refinerycms 0.9.7.15 → 0.9.8

data/vendor/plugins/authentication/app/controllers/users_controller.rb

@@ -1,112 +0,0 @@
-class UsersController < ApplicationController
-
-  # Protect these actions behind an admin login
-  before_filter :redirect?, :only => [:new, :create, :index]
-  before_filter :find_user, :only => [:suspend, :unsuspend, :destroy, :purge]
-
-  # authlogic default
-  #before_filter :require_no_user, :only => [:new, :create]
-  #before_filter :require_user, :only => [:show, :edit, :update]
-
-  filter_parameter_logging 'password', 'password_confirmation'
-
-  layout 'admin'
-
-  def new
-    @user = User.new
-  end
-
-  # This method should only be used to create the first Refinery user.
-  def create
-    # protects against session fixation attacks, wreaks havoc with request forgery protection.
-    # uncomment at your own risk:
-    # reset_session
-    @user = User.new(params[:user])
-    @selected_plugin_titles = params[:user][:plugins] || []
-
-    @user.save if @user.valid?
-
-    if @user.errors.empty?
-      @user.add_role(:refinery)
-      @user.plugins = @selected_plugin_titles
-      @user.save
-      UserSession.create!(@user)
-      if Role[:refinery].users.count == 1
-        # this is the superuser if this user is the only user.
-        current_user.add_role(:superuser)
-        current_user.save
-
-        # set this user as the recipient of inquiry notifications
-        if (notification_recipients = InquirySetting.find_or_create_by_name("Notification Recipients")).present?
-          notification_recipients.update_attributes({
-            :value => current_user.email,
-            :destroyable => false
-          })
-        end
-      end
-
-      flash[:message] = "<h2>#{t('users.create.welcome', :who => current_user.login).gsub(/\.$/, '')}.</h2>".html_safe
-
-      site_name_setting = RefinerySetting.find_or_create_by_name('site_name', :value => "Company Name")
-      if site_name_setting.value.to_s =~ /^(|Company\ Name)$/ or Role[:refinery].users.count == 1
-        flash[:message] << "<p>#{t('users.setup_website_name',
-                                   :link => edit_admin_refinery_setting_url(site_name_setting, :dialog => true),
-                                   :title => t('admin.refinery_settings.refinery_setting.edit'))}</p>".html_safe
-      end
-
-      redirect_back_or_default(admin_root_url)
-    else
-      render :action => 'new'
-    end
-  end
-
-  def forgot
-    if request.post?
-      if (params[:user].present? and params[:user][:email].present? and
-          user = User.find_by_email(params[:user][:email])).present?
-        user.deliver_password_reset_instructions!(request)
-        flash[:notice] = t('users.forgot.email_reset_sent')
-        redirect_back_or_default new_session_url
-      else
-        @user = User.new(params[:user])
-        if (email = params[:user][:email]).blank?
-          flash.now[:error] = t('users.forgot.blank_email')
-        else
-          flash.now[:error] = t('users.forgot.email_not_associated_with_account',
-                                :email => params[:user][:email])
-        end
-      end
-    end
-  end
-
-  def reset
-    if params[:reset_code] and @user = User.find_using_perishable_token(params[:reset_code])
-      if request.post?
-        UserSession.create(@user)
-        if @user.update_attributes(:password => params[:user][:password],
-                                   :password_confirmation => params[:user][:password_confirmation])
-
-          flash[:notice] = t('users.reset.successful', :email => @user.email)
-          redirect_back_or_default admin_root_url
-        end
-      end
-    else
-      redirect_to(forgot_users_url, :error => t('users.reset.code_invalid'))
-    end
-  end
-
-protected
-
-  def redirect?
-    if refinery_user?
-      redirect_to admin_users_url
-    elsif refinery_users_exist?
-      redirect_to root_url
-    end
-  end
-
-  def refinery_users_exist?
-    Role[:refinery].users.any?
-  end
-
-end

data/vendor/plugins/authentication/app/models/role.rb

@@ -1,16 +0,0 @@
-class Role < ActiveRecord::Base
-
-  has_and_belongs_to_many :users
-
-  before_validation :camelize_title
-  validates_uniqueness_of :title
-
-  def camelize_title(role_title = self.title)
-    self.title = role_title.to_s.camelize
-  end
-
-  def self.[](title)
-    find_or_create_by_title(title.to_s.camelize)
-  end
-
-end

data/vendor/plugins/authentication/app/models/user.rb

@@ -1,71 +0,0 @@
-require 'digest/sha1'
-
-class User < ActiveRecord::Base
-  #-------------------------------------------------------------------------------------------------
-  # Authentication
-
-  # See http://rdoc.info/rdoc/binarylogic/authlogic/blob/85b2a6b3e9993b18c7fb1e4f7b9c6d01cc8b5d17/Authlogic/ActsAsAuthentic
-  acts_as_authentic do |c|
-    c.perishable_token_valid_for 10.minutes
-
-    # http://www.binarylogic.com/2008/11/23/tutorial-easily-migrate-from-restful_authentication-to-authlogic/
-    # Unfortunately, this seems to cause problems when you add Refinery to an app that already had
-    # an Authlogic-created users table. You may need to comment these 2 lines out if that is the case.
-    c.act_like_restful_authentication = true
-    c.transition_from_restful_authentication = true
-
-    # If users prefer to use their e-mail address to log in, change this setting to 'email' in
-    # config/application.rb
-    # This currently only affects which field is displayed in the login form. As long as we have
-    # find_by_login_method :find_by_login_or_email, they can still actually use either one.
-    c.login_field = defined?(Refinery.authentication_login_field) ? Refinery.authentication_login_field : "login"
-  end if self.table_exists?
-
-  # Allow users to log in with either their username *or* email, even though we only ask for one of those.
-  def self.find_by_login_or_email(login_or_email)
-    find_by_login(login_or_email) || find_by_email(login_or_email)
-  end
-
-  def deliver_password_reset_instructions!(request)
-    reset_perishable_token!
-    UserMailer.deliver_reset_notification(self, request)
-  end
-
-  #-------------------------------------------------------------------------------------------------
-
-  has_and_belongs_to_many :roles
-  has_many :plugins, :class_name => "UserPlugin", :order => "position ASC"
-  has_friendly_id :login, :use_slug => true
-
-  def plugins=(plugin_names)
-    unless self.new_record? # don't add plugins when the user_id is NULL.
-      self.plugins.delete_all
-
-      plugin_names.each_with_index do |plugin_name, index|
-        self.plugins.create(:name => plugin_name, :position => index) if plugin_name.is_a?(String)
-      end
-    end
-  end
-
-  def authorized_plugins
-    self.plugins.collect { |p| p.name } | Refinery::Plugins.always_allowed.names
-  end
-
-  def can_delete?(user_to_delete = self)
-    !user_to_delete.new_record? and
-      !user_to_delete.has_role?(:superuser) and
-      Role[:refinery].users.count > 1 and
-      self.id != user_to_delete.id
-  end
-
-  def add_role(title)
-    raise ArgumentException, "Role should be the title of the role not a role object." if title.is_a?(Role)
-    self.roles << Role[title] unless self.has_role?(title)
-  end
-
-  def has_role?(title)
-    raise ArgumentException, "Role should be the title of the role not a role object." if title.is_a?(Role)
-    (role = Role.find_by_title(title.to_s.camelize)).present? and self.roles.collect{|r| r.id}.include?(role.id)
-  end
-
-end

data/vendor/plugins/authentication/app/models/user_mailer.rb

@@ -1,22 +0,0 @@
-class UserMailer < ActionMailer::Base
-
-  def reset_notification(user, request)
-    setup_email(user)
-    subject         I18n.translate('user_mailer.link_to_reset_your_password')
-    @body[:url]  =  reset_users_url(:host => request.host_with_port,
-                                    :reset_code => user.perishable_token)
-  end
-
-protected
-
-  def url_prefix(request)
-    "#{request.protocol}#{request.host_with_port}"
-  end
-
-  def setup_email(user)
-    recipients    user.email
-    sent_on       Time.now
-    @body[:user] = user
-  end
-
-end

data/vendor/plugins/authentication/app/views/admin/users/_form.html.erb

@@ -1,64 +0,0 @@
-<% form_for [:admin, @user] do |f| %>
-  <%= f.error_messages %>
-  <div class='field'>
-    <%= f.label :login %>
-    <%= f.text_field :login %>
-  </div>
-  <div class='field'>
-    <%= f.label :email %>
-    <%= f.text_field :email %>
-  </div>
-  <div class='field'>
-    <%= f.label :password %>
-    <%= f.password_field :password, :autocomplete => 'off' %>
-    <%= "<br /><span class='preview'>#{t('.blank_password_keeps_current')}</span>" unless @user.new_record? %>
-  </div>
-  <div class='field'>
-    <%= f.label :password_confirmation %>
-    <%= f.password_field :password_confirmation, :autocomplete => 'off' %>
-  </div>
-  <div class='field plugin_access'>
-    <span class='label_with_help'>
-      <%= f.label :plugin_access, nil, :class => "title_label" %>
-      <%= link_to "(#{t('.enable_all')})", "", :id => "user_plugins_enable_all" %>
-    </span>
-    <ul id='plugins'>
-      <% @available_plugins.each do |plugin| -%>
-        <% if Refinery::Plugins.always_allowed.names.include?(plugin[:name]) or
-              (plugin[:name] == 'refinery_users' and @user.id == current_user.id) %>
-          <%= hidden_field_tag 'user[plugins][]', plugin[:name] %>
-        <% else %>
-          <li>
-            <%= check_box_tag 'user[plugins][]',
-                              plugin[:name],
-                              @selected_plugin_names.include?(plugin[:name]),
-                              :id => "plugins_#{plugin[:name]}" %>
-            <%= f.label 'user[plugins][]',
-                        t("plugins.#{plugin[:name].downcase}.title", :default => plugin[:title]),
-                        :class => "stripped",
-                        :for => "plugins_#{plugin[:name]}" %>
-          </li>
-        <% end %>
-      <% end %>
-    </ul>
-  </div>
-  <%= render :partial => "/shared/admin/form_actions",
-             :locals => {
-               :f => f,
-               :continue_editing => false,
-               :hide_delete => !current_user.can_delete?(@user),
-               :delete_title => t('admin.users.user.confirm_delete_title'),
-               :delete_confirmation => t('admin.users.user.confirm_delete_message', :who => @user.login)
-             } %>
-<% end %>
-
-<% content_for :head do %>
-  <script type='text/javascript'>
-    $(document).ready(function() {
-      $('#user_plugins_enable_all').click(function(e, a) {
-        $('div.field.plugin_access ul#plugins li input:checkbox').attr('checked', true);
-        e.preventDefault();
-      });
-    });
-  </script>
-<% end %>

data/vendor/plugins/authentication/app/views/admin/users/_user.html.erb

@@ -1,18 +0,0 @@
-<li id="sortable_<%= user.id %>" class='clearfix record <%= cycle("on", "on-hover") %>'>
-  <span class='title'>
-    <strong><%= user.login %></strong>
-    <span class="preview">
-      <%= t('.preview', :who => user.email, :created_at => l(user.created_at, :format => :short)) %>
-    </span>
-  </span>
-  <span class='actions'>
-    <%= link_to refinery_icon_tag('delete.png'), admin_user_path(user),
-                :class => "cancel confirm-delete",
-                :title => t('.confirm_delete_title'),
-                :'data-confirm' => t('.confirm_delete_message', :who => user.login) if current_user.can_delete?(user) %>
-    <%= link_to refinery_icon_tag('application_edit.png'), edit_admin_user_path(user),
-                :title => t('.edit_user')%>
-    <%= mail_to user.email, refinery_icon_tag('email_go.png'),
-                :title => t('.email_user') %>
-  </span>
-</li>

data/vendor/plugins/authentication/app/views/sessions/new.html.erb

@@ -1,22 +0,0 @@
-<% form_for :session, @session, :url => session_path do |f| -%>
-  <%= f.error_messages %>
-  <div class='field session_username clearfix'>
-    <%= f.label Refinery.authentication_login_field %>
-    <%= f.text_field Refinery.authentication_login_field, :class => 'larger widest' %>
-  </div>
-  <div class='field session_password clearfix'>
-    <%= f.label :password %>
-    <%= f.password_field :password, :autocomplete => 'off', :class => 'larger widest' %>
-  </div>
-  <div class='clearfix'>
-    <div class='field remember_me'>
-      <%= f.check_box :remember_me %>
-      <%= f.label :remember_me %>
-    </div>
-    <div class='field forgot_password'>
-      <%= link_to t('.forgot_password'), forgot_users_url %>
-    </div>
-  </div>
-  <%= render :partial => "/shared/admin/form_actions", :locals => {:f => f, :submit_button_text => t('.sign_in'), :hide_cancel => true} %>
-<% end -%>
-<% content_for :header, t('.hello_please_sign_in') %>

data/vendor/plugins/authentication/app/views/users/forgot.html.erb

@@ -1,18 +0,0 @@
-<% content_for :header, t('.enter_email_address') %>
-
-<% form_for :user do |f| -%>
-  <%= f.error_messages %>
-
-  <div class='field'>
-    <%= f.text_field :email, :class => "larger widest",
-                     :placeholder => t('.email_address', :default => t('authlogic.attributes.user_session.email')) %>
-  </div>
-
-  <%= render :partial => "/shared/admin/form_actions",
-             :locals => {
-               :f => f,
-               :continue_editing => false,
-               :submit_button_text => t('.reset_password'),
-               :cancel_url => login_url
-             } -%>
-<% end -%>

data/vendor/plugins/authentication/app/views/users/new.html.erb

@@ -1,35 +0,0 @@
-<% content_for :header, t('.fill_form') %>
-<% form_for :user, :url => users_path do |f| -%>
-  <%= f.error_messages %>
-  <div class='field'>
-    <%= f.label :login %>
-    <%= f.text_field :login, :class => 'larger widest' %>
-  </div>
-  <div class='field'>
-    <%= f.label :email %>
-    <%= f.text_field :email, :class => 'larger widest' %>
-  </div>
-  <div class='field'>
-    <%= f.label :password %>
-    <%= f.password_field :password, :class => 'larger widest' %>
-  </div>
-  <div class='field'>
-    <%= f.label :password_confirmation %>
-    <%= f.password_field :password_confirmation, :class => 'larger widest' %>
-  </div>
-
-  <% if just_installed? %>
-    <% Refinery::Plugins.registered.in_menu.names.sort.each do |plugin| -%>
-      <%= hidden_field_tag 'user[plugins][]', plugin, :id => "plugins_#{plugin.downcase.gsub(" ", "_")}" %>
-    <% end -%>
-  <% end -%>
-
-  <%= render :partial => "/shared/admin/form_actions",
-             :locals => {
-               :f => f,
-               :submit_continue => false,
-               :submit_button_text => t('.sign_up'),
-               :hide_delete => true,
-               :hide_cancel => true
-             }%>
-<% end -%>

data/vendor/plugins/authentication/app/views/users/reset.html.erb

@@ -1,23 +0,0 @@
-<% content_for :header, t('.pick_new_password_for', :email => @user.email) %>
-
-<% form_for :user do |f| -%>
-  <%= f.error_messages %>
-
-  <div class='field'>
-    <%= f.label :password %>
-    <%= f.password_field :password, :class => 'larger widest' %>
-  </div>
-
-  <div class='field'>
-    <%= f.label :password_confirmation %>
-    <%= f.password_field :password_confirmation, :class => 'larger widest' %>
-  </div>
-
-  <%= render :partial => "/shared/admin/form_actions",
-             :locals => {
-               :f => f,
-               :continue_editing => false,
-               :submit_button_text => t('.reset_password'),
-               :cancel_url => login_url
-             } -%>
-<% end -%>

data/vendor/plugins/authentication/config/locales/da.yml

@@ -1,83 +0,0 @@
-da:
-  plugins:
-    refinery_users:
-      title: Brugere
-  admin:
-    users:
-      update:
-        cannot_remove_user_plugin_from_current_user: "Du kan ikke deaktivere 'Brugere' for en bruger, der er logget på."
-      form:
-        blank_password_keeps_current: Hvis du ikke indtaster noget, beholdes den nuværende adgangskode
-      index:
-        create_new_user: Opret en ny bruger
-        no_users_yet: Der er ingen brugere endnu. Klik "Opret en ny bruger" for at oprette den første.
-      user:
-        confirm_delete_message: "Er du sikker på du vil slette '%{who}'?"
-        confirm_delete_title: Slet bruger
-        edit_user: Redigér bruger
-        email_user: Send e-mail
-        preview: (%{who}) oprettet %{created_at}
-  sessions:
-    login_successful: Du er logget på
-    login_failed: Beklager, dit brugernavn eller adgangskode er forkert.
-    logged_out: Du er logget af.
-    new:
-      login: Brugernavn
-      log_in: Log på
-      cancel: Annullér
-      password: Adgangskode
-      remember_me: Husk mig
-      or: eller
-      forgot_password: Jeg har glemt mit password
-      hello_please_sign_in: Hej! Du skal logge ind
-      sign_in: log ind
-  users:
-    setup_website_name: "Lad os først give websitet et navn. <a href='%{link}' name='%{title}'>Her</a> kan du rette navnet"
-    signup_disabled: Brugeroprettelse er deaktiveret
-    new:
-      fill_form: Indtast dine oplysninger, så vi kan få dig i gang med Refinery.
-      sign_up: Opret bruger
-    create:
-      welcome: Velkommen til Refinery, %{who}
-      signup_complete: Du er nu oprettet.
-    forgot:
-      email_address: E-mail-adresse
-      enter_email_address: Indtast venligst den email-adresse til din konto.
-      reset_password: Reset adgangskode
-      blank_email: Du har ikke angivet en e-mail-adresse.
-      email_not_associated_with_account: "Undskyld, '%{email}' er ikke forbundet med nogen regnskaber. <br/> Er du sikker på du har skrevet den rigtige email-adresse?"
-      email_reset_sent: En e-mail er blevet sendt til dig med et link til nulstille din adgangskode.
-    reset:
-      code_invalid: "Vi beklager, men denne nulstilling kode er udløbet eller ugyldig. Hvis du har spørgsmål kan du prøve at kopiere og indsætte webadressen fra din e-mail til din browser eller genstarte reset password proces."
-      successful: "Adgangskode reset succes for %{email}"
-  user_mailer:
-    please_activate: Du skal aktivere din nye brugerkonto
-    activated: Din konto er nu aktiveret.
-    activated_email: "%{who}, din konto er nu aktiveret. Du kan nu begynde at tilføje plug-ins:"
-    account_created: Din konto er nu oprettet.
-    user_name: Brugernavn %{name}
-    password: Adgangskode %{password}
-    visit_url: "Du aktiverer din brugerkonto ved at følge dette link:"
-    link_to_reset_your_password: Link til nulstilling af din adgangskode
-  authlogic:
-    error_messages:
-      login_blank: skal udfyldes
-      login_not_found: er ugyldigt
-      login_invalid: må kun indeholde bogstaver, tal, mellemrum og tegnene '.-_@'.
-      consecutive_failed_logins_limit_exceeded: Din konto er nu spærret pga. for mange forgæves forsøg på at logge på.
-      email_invalid: er ikke en gyldig e-mail-adresse.
-      password_blank: skal udfyldes
-      password_invalid: er ikke gyldigt
-      not_active: Din brugerkonto er ikke aktiv
-      not_confirmed: Du skal bekræfte din brugerkonto, før du kan logge på
-      not_approved: Din brugerkonto er ikke godkendt
-      no_authentication_details: Angiv brugernavn og adgangskode
-    models:
-      user_session: UserSession
-    attributes:
-      user_session:
-        login: brugernavn
-        email: e-mail
-        password: adgangskode
-        remember_me: husk mig
-        incorrect: "Beklager, dit %{login_field} eller adgangskode er forkert."