refinerycms 0.9.7.15 → 0.9.8

data/vendor/refinerycms/core/lib/refinery/admin_base_controller.rb

@@ -0,0 +1,95 @@
+class Refinery::AdminBaseController < ApplicationController
+
+  layout :layout?
+
+  before_filter :correct_accept_header, :login_required, :restrict_plugins, :restrict_controller
+  after_filter :store_location?, :except => [:new, :create, :edit, :update, :destroy, :update_positions] # for redirect_back_or_default
+
+  helper_method :searching?
+
+  def admin?
+    true # we're in the admin base controller, so always true.
+  end
+
+  def searching?
+    params[:search].present?
+  end
+
+  def error_404(exception=nil)
+    if (@page = Page.find_by_menu_match("^/404$", :include => [:parts, :slugs])).present?
+      params[:action] = 'error_404'
+      # change any links in the copy to the admin_root_url
+      # and any references to "home page" to "Dashboard"
+      part_symbol = Page.default_parts.first.to_sym
+      @page[part_symbol] = @page[part_symbol].gsub(
+                            /href=(\'|\")\/(\'|\")/, "href='#{admin_root_url(:only_path => true)}'"
+                           ).gsub("home page", "Dashboard")
+
+      render :template => "/pages/show", :status => 404, :layout => layout?
+    else
+      # fallback to the default 404.html page.
+      render :file => Rails.root.join("public", "404.html").cleanpath.to_s, :layout => false, :status => 404
+    end
+  end
+
+protected
+
+  def group_by_date(records)
+    new_records = []
+
+    records.each do |record|
+      key = record.created_at.strftime("%Y-%m-%d")
+      record_group = new_records.collect{|records| records.last if records.first == key }.flatten.compact << record
+      (new_records.delete_if {|i| i.first == key}) << [key, record_group]
+    end
+
+    new_records
+  end
+
+  def restrict_plugins
+    Refinery::Plugins.set_active(current_user.authorized_plugins) if current_user.respond_to?(:plugins)
+  end
+
+  def restrict_controller
+    if Refinery::Plugins.active.reject { |plugin|
+      params[:controller] !~ Regexp.new(plugin.menu_match) and
+      params[:controller] !~ Regexp.new(plugin.menu_match.to_s.gsub('admin\/', 'refinery/'))
+    }.empty?
+      logger.warn "'#{current_user.login}' tried to access '#{params[:controller]}' but was rejected."
+      error_404
+    end
+  end
+
+  # Override method from application_controller. Not needed in this controller.
+  def find_pages_for_menu; end
+
+private
+  def layout?
+    "admin#{"_dialog" if from_dialog?}"
+  end
+
+  # This fixes the issue where Internet Explorer browsers are presented with a basic auth dialogue
+  # rather than the xhtml one that they *can* accept but don't think they can.
+  def correct_accept_header
+    if request.user_agent =~ /MSIE (6|7|8)/
+      if request.accept == "*/*"
+        request.env["HTTP_ACCEPT"] = request.cookies[:http_accept] ||= "application/xml"
+      else
+        request.cookies[:http_accept] = (request.env["HTTP_ACCEPT"] = (["text/html"] | request.accept.split(', ')).join(', '))
+      end
+    end
+  end
+
+  # Check whether it makes sense to return the user to the last page they
+  # were at instead of the default e.g. admin_pages_url
+  # right now we just want to snap back to index actions and definitely not to dialogues.
+  def store_location?
+    store_location unless action_name !~ /index/ or request.xhr? or from_dialog?
+  end
+
+  # Override authorized? so that only users with the Refinery role can admin the website.
+  def authorized?
+    refinery_user?
+  end
+
+end

data/vendor/refinerycms/core/lib/refinery/application_controller.rb

@@ -0,0 +1,101 @@
+require 'action_controller'
+
+class Refinery::ApplicationController < ActionController::Base
+
+  helper_method :home_page?,
+                :local_request?,
+                :just_installed?,
+                :from_dialog?,
+                :admin?,
+                :login?
+
+  protect_from_forgery # See ActionController::RequestForgeryProtection
+
+  include Crud # basic create, read, update and delete methods
+  include AuthenticatedSystem
+
+  before_filter :find_pages_for_menu,
+                :show_welcome_page?
+
+  after_filter :store_current_location!,
+               :if => Proc.new {|c| c.send(:refinery_user?) rescue false }
+
+  rescue_from ActiveRecord::RecordNotFound,
+              ActionController::UnknownAction,
+              ActionView::MissingTemplate,
+              :with => :error_404
+
+  def admin?
+    controller_name =~ %r{^admin/}
+  end
+
+  def error_404(exception=nil)
+    if (@page = Page.where(:menu_match => "^/404$").includes(:parts, :slugs).first).present?
+      # render the application's custom 404 page with layout and meta.
+      render :template => "/pages/show",
+             :format => 'html',
+             :status => 404
+    else
+      # fallback to the default 404.html page.
+      file = Rails.root.join('public', '404.html')
+      file = Refinery.root.join('vendor', 'refinerycms', 'core', 'public', '404.html') unless file.exist?
+      render :file => file.cleanpath.to_s,
+             :layout => false,
+             :status => 404
+    end
+  end
+
+  def from_dialog?
+    params[:dialog] == "true" or params[:modal] == "true"
+  end
+
+  def home_page?
+    root_url(:only_path => true) == request.path
+  end
+
+  def just_installed?
+    Role[:refinery].users.empty?
+  end
+
+  def local_request?
+    Rails.env.development? or request.remote_ip =~ /(::1)|(127.0.0.1)|((192.168).*)/
+  end
+
+  def login?
+    (controller_name =~ /^(user|session)(|s)/ and not admin?) or just_installed?
+  end
+
+protected
+
+  # get all the pages to be displayed in the site menu.
+  def find_pages_for_menu
+    @menu_pages = Page.top_level
+  end
+
+  # use a different model for the meta information.
+  def present(model)
+    presenter = (Object.const_get("#{model.class}Presenter") rescue ::Refinery::BasePresenter)
+    @meta = presenter.new(model)
+  end
+
+  # this hooks into the Rails render method.
+  def render(action = nil, options = {}, &blk)
+    present(@page) unless admin? or @meta.present?
+    super
+  end
+
+  def show_welcome_page?
+    render :template => "/welcome", :layout => "login" if just_installed? and controller_name != "users"
+  end
+
+private
+  def store_current_location!
+    if admin?
+      # ensure that we don't redirect to AJAX or POST/PUT/DELETE urls
+      session[:refinery_return_to] = request.path if request.get? and !request.xhr? and !from_dialog?
+    elsif defined?(@page) and @page.present?
+      session[:website_return_to] = @page.url
+    end
+  end
+
+end

data/vendor/refinerycms/core/lib/refinery/application_helper.rb

@@ -0,0 +1,195 @@
+# Methods added to this helper will be available to all templates in the application.
+module Refinery
+  module ApplicationHelper
+    include Refinery::HtmlTruncationHelper
+
+    def t(key, options = {})
+      if (val = super) =~ /class.+?translation_missing/
+        val = val.to_s.gsub(/<span[^>]*>/, 'i18n: ').gsub('</span>', '').gsub(', ', '.')
+      end
+
+      val
+    end
+
+    # This is used to display the title of the current object (normally a page) in the browser's titlebar.
+    #
+    def browser_title(yield_title=nil)
+      [
+        yield_title.present? ? yield_title : nil,
+        @meta.browser_title.present? ? @meta.browser_title : @meta.path,
+        RefinerySetting.find_or_set(:site_name, "Company Name")
+      ].compact.join(" - ")
+    end
+
+    # replace all system images with a thumbnail version of them (handy for all images inside a page part)
+    # for example, <%= content_fu(@page[:body], :preview) %> converts all /system/images to their 'preview' thumbnail
+    def content_fu(content, thumbnail)
+      raise NotImplementedError # todo: implement for new syntax.
+
+      content.scan(/\/system\/images([^\"\ ]*)/).flatten.each do |match|
+        parts = match.split(".")
+        extension = parts.pop
+        content.gsub!(match, "#{parts.join(".")}_#{thumbnail}.#{extension}")
+      end unless content.blank?
+
+      return content
+    end
+
+    # This was extracted from REFINERY_ROOT/vendor/plugins/refinery/app/views/shared/_menu_branch.html.erb
+    # to remove the complexity of that template by reducing logic in the view.
+    def css_for_menu_branch(menu_branch, menu_branch_counter, sibling_count = nil)
+      css = []
+      css << "selected" if selected_page?(menu_branch) or descendant_page_selected?(menu_branch)
+      css << "first" if menu_branch_counter == 0
+      css << "last" if menu_branch_counter == (sibling_count ||= menu_branch.shown_siblings.size)
+      css
+    end
+
+    # Determines whether any page underneath the supplied page is the current page according to rails.
+    # Just calls selected_page? for each descendant of the supplied page.
+    def descendant_page_selected?(page)
+      page.descendants.any? {|descendant| selected_page?(descendant) }
+    end
+
+    # image_fu is a helper for inserting an image that has been uploaded into a template.
+    # Say for example that we had a @model.image (@model having a belongs_to :image relationship)
+    # and we wanted to display a thumbnail cropped to 200x200 then we can use image_fu like this:
+    # <%= image_fu @model.image, '200x200' %> or with no thumbnail: <%= image_fu @model.image %>
+    def image_fu(image, geometry = nil, options={})
+      if image.present?
+        # call rails' image tag function with default alt, width and height options.
+        # if any other options were supplied these are merged in and can replace the defaults.
+        image_tag((thumbnail = image.thumbnail(geometry)).url, {
+          :alt => image.respond_to?(:title) ? image.title : image.image_name,
+          :width => thumbnail.width,
+          :height => thumbnail.height
+        }.merge(options))
+      end
+    end
+
+    # This function helps when including both the jquery and jqueryui libraries.
+    # If you use this function then whenever we update or relocate the version of jquery or jquery ui in use
+    # we will update the reference here and your existing application starts to use it.
+    # Use <%= jquery_include_tags %> to include it in your <head> section.
+    def jquery_include_tags(options={})
+      # Merge in options
+      options = {
+        :caching => RefinerySetting.find_or_set(:use_resource_caching, Rails.root.writable?),
+        :google => RefinerySetting.find_or_set(:use_google_ajax_libraries, false),
+        :jquery_ui => true
+      }.merge(options)
+
+      # render the tags normally unless
+      unless options[:google] and !local_request?
+        if options[:jquery_ui]
+          javascript_include_tag  "jquery#{"-min" if Rails.env.production?}", "jquery-ui-custom-min",
+                                  :cache => (options[:caching] ? "cache/jquery" : nil)
+        else
+          javascript_include_tag "jquery#{"-min" if Rails.env.production?}"
+        end
+      else
+        "#{javascript_include_tag("http://www.google.com/jsapi").gsub(".js", "")}
+        <script type='text/javascript'>
+          google.load('jquery', '1.4');
+          #{"google.load('jqueryui', '1.8');" if options[:jquery_ui]}
+        </script>".html_safe
+      end
+    end
+
+    # you can override the object used for the title by supplying options[:object]
+    # this object must support custom_title_type if you want custom titles.
+    def page_title(options = {})
+      object = options.fetch(:object, @meta)
+      options.delete(:object)
+      options = RefinerySetting.find_or_set(:page_title, {
+        :chain_page_title => false,
+        :ancestors => {
+          :separator => " | ",
+          :class => 'ancestors',
+          :tag => 'span'
+        },
+        :page_title => {
+          :class => nil,
+          :tag => nil,
+          :wrap_if_not_chained => false
+        }
+      }).merge(options)
+
+      title = []
+      objects = (options[:chain_page_title] and object.respond_to?(:ancestors)) ? [object.ancestors, object] : [object]
+
+      objects.flatten.compact.each do |obj|
+        if obj.respond_to?(:custom_title_type)
+          title << case obj.custom_title_type
+            when "text"
+              obj.custom_title
+            when "image"
+              image_fu(obj.custom_title_image, nil, {:alt => obj.title}) rescue obj.title
+            else
+              obj.title
+            end
+        else
+          title << obj.title
+        end
+      end
+
+      final_title = title.pop
+      if (options[:page_title][:wrap_if_not_chained] and title.empty?) and options[:page_title][:tag].present?
+        css = options[:page_title][:class].present? ? " class='#{options[:page_title][:class]}'" : nil
+        final_title = "<#{options[:page_title][:tag]}#{css}>#{final_title}</#{options[:page_title][:tag]}>"
+      end
+
+      if title.empty?
+        return final_title.to_s.html_safe
+      else
+        return "<#{options[:ancestors][:tag]} class='#{options[:ancestors][:class]}'>#{title.join options[:ancestors][:separator]}#{options[:ancestors][:separator]}</#{options[:ancestors][:tag]}>#{final_title}".html_safe
+      end
+    end
+
+    # Returns <span class='help' title='Your Input'>(help)</span>
+    # Remember to wrap your block with <span class='label_with_help'></span> if you're using a label next to the help tag.
+    def refinery_help_tag(title='')
+      "<span class='help' title='#{title}'>(#{t('shared.admin.help')})</span>".html_safe
+    end
+
+    # This is just a quick wrapper to render an image tag that lives inside refinery/icons.
+    # They are all 16x16 so this is the default but is able to be overriden with supplied options.
+    def refinery_icon_tag(filename, options = {})
+      image_tag "refinery/icons/#{filename}", {:width => 16, :height => 16}.merge(options)
+    end
+
+    # Determine whether the supplied page is the currently open page according to Rails.
+    def selected_page?(page)
+      # ensure we match the path without the locale.
+      path = request.path
+      if defined?(::Refinery::I18n) and ::Refinery::I18n.enabled?
+        path = path.split("/#{::I18n.locale}").last
+      end
+
+      current_page?(page) or
+        (path =~ Regexp.new(page.menu_match) if page.menu_match.present?) or
+        (path == page.link_url) or
+        (path == page.nested_path)
+    end
+
+    # Generates the link to determine where the site bar switch button returns to.
+    def site_bar_switch_link
+      link_to_if(admin?, t('.switch_to_your_website'),
+                (if session.keys.include?(:website_return_to) and session[:website_return_to].present?
+                  session[:website_return_to]
+                 else
+                  root_url(:only_path => true)
+                 end)) do
+        link_to t('.switch_to_your_website_editor'),
+                (if session.keys.include?(:refinery_return_to) and session[:refinery_return_to].present?
+                  session[:refinery_return_to]
+                 elsif defined?(@page) and @page.present? and !@page.home?
+                   edit_admin_page_url(@page, :only_path => true)
+                 else
+                   (request.fullpath.to_s == '/') ? admin_root_url(:only_path => true) : "/admin#{request.request_uri}/edit"
+                 end rescue admin_root_url(:only_path => true))
+      end
+    end
+
+  end
+end

data/vendor/refinerycms/core/lib/refinery/catch_all_routes.rb

@@ -0,0 +1,5 @@
+Refinery::Application.routes.draw do
+  match '/admin' => redirect('/refinery')
+  match '/admin(/*path)' => redirect('/refinery/%{path}')
+  match '/refinery/*path' => 'admin/base#error_404'
+end

data/vendor/refinerycms/core/lib/refinery/link_renderer.rb

@@ -0,0 +1,55 @@
+class Refinery::LinkRenderer < WillPaginate::ViewHelpers::LinkRenderer
+
+# TODO: Rewrite for WillPaginate 3 API
+
+=begin
+
+  attr_accessor :url
+
+  def url_for(page)
+    # extract any url parameter and store it for subsequent requests but delete it
+    # this is so that we don't end up with it being an attribute of the resulting HTML.
+    @url ||= @options.delete(:url) || {}
+    page_one = page == 1
+    @url_params = {}
+    # page links should preserve GET parameters
+    stringified_merge @url_params, @template.params if @template.request.get?
+    stringified_merge @url_params, @options[:params] if @options[:params]
+
+    if complex = param_name.index(/[^\w-]/)
+      page_param = parse_query_parameters("#{param_name}=#{page}")
+
+      stringified_merge @url_params, page_param
+    else
+      @url_params[param_name] = page_one ? 1 : 2
+    end
+
+    url = @template.url_for(@url_params.merge!(@url).to_options)
+    return url if page_one
+
+    if complex
+      @url_string = url.sub(%r!((?:\?|&amp;)#{CGI.escape param_name}=)#{page}!, '\1@')
+      return url
+    else
+      @url_string = url
+      @url_params[param_name] = 3
+      @template.url_for(@url_params).split(//).each_with_index do |char, i|
+        if char == '3' and url[i, 1] == '2'
+          @url_string[i] = '@'
+          break
+        end
+      end
+    end
+    # finally!
+    @url_string.sub '@', page.to_s
+  end
+
+private
+
+  def param_name
+    @options[:param_name].to_s
+  end
+
+=end
+
+end