itsf_backend 1.0.1

data/app/policies/itsf/backend/base_policy.rb

@@ -0,0 +1,67 @@
+module Itsf::Backend
+  class BasePolicy
+    attr_reader :user, :record
+
+    def initialize(user, record)
+      @user = user
+      @record = record
+    end
+
+    def index?
+      # false
+      authorize_with_rbac(user, record, __method__)
+    end
+
+    def show?
+      scope.where(id: record.id).exists?
+    end
+
+    def create?
+      # false
+      authorize_with_rbac(user, record, __method__)
+    end
+
+    def new?
+      create?
+    end
+
+    def update?
+      # false
+      authorize_with_rbac(user, record, __method__)
+    end
+
+    def edit?
+      update?
+    end
+
+    def destroy?
+      # false
+      authorize_with_rbac(user, record, __method__)
+    end
+
+    def scope
+      Pundit.policy_scope!(user, record.class)
+    end
+
+    class Scope
+      attr_reader :user, :scope
+
+      def initialize(user, scope)
+        @user = user
+        @scope = scope
+      end
+
+      def resolve
+        scope
+      end
+    end
+
+    private
+
+    def authorize_with_rbac(user, record, method_name)
+      resource_name = record.class == Class ? record.name : record.class.name
+      permission_identifier = "#{resource_name.underscore}/#{method_name.to_s.chomp('?')}"
+      allowed = user.respond_to?(:allowed_to?) ? user.allowed_to?(permission_identifier) : true
+    end
+  end
+end

data/app/policies/itsf/backend/dashboard_policy.rb

@@ -0,0 +1,14 @@
+module Itsf::Backend
+  class DashboardPolicy < Struct.new(:user, :dashboard)
+    def access?
+      permission_identifier = self.class.name.gsub('Policy', '').underscore
+      allowed = user.respond_to?(:allowed_to?) ? user.allowed_to?(permission_identifier) : true
+      if allowed
+        Rails.logger.info "Allowed access to #{permission_identifier} for #{user}"
+      else
+        Rails.logger.info "Denied access to #{permission_identifier} for #{user}"
+      end
+      allowed
+    end
+  end
+end

data/app/policies/itsf/backend/engine_policy.rb

@@ -0,0 +1,14 @@
+module Itsf::Backend
+  class EnginePolicy < Struct.new(:user, :engine)
+    def access?
+      permission_identifier = self.class.name.gsub('Policy', '').underscore
+      allowed = user.respond_to?(:allowed_to?) ? user.allowed_to?(permission_identifier) : true
+      if allowed
+        Rails.logger.debug "User #{user} is allowed to access #{permission_identifier}"
+      else
+        Rails.logger.debug "User #{user} is not allowed to access #{permission_identifier}"
+      end
+      allowed
+    end
+  end
+end

data/app/policies/itsf/backend/service/base_policy.rb

@@ -0,0 +1,29 @@
+module Itsf::Backend
+  class Service::BasePolicy
+    attr_reader :user, :service
+
+    def initialize(user, service)
+      @user = user
+      @service = service
+    end
+
+    def index?
+      authorize_with_rbac(user, service, __method__)
+    end
+
+    def invoke?
+      authorize_with_rbac(user, service, __method__)
+    end
+
+    def call?
+      invoke?
+    end
+
+    private
+
+    def authorize_with_rbac(user, service_class, method_name)
+      permission_identifier = "#{service_class.name.underscore}/#{method_name.to_s.chomp('?')}"
+      user.respond_to?(:allowed_to?) ? user.allowed_to?(permission_identifier) : true
+    end
+  end
+end

data/app/presenters/bootstrap_table_presenter.rb.old

@@ -0,0 +1,106 @@
+class BootstrapTablePresenter < Admino::Table::Presenter
+  private
+
+  def table_html_options
+    { class: 'table table-striped table-hover table-admino table-scrollable table-condensed' }
+  end
+
+  def head_row(collection_klass, query, view_context)
+    HeadRow.new(collection_klass, query, view_context)
+  end
+
+  def resource_row(resource, view_context)
+    ResourceRow.new(resource, view_context)
+  end
+
+  class HeadRow < Admino::Table::HeadRow
+    def column(*args, &block)
+      attribute_name, label, html_options = parse_column_args(args)
+
+      if label.nil?
+        label = column_label(attribute_name)
+      elsif label.is_a? Symbol
+        label = column_label(label)
+      end
+
+      html_options = complete_column_html_options(
+        attribute_name,
+        html_options
+      )
+
+      # sorting_scope = html_options.delete(:sorting)
+      # sorting_html_options = html_options.delete(:sorting_html_options) { {} }
+
+      # if sorting_scope
+      #   raise ArgumentError, 'query object is required' unless query
+      #   label = query.sorting.scope_link(sorting_scope, label, sorting_html_options)
+      # end
+      if Itsf::Backend.features?(:ransack)
+        html_options.reverse_merge!(sortable: true, sortable_options: [])
+        sortable = html_options.delete(:sortable)
+        sortable_options = html_options.delete(:sortable_options)
+        if sortable_options.empty?
+          sortable_options << attribute_name
+          sortable_options << resource_klass.human_attribute_name(attribute_name) 
+        end
+
+
+        if sortable
+          label = h.sort_link(h.instance_variable_get("@q"), *sortable_options)
+          # label = h.sort_link(h.instance_variable_get("@q"), attribute_name)
+        else
+          label = label.to_s
+        end
+      end
+
+      @columns << h.content_tag(:th, label, html_options)
+    end
+  end
+
+  class ResourceRow < Admino::Table::ResourceRow
+    # def to_html
+    #   buffer = @columns
+
+    #   if @actions.any?
+    #     html_options = column_html_options(:actions)
+    #     buffer << h.content_tag(:td, html_options) do
+    #       actions_wrapper do
+    #         @actions.join(" ").html_safe
+    #       end
+    #     end
+    #   end
+
+    #   buffer.html_safe
+    # end
+
+    # def actions_wrapper(&block)
+    #   h.content_tag(:div, { class: 'btn-group' }, &block)
+    # end
+
+    # def edit_action_url
+    #   view_context.edit_resource_url(resource)
+    # end
+
+    # def destroy_action_url
+    #   view_context.resource_url(resource)
+    # end
+
+    # def show_action_html_options
+    #   { class: 'btn btn-default btn-xs' }
+    # end
+
+    # def edit_action_html_options
+    #   { class: 'btn btn-default btn-xs' }
+    # end
+
+    # def destroy_action_html_options
+    #   {
+    #     method: :delete,
+    #     class: 'btn btn-danger btn-xs',
+    #     data: {
+    #       confirm: I18n.t('confirmations.delete')
+    #     }
+    #   }
+    # end
+  end
+end

data/app/views/itsf/backend/dashboard/_dashboard_panel.html.haml

@@ -0,0 +1,18 @@
+.panel.panel-default.panel-with-actions.itsf-dashboard-panel
+  .panel-heading
+    .panel-title
+      = t("classes.#{engine.name.underscore}")
+    .panel-actions
+      = link_to(t('.view'), main_app.send("#{engine.engine_name}_path"), class: 'btn btn-primary btn-xs')
+
+  %table.table.table-striped.table-hover.table-condensed
+    - "#{engine.to_s.deconstantize}::Configuration".constantize.registered_controllers.call.each do |kontroller|
+      - if !Itsf::Backend.features?(:pundit) || policy(kontroller.resource_class).index?
+        %tr
+          %th.col-md-3= kontroller.resource_class.model_name.human(count: :other)
+          %td.item-count
+            %span.label.label-default
+              - if respond_to?(:current_user) && current_user.respond_to?(:last_sign_in_at) && kontroller.resource_class.respond_to?(:column_names) && kontroller.resource_class.column_names.include?('updated_at')
+                = "#{kontroller.resource_class.where("updated_at > ?", current_user.last_sign_in_at).count}/#{kontroller.resource_class.count}"
+              - else
+                = kontroller.resource_class.count

data/app/views/itsf/backend/dashboard/index.html.haml

@@ -0,0 +1,7 @@
+#page-title.bottom-margin-1
+  %h3= t('.title', engine_name: t(controller.class.name.deconstantize.underscore.gsub('/', '_')))
+
+- Itsf::Backend::Configuration.backend_engines.each do |engine|
+  - if !Itsf::Backend.features?(:pundit) || engine_policy(engine).access?
+    .col-lg-6= render 'dashboard_panel', engine: engine
+

data/app/views/itsf/backend/home/_dashboard_panel.html.haml

@@ -0,0 +1,26 @@
+.panel.panel-default
+  .panel-heading
+    .panel-title
+      = t(".resources")
+  %table.table.table-striped.table-hover.table-condensed
+    - "#{engine.to_s.deconstantize}::Configuration".constantize.registered_controllers.call.each do |kontroller|
+      %tr
+        %th.col-md-3= kontroller.resource_class.model_name.human(count: :other)
+        %td.text-left
+          %span.label.label-default
+            - if respond_to?(:current_user) && current_user.respond_to?(:last_sign_in_at) && kontroller.resource_class.respond_to?(:column_names) && kontroller.resource_class.column_names.include?('updated_at')
+              = "#{kontroller.resource_class.where("updated_at > ?", current_user.last_sign_in_at).count}/#{kontroller.resource_class.count}"
+            - else
+              = kontroller.resource_class.count
+        %td.text-right= link_to(t('.view'), { controller: kontroller.name.underscore.gsub('_controller', '') }, id: "link-to-#{kontroller.name.underscore.gsub('_controller', '').gsub(/[\/_]/, '-')}-index" ,class: 'btn btn-primary btn-xs')
+
+
+.panel.panel-default
+  .panel-heading
+    .panel-title
+      = t(".services")
+  %table.table.table-striped.table-hover.table-condensed
+    - "#{engine.to_s.deconstantize}::Configuration".constantize.registered_services.call.each do |kontroller|
+      %tr
+        %th.col-md-3= t("classes.#{kontroller.service_class.name.underscore}")
+        %td.text-right= link_to(t('.view'), { controller: kontroller.name.underscore.gsub('_controller', '') }, id: "link-to-#{kontroller.name.underscore.gsub('_controller', '').gsub(/[\/_]/, '-')}-invoke" ,class: 'btn btn-primary btn-xs')

data/app/views/itsf/backend/home/index.html.haml

@@ -0,0 +1,14 @@
+#page-title.bottom-margin-1
+  %h3= t('.title', engine_name: t("classes.#{engine.name.underscore}"))
+
+.col-lg-12= render 'dashboard_panel', engine: engine
+
+.col-lg-12= render 'index_extras', engine: engine
+
+.col-lg-12
+  .well.well-sm
+    .btn-container-right
+      - if main_app.respond_to?(:itsf_backend_path)
+        = link_to(main_app.itsf_backend_path, class: 'btn btn-default btn-responsive') do
+          %span.glyphicon.glyphicon-arrow-left
+          %span.btn-text= t('.back')

data/app/views/itsf/backend/i18n/_navigation.html.haml

@@ -0,0 +1,10 @@
+%li.dropdown.active
+  = link_to('#', { class: 'dropdown-toggle', 'data-toggle': 'dropdown', role: 'button', 'aria-haspopup': true, 'aria-expanded': false }) do
+    = t("classes.#{I18n.name.underscore}")
+    %span.caret
+  %ul.dropdown-menu
+    - I18n.available_locales.reject{ |l| I18n.locale == l }.each do |locale|
+      %li{ class: (I18n.locale == locale ? 'active' : nil) }
+        = link_to(locale: locale) do
+          - I18n.with_locale(locale) do
+            = t("locales.#{locale}")

data/app/views/itsf/backend/resource/base/_form.html.haml

@@ -0,0 +1,2 @@
+- resource_class.attribute_names.delete_if { |name| Itsf::Backend.hidden_attributes_for[:edit].include?(name.to_sym) }.each do |name|
+  = form.input name

data/app/views/itsf/backend/resource/base/_form_errors.html.haml

@@ -0,0 +1,6 @@
+- if resource.errors.any?
+  .error-explanation.alert.alert-danger
+    .error-heading= t('errors.template.header', count: resource.errors.count, model: resource.model_name.human)
+    %ul
+      - resource.errors.full_messages.each do |msg|
+        %li= msg

data/app/views/itsf/backend/resource/base/_scopes.html.haml

@@ -0,0 +1 @@
+= form.scope :all

data/app/views/itsf/backend/resource/base/_search.html.haml

@@ -0,0 +1,3 @@
+.form-group
+  - if resource_class.respond_to?(:columns_hash)
+    = form.full_text_search *resource_class.columns_hash.delete_if{ |k, v| !v.cast_type.is_a?(ActiveRecord::Type::String)  }.keys, autofocus: :last

data/app/views/itsf/backend/resource/base/_show.html.haml

@@ -0,0 +1,2 @@
+- resource_class.attribute_names.delete_if { |name| Itsf::Backend.hidden_attributes_for[:show].include?(name.to_sym) }.each do |name|
+  = table.row name

data/app/views/itsf/backend/resource/base/_table.html.haml

@@ -0,0 +1,2 @@
+- resource_class.attribute_names.delete_if { |name| Itsf::Backend.hidden_attributes_for[:index].include?(name.to_sym) }.each do |name|
+  = table.column name

data/app/views/itsf/backend/resource/base/_table_actions.html.haml

@@ -0,0 +1,15 @@
+= table.column(:actions) do |resource|
+  - id_base = "link-to-#{controller.class.name.underscore.gsub('_controller', '').gsub(/[\/_]/, '-')}-#{resource.to_param}"
+  .btn-group
+    - if !Itsf::Backend.features?(:pundit) || policy(resource).show?
+      = link_to(resource_path(resource), id: "#{id_base}-show", class: 'btn btn-xs btn-responsive btn-default') do
+        %span.glyphicon.glyphicon-eye-open
+        %span.btn-text= t('.show')
+    - if !Itsf::Backend.features?(:pundit) || policy(resource).edit?
+      = link_to(edit_resource_path(resource), id: "#{id_base}-edit", class: 'btn btn-xs btn-responsive btn-default') do
+        %span.glyphicon.glyphicon-pencil
+        %span.btn-text= t('.edit')
+    - if !Itsf::Backend.features?(:pundit) || policy(resource).destroy?
+      = link_to(resource_path(resource), id: "#{id_base}-destroy", class: 'btn btn-xs btn-responsive btn-danger', method: :delete, data: { confirm: I18n.t('.confirmations.delete') }) do
+        %span.glyphicon.glyphicon-fire
+        %span.btn-text= t('.destroy')

data/app/views/itsf/backend/resource/base/edit.html.haml

@@ -0,0 +1,17 @@
+.panel.panel-default
+  .panel-heading
+    %h1= t('.title', inflections)
+  .panel-body
+    = simple_form_for(@resource, url: resource_path(@resource)) do |f|
+      = render partial: 'form_errors', locals: { resource: f.object }
+      = render 'form', form: f
+      = f.button :submit, class: 'btn btn-success'
+  .panel-footer
+
+.well.well-sm
+  = link_to resource_path(@resource), class: 'btn btn-primary btn-responsive' do
+    %span.glyphicon.glyphicon-eye-open
+    %span.btn-text= t('.show')
+  = link_to collection_path, class: 'btn btn-default btn-responsive pull-right' do
+    %span.glyphicon.glyphicon-arrow-left
+    %span.btn-text= t('.back')

data/app/views/itsf/backend/resource/base/index.html.haml

@@ -0,0 +1,48 @@
+#page-title.bottom-margin-1
+  .row
+    .col-xs-8
+      %h1
+        = t('.title', inflections)
+        %span.label.label-default= Itsf::Backend.features?(:kaminari) ? "#{@collection.total_count}/#{resource_class.count}" : @collection.count
+    .col-xs-4
+      #page-actions.btn-container-right
+        .btn-group
+          - if !Itsf::Backend.features?(:pundit) || policy(resource_class).new?
+            = link_to new_resource_path, id: "link-to-#{controller.class.name.underscore.gsub('_controller', '').gsub(/[\/_]/, '-')}-new", class: 'btn btn-success btn-responsive' do
+              %span.glyphicon.glyphicon-plus
+              %span.btn-text= t('.new', inflections)
+
+.panel.panel-default.panel-with-actions
+  - if Itsf::Backend.features?(:ransack)
+    .panel-body
+      #filter
+        = search_form_for(@q, url: collection_path, class: 'form-inline', html: { 'data-auto-submit': true }) do |f|
+          #scopes.bottom-margin-1
+            = render 'scopes', form: f
+          #search.bottom-margin-1
+            = render 'search', form: f
+          #filter-actions.btn-group
+            - if f.is_a?(SimpleForm::FormBuilder)
+              = f.button :submit, t('ransack.search'), class: 'btn btn-success'
+              = link_to t('ransack.reset'), {},class: 'btn btn-danger'
+            - else
+              = f.submit
+              
+  .table-responsive
+    = render_collection(@collection, resource_class, as: :bootstrap_table) do |table|
+      = render 'table', table: table
+      = render 'table_actions', table: table
+
+  .panel-footer
+    - if Itsf::Backend.features?(:kaminari)
+      .row
+        .col-md-4
+        .col-md-4
+          .text-center= paginate @collection, theme: 'twitter-bootstrap-3'
+        .col-md-4
+
+.well.well-sm
+  .btn-container-right
+    = link_to root_path, class: 'btn btn-default btn-responsive' do
+      %span.glyphicon.glyphicon-arrow-left
+      %span.btn-text= t('.back')      

data/app/views/itsf/backend/resource/base/new.html.haml

@@ -0,0 +1,15 @@
+%div.panel.panel-default
+  %div.panel-heading
+    %h1= t('.title', inflections)
+  %div.panel-body
+    = simple_form_for(@resource, url: collection_path) do |f|
+      = render partial: 'form_errors', locals: { resource: f.object }
+      = render 'form', form: f
+      = f.button :submit, class: 'btn btn-success'
+  %div.panel-footer
+
+.well.well-sm
+  .btn-container-right
+    = link_to collection_path, class: 'btn btn-default btn-responsive' do
+      %span.glyphicon.glyphicon-arrow-left
+      %span.btn-text= t('.back')