houston-core 0.5.0.beta1

data/app/controllers/sessions_controller.rb

@@ -0,0 +1,8 @@
+class SessionsController < Devise::SessionsController
+  before_filter :store_location, :only => [:new]
+  
+  def store_location
+    session["user_redirect_to"] = request.referer unless request.referer =~ /\/users\/sign_in/
+  end
+  
+end

data/app/controllers/settings_controller.rb

@@ -0,0 +1,14 @@
+class SettingsController < ApplicationController
+  load_and_authorize_resource
+  
+  def show
+    @settings = Settings.new
+  end
+  
+  def update
+    @settings = Settings.new(params[:settings])
+    @settings.save!
+    redirect_to settings_path, :notice => "Changes saved"
+  end
+  
+end

data/app/controllers/sprint_task_locks_controller.rb

@@ -0,0 +1,47 @@
+class SprintTaskLocksController < ApplicationController
+  before_filter :authenticate_user!
+  before_filter :find_sprint_and_task
+  
+  attr_reader :sprint, :task
+  
+  
+  def create
+    if sprint.completed?
+      render json: {base: ["The Sprint is completed. You cannot check out or check in tasks."]}, status: :unprocessable_entity
+      return
+    end
+    
+    if task.checked_out?(sprint)
+      render json: {base: ["Task ##{task.shorthand} is already checked out"]}, status: 422
+    else
+      task.check_out!(sprint, current_user)
+      head :ok
+    end
+  end
+  
+  
+  def destroy
+    if sprint.completed?
+      render json: {base: ["The Sprint is completed. You cannot check out or check in tasks."]}, status: :unprocessable_entity
+      return
+    end
+    
+    if task.checked_out_by_me?(sprint, current_user)
+      task.check_in!(sprint)
+      head :ok
+    elsif task.checked_out?(sprint)
+      render json: {base: ["Ticket ##{task.shorthand} is checked out. You cannot check it in"]}, status: 422
+    else
+      head :ok
+    end
+  end
+  
+  
+private
+  
+  def find_sprint_and_task
+    @sprint = Sprint.find params[:id]
+    @task = Task.find params[:task_id]
+  end
+  
+end

data/app/controllers/sprints_controller.rb

@@ -0,0 +1,99 @@
+class SprintsController < ApplicationController
+  attr_reader :sprint, :task
+  
+  before_filter :authenticate_user!, except: [:dashboard]
+  before_filter :find_sprint, only: [:show, :lock, :add_task, :remove_task]
+  before_filter :find_task, only: [:add_task, :remove_task]
+  
+  
+  def current
+    @sprint = Sprint.current || Sprint.create!
+    redirect_to sprint
+  end
+  
+  
+  def show
+    authorize! :read, sprint
+    @title = "Sprint #{sprint.end_date.strftime("%-m/%-d")}"
+    @open_tasks = Task.joins(:ticket => :project).merge(Ticket.open) unless sprint.completed?
+    @tasks = @sprint.tasks
+    render template: "sprints/show"
+  end
+  
+  
+  def dashboard
+    @title = "Sprint"
+    @sprint = Sprint.find_by_id(params[:id]) || Sprint.current || Sprint.create!
+    
+    respond_to do |format|
+      format.json { render json: {
+        start: @sprint.start_date,
+        tasks: SprintTaskPresenter.new(@sprint).as_json } }
+      format.html { render layout: "dashboard" }
+    end
+  end
+  
+  
+  def lock
+    authorize! :manage, sprint
+    sprint.lock!
+    head :ok
+  end
+  
+  
+  def add_task
+    authorize! :update, sprint
+    
+    if sprint.completed?
+      render json: {base: ["The Sprint is completed. You cannot add or remove tasks."]}, status: :unprocessable_entity
+      return
+    end
+    
+    if sprint.locked? && !task.ticket_id.in?(sprint.ticket_ids)
+      render json: {base: ["The Sprint is locked. You can add tasks for tickets that are already in the Sprint, but you can't add new tickets to the Sprint."]}, status: :unprocessable_entity
+      return
+    end
+    
+    # Putting a task into a Sprint implies that you're able to estimate this ticket
+    task.ticket.able_to_estimate! if task.ticket.respond_to?(:able_to_estimate!)
+    
+    if task.completed? && task.completed_at < sprint.starts_at
+      render json: {base: ["Task ##{task.shorthand} cannot be added to the Sprint because it was completed before the Sprint began"]}, status: :unprocessable_entity
+    elsif task.effort.nil? or task.effort.zero?
+      render json: {base: ["Task ##{task.shorthand} cannot be added to the Sprint because it has no effort"]}, status: :unprocessable_entity
+    else
+      sprint.tasks.add task
+      task.check_out!(sprint, current_user) unless task.checked_out?(sprint)
+      render json: SprintTaskPresenter.new(sprint, task).to_json
+    end
+  end
+  
+  def remove_task
+    authorize! :update, sprint
+    
+    if sprint.completed?
+      render json: {base: ["The Sprint is completed. You cannot add or remove tasks."]}, status: :unprocessable_entity
+      return
+    end
+    
+    if sprint.locked?
+      render json: {base: ["The Sprint is locked; tasks cannot be removed"]}, status: :unprocessable_entity
+      return
+    end
+    
+    SprintTask.where(sprint_id: sprint.id, task_id: task.id).delete_all
+    head :ok
+  end
+  
+  
+private
+  
+  def find_sprint
+    @sprint = Sprint.find(params[:id])
+  end
+  
+  def find_task
+    @task = Task.find(params[:task_id])
+  end
+  
+end

data/app/controllers/tasks_controller.rb

@@ -0,0 +1,40 @@
+class TasksController < ApplicationController
+  before_filter :find_task
+  
+  attr_reader :task
+  
+  def update
+    authorize! :update, task
+    
+    project = task.project
+    effort = params[:effort]
+    effort = effort.to_d if effort
+    effort = nil if effort && effort <= 0
+    task.updated_by = current_user
+    task.update_attributes effort: effort
+    render json: [], status: :ok
+  end
+  
+  def complete
+    authorize! :update, task
+    
+    # !todo: authorize completing a task
+    task.complete! unless task.completed?
+    render json: TaskPresenter.new(task)
+  end
+  
+  def reopen
+    authorize! :update, task
+    
+    # !todo: authorize completing a task
+    task.reopen! unless task.open?
+    render json: TaskPresenter.new(task)
+  end
+  
+private
+  
+  def find_task
+    @task = Task.find params[:id]
+  end
+  
+end

data/app/controllers/test_runs_controller.rb

@@ -0,0 +1,35 @@
+class TestRunsController < ApplicationController
+  before_filter :find_test_run
+  
+  def show
+    @title = "Test Results for #{@test_run.sha[0...8]}"
+    render template: "project_notification/test_run"
+  end
+  
+  def confirm_retry
+  end
+  
+  def retry
+    @test_run.retry!
+    
+    build_url = if @project.ci_server.respond_to? :last_build_progress_url
+      @project.ci_server.last_build_progress_url
+    elsif @project.ci_server.respond_to? :last_build_url
+      @project.ci_server.last_build_url
+    end
+    
+    if build_url
+      redirect_to build_url
+    else
+      redirect_to root_url, notice: "Build for #{@project.name} retried"
+    end
+  end
+  
+private
+  
+  def find_test_run
+    @project = Project.find_by_slug!(params[:slug])
+    @test_run = @project.test_runs.find_by_sha(params[:commit]) || (raise ActiveRecord::RecordNotFound)
+  end
+  
+end

data/app/controllers/tester_bar_controller.rb

@@ -0,0 +1,12 @@
+class TesterBarController < ApplicationController
+  
+  def login_as
+    user = User.find_by_email(params[:email])
+    if user
+      flash[:notice] = "You have signed in as #{user.name}"
+      sign_in(user)
+    end
+    redirect_to request.referrer || root_url
+  end
+  
+end

data/app/controllers/testing_notes_controller.rb

@@ -0,0 +1,50 @@
+class TestingNotesController < ApplicationController
+  before_filter :find_ticket
+  before_filter :find_testing_note, :only => [:destroy, :update]
+  before_filter :authenticate_user!, :only => [:create, :update, :destroy]
+  
+  
+  def create
+    @testing_note = current_user.testing_notes.build(params[:testing_note].merge(project: @ticket.project))
+    
+    authorize! :create, @testing_note
+    @testing_note.save
+    render_testing_note
+  end
+  
+  
+  def update
+    authorize! :update, @testing_note
+    
+    @testing_note.update_attributes(params[:testing_note])
+    render_testing_note
+  end
+  
+  
+  def destroy
+    authorize! :destroy, @testing_note
+    
+    @testing_note.destroy
+    head 204
+  end
+  
+  
+private
+  
+  def find_ticket
+    @ticket = Ticket.find(params[:ticket_id])
+  end
+  
+  def find_testing_note
+    @testing_note = @ticket.testing_notes.find(params[:id])
+  end
+  
+  def render_testing_note
+    if @testing_note.errors.any?
+      render json: @testing_note.errors, :status => :unprocessable_entity
+    else
+      render json: TestingNotePresenter.new(@testing_note)
+    end
+  end
+  
+end

data/app/controllers/testing_report_controller.rb

@@ -0,0 +1,38 @@
+class TestingReportController < ApplicationController
+  before_filter :authenticate_user!
+  before_filter :find_project, only: [:show]
+  
+  
+  def index
+    @title = "Testing Report"
+    
+    @projects = followed_projects.select { |project| can?(:read, project.testing_notes.build) }
+    @tickets = Ticket.for_projects @projects
+  end
+  
+  
+  def show
+    @title = "Testing Report • #{@project.name}"
+    authorize! :show, @project.testing_notes.build
+    
+    @projects = [@project]
+    @tickets = @project.tickets
+  end
+  
+  
+private
+  
+  
+  def find_project
+    @project = Project.find_by_slug!(params[:slug])
+  end
+  
+  
+  def default_render
+    @tickets = TestingReportTicketPresenter.new(@tickets).as_json
+    render json: @tickts if request.xhr?
+    super
+  end
+  
+  
+end

data/app/controllers/tickets_controller.rb

@@ -0,0 +1,48 @@
+class TicketsController < ApplicationController
+  before_filter :find_ticket, only: [:show, :update, :close, :reopen]
+  
+  attr_reader :ticket
+  
+  def show
+    render json: FullTicketPresenter.new(ticket)
+  end
+  
+  def update
+    params[:last_release_at] = params.fetch(:lastReleaseAt, params[:last_release_at])
+    attributes = params.pick(:last_release_at, :priority, :summary, :description)
+
+    if ticket.update_attributes(attributes)
+      render json: []
+    else
+      render json: ticket.errors, status: :unprocessable_entity
+    end
+  end
+  
+  def new
+    @projects = followed_projects.select(&:has_ticket_tracker?)
+  end
+  
+  def close
+    authorize! :close, ticket
+    ticket.close!
+    render json: []
+  rescue
+    render json: [$!.message], status: :unprocessable_entity
+  end
+  
+  def reopen
+    authorize! :close, ticket
+    ticket.reopen!
+    render json: []
+  rescue
+    render json: [$!.message], status: :unprocessable_entity
+  end
+  
+private
+  
+  def find_ticket
+    @ticket = Ticket.find(params[:id])
+    @ticket.updated_by = current_user
+  end
+  
+end

data/app/controllers/uploads_controller.rb

@@ -0,0 +1,56 @@
+require 'base64'
+require 'openssl'
+require 'digest/sha1'
+
+class UploadsController < ApplicationController
+  
+  
+  # Using dropzone to upload straight to S3
+  # https://github.com/enyo/dropzone/issues/33
+  #
+  # Browser Uploads to S3 using HTML POST Forms
+  # http://aws.amazon.com/articles/1434
+  #
+  # Direct Browser Uploading – Amazon S3, CORS, FileAPI, XHR2 and Signed PUTs
+  # http://www.ioncannon.net/programming/1539/direct-browser-uploading-amazon-s3-cors-fileapi-xhr2-and-signed-puts/
+  #
+  # Configuring CORS on an S3 bucket
+  # https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html
+  #
+  # Granting Access to a Single S3 Bucket Using Amazon IAM
+  # http://mikeferrier.com/2011/10/27/granting-access-to-a-single-s3-bucket-using-amazon-iam/
+  def policies
+    ext = File.extname(params[:name])
+    unique_file_name = params.values_at(:name, :size, :type).join(".")
+    filename = Digest::SHA1.hexdigest(unique_file_name) + ext
+    object_name = "uploads/#{current_user.id}/#{filename}"
+    
+    policy_document = MultiJson.dump({
+      "expiration" => 1.day.from_now.utc.iso8601,
+      "conditions" => [
+        {"bucket" => Houston.config.s3[:bucket]},
+        ["starts-with", "$key", "uploads/"],
+        {"acl" => "public-read"},
+        {"success_action_status" => "201"},
+        ["content-length-range", 0, 3 * 1048576] # 3 MB
+      ]})
+    
+    policy = Base64.encode64(policy_document).gsub("\n","")
+    
+    signature = Base64.encode64(
+        OpenSSL::HMAC.digest(
+            OpenSSL::Digest::Digest.new("sha1"), 
+            Houston.config.s3[:secret], policy)
+        ).gsub("\n","")
+    
+    render json: {
+      "AWSAccessKeyId" => Houston.config.s3[:access_key],
+      key: object_name,
+      policy: policy,
+      signature: signature,
+      success_action_status: 201,
+      acl: "public-read" }
+  end
+  
+  
+end