refinerycms 0.9.8.9 → 0.9.9

data/core/lib/generators/templates/autotest/autotest.rb

@@ -0,0 +1,17 @@
+###  uncomment any of the following requires applicable for your system
+###  and then copy this to .autotest if you are using the ZenTest autotest.
+# require "autotest/restart"
+# require "test_notifier/runner/autotest"
+# require "redgreen/autotest"
+# require "autotest/timestamp"
+
+# adds exceptions from .gitignore file, please modify exceptions there!
+imported_exceptions =  IO.readlines('.gitignore').inject([]) do |acc, line|
+  acc << line.strip if line.to_s[0] != '#' && line.strip != ''; acc
+end
+
+Autotest.add_hook :initialize do |autotest|
+  imported_exceptions.each do |exception|
+    autotest.add_exception(exception)
+  end
+end

data/core/lib/generators/templates/autotest/discover.rb

@@ -0,0 +1,2 @@
+Autotest.add_discovery { "rails" }
+Autotest.add_discovery { "rspec2" }

data/core/lib/generators/templates/config/cucumber.yml

@@ -0,0 +1,15 @@
+<%
+ENV["RAILS_ENV"] ||= "test"
+require ::File.expand_path('../config/environment',  __FILE__)
+rerun = File.file?('rerun.txt') ? IO.read('rerun.txt') : ""
+rerun_opts = rerun.to_s.strip.empty? ? "--format #{ENV['CUCUMBER_FORMAT'] || 'progress'} features" : "--format #{ENV['CUCUMBER_FORMAT'] || 'pretty'} #{rerun}"
+std_opts = "--format #{ENV['CUCUMBER_FORMAT'] || 'progress'} --strict --tags ~@wip "
+features_globs = []
+(::Refinery::Plugins.registered.pathnames << Rails.root).map{|p| p.join('features')}.reject{|d| !d.directory?}.each do |features|
+  features_globs << Dir[features.to_s].flatten.join(' ')
+end
+std_opts << features_globs.join(' ')
+%>
+default: <%= std_opts %>
+wip: --tags @wip:3 --wip features
+rerun: <%= rerun_opts %> --format rerun --out rerun.txt --strict --tags ~@wip

data/core/lib/generators/templates/config/database.yml.mysql

@@ -0,0 +1,20 @@
+login: &login
+  adapter: mysql
+  host: localhost
+  username: root
+  password:
+
+development: &development
+  database: your_local_database
+  <<: *login
+
+test: &test
+  database: your_test_database
+  <<: *login
+
+production: &production
+  adapter: mysql
+  host: localhost
+  database: your_production_database
+  username: your_production_database_login
+  password: your_production_database_password

data/core/lib/generators/templates/config/database.yml.postgresql

@@ -0,0 +1,57 @@
+# PostgreSQL. Versions 7.4 and 8.x are supported.
+#
+# Install the ruby-postgres driver:
+#   gem install ruby-postgres
+# On Mac OS X:
+#   gem install ruby-postgres -- --include=/usr/local/pgsql
+# On Windows:
+#   gem install ruby-postgres
+#       Choose the win32 build.
+#       Install PostgreSQL and put its /bin directory on your path.
+login: &login
+  adapter: postgresql
+  encoding: unicode
+  username: postgres
+  password: postgres
+  pool: 5
+  
+development: &development
+  database: your_local_database
+  <<: *login
+
+  # Connect on a TCP socket. Omitted by default since the client uses a
+  # domain socket that doesn't need configuration. Windows does not have
+  # domain sockets, so uncomment these lines.
+  #host: localhost
+  #port: 5432
+
+  # Schema search path. The server defaults to $user,public
+  #schema_search_path: myapp,sharedapp,public
+
+  # Minimum log levels, in increasing order:
+  #   debug5, debug4, debug3, debug2, debug1,
+  #   log, notice, warning, error, fatal, and panic
+  # The server defaults to notice.
+  #min_messages: warning
+
+# Warning: The database defined as "test" will be erased and
+# re-generated from your development database when you run "rake".
+# Do not set this db to the same as development or production.
+test: &test
+  database: your_test_database
+  <<: *login
+
+# Warning: The database defined as "cucumber" will be erased and
+# re-generated from your development database when you run "rake".
+# Do not set this db to the same as development or production.
+cucumber: &cucumber
+  database: your_cucumber_database
+  <<: *login
+
+production: &production
+  adapter: postgresql
+  encoding: unicode
+  pool: 5
+  database: your_production_database
+  username: your_production_database_login
+  password: your_production_database_password

data/core/lib/generators/templates/config/database.yml.sqlite3

@@ -0,0 +1,26 @@
+# SQLite version 3.x
+development:
+  adapter: <%= "jdbc" if defined?(JRUBY_PLATFORM) %>sqlite3
+  database: db/development.sqlite3
+  timeout: 5000
+
+# Warning: The database defined as 'test' will be erased and
+# re-generated from your development database when you run 'rake'.
+# Do not set this db to the same as development or production.
+test:
+  adapter: <%= "jdbc" if defined?(JRUBY_PLATFORM) %>sqlite3
+  database: db/test.sqlite3
+  timeout: 5000
+
+# Warning: The database defined as 'cucumber' will be erased and
+# re-generated from your development database when you run 'rake'.
+# Do not set this db to the same as development or production.
+cucumber:
+  adapter: <%= "jdbc" if defined?(JRUBY_PLATFORM) %>sqlite3
+  database: db/cucumber.sqlite3
+  timeout: 5000
+
+production:
+  adapter: <%= "jdbc" if defined?(JRUBY_PLATFORM) %>sqlite3
+  database: db/production.sqlite3
+  timeout: 5000

data/core/lib/generators/templates/config/i18n-js.yml

@@ -0,0 +1,6 @@
+# Find more details about this configuration file at http://github.com/fnando/i18n-js
+i18n_dir: "public/javascripts"
+translations:
+  javascript:
+    file: "public/javascripts/i18n-messages.js"
+    only: "*.js.*"

data/core/lib/generators/templates/config/initializers/devise.rb

@@ -0,0 +1,142 @@
+# Use this hook to configure devise mailer, warden hooks and so forth. The first
+# four configuration values can also be set straight in your models.
+Devise.setup do |config|
+  # ==> Mailer Configuration
+  # Configure the e-mail address which will be shown in DeviseMailer.
+  config.mailer_sender = "please-change-me@config-initializers-devise.com"
+
+  # Configure the class responsible to send e-mails.
+  # config.mailer = "Devise::Mailer"
+
+  # ==> ORM configuration
+  # Load and configure the ORM. Supports :active_record (default) and
+  # :mongoid (bson_ext recommended) by default. Other ORMs may be
+  # available as additional gems.
+  require 'devise/orm/active_record'
+
+  # ==> Configuration for any authentication mechanism
+  # Configure which keys are used when authenticating an user. By default is
+  # just :email. You can configure it to use [:username, :subdomain], so for
+  # authenticating an user, both parameters are required. Remember that those
+  # parameters are used only when authenticating and not when retrieving from
+  # session. If you need permissions, you should implement that in a before filter.
+  config.authentication_keys = [ :login ] # Required to login using username or email
+
+  # Tell if authentication through request.params is enabled. True by default.
+  # config.params_authenticatable = true
+
+  # Tell if authentication through HTTP Basic Auth is enabled. False by default.
+  # config.http_authenticatable = false
+
+  # Set this to true to use Basic Auth for AJAX requests.  True by default.
+  # config.http_authenticatable_on_xhr = true
+
+  # The realm used in Http Basic Authentication
+  # config.http_authentication_realm = "Application"
+
+  # ==> Configuration for :database_authenticatable
+  # For bcrypt, this is the cost for hashing the password and defaults to 10. If
+  # using other encryptors, it sets how many times you want the password re-encrypted.
+  # config.stretches = 20
+
+  # Define which will be the encryption algorithm. Devise also supports encryptors
+  # from others authentication tools as :clearance_sha1, :authlogic_sha512 (then
+  # you should set stretches above to 20 for default behavior) and :restful_authentication_sha1
+  # (then you should set stretches to 10, and copy REST_AUTH_SITE_KEY to pepper)
+  config.encryptor = :bcrypt
+
+  # Setup a pepper to generate the encrypted password.
+  config.pepper = "2e20a8abdd34d729ba6d05f679e513cfea9fbb1e83c81f84b29e9e4fdbd4ee59b56a32200064082a15a72b05a4d4a6a2c3784a09c0554b3a47a67cc8333ccbc7"
+
+  # ==> Configuration for :confirmable
+  # The time you want to give your user to confirm his account. During this time
+  # he will be able to access your application without confirming. Default is nil.
+  # When confirm_within is zero, the user won't be able to sign in without confirming.
+  # You can use this to let your user access some features of your application
+  # without confirming the account, but blocking it after a certain period
+  # (ie 2 days).
+  # config.confirm_within = 2.days
+
+  # ==> Configuration for :rememberable
+  # The time the user will be remembered without asking for credentials again.
+  # config.remember_for = 2.weeks
+
+  # If true, a valid remember token can be re-used between multiple browsers.
+  # config.remember_across_browsers = true
+
+  # If true, extends the user's remember period when remembered via cookie.
+  # config.extend_remember_period = false
+
+  # ==> Configuration for :validatable
+  # Range for password length
+  config.password_length = 4..20
+
+  # Regex to use to validate the email address
+  # config.email_regexp = /^([\w\.%\+\-]+)@([\w\-]+\.)+([\w]{2,})$/i
+
+  # ==> Configuration for :timeoutable
+  # The time you want to timeout the user session without activity. After this
+  # time the user will be asked for credentials again.
+  # config.timeout_in = 10.minutes
+
+  # ==> Configuration for :lockable
+  # Defines which strategy will be used to lock an account.
+  # :failed_attempts = Locks an account after a number of failed attempts to sign in.
+  # :none            = No lock strategy. You should handle locking by yourself.
+  # config.lock_strategy = :failed_attempts
+
+  # Defines which strategy will be used to unlock an account.
+  # :email = Sends an unlock link to the user email
+  # :time  = Re-enables login after a certain amount of time (see :unlock_in below)
+  # :both  = Enables both strategies
+  # :none  = No unlock strategy. You should handle unlocking by yourself.
+  # config.unlock_strategy = :both
+
+  # Number of authentication tries before locking an account if lock_strategy
+  # is failed attempts.
+  # config.maximum_attempts = 20
+
+  # Time interval to unlock the account if :time is enabled as unlock_strategy.
+  # config.unlock_in = 1.hour
+
+  # ==> Configuration for :token_authenticatable
+  # Defines name of the authentication token params key
+  # config.token_authentication_key = :auth_token
+
+  # ==> Scopes configuration
+  # Turn scoped views on. Before rendering "sessions/new", it will first check for
+  # "users/sessions/new". It's turned off by default because it's slower if you
+  # are using only default views.
+  # config.scoped_views = true
+
+  # Configure the default scope given to Warden. By default it's the first
+  # devise role declared in your routes.
+  # config.default_scope = :user
+
+  # Configure sign_out behavior.
+  # By default sign_out is scoped (i.e. /users/sign_out affects only :user scope).
+  # In case of sign_out_all_scopes set to true any logout action will sign out all active scopes.
+  # config.sign_out_all_scopes = false
+
+  # ==> Navigation configuration
+  # Lists the formats that should be treated as navigational. Formats like
+  # :html, should redirect to the sign in page when the user does not have
+  # access, but formats like :xml or :json, should return 401.
+  # If you have any extra navigational formats, like :iphone or :mobile, you
+  # should add them to the navigational formats lists. Default is [:html]
+  # config.navigational_formats = [:html, :iphone]
+
+  # ==> Warden configuration
+  # If you want to use other strategies, that are not (yet) supported by Devise,
+  # you can configure them inside the config.warden block. The example below
+  # allows you to setup OAuth, using http://github.com/roman/warden_oauth
+  #
+  # config.warden do |manager|
+  #   manager.oauth(:twitter) do |twitter|
+  #     twitter.consumer_secret = <YOUR CONSUMER SECRET>
+  #     twitter.consumer_key  = <YOUR CONSUMER KEY>
+  #     twitter.options :site => 'http://twitter.com'
+  #   end
+  #   manager.default_strategies(:scope => :user).unshift :twitter_oauth
+  # end
+end

data/core/lib/generators/templates/config/settings.rb

@@ -0,0 +1,3 @@
+# Other settings go here as below.
+# These settings are ones that are set for all environments and need to be set AFTER the refinery boot process.
+Refinery.authentication_login_field = 'login'

data/core/lib/generators/templates/db/seeds.rb

@@ -0,0 +1,5 @@
+# Refinery seeds
+Dir[Rails.root.join('db', 'seeds', '*.rb').to_s].each do |file|
+  puts "Loading db/seeds/#{file.split(File::SEPARATOR).last}"
+  load(file)
+end

data/core/lib/generators/templates/spec/rcov.opts

@@ -0,0 +1,2 @@
+--exclude "spec/*,gems/*"
+--rails

data/core/lib/generators/templates/spec/spec_helper.rb

@@ -0,0 +1,76 @@
+require 'rbconfig'
+def setup_environment
+  # This file is copied to ~/spec when you run 'rails generate rspec'
+  # from the project root directory.
+  ENV["RAILS_ENV"] ||= 'test'
+  require File.expand_path("../../config/environment", __FILE__)
+  require 'rspec/rails'
+
+  # Requires supporting files with custom matchers and macros, etc,
+  # in ./support/ and its subdirectories.
+  Dir[File.expand_path('../support/**/*.rb', __FILE__)].each {|f| require f}
+
+  RSpec.configure do |config|
+    # == Mock Framework
+    #
+    # If you prefer to use mocha, flexmock or RR, uncomment the appropriate line:
+    #
+    # config.mock_with :mocha
+    # config.mock_with :flexmock
+    # config.mock_with :rr
+    config.mock_with :rspec
+
+    config.fixture_path = ::Rails.root.join('spec', 'fixtures').to_s
+
+    # If you're not using ActiveRecord, or you'd prefer not to run each of your
+    # examples within a transaction, comment the following line or assign false
+    # instead of true.
+    config.use_transactional_fixtures = true
+    config.use_instantiated_fixtures  = false
+  end
+end
+
+def each_run
+end
+
+unless RbConfig::CONFIG["host_os"] =~ %r!(msdos|mswin|djgpp|mingw)!
+  require 'rubygems'
+  require 'spork'
+
+  Spork.prefork do
+    # Loading more in this block will cause your tests to run faster. However,
+    # if you change any configuration or code from libraries loaded here, you'll
+    # need to restart spork for it take effect.
+    setup_environment
+  end
+
+  Spork.each_run do
+    # This code will be run each time you run your specs.
+    each_run
+  end
+
+  # --- Instructions ---
+  # - Sort through your spec_helper file. Place as much environment loading
+  #   code that you don't normally modify during development in the
+  #   Spork.prefork block.
+  # - Place the rest under Spork.each_run block
+  # - Any code that is left outside of the blocks will be ran during preforking
+  #   and during each_run!
+  # - These instructions should self-destruct in 10 seconds.  If they don't,
+  #   feel free to delete them.
+  #
+else
+  setup_environment
+  each_run
+end
+
+def capture_stdout(&block)
+  original_stdout = $stdout
+  $stdout = fake = StringIO.new
+  begin
+    yield
+  ensure
+    $stdout = original_stdout
+  end
+ fake.string
+end

data/core/lib/refinery/admin/base_controller.rb

@@ -0,0 +1,111 @@
+require 'action_controller'
+require 'application_helper'
+
+module Refinery
+  module Admin
+    module BaseController
+
+      def self.included(controller)
+        controller.send :include, ::Refinery::Admin::BaseController::InstanceMethods
+        controller.send :include, ::Refinery::Admin::BaseController::ClassMethods
+      end
+
+      module ClassMethods
+        def self.included(c)
+          c.layout :layout?
+
+          c.before_filter :authenticate_user!, :restrict_plugins, :restrict_controller
+          c.after_filter :store_location?, :except => [:new, :create, :edit, :update, :destroy, :update_positions] # for redirect_back_or_default
+
+          c.helper_method :searching?, :group_by_date
+        end
+      end
+
+      module InstanceMethods
+        def admin?
+          true # we're in the admin base controller, so always true.
+        end
+
+        def searching?
+          params[:search].present?
+        end
+
+        def error_404(exception=nil)
+          if (@page = Page.find_by_menu_match("^/404$", :include => [:parts, :slugs])).present?
+            params[:action] = 'error_404'
+            # change any links in the copy to the admin_root_path
+            # and any references to "home page" to "Dashboard"
+            part_symbol = Page.default_parts.first.to_sym
+            @page[part_symbol] = @page[part_symbol].to_s.gsub(
+                                   /href=(\'|\")\/(\'|\")/, "href='#{admin_root_path}'"
+                                 ).gsub("home page", "Dashboard")
+
+            render :template => "/pages/show",
+                   :layout => layout?,
+                   :status => 404
+          else
+            # fallback to the default 404.html page.
+            render :file => Rails.root.join("public", "404.html").cleanpath.to_s,
+                   :layout => false,
+                   :status => 404
+          end
+        end
+
+      protected
+
+        def group_by_date(records)
+          new_records = []
+
+          records.each do |record|
+            key = record.created_at.strftime("%Y-%m-%d")
+            record_group = new_records.collect{|records| records.last if records.first == key }.flatten.compact << record
+            (new_records.delete_if {|i| i.first == key}) << [key, record_group]
+          end
+
+          new_records
+        end
+
+        def restrict_plugins
+          current_length = (plugins = current_user.authorized_plugins).length
+
+          # Superusers get granted access if they don't already have access.
+          if current_user.has_role?(:superuser)
+            if (plugins = plugins | ::Refinery::Plugins.registered.names).length > current_length
+              current_user.plugins = plugins
+            end
+          end
+
+          Refinery::Plugins.set_active(plugins)
+        end
+
+        def restrict_controller
+          if Refinery::Plugins.active.reject { |plugin| params[:controller] !~ Regexp.new(plugin.menu_match)}.empty?
+            warn "'#{current_user.username}' tried to access '#{params[:controller]}' but was rejected."
+            error_404
+          end
+        end
+
+        # Override method from application_controller. Not needed in this controller.
+        def find_pages_for_menu; end
+
+      private
+        def layout?
+          "admin#{"_dialog" if from_dialog?}"
+        end
+
+        # Check whether it makes sense to return the user to the last page they
+        # were at instead of the default e.g. admin_pages_url
+        # right now we just want to snap back to index actions and definitely not to dialogues.
+        def store_location?
+          store_location unless action_name !~ /index/ or request.xhr? or from_dialog?
+        end
+
+        # Override authorized? so that only users with the Refinery role can admin the website.
+        def authorized?
+          refinery_user?
+        end
+      end
+
+    end
+  end
+end