muck-users 0.3.20 → 3.0.0

data/config/locales/zh.yml

@@ -0,0 +1,219 @@
+--- 
+zh: 
+  muck: 
+    roles: 
+      assign_role: 分配角色
+      edit_roles: 编辑角色
+      remove_role: 删除角色
+      role_created: 已成功创建角色。
+      roles: 角色
+    users: 
+      access_code: 接入码
+      access_code_add_problem: 添加访问代码问题
+      access_code_added: 访问代码已成功添加
+      access_code_created: 创建
+      access_code_delete_confirm: 你确定要取消此访问代码？
+      access_code_delete_error: 错误发生在试图删除访问代码
+      access_code_delete_link: 删除访问代码
+      access_code_delete_problem: 无法删除访问代码，已与它相关的用户。
+      access_code_deleted: 删除访问代码。
+      access_code_edit_link: 编辑接入码
+      access_code_edit_problem: 访问代码编辑问题
+      access_code_expires: 过期
+      access_code_fullfill_invites: 履行INVITE请求
+      access_code_fullfill_invites_limit: 邀请请求限制
+      access_code_fullfill_invites_limit_tip: 输入一个数字，以限制发出请求的数量。例如，输入100将限制邀请到最近的100个请求
+      access_code_fullfill_invites_tip: 选择此处，发送邀请给谁要求的是邀请用户。这将忽略上面指定的任何电子邮件。
+      access_code_help: "如果您收到我们的访问代码，请在上面的框中输入它。您可能还%{access_request_anchor}请求访问代码.-.-."
+      access_code_new: 新的接入代码
+      access_code_related_users: 用户谁签署了这些代码注册
+      access_code_request_count: "目前有%{access_code_requests_count}访问代码请求"
+      access_code_request_thank_you: 感谢您的要求。我们会在尽快联系。
+      access_code_request_tip: 输入您的电子邮件，我们会向您发送访问代码只要一可用。谢谢！
+      access_code_tip: 输入访问代码。
+      access_code_unlimited: 无限
+      access_code_update_problem: 有一个问题更新的接入码。
+      access_code_use_limit: 使用限制
+      access_code_uses: 用途
+      access_codes: 访问代码
+      access_denied: 您没有权限访问请求的页面。
+      access_required_warning: 目前网站的访问限制。你需要一个有效的接入码进行注册。
+      account_activated: 您的帐户已激活！现在，您可以登录。
+      account_not_activated: "您%{application_name}帐户尚未被激活。"
+      activation_complete: 激活完成
+      activation_instructions: 启动说明
+      activation_not_found: 激活代码找不到。请尝试创建一个新帐户。
+      add: 新增
+      add_access_code: 新增接入码
+      add_access_code_title: 新增接入码
+      add_permission: （添加许可）
+      add_permission_to_user: "添加权限用户%{user}"
+      add_role: 新增角色
+      add_role_dialog_title: 新增角色
+      add_user_to_role: 添加用户到角色
+      add_user_to_role_title: 添加用户到一个新的角色。
+      admin: 
+        activate_all_inactive_users: 激活所有非活动用户
+        activate_all_inactive_users_confirm: 你确定要激活系统中的所有非活动用户？这不能被撤销！
+        search_users: 搜索用户
+        show_emails: 显示电子邮件
+        unactivated_users: "未激活用户有%{count}"
+      admin_requred: 您必须是管理员才能访问此功能。
+      admin_users_title: 用户管理
+      all_users: 所有用户
+      already_activated: 您的帐户已经被激活。您可以登录以下。
+      already_logged_in: 您已经登录，不需要恢复密码。
+      already_registered: 已经是会员？
+      application_base_url_not_set: "请设置在global_config.yml application_base_url"
+      bulk_access_code_emails: 电子邮件
+      bulk_access_code_emails_tip: 用逗号分隔的电子邮件
+      bulk_access_code_message: 消息
+      bulk_access_code_problem: 添加访问代码问题
+      bulk_access_code_subject: 科目
+      bulk_access_code_tip: 可选。如果代码被指定，那么该代码将被发送到所有用户。给这一领域的空白发送一个唯一的代码，每个用户。
+      bulk_access_codes: 大量接码
+      bulk_access_codes_created: "批量访问创建和通过电子邮件发送给%{email_count}邮件代码。"
+      bulk_access_codes_description: 这将产生一个独特的，一次性使用接入码为各自提供的电子邮件。
+      bulk_access_codes_title: 大量接码
+      cannot_deactivate_yourself: 您不能停用，你自己！
+      cant_delete_admin: 您不能删除一个用户，在管理员的角色。删除从管理员角色的用户，然后再试一次。请小心删除管理员。如果您删除所有的管理员帐户，您将不再能够登录到管理系统。
+      cant_delete_administrator_role: 您不能删除管理员角色。
+      cant_disable_admin: 无法禁用管理员。请删除从管理员角色的用户，然后再试一次。
+      change_password: 更改密码
+      change_permissions: 更改角色
+      change_permissions_for: "更改%{user}权限"
+      change_your_password: 更改您的密码
+      choose_member_name: 会员名称
+      click_to_sign_up_now: 点击这里立即注册。
+      complete_profile: 完成您的个人资料
+      confirm_delete_account: "你确定要删除自己的帐户？\\ n这无法复原。"
+      confirm_password: 确认密码
+      confirm_select_new_password: 确认密码更改
+      could_not_find_reset_code: 找不到密码重设代码。请尝试重置您的密码。
+      could_not_find_user_with_email: 找不到与该电子邮件地址的用户。
+      current_password: 当前密码
+      delete: 删除
+      delete_my_account: 删除我的用户帐户和所有我的数据。
+      delete_this_user: 删除此用户。
+      deleting_user: 删除用户...
+      edit: 编辑
+      edit_access_code: 编辑接入码
+      edit_access_code_title: 编辑接入码
+      edit_profile: 编辑个人资料
+      edit_role_dialog_title: 编辑角色
+      email: 电邮
+      email_address: 电邮地址
+      email_available: 电子邮件可用
+      email_empty: 请输入电子邮件地址
+      email_help: 请使用有效的，目前的电子邮件地址。我们绝不会分享或垃圾邮件的电子邮件地址。
+      email_invalid: 无效的电子邮件
+      email_not_available: "电子邮件已在使用。 %{reset_password_help}"
+      email_recover_prompt: 请提供您的电子邮件签署了恢复您的密码组成的。
+      expiration_date: 失效日期
+      expiration_date_tip: 输入日期后，该密码将失效
+      first_name: 名字
+      forgot_password: 忘记密码
+      forgot_username: 忘记用户名
+      forgot_your_password: 忘记密码？
+      forgot_your_username: 忘记用户名？
+      invalid_username: 用户名无效
+      join_application_name: 加入并完成它
+      last_name: 姓
+      login: 登录
+      login_empty: 请输入登录
+      login_fail: 很抱歉，但我们无法识别您的登录信息。请再试一次。
+      login_out_success: 您已登出。
+      login_requred: 您必须先登录才能访问此功能。
+      login_success: 登录成功！
+      login_title: 登录到您的帐户
+      logout_required: ~
+      my_dashboard: 我的控制台
+      name: 名称
+      navigation: 
+        all_users: 所有用户
+        inactive_users: 非活动用户
+        search_users: 搜索用户
+      new_password_doesnt_match: 新密码不符合密码确认。
+      old_password_incorrect: 您的旧密码不正确。
+      password: 密码
+      password_cannot_be_blank: 密码字段不能为空。
+      password_confirmation_help: 为了确保您的密码正确，请重新输入在这里。
+      password_help: 您的密码应至少为六个字符。阿上和小写字母和数字混合效果很好
+      password_mismatch: 密码不匹配。
+      password_not_reset: 密码不被复位。
+      password_reset: 密码重置。
+      password_reset_email_subject: "您已要求更改密码%{application_name}"
+      password_reset_link_sent: 说明重置您的密码已经发送给你。请检查您的电子邮件。
+      password_updated: 密码已成功更新。
+      permission_denied: 您没有权限来完成要求的动作。
+      problem_changing_password: "有一个问题，改变你的密码。 %{errors}"
+      problem_creating_account: 有一个问题，建立帐户。请更正以下错误：
+      problem_editing_account: 有一个问题更新您的信息。
+      recover_password: 恢复密码
+      recover_password_prompt: （如果您忘记了密码恢复它在这里）
+      register_account: "注册一个%{application_name}帐户"
+      register_for_account: 注册一个帐户
+      remember_me: 记住我
+      remove_my_account: 删除我的帐户
+      request_access_code: 要求接入码
+      request_username: 要求用户名
+      request_username_subject: 忘记用户名
+      reset_password: 重置您的密码
+      reset_your_password: 重置您的密码
+      role: 角色
+      role_delete_confirm: 你确定要删除这个角色？所有相关的权限也将被删除！
+      role_deleted: 删除角色
+      role_not_deleted: 角色不能被删除
+      roles: 角色
+      save: 保存
+      select_new_password: 选择一个新密码
+      sign_in: 登录
+      sign_in_now: 马上注册！
+      sign_in_title: 登录
+      sign_out_title: 登出
+      sign_up: 赶快注册
+      sign_up_now: 登录了现在
+      sorry_invalid_reset_code: 很抱歉，但我们无法找到您的帐户。如果您有问题，可以再复制并粘贴到浏览器从您的电子邮件网址或重新启动重置密码的过程。
+      submit: 提交
+      terms_and_service: "通过点击'登录了现在'你同意与%{tos_link_anchor}条款和条件，遵守.-.-."
+      terms_and_service_tip: 为了注册，你必须同意的条款和条件。你可以先检讨通过点击链接进行这些政策。
+      terms_of_service_required: 您必须接受服务条款。
+      thanks_sign_up: 感谢您了！
+      thanks_sign_up_check: 您的帐户已创建。请为您的帐户启动说明你的电子邮件！
+      thanks_sign_up_login: 感谢您了！现在，您可以登陆
+      total_users: "共有用户：%{total}"
+      unlimited: 无限制使用
+      unlimited_tip: 在这里检查，如果访问代码可以使用的次数不限。这将覆盖使用的限制。
+      update: 更新
+      update_profile: 更新您的个人资料
+      update_user: 更新您的用户信息
+      update_user_admin: 更新用户
+      use_limit: 使用人数
+      use_limit_tip: 输入接入码的次数都可以使用。
+      user_account_deleted: 您已成功删除您的帐户。
+      user_disable_problem: 有一个问题，禁用该用户。
+      user_disabled: 用户禁用
+      user_enable_problem: 有一个问题使该用户。
+      user_enabled: 用户启用
+      user_marked_active: 用户已被标记为活动
+      user_marked_inactive: 用户已被标记为无效
+      user_not_activated_error: 不能激活用户
+      user_not_deactivated_error: 用户无法关闭
+      user_successfully_deleted: "用户%{login}已成功删除。"
+      user_update: 你的用户信息已更新。
+      user_update_sucess: 用户已成功更新
+      username: 用户名
+      username_available: 使用者名称
+      username_help: 您可以使用6至20个字符。如果您想要的名称不可尝试加入数字或标点符号。
+      username_not_available: 用户名不可用
+      username_recover_prompt: 请提供您的电子邮件时使用您创建帐户，您的用户将通过电子邮件发送给您。
+      username_sent: 您的用户名已被送往电子邮件发送给您。请检查您的电子邮件。
+      users_admin: 用户
+      users_in_role: "在角色的用户：%{role}"
+      validation_are_required: 是必需的。
+      validation_is_required: 是必需的。
+      view_your_account: 查看您的帐户
+      welcome: 欢迎
+      welcome_email_subject: "欢迎来到%{application_name}"
+      welcome_message: 欢迎来到淤泥。该系统提供了基本的组件，帮助您建立自己的网站。
+      what_is_the_email: 什么是电子邮件地址，用于创建自己的帐户？

data/config/routes.rb

@@ -0,0 +1,70 @@
+Rails.application.routes.draw do
+  
+  # users
+  resources :users, :controller => 'muck/users' do
+    collection do
+      post :is_login_available
+      post :is_email_available
+      get :login_search
+    end
+    member do
+      get :welcome 
+      get :activation_instructions
+    end
+  end
+                    
+  match '/signup'                        => 'muck/users#new',                     :as => :signup, :constraints => { :protocol => muck_routes_protocol }
+  match '/users/signup_complete/:id'     => 'muck/users#welcome',                 :as => :signup_complete
+  match '/users/activation_complete/:id' => 'muck/users#welcome',                 :as => :activation_complete
+  match '/signup_complete_activate/:id'  => 'muck/users#activation_instructions', :as => :signup_complete_activation_required
+  match 'account'                        => 'muck/users#show',                    :as => :account
+  
+  # activations
+  resources :activations, :controller => 'muck/activations'
+  match '/activate/:activation_code' => 'muck/activations#new', :as => :activate
+  
+  # passwords
+  resources :password_resets, :controller => 'muck/password_resets'
+  match '/forgot_password'    => 'muck/password_resets#new',    :as => :forgot_password, :constraints => { :protocol => muck_routes_protocol }
+  match '/reset_password/:id' => 'muck/password_resets#edit',   :as => :reset_password, :constraints => { :protocol => muck_routes_protocol }
+  match '/reset_password/:id' => 'muck/password_resets#update', :as => :reset_password, :constraints => { :protocol => muck_routes_protocol }, :method => 'put'
+
+  # username
+  resource :username_request, :controller => 'muck/username_request'
+  match '/forgot_username' => 'muck/username_request#new', :as => :forgot_username, :constraints => { :protocol => muck_routes_protocol }
+  
+  # sessions
+  resource :user_session, :controller => 'muck/user_sessions'
+  match '/login'                     => 'muck/user_sessions#new',     :as => :login, :constraints => { :protocol => muck_routes_protocol }
+  match '/logout'                    => 'muck/user_sessions#destroy', :as => :logout, :constraints => { :protocol => muck_routes_protocol }
+  match '/signup_complete_login/:id' => 'muck/user_sessions#new',     :as => :signup_complete_login_required
+  
+  # Access codes
+  resources :access_code_requests, :controller => 'muck/access_code_requests'
+
+  # page a user is taken to when they log out
+  match '/login' => 'user_session#new', :as => :logout_complete
+  
+  # admin
+  namespace :admin do
+    resources :users, :controller => 'muck/users' do
+      collection do
+        get :inactive
+        post :search
+        get :inactive_emails
+        get :activate_all
+      end
+      member do
+        get :permissions
+      end
+    end
+    resources :roles, :controller => 'muck/roles'
+    resources :access_codes, :controller => 'muck/access_codes' do
+      collection do
+        get :bulk
+        post :bulk_create
+      end
+    end
+  end
+  
+end

data/lib/muck_users/config.rb

@@ -0,0 +1,41 @@
+module MuckUsers
+  
+  def self.configuration
+    # In case the user doesn't setup a configure block we can always return default settings:
+    @configuration ||= Configuration.new
+  end
+  
+  def self.configure
+    self.configuration ||= Configuration.new
+    yield(configuration)
+  end
+
+  class Configuration
+    attr_accessor :automatically_activate                   # Automatically active a users account during registration. If true the user won't get a 
+                                                            # 'confirm account' email. If false then the user will need to confirm their account via an email.
+    attr_accessor :automatically_login_after_account_create # Automatically log the user in after they have setup their account. This should be false if you 
+                                                            # require them to activate their account.
+    attr_accessor :send_welcome                             # Send out a welcome email after the user has signed up.
+
+    # if you use recaptcha you will need to also provide a public and private key available from http://recaptcha.net.
+    attr_accessor :use_recaptcha      # This will turn on recaptcha during registration. This is an alternative to sending the 
+                                      # user a confirm email and can help reduce spam registrations.
+    
+    attr_accessor :let_users_delete_their_account   # Turn on/off ability for users to delete their own account. It is not recommended that you let 
+                                                    # users delete their own accounts since the delete can cascade through the system with unknown results.
+
+    attr_accessor :require_access_code        # Require that the user have an access code to be able to sign up.
+    attr_accessor :validate_terms_of_service  # Require that the accept terms of service before signing up.
+    
+    def initialize
+      self.automatically_activate = true
+      self.automatically_login_after_account_create = true
+      self.send_welcome = true
+      self.use_recaptcha = false
+      self.let_users_delete_their_account = false
+      self.require_access_code = false
+      self.validate_terms_of_service = false
+    end
+    
+  end
+end

data/lib/muck_users/controllers/authentic_application.rb

@@ -0,0 +1,237 @@
+module MuckUsers
+  module AuthenticApplication
+    
+    extend ActiveSupport::Concern
+    
+    included do
+      helper_method :current_user_session, :current_user, :logged_in?, :admin?, :is_me?, :is_owner?
+    end
+      
+    protected
+      
+      # Returns true or false if the user is logged in.
+      def logged_in?
+        !current_user.blank?
+      end
+
+      def current_user_session
+        return @current_user_session if defined?(@current_user_session)
+        @current_user_session = UserSession.find
+      end
+
+      def current_user
+        return @current_user if defined?(@current_user)
+        @current_user = current_user_session && current_user_session.record
+      end
+
+      def admin_required
+        unless logged_in? && admin?
+          store_location
+          flash[:notice] = I18n.t('muck.users.admin_requred')
+          redirect_to login_path
+        end
+      end
+      
+      def login_required
+        unless logged_in?
+          store_location
+          flash[:notice] = I18n.t('muck.users.login_requred')
+          redirect_to login_path
+        end
+      end
+
+      def not_logged_in_required
+        if logged_in?
+          store_location
+          flash[:notice] = t('muck.users.logout_required')
+          enforce_logout_required
+        end
+      end
+      
+      def check_role(role)
+        unless logged_in? && current_user.has_role?(role)
+          if logged_in?
+            permission_denied
+          else
+            store_referer
+            access_denied
+          end
+        end
+      end
+
+      def admin?
+        logged_in? && current_user.admin?
+      end    
+
+      # check to see if the current user is the owner of the specified object
+      def is_owner?(obj)
+        obj.user_id == current_user.id
+      end
+      
+      def is_owner?(user, user_id)
+        user.id == user_id
+      end
+      
+      # check to see if the given user is the same as the current user
+      def is_me?(user)
+        user == current_user
+      end
+
+      # checks permissions on an object.  Redirects if the current user
+      # doesn't own it or have admin rights
+      def protect_owner(obj)
+        if is_owner?(obj) || admin?
+          true
+        else
+          permission_denied
+          false
+        end
+      end
+
+      # allow or deny access depending on options specified
+      def allowed_access?(options)
+        if !options[:owner].nil? && !options[:object_user_id].nil?
+          return true if is_owner?(options[:owner], options[:object_user_id])
+        end
+
+        options[:permit_roles].each do |role|
+          return true if current_user.has_role?(role)
+        end
+
+        # access denied
+        permission_denied
+        false 
+      end
+
+      def can_access?(user, object, roles, &block)
+        if logged_in? && user.is_in_role?(object, roles)
+          content = capture(&block)
+          concat(content, block.binding)
+        end
+      end
+
+      def is_mine?(user, &block)
+        if logged_in? && (current_user.id == user.id)
+          content = capture(&block)
+          concat(content, block.binding)
+        end 
+      end
+
+      # Redirect as appropriate when an access request fails.
+      #
+      # The default action is to redirect to the login screen.
+      #
+      # Override this method in your controllers if you want to have special
+      # behavior in case the user is not authorized
+      # to access the requested action.  For example, a popup window might
+      # simply close itself.
+      def access_denied
+        respond_to do |format|
+          format.html do
+            store_location
+            flash[:error] = I18n.t('muck.users.access_denied')
+            redirect_to login_path
+          end
+          format.xml do
+            request_http_basic_authentication 'Web Password'
+          end
+        end
+      end
+
+      def permission_denied
+        respond_to do |format|
+          format.html do
+            domain_name = MuckEngine.configuration.application_url
+            raise t('muck.users.application_base_url_not_set') if domain_name.blank?
+            http_referer = session[:refer_to]
+            if http_referer.nil?
+              store_referer
+              http_referer = ( session[:refer_to] || domain_name )
+            end
+            flash[:error] = I18n.t('muck.users.permission_denied')
+            if http_referer[0..domain_name.length] != domain_name
+              session[:refer_to] = nil
+              redirect_to root_path
+            else
+              redirect_to_referer_or_default(root_path)  
+            end
+          end
+          format.xml do
+            headers["Status"]           = "Unauthorized"
+            headers["WWW-Authenticate"] = %(Basic realm="Web Password")
+            render :text => I18n.t('muck.users.permission_denied'), :status => '401 Unauthorized'
+          end
+          format.js do
+            render :text => I18n.t('muck.users.permission_denied')
+          end
+        end
+      end
+
+      def enforce_logout_required
+        respond_to do |format|
+          format.html do
+            redirect_to current_user
+          end
+        end
+      end
+      
+      # Store the URI of the current request in the session.
+      # We can return to this location by calling #redirect_back_or_default.
+      # Only store html requests so we don't redirect a user back to and rss or xml feed
+      def store_location
+        if request.format == :html
+          session[:return_to] = request.fullpath
+        end
+      end
+      
+      def store_referer
+        session[:refer_to] = request.env["HTTP_REFERER"]
+      end
+
+      # Set the return to to a specified url
+      def set_return_to(url)
+        session[:return_to] = url
+      end
+      
+      # Redirect to the URI stored by the most recent store_location call or
+      # to the passed default.
+      def redirect_back_or_default(default)
+        redirect_to(session[:return_to] || default)
+        session[:return_to] = nil
+      end
+
+      def redirect_to_referer_or_default(default)
+        redirect_to(session[:refer_to] || default)
+        session[:refer_to] = nil
+      end
+
+      # Called from #current_user.  Now, attempt to login by basic authentication information.
+      # def login_from_basic_auth
+      #   authenticate_with_http_basic do |username, password|
+      #     self.current_user = User.authenticate(username, password)
+      #   end
+      # end
+
+      # Used to get a user based on parameters
+      def get_user
+        return nil if !logged_in?
+        if is_admin?
+          @user ||= User.find(params[:user_id]) rescue nil
+          @user ||= User.find(params[:id]) rescue nil
+          @user ||= current_user
+        else
+          @user = current_user
+        end
+      end
+      
+      # Try to get a user.  If no user is found then call permission_denied
+      def get_user_deny
+        @user = get_user
+        if !@user
+          flash[:notice] = "There was a problem finding your user information.  Please try again."
+          permission_denied 
+        end
+      end
+
+  end
+end

data/lib/muck_users/engine.rb

@@ -0,0 +1,54 @@
+require 'muck_users'
+require 'rails'
+
+module MuckUsers
+  class Engine < ::Rails::Engine
+    
+    def muck_name
+      'muck-users'
+    end
+    
+    initializer 'muck_users.filter_paramters' do |app|     
+      app.config.filter_parameters << :password
+      app.config.filter_parameters << :password_confirmation
+    end   
+
+    #initializer 'muck_users.add_admin_ui_links', :after => "i18n.callbacks" do
+    initializer 'muck_users.add_admin_ui_links', :after => 'muck_engine.add_admin_ui_links' do
+      # Add users to the dashboard
+      MuckEngine.configuration.add_muck_dashboard_item('admin/users/dashboard_widget')
+      # Add admin link for users and roles
+      # MuckEngine.add_muck_admin_nav_item(I18n.translate('muck.engine.admin_users'), '/admin/users', '/images/admin/user.gif') rescue nil
+      # MuckEngine.add_muck_admin_nav_item(I18n.translate('muck.engine.admin_access_codes'), '/admin/users', '/images/admin/user.gif') rescue nil
+      MuckEngine.configuration.add_muck_admin_nav_item(I18n.translate('muck.engine.admin_users'), '/admin/users')
+      MuckEngine.configuration.add_muck_admin_nav_item(I18n.translate('muck.engine.admin_roles'), '/admin/roles')
+      MuckEngine.configuration.add_muck_admin_nav_item(I18n.translate('muck.engine.admin_access_codes'), '/admin/access_codes')
+    end
+            
+    initializer 'muck_users.controllers' do
+      ActiveSupport.on_load(:action_controller) do
+        include MuckUsers::AuthenticApplication
+      end
+    end
+    
+    initializer 'muck_users.helpers' do
+      ActiveSupport.on_load(:action_view) do
+        include MuckUsersHelper
+      end
+    end
+    
+    initializer 'muck_users.models' do
+      ActiveSupport.on_load(:active_record) do
+        include MuckUsers::SecureMethods
+        include MuckUsers::Exceptions
+      end
+    end
+   
+    initializer 'muck_engine.i18n' do
+      ActiveSupport.on_load(:i18n) do
+        I18n.load_path += Dir[ File.join(File.dirname(__FILE__), '..', '..', 'rails_i18n', '*.{rb,yml}') ]
+      end
+    end
+    
+  end
+end

data/lib/muck_users/form_builder.rb

@@ -0,0 +1,12 @@
+module MuckUsers
+  module FormBuilder
+
+    # creates a select control with roles
+    def roles_select(method, options = {}, html_options = {})
+      self.select(method, Role.by_alpha, options.merge(:wrapper_id => 'roles-container'), html_options.merge(:id => 'roles'))
+    end
+  
+  end
+end
+    
+MuckEngine::FormBuilder.send :include, MuckUsers::FormBuilder