kryptonite 0.0.1

data/app/controllers/kryptonite/users_controller.rb

@@ -0,0 +1,102 @@
+module Kryptonite
+  class UsersController < Kryptonite::KryptoniteController
+
+    unloadable
+  
+    before_filter :needs_admin, :except => [:show, :destroy, :update, :update_password]
+    before_filter :needs_admin_or_current_user, :only => [:show, :destroy, :update, :update_password]
+ 
+    def index
+      @kryptonite_page_title = "Users"
+    	@users = Kryptonite::User.paginate :order => "login", :page => params[:page]
+    end
+ 
+    def new
+      @kryptonite_page_title = "Add a new user"
+    	@kryptonite_user = Kryptonite::User.new
+    	@kryptonite_user.time_zone = Rails.configuration.time_zone
+    end
+  
+    def create
+      @kryptonite_user = Kryptonite::User.new params[:kryptonite_user]
+    
+      if @kryptonite_user.save
+        flash[:notice] = "An email has been sent to " + @kryptonite_user.name + " with the new account details"
+        redirect_to kryptonite_users_path
+      else
+        flash.now[:warning] = "There were problems when trying to create a new user"
+        render :action => :new
+      end
+    end
+  
+    def show
+    	@kryptonite_user = Kryptonite::User.find params[:id]
+    	@kryptonite_page_title = @kryptonite_user.name + " | View User"
+    end
+ 
+    def update
+      @kryptonite_user = Kryptonite::User.find params[:id]
+      @kryptonite_page_title = @kryptonite_user.name + " | Update User"
+
+      if @kryptonite_user.update_attributes params[:kryptonite_user]
+        flash[:notice] = @kryptonite_user.name + " has been updated"
+      else
+        flash.now[:warning] = "There were problems when trying to update this user"
+        render :action => :show
+        return
+      end
+      
+      if @session_user.is_admin?
+        redirect_to kryptonite_users_path
+      else
+        redirect_to :controller => :kryptonite, :action => :index
+      end
+    end
+ 
+    def update_password
+      @kryptonite_user = Kryptonite::User.find params[:id]
+      @kryptonite_page_title = @kryptonite_user.name + " | Update Password"
+       
+      if @kryptonite_user.valid_password? params[:form_current_password]
+        if @kryptonite_user.update_attributes params[:kryptonite_user]
+          flash.now[:notice] = "Your password has been changed"
+        else
+          flash.now[:warning] = "There were problems when trying to change the password"
+        end
+      else
+        flash.now[:warning] = "The current password is incorrect"
+      end
+      
+      render :action => :show
+    end
+ 
+    def reset_password
+      @kryptonite_user = Kryptonite::User.find params[:id]
+      @kryptonite_page_title = @kryptonite_user.name + " | Reset Password"
+       
+      @kryptonite_user.notify_of_new_password = true unless @kryptonite_user.id == @session_user.id
+      
+      if @kryptonite_user.update_attributes params[:kryptonite_user]
+        if @kryptonite_user.id == @session_user.id
+          flash.now[:notice] = "Your password has been reset"
+        else    
+          flash.now[:notice] = "Password has been reset and " + @kryptonite_user.name + " has been notified by email"
+        end
+        
+      else
+        flash.now[:warning] = "There were problems when trying to reset this user's password"
+      end
+      render :action => :show
+    end
+ 
+    def destroy
+      user = Kryptonite::User.find params[:id]
+      if user.is_admin? == false || Kryptonite::User.has_more_than_one_admin
+        user.destroy
+        flash[:notice] = user.name + " has been deleted"
+      end
+      redirect_to kryptonite_users_path
+    end
+ 
+  end
+end

data/app/helpers/kryptonite/kryptonite_helper.rb

@@ -0,0 +1,200 @@
+module Kryptonite
+  module KryptoniteHelper
+	
+	  def kryptonite_get_version_info  
+	    YAML::load_file File.join(File.dirname(__FILE__), '..', '..', '..', 'PUBLIC_VERSION.yml')
+	  end
+	
+  	def kryptonite_get_full_version_string
+  	  version_info = kryptonite_get_version_info
+  	  "v.#{version_info['major']}.#{version_info['minor']}.#{version_info['patch']}"
+  	end
+	
+  	def kryptonite_get_short_version_string
+  	  version_info = kryptonite_get_version_info
+  	  "v.#{version_info['major']}"
+  	end
+	
+  	def kryptonite_generate_page_title
+		
+  		if @kryptonite_page_title.nil?
+  			return kryptonite_config_website_name
+  		end
+		
+  		@kryptonite_page_title + " > " + kryptonite_config_website_name
+  	end
+	
+  	def kryptonite_get_access_level_text level
+  	  case level
+        when $KRYPTONITE_USER_ACCESS_LEVEL_ADMIN
+          return "Administrator"
+        when $KRYPTONITE_USER_ACCESS_LEVEL_USER
+  	      return "User"
+  	    else
+  	      return "Unknown"
+  	  end
+  	end
+	
+  	def kryptonite_get_access_level_array
+  	  [["Administrator", $KRYPTONITE_USER_ACCESS_LEVEL_ADMIN], ["User", $KRYPTONITE_USER_ACCESS_LEVEL_USER]]
+  	end
+	
+  	def kryptonite_table_cell_link contents, link, options = {}
+	  
+  	  if options.key? :kryptonite_truncate
+  	    contents = truncate(contents, :length => options[:kryptonite_truncate], :omission => "...")
+  	  end
+	  
+    	link_to "#{contents}".html_safe, link, options
+    end
+    
+    def kryptonite_table_cell_no_link contents, options = {}
+	  
+  	  if options.key? :kryptonite_truncate
+  	    contents = truncate(contents, :length => options[:kryptonite_truncate], :omission => "...")
+  	  end
+	  
+    	"<div class='noLink'>#{contents}</div>".html_safe
+    end
+	
+  	def kryptonite_show_icon icon_name
+  		"<div class='icon'><img src='/kryptonite/images/icons/#{icon_name}.png' alt='' /></div>".html_safe
+  	end
+	
+  	def kryptonite_show_row_icon icon_name
+  		"<div class='iconRow'><img src='/kryptonite/images/icons/#{icon_name}.png' alt='' /></div>".html_safe
+  	end
+	
+  	# Styled form tag helpers
+	
+  	def kryptonite_text_field form, obj, attribute, options = {}
+  	  kryptonite_form_tag_wrapper(form.text_field(attribute, strip_kryptonite_options(options_hash_with_merged_classes(options, 'kryptoniteTextField'))), form, obj, attribute, options).html_safe
+  	end
+	
+  	def kryptonite_password_field form, obj, attribute, options = {}
+  		kryptonite_form_tag_wrapper(form.password_field(attribute, strip_kryptonite_options(options_hash_with_merged_classes(options, 'kryptoniteTextField'))), form, obj, attribute, options).html_safe
+  	end
+	
+  	def kryptonite_text_area form, obj, attribute, options = {}
+  	  kryptonite_form_tag_wrapper(form.text_area(attribute, strip_kryptonite_options(options_hash_with_merged_classes(options, 'kryptoniteTextArea'))), form, obj, attribute, options).html_safe
+  	end
+	
+  	def kryptonite_text_area_big form, obj, attribute, options = {}
+  	 kryptonite_form_tag_wrapper(form.text_area(attribute, strip_kryptonite_options(options_hash_with_merged_classes(options, 'kryptoniteTextAreaBig'))), form, obj, attribute, options).html_safe
+  	end
+	
+  	def kryptonite_check_box form, obj, attribute, options = {}
+  	  form_tag = form.check_box(attribute, strip_kryptonite_options(options))
+	  
+  	  if options.key? :kryptonite_box_label
+  	    form_tag = "<div>" + form_tag + "<span class=\"rcText\">#{options[:kryptonite_box_label]}</span></div>".html_safe
+  	  end
+	  
+  	  kryptonite_form_tag_wrapper(form_tag, form, obj, attribute, options).html_safe
+  	end
+	
+  	def kryptonite_check_box_group form, obj, check_boxes = {}
+      form_tags = ""
+    
+      for check_box in check_boxes
+        form_tags += kryptonite_check_box form, obj, check_box[0], check_box[1]
+      end
+    
+      kryptonite_form_tag_wrapper form_tag, form, obj, attribute, options
+    end
+	
+  	def kryptonite_radio_button form, obj, attribute, tag_value, options = {}
+  	  form_tag = form.radio_button(obj, attribute, tag_value, strip_kryptonite_options(options))
+	  
+  	  if options.key? :kryptonite_button_label
+  	    form_tag = "<div>" + form_tag + "<span class=\"rcText\">#{options[:kryptonite_button_label]}</span></div>".html_safe
+  	  end
+	  
+  	  kryptonite_form_tag_wrapper(form_tag, form, obj, attribute, options).html_safe
+  	end
+	
+  	def kryptonite_radio_button_group form, obj, radio_buttons = {}
+      form_tags = ""
+    
+      for radio_button in radio_buttons
+        form_tags += kryptonite_radio_button form, obj, check_box[0], check_box[1], check_box[2]
+      end
+    
+      kryptonite_form_tag_wrapper(form_tag, form, obj, attribute, options).html_safe
+    end
+	
+  	def kryptonite_select form, obj, attribute, option_tags, options = {}
+  		kryptonite_form_tag_wrapper(form.select(attribute, option_tags, strip_kryptonite_options(options), merged_class_hash(options, 'kryptoniteSelect')), form, obj, attribute, options).html_safe
+  	end
+  	
+  	def kryptonite_time_zone_select form, obj, attribute, option_tags, options = {}
+  	  kryptonite_form_tag_wrapper(form.time_zone_select(attribute, option_tags, strip_kryptonite_options(options), merged_class_hash(options, 'kryptoniteSelect')), form, obj, attribute, options).html_safe
+  	end
+	
+  	def kryptonite_collection_select form, obj, object, attribute, collection, value_method, text_method, options = {}
+  		kryptonite_form_tag_wrapper(collection_select(object, attribute, collection, value_method, text_method, strip_kryptonite_options(options), merged_class_hash(options, 'kryptoniteSelect')), form, obj, attribute, options).html_safe
+  	end
+  	
+  	def kryptonite_date_select form, obj, attribute, options = {}
+  	  kryptonite_form_tag_wrapper(form.date_select(attribute, strip_kryptonite_options(options), merged_class_hash(options, 'kryptoniteDateTimeSelect')), form, obj, attribute, options).html_safe
+  	end
+
+  	def kryptonite_time_select form, obj, attribute, options = {}
+  	  kryptonite_form_tag_wrapper(form.time_select(attribute, strip_kryptonite_options(options), merged_class_hash(options, 'kryptoniteDateTimeSelect')), form, obj, attribute, options).html_safe
+  	end
+	
+  	def kryptonite_datetime_select form, obj, attribute, options = {}
+  	  kryptonite_form_tag_wrapper(form.datetime_select(attribute, strip_kryptonite_options(options), merged_class_hash(options, 'kryptoniteDateTimeSelect')), form, obj, attribute, options).html_safe
+  	end
+	
+  	def kryptonite_file_field form, obj, object_name, attribute, options = {}
+  	  class_hash = merged_class_hash(options, 'kryptoniteFileFieldContainer')
+  	  contents = "<div class='#{class_hash[:class]}'>" + file_field(object_name, attribute, strip_kryptonite_options(options)) + '</div>'
+  	  kryptonite_form_tag_wrapper(contents, form, obj, attribute, options).html_safe
+  	end
+	
+  	def kryptonite_hidden_field form, obj, attribute, options = {}
+  	  form.hidden_field(attribute, strip_kryptonite_options(options)).html_safe
+  	end
+	
+  protected
+
+    def strip_kryptonite_options options
+      options.reject {|key, value| key.to_s.include? "kryptonite_" }
+    end
+    
+    def merged_class_hash options, new_class
+      if options.key? :class
+        new_class += " #{options[:class]}"
+      end
+        
+      {:class => new_class}
+    end
+    
+    def options_hash_with_merged_classes options, new_class
+      if options.key? :class
+        new_class += " #{options[:class]}"
+      end
+      options[:class] = new_class
+      options
+    end
+
+    def kryptonite_form_tag_wrapper form_tag, form, obj, attribute, options = {}
+        unless options.key? :kryptonite_label
+    		  human_attribute_name = attribute.to_s.humanize
+        else
+          human_attribute_name = options[:kryptonite_label]
+        end
+
+    		html = "<p>"
+
+        if obj && obj.errors[attribute].any?
+    			html += "<span class='formError'>#{human_attribute_name} #{obj.errors[attribute].first}</span>".html_safe
+    		else
+    			html += form.label(attribute, human_attribute_name)
+    		end
+
+    		html += "</p>\n<p>#{form_tag}</p>"
+    end
+  end
+end

data/app/mailers/kryptonite/kryptonite_notification.rb

@@ -0,0 +1,39 @@
+module Kryptonite
+  
+  class KryptoniteNotification < ActionMailer::Base
+	
+  	self.prepend_view_path File.join(File.dirname(__FILE__), '..', 'views', 'kryptonite')
+	
+  	def generate_new_password from, kryptonite_user, host, pass
+  		@name = kryptonite_user.name
+  		@host = host
+  		@login = kryptonite_user.login
+  		@pass = pass
+  		@from_text = kryptonite_config_website_name
+  		
+  		mail(:to => kryptonite_user.email, :from => from, :subject => "[#{kryptonite_config_website_name}] New password")
+  	end
+  
+  	def new_user_information from, kryptonite_user, host, pass
+      @name = kryptonite_user.name
+  		@host = host
+  		@login = kryptonite_user.login
+  		@pass = pass
+  		@from_text = kryptonite_config_website_name
+  		
+  		mail(:to => kryptonite_user.email, :from => from, :subject => "[#{kryptonite_config_website_name}] New user account")
+  	end
+  	
+  	def password_reset_instructions from, kryptonite_user, host
+  	  ActionMailer::Base.default_url_options[:host] = host.gsub("http://", "")
+      @name = kryptonite_user.name
+      @host = host
+      @login = kryptonite_user.login
+      @reset_password_url = edit_kryptonite_password_reset_url + "/?token=#{kryptonite_user.perishable_token}"
+      @from_text = kryptonite_config_website_name
+
+      mail(:to => kryptonite_user.email, :from => from, :subject => "[#{kryptonite_config_website_name}] Password reset instructions")
+    end
+
+  end
+end

data/app/models/kryptonite/user.rb

@@ -0,0 +1,55 @@
+include Kryptonite::ConfigHelper
+
+$KRYPTONITE_USER_ACCESS_LEVEL_ADMIN = 0
+$KRYPTONITE_USER_ACCESS_LEVEL_USER = 10
+
+module Kryptonite
+  class User < ActiveRecord::Base
+
+	  def self.table_name
+      self.to_s.gsub("::", "_").tableize
+    end
+
+    acts_as_authentic { |c| c.validate_email_field = false }
+	 
+    attr_accessor :notify_of_new_password
+	 
+    after_create :send_create_notification
+    after_update :send_update_notification
+    before_validation :check_time_zone
+    
+    validates_presence_of :login, :name, :email
+    validates_uniqueness_of :login
+    validates_format_of :email, :with => /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\Z/i
+    validates_presence_of :time_zone
+	  
+  	def self.has_more_than_one_admin
+      Kryptonite::User.where(:access_level => $KRYPTONITE_USER_ACCESS_LEVEL_ADMIN).count > 1
+    end
+	
+  	def send_create_notification
+      Kryptonite::KryptoniteNotification.new_user_information(kryptonite_config_email_from_address, self, kryptonite_config_hostname, @password).deliver
+    end
+  
+    def send_update_notification
+      if notify_of_new_password
+        notify_of_new_password = false
+        Kryptonite::KryptoniteNotification.generate_new_password(kryptonite_config_email_from_address, self, kryptonite_config_hostname, @password).deliver
+      end
+    end
+    
+    def send_password_reset_instructions
+      reset_perishable_token!
+      Kryptonite::KryptoniteNotification.password_reset_instructions(kryptonite_config_email_from_address, self, kryptonite_config_hostname).deliver
+    end
+    
+    def check_time_zone
+      self.time_zone = Rails.configuration.time_zone unless self.time_zone
+    end
+	
+  	def is_admin?
+  	  access_level == $KRYPTONITE_USER_ACCESS_LEVEL_ADMIN
+  	end
+  
+  end
+end

data/app/models/kryptonite/user_session.rb

@@ -0,0 +1,8 @@
+module Kryptonite
+  class UserSession < ::Authlogic::Session::Base
+    include ActiveModel::Conversion 
+    def persisted? 
+      false 
+    end
+  end
+end

data/app/views/kryptonite/kryptonite/blank.html.erb

@@ -0,0 +1 @@
+<h2>Welcome to the <%= kryptonite_config_website_name %> administration system</h2>

data/app/views/kryptonite/kryptonite_notification/generate_new_password.erb

@@ -0,0 +1,12 @@
+Dear <%= @name %>,<br />
+<br />
+Your password has been reset by an administrator for your account at:<br />
+<br />
+<%= @host %>/kryptonite<br />
+<br />
+Login: <%= @login %><br />
+New password: <%= @pass %><br />
+<br />
+From<br />
+<br />
+<%= @from_text %>

data/app/views/kryptonite/kryptonite_notification/new_user_information.erb

@@ -0,0 +1,12 @@
+Dear <%= @name %>,<br />
+<br />
+A new user account has been created for you at:<br />
+<br />
+<%= @host %>/kryptonite<br />
+<br />
+Login: <%= @login %><br />
+Password: <%= @pass %><br />
+<br />
+From<br />
+<br />
+<%= @from_text %>

data/app/views/kryptonite/kryptonite_notification/password_reset_instructions.erb

@@ -0,0 +1,11 @@
+Dear <%= @name %>,<br />
+<br />
+A request to reset the password for login '<%= @login %>' has been made.<br />  
+If you did not make this request, simply ignore this email.<br />
+Otherwise, click the link below to proceed:<br />
+<br />
+<%= @reset_password_url %><br />
+<br />
+From<br />
+<br />
+<%= @from_text %>