knitkit 2.0.0 → 2.0.1

data/app/controllers/knitkit/erp_app/desktop/website_section_controller.rb

@@ -2,94 +2,153 @@ module Knitkit
   module ErpApp
     module Desktop
       class WebsiteSectionController < Knitkit::ErpApp::Desktop::AppController
-        before_filter :set_website_section, :only => [:update, :update_security, :add_layout, :get_layout, :save_layout]
+        before_filter :set_website_section, :only => [:detach_article, :update, :update_security, :add_layout, :get_layout, :save_layout]
 
         def new
-          website = Website.find(params[:website_id])
-          website_section = nil
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'create', 'Section') do
+              website = Website.find(params[:website_id])
+              website_section = nil
+
+              if params[:title].to_s.downcase == 'blog' && params[:type] == 'Blog'
+                result = {:success => false, :message => 'Blog can not be the title of a Blog'}
+              else
+                website_section = WebsiteSection.new
+                website_section.website_id = website.id
+                website_section.in_menu = params[:in_menu] == 'yes'
+                website_section.title = params[:title]
+                website_section.render_base_layout = params[:render_with_base_layout] == 'yes'
+                website_section.type = params[:type] unless params[:type] == 'Page'
+                website_section.internal_identifier = params[:internal_identifier]
+
+                if website_section.save
+                  if params[:website_section_id]
+                    parent_website_section = WebsiteSection.find(params[:website_section_id])
+                    website_section.move_to_child_of(parent_website_section)
+                  end
+                  
+                  if params[:type] == "OnlineDocumentSection"
+                    documented_content = DocumentedContent.create(:title => website_section.title, :created_by => current_user, :body_html => website_section.title)
+                    DocumentedItem.create(:documented_content_id => documented_content.id, :online_document_section_id => website_section.id)
+                  end
+                  
+                  website_section.update_path!
+                  result = {:success => true, :node => build_section_hash(website_section, website_section.website)}
+                else
+                  message = "<ul>"
+                  website_section.errors.collect do |e, m|
+                    message << "<li>#{e} #{m}</li>"
+                  end
+                  message << "</ul>"
+                  result = {:success => false, :message => message}
+                end
 
-          if params[:title].to_s.downcase == 'blog' && params[:type] == 'Blog'
-            result = {:success => false, :message => 'Blog can not be the title of a Blog'}
-          else
-            website_section = WebsiteSection.new
-            website_section.website_id = website.id
-            website_section.in_menu = params[:in_menu] == 'yes'
-            website_section.title = params[:title]
-            website_section.type = params[:type] unless params[:type] == 'Page'
-            website_section.internal_identifier = params[:internal_identifier]
-
-            if website_section.save
-              if params[:website_section_id]
-                parent_website_section = WebsiteSection.find(params[:website_section_id])
-                website_section.move_to_child_of(parent_website_section)
-              end
-              
-              website_section.update_path!
-              result = {:success => true, :node => build_section_hash(website_section, website_section.website)}
-            else
-              message = "<ul>"
-              website_section.errors.collect do |e, m|
-                message << "<li>#{e} #{m}</li>"
               end
-              message << "</ul>"
-              result = {:success => false, :message => message}
-            end
 
+              render :json => result
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
           end
-
-          render :json => result
         end
 
         def delete
-          render :json => WebsiteSection.destroy(params[:id]) ? {:success => true} : {:success => false}
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'delete', 'Section') do
+              render :json => WebsiteSection.destroy(params[:id]) ? {:success => true} : {:success => false}
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
+        end
+
+        def detach_article
+          success = WebsiteSectionContent.where(:website_section_id => @website_section.id, :content_id => params[:article_id]).first.destroy
+          render :json => success ? {:success => true} : {:success => false}
         end
 
         def update_security
-          website = Website.find(params[:site_id])
-          if(params[:secure] == "true")
-            @website_section.add_role(website.role)
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          if current_user.has_capability?(model, 'secure', 'Section') or current_user.has_capability?(model, 'unsecure', 'Section')
+            website = Website.find(params[:site_id])
+            if(params[:secure] == "true")
+              @website_section.add_role(website.role)
+            else
+              @website_section.remove_role(website.role)
+            end
+
+            render :json => {:success => true}
           else
-            @website_section.remove_role(website.role)
+            render :json => {:success => false, :message => "User does not have capability."}
           end
-
-          render :json => {:success => true}
         end
 
         def update
-          @website_section.in_menu = params[:in_menu] == 'yes'
-          @website_section.title = params[:title]
-          @website_section.internal_identifier = params[:internal_identifier]
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'edit', 'Section') do
+              @website_section.in_menu = params[:in_menu] == 'yes'
+              @website_section.title = params[:title]
+              @website_section.render_base_layout = params[:render_with_base_layout] == 'yes'
+              @website_section.internal_identifier = params[:internal_identifier]
 
-          if @website_section.save
-            render :json => {:success => true}
-          else
-            render :json => {:success => false}
+              if @website_section.save
+                render :json => {:success => true}
+              else
+                render :json => {:success => false}
+              end
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
           end
         end
 
         def add_layout
-          @website_section.create_layout
-          render :json => {:success => true}
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'create', 'Layout') do
+              @website_section.create_layout
+              render :json => {:success => true}
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
 
         def get_layout
-          render :text => @website_section.layout
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'edit', 'Layout') do
+              render :text => @website_section.layout
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
+          end
         end
   
         def save_layout
-          result = Knitkit::SyntaxValidator.validate_content(:erb, params[:content])
+          model = DesktopApplication.find_by_internal_identifier('knitkit')
+          begin
+            current_user.with_capability(model, 'edit', 'Layout') do
+		      result = Knitkit::SyntaxValidator.validate_content(:erb, params[:content])
 
-          unless result
-            @website_section.layout = params[:content]
-            render :json => @website_section.save ? {:success => true} : {:success => false}
-          else
-            render :json => {:success => false, :message => result}
+              unless result
+                @website_section.layout = params[:content]
+                render :json => @website_section.save ? {:success => true} : {:success => false}
+              else
+                render :json => {:success => false, :message => result}
+              end
+            end
+          rescue ErpTechSvcs::Utils::CompassAccessNegotiator::Errors::UserDoesNotHaveCapability=>ex
+            render :json => {:success => false, :message => ex.message}
           end
         end
 
         def available_articles
           current_articles = Article.joins("INNER JOIN website_section_contents ON website_section_contents.content_id = contents.id").where("website_section_id = #{params[:section_id]}").all
-          available_articles = Article.all - current_articles
+          available_articles = Article.order('LOWER(internal_identifier) ASC').all - current_articles
 
           render :inline => "{\"articles\":#{available_articles.to_json(:only => [:internal_identifier, :id])}}"
         end

data/app/controllers/knitkit/online_document_sections_controller.rb

@@ -0,0 +1,45 @@
+module Knitkit
+  class OnlineDocumentSectionsController < BaseController
+    layout 'knitkit/online_document_sections'
+    
+    before_filter :find_root
+    before_filter :find_document_sections, :only => :build_tree
+
+    def index
+            
+    end
+    
+    def build_tree
+      render :inline => build_document_hash.to_json
+    end
+    
+    protected 
+    
+    def id_or_node
+      (params[:node].to_i == 0) ? params[:section_id] : params[:node]
+    end
+    
+    def find_root
+      @root = OnlineDocumentSection.find(params[:section_id])
+      if @root.documented_item_published_content(@active_publication)
+        @root_content = @root.documented_item_published_content(@active_publication).body_html 
+      else
+        @root_content = ""
+      end
+    end
+    
+    def find_document_sections
+      @document_sections = OnlineDocumentSection.find(id_or_node).positioned_children
+    end
+    
+    def build_document_hash
+      [].tap do |documents|
+        @document_sections.each do |section|
+          documents <<  {:id => section.id, :title => section.title, 
+                        :leaf => section.leaf, :documented_item_published_content_html => section.documented_item_published_content_html(@active_publication)}
+        end
+      end
+    end
+    
+  end
+end

data/app/controllers/knitkit/unauthorized_controller.rb

@@ -1,5 +1,10 @@
 module Knitkit
   class UnauthorizedController < BaseController
+
+    def index
+      @current_user = nil
+    end
+
     #no section to set
     def set_section
       return false

data/app/controllers/knitkit/website_sections_controller.rb

@@ -1,17 +1,16 @@
 module Knitkit
   class WebsiteSectionsController < BaseController
-    
+
     def index
-      if @website_section.has_access?(current_user)
-        @contents = Article.find_published_by_section(@active_publication, @website_section)
-        unless @website_section.layout.nil?
-          layout = @website_section.get_published_layout(@active_publication)
-          render :inline => layout, :layout => 'knitkit/base'
-        end
+      @current_user = current_user
+      @contents = Article.find_published_by_section(@active_publication, @website_section)
+      layout = @website_section.get_published_layout(@active_publication)
+      unless layout.nil?
+        @website_section.render_base_layout? ? (render :inline => layout, :layout => 'knitkit/base') : (render :inline => layout)
       else
-        redirect_to '/unauthorized'
+        @website_section.render_base_layout? ? (render) : (render :layout => false)
       end
     end
-
+    
   end
 end

data/app/mailers/document_mailer.rb

@@ -0,0 +1,10 @@
+class DocumentMailer < ActionMailer::Base
+  default :from => ErpTechSvcs::Config.email_notifications_from
+
+  def email_document(to_email, document)
+    file = document.files.first
+    attachments[file.data_file_name] = document.files.first.get_contents
+
+    mail(:to => to_email, :subject => 'The Document You Requested')
+  end
+end

data/app/models/article.rb

@@ -10,5 +10,5 @@ class Article < Content
   def check_internal_indentifier
     self.internal_identifier = self.permalink if self.internal_identifier.blank?
   end
-
 end
+

data/app/models/content.rb

@@ -5,6 +5,7 @@ class Content < ActiveRecord::Base
   acts_as_commentable
   acts_as_versioned  :table_name => :content_versions
   can_be_published
+  has_relational_dynamic_attributes
 
   has_many :website_section_contents, :dependent => :destroy
   has_many :website_sections, :through => :website_section_contents
@@ -91,7 +92,7 @@ class Content < ActiveRecord::Base
   end
 
   def get_comments(limit)
-    self.commentable.comments.recent.limit(limit).all
+    self.comments.recent.limit(limit).all
   end
 
   def update_content_area_and_position_by_section(section, content_area, position)
@@ -119,6 +120,37 @@ class Content < ActiveRecord::Base
     position
   end
 
+  def assign_attribute_on_save
+    super
+
+    Article.find_by_internal_identifier(self.internal_identifier) ? attribute_type_description = "updated_by_role"  : attribute_type_description = "created_by_role"
+
+    if attribute_type_description == "created_by_role"
+      user = self.created_by
+    else
+      user = User.find(self.versions.sort_by {|version| version.version}.reverse[0].created_by_id)
+    end
+    
+    if user
+      #keep only the attributes related to the most recent change for each attribute_type
+      self.destroy_values_of_type attribute_type_description
+    
+      attribute_type = AttributeType.find_by_internal_identifier(attribute_type_description)
+      attribute_type = AttributeType.create(:description => attribute_type_description, :data_type => "Text") unless attribute_type
+
+      user.roles.each do |role|
+        new_value = AttributeValue.new(:value => role.internal_identifier)
+        attribute_type.attribute_values << new_value
+        self.attribute_values << new_value
+        new_value.save
+      end
+    end
+  end
+
+  def is_published?
+    !PublishedElement.where('published_element_record_id = ? and published_element_record_type = ? and published_elements.version = ?', self.id, 'Content', self.version).first.nil?
+  end
+  
   protected
   
   def self.build_search_results(results)
@@ -129,10 +161,10 @@ class Content < ActiveRecord::Base
 
       results_hash = {}
       if section.attributes['type'] == 'Blog'
-        results_hash[:link] = section.permalink + '/' + content.permalink
+        results_hash[:link] = section.path + '/' + content.permalink
         results_hash[:title] = content.title
       else
-        results_hash[:link] = section.permalink
+        results_hash[:link] = section.path
         results_hash[:title] = section.title
       end
       results_hash[:section] = section

data/app/models/document.rb

@@ -0,0 +1,8 @@
+class Document < ActiveRecord::Base
+  has_relational_dynamic_attributes
+  has_file_assets
+
+  belongs_to :document_record, :polymorphic => true
+  belongs_to :document_type
+  
+end

data/app/models/document_type.rb

@@ -0,0 +1,3 @@
+class DocumentType < ActiveRecord::Base
+  has_many :documents
+end

data/app/models/documented_content.rb

@@ -0,0 +1,29 @@
+class DocumentedContent < Content
+  has_permalink :title
+  before_save :check_internal_indentifier
+
+  def to_param
+    permalink
+  end
+
+  def check_internal_indentifier
+    self.internal_identifier = self.permalink if self.internal_identifier.blank?
+  end
+  
+  def content_hash
+    {:id => self.id, :title => self.title, :body_html => self.body_html}  
+  end
+  
+  def self.find_published_by_section(active_publication, website_section)
+    published_content = []
+    documented_item = DocumentedItem.where(["online_document_section_id = ?", website_section.id]).first
+    if documented_item
+      documented_content = DocumentedContent.find(documented_item.documented_content_id)
+      content = get_published_version(active_publication, documented_content)
+      published_content << content unless content.nil?
+    end
+
+    published_content.first
+  end
+  
+end

data/app/models/documented_item.rb

@@ -0,0 +1,31 @@
+class DocumentedItem < ActiveRecord::Base
+  belongs_to :online_document_section
+  
+  def content
+    if content?
+      Content.find(documented_content_id)
+    elsif klass?
+      self.documented_klass
+    end
+  end
+  
+  def published_content(active_publication)
+    if content?
+      DocumentedContent.find_published_by_section(active_publication, online_document_section)
+    elsif klass?
+      self.documented_klass
+    end
+  end
+
+  def klass?
+    !!self.documented_klass
+  end
+  
+  def content?
+    !!self.documented_content_id
+  end
+  
+  def self.find_by_section_id( website_section_id )
+    DocumentedItem.where(["online_document_section_id = ?", website_section_id]).first
+  end
+end