forest_cms 0.98.1

data/app/controllers/admin/settings_controller.rb

@@ -0,0 +1,66 @@
+class Admin::SettingsController < Admin::ForestController
+  before_action :set_setting, only: [:show, :edit, :update, :destroy]
+
+  # GET /settings
+  def index
+    @settings = apply_scopes(Setting.all).by_title.page params[:page]
+    authorize @settings
+  end
+
+  # GET /settings/1
+  def show
+    authorize @setting
+  end
+
+  # TODO: better pattern for disabling new actions
+  # GET /settings/new
+  # def new
+  #   @setting = Setting.new
+  #   authorize @setting
+  # end
+
+  # GET /settings/1/edit
+  def edit
+    authorize @setting
+  end
+
+  # POST /settings
+  def create
+    @setting = Setting.new(setting_params)
+    authorize @setting
+
+    if @setting.save
+      redirect_to edit_admin_setting_path(@setting), notice: 'Setting was successfully created.'
+    else
+      render :new
+    end
+  end
+
+  # PATCH/PUT /settings/1
+  def update
+    authorize @setting
+    if @setting.update(setting_params)
+      redirect_to edit_admin_setting_path(@setting), notice: 'Setting was successfully updated.'
+    else
+      render :edit
+    end
+  end
+
+  # DELETE /settings/1
+  # def destroy
+  #   authorize @setting
+  #   @setting.destroy
+  #   redirect_to admin_settings_url, notice: 'Setting was successfully destroyed.'
+  # end
+
+  private
+    # Use callbacks to share common setup or constraints between actions.
+    def set_setting
+      @setting = Setting.find(params[:id])
+    end
+
+    # Only allow a trusted parameter "white list" through.
+    def setting_params
+      params.require(:setting).permit(:value, :title, :slug, :value_type)
+    end
+end

data/app/controllers/admin/translations_controller.rb

@@ -0,0 +1,58 @@
+class Admin::TranslationsController < Admin::ForestController
+  before_action :set_translation, only: [:show, :edit, :update, :destroy]
+
+  def index
+    @translations = apply_scopes(Translation).by_key.page params[:page]
+  end
+
+  def show
+    authorize @translation
+  end
+
+  def new
+    @translation = Translation.new
+    authorize @translation
+  end
+
+  def edit
+    authorize @translation
+  end
+
+  def create
+    @translation = Translation.new(translation_params)
+    authorize @translation
+
+    if @translation.save
+      redirect_to edit_admin_translation_path(@translation), notice: 'Translation was successfully created.'
+    else
+      render :new
+    end
+  end
+
+  def update
+    authorize @translation
+
+    if @translation.update(translation_params)
+      redirect_to edit_admin_translation_path(@translation), notice: 'Translation was successfully updated.'
+    else
+      render :edit
+    end
+  end
+
+  def destroy
+    authorize @translation
+    @translation.destroy
+    redirect_to admin_translations_url, notice: 'Translation was successfully destroyed.'
+  end
+
+  private
+
+    def translation_params
+      # Add blockable params to the permitted attributes if this record is blockable `**BlockSlot.blockable_params`
+      params.require(:translation).permit(:key, :value, :description, )
+    end
+
+    def set_translation
+      @translation = Translation.find(params[:id])
+    end
+end

data/app/controllers/admin/user_groups_controller.rb

@@ -0,0 +1,69 @@
+class Admin::UserGroupsController < Admin::ForestController
+  include FilterControllerScopes
+
+  before_action :set_user_group, only: [:show, :edit, :update, :destroy]
+
+  has_scope :by_name
+
+  # GET /user_groups
+  def index
+    @user_groups = apply_scopes(UserGroup).by_name.page params[:page]
+    authorize @user_groups
+  end
+
+  # GET /user_groups/1
+  def show
+    authorize @user_group
+  end
+
+  # GET /user_groups/new
+  def new
+    @user_group = UserGroup.new
+    authorize @user_group
+  end
+
+  # GET /user_groups/1/edit
+  def edit
+    authorize @user_group
+  end
+
+  # POST /user_groups
+  def create
+    @user_group = UserGroup.new(user_group_params)
+    authorize @user_group
+
+    if @user_group.save
+      redirect_to edit_admin_user_group_path(@user_group), notice: 'User group was successfully created.'
+    else
+      render :new
+    end
+  end
+
+  # PATCH/PUT /user_groups/1
+  def update
+    authorize @user_group
+    if @user_group.update(user_group_params)
+      redirect_to edit_admin_user_group_path(@user_group), notice: 'User group was successfully updated.'
+    else
+      render :edit
+    end
+  end
+
+  # DELETE /user_groups/1
+  def destroy
+    authorize @user_group
+    @user_group.destroy
+    redirect_to admin_user_groups_url, notice: 'User group was successfully destroyed.'
+  end
+
+  private
+    # Use callbacks to share common setup or constraints between actions.
+    def set_user_group
+      @user_group = UserGroup.find(params[:id])
+    end
+
+    # Only allow a trusted parameter "white list" through.
+    def user_group_params
+      params.require(:user_group).permit(:name)
+    end
+end

data/app/controllers/admin/users_controller.rb

@@ -0,0 +1,88 @@
+class Admin::UsersController < Admin::ForestController
+  include FilterControllerScopes
+
+  before_action :set_user, only: [:show, :edit, :update, :destroy]
+
+  has_scope :by_email
+  has_scope :by_last_name
+  has_scope :by_first_name
+
+  # GET /users
+  def index
+    @users = apply_scopes(User.includes(:user_groups)).by_id.page params[:page]
+    authorize @users
+  end
+
+  # GET /users/1
+  def show
+    authorize @user
+  end
+
+  # GET /users/new
+  def new
+    @user = User.new
+    authorize @user
+  end
+
+  # GET /users/1/edit
+  def edit
+    authorize @user
+  end
+
+  # POST /users
+  def create
+    @user = User.new(user_params)
+    authorize @user
+
+    if @user.save
+      redirect_to edit_admin_user_path(@user), notice: 'User was successfully created.'
+    else
+      render :new
+    end
+  end
+
+  # PATCH/PUT /users/1
+  def update
+    authorize @user
+
+    if params[:user][:password].blank? && params[:user][:password_confirmation].blank?
+      params[:user].delete(:password)
+      params[:user].delete(:password_confirmation)
+    end
+
+    if @user.update(user_params)
+      redirect_to edit_admin_user_path(@user), notice: 'User was successfully updated.'
+    else
+      render :edit
+    end
+  end
+
+  def reset_password
+    @user = User.find(params[:user_id])
+    authorize @user
+
+    if @user.send_reset_password_instructions
+      redirect_to edit_admin_user_path(@user), notice: 'User password reset link was successfully sent.'
+    else
+      render :edit
+    end
+  end
+
+  # DELETE /users/1
+  def destroy
+    authorize @user
+    @user.destroy
+    redirect_to admin_users_url, notice: 'User was successfully destroyed.'
+  end
+
+  private
+    # Use callbacks to share common setup or constraints between actions.
+    def set_user
+      @user = User.find(params[:id])
+    end
+
+    # Only allow a trusted parameter "white list" through.
+    def user_params
+      params.require(:user).permit(:email, :first_name, :last_name, :password, :password_confirmation, user_group_ids: [])
+    end
+end

data/app/controllers/application_controller.rb

@@ -0,0 +1,2 @@
+class ApplicationController < ActionController::Base
+end

data/app/controllers/errors_controller.rb

@@ -0,0 +1,26 @@
+class ErrorsController < ForestController
+  before_action :filter_by_request_type
+
+  def not_found
+    @page_title = '404 - Not Found'
+    render status: 404
+  end
+
+  def unprocessable
+    @page_title = '422 - Unprocessable'
+    render status: 422
+  end
+
+  def internal_server_error
+    @page_title = '500 - Error'
+    render status: 500
+  end
+
+  private
+
+    def filter_by_request_type
+      if %i(html json).none?(request.format.symbol)
+        render status: 404
+      end
+    end
+end

data/app/controllers/forest_controller.rb

@@ -0,0 +1,39 @@
+class ForestController < ApplicationController
+  include Pundit
+
+  protect_from_forgery with: :exception, prepend: true
+  skip_before_action :verify_authenticity_token, if: -> { controller_name == 'sessions' && action_name == 'create' }
+
+  layout :layout_by_resource
+
+  before_action :set_body_classes
+  before_action :reset_class_method_cache
+
+  def after_sign_in_path_for(resource)
+    main_app.admin_path
+  end
+
+  private
+
+    def layout_by_resource
+      devise_controller? ? 'devise' : 'application'
+    end
+
+    def set_body_classes
+      controller_heirarchy = self.class.name.split('::').reject(&:blank?)
+      controller_heirarchy.pop
+      controller_heirarchy = controller_heirarchy.collect { |a| "controller-class--#{a.underscore}" }.join(' ')
+
+      @body_classes ||= []
+      @body_classes << controller_heirarchy
+      @body_classes << "controller--#{controller_name}"
+      @body_classes << "action--#{action_name}"
+      @body_classes << 'current-user--admin' if current_user&.admin?
+    end
+
+    def reset_class_method_cache
+      Menu.reset_method_cache!
+      Setting.reset_method_cache!
+      Translation.reset_method_cache!
+    end
+end

data/app/controllers/media_items_controller.rb

@@ -0,0 +1,12 @@
+class MediaItemsController < ForestController
+  before_action :set_media_item, only: [:show]
+
+  def show
+  end
+
+  private
+
+    def set_media_item
+      @media_item = MediaItem.find_by_slug(params[:id])
+    end
+end

data/app/controllers/pages_controller.rb

@@ -0,0 +1,39 @@
+class PagesController < ForestController
+  before_action :set_page, only: [:show]
+
+  def show
+    unless @page
+      if Rails.configuration.consider_all_requests_local
+        raise ActionController::RoutingError.new('Not Found')
+      else
+        logger.error("[Forest][Error] 404 page not found. Looked for path \"#{request.fullpath.force_encoding('utf-8')}\"")
+        @body_classes ||= []
+        @body_classes << 'controller--errors action--not_found'
+        @page_title = '404 - Not Found'
+        return render 'errors/not_found'
+      end
+    end
+    authorize @page
+
+    if @page.redirect.present?
+      return redirect_to @page.redirect
+    end
+
+    @body_classes << "page--#{@page.slug}"
+  end
+
+  def edit
+    @page = Page.where(path: params[:page_path]).try(:first)
+    if @page
+      return redirect_to edit_admin_page_path(@page)
+    else
+      return redirect_to admin_pages_path
+    end
+  end
+
+  private
+
+    def set_page
+      @page = Page.find_by_path(params[:page_path].presence || 'home')
+    end
+end

data/app/controllers/public_controller.rb

@@ -0,0 +1,5 @@
+class PublicController < ForestController
+  def index
+    @page_title = 'Home'
+  end
+end

data/app/helpers/admin_helper.rb

@@ -0,0 +1,95 @@
+module AdminHelper
+  def table_sorter(options = {})
+    title = options.fetch :title
+    path = options.fetch :path
+    scope = options.fetch :scope
+    default_order = options.fetch :default_order, :asc
+    opposite_order = default_order == :asc ? :desc : :asc
+    is_default_order = params[scope]&.to_sym == default_order
+    active_class = params[scope].present? ? 'active ' : ''
+
+    link_to title,
+      send(path, "#{scope}": (is_default_order ? opposite_order : default_order)),
+      class: "#{active_class}#{(is_default_order ? 'order--default' : 'order--reverse')}"
+  end
+
+  def table_thumbnail(image)
+    if image&.attachment.present?
+      content_tag :div, class: 'table-thumbnail' do
+        image_tag image.attachment.url(:thumb)
+      end
+    end
+  end
+
+  def table_color_representation(color)
+    content_tag :div, '', class: 'table-color-representation', style: "background-color: #{color};"
+  end
+
+  def forest_date(datetime)
+    return if datetime.blank?
+    datetime_format = datetime.is_a?(Date) ? '%m‑%d‑%Y' : '%m‑%d‑%Y %l:%M %p'
+    datetime.strftime(datetime_format).html_safe
+  end
+
+  def admin_page_level_indicator(level)
+    (level + 1).times.collect{}.join('— ').html_safe
+  end
+
+  def admin_navbar_class
+    return unless (@page && @page.statusable?)
+
+    # if @page.scheduled?
+    #   'bg-info'
+    # elsif !@page.published?
+    #   'bg-warning'
+    # end
+
+    !@page.published?
+  end
+
+  def admin_navbar_active_class(nav_item_path)
+    'active' if nav_item_path == request.path
+  end
+
+  def admin_area?
+    request_parts.first == 'admin'
+  end
+
+  def public_area?
+    !admin_area?
+  end
+
+  def request_parts
+    request.path.split('/').reject(&:blank?)
+  end
+
+  def record_name(record)
+    return unless record.present?
+    record.try(:display_name).presence || record.try(:title).presence || record.try(:name).presence || "#{record.model_name.human} #{record.id}"
+  end
+
+  def admin_header_tag(record, &block)
+    record = record.first if record.respond_to?(:join)
+    content_tag :div, capture(&block), class: "admin-header", data: {
+      record_type: record&.class&.model_name&.singular,
+      record_id: record.try(:id)
+    }
+  end
+
+  def back_button(default_url)
+    if request.referer.present?
+      request.referer
+    else
+      default_url
+    end
+  end
+
+  def jquery_include_tag
+    if Rails.env.production?
+      jquery_url = 'https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js'
+    else
+      jquery_url = 'forest/lib/jquery-3.3.1.min'
+    end
+    javascript_include_tag jquery_url, data: { turbolinks_eval: false, turbolinks_suppress_warning: true }
+  end
+end