_by_name('super admin')
+      @user.role    = super_admin
+      @user.active  = true
+
+      if @user.save
+        sign_in(@user)
+        redirect_to fae.root_path
+      else
+        @option = Fae::Option.instance
+        render action: 'first_user', error: t('fae.save_error')
+      end
+    end
+
+    private
+
+    def show_404
+      render template: 'fae/pages/error404.html.slim', layout: 'fae/error.html.slim', status: :not_found
+    end
+
+    def show_401
+      render template: 'fae/pages/error404.html.slim', layout: 'fae/error.html.slim', status: :unauthorized
+    end
+
+    def user_params
+      params.require(:user).permit(:email, :first_name, :last_name, :password, :password_confirmation)
+    end
+
+    def check_roles
+      if Fae::Role.all.empty?
+        raise "Role 'super admin' does not exist in Fae::Role, run rake fae:seed_db"
+      end
+    end
+  end
+end

data/app/controllers/fae/static_pages_controller.rb

@@ -0,0 +1,54 @@
+module Fae
+  class StaticPagesController < ApplicationController
+    before_action :set_class_variables
+    before_action :set_item, only: [:edit, :update, :destroy]
+    helper FormHelper
+
+    def index
+      raise 'Missing blocks method inside StaticPages\' child controller' unless fae_pages
+      @items = fae_pages.map { |b| b.instance }
+    end
+
+    def edit
+      build_assocs
+      params[:static_page] = true
+      render params[:slug]
+    end
+
+    def update
+      if @item.update(item_params)
+        redirect_to @index_path, notice: t('fae.save_notice')
+      else
+        build_assocs
+        render template: "#{fae.root_path.gsub('/', '')}/content_blocks/#{params[:slug]}", error: t('fae.save_error')
+      end
+    end
+
+    private
+
+    # Use callbacks to share common setup or constraints between actions.
+    def set_item
+      @item = "#{params[:slug]}_page".classify.constantize.instance
+    end
+
+    # set up variables so that fae partial forms work
+    def set_class_variables(class_name = nil)
+      @klass_name = class_name || 'Pages'
+      @klass_singular = @klass_name.singularize
+      @klass_humanized = @klass_singular.humanize
+      @index_path = "#{Rails.application.routes.url_helpers.fae_path}/#{@klass_name.underscore.downcase}"
+    end
+
+    # Only allow a trusted parameter "white list" through.
+    def item_params
+      model = @item.class.name.split('::').last.underscore
+      params.require(:"#{model}").permit!
+    end
+
+    def build_assocs
+      @item.class.reflect_on_all_associations.each do |assoc|
+        @item.send(:"create_#{assoc.name}", attached_as: assoc.name.to_s) if assoc.macro == :has_one && @item.send(:"#{assoc.name}").blank?
+      end
+    end
+  end
+end

data/app/controllers/fae/users_controller.rb

@@ -0,0 +1,71 @@
+module Fae
+  class UsersController < ApplicationController
+    before_action :admin_only, except: [:settings, :update]
+    before_action :set_user, only: [:show, :edit, :update, :destroy]
+    before_action :set_role_collection, except: [:index, :destroy]
+
+    def index
+      @users = current_user.super_admin? ? Fae::User.all : Fae::User.public_users
+    end
+
+    def new
+      @user = Fae::User.new
+    end
+
+    def edit
+    end
+
+    def settings
+      @user = current_user
+    end
+
+    def create
+      @user = Fae::User.new(user_params)
+
+      if @user.save
+        redirect_to users_path, notice: t('fae.save_notice')
+      else
+        render action: 'new', error: t('fae.save_error')
+      end
+    end
+
+    def update
+      params[:user].delete(:password) if params[:user][:password].blank?
+      params[:user].delete(:password_confirmation) if params[:user][:password].blank? and params[:user][:password_confirmation].blank?
+
+      if @user.update(user_params)
+        path = current_user.super_admin? ? users_path : fae.root_path
+        redirect_to path, notice: t('fae.save_notice')
+      else
+        render action: 'edit', error: t('fae.save_error')
+      end
+    end
+
+    def destroy
+      @user.destroy
+      respond_to do |format|
+        format.html { redirect_to users_url }
+        format.json { head :no_content }
+      end
+    end
+
+    private
+
+      def set_role_collection
+        @role_collection = Role.all if current_user.super_admin?
+        @role_collection = Role.public_roles if current_user.admin?
+      end
+
+      def set_user
+        @user = Fae::User.find(params[:id])
+      end
+
+      def user_params
+        if current_user.super_admin_or_admin?
+          params.require(:user).permit!
+        elsif @user === current_user
+          params.require(:user).permit(:email, :first_name, :last_name, :password, :password_confirmation)
+        end
+      end
+  end
+end

data/app/controllers/fae/utilities_controller.rb

@@ -0,0 +1,61 @@
+module Fae
+  class UtilitiesController < ApplicationController
+
+    def toggle
+      klass = params[:object].gsub('__', '/').classify.constantize
+      if can_toggle(klass)
+        klass.find(params[:id]).toggle(params[:attr]).save(validate: false)
+        render body: nil
+      else
+        render body: nil, status: :unauthorized
+      end
+    end
+
+    def sort
+      if request.xhr?
+        ids = params[params[:object]]
+        klass = params[:object].gsub('fae_', 'fae/').gsub('__', '/').classify.constantize
+        items = klass.find(ids)
+        items.each do |item|
+          position = ids.index(item.id.to_s) + 1
+          item.update_attribute(:position, position)
+        end
+      end
+      render body: nil
+    end
+
+    def language_preference
+      if params[:language].present? && (params[:language] == 'all' || Fae.languages.has_key?(params[:language].to_sym))
+        current_user.update_column(:language, params[:language])
+      end
+      render body: nil
+    end
+
+    def global_search
+      if params[:query].present? && params[:query].length > 2
+        search_locals = { navigation_items: @fae_navigation.search(params[:query]), records: records_by_display_name(params[:query]) }
+      else
+        search_locals = { show_nav: true }
+      end
+      render partial: 'global_search_results', locals: search_locals
+    end
+
+    private
+
+    def can_toggle(klass)
+      # restrict models that non-admins aren't allowed to update
+      restricted_classes = %w(Fae::User Fae::Role Fae::Option)
+      return false if restricted_classes.include?(klass.name.to_s) && !current_user.super_admin_or_admin?
+      true
+    end
+
+    def records_by_display_name(query)
+      records = []
+      all_models.each do |m|
+        records += m.fae_search(query)
+      end
+      records
+    end
+
+  end
+end