reduced_fat_crm 0.14.0

data/app/controllers/entities_controller.rb

@@ -0,0 +1,214 @@
+# Copyright (c) 2008-2013 Michael Dvorkin and contributors.
+#
+# Fat Free CRM is freely distributable under the terms of MIT license.
+# See MIT-LICENSE file or http://www.opensource.org/licenses/mit-license.php
+#------------------------------------------------------------------------------
+class EntitiesController < ApplicationController
+  before_action :require_user
+  before_action :set_current_tab, only: [:index, :show]
+  before_action :set_view, only: [:index, :show, :redraw]
+
+  before_action :set_options, only: :index
+  before_action :load_ransack_search, only: :index
+
+  load_and_authorize_resource
+
+  after_action :update_recently_viewed, only: :show
+
+  helper_method :entity, :entities
+
+  # Common attach handler for all core controllers.
+  #----------------------------------------------------------------------------
+  def attach
+    @attachment = params[:assets].classify.constantize.find(params[:asset_id])
+    @attached = entity.attach!(@attachment)
+    entity.reload
+
+    respond_with(entity)
+  end
+
+  # Common discard handler for all core controllers.
+  #----------------------------------------------------------------------------
+  def discard
+    @attachment = params[:attachment].constantize.find(params[:attachment_id])
+    entity.discard!(@attachment)
+    entity.reload
+
+    respond_with(entity)
+  end
+
+  # Common subscribe handler for all core controllers.
+  #----------------------------------------------------------------------------
+  def subscribe
+    entity.subscribed_users += [current_user.id]
+    entity.save
+
+    respond_with(@entity) do |format|
+      format.js { render 'subscription_update', entity: entity }
+    end
+  end
+
+  # Common unsubscribe handler for all core controllers.
+  #----------------------------------------------------------------------------
+  def unsubscribe
+    entity.subscribed_users -= [current_user.id]
+    entity.save
+
+    respond_with(entity) do |format|
+      format.js { render 'subscription_update', entity: entity }
+    end
+  end
+
+  # GET /entities/contacts                                                 AJAX
+  #----------------------------------------------------------------------------
+  def contacts
+  end
+
+  # GET /entities/leads                                                    AJAX
+  #----------------------------------------------------------------------------
+  def leads
+  end
+
+  # GET /entities/opportunities                                            AJAX
+  #----------------------------------------------------------------------------
+  def opportunities
+  end
+
+  # GET /entities/versions                                                 AJAX
+  #----------------------------------------------------------------------------
+  def versions
+  end
+
+  #----------------------------------------------------------------------------
+  def field_group
+    if @tag = Tag.find_by_name(params[:tag].strip)
+      if @field_group = FieldGroup.find_by_tag_id_and_klass_name(@tag.id, klass.to_s)
+        @asset = klass.find_by_id(params[:asset_id]) || klass.new
+        render('fields/group') && return
+      end
+    end
+    render text: ''
+  end
+
+  protected
+
+  #----------------------------------------------------------------------------
+  def entity=(entity)
+    instance_variable_set("@#{controller_name.singularize}", entity)
+  end
+
+  #----------------------------------------------------------------------------
+  def entity
+    instance_variable_get("@#{controller_name.singularize}")
+  end
+
+  #----------------------------------------------------------------------------
+  def entities=(entities)
+    instance_variable_set("@#{controller_name}", entities)
+  end
+
+  #----------------------------------------------------------------------------
+  def entities
+    instance_variable_get("@#{controller_name}") || klass.my
+  end
+
+  def set_options
+    unless params[:cancel].true?
+      klass = controller_name.classify.constantize
+      @per_page = current_user.pref[:"#{controller_name}_per_page"] || klass.per_page
+      @sort_by  = current_user.pref[:"#{controller_name}_sort_by"]  || klass.sort_by
+    end
+  end
+
+  def resource_params
+    params[controller_name.singularize].permit!
+  end
+
+  private
+
+  def ransack_search
+    @ransack_search ||= load_ransack_search
+    @ransack_search.build_sort if @ransack_search.sorts.empty?
+    @ransack_search
+  end
+
+  # Get list of records for a given model class.
+  #----------------------------------------------------------------------------
+  def get_list_of_records(options = {})
+    options[:query]  ||= params[:query]                        if params[:query]
+    self.current_page  = options[:page]                        if options[:page]
+    query, tags        = parse_query_and_tags(options[:query])
+    self.current_query = query
+    advanced_search = params[:q].present?
+    wants = request.format
+
+    scope = entities.merge(ransack_search.result(distinct: true))
+
+    # Get filter from session, unless running an advanced search
+    unless advanced_search
+      filter = session[:"#{controller_name}_filter"].to_s.split(',')
+      scope = scope.state(filter) if filter.present?
+    end
+
+    scope = scope.text_search(query)              if query.present?
+    scope = scope.tagged_with(tags, on: :tags) if tags.present?
+
+    # Ignore this order when doing advanced search
+    unless advanced_search
+      order = current_user.pref[:"#{controller_name}_sort_by"] || klass.sort_by
+      scope = scope.order(order)
+    end
+
+    @search_results_count = scope.count
+
+    # Pagination is disabled for xls and csv requests
+    unless wants.xls? || wants.csv?
+      per_page = if options[:per_page]
+                   options[:per_page] == 'all' ? @search_results_count : options[:per_page]
+                 else
+                   current_user.pref[:"#{controller_name}_per_page"]
+      end
+      scope = scope.paginate(page: current_page, per_page: per_page)
+    end
+
+    scope
+  end
+
+  #----------------------------------------------------------------------------
+  def update_recently_viewed
+    entity.versions.create(event: :view, whodunnit: PaperTrail.whodunnit)
+  end
+
+  # Somewhat simplistic parser that extracts query and hash-prefixed tags from
+  # the search string and returns them as two element array, for example:
+  #
+  # "#real Billy Bones #pirate" => [ "Billy Bones", "real, pirate" ]
+  #----------------------------------------------------------------------------
+  def parse_query_and_tags(search_string)
+    return ['', ''] if search_string.blank?
+    query, tags = [], []
+    search_string.strip.split(/\s+/).each do |token|
+      if token.starts_with?("#")
+        tags << token[1..-1]
+      else
+        query << token
+      end
+    end
+    [query.join(" "), tags.join(", ")]
+  end
+
+  #----------------------------------------------------------------------------
+  def timeline(asset)
+    (asset.comments + asset.emails).sort { |x, y| y.created_at <=> x.created_at }
+  end
+
+  # Sets the current template view for entities in this context
+  #----------------------------------------------------------------------------
+  def set_view
+    if params['view']
+      controller = params['controller']
+      action = (params['action'] == 'show') ? 'show' : 'index' # create update redraw filter index actions all use index view
+      current_user.pref[:"#{controller}_#{action}_view"] = params['view']
+    end
+  end
+end

data/app/controllers/home_controller.rb

@@ -0,0 +1,156 @@
+# Copyright (c) 2008-2013 Michael Dvorkin and contributors.
+#
+# Fat Free CRM is freely distributable under the terms of MIT license.
+# See MIT-LICENSE file or http://www.opensource.org/licenses/mit-license.php
+#------------------------------------------------------------------------------
+class HomeController < ApplicationController
+  before_action :require_user, except: [:toggle, :timezone]
+  before_action :set_current_tab, only: :index
+
+  #----------------------------------------------------------------------------
+  def index
+    @activities = get_activities
+    @my_tasks = Task.visible_on_dashboard(current_user).includes(:user, :asset).by_due_at
+    @my_opportunities = Opportunity.visible_on_dashboard(current_user).includes(:account, :user, :tags).by_closes_on.by_amount
+    @my_accounts = Account.visible_on_dashboard(current_user).includes(:user, :tags).by_name
+    respond_with(@activities)
+  end
+
+  # GET /home/options                                                      AJAX
+  #----------------------------------------------------------------------------
+  def options
+    unless params[:cancel].true?
+      @asset = current_user.pref[:activity_asset] || "all"
+      @action = current_user.pref[:activity_event] || "all_events"
+      @user = current_user.pref[:activity_user] || "all_users"
+      @duration = current_user.pref[:activity_duration] || "two_days"
+      @all_users = User.order("first_name, last_name")
+    end
+  end
+
+  # GET /home/redraw                                                       AJAX
+  #----------------------------------------------------------------------------
+  def redraw
+    current_user.pref[:activity_asset] = params[:asset] if params[:asset]
+    current_user.pref[:activity_event] = params[:event] if params[:event]
+    current_user.pref[:activity_user] = params[:user] if params[:user]
+    current_user.pref[:activity_duration] = params[:duration] if params[:duration]
+    @activities = get_activities
+
+    respond_with(@activities) do |format|
+      format.js { render :index }
+    end
+  end
+
+  # GET /home/toggle                                                       AJAX
+  #----------------------------------------------------------------------------
+  def toggle
+    if session[params[:id].to_sym]
+      session.delete(params[:id].to_sym)
+    else
+      session[params[:id].to_sym] = true
+    end
+    render nothing: true
+  end
+
+  # GET /home/timeline                                                     AJAX
+  #----------------------------------------------------------------------------
+  def timeline
+    state = params[:state].to_s
+    if %w(Collapsed Expanded).include?(state)
+      if (model_type = params[:type].to_s).present?
+        if %w(comment email).include?(model_type)
+          model = model_type.camelize.constantize
+          item = model.find(params[:id])
+          item.update_attribute(:state, state)
+        end
+      else
+        comments, emails = params[:id].split("+")
+        Comment.where(id: comments.split(',')).update_all(state: state) unless comments.blank?
+        Email.where(id: emails.split(',')).update_all(state: state) unless emails.blank?
+      end
+    end
+
+    render nothing: true
+  end
+
+  # GET /home/timezone                                                     AJAX
+  #----------------------------------------------------------------------------
+  def timezone
+    #
+    # (new Date()).getTimezoneOffset() in JavaScript returns (UTC - localtime) in
+    # minutes, while ActiveSupport::TimeZone expects (localtime - UTC) in seconds.
+    #
+    if params[:offset]
+      session[:timezone_offset] = params[:offset].to_i * -60
+      ActiveSupport::TimeZone[session[:timezone_offset]]
+    end
+    render nothing: true
+  end
+
+  private
+
+  #----------------------------------------------------------------------------
+  def get_activities(options = {})
+    options[:asset]    ||= activity_asset
+    options[:event]    ||= activity_event
+    options[:user]     ||= activity_user
+    options[:duration] ||= activity_duration
+    options[:max]      ||= 500
+
+    Version.includes(user: [:avatar]).latest(options).visible_to(current_user)
+  end
+
+  #----------------------------------------------------------------------------
+  def activity_asset
+    asset = current_user.pref[:activity_asset]
+    if asset.nil? || asset == "all"
+      nil
+    else
+      asset.singularize.capitalize
+    end
+  end
+
+  #----------------------------------------------------------------------------
+  def activity_event
+    event = current_user.pref[:activity_event]
+    if event == "all_events"
+      %w(create update destroy)
+    else
+      event
+    end
+  end
+
+  #----------------------------------------------------------------------------
+  # TODO: this is ugly, ugly code. It's being security patched now but urgently
+  # needs refactoring to use user id instead. Permuations based on name or email
+  # yield incorrect results.
+  def activity_user
+    user = current_user.pref[:activity_user]
+    if user && user != "all_users"
+      user = if user =~ /@/ # email
+               User.where(email: user).first
+             else # first_name middle_name last_name any_name
+               name_query = if user.include?(" ")
+                              user.name_permutations.map do |first, last|
+                                User.where(first_name: first, last_name: last)
+                              end.map(&:to_a).flatten.first
+                            else
+                              [User.where(first_name: user), User.where(last_name: user)].map(&:to_a).flatten.first
+               end
+        end
+    end
+    user.is_a?(User) ? user.id : nil
+  end
+
+  #----------------------------------------------------------------------------
+  def activity_duration
+    duration = current_user.pref[:activity_duration]
+    if duration
+      words = duration.split("_") # "two_weeks" => 2.weeks
+      if %w(one two).include?(words.first) && %w(hour day days week weeks month).include?(words.last)
+        %w(zero one two).index(words.first).send(words.last)
+      end
+    end
+  end
+end

data/app/controllers/lists_controller.rb

@@ -0,0 +1,40 @@
+# Copyright (c) 2008-2013 Michael Dvorkin and contributors.
+#
+# Fat Free CRM is freely distributable under the terms of MIT license.
+# See MIT-LICENSE file or http://www.opensource.org/licenses/mit-license.php
+#------------------------------------------------------------------------------
+class ListsController < ApplicationController
+  # POST /lists
+  #----------------------------------------------------------------------------
+  def create
+    if params[:is_global].to_i.zero?
+      list_params[:user_id] = current_user.id
+    else
+      list_params[:user_id] = nil
+    end
+
+    # Find any existing list with the same name (case insensitive)
+    if @list = List.where("lower(name) = ?", list_params[:name].downcase).where(user_id: list_params[:user_id]).first
+      @list.update_attributes(list_params)
+    else
+      @list = List.create(list_params)
+    end
+
+    respond_with(@list)
+  end
+
+  # DELETE /lists/1
+  #----------------------------------------------------------------------------
+  def destroy
+    @list = List.find(params[:id])
+    @list.destroy
+
+    respond_with(@list)
+  end
+
+  protected
+
+  def list_params
+    params[:list].permit!
+  end
+end

data/app/controllers/passwords_controller.rb

@@ -0,0 +1,65 @@
+# Copyright (c) 2008-2013 Michael Dvorkin and contributors.
+#
+# Fat Free CRM is freely distributable under the terms of MIT license.
+# See MIT-LICENSE file or http://www.opensource.org/licenses/mit-license.php
+#------------------------------------------------------------------------------
+class PasswordsController < ApplicationController
+  before_action :load_user_using_perishable_token, only: [:edit, :update]
+  before_action :require_no_user
+
+  #----------------------------------------------------------------------------
+  def new
+    # <-- render new.html.haml
+  end
+
+  #----------------------------------------------------------------------------
+  def create
+    @user = User.find_by_email(params[:email])
+    if @user
+      @user.deliver_password_reset_instructions!
+      flash[:notice] = t(:msg_pwd_instructions_sent)
+      redirect_to root_url
+    else
+      flash[:notice] = t(:msg_email_not_found)
+      redirect_to action: :new
+    end
+  end
+
+  #----------------------------------------------------------------------------
+  def edit
+    # <-- render edit.html.haml
+  end
+
+  #----------------------------------------------------------------------------
+  def update
+    if empty_password?
+      flash[:notice] = t(:msg_enter_new_password)
+      render :edit
+    elsif @user.update_attributes(params.require(:user).permit(:password, :password_confirmation))
+      flash[:notice] = t(:msg_password_updated)
+      redirect_to profile_url
+    else
+      render :edit
+    end
+  end
+
+  private
+
+  #----------------------------------------------------------------------------
+  def load_user_using_perishable_token
+    @user = User.find_using_perishable_token(params[:id])
+    unless @user
+      flash[:notice] = <<-EOS
+        Sorry, we could not locate your user profile. Try to copy and paste the URL
+        from your email into your browser or restart the reset password process.
+      EOS
+      redirect_to root_url
+    end
+  end
+
+  #----------------------------------------------------------------------------
+  def empty_password?
+    (params[:user][:password] == params[:user][:password_confirmation]) &&
+      (params[:user][:password].blank?)      # "   ".blank? == true
+  end
+end