fe 0.0.3 → 0.0.4

data/app/controllers/fe/admin/email_templates_controller.rb

@@ -1,6 +1,6 @@
 class Fe::Admin::EmailTemplatesController < ApplicationController
   before_filter :check_valid_user
-  layout 'fe.admin'
+  layout 'fe/fe.admin'
   
   def index 
     @email_templates = Fe::EmailTemplate.order('name')
@@ -27,7 +27,7 @@ class Fe::Admin::EmailTemplatesController < ApplicationController
   end
   
   def create
-    @email_template = Fe::EmailTemplate.new(params[:email_template])
+    @email_template = Fe::EmailTemplate.new(email_template_params)
     
     respond_to do |format|
       if @email_template.save
@@ -42,8 +42,8 @@ class Fe::Admin::EmailTemplatesController < ApplicationController
     @email_template = Fe::EmailTemplate.find(params[:id])
     
     respond_to do |format|
-      if @email_template.update_attributes(params[:email_template])
-        format.html { redirect_to admin_email_templates_path }
+      if @email_template.update_attributes(email_template_params)
+        format.html { redirect_to fe_admin_email_templates_path }
       else
         format.html { render :action => "edit" }
       end
@@ -58,4 +58,10 @@ class Fe::Admin::EmailTemplatesController < ApplicationController
       format.html { redirect_to email_templates_path }
     end
   end
+
+  protected
+  
+    def email_template_params
+      params.require(:email_template).permit(:name, :subject, :content)
+    end
 end

data/app/controllers/fe/admin/question_pages_controller.rb

@@ -1,6 +1,6 @@
 class Fe::Admin::QuestionPagesController < ApplicationController
   before_filter :check_valid_user
-  layout 'fe.admin'
+  layout 'fe/fe.admin'
 
   before_filter :get_sheet
 
@@ -104,10 +104,10 @@ class Fe::Admin::QuestionPagesController < ApplicationController
   # returns a list of existing Untitled forms
   # (having a separate method makes it easy to mock in the spec)
   def untitled_labels
-    Page.where("label like 'Page%'").map {|s| s.label}
+    Fe::Page.where("label like 'Page%'").map {|s| s.label}
   end
 
   def page_params
-    params.fetch(:page, {}).permit(:label, :hidden, :no_cache)
+    params.fetch(:fe_page, {}).permit(:label, :hidden, :no_cache)
   end
 end

data/app/controllers/fe/admin/question_sheets_controller.rb

@@ -4,7 +4,7 @@
 class Fe::Admin::QuestionSheetsController < ApplicationController
   before_filter :check_valid_user
   before_filter :get_question_sheet, :only => [:show, :archive, :unarchive, :destroy, :edit, :update, :duplicate]
-  layout 'fe.admin'
+  layout 'fe/fe.admin'
 
   # list of all questionnaires/forms to edit
   # GET /question_sheets
@@ -52,7 +52,7 @@ class Fe::Admin::QuestionSheetsController < ApplicationController
 
     respond_to do |format|
       if @question_sheet.save
-        format.html { redirect_to admin_question_sheet_path(@question_sheet) }
+        format.html { redirect_to fe_admin_question_sheet_path(@question_sheet) }
         format.xml  { head :created, :location => admin_question_sheet_path(@question_sheet) }
       else
         format.html { render :action => "new" }
@@ -74,10 +74,11 @@ class Fe::Admin::QuestionSheetsController < ApplicationController
   # save changes to properties panel (label, language)
   # PUT /question_sheets/1
   def update
+    params.require(:fe_question_sheet).permit!
 
     respond_to do |format|
-      if @question_sheet.update_attributes(params[:question_sheet])
-        format.html { redirect_to admin_question_sheet_path(@question_sheet) }
+      if @question_sheet.update_attributes(params[:fe_question_sheet])
+        format.html { redirect_to fe_admin_question_sheet_path(@question_sheet) }
         format.js
         format.xml  { head :ok }
       else
@@ -94,7 +95,7 @@ class Fe::Admin::QuestionSheetsController < ApplicationController
     @question_sheet.destroy
 
     respond_to do |format|
-      format.html { redirect_to admin_question_sheets_path }
+      format.html { redirect_to fe_admin_question_sheets_path }
       format.xml  { head :ok }
     end
   end

data/app/controllers/fe/applications_controller.rb

@@ -0,0 +1,183 @@
+module Fe
+  class ApplicationsController < ApplicationController
+    append_before_filter :check_valid_user, :only => [:show, :collated_refs, :no_conf, :no_ref]
+    append_before_filter :setup
+    append_before_filter :set_title
+
+    layout 'fe/application'
+
+    # dashboard
+    def index
+      redirect_to :action => :show_default
+    end
+
+    def show_default
+      @application = get_application
+      setup_view
+
+      render :template => 'fe/answer_sheets/edit'
+    end
+
+    # create app
+    def create
+      @question_sheet = Fe::QuestionSheet.find(params[:question_sheet_id])
+      @application = @person.applications.build
+
+      @application.save!
+      @application.question_sheets << @question_sheet
+      redirect_to fe_application_path(@application)
+    end
+
+    # edit an apply
+    def edit
+      @application = Application.find(params[:id]) unless @application
+
+      if @application.applicant == current_user.person
+        setup_view
+
+        render :template => 'fe/answer_sheets/edit'
+      else 
+        no_access
+      end
+
+    end
+
+    def show
+      @application = Application.find(params[:id]) unless @application
+      @answer_sheets = @application.answer_sheets
+      @show_conf = true
+      @viewing = true
+
+      if @answer_sheets.empty?
+        render :action => :too_old
+        #raise "No applicant sheets in sleeve '#{@application.sleeve.title}'."
+        return
+      end
+      #render :layout => 'admin_application'
+    end
+
+    def no_ref
+      @application = Application.find(params[:id]) unless @application
+      @answer_sheets = [@application]
+      @show_conf = true
+
+      if @answer_sheets.empty?
+        render :action => :too_old
+        #raise "No applicant sheets in sleeve '#{@application.sleeve.title}'."
+        return
+      end
+
+      #render :layout => 'admin_application', :template => 'fe/applys/show'
+      render :template => 'fe/applys/show'
+    end
+
+    def no_conf
+      @application = Application.find(params[:id]) unless @application
+      @answer_sheets = [@application]
+      @show_conf = false
+
+      if @answer_sheets.empty?
+        render :action => :too_old
+        #raise "No applicant sheets in sleeve '#{@application.sleeve.title}'."
+        return
+      end
+
+      #render :layout => 'admin_application', :template => 'fe/applys/show'
+      render :template => 'fe/applys/show'
+    end
+
+    def collated_refs
+      @application = Application.find(params[:id]) unless @application
+      @answer_sheets = @application.references
+
+      if @answer_sheets.empty?
+        render :action => :too_old
+        #raise "No applicant sheets in sleeve '#{@application.sleeve.title}'."
+        return
+      end
+
+      @reference_question_sheet = Fe::QuestionSheet.find(2) #TODO: constant
+
+      setup_reference("staff")
+      setup_reference("discipler")
+      setup_reference("roommate")
+      setup_reference("friend")
+
+      @show_conf = true
+    end
+
+    def setup_reference(type)
+      ref = nil
+      eval("ref = @" + type + "_reference = @application." + type + "_reference")
+      raise type unless ref
+      answer_sheet = ref
+      question_sheet = answer_sheet.question_sheet
+      if question_sheet
+        elements = []
+        question_sheet.pages.order(:number).each do |page|
+          elements << page.elements.where("#{Fe::Element.table_name}.kind not in (?)", %w(Fe::Paragraph)).to_a
+        end
+        elements = elements.flatten
+        elements.reject! {|e| e.is_confidential} if @show_conf == false
+        eval("@" + type + "_elements = Fe::QuestionSet.new(elements, answer_sheet).elements")
+      else
+        eval("@" + type + "_elements = []")
+      end
+
+    end
+
+    def no_access
+      redirect_to '/'
+    end
+
+    protected
+    def setup
+      @person = get_person    # current visitor_id
+    end
+
+    def get_year
+      Application::YEAR  
+    end
+
+    def get_person
+      @person ||= current_person
+      return nil unless @person
+      @person.current_address = ::Fe::Address.new(:address_type =>'current') unless @person.current_address
+      @person.emergency_address1 = ::Fe::Address.new(:address_type =>'emergency1') unless @person.emergency_address1
+      @person.permanent_address = ::Fe::Address.new(:address_type =>'permanent') unless @person.permanent_address
+      return @person
+    end
+
+    def get_application
+      unless @application
+        @person ||= get_person
+        # if this is the user's first visit, we will need to create an apply
+        if @person.application.nil?
+          create_application
+          @application.save!
+          @person.application = @app
+        else
+          @application ||= @person.application
+        end
+      end
+      @application
+    end
+
+    def create_application
+      @application = Fe::Application.create :applicant_id => @person.id
+    end
+
+    def setup_view
+      @answer_sheet = @application
+      # edit the first page
+      @presenter = Fe::AnswerPagesPresenter.new(self, @answer_sheet)
+      @elements = @presenter.questions_for_page(:first).elements
+      @page = @presenter.pages.first
+      @presenter.active_page ||= @page
+    end
+
+    def set_title
+      @title = "Form Engine"
+    end
+  end
+end

data/app/controllers/fe/concerns/answer_pages_controller_concern.rb

@@ -1,8 +1,11 @@
 module Fe::AnswerPagesControllerConcern
   extend ActiveSupport::Concern
 
-  included do
-    before_filter :get_answer_sheet, :only => [:edit, :update, :save_file, :index]
+  begin
+    included do
+      before_filter :get_answer_sheet, :only => [:edit, :update, :save_file, :index]
+    end
+  rescue ActiveSupport::Concern::MultipleIncludedBlocks
   end
 
   def edit

data/app/controllers/fe/concerns/answer_sheets_controller_concern.rb

@@ -1,9 +1,12 @@
 module Fe::AnswerSheetsControllerConcern
   extend ActiveSupport::Concern
 
-  included do
-    layout 'application'
-    before_filter :get_answer_sheet, :only => [:edit, :show, :send_reference_invite, :submit]
+  begin
+    included do
+      layout 'fe/application'
+      before_filter :get_answer_sheet, :only => [:edit, :show, :send_reference_invite, :submit]
+    end
+  rescue ActiveSupport::Concern::MultipleIncludedBlocks
   end
 
   # list existing answer sheets
@@ -46,8 +49,8 @@ module Fe::AnswerSheetsControllerConcern
     @elements = Fe::QuestionSet.new(@elements, @answer_sheet).elements.group_by{ |e| e.pages.first }
   end
 
-  def send_reference_invite
-    @reference = @answer_sheet.reference_sheets.find(params[:reference_id])
+  def send_reference_invite(reference = nil)
+    @reference = reference || @answer_sheet.reference_sheets.find(params[:reference_id])
     if params[:reference]
       reference_params = params.fetch(:reference)[@reference.id.to_s].permit(:relationship, :title, :first_name, :last_name, :phone, :email, :is_staff)
 
@@ -66,6 +69,7 @@ module Fe::AnswerSheetsControllerConcern
 
   protected
   def answer_sheet_type
+    return Fe::ReferenceSheet if params[:controller] == "fe/reference_sheets"
     (params[:answer_sheet_type] || Fe.answer_sheet_class || 'AnswerSheet').constantize
   end
 
@@ -81,4 +85,4 @@ module Fe::AnswerSheetsControllerConcern
     end
     return true
   end
-end
+end

data/app/controllers/fe/concerns/application_controller_concern.rb

@@ -0,0 +1,34 @@
+module Fe::ApplicationControllerConcern
+  extend ActiveSupport::Concern
+
+  begin
+    included do
+      helper_method :fe_user
+    end
+  rescue ActiveSupport::Concern::MultipleIncludedBlocks
+  end
+
+  def fe_user
+    return nil unless current_user
+    @fe_user ||= Fe::User.where(:user_id => current_user.id).first
+    if @fe_user
+      @fe_user.update_attribute(:last_login, Time.now)
+      session[:login_stamped] = true
+    end
+    @fe_user
+  end
+
+  def current_person
+    #raise "no user" unless current_user
+    return nil unless current_user
+    current_user.fe_person || Fe::Person.create(:user_id => current_user.id)
+  end
+
+  def check_valid_user
+    unless fe_user
+      # TODO redirect to somewhere better
+      redirect_to "/", flash: { error: "Access denied" }
+      return false
+    end
+  end
+end

data/app/controllers/fe/payments_controller.rb

@@ -0,0 +1,184 @@
+# gather payment information from Applicant
+module Fe
+  class PaymentsController < ApplicationController
+    prepend_before_filter :ssm_login_required, :except => [:edit, :update]
+    prepend_before_filter :cas_filter, :authentication_filter, :only => [:edit, :update]
+    before_filter :setup, :except => [:edit, :update, :approve]
+
+    # Allow applicant to edit payment
+    # /applications/1/payment_page/edit
+    # js: provide a partial to replace the answer_sheets page area
+    def edit
+      @payment = Fe::Payment.find(params[:id])
+      @application = @payment.answer_sheet
+      # if this isn't a staff payment they shouldn't be here for this staff person
+      unless 'Staff' == @payment.payment_type && current_person.isStaff?
+        render('no_access') and return
+      end
+      @payment.status = "Approved" # set the status so a default radio button will be selected
+    end
+
+    def create
+      Fe::Payment.transaction do
+        @payment = @application.payments.new(payment_params)
+        if @application.payments.non_denied.length > 0
+          @payment.errors.add(:base, "You have already submitted a payment for this application.")
+          render :action => "error"
+        else
+          @payment.amount = Fe.cost
+          @payment.status = 'Pending'
+          if @payment.valid?
+            case @payment.payment_type
+            when "Credit Card"
+              card_type = params[:payment][:card_type]
+
+              creditcard = ActiveMerchant::Billing::CreditCard.new(
+                :brand       => card_type,
+                :number     => @payment.card_number,
+                :month      => @payment.expiration_month,
+                :year       => @payment.expiration_year,
+                :verification_value => @payment.security_code,
+                :first_name => @payment.first_name,
+                :last_name  => @payment.last_name
+              )
+
+              if creditcard.valid?
+                response = GATEWAY.purchase(@payment.amount * 100, creditcard)
+
+                if response.success?
+                  @payment.approve!
+                  # TODO: Send notification email
+                else
+                  @payment.errors.add(:base, "Credit card transaction failed: #{response.message}")
+                  #Send email this way instead of raising error in order to still give an error message to user.
+                  # Fe::Notifier.notification('programmers@cojourners.com', # RECIPIENTS
+                  #                     "sp_error@uscm.org", # FROM
+                  #                     "Credit Card Error", # LIQUID TEMPLATE NAME
+                  #                     {'error' => "Credit card transaction failed: #{response.message} \n #{response.inspect} \n #{creditcard.inspect}"}).deliver
+                end
+              else
+                @payment.errors.add(:card_number, "is invalid.  Check the number and/or the expiration date.")
+              end
+            when "Mail"
+              @payment.approve!
+            when "Staff"
+              @payment.save
+              send_staff_payment_request(@payment)
+            end
+          end
+        end
+      end
+    end
+
+    def update
+      @payment = Fe::Payment.includes({:application => :applicant}).find(params[:id])
+      @application = @payment.answer_sheet
+      @person = @application.applicant
+      @payment.status = params[:payment][:status]
+      staff_approval
+      @payment.save!
+      staff_payment_processed_email(@payment)
+      @payment.answer_sheet.complete
+    end
+
+    def approve
+      @payment = Fe::Payment.find(params[:id])
+      @application = @payment.answer_sheet
+      @payment.auth_code = si_user.user.person.account_no
+      case @payment.payment_type
+      when 'Staff'
+        staff_approval
+        staff_payment_processed_email(@payment)
+      when 'Mail'
+        Fe::Notifier.notification(@application.email, # RECIPIENTS
+                                  Fe.from_email, # FROM
+                                  "Check Received", # LIQUID TEMPLATE NAME
+                                  {'name' => @application.applicant.informal_full_name}).deliver
+      end
+      @payment.approve!
+      @payment.application.complete
+    end
+
+    # TODO this be moved to a decorotor or cru_lib as per Josh's instructions not to have Staff code in FE
+    def staff_search
+      #@payment = @application.payments.new(params[:payment].slice(:payment_type, :payment_account_no, :auth_code))
+      @payment = @application.payments.new(staff_search_payment_params)
+      if @payment.staff_first.to_s.strip.empty? || @payment.staff_last.to_s.strip.empty?
+        render; return
+      end
+      @results = Staff.order('"lastName", "firstName"').where("(\"firstName\" like ? OR \"preferredName\" like ?) AND \"lastName\" like ? and \"removedFromPeopleSoft\" <> 'Y'", @payment.staff_first+'%', @payment.staff_first+'%', @payment.staff_last+'%')
+    end
+
+    def destroy
+      @payment = @application.payments.find(params[:id])
+      @payment.destroy
+    end
+
+    protected
+
+    def setup
+      if app_user && app_user.can_su_application?
+        @answer_sheet = @application = Fe.answer_sheet_class.constantize.find(params[:application_id])
+      else
+        @answer_sheet = @application = current_person.applications.find(params[:application_id])
+      end
+    end
+
+    def send_staff_payment_request(payment)
+      @person = @application.applicant
+      staff = Staff.find_by(accountNo: payment.payment_account_no)
+      raise "Invalid staff payment request: " + payment.inspect if staff.nil?
+      Fe::Notifier.notification(staff.email, # RECIPIENTS
+                                Fe.from_email, # FROM
+                                "Staff Payment Request", # LIQUID TEMPLATE NAME
+                                {'staff_full_name' => staff.informal_full_name, # HASH OF VALUES FOR REPLACEMENT IN LIQUID TEMPLATE
+                                  'applicant_full_name' => @person.informal_full_name,
+                                  'applicant_email' => @person.email,
+                                  'applicant_home_phone' => @person.current_address.home_phone,
+                                  'payment_request_url' => url_for(:action => :edit, :application_id => @application.id, :id => @payment.id)},
+                                  {:format => :html}).deliver
+    end
+
+    def staff_approval
+      @payment.auth_code = current_person.account_no
+      if @payment.status == "Other Account"
+        @payment.payment_account_no = params[:other_account]
+        @payment.approve!
+      end
+    end
+
+    def staff_payment_processed_email(payment)
+      # Send appropriate email
+      if payment.approved?
+        # Send receipt to applicant
+        Fe::Notifier.notification(@application.applicant.email, # RECIPIENTS
+                                  Fe.from_email, # FROM
+                                  "Applicant Staff Payment Receipt", # LIQUID TEMPLATE NAME
+                                  {'applicant_full_name' => @application.applicant.informal_full_name}).deliver
+        # Send notice to Tool Owner
+        Fe::Notifier.notification(Fe.from_email, # RECIPIENTS - HARD CODED!
+                                  Fe.from_email, # FROM
+                                  "Tool Owner Payment Confirmation", # LIQUID TEMPLATE NAME
+                                  {'payment_amount' => "$" + @payment.amount.to_s,
+                                    'payment_account_no' => @payment.payment_account_no,
+                                    'payment_auth_code' => @payment.auth_code,
+                                    'payment_id' => @payment.id}).deliver
+      else
+        # Sent notice to applicant that payment was declined
+        Fe::Notifier.notification(@application.email, # RECIPIENTS
+                                  Fe.from_email, # FROM
+                                  "Payment Refusal", # LIQUID TEMPLATE NAME
+                                  {'applicant_full_name' => @application.applicant.informal_full_name}).deliver
+      end
+    end
+
+    def payment_params
+      params.require(:payment).permit(:payment_type, :payment_account_no, :auth_code, :first_name, :last_name, :address,
+                                     :city, :state, :zip, :card_number, :card_type, :expiration_month, :expiration_year, :security_code)
+    end
+
+    def staff_search_payment_params
+      params.require(:payment).permit(:payment_type, :staff_first, :staff_last)
+    end
+  end
+end