spree_multi_vendor 2.0.1

data/app/controllers/spree_multi_vendor/spree/admin/base_controller_decorator.rb

@@ -0,0 +1,10 @@
+module SpreeMultiVendor::Spree::Admin::BaseControllerDecorator
+  Spree::Admin::BaseController.include(Spree::Admin::VendorHelper)
+
+  def self.prepended(base)
+    base.helper_method :current_spree_vendor
+    base.helper_method :vendor_state_options
+  end
+end
+
+Spree::Admin::BaseController.prepend SpreeMultiVendor::Spree::Admin::BaseControllerDecorator

data/app/controllers/spree_multi_vendor/spree/admin/option_types_controller_decorator.rb

@@ -0,0 +1,7 @@
+module SpreeMultiVendor::Spree::Admin::OptionTypesControllerDecorator
+  def self.prepended(base)
+    base.before_action :set_vendor_id, only: [:create, :update]
+  end
+end
+
+Spree::Admin::OptionTypesController.prepend SpreeMultiVendor::Spree::Admin::OptionTypesControllerDecorator

data/app/controllers/spree_multi_vendor/spree/admin/products_controller_decorator.rb

@@ -0,0 +1,24 @@
+module SpreeMultiVendor::Spree::Admin::ProductsControllerDecorator
+  def self.prepended(base)
+    base.before_action :set_vendor_id, only: [:create, :update]
+    base.before_action :load_vendors, only: [:new, :edit, :update]
+  end
+
+  def stock
+    @variants = @product.variants.includes(*variant_stock_includes)
+    @variants = [@product.master] if @variants.empty?
+    @stock_locations = Spree::StockLocation.accessible_by(current_ability, :read).where(vendor_id: @product.vendor_id)
+    if @stock_locations.empty?
+      flash[:error] = Spree.t(:stock_management_requires_a_stock_location)
+      redirect_to admin_stock_locations_path
+    end
+  end
+
+  private
+
+  def load_vendors
+    @vendors = Spree::Vendor.order(Arel.sql('LOWER(name)'))
+  end
+end
+
+Spree::Admin::ProductsController.prepend SpreeMultiVendor::Spree::Admin::ProductsControllerDecorator

data/app/controllers/spree_multi_vendor/spree/admin/properties_controller_decorator.rb

@@ -0,0 +1,7 @@
+module SpreeMultiVendor::Spree::Admin::PropertiesControllerDecorator
+  def self.prepended(base)
+    base.before_action :set_vendor_id, only: [:create, :update]
+  end
+end
+
+Spree::Admin::PropertiesController.prepend SpreeMultiVendor::Spree::Admin::PropertiesControllerDecorator

data/app/controllers/spree_multi_vendor/spree/admin/resource_controller_decorator.rb

@@ -0,0 +1,8 @@
+module SpreeMultiVendor::Spree::Admin::ResourceControllerDecorator
+  def set_vendor_id
+    return unless current_spree_vendor
+    params[resource.object_name.to_sym][:vendor_id] = current_spree_vendor.id
+  end
+end
+
+Spree::Admin::ResourceController.prepend SpreeMultiVendor::Spree::Admin::ResourceControllerDecorator

data/app/controllers/spree_multi_vendor/spree/admin/shipping_methods_controller_decorator.rb

@@ -0,0 +1,7 @@
+module SpreeMultiVendor::Spree::Admin::ShippingMethodsControllerDecorator
+  def self.prepended(base)
+    base.before_action :set_vendor_id, only: [:create, :update]
+  end
+end
+
+Spree::Admin::ShippingMethodsController.prepend SpreeMultiVendor::Spree::Admin::ShippingMethodsControllerDecorator

data/app/controllers/spree_multi_vendor/spree/admin/stock_locations_controller_decorator.rb

@@ -0,0 +1,7 @@
+module SpreeMultiVendor::Spree::Admin::StockLocationsControllerDecorator
+  def self.prepended(base)
+    base.before_action :set_vendor_id, only: [:create, :update]
+  end
+end
+
+Spree::Admin::StockLocationsController.prepend SpreeMultiVendor::Spree::Admin::StockLocationsControllerDecorator

data/app/controllers/spree_multi_vendor/spree/admin/users_controller_decorator.rb

@@ -0,0 +1,13 @@
+module SpreeMultiVendor::Spree::Admin::UsersControllerDecorator
+  private
+
+  def user_params
+    params.require(:user).permit(permitted_user_attributes |
+                                 [spree_role_ids: [],
+                                  vendor_ids: [],
+                                  ship_address_attributes: permitted_address_attributes,
+                                  bill_address_attributes: permitted_address_attributes])
+  end
+end
+
+Spree::Admin::UsersController.prepend SpreeMultiVendor::Spree::Admin::UsersControllerDecorator

data/app/controllers/spree_multi_vendor/spree/admin/variants_controller_decorator.rb

@@ -0,0 +1,7 @@
+module SpreeMultiVendor::Spree::Admin::VariantsControllerDecorator
+  def self.prepended(base)
+    base.before_action :set_vendor_id, only: [:create, :update]
+  end
+end
+
+Spree::Admin::VariantsController.prepend SpreeMultiVendor::Spree::Admin::VariantsControllerDecorator

data/app/controllers/spree_multi_vendor/spree/api/v1/variants_controller_decorator.rb

@@ -0,0 +1,22 @@
+module SpreeMultiVendor::Spree::Api::V1::VariantsControllerDecorator
+  private
+
+  def scope
+    variants = if @product
+                  @product.variants_including_master
+                else
+                  Spree::Variant
+                end
+
+    if current_ability.can?(:manage, Spree::Variant) && params[:show_deleted]
+      variants = variants.with_deleted
+    end
+
+    variants = variants.for_vendor_user(current_spree_user) unless @current_user_roles.include?('admin')
+    variants = variants.eligible if Spree.version.to_f >= 3.7
+
+    variants.accessible_by(current_ability, :read)
+  end
+end
+
+Spree::Api::V1::VariantsController.prepend SpreeMultiVendor::Spree::Api::V1::VariantsControllerDecorator

data/app/finders/spree_multi_vendor/products_finder_decorator.rb

@@ -0,0 +1,31 @@
+module SpreeMultiVendor
+  module ProductsFinderDecorator
+    def initialize(scope:, params:, current_currency:)
+      super
+
+      @vendors = params.dig(:filter, :vendor_ids)&.split(',')
+    end
+
+    def execute
+      products = by_vendors(super)
+
+      products.distinct
+    end
+
+    private
+
+    attr_reader :vendors
+
+    def vendors?
+      vendors.present?
+    end
+
+    def by_vendors(products)
+      return products unless vendors?
+
+      products.where(vendor_id: vendors)
+    end
+  end
+end
+
+::Spree::Products::Find.prepend(SpreeMultiVendor::ProductsFinderDecorator)

data/app/helpers/spree/admin/vendor_helper.rb

@@ -0,0 +1,15 @@
+module Spree
+  module Admin
+    module VendorHelper
+      def current_spree_vendor
+        if current_spree_user.vendors.any? && (!current_spree_user.respond_to?(:has_spree_role?) || !current_spree_user.has_spree_role?(:admin))
+          current_spree_user.vendors.first
+        end
+      end
+
+      def vendor_state_options
+        @vendor_state_options ||= Spree::Vendor.state_machines[:state].states.collect { |s| [Spree.t("vendor_states.#{s.name}"), s.value] }
+      end
+    end
+  end
+end

data/app/mailers/spree/vendor_mailer.rb

@@ -0,0 +1,15 @@
+module Spree
+  class VendorMailer < ::Spree::BaseMailer
+    def vendor_notification_email(order_id, vendor_id)
+      @vendor = Spree::Vendor.find(vendor_id)
+      return unless @vendor.notification_email.present?
+
+      @order = Spree::Order.find(order_id)
+      @line_items = @order.line_items.for_vendor(@vendor)
+      @subtotal = @order.vendor_subtotal(@vendor)
+      @total = @order.vendor_total(@vendor)
+      subject = "#{Spree::Store.current.name} #{Spree.t('order_mailer.vendor_notification_email.subject')} ##{@order.number}"
+      mail(to: @vendor.notification_email, from: from_address, subject: subject)
+    end
+  end
+end

data/app/models/concerns/spree/vendor_concern.rb

@@ -0,0 +1,11 @@
+module Spree
+  module VendorConcern
+    extend ActiveSupport::Concern
+
+    included do
+      belongs_to :vendor, class_name: 'Spree::Vendor', touch: true, optional: true
+
+      scope :with_vendor, ->(vendor_id) { where(vendor_id: vendor_id) }
+    end
+  end
+end

data/app/models/spree/order_commission.rb

@@ -0,0 +1,11 @@
+module Spree
+  class OrderCommission < Base
+    belongs_to :order, required: Spree.version.to_f >= 3.5
+    belongs_to :vendor, required: Spree.version.to_f >= 3.5
+
+    validates :order, :vendor, presence: true
+    validates :vendor_id, uniqueness: { scope: :order_id }
+
+    scope :for_vendor, ->(vendor) { where(vendor_id: vendor.id) }
+  end
+end

data/app/models/spree/vendor.rb

@@ -0,0 +1,77 @@
+module Spree
+  class Vendor < Spree::Base
+    extend FriendlyId
+
+    acts_as_paranoid
+    acts_as_list column: :priority
+    friendly_id :name, use: %i[slugged history]
+
+    validates :name,
+              presence: true,
+              uniqueness: { case_sensitive: false }
+
+    validates :slug, uniqueness: true
+    validates_associated :image if Spree.version.to_f >= 3.6
+
+    validates :notification_email, email: true, allow_blank: true
+
+    with_options dependent: :destroy do
+      has_one :image, as: :viewable, dependent: :destroy, class_name: 'Spree::VendorImage'
+      has_many :commissions, class_name: 'Spree::OrderCommission'
+      has_many :vendor_users
+
+      SpreeMultiVendor::Config[:vendorized_models].uniq.compact.each do |model|
+        has_many model.pluralize.to_sym
+      end
+    end
+
+    has_many :users, through: :vendor_users, class_name: Spree.user_class.to_s
+
+    after_create :create_stock_location
+    after_update :update_stock_location_names
+
+    state_machine :state, initial: :pending do
+      event :activate do
+        transition to: :active
+      end
+
+      event :block do
+        transition to: :blocked
+      end
+    end
+
+    scope :active, -> { where(state: 'active') }
+
+    self.whitelisted_ransackable_attributes = %w[name state]
+
+    def update_notification_email(email)
+      update(notification_email: email)
+    end
+
+    # Spree Globalize support
+    # https://github.com/spree-contrib/spree_multi_vendor/issues/104
+    if defined?(SpreeGlobalize)
+      attr_accessor :translations_attributes
+      translates :name,
+                 :about_us,
+                 :contact_us,
+                 :slug, fallbacks_for_empty_translations: true
+    end
+
+    private
+
+    def create_stock_location
+      stock_locations.where(name: name, country: Spree::Country.default).first_or_create!
+    end
+
+    def should_generate_new_friendly_id?
+      slug.blank? || name_changed?
+    end
+
+    def update_stock_location_names
+      if (Spree.version.to_f < 3.5 && self.name_changed?) || (Spree.version.to_f >= 3.5 && saved_changes&.include?(:name))
+        stock_locations.update_all({ name: name })
+      end
+    end
+  end
+end

data/app/models/spree/vendor_ability.rb

@@ -0,0 +1,140 @@
+class Spree::VendorAbility
+  include CanCan::Ability
+
+  def initialize(user)
+    @vendor_ids = user.vendors.active.ids
+
+    if @vendor_ids.any?
+      apply_classifications_permissions
+      apply_order_permissions
+      apply_image_permissions
+      apply_option_type_permissions
+      apply_price_permissions
+      apply_product_option_type_permissions
+      apply_product_permissions
+      apply_product_properties_permissions
+      apply_properties_permissions
+      apply_prototypes_permissions
+      apply_shipment_permissions
+      apply_shipping_methods_permissions
+      apply_stock_permissions
+      apply_stock_item_permissions
+      apply_stock_location_permissions
+      apply_stock_movement_permissions
+      apply_variant_permissions
+      apply_vendor_permissions
+      apply_vendor_settings_permissions
+      apply_state_changes_permissions
+    end
+  end
+
+  protected
+
+  def apply_classifications_permissions
+    can :manage, Spree::Classification, product: { vendor_id: @vendor_ids }
+  end
+
+  def apply_order_permissions
+    cannot :create, Spree::Order
+    can [:admin, :index, :edit, :update, :cart], Spree::Order do |order|
+      (order.vendor_ids & @vendor_ids).any?
+    end
+  end
+
+  def apply_image_permissions
+    can :create, Spree::Image
+
+    can [:manage, :modify], Spree::Image, ['viewable_type = ?', 'Spree::Variant'] do |image|
+      vendor_id = image.viewable.try(:vendor_id)
+      vendor_id.present? && @vendor_ids.include?(vendor_id)
+    end
+  end
+
+  def apply_option_type_permissions
+    cannot_display_model(Spree::OptionType)
+    can :manage, Spree::OptionType, vendor_id: @vendor_ids
+    can :create, Spree::OptionType
+  end
+
+  def apply_price_permissions
+    can :modify, Spree::Price, variant: { vendor_id: @vendor_ids }
+  end
+
+  def apply_product_option_type_permissions
+    can :display, Spree::OptionType
+    can :display, Spree::OptionValue
+    can :manage,  Spree::ProductOptionType, product: { vendor_id: @vendor_ids }
+    can :create,  Spree::ProductOptionType
+    can :manage,  Spree::OptionValueVariant, variant: { vendor_id: @vendor_ids }
+    can :create,  Spree::OptionValueVariant
+  end
+
+  def apply_product_permissions
+    cannot_display_model(Spree::Product)
+    can :manage, Spree::Product, vendor_id: @vendor_ids
+    can :create, Spree::Product
+  end
+
+  def apply_properties_permissions
+    can :display, Spree::Property
+  end
+  
+  def apply_product_properties_permissions
+    can :manage,  Spree::ProductProperty, product: { vendor_id: @vendor_ids }
+    can :create,  Spree::ProductProperty
+  end
+
+  def apply_prototypes_permissions
+    can [:read, :admin], Spree::Prototype
+  end
+
+  def apply_shipment_permissions
+    can :update, Spree::Shipment, inventory_units: { line_item: { product: { vendor_id: @vendor_ids } } }
+  end
+
+  def apply_shipping_methods_permissions
+    can :manage, Spree::ShippingMethod, vendor_id: @vendor_ids
+    can :create, Spree::ShippingMethod
+  end
+
+  def apply_stock_permissions
+    can :admin, Spree::Stock
+  end
+
+  def apply_stock_item_permissions
+    can [:admin, :modify, :read], Spree::StockItem, stock_location: { vendor_id: @vendor_ids }
+  end
+
+  def apply_stock_location_permissions
+    can :manage, Spree::StockLocation, vendor_id: @vendor_ids
+    can :create, Spree::StockLocation
+  end
+
+  def apply_stock_movement_permissions
+    can :create, Spree::StockMovement
+    can :manage, Spree::StockMovement, stock_item: { stock_location: { vendor_id: @vendor_ids } }
+  end
+
+  def apply_variant_permissions
+    can :manage, Spree::Variant, vendor_id: @vendor_ids
+    can :create, Spree::Variant
+  end
+
+  def apply_vendor_permissions
+    can [:admin, :update], Spree::Vendor, id: @vendor_ids
+  end
+
+  def apply_vendor_settings_permissions
+    can :manage, :vendor_settings
+  end
+
+  def apply_state_changes_permissions
+    can [:admin, :index], Spree::StateChange do |state_change|
+      (@vendor_ids & state_change.user.vendor_ids).any?
+    end
+  end
+
+  def cannot_display_model(model)
+    Spree.version.to_f < 4.0 ? (cannot :display, model) : (cannot :read, model)
+  end
+end

data/app/models/spree/vendor_image.rb

@@ -0,0 +1,18 @@
+module Spree
+  class VendorImage < Asset
+    include Spree::Image::Configuration::ActiveStorage
+    include Rails.application.routes.url_helpers
+
+    def styles
+      self.class.styles.map do |_, size|
+        width, height = size[/(\d+)x(\d+)/].split('x')
+
+        {
+          url: polymorphic_path(attachment.variant(resize: size), only_path: true),
+          width: width,
+          height: height
+        }
+      end
+    end
+  end
+end