kms 0.4.0

data/app/controllers/kms/public/pages_controller.rb

@@ -0,0 +1,27 @@
+module Kms
+  class Public::PagesController < ActionController::Base
+
+    before_filter :eval_externals
+
+    def show
+        page_result = Kms.template_manager.render(@page.register_id, @externals)
+        # apply typograph to page content
+        #page_result = EvilFront::Russian.typograph_html(page_result)
+        result   = Kms.template_manager.render(@template.register_id, @externals.
+                                merge(_inner_template: page_result))
+
+      render text: result, layout: false
+    end
+
+    protected
+
+    def eval_externals
+      @externals = Hash[ExternalsRegistry.externals.map{ |k, v| [k, v.call(request, self)] }]
+      @page = @externals[:page].source
+      @template = @page.template
+    rescue ActiveRecord::RecordNotFound
+      render file: "#{Rails.root}/public/404.html", layout: false, status: :not_found
+    end
+
+  end
+end

data/app/controllers/kms/public/search_controller.rb

@@ -0,0 +1,18 @@
+module Kms
+  class Public::SearchController < ActionController::Base
+    def search
+      results = Page.advanced_search(params[:query]).to_drop#.split(' ').join('|').to_drop
+      if params[:result_page] and @page = Page.find_by_fullpath(params[:result_page])
+        @externals = Hash[ExternalsRegistry.externals.map{ |k, v| [k, v.call(request, self)] }]
+        @template = @page.template
+
+        page_result = Rails.configuration.x.template_manager.render(@page.register_id, @externals.merge!(search: results))
+        result = Rails.configuration.x.template_manager.render(@template.register_id, @externals.merge(_inner_template: page_result))
+
+        render text: result, layout: false
+      else
+        redirect_to root_path
+      end
+    end
+  end
+end

data/app/controllers/kms/resources_controller.rb

@@ -0,0 +1,9 @@
+module Kms
+  class ResourcesController < ApplicationController
+    authorize_resource :class => false
+
+    def index
+      render json: ResourceService.external_resources_hash.to_json
+    end
+  end
+end

data/app/controllers/kms/settings_controller.rb

@@ -0,0 +1,24 @@
+module Kms
+  class SettingsController < ApplicationController
+    authorize_resource :class => false
+
+    def show
+      render json: Settings.instance
+    end
+
+    def update
+      @settings = Settings.instance
+      if @settings.update_attributes(settings_params)
+        render json: @settings
+      else
+        render json: @settings.to_json(methods: :errors), status: :unprocessable_entity
+      end
+    end
+
+    protected
+
+    def settings_params
+      params.require(:setting).permit!
+    end
+  end
+end

data/app/controllers/kms/snippets_controller.rb

@@ -0,0 +1,37 @@
+module Kms
+  class SnippetsController < ApplicationController
+    respond_to :json
+
+    def index
+      render json: Snippet.all, root: false
+    end
+
+    def create
+      @snippet = Snippet.create(snippet_params)
+      render json: @snippet, root: false
+    end
+
+    def update
+      @snippet = Snippet.find(params[:id])
+      @snippet.update(snippet_params)
+      render json: @snippet, root: false
+    end
+
+    def show
+      @snippet = Snippet.find(params[:id])
+      render json: @snippet, root: false
+    end
+
+    def destroy
+      @snippet = Snippet.find(params[:id])
+      @snippet.destroy
+      render json: @snippet
+    end
+
+    protected
+
+    def snippet_params
+      params.require(:snippet).permit!
+    end
+  end
+end

data/app/controllers/kms/templates_controller.rb

@@ -0,0 +1,43 @@
+module Kms
+  class TemplatesController < ApplicationController
+    load_and_authorize_resource
+    def index
+      render json: Template.all.to_json
+    end
+
+    def create
+      @template = Template.new(template_params)
+      if @template.save
+        render json: @template.to_json
+      else
+        render json: @template.to_json(methods: :errors), status: :unprocessable_entity
+      end
+    end
+
+    def update
+      @template = Template.find(params[:id])
+      if @template.update_attributes(template_params)
+        render json: @template.to_json
+      else
+        render json: @template.to_json(methods: :errors), status: :unprocessable_entity
+      end
+    end
+
+    def show
+      @template = Template.find(params[:id])
+      render json: @template.to_json
+    end
+
+    def destroy
+      @template = Template.find(params[:id])
+      @template.destroy
+      render json: @template.to_json
+    end
+
+    protected
+
+    def template_params
+      params.require(:template).permit(:name,:content)
+    end
+  end
+end

data/app/controllers/kms/users_controller.rb

@@ -0,0 +1,36 @@
+module Kms
+  class UsersController < ApplicationController
+    before_action :authenticate_kms_user!
+    load_and_authorize_resource
+    skip_authorize_resource only: :kms_user
+
+    def index
+      render json: User.all.to_json(except: [:created_at, :updated_at], methods: :localized_role)
+    end
+
+    def create
+      user_params.merge!(password: params[:password], password_confirmation: params[:password_confirmation]) if params[:password]
+      @user = User.new(user_params)
+      @user.save
+      render json: @user.to_json
+    end
+
+    def destroy 
+      @user = User.find(params[:id])
+      @user.destroy
+      render json: @user.to_json
+    end
+
+    def kms_user
+      render json: current_kms_user.to_json
+    end
+
+    protected
+
+    def user_params
+      params.require(:user).permit!
+    end
+
+
+  end
+end

data/app/controllers/users/confirmations_controller.rb

@@ -0,0 +1,28 @@
+class Users::ConfirmationsController < Devise::ConfirmationsController
+  # GET /resource/confirmation/new
+  # def new
+  #   super
+  # end
+
+  # POST /resource/confirmation
+  # def create
+  #   super
+  # end
+
+  # GET /resource/confirmation?confirmation_token=abcdef
+  # def show
+  #   super
+  # end
+
+  # protected
+
+  # The path used after resending confirmation instructions.
+  # def after_resending_confirmation_instructions_path_for(resource_name)
+  #   super(resource_name)
+  # end
+
+  # The path used after confirmation.
+  # def after_confirmation_path_for(resource_name, resource)
+  #   super(resource_name, resource)
+  # end
+end

data/app/controllers/users/omniauth_callbacks_controller.rb

@@ -0,0 +1,28 @@
+class Users::OmniauthCallbacksController < Devise::OmniauthCallbacksController
+  # You should configure your model like this:
+  # devise :omniauthable, omniauth_providers: [:twitter]
+
+  # You should also create an action method in this controller like this:
+  # def twitter
+  # end
+
+  # More info at:
+  # https://github.com/plataformatec/devise#omniauth
+
+  # GET|POST /resource/auth/twitter
+  # def passthru
+  #   super
+  # end
+
+  # GET|POST /users/auth/twitter/callback
+  # def failure
+  #   super
+  # end
+
+  # protected
+
+  # The path used when omniauth fails
+  # def after_omniauth_failure_path_for(scope)
+  #   super(scope)
+  # end
+end

data/app/controllers/users/passwords_controller.rb

@@ -0,0 +1,32 @@
+class Users::PasswordsController < Devise::PasswordsController
+  # GET /resource/password/new
+  # def new
+  #   super
+  # end
+
+  # POST /resource/password
+  # def create
+  #   super
+  # end
+
+  # GET /resource/password/edit?reset_password_token=abcdef
+  # def edit
+  #   super
+  # end
+
+  # PUT /resource/password
+  # def update
+  #   super
+  # end
+
+  # protected
+
+  # def after_resetting_password_path_for(resource)
+  #   super(resource)
+  # end
+
+  # The path used after sending reset password instructions
+  # def after_sending_reset_password_instructions_path_for(resource_name)
+  #   super(resource_name)
+  # end
+end

data/app/controllers/users/registrations_controller.rb

@@ -0,0 +1,70 @@
+class Users::RegistrationsController < Devise::RegistrationsController
+ #before_filter :configure_sign_up_params, only: [:create]
+# before_filter :configure_account_update_params, only: [:update]
+
+  # GET /resource/sign_up
+  # def new
+  #   super
+  # end
+
+  # POST /resource
+  # def create
+  #   super
+  # end
+
+  # GET /resource/edit
+  # def edit
+  #   super
+  # end
+
+  # PUT /resource
+  # def update
+  #   super
+  # end
+
+  # DELETE /resource
+  # def destroy
+  #   super
+  # end
+
+  # GET /resource/cancel
+  # Forces the session data which is usually expired after sign
+  # in to be expired now. This is useful if the user wants to
+  # cancel oauth signing in/up in the middle of the process,
+  # removing all OAuth session data.
+  # def cancel
+  #   super
+  # end
+
+  protected
+
+  def build_resource(hash=nil)
+    self.resource = resource_class.new_with_session(hash || {}, session)
+    # make first user as admin
+    unless Kms::User.exists?
+      self.resource.role = "admin"
+    end
+  end
+
+
+  # You can put the params you want to permit in the empty array.
+  #def configure_sign_up_params
+    # make first user as admin
+    #devise_parameter_sanitizer.for(:sign_up) << :attribute
+  #end
+
+  # You can put the params you want to permit in the empty array.
+  # def configure_account_update_params
+  #   devise_parameter_sanitizer.for(:account_update) << :attribute
+  # end
+
+  # The path used after sign up.
+  # def after_sign_up_path_for(resource)
+  #   super(resource)
+  # end
+
+  # The path used after sign up for inactive accounts.
+  # def after_inactive_sign_up_path_for(resource)
+  #   super(resource)
+  # end
+end

data/app/controllers/users/sessions_controller.rb

@@ -0,0 +1,25 @@
+class Users::SessionsController < Devise::SessionsController
+# before_filter :configure_sign_in_params, only: [:create]
+
+  # GET /resource/sign_in
+  # def new
+  #   super
+  # end
+
+  # POST /resource/sign_in
+  # def create
+  #   super
+  # end
+
+  # DELETE /resource/sign_out
+  # def destroy
+  #   super
+  # end
+
+  # protected
+
+  # You can put the params you want to permit in the empty array.
+  # def configure_sign_in_params
+  #   devise_parameter_sanitizer.for(:sign_in) << :attribute
+  # end
+end

data/app/controllers/users/unlocks_controller.rb

@@ -0,0 +1,28 @@
+class Users::UnlocksController < Devise::UnlocksController
+  # GET /resource/unlock/new
+  # def new
+  #   super
+  # end
+
+  # POST /resource/unlock
+  # def create
+  #   super
+  # end
+
+  # GET /resource/unlock?unlock_token=abcdef
+  # def show
+  #   super
+  # end
+
+  # protected
+
+  # The path used after sending unlock password instructions
+  # def after_sending_unlock_instructions_path_for(resource)
+  #   super(resource)
+  # end
+
+  # The path used after unlocking the resource
+  # def after_unlock_path_for(resource)
+  #   super(resource)
+  # end
+end

data/app/helpers/kms/application_helper.rb

@@ -0,0 +1,4 @@
+module Kms
+  module ApplicationHelper
+  end
+end

data/app/models/ability.rb

@@ -0,0 +1,38 @@
+class Ability
+  include CanCan::Ability
+
+  def initialize(user)
+    # Define abilities for the passed in user here. For example:
+    #
+    user ||= Kms::User.new # guest user (not logged in)
+    if user.admin?
+      can :manage, :all
+    else
+      can :index, Kms::Template
+      can :manage, Kms::Page
+      can :manage, Kms::Asset
+      Kms::AbilityService.abilities.each do |ability_block|
+        instance_eval(&ability_block)
+      end
+    end
+
+    #
+    # The first argument to `can` is the action you are giving the user
+    # permission to do.
+    # If you pass :manage it will apply to every action. Other common actions
+    # here are :read, :create, :update and :destroy.
+    #
+    # The second argument is the resource the user can perform the action on.
+    # If you pass :all it will apply to every resource. Otherwise pass a Ruby
+    # class of the resource.
+    #
+    # The third argument is an optional hash of conditions to further filter the
+    # objects.
+    # For example, here the user can only update published articles.
+    #
+    #   can :update, Article, :published => true
+    #
+    # See the wiki for details:
+    # https://github.com/CanCanCommunity/cancancan/wiki/Defining-Abilities
+  end
+end