goca-spree-backend 3.1.14.rails.5.0

data/app/controllers/spree/admin/store_credits_controller.rb

@@ -0,0 +1,94 @@
+module Spree
+  module Admin
+    class StoreCreditError < StandardError; end
+
+    class StoreCreditsController < Spree::Admin::BaseController
+      before_action :load_user
+      before_action :load_categories, only: [:new, :edit]
+      before_action :load_store_credit, only: [:new, :edit, :update]
+      before_action :ensure_unused_store_credit, only: [:update]
+
+      def index
+        @store_credits = @user.store_credits.includes(:credit_type, :category).reverse_order
+      end
+
+      def create
+        @store_credit = @user.store_credits.build(
+          permitted_store_credit_params.merge(
+            created_by: try_spree_current_user,
+            action_originator: try_spree_current_user
+          )
+        )
+
+        if @store_credit.save
+          flash[:success] = flash_message_for(@store_credit, :successfully_created)
+          redirect_to admin_user_store_credits_path(@user)
+        else
+          load_categories
+          flash[:error] = Spree.t('store_credit.errors.unable_to_create')
+          render :new
+        end
+      end
+
+      def update
+        @store_credit.assign_attributes(permitted_store_credit_params)
+        @store_credit.created_by = try_spree_current_user
+
+        if @store_credit.save
+          flash[:success] = flash_message_for(@store_credit, :successfully_updated)
+          redirect_to admin_user_store_credits_path(@user)
+        else
+          load_categories
+          flash[:error] = Spree.t('store_credit.errors.unable_to_update')
+          render :edit
+        end
+      end
+
+      def destroy
+        @store_credit = @user.store_credits.find(params[:id])
+        ensure_unused_store_credit
+
+        if @store_credit.destroy
+          respond_with(@store_credit) do |format|
+            format.html { redirect_to admin_user_store_credits_path(@user) }
+            format.js { render_js_for_destroy }
+          end
+        else
+          render text: Spree.t('store_credit.errors.unable_to_delete'), status: :unprocessable_entity
+        end
+      end
+
+      protected
+
+      def permitted_store_credit_params
+        params.require(:store_credit).permit(permitted_store_credit_attributes).
+          merge(currency: Spree::Config[:currency])
+      end
+
+      private
+
+      def load_user
+        @user = Spree.user_class.find_by(id: params[:user_id])
+
+        unless @user
+          flash[:error] = Spree.t(:user_not_found)
+          redirect_to admin_path
+        end
+      end
+
+      def load_categories
+        @credit_categories = Spree::StoreCreditCategory.order(:name)
+      end
+
+      def load_store_credit
+        @store_credit = Spree::StoreCredit.find_by_id(params[:id]) || Spree::StoreCredit.new
+      end
+
+      def ensure_unused_store_credit
+        unless @store_credit.amount_used.zero?
+          raise StoreCreditError.new(Spree.t('store_credit.errors.cannot_change_used_store_credit'))
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/tax_categories_controller.rb

@@ -0,0 +1,6 @@
+module Spree
+  module Admin
+    class TaxCategoriesController < ResourceController
+    end
+  end
+end

data/app/controllers/spree/admin/tax_rates_controller.rb

@@ -0,0 +1,15 @@
+module Spree
+  module Admin
+    class TaxRatesController < ResourceController
+      before_action :load_data
+
+      private
+
+      def load_data
+        @available_zones = Zone.order(:name)
+        @available_categories = TaxCategory.order(:name)
+        @calculators = TaxRate.calculators.sort_by(&:name)
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/taxonomies_controller.rb

@@ -0,0 +1,15 @@
+module Spree
+  module Admin
+    class TaxonomiesController < ResourceController
+      private
+
+      def location_after_save
+        if @taxonomy.created_at == @taxonomy.updated_at
+          edit_admin_taxonomy_url(@taxonomy)
+        else
+          admin_taxonomies_url
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/taxons_controller.rb

@@ -0,0 +1,126 @@
+module Spree
+  module Admin
+    class TaxonsController < Spree::Admin::BaseController
+
+      before_action :load_taxonomy, only: [:create, :edit, :update]
+      before_action :load_taxon, only: [:edit, :update]
+      respond_to :html, :json, :js
+
+      def index
+
+      end
+
+      def search
+        if params[:ids]
+          @taxons = Spree::Taxon.where(id: params[:ids].split(','))
+        else
+          @taxons = Spree::Taxon.limit(20).ransack(name_cont: params[:q]).result
+        end
+      end
+
+      def create
+        @taxon = @taxonomy.taxons.build(params[:taxon])
+        if @taxon.save
+          respond_with(@taxon) do |format|
+            format.json { render json: @taxon.to_json }
+          end
+        else
+          flash[:error] = Spree.t('errors.messages.could_not_create_taxon')
+          respond_with(@taxon) do |format|
+            format.html { redirect_to @taxonomy ? edit_admin_taxonomy_url(@taxonomy) : admin_taxonomies_url }
+          end
+        end
+      end
+
+      def edit
+        @permalink_part = @taxon.permalink.split("/").last
+      end
+
+      def update
+        parent_id = params[:taxon][:parent_id]
+        set_position
+        set_parent(parent_id)
+
+        @taxon.save!
+
+        # regenerate permalink
+        regenerate_permalink if parent_id
+
+        set_permalink_params
+
+        #check if we need to rename child taxons if parent name or permalink changes
+        @update_children = true if params[:taxon][:name] != @taxon.name || params[:taxon][:permalink] != @taxon.permalink
+
+        if @taxon.update_attributes(taxon_params)
+          flash[:success] = flash_message_for(@taxon, :successfully_updated)
+        end
+
+        #rename child taxons
+        rename_child_taxons if @update_children
+
+        respond_with(@taxon) do |format|
+          format.html { redirect_to edit_admin_taxonomy_url(@taxonomy) }
+          format.json { render json: @taxon.to_json }
+        end
+      end
+
+      def destroy
+        @taxon = Taxon.find(params[:id])
+        @taxon.destroy
+        respond_with(@taxon) { |format| format.json { render json: '' } }
+      end
+
+      private
+
+      def taxon_params
+        params.require(:taxon).permit(permitted_taxon_attributes)
+      end
+
+      def load_taxon
+        @taxon = @taxonomy.taxons.find(params[:id])
+      end
+
+      def load_taxonomy
+        @taxonomy = Taxonomy.find(params[:taxonomy_id])
+      end
+
+      def set_position
+        new_position = params[:taxon][:position]
+        if new_position
+          @taxon.child_index = new_position.to_i
+        end
+      end
+
+      def set_parent(parent_id)
+        if parent_id
+          @taxon.parent = Taxon.find(parent_id.to_i)
+        end
+      end
+
+      def set_permalink_params
+        if params.key? "permalink_part"
+          parent_permalink = @taxon.permalink.split("/")[0...-1].join("/")
+          parent_permalink += "/" unless parent_permalink.blank?
+          params[:taxon][:permalink] = parent_permalink + params[:permalink_part]
+        end
+      end
+
+      def rename_child_taxons
+        @taxon.descendants.each do |taxon|
+          reload_taxon_and_set_permalink(taxon)
+        end
+      end
+
+      def regenerate_permalink
+        reload_taxon_and_set_permalink(@taxon)
+        @update_children = true
+      end
+
+      def reload_taxon_and_set_permalink(taxon)
+        taxon.reload
+        taxon.set_permalink
+        taxon.save!
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/trackers_controller.rb

@@ -0,0 +1,6 @@
+module Spree
+  module Admin
+    class TrackersController < ResourceController
+    end
+  end
+end

data/app/controllers/spree/admin/users_controller.rb

@@ -0,0 +1,145 @@
+module Spree
+  module Admin
+    class UsersController < ResourceController
+      rescue_from Spree::Core::DestroyWithOrdersError, :with => :user_destroy_with_orders_error
+
+      after_action :sign_in_if_change_own_password, only: :update
+
+      # http://spreecommerce.com/blog/2010/11/02/json-hijacking-vulnerability/
+      before_action :check_json_authenticity, only: :index
+
+      def index
+        respond_with(@collection) do |format|
+          format.html
+          format.json { render :json => json_data }
+        end
+      end
+
+      def show
+        redirect_to edit_admin_user_path(@user)
+      end
+
+      def create
+        @user = Spree.user_class.new(user_params)
+        if @user.save
+          flash.now[:success] = flash_message_for(@user, :successfully_created)
+          render :edit
+        else
+          render :new
+        end
+      end
+
+      def update
+        if params[:user][:password].blank? && params[:user][:password_confirmation].blank?
+          params[:user].delete(:password)
+          params[:user].delete(:password_confirmation)
+        end
+
+        if @user.update_attributes(user_params)
+          flash.now[:success] = Spree.t(:account_updated)
+        end
+
+        render :edit
+      end
+
+      def addresses
+        if request.put?
+          if @user.update_attributes(user_params)
+            flash.now[:success] = Spree.t(:account_updated)
+          end
+
+          render :addresses
+        end
+      end
+
+      def orders
+        params[:q] ||= {}
+        @search = Spree::Order.reverse_chronological.ransack(params[:q].merge(user_id_eq: @user.id))
+        @orders = @search.result.page(params[:page]).per(Spree::Config[:admin_products_per_page])
+      end
+
+      def items
+        params[:q] ||= {}
+        @search = Spree::Order.includes(
+          line_items: {
+            variant: [:product, { option_values: :option_type }]
+          }).ransack(params[:q].merge(user_id_eq: @user.id))
+        @orders = @search.result.page(params[:page]).per(Spree::Config[:admin_products_per_page])
+      end
+
+      def generate_api_key
+        if @user.generate_spree_api_key!
+          flash[:success] = Spree.t('api.key_generated')
+        end
+        redirect_to edit_admin_user_path(@user)
+      end
+
+      def clear_api_key
+        if @user.clear_spree_api_key!
+          flash[:success] = Spree.t('api.key_cleared')
+        end
+        redirect_to edit_admin_user_path(@user)
+      end
+
+      def model_class
+        Spree.user_class
+      end
+
+      protected
+
+        def collection
+          return @collection if @collection.present?
+          @collection = super
+          if request.xhr? && params[:q].present?
+            @collection = @collection.includes(:bill_address, :ship_address)
+                              .where("spree_users.email #{LIKE} :search
+                                     OR (spree_addresses.firstname #{LIKE} :search AND spree_addresses.id = spree_users.bill_address_id)
+                                     OR (spree_addresses.lastname  #{LIKE} :search AND spree_addresses.id = spree_users.bill_address_id)
+                                     OR (spree_addresses.firstname #{LIKE} :search AND spree_addresses.id = spree_users.ship_address_id)
+                                     OR (spree_addresses.lastname  #{LIKE} :search AND spree_addresses.id = spree_users.ship_address_id)",
+                                    { :search => "#{params[:q].strip}%" })
+                              .limit(params[:limit] || 100)
+          else
+            @search = @collection.ransack(params[:q])
+            @collection = @search.result.page(params[:page]).per(Spree::Config[:admin_products_per_page])
+          end
+        end
+
+      private
+
+      def user_params
+        params.require(:user).permit(permitted_user_attributes |
+                                     [spree_role_ids: [],
+                                      ship_address_attributes: permitted_address_attributes,
+                                      bill_address_attributes: permitted_address_attributes])
+      end
+
+      # handling raise from Spree::Admin::ResourceController#destroy
+      def user_destroy_with_orders_error
+        invoke_callbacks(:destroy, :fails)
+        render status: :forbidden, text: Spree.t(:error_user_destroy_with_orders)
+      end
+
+      # Allow different formats of json data to suit different ajax calls
+      def json_data
+        json_format = params[:json_format] || 'default'
+        case json_format
+        when 'basic'
+          collection.map { |u| { 'id' => u.id, 'name' => u.email } }.to_json
+        else
+          address_fields = [:firstname, :lastname, :address1, :address2, :city, :zipcode, :phone, :state_name, :state_id, :country_id]
+          includes = { only: address_fields, include: { state: { only: :name }, country: { only: :name } } }
+
+          collection.to_json(only: [:id, :email], include:
+                             { bill_address: includes, ship_address: includes })
+        end
+      end
+
+      def sign_in_if_change_own_password
+        if try_spree_current_user == @user && @user.password.present?
+          sign_in(@user, event: :authentication, bypass: true)
+        end
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/variants_controller.rb

@@ -0,0 +1,57 @@
+module Spree
+  module Admin
+    class VariantsController < ResourceController
+      belongs_to 'spree/product', :find_by => :slug
+      new_action.before :new_before
+      before_action :load_data, only: [:new, :create, :edit, :update]
+
+      # override the destroy method to set deleted_at value
+      # instead of actually deleting the product.
+      def destroy
+        @variant = Variant.find(params[:id])
+        if @variant.destroy
+          flash[:success] = Spree.t('notice_messages.variant_deleted')
+        else
+          flash[:error] = Spree.t('notice_messages.variant_not_deleted')
+        end
+
+        respond_with(@variant) do |format|
+          format.html { redirect_to admin_product_variants_url(params[:product_id]) }
+          format.js { render_js_for_destroy }
+        end
+      end
+
+      protected
+
+      def new_before
+        master = @object.product.master
+        @object.attributes = master.attributes.except(
+          'id', 'created_at', 'deleted_at', 'sku', 'is_master'
+        )
+        # Shallow Clone of the default price to populate the price field.
+        @object.default_price = master.default_price.clone if master.default_price.present?
+      end
+
+      def parent
+        @product = Product.with_deleted.friendly.find(params[:product_id])
+      end
+
+      def collection
+        @deleted = (params.key?(:deleted) && params[:deleted] == "on") ? "checked" : ""
+        @collection ||=
+          if @deleted.blank?
+            super.includes(:default_price, option_values: :option_type)
+          else
+            Variant.only_deleted.where(product_id: parent.id)
+          end
+        @collection
+      end
+
+      private
+
+      def load_data
+        @tax_categories = TaxCategory.order(:name)
+      end
+    end
+  end
+end

data/app/controllers/spree/admin/variants_including_master_controller.rb

@@ -0,0 +1,16 @@
+module Spree
+  module Admin
+    class VariantsIncludingMasterController < VariantsController
+      belongs_to "spree/product", find_by: :slug
+
+      def model_class
+        Spree::Variant
+      end
+
+      def object_name
+        "variant"
+      end
+
+    end
+  end
+end

data/app/controllers/spree/admin/zones_controller.rb

@@ -0,0 +1,26 @@
+module Spree
+  module Admin
+    class ZonesController < ResourceController
+      before_action :load_data, except: :index
+
+      def new
+        @zone.zone_members.build
+      end
+
+      protected
+
+        def collection
+          params[:q] ||= {}
+          params[:q][:s] ||= "name asc"
+          @search = super.ransack(params[:q])
+          @zones = @search.result.page(params[:page]).per(params[:per_page])
+        end
+
+        def load_data
+          @countries = Country.order(:name)
+          @states = State.order(:name)
+          @zones = Zone.order(:name)
+        end
+    end
+  end
+end

data/app/helpers/spree/admin/adjustments_helper.rb

@@ -0,0 +1,37 @@
+module Spree
+  module Admin
+    module AdjustmentsHelper
+
+      def display_adjustable(adjustable)
+        case adjustable
+          when Spree::LineItem
+            display_line_item(adjustable)
+          when Spree::Shipment
+            display_shipment(adjustable)
+          when Spree::Order
+            display_order(adjustable)
+        end
+
+      end
+
+      private
+
+      def display_line_item(line_item)
+        variant = line_item.variant
+        parts = []
+        parts << variant.product.name
+        parts << "(#{variant.options_text})" if variant.options_text.present?
+        parts << line_item.display_total
+        safe_join(parts, "<br />".html_safe)
+      end
+
+      def display_shipment(shipment)
+        "#{Spree.t(:shipment)} ##{shipment.number}<br>#{shipment.display_cost}".html_safe
+      end
+
+      def display_order(order)
+        Spree.t(:order)
+      end
+    end
+  end
+end