reduced_fat_crm 0.14.0

data/app/controllers/tasks_controller.rb

@@ -0,0 +1,219 @@
+# Copyright (c) 2008-2013 Michael Dvorkin and contributors.
+#
+# Fat Free CRM is freely distributable under the terms of MIT license.
+# See MIT-LICENSE file or http://www.opensource.org/licenses/mit-license.php
+#------------------------------------------------------------------------------
+class TasksController < ApplicationController
+  before_action :require_user
+  before_action :set_current_tab, only: [:index, :show]
+  before_action :update_sidebar, only: :index
+
+  # GET /tasks
+  #----------------------------------------------------------------------------
+  def index
+    @view = view
+    @tasks = Task.find_all_grouped(current_user, @view)
+
+    respond_with @tasks do |format|
+      format.xls { render layout: 'header' }
+      format.csv { render csv: @tasks.map(&:second).flatten }
+      format.xml { render xml: @tasks, except: [:subscribed_users] }
+    end
+  end
+
+  # GET /tasks/1
+  #----------------------------------------------------------------------------
+  def show
+    @task = Task.tracked_by(current_user).find(params[:id])
+    respond_with(@task)
+  end
+
+  # GET /tasks/new
+  #----------------------------------------------------------------------------
+  def new
+    @view = view
+    @task = Task.new
+    @bucket = Setting.unroll(:task_bucket)[1..-1] << [t(:due_specific_date, default: 'On Specific Date...'), :specific_time]
+    @category = Setting.unroll(:task_category)
+
+    if params[:related]
+      model, id = params[:related].split(/_(\d+)/)
+      if related = model.classify.constantize.my.find_by_id(id)
+        instance_variable_set("@asset", related)
+      else
+        respond_to_related_not_found(model) && return
+      end
+    end
+
+    respond_with(@task)
+  end
+
+  # GET /tasks/1/edit                                                      AJAX
+  #----------------------------------------------------------------------------
+  def edit
+    @view = view
+    @task = Task.tracked_by(current_user).find(params[:id])
+    @bucket = Setting.unroll(:task_bucket)[1..-1] << [t(:due_specific_date, default: 'On Specific Date...'), :specific_time]
+    @category = Setting.unroll(:task_category)
+    @asset = @task.asset if @task.asset_id?
+
+    if params[:previous].to_s =~ /(\d+)\z/
+      @previous = Task.tracked_by(current_user).find_by_id(Regexp.last_match[1]) || Regexp.last_match[1].to_i
+    end
+
+    respond_with(@task)
+  end
+
+  # POST /tasks
+  #----------------------------------------------------------------------------
+  def create
+    @view = view
+    @task = Task.new(task_params) # NOTE: we don't display validation messages for tasks.
+
+    respond_with(@task) do |_format|
+      if @task.save
+        update_sidebar if called_from_index_page?
+      end
+    end
+  end
+
+  # PUT /tasks/1
+  #----------------------------------------------------------------------------
+  def update
+    @view = view
+    @task = Task.tracked_by(current_user).find(params[:id])
+    @task_before_update = @task.dup
+
+    if @task.due_at && (@task.due_at < Date.today.to_time)
+      @task_before_update.bucket = "overdue"
+    else
+      @task_before_update.bucket = @task.computed_bucket
+    end
+
+    respond_with(@task) do |_format|
+      if @task.update_attributes(task_params)
+        @task.bucket = @task.computed_bucket
+        if called_from_index_page?
+          if Task.bucket_empty?(@task_before_update.bucket, current_user, @view)
+            @empty_bucket = @task_before_update.bucket
+          end
+          update_sidebar
+        end
+      end
+    end
+  end
+
+  # DELETE /tasks/1
+  #----------------------------------------------------------------------------
+  def destroy
+    @view = view
+    @task = Task.tracked_by(current_user).find(params[:id])
+    @task.destroy
+
+    # Make sure bucket's div gets hidden if we're deleting last task in the bucket.
+    if Task.bucket_empty?(params[:bucket], current_user, @view)
+      @empty_bucket = params[:bucket]
+    end
+
+    update_sidebar if called_from_index_page?
+    respond_with(@task)
+  end
+
+  # PUT /tasks/1/complete
+  #----------------------------------------------------------------------------
+  def complete
+    @task = Task.tracked_by(current_user).find(params[:id])
+    @task.update_attributes(completed_at: Time.now, completed_by: current_user.id) if @task
+
+    # Make sure bucket's div gets hidden if it's the last completed task in the bucket.
+    if Task.bucket_empty?(params[:bucket], current_user)
+      @empty_bucket = params[:bucket]
+    end
+
+    update_sidebar unless params[:bucket].blank?
+    respond_with(@task)
+  end
+
+  # PUT /tasks/1/uncomplete
+  #----------------------------------------------------------------------------
+  def uncomplete
+    @task = Task.tracked_by(current_user).find(params[:id])
+    @task.update_attributes(completed_at: nil, completed_by: nil) if @task
+
+    # Make sure bucket's div gets hidden if we're deleting last task in the bucket.
+    if Task.bucket_empty?(params[:bucket], current_user, @view)
+      @empty_bucket = params[:bucket]
+    end
+
+    update_sidebar
+    respond_with(@task)
+  end
+
+  # POST /tasks/auto_complete/query                                        AJAX
+  #----------------------------------------------------------------------------
+  # Handled by ApplicationController :auto_complete
+
+  # Ajax request to filter out a list of tasks.                            AJAX
+  #----------------------------------------------------------------------------
+  def filter
+    @view = view
+
+    update_session do |filters|
+      if params[:checked].true?
+        filters << params[:filter]
+      else
+        filters.delete(params[:filter])
+      end
+    end
+  end
+
+  protected
+
+  def task_params
+    params[:task].permit!
+  end
+
+  private
+
+  # Yields array of current filters and updates the session using new values.
+  #----------------------------------------------------------------------------
+  def update_session
+    name = "filter_by_task_#{@view}"
+    filters = (session[name].nil? ? [] : session[name].split(","))
+    yield filters
+    session[name] = filters.uniq.join(",")
+  end
+
+  # Collect data necessary to render filters sidebar.
+  #----------------------------------------------------------------------------
+  def update_sidebar
+    @view = view
+    @task_total = Task.totals(current_user, @view)
+
+    # Update filters session if we added, deleted, or completed a task.
+    if @task
+      update_session do |filters|
+        if @empty_bucket  # deleted, completed, rescheduled, or reassigned and need to hide a bucket
+          filters.delete(@empty_bucket)
+        elsif !@task.deleted_at && !@task.completed_at # created new task
+          filters << @task.computed_bucket
+        end
+      end
+    end
+
+    # Create default filters if filters session is empty.
+    name = "filter_by_task_#{@view}"
+    unless session[name]
+      filters = @task_total.keys.select { |key| key != :all && @task_total[key] != 0 }.join(",")
+      session[name] = filters unless filters.blank?
+    end
+  end
+
+  # Ensure view is allowed
+  #----------------------------------------------------------------------------
+  def view
+    view = params[:view]
+    views = Task::ALLOWED_VIEWS
+    views.include?(view) ? view : views.first
+  end
+end

data/app/controllers/users_controller.rb

@@ -0,0 +1,159 @@
+# Copyright (c) 2008-2013 Michael Dvorkin and contributors.
+#
+# Fat Free CRM is freely distributable under the terms of MIT license.
+# See MIT-LICENSE file or http://www.opensource.org/licenses/mit-license.php
+#------------------------------------------------------------------------------
+class UsersController < ApplicationController
+  before_action :set_current_tab, only: [:show, :opportunities_overview] # Don't hightlight any tabs.
+
+  check_authorization
+  load_and_authorize_resource # handles all security
+
+  respond_to :html, only: [:show, :new]
+
+  # GET /users/1
+  # GET /users/1.js
+  #----------------------------------------------------------------------------
+  def show
+    @user = current_user if params[:id].nil?
+    respond_with(@user)
+  end
+
+  # GET /users/new
+  # GET /users/new.js
+  #----------------------------------------------------------------------------
+  def new
+    respond_with(@user)
+  end
+
+  # POST /users
+  # POST /users.js
+  #----------------------------------------------------------------------------
+  def create
+    if @user.save
+      if Setting.user_signup == :needs_approval
+        flash[:notice] = t(:msg_account_created)
+        redirect_to login_url
+      else
+        flash[:notice] = t(:msg_successful_signup)
+        redirect_back_or_default profile_url
+      end
+    else
+      render :new
+    end
+  end
+
+  # GET /users/1/edit.js
+  #----------------------------------------------------------------------------
+  def edit
+    respond_with(@user)
+  end
+
+  # PUT /users/1
+  # PUT /users/1.js
+  #----------------------------------------------------------------------------
+  def update
+    @user.update_attributes(user_params)
+    respond_with(@user)
+  end
+
+  # GET /users/1/avatar
+  # GET /users/1/avatar.js
+  #----------------------------------------------------------------------------
+  def avatar
+    respond_with(@user)
+  end
+
+  # PUT /users/1/upload_avatar
+  # PUT /users/1/upload_avatar.js
+  #----------------------------------------------------------------------------
+  def upload_avatar
+    if params[:gravatar]
+      @user.avatar = nil
+      @user.save
+      render
+    else
+      if params[:avatar]
+        avatar = Avatar.create(avatar_params)
+        if avatar.valid?
+          @user.avatar = avatar
+        else
+          @user.avatar.errors.clear
+          @user.avatar.errors.add(:image, t(:msg_bad_image_file))
+        end
+      end
+      responds_to_parent do
+        # Without return RSpec2 screams bloody murder about rendering twice:
+        # within the block and after yield in responds_to_parent.
+        render && (return if Rails.env.test?)
+      end
+    end
+  end
+
+  # GET /users/1/password
+  # GET /users/1/password.js
+  #----------------------------------------------------------------------------
+  def password
+    respond_with(@user)
+  end
+
+  # PUT /users/1/change_password
+  # PUT /users/1/change_password.js
+  #----------------------------------------------------------------------------
+  def change_password
+    if @user.valid_password?(params[:current_password], true) || @user.password_hash.blank?
+      unless params[:user][:password].blank?
+        @user.password = params[:user][:password]
+        @user.password_confirmation = params[:user][:password_confirmation]
+        @user.save
+        flash[:notice] = t(:msg_password_changed)
+      else
+        flash[:notice] = t(:msg_password_not_changed)
+      end
+    else
+      @user.errors.add(:current_password, t(:msg_invalid_password))
+    end
+
+    respond_with(@user)
+  end
+
+  # GET /users/1/redraw
+  #----------------------------------------------------------------------------
+  def redraw
+    current_user.preference[:locale] = params[:locale]
+    render js: %(window.location.href = "#{user_path(current_user)}";)
+  end
+
+  # GET /users/opportunities_overview
+  #----------------------------------------------------------------------------
+  def opportunities_overview
+    @users_with_opportunities = User.have_assigned_opportunities.order(:first_name)
+    @unassigned_opportunities = Opportunity.my.unassigned.pipeline.order(:stage)
+  end
+
+  protected
+
+  def user_params
+    params[:user].permit(
+      :username,
+      :email,
+      :first_name,
+      :last_name,
+      :title,
+      :company,
+      :alt_email,
+      :phone,
+      :mobile,
+      :aim,
+      :yahoo,
+      :google,
+      :skype
+    )
+  end
+
+  def avatar_params
+    params[:avatar]
+      .permit(:image)
+      .merge(entity: @user)
+  end
+end

data/app/helpers/accounts_helper.rb

@@ -0,0 +1,110 @@
+# Copyright (c) 2008-2013 Michael Dvorkin and contributors.
+#
+# Fat Free CRM is freely distributable under the terms of MIT license.
+# See MIT-LICENSE file or http://www.opensource.org/licenses/mit-license.php
+#------------------------------------------------------------------------------
+module AccountsHelper
+  # Sidebar checkbox control for filtering accounts by category.
+  #----------------------------------------------------------------------------
+  def account_category_checkbox(category, count)
+    entity_filter_checkbox(:category, category, count)
+  end
+
+  # Quick account summary for RSS/ATOM feeds.
+  #----------------------------------------------------------------------------
+  def account_summary(account)
+    [number_to_currency(account.opportunities.pipeline.map(&:weighted_amount).sum, precision: 0),
+     t(:added_by, time_ago: time_ago_in_words(account.created_at), user: account.user_id_full_name),
+     t('pluralize.contact', account.contacts.count),
+     t('pluralize.opportunity', account.opportunities.count),
+     t('pluralize.comment', account.comments.count)
+    ].join(', ')
+  end
+
+  # Generates a select list with the first 25 accounts
+  # and prepends the currently selected account, if any.
+  #----------------------------------------------------------------------------
+  def account_select(options = {})
+    options[:selected] = (@account && @account.id) || 0
+    accounts = ([@account] + Account.my.order(:name).limit(25)).compact.uniq
+    collection_select :account, :id, accounts, :id, :name, options,
+                      :"data-placeholder" => t(:select_an_account),
+                      :"data-url" => auto_complete_accounts_path(format: 'json'),
+                      style: "width:330px; display:none;",
+                      class: 'ajax_chosen'
+  end
+
+  # Select an existing account or create a new one.
+  #----------------------------------------------------------------------------
+  def account_select_or_create(form, &_block)
+    options = {}
+    yield options if block_given?
+
+    content_tag(:div, class: 'label') do
+      t(:account).html_safe +
+
+        content_tag(:span, id: 'account_create_title') do
+          "(#{t :create_new} #{t :or} <a href='#' onclick='crm.select_account(); return false;'>#{t :select_existing}</a>):".html_safe
+        end +
+
+        content_tag(:span, id: 'account_select_title') do
+          "(<a href='#' onclick='crm.create_account(); return false;'>#{t :create_new}</a> #{t :or} #{t :select_existing}):".html_safe
+        end +
+
+        content_tag(:span, ':', id: 'account_disabled_title')
+    end +
+
+      account_select(options) +
+      form.text_field(:name, style: 'width:324px; display:none;')
+  end
+
+  # Output account url for a given contact
+  # - a helper so it is easy to override in plugins that allow for several accounts
+  #----------------------------------------------------------------------------
+  def account_with_url_for(contact)
+    contact.account ? link_to(h(contact.account.name), account_path(contact.account)) : ""
+  end
+
+  # Output account with title and department
+  # - a helper so it is easy to override in plugins that allow for several accounts
+  #----------------------------------------------------------------------------
+  def account_with_title_and_department(contact)
+    text = if !contact.title.blank? && contact.account
+             # works_at: "{{h(job_title)}} at {{h(company)}}"
+             content_tag :div, t(:works_at, job_title: h(contact.title), company: h(account_with_url_for(contact))).html_safe
+           elsif !contact.title.blank?
+             content_tag :div, h(contact.title)
+           elsif contact.account
+             content_tag :div, account_with_url_for(contact)
+           else
+             ""
+      end
+    text << t(:department_small, h(contact.department)) unless contact.department.blank?
+    text
+  end
+
+  # "title, department at Account name" used in index_brief and index_long
+  # - a helper so it is easy to override in plugins that allow for several accounts
+  #----------------------------------------------------------------------------
+  def brief_account_info(contact)
+    text = ""
+    title = contact.title
+    department = contact.department
+    account = contact.account
+    account_text = ""
+    account_text = link_to_if(can?(:read, account), h(account.name), account_path(account)) if account.present?
+
+    text << if title.present? && department.present?
+              t(:account_with_title_department, title: h(title), department: h(department), account: account_text)
+            elsif title.present?
+              t(:account_with_title, title: h(title), account: account_text)
+            elsif department.present?
+              t(:account_with_title, title: h(department), account: account_text)
+            elsif account_text.present?
+              t(:works_at, job_title: "", company: account_text)
+            else
+              ""
+        end
+    text.html_safe
+  end
+end