knitkit 2.0.0 → 2.0.1

data/app/controllers/knitkit/erp_app/desktop/website_controller.rb

@@ -42,9 +42,16 @@ module Knitkit
         end
 
         def activate_publication
-          @website.set_publication_version(params[:version].to_f, current_user)
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'activate', 'Website') do
+              @website.set_publication_version(params[:version].to_f, current_user)
 
-          render :json => {:success => true}
+              render :json => {:success => true}
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
 
         def set_viewing_version
@@ -60,62 +67,91 @@ module Knitkit
         end
 
         def publish
-          @website.publish(params[:comment], current_user)
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'publish', 'Website') do
+              @website.publish(params[:comment], current_user)
 
-          render :json => {:success => true}
+              render :json => {:success => true}
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
 
         def new
-          result = {}
-          website = Website.new
-          website.subtitle                  = params[:subtitle]
-          website.title                     = params[:title]
-          website.name                      = params[:name]
-          website.email                     = params[:email]
-          website.auto_activate_publication = params[:auto_activate_publication] == 'yes'
-          website.email_inquiries           = params[:email_inquiries] == 'yes'
-
-          # create homepage
-          website_section = WebsiteSection.new
-          website_section.title = "Home"
-          website_section.in_menu = true
-          website.website_sections << website_section
-          if website.save
-            website.setup_default_pages
-
-            #set default publication published by user
-            first_publication = website.published_websites.first
-            first_publication.published_by = current_user
-            first_publication.save
-
-            website.hosts << WebsiteHost.create(:host => params[:host])
-            website.save
-
-            website.publish("Publish Default Sections", current_user)
-            PublishedWebsite.activate(website, 1, current_user)
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'create', 'Website') do
+              result = {}
+              website = Website.new
+              website.subtitle                  = params[:subtitle]
+              website.title                     = params[:title]
+              website.name                      = params[:name]
+              website.email                     = params[:email]
+              website.auto_activate_publication = params[:auto_activate_publication] == 'yes'
+              website.email_inquiries           = params[:email_inquiries] == 'yes'
+
+              # create homepage
+              website_section = WebsiteSection.new
+              website_section.title = "Home"
+              website_section.in_menu = true
+              website.website_sections << website_section
+              if website.save
+                website.setup_default_pages
+
+                #set default publication published by user
+                first_publication = website.published_websites.first
+                first_publication.published_by = current_user
+                first_publication.save
+
+                website.hosts << WebsiteHost.create(:host => params[:host])
+                website.configurations.first.update_configuration_item(ConfigurationItemType.find_by_internal_identifier('primary_host'), params[:host])
+                website.save
+
+                website.publish("Publish Default Sections", current_user)
+                PublishedWebsite.activate(website, 1, current_user)
       
-            result[:success] = true
-          else
-            result[:success] = false
-          end
+                result[:success] = true
+              else
+                result[:success] = false
+              end
 
-          render :json => result
+              render :json => result
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
 
         def update
-          @website.email                     = params[:email]
-          @website.name                      = params[:name]
-          @website.title                     = params[:title]
-          @website.subtitle                  = params[:subtitle]
-          @website.auto_activate_publication = params[:auto_activate_publication] == 'yes'
-          @website.email_inquiries           = params[:email_inquiries] == 'yes'
-
-          render :json => @website.save ? {:success => true} : {:success => false}
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'edit', 'Website') do
+              @website.email                     = params[:email]
+              @website.name                      = params[:name]
+              @website.title                     = params[:title]
+              @website.subtitle                  = params[:subtitle]
+              @website.auto_activate_publication = params[:auto_activate_publication] == 'yes'
+              @website.email_inquiries           = params[:email_inquiries] == 'yes'
+
+              render :json => @website.save ? {:success => true} : {:success => false}
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
   
  
         def delete
-          render :json => @website.destroy ? {:success => true} : {:success => false}
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'delete', 'Website') do
+              render :json => @website.destroy ? {:success => true} : {:success => false}
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
 
         def export
@@ -125,6 +161,7 @@ module Knitkit
           FileUtils.rm_r File.dirname(zip_path) rescue nil
         end
 
+        # TODO add role restriction to this
         def import
           result, message = Website.import(params[:website_data], current_user)
 
@@ -134,35 +171,56 @@ module Knitkit
         end
 
         def add_host
-          website = Website.find(params[:id])
-          website_host = WebsiteHost.create(:host => params[:host])
-          website.hosts << website_host
-          website.save
-
-          render :json => {
-            :success => true,
-            :node => {
-              :text => website_host.attributes['host'],
-              :websiteHostId => website_host.id,
-              :host => website_host.attributes['host'],
-              :iconCls => 'icon-globe',
-              :url => "http://#{website_host.attributes['host']}",
-              :isHost => true,
-              :leaf => true,
-              :children => []}
-          }
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'create', 'Host') do
+              website = Website.find(params[:id])
+              website_host = WebsiteHost.create(:host => params[:host])
+              website.hosts << website_host
+              website.save
+
+              render :json => {
+                :success => true,
+                :node => {
+                  :text => website_host.attributes['host'],
+                  :websiteHostId => website_host.id,
+                  :host => website_host.attributes['host'],
+                  :iconCls => 'icon-globe',
+                  :url => "http://#{website_host.attributes['host']}",
+                  :isHost => true,
+                  :leaf => true,
+                  :children => []}
+              }
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
 
         def update_host
-          website_host = WebsiteHost.find(params[:id])
-          website_host.host = params[:host]
-          website_host.save
-
-          render :json => {:success => true}
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'edit', 'Host') do
+              website_host = WebsiteHost.find(params[:id])
+              website_host.host = params[:host]
+              website_host.save
+
+              render :json => {:success => true}
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
 
         def delete_host
-          render :json => WebsiteHost.destroy(params[:id]) ? {:success => true} : {:success => false}
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'delete', 'Host') do
+              render :json => WebsiteHost.destroy(params[:id]) ? {:success => true} : {:success => false}
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
 
         protected

data/app/controllers/knitkit/erp_app/desktop/website_nav_controller.rb

@@ -3,138 +3,185 @@ module Knitkit
     module Desktop
       class WebsiteNavController < Knitkit::ErpApp::Desktop::AppController
         def new
-          result = {}
-          website = Website.find(params[:website_id])
-          website_nav = WebsiteNav.new(:name => params[:name])
-          website.website_navs << website_nav
-
-          if website_nav.save
-            result[:success] = true
-            result[:node] = {:text => params[:name], 
-              :websiteNavId => website_nav.id,
-              :websiteId => website.id,
-              :iconCls => 'icon-index',
-              :canAddMenuItems => true,
-              :isWebsiteNav => true,
-              :leaf => false,
-              :children => []}
-          else
-            result[:success] = false
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'create', 'Menu') do
+              result = {}
+              website = Website.find(params[:website_id])
+              website_nav = WebsiteNav.new(:name => params[:name])
+              website.website_navs << website_nav
+
+              if website_nav.save
+                result[:success] = true
+                result[:node] = {:text => params[:name],
+                  :websiteNavId => website_nav.id,
+                  :websiteId => website.id,
+                  :iconCls => 'icon-index',
+                  :canAddMenuItems => true,
+                  :isWebsiteNav => true,
+                  :leaf => false,
+                  :children => []}
+              else
+                result[:success] = false
+              end
+
+              render :json => result
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
           end
-
-          render :json => result
         end
 
         def update
-          website_nav = WebsiteNav.find(params[:website_nav_id])
-          website_nav.name = params[:name]
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'edit', 'Menu') do
+              website_nav = WebsiteNav.find(params[:website_nav_id])
+              website_nav.name = params[:name]
 
-          render :json => (website_nav.save ? {:success => true} : {:success => false})
+              render :json => (website_nav.save ? {:success => true} : {:success => false})
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
 
         def delete
-          render :json => (WebsiteNav.destroy(params[:id]) ? {:success => true} : {:success => false})
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'delete', 'Menu') do
+              render :json => (WebsiteNav.destroy(params[:id]) ? {:success => true} : {:success => false})
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
 
         def add_menu_item
-          result = {}
-          klass = params[:klass].constantize
-          parent = klass.find(params[:id])
-          website_nav = parent.is_a?(WebsiteNav) ? parent : parent.website_nav
-          website_nav_item = WebsiteNavItem.new(:title => params[:title])
-
-          url = params[:url]
-          if(params[:link_to] != 'url')
-            #user wants to see Section so this is needed
-            params[:link_to] = 'WebsiteSection' if params[:link_to] == 'website_section'
-
-            #get link to item can be Article or Section
-            linked_to_id = params["#{params[:link_to].underscore}_id".to_sym]
-            link_to_item = params[:link_to].constantize.find(linked_to_id)
-            #setup link
-            website_nav_item.url = '/' + link_to_item.permalink
-            website_nav_item.linked_to_item = link_to_item 
-            url = "http://#{website_nav.website.hosts.first.host}/" + link_to_item.permalink
-          else
-            website_nav_item.url = url
-          end
-
-          if website_nav_item.save
-            if parent.is_a?(WebsiteNav)
-              parent.website_nav_items << website_nav_item
-            else
-              website_nav_item.move_to_child_of(parent)
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'create', 'MenuItem') do
+              result = {}
+              klass = params[:klass].constantize
+              parent = klass.find(params[:id])
+              website_nav = parent.is_a?(WebsiteNav) ? parent : parent.website_nav
+              website_nav_item = WebsiteNavItem.new(:title => params[:title])
+
+              url = params[:url]
+              if(params[:link_to] != 'url')
+                #user wants to see Section so this is needed
+                params[:link_to] = 'WebsiteSection' if params[:link_to] == 'website_section'
+
+                #get link to item can be Article or Section
+                linked_to_id = params["#{params[:link_to].underscore}_id".to_sym]
+                link_to_item = params[:link_to].constantize.find(linked_to_id)
+                #setup link
+                website_nav_item.url = '/' + link_to_item.permalink
+                website_nav_item.linked_to_item = link_to_item
+                url = "http://#{website_nav.website.hosts.first.host}/" + link_to_item.permalink
+              else
+                website_nav_item.url = url
+              end
+
+              if website_nav_item.save
+                if parent.is_a?(WebsiteNav)
+                  parent.website_nav_items << website_nav_item
+                else
+                  website_nav_item.move_to_child_of(parent)
+                end
+
+                result[:success] = true
+                result[:node] = {:text => params[:title],
+                  :linkToType => params[:link_to].underscore,
+                  :linkedToId => linked_to_id,
+                  :websiteId => website_nav.website.id,
+                  :url => url,
+                  :isSecure => false,
+                  :canAddMenuItems => true,
+                  :websiteNavItemId => website_nav_item.id,
+                  :iconCls => 'icon-document',
+                  :isWebsiteNavItem => true,
+                  :leaf => false,
+                  :children => []}
+              else
+                result[:success] = false
+              end
+
+              render :json => result
             end
-
-            result[:success] = true
-            result[:node] = {:text => params[:title],
-              :linkToType => params[:link_to].underscore,
-              :linkedToId => linked_to_id,
-              :websiteId => website_nav.website.id,
-              :url => url,
-              :isSecure => false,
-              :canAddMenuItems => true,
-              :websiteNavItemId => website_nav_item.id,
-              :iconCls => 'icon-document',
-              :isWebsiteNavItem => true,
-              :leaf => false,
-              :children => []}
-          else
-            result[:success] = false
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
           end
-
-          render :json => result
         end
 
         def update_menu_item
-          result = {}
-          website_nav_item = WebsiteNavItem.find(params[:website_nav_item_id])
-          website_nav_item.title = params[:title]
-
-          url = params[:url]
-          linked_to_id = nil
-          if(params[:link_to] != 'url')
-            #user wants to see Section so this is needed
-            params[:link_to] = 'WebsiteSection' if params[:link_to] == 'website_section'
-
-            #get link to item can be Article or Section
-            linked_to_id = params["#{params[:link_to].underscore}_id".to_sym]
-            link_to_item = params[:link_to].constantize.find(linked_to_id)
-            #setup link
-            website_nav_item.url = '/' + link_to_item.permalink
-            website_nav_item.linked_to_item = link_to_item
-            url = "http://#{website_nav_item.website_nav.website.hosts.first.host}/" + link_to_item.permalink
-          else
-            website_nav_item.url = url
-          end
-
-          if website_nav_item.save
-            result[:success] = true
-            result[:title] = params[:title]
-            result[:linkedToId] = linked_to_id
-            result[:linkToType] = params[:link_to].underscore
-            result[:url] = url
-          else
-            result[:success] = false
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'edit', 'MenuItem') do
+              result = {}
+              website_nav_item = WebsiteNavItem.find(params[:website_nav_item_id])
+              website_nav_item.title = params[:title]
+
+              url = params[:url]
+              linked_to_id = nil
+              if(params[:link_to] != 'url')
+                #user wants to see Section so this is needed
+                params[:link_to] = 'WebsiteSection' if params[:link_to] == 'website_section'
+
+                #get link to item can be Article or Section
+                linked_to_id = params["#{params[:link_to].underscore}_id".to_sym]
+                link_to_item = params[:link_to].constantize.find(linked_to_id)
+                #setup link
+                website_nav_item.url = '/' + link_to_item.permalink
+                website_nav_item.linked_to_item = link_to_item
+                url = "http://#{website_nav_item.website_nav.website.hosts.first.host}/" + link_to_item.permalink
+              else
+                website_nav_item.url = url
+              end
+
+              if website_nav_item.save
+                result[:success] = true
+                result[:title] = params[:title]
+                result[:linkedToId] = linked_to_id
+                result[:linkToType] = params[:link_to].underscore
+                result[:url] = url
+              else
+                result[:success] = false
+              end
+
+              render :json => result
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
           end
-
-          render :json => result
         end
 
         def update_security
-          website_nav_item = WebsiteNavItem.find(params[:id])
-          website = Website.find(params[:site_id])
-          if(params[:secure] == "true")
-            website_nav_item.add_role(website.role)
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          if current_user.has_capability?(model, 'secure', 'MenuItem') or current_user.has_capability?(model, 'unsecure', 'MenuItem')
+            website_nav_item = WebsiteNavItem.find(params[:id])
+            website = Website.find(params[:site_id])
+            if(params[:secure] == "true")
+              website_nav_item.add_role(website.role)
+            else
+              website_nav_item.remove_role(website.role)
+            end
+
+            render :json => {:success => true}
           else
-            website_nav_item.remove_role(website.role)
+            render :json => {:success => false, :message => "User does not have capability."}
           end
-
-          render :json => {:success => true}
         end
 
         def delete_menu_item
-          render :json => (WebsiteNavItem.destroy(params[:id]) ? {:success => true} : {:success => false})
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'delete', 'MenuItem') do
+              render :json => (WebsiteNavItem.destroy(params[:id]) ? {:success => true} : {:success => false})
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
 
       end#WebsiteNavController