forest_cms 0.98.1

data/app/models/translation.rb

@@ -0,0 +1,97 @@
+class Translation < Forest::ApplicationRecord
+  CACHE_KEY = 'forest_translations'
+
+  after_commit :expire_cache
+
+  validates_presence_of :key
+  validates_presence_of :value
+
+  scope :by_key, -> (orderer = :asc) { order(key: orderer, id: :desc) }
+
+  def self.for(key)
+    self.get(key).try(:value)
+  end
+
+  def self.get(key)
+    self.translations.select { |setting| setting.key == key.to_s }.first
+  end
+
+  def self.expire_cache!
+    Rails.cache.delete self::CACHE_KEY
+  end
+
+  # TODO: Update to support multiple locales
+  def self.initialize_from_i18n
+    I18n.backend.send(:init_translations) unless I18n.backend.initialized?
+    translations = I18n.backend.send(:translations).dig(:en, :forest, :translations).presence || []
+
+    translations.each do |original_translation|
+      translation = original_translation.dup
+
+      k = translation.delete(:key)
+      v = translation.delete(:value)
+      d = translation.delete(:description)
+
+      if k.blank? && v.blank?
+        if translation.is_a?(Hash)
+          k = translation.keys.first.to_s
+          v = translation[k]
+        else
+          k = translation[0].to_s
+          v = translation[1]
+        end
+      end
+
+      if [k, v].all?(&:present?)
+        t = Translation.get(k)
+        if t.blank?
+          t = Translation.new(key: k)
+        end
+
+        t.value = v
+        t.description = d
+
+        if t.new_record?
+          logger.info { "[Forest][Translation] Creating new translation for #{k}" }
+          t.save
+        elsif t.updated_at == t.created_at
+          if t.changed?
+            logger.info { "[Forest][Translation] Updating value for translation key #{k}" }
+            to_update = {}
+            to_update[:value] = v if t.value_changed?
+            to_update[:description] = v if t.description_changed?
+            t.update_columns(to_update)
+          end
+        end
+      else
+        logger.warn { "[Forest][Translation] Warning: unable to create translation for #{original_translation}. Key or value is blank." }
+      end
+    end
+
+    expire_cache!
+  end
+
+  def self.resource_description
+    "Translations may be used in multilingual websites or to define values for particular setting or menu keys."
+  end
+
+  def display_name
+    key
+  end
+
+  private
+
+    def self.translations
+      @memo ||= Rails.cache.fetch CACHE_KEY do
+        self.all.to_a
+      end
+    end
+
+    def self.reset_method_cache!
+      @memo = nil
+    end
+
+    def expire_cache
+      self.class.expire_cache!
+    end
+end

data/app/models/user.rb

@@ -0,0 +1,45 @@
+class User < Forest::ApplicationRecord
+  # Include default devise modules. Others available are:
+  # :confirmable, :lockable, :timeoutable and :omniauthable
+  devise :database_authenticatable, :registerable,
+         :recoverable, :rememberable, :trackable, :validatable
+
+  store :settings, accessors: [:page_settings], coder: JSON
+
+  before_create :assign_default_user_groups
+
+  has_and_belongs_to_many :user_groups
+
+  scope :by_email, -> (orderer = :asc) { order(email: orderer) }
+  scope :by_first_name, -> (orderer = :asc) { order(first_name: orderer) }
+  scope :by_last_name, -> (orderer = :asc) { order(last_name: orderer) }
+  scope :for_user_group_name, -> (group_name) { joins(:user_groups).where('user_groups.name = ?', group_name).limit(1) }
+
+  def self.resource_description
+    "Users are the website editors, administrators and content managers who have access to the CMS. Users are organized by user groups."
+  end
+
+  def display_name
+    [first_name, email].reject(&:blank?).first
+  end
+
+  def name
+    [first_name, last_name].reject(&:blank?).join(' ')
+  end
+
+  def admin?
+    in_group? 'admin'
+  end
+
+  def in_group?(name)
+    user_groups.any? { |ug| ug.name == name }
+  end
+
+  private
+
+    def assign_default_user_groups
+      if self.class.count == 0
+        self.user_groups << UserGroup.find_by_name('admin')
+      end
+    end
+end

data/app/models/user_group.rb

@@ -0,0 +1,17 @@
+class UserGroup < Forest::ApplicationRecord
+  has_and_belongs_to_many :users
+
+  scope :by_name, -> (orderer = :asc) { order(name: orderer) }
+
+  def self.resource_description
+    "User groups allow you to control which users have access to certain resources."
+  end
+
+  def display_name
+    name.titleize
+  end
+
+  def to_label
+    display_name
+  end
+end

data/app/policies/application_policy.rb

@@ -0,0 +1,71 @@
+class ApplicationPolicy
+  attr_reader :user, :record
+
+  def initialize(user, record)
+    @user = user
+    @record = record
+  end
+
+  def scope
+    Pundit.policy_scope!(user, record.class)
+  end
+
+  def index?
+    admin? || editor? || contributor?
+  end
+
+  def show?
+    index?
+  end
+
+  def create?
+    admin?
+  end
+
+  def new?
+    create?
+  end
+
+  def update?
+    admin?
+  end
+
+  def edit?
+    update?
+  end
+
+  def destroy?
+    admin?
+  end
+
+  def view_hidden?
+    admin? || editor? || contributor?
+  end
+
+  class Scope
+    attr_reader :user, :scope
+
+    def initialize(user, scope)
+      @user = user
+      @scope = scope
+    end
+
+    def resolve
+      scope
+    end
+  end
+
+  private
+
+    def admin?
+      user.try(:admin?)
+    end
+
+    def editor?
+      user.try(:in_group?, 'editor')
+    end
+
+    def contributor?
+      user.try(:in_group?, 'contributor')
+    end
+end

data/app/policies/block_kind_policy.rb

@@ -0,0 +1,2 @@
+class BlockKindPolicy < BlockRecordPolicy
+end

data/app/policies/block_layout_policy.rb

@@ -0,0 +1,2 @@
+class BlockLayoutPolicy < BlockRecordPolicy
+end

data/app/policies/block_record_policy.rb

@@ -0,0 +1,13 @@
+class BlockRecordPolicy < ApplicationPolicy
+  def show?
+    if record.respond_to?(:statusable?)
+      record.published? || edit?
+    else
+      true
+    end
+  end
+
+  def index?
+    true
+  end
+end

data/app/policies/dashboard_policy.rb

@@ -0,0 +1,19 @@
+class DashboardPolicy < Struct.new(:user, :dashboard)
+  def index?
+    admin? || editor? || contributor?
+  end
+
+  private
+
+    def admin?
+      user.try(:admin?)
+    end
+
+    def editor?
+      user.try(:in_group?, 'editor')
+    end
+
+    def contributor?
+      user.try(:in_group?, 'contributor')
+    end
+end

data/app/policies/media_item_policy.rb

@@ -0,0 +1,5 @@
+class MediaItemPolicy < ApplicationPolicy
+  def update_multiple?
+    destroy?
+  end
+end

data/app/policies/menu_policy.rb

@@ -0,0 +1,2 @@
+class MenuPolicy < ApplicationPolicy
+end

data/app/policies/page_policy.rb

@@ -0,0 +1,9 @@
+class PagePolicy < BlockRecordPolicy
+  def show?
+    if @record.statusable?
+      @record.published? || view_hidden?
+    else
+      true
+    end
+  end
+end

data/app/policies/setting_policy.rb

@@ -0,0 +1,2 @@
+class SettingPolicy < ApplicationPolicy
+end

data/app/policies/translation_policy.rb

@@ -0,0 +1,2 @@
+class TranslationPolicy < BlockRecordPolicy
+end

data/app/policies/user_group_policy.rb

@@ -0,0 +1,2 @@
+class UserGroupPolicy < ApplicationPolicy
+end

data/app/policies/user_policy.rb

@@ -0,0 +1,17 @@
+class UserPolicy < ApplicationPolicy
+  def show?
+    update?
+  end
+
+  def update?
+    admin? || @record == @user
+  end
+
+  def edit?
+    update?
+  end
+
+  def reset_password?
+    update?
+  end
+end

data/app/views/admin/_file_upload.html.erb

@@ -0,0 +1,75 @@
+<%= simple_form_for [:admin, klass.new],
+                    html: {
+                      multipart: true,
+                      id: 'fileupload',
+                      class: "fileupload fileupload--#{klass.model_name.singular}" } do |f| %>
+  <div class="hidden">
+    <%= f.input association %>
+  </div>
+  <div id="progress" class="progress hidden">
+    <div class="progress-bar progress-bar-success"></div>
+  </div>
+  <div class="fileupload-loading"></div>
+  <table class="fileupload__table table table-striped"><tbody class="files" data-toggle="modal-gallery" data-target="#modal-gallery"></tbody></table>
+<% end %>
+
+<%# The template to display files available for upload %>
+<script id="template-upload" type="text/x-tmpl">
+  {% for (var i=0, file; file=o.files[i]; i++) { %}
+  <tr class="template-upload fade">
+    <td class="preview"><span class="fade"></span></td>
+    <td class="name"><span>{%=file.name%}</span></td>
+    <td class="size"><span>{%=o.formatFileSize(file.size)%}</span></td>
+    {% if (file.error) { %}
+    <td class="error" colspan="2"><span class="label label-important">{%=locale.fileupload.error%}</span> {%=locale.fileupload.errors[file.error] || file.error%}</td>
+    {% } else if (o.files.valid && !i) { %}
+    <td>
+      <div class="progress progress-success progress-striped active"><div class="bar" style="width:0%;"></div></div>
+    </td>
+    <td class="start">{% if (!o.options.autoUpload) { %}
+      <button class="btn btn-primary">
+        <i class="icon-upload icon-white"></i>
+        <span>{%=locale.fileupload.start%}</span>
+      </button>
+      {% } %}</td>
+    {% } else { %}
+    <td colspan="2"></td>
+    {% } %}
+    <td class="cancel">{% if (!i) { %}
+      <button class="btn btn-warning">
+        <i class="icon-ban-circle icon-white"></i>
+        <span>{%=locale.fileupload.cancel%}</span>
+      </button>
+      {% } %}</td>
+  </tr>
+  {% } %}
+</script>
+
+<%# The template to display files available for download %>
+<script id="template-download" type="text/x-tmpl">
+  {% for (var i=0, file; file=o.files[i]; i++) { %}
+    <tr class="template-download hidden">
+      {% if (file.error) { %}
+        <td></td>
+        <td class="name"><span>{%=file.name%}</span></td>
+        <td class="size"><span>{%=o.formatFileSize(file.size)%}</span></td>
+        <td class="error" colspan="2"><span class="label label-important">{%=locale.fileupload.error%}</span> {%=locale.fileupload.errors[file.error] || file.error%}</td>
+      {% } else { %}
+        <td class="preview">{% if (file.thumbnail_url) { %}
+          <a href="{%=file.url%}" title="{%=file.name%}" rel="gallery" download="{%=file.name%}"><img src="{%=file.thumbnail_url%}"></a>
+      {% } %}</td>
+        <td class="name">
+          <a href="{%=file.url%}" title="{%=file.name%}" rel="{%=file.thumbnail_url&&'gallery'%}" download="{%=file.name%}">{%=file.name%}</a>
+        </td>
+        <td class="size"><span>{%=o.formatFileSize(file.size)%}</span></td>
+        <td colspan="2"></td>
+      {% } %}
+      <td class="delete">
+        <button class="btn btn-danger" data-type="{%=file.delete_type%}" data-url="{%=file.delete_url%}">
+          <i class="icon-trash icon-white"></i>
+          <span>{%=locale.fileupload.destroy%}</span>
+        </button>
+      </td>
+    </tr>
+  {% } %}
+</script>

data/app/views/admin/_flash_notifications.html.erb

@@ -0,0 +1,20 @@
+<div class="container-fluid">
+  <div class="row">
+    <div class="col-sm-12">
+      <% flash.each do |key, value| %>
+        <% alert_type = key == 'error' ? 'danger' : 'info' %>
+        <%= content_tag :div, class: "alert alert-#{alert_type} alert-dismissible", role: 'alert' do %>
+          <button type="button" class="close" data-dismiss="alert" aria-label="Close"><span aria-hidden="true">&times;</span></button>
+          <% if key == 'error' %>
+            <strong>Error: </strong>
+          <% end %>
+          <% if value.is_a?(Array) %>
+            <%= value.join('<br><br>').html_safe %>
+          <% else %>
+            <%= value %>
+          <% end %>
+        <% end %>
+      <% end %>
+    </div>
+  </div>
+</div>

data/app/views/admin/_navigation.html.erb

@@ -0,0 +1,61 @@
+<%# TODO: Add ability to easily add to the admin navigation via the host app %>
+<%# TODO: DRY this file up with link helpers %>
+<nav class="navbar navbar-default">
+  <div class="container-fluid <%= admin_navbar_class %>">
+    <div class="navbar-header">
+      <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#forest-navbar-collapse" aria-expanded="false">
+        <span class="sr-only">Toggle navigation</span>
+        <span class="icon-bar"></span>
+        <span class="icon-bar"></span>
+        <span class="icon-bar"></span>
+      </button>
+      <%= link_to content_tag(:span, '', class: 'glyphicon glyphicon-tree-conifer'), admin_path, class: 'navbar-brand', title: 'Dashboard' %>
+    </div>
+
+    <div class="collapse navbar-collapse" id="forest-navbar-collapse">
+      <%= render 'admin/shared/navigation/navbar' %>
+      <ul class="nav navbar-nav navbar-right">
+        <% if @record %>
+          <li>
+            <% if @record.statusable? %>
+              <p class="navbar-text">
+                <%= content_tag :span, t(@record.status, scope: [:forest, @record.class.model_name.i18n_key, :status]), class: 'badge', title: "#{@record.class.model_name.human} Status" %>
+              </p>
+            <% end %>
+            <% if public_area? %>
+              <p class="navbar-text">
+                <%= link_to "Edit #{@record.class.model_name.human}", send("edit_#{@record.class.model_name.singular_route_key}_path", @record) %>
+              </p>
+            <% end %>
+          </li>
+        <% end %>
+        <li class="dropdown">
+          <a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-haspopup="true" aria-expanded="false">
+            Settings <span class="caret"></span>
+          </a>
+          <ul class="dropdown-menu">
+            <li class="<%= admin_navbar_active_class(admin_settings_path) %>">
+              <%= link_to 'General', admin_settings_path %>
+            </li>
+            <li role="separator" class="divider"></li>
+            <li>
+              <%= link_to 'Clear Cache', admin_cache_purge_index_path, data: { confirm: "Are you sure you wan't to clear the website cache? Performance may decrease while cache rebuilds." } %>
+            </li>
+          </ul>
+        </li>
+        <li class="dropdown">
+          <a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-haspopup="true" aria-expanded="false">
+            <%= current_user.display_name %> <span class="caret"></span>
+          </a>
+          <ul class="dropdown-menu">
+            <li><%= link_to('Edit My Profile', edit_admin_user_path(current_user)) %></li>
+            <li><%= link_to 'View Home Page', root_path %></li>
+            <li><%= link_to 'Forest Docs', admin_documentation_path, title: 'Learn more about this CMS and how to use it.' %></li>
+            <li role="separator" class="divider"></li>
+            <li><%= link_to('Log out', destroy_user_session_path, :method => :delete) %></li>
+          </ul>
+        </li>
+      </ul>
+    </div>
+  </div>
+</nav>