open_conference_ware 1.0.0.pre1

data/app/controllers/open_conference_ware/tracks_controller.rb

@@ -0,0 +1,118 @@
+module OpenConferenceWare
+  class TracksController < ApplicationController
+    before_filter :require_admin, only: [:new, :create, :edit, :update, :destroy]
+    before_filter :assert_current_event_or_redirect
+    before_filter :normalize_event_path_or_redirect, only: [:index]
+    before_filter :add_event_breadcrumb
+    before_filter :add_tracks_breadcrumb
+    before_filter :assign_track, only: [:show, :edit, :update, :destroy]
+
+    # GET /tracks
+    # GET /tracks.xml
+    def index
+      @tracks = @event.tracks.order("title ASC")
+
+      respond_to do |format|
+        format.html # index.html.erb
+        format.json { render json: @tracks }
+        format.xml  { render xml: @tracks }
+      end
+    end
+
+    # GET /tracks/1
+    # GET /tracks/1.xml
+    def show
+      add_breadcrumb @track.title
+
+      respond_to do |format|
+        format.html # show.html.erb
+        format.json { render json: @track }
+        format.xml  { render xml: @track }
+      end
+    end
+
+    # GET /tracks/new
+    # GET /tracks/new.xml
+    def new
+      @track = Track.new(color: '#666666')
+
+      respond_to do |format|
+        format.html # new.html.erb
+        format.xml  { render xml: @track }
+      end
+    end
+
+    # GET /tracks/1/edit
+    def edit
+    end
+
+    # POST /tracks
+    # POST /tracks.xml
+    def create
+      @track = @event.tracks.new(track_params)
+
+      respond_to do |format|
+        if @track.save
+          flash[:success] = 'Track was successfully created.'
+          format.html { redirect_to(tracks_path) }
+          format.xml  { render xml: @track, status: :created, location: @track }
+        else
+          format.html { render action: "new" }
+          format.xml  { render xml: @track.errors, status: :unprocessable_entity }
+        end
+      end
+    end
+
+    # PUT /tracks/1
+    # PUT /tracks/1.xml
+    def update
+      respond_to do |format|
+        if @track.update_attributes(track_params)
+          flash[:success] = 'Track was successfully updated.'
+          format.html { redirect_to(track_path(@track)) }
+          format.xml  { head :ok }
+        else
+          format.html { render action: "edit" }
+          format.xml  { render xml: @track.errors, status: :unprocessable_entity }
+        end
+      end
+    end
+
+    # DELETE /tracks/1
+    # DELETE /tracks/1.xml
+    def destroy
+      @track.destroy
+
+      respond_to do |format|
+        format.html { redirect_to(tracks_path) }
+        format.xml  { head :ok }
+      end
+    end
+
+  protected
+
+    def track_params
+      params.require(:track).permit(
+        :title, :description, :color, :excerpt
+      ) if admin?
+    end
+
+    def add_event_breadcrumb
+      add_breadcrumb @event.title, @event
+    end
+
+    def add_tracks_breadcrumb
+      add_breadcrumb "Tracks", tracks_path
+    end
+
+    def assign_track
+      begin
+        @track = Track.find(params[:id])
+      rescue ActiveRecord::RecordNotFound
+        flash[:failure] = "Sorry, that track doesn't exist or has been deleted."
+        return redirect_to(tracks_path)
+      end
+    end
+
+  end
+end

data/app/controllers/open_conference_ware/user_favorites_controller.rb

@@ -0,0 +1,68 @@
+module OpenConferenceWare
+  class UserFavoritesController < ApplicationController
+    # Don't assign @event for "modify" action, it doesn't need it and will be slowed by it.
+    skip_before_filter :assign_events, only: :modify
+    skip_before_filter :assign_current_event_without_redirecting, only: :modify
+
+    before_filter :assert_user
+    before_filter :authentication_required, only: :modify
+    before_filter :assert_record_ownership, only: :modify
+
+    # GET /favorites
+    # GET /favorites.xml
+    # GET /favorites.json
+    def index
+      @user_favorites = Defer {
+        view_cache_key = "favorites,user_#{@user.id}.#{request.format},join_#{params[:join]}"
+        Rails.cache.fetch(view_cache_key) {
+          # The :join argument is sent by the AJAX UI to fetch a terse list of
+          # proposal_ids so it can display stars next to favorited proposals.
+          if params[:join] == "1"
+            UserFavorite.proposal_ids_for(@user)
+          else
+            @user.favorites.populated
+          end
+        }
+      }
+
+      respond_to do |format|
+        format.html # index.html.erb
+        format.xml  { render xml: Undefer(@user_favorites) }
+        format.json { render json: Undefer(@user_favorites) }
+        format.ics {
+          return redirect_to user_favorites_path(@user) unless schedule_visible?
+          render text: Proposal.to_icalendar(
+            @user_favorites.scheduled,
+            title: "#{@user.label.possessiveize} favorites",
+            url_helper: lambda {|item| session_url(item)})
+        }
+      end
+    end
+
+    # PUT /favorites/1.xml
+    # PUT /favorites/1.json
+    def modify
+      unless params[:proposal_id].blank? || params[:mode].blank? || !['add','remove'].include?(params[:mode])
+        @user_favorite = \
+          case params[:mode]
+          when 'add'
+            UserFavorite.add(@user.id, params[:proposal_id])
+          when 'remove'
+            UserFavorite.remove(@user.id, params[:proposal_id])
+          end
+
+        respond_to do |format|
+          format.xml  { head :ok }
+          format.json { render json: @user_favorite }
+        end
+      else
+        errors = {error: 'Malformed request.'}
+        respond_to do |format|
+          format.xml  { render xml: errors, status: :unprocessable_entity }
+          format.json { render json: errors, status: :unprocessable_entity }
+        end
+      end
+    end
+
+  end
+end

data/app/controllers/open_conference_ware/users_controller.rb

@@ -0,0 +1,120 @@
+module OpenConferenceWare
+  class UsersController < ApplicationController
+    before_filter :require_admin unless user_profiles?
+    before_filter :assert_user, only: [:show, :edit, :update, :destroy, :complete_profile, :proposals]
+    before_filter :authentication_required, only: [:edit, :update, :destroy]
+    before_filter :assert_record_ownership, only: [:edit, :update, :destroy]
+
+    def index
+      add_breadcrumb 'Users'
+
+      @users = User.order('last_name asc')
+
+      respond_to do |format|
+        format.html # Display index.html.erb for @users
+        format.json { render json: @users }
+        format.xml  { render xml: @users }
+      end
+    end
+
+    def show
+      respond_to do |format|
+        format.html # Display show.html.erb for @user
+        format.json { render json: @user }
+        format.xml  { render xml: @user }
+      end
+    end
+
+    def new
+      # Display new.html.erb
+    end
+
+    def create
+      cookies.delete :auth_token
+      # protects against session fixation attacks, wreaks havoc with
+      # request forgery protection.
+      # uncomment at your own risk
+      # reset_session
+      @user = User.new(user_params)
+
+      @user.save!
+      self.current_user = @user
+      redirect_back_or_default('/')
+      flash[:success] = "Thanks for signing up!"
+    rescue ActiveRecord::RecordInvalid
+      render action: 'new'
+    end
+
+    def edit
+      # Display edit.html.erb for @user
+
+      if params[:require_complete_profile]
+        @user.complete_profile = true
+      end
+    end
+
+    def update
+      if admin? or can_edit?(@user)
+        if params[:require_complete_profile]
+          @user.complete_profile = true
+        end
+
+        if @user.update_attributes(user_params)
+          flash[:success] = "Updated user profile."
+          return redirect_back_or_to(user_path(@user))
+        else
+          flash[:failure] = "Please complete user profile."
+          render action: "edit"
+        end
+      else
+        flash[:failure] = "Sorry, you don't have permission to edit this user: #{@user.label}"
+        return redirect_to(users_path)
+      end
+    end
+
+    def destroy
+      if admin? or can_edit?(@user)
+        @user.destroy
+        flash[:success] = "Deleted user: #{@user.label}"
+      else
+        flash[:failure] = "Sorry, you don't have permission to delete this user: #{@user.label}"
+      end
+      return redirect_back_or_to(users_path)
+    end
+
+    def complete_profile
+      if current_user.complete_profile
+        flash[:notice] = "Thank you, you have a complete user profile."
+        redirect_to(user_path(current_user))
+      else
+        flash[:notice] = "Please complete your user profile."
+        redirect_to(edit_user_path(current_user, require_complete_profile: true))
+      end
+    end
+
+    def proposals
+      @proposals = @user.proposals
+    end
+
+    private
+
+      def user_params
+        permitted = [
+          :email,
+          :affiliation,
+          :biography,
+          :website,
+          :photo,
+          :first_name,
+          :last_name,
+          :fullname,
+          :blog_url,
+          :identica,
+          :twitter]
+
+        permitted += [:admin, :selector] if admin?
+
+        params.require(:user).permit(permitted)
+      end
+  end
+end

data/app/helpers/open_conference_ware/application_helper.rb

@@ -0,0 +1,167 @@
+module OpenConferenceWare
+  # Methods added to this helper will be available to all templates in the application.
+  module ApplicationHelper
+    FLASH_KEY_TRANSLATION = {
+      "notice" => "info",
+      "failure" => "danger",
+      "success" => "success"
+    }
+    def notice
+      unless flash.blank?
+        flash.keys.map do |key|
+          content_tag("div", flash[key], class: "alert alert-#{key} alert-#{FLASH_KEY_TRANSLATION[key.to_s]}")
+        end.join("\n").html_safe
+      end
+    end
+
+    def preserve_formatting_of(text)
+      content_tag("div", simple_format(escape_once(text)), class: :compressed)
+    end
+
+    def inline_button_to(*args)
+      html = button_to(*args)
+      html.gsub!(/<div>(.*)/, '<div class="inlined">\1')
+      html.gsub!(/class="button-to"/m, 'class="button-to inlined"\1')
+      html
+    end
+
+    # Add the +html+ to the stylesheets of the layout. Example:
+    #   <%= add_stylesheet(stylesheet_link_tag "custom") %>
+    def add_stylesheet(html)
+      content_for :stylesheets, html
+    end
+
+    # Add the +html+ to the javascripts portion of the layout. Example:
+    #   <%= add_javascripts(javascript_include_tag "application") %>
+    def add_javascript(html)
+      content_for :scripts, html
+    end
+
+    # Indents a block of code to a specified minimum indent level.
+    def indent_block(string, level=0)
+      lines = Array(string)
+      common_space = lines.map{|line| line.length - line.lstrip.length}.min
+      Array(string).map{ |line| ('  ' * level) + line[common_space..-1] }.join.html_safe
+    end
+
+    # Exposes a value as a property of the JavaScript 'app' object.
+    #   Example:
+    #     <% expose_to_js :current_user_id, current_user.id %>
+    #     <script> alert(app.current_user_id); </script>
+    #
+    def expose_to_js(key, value)
+      raise(ArgumentError, "key must be a symbol") unless key.is_a?(Symbol)
+      value = "'#{value}'" unless value.is_a?(Integer) || true == value || false == value
+      content_for :javascript_expose_values, "app.#{key.to_s} = #{value};\n".html_safe
+    end
+
+    # Enqueues the given javascript code to run once the DOM is ready.
+    def run_when_dom_is_ready(javascript)
+      content_for :javascript_on_ready, (javascript + "\n").html_safe
+    end
+
+    #---[ Menu navigation ]-------------------------------------------------
+
+    # Is the navigation item the currently viewed page? E.g., if the navigation is :sessions, is the :subnav also :sessions.
+    def nav_current_page_item?
+      return(nav_kind == subnav_kind)
+    end
+
+    # Is the current action related to proposals?
+    def proposal_related_action?
+      return controller.kind_of?(ProposalsController) && ! ProposalsController::SESSION_RELATED_ACTIONS.include?(action_name)
+    end
+
+    # Is the current action related to sessions?
+    def session_related_action?
+      return (controller.kind_of?(EventsController) && action_name == "speakers") || controller.kind_of?(ProposalsController) && ProposalsController::SESSION_RELATED_ACTIONS.include?(action_name)
+      # TODO Make this logic clearer and the menu system less crazy.
+    end
+
+    def nav_event
+      @nav_event ||= unless assigned_event.try(:new_record?)
+                      assigned_event.try(:parent_or_self)
+                    end
+    end
+
+
+    # Main navigation to display.
+    def nav_kind(event=nil)
+      event ||= @event
+      if event && event.proposal_status_published?
+        return :sessions
+      else
+        return :proposals
+      end
+    end
+
+    # Main navigation path to use.
+    def nav_path(event=nil)
+      event ||= @event
+      return self.send("event_#{nav_kind(event)}_path", event)
+    end
+
+    # Main navigation title.
+    def nav_title(event=nil)
+      event ||= @event
+      return self.nav_kind(event).to_s.titleize
+    end
+
+    # Subnavigation to display.
+    def subnav_kind
+      if @event
+        if @event.proposal_status_published?
+          proposal_related_action? ? :proposals : :sessions
+        else
+          session_related_action? ? :sessions : :proposals
+        end
+      else
+        :proposals
+      end
+    end
+
+    # Subnavigation path.
+    def subnav_path
+      return self.send("#{subnav_kind}_path")
+    end
+
+    # Subnavigation title.
+    def subnav_title
+      return self.subnav_kind.to_s.titleize
+    end
+
+    # Should this event be flagged as active in the HTML/CSS header?
+    def flag_event_as_active?(event)
+      return @event ?
+        event == @event.parent_or_self :
+        true
+    end
+
+    # Should the "submit a proposal" link be shown?
+    def display_submit_proposal_link?
+      assigned_event.try(:accepting_proposals?) && !(controller.controller_name == 'proposals' && action_name == 'new')
+    end
+
+    #---[ Assigned events ]-------------------------------------------------
+    
+    # Return event assigned to this request, may be nil.
+    def assigned_event
+      return @event
+    end
+
+    # Return array of events assigned to this request, may be empty.
+    def assigned_events
+      return @events || []
+    end
+
+    # Return array of non-child events assigned to this request.
+    def assigned_nonchild_events
+      return self.assigned_events.compact.uniq.reject(&:parent_id)
+    end
+
+    # Return array of non-child events assigned to this request sorted by end-date.
+    def assigned_nonchild_events_by_date
+      return self.assigned_nonchild_events.sort_by{|event| event.end_date.try(:to_i) || 0}
+    end
+  end
+end