tb_core 0.9.17

data/app/controllers/spud/application_controller.rb

@@ -0,0 +1,89 @@
+class Spud::ApplicationController < ActionController::Base
+	unloadable
+	protect_from_forgery
+	helper_method :current_user_session, :current_user
+	around_filter :set_time_zone
+
+  if Spud::Core.multisite_mode_enabled
+    before_filter :multisite_caching
+  end
+  include Spud::ApplicationHelper
+  before_filter :to
+
+
+  private
+
+    def to
+      ActionMailer::Base.default_url_options = {:host => request.host_with_port}
+    end
+
+    def current_user_session
+      return @current_user_session if defined?(@current_user_session)
+      @current_user_session = SpudUserSession.find
+    end
+
+    def current_user
+      return @current_user if defined?(@current_user)
+      @current_user = current_user_session && current_user_session.spud_user
+    end
+
+    def current_user_permissions
+      return @current_user_permissions if defined?(@current_user_permissions)
+      @current_user_permissions = current_user.spud_admin_permissions.where(:access => true).all
+    end
+
+    def require_user
+      unless current_user
+        store_location
+        flash[:notice] = "You must be logged in to access this page"
+        redirect_to new_spud_user_session_url
+        return false
+      end
+      return true
+    end
+
+    def require_no_user
+      if current_user
+        store_location
+        flash[:notice] = "You must be logged out to access this page"
+        redirect_to root_url
+        return false
+      end
+    end
+
+    def store_location
+      session[:return_to] = request.url
+    end
+
+    def redirect_back_or_default(default)
+      redirect_to(back_or_default(default))
+    end
+
+    def back_or_default(default)
+      result = !session[:return_to].blank? ? session[:return_to] : default
+      session[:return_to] = nil
+      return result
+    end
+
+    def set_time_zone
+      old_time_zone = Time.zone
+      Time.zone = current_user.time_zone if current_user and current_user.time_zone.blank? == false
+      yield
+    ensure
+      Time.zone = old_time_zone
+    end
+
+    def multisite_caching
+      if Spud::Core.multisite_mode_enabled
+        @old_cache_directory = Rails.application.config.action_controller.page_cache_directory
+        if(@old_cache_directory.blank?)
+          @old_cache_directory = Rails.application.config.action_controller.page_cache_directory = File.join(Rails.root,'public')
+        end
+        site_config = Spud::Core.site_config_for_host request.host_with_port
+
+        self.class.page_cache_directory = File.join(@old_cache_directory.to_s,site_config[:short_name].to_s.downcase)
+        logger.debug "Cache directory set to: #{Rails.application.config.action_controller.page_cache_directory}"
+      end
+    end
+
+end

data/app/controllers/spud/password_resets_controller.rb

@@ -0,0 +1,50 @@
+class Spud::PasswordResetsController < Spud::ApplicationController
+	before_filter :require_no_user, :only => [:new, :create]
+	before_filter :load_user_using_perishable_token, :only => [:edit, :update]
+
+	layout 'spud/login/application'
+
+	def new
+		render
+	end
+
+	def create
+		@user = SpudUser.find_by_email(params[:email])
+		if @user
+			Spud::CoreMailer.forgot_password_notification(@user).deliver
+			flash[:notice] = "Instructions to reset your password have been emailed to you. " +
+			"Please check your email."
+			redirect_to new_spud_user_session_url
+		else
+			flash[:notice] = "No user was found with that email address"
+			render :action => :new
+		end
+	end
+
+	def edit
+		render
+	end
+
+	def update
+		@user.password = params[:spud_user][:password]
+		@user.password_confirmation = params[:spud_user][:password_confirmation]
+		if @user.save
+			flash[:notice] = "Password successfully updated"
+			redirect_to new_spud_user_session_url
+		else
+			render :action => :edit
+		end
+	end
+
+private
+	def load_user_using_perishable_token
+		@user = SpudUser.find_using_perishable_token(params[:id])
+		unless @user
+			flash[:notice] = "We're sorry, but we could not locate your account. " +
+			"If you are having issues try copying and pasting the URL " +
+			"from your email into your browser or restarting the " +
+			"reset password process."
+			redirect_to new_spud_user_session_url
+		end
+	end
+end

data/app/controllers/spud/setup_controller.rb

@@ -0,0 +1,21 @@
+class Spud::SetupController < Spud::ApplicationController
+	layout 'spud/setup'
+	def index
+		@page_thumbnail = "spud/admin/users_thumb.png"
+		@page_name = "First Time Setup"
+		if SpudUser.count != 0
+				flash[:error] = "Access Denied! This wizard may only be executed when the database is empty."
+				redirect_to new_spud_user_session_url and return
+		end
+
+		if request.post?
+			@user = SpudUser.new(:login => params[:login],:email => params[:email],:password => params[:password],:password_confirmation => params[:password_confirmation])
+			@user.super_admin = true
+			if @user.save
+				redirect_back_or_default(new_spud_user_session_url) and return
+			end
+
+			flash[:error] = "Error creating administrative account!"
+		end
+	end
+end

data/app/controllers/spud/sitemaps_controller.rb

@@ -0,0 +1,8 @@
+class Spud::SitemapsController < Spud::ApplicationController
+	respond_to :xml
+	caches_page :show,:expires_in => 1.day
+	def show
+		@sitemap_urls = Spud::Core.sitemap_urls
+		respond_with @sitemap_urls
+	end
+end

data/app/controllers/spud/user_sessions_controller.rb

@@ -0,0 +1,33 @@
+class Spud::UserSessionsController < Spud::ApplicationController
+  before_filter :require_no_user, :only => [:new, :create]
+  before_filter :require_user, :only => :destroy
+  layout 'spud/login/application'
+  def new
+    if SpudUser.all.count == 0
+      logger.debug "NO USERS!"
+      redirect_to spud_setup_url() and return
+    end
+
+    @user_session = SpudUserSession.new
+  end
+  
+  def create
+    @user_session = SpudUserSession.new(params[:spud_user_session])
+    if @user_session.save
+      flash[:notice] = "Login successful!"
+      redirect_back_or_default spud_admin_root_path
+    else
+      render :action => :new
+    end
+  end
+  
+  def destroy
+    current_user_session.destroy
+    flash[:notice] = "Logout successful!"
+    if !request.referer.blank?
+      session[:return_to] = request.referer
+    end
+    redirect_back_or_default new_spud_user_session_url
+    
+  end
+end

data/app/controllers/spud/users_controller.rb

@@ -0,0 +1,45 @@
+class Spud::UsersController < Spud::ApplicationController
+	before_filter :require_user
+	layout 'spud/admin/detail'
+
+	def settings
+		if current_user.has_admin_rights?
+			add_breadcrumb "Dashboard", :spud_admin_root_path
+		end
+		add_breadcrumb "Settings", :spud_settings_path
+		@page_thumbnail = "spud/admin/users_thumb.png"
+		@page_name = "Settings"	
+	end
+
+	def update
+		
+		add_breadcrumb "Settings", :spud_settings_path
+		@page_thumbnail = "spud/admin/users_thumb.png"
+		@page_name = "Settings"	
+		if @current_user.update_attributes(params[:spud_user].slice :login,:first_name,:last_name,:email,:password,:password_confirmation,:time_zone)
+			flash[:notice] = "User settings saved successfully."
+			redirect_to spud_admin_root_url()
+		else
+			flash[:error] = "There was an error while saving the user."
+			render :action => "settings"
+		end
+	end
+
+
+	def save_setting
+		if params[:key].blank?
+			render :status => 500,:text => nil and return
+		end
+
+		setting = @current_user.spud_user_settings.where(:key => params[:key]).first
+		if setting.blank?
+			setting = @current_user.spud_user_settings.new(:key => params[:key])
+		end
+		setting.value = params[:value]
+		if setting.save
+			render :status => 200,:text => nil and return
+		else
+			render :status => 500,:text => nil and return
+		end
+	end
+end

data/app/helpers/spud/admin/application_helper.rb

@@ -0,0 +1,54 @@
+module Spud::Admin::ApplicationHelper
+
+  def timestamp(timedate=nil)
+    return "Never" if timedate.blank?
+    return Time.now() - timedate > 604800 ? timedate.strftime("%B %d") + ' at ' + timedate.strftime("%I:%M %p") : time_ago_in_words(timedate) + ' ago'
+  end
+
+  def current_admin_site_name
+    site_name = Spud::Core.site_name
+    if Spud::Core.multisite_mode_enabled && !session[:admin_site].blank?
+      config = Spud::Core.multisite_config.select{|p| p[:site_id].to_i == session[:admin_site].to_i}
+      site_name = config[0][:site_name] if !config.blank?
+    end
+    return site_name
+  end
+
+  def header_style
+    style_str = ''
+    if Spud::Core.multisite_mode_enabled
+      config = Spud::Core.multisite_config.select{|p| p[:site_id].to_i == session[:admin_site].to_i}
+      style_str = config[0][:header_style] if !config.blank? && config[0].has_key?(:header_style)
+    end
+    return style_str
+  end
+
+  def link_to_remove_fields(name, f)
+    f.hidden_field(:_destroy) + link_to_function(name, "remove_fields(this)",:class => "btn btn-danger")
+  end
+
+  def link_to_add_fields(name, f, association)
+    new_object = f.object.class.reflect_on_association(association).klass.new
+    fields = f.fields_for(association, new_object, :child_index => "new_#{association}") do |builder|
+      render(association.to_s.singularize + "_fields", :f => builder)
+    end
+    link_to_function(name, "add_fields(this, \"#{association}\", \"#{escape_javascript(fields)}\")",:class =>"btn")
+  end
+
+  def error_messages_for(object)
+    content = ""
+    if object.errors.any?
+      content += "<div class='spud_admin_form_error_list'>"
+      content += "<h4>#{pluralize(object.errors.count, "error")} prohibited you from saving:</h4>"
+      content +="<ul>"
+      object.errors.full_messages.each do |msg|
+        content+="<li>#{msg}</li>"
+      end
+      content +="</ul></div>"
+    end
+    return content.html_safe
+
+  end
+
+
+end

data/app/helpers/spud/application_helper.rb

@@ -0,0 +1,22 @@
+module Spud::ApplicationHelper
+  def current_site_name
+    return Spud::Core.site_name if !Spud::Core.multisite_mode_enabled
+    config = Spud::Core.site_config_for_host(request.host_with_port)
+    return Spud::Core.site_name if config.blank?
+
+    return config[:site_name]
+  end
+
+  def current_site_id
+    config = Spud::Core.site_config_for_host(request.host_with_port)
+    return config[:site_id] unless config.blank?
+  end
+
+  def sortable(column, title = nil)
+    title ||= column.titleize
+    css_class = column == sort_column ? "current #{sort_direction}" : nil
+    direction = column == sort_column && sort_direction == "asc" ? "desc" : "asc"
+    link_to title, {:sort => column, :direction => direction}, {:class => css_class}
+  end
+
+end

data/app/helpers/spud/password_resets_helper.rb

@@ -0,0 +1,2 @@
+module Spud::PasswordResetsHelper
+end

data/app/mailers/spud/core_mailer.rb

@@ -0,0 +1,12 @@
+class Spud::CoreMailer < ActionMailer::Base
+  # default_url_options[:host] = request.host_with_port
+
+  def forgot_password_notification(user)
+  	@user = user
+  	@url = edit_spud_password_reset_url(:id => user.perishable_token)
+  	# @url = "/spud/password_resets/#{user.perishable_token}/edit"
+  	  	mail(:from =>Spud::Core.from_address,:to => user.email, :subject => "Forgot Password Request from #{Spud::Core.config.site_name}")
+
+  end
+
+end

data/app/models/concerns/spud_authentication.rb

@@ -0,0 +1,10 @@
+module Concerns
+  module SpudAuthentication
+    extend ActiveSupport::Concern
+    included do
+      acts_as_authentic do |c|
+        # c.my_config_option = my_value # for available options see documentation in: Authlogic::ActsAsAuthentic
+      end # block optional
+    end
+  end
+end

data/app/models/spud_admin_permission.rb

@@ -0,0 +1,5 @@
+class SpudAdminPermission < ActiveRecord::Base
+	belongs_to :spud_user,:foreign_key => :user_id
+	attr_accessible :name,:access, :as => [:default, :admin]
+
+end

data/app/models/spud_user.rb

@@ -0,0 +1,26 @@
+class SpudUser < ActiveRecord::Base
+	include Concerns::SpudAuthentication
+
+	has_many :spud_admin_permissions,:foreign_key => :user_id
+	has_many :spud_user_settings
+	accepts_nested_attributes_for :spud_admin_permissions, :allow_destroy => true
+
+	attr_accessible :login,:email,:first_name,:last_name,:password,:password_confirmation,:password_salt,:last_login_at,:last_request_at,:last_login_ip,:failed_login_count,:current_login_at,:login_count,:persistence_token,:perishable_token,:single_access_token,:crypted_password, :current_login_ip, :created_at, :updated_at,:spud_admin_permissions_attributes,:time_zone, :as => [:default, :admin]
+	attr_accessible :super_admin, :id, :as => :admin
+
+	def has_admin_rights?
+		return self.super_admin || self.spud_admin_permissions.count > 0
+	end
+
+	def full_name
+		if first_name.blank? && last_name.blank?
+			return self.login
+		end
+		if self.first_name.blank?
+			return self.last_name
+		elsif self.last_name.blank?
+			return self.first_name
+		end
+		return "#{self.first_name} #{self.last_name}"
+	end
+end

data/app/models/spud_user_session.rb

@@ -0,0 +1,3 @@
+class SpudUserSession < Authlogic::Session::Base
+  generalize_credentials_error_messages true
+end

data/app/models/spud_user_setting.rb

@@ -0,0 +1,6 @@
+class SpudUserSetting < ActiveRecord::Base
+	belongs_to :spud_user
+
+	validates :key,:presence=>true
+	validates_uniqueness_of :key,:scope => :spud_user_id
+end

data/app/views/layouts/spud/admin/application.html.erb

@@ -0,0 +1,72 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Spud Admin</title>
+  <%= stylesheet_link_tag *Spud::Core.config.admin_stylesheets %>
+  <%= javascript_include_tag *Spud::Core.config.admin_javascripts %>
+  <%= csrf_meta_tags %>
+  <%=yield :head%>
+</head>
+<body>
+<div id="header" style="<%=header_style%>">
+	<%=link_to spud_admin_root_url do%>
+    <h1>Spud Admin</h1>
+  <%end%>
+
+	<div id="user_meta">
+		<span class="greeting">Hello <%=@current_user.full_name%></span>&nbsp;|&nbsp;<%=link_to "Settings", spud_settings_path%>&nbsp;|&nbsp;<%=link_to "Logout",spud_user_session_url,:method => :delete%></a>
+	</div>
+  <%if Spud::Core.multisite_mode_enabled == true%>
+    <div id="multisite_switcher" class="right_floated">
+      <%=form_tag spud_admin_switch_url do%>
+        <%=select_tag :multisite_select,options_for_select([[Spud::Core.site_name,nil]] + Spud::Core.multisite_config.collect{|c| [c[:site_name],c[:site_id]]},session[:admin_site])%>
+      <%end%>
+    </div>
+  <%end%>
+</div>
+<div id="breadcrumbs">
+<%= render_breadcrumbs :separator => ' / ' %>
+</div>
+<div id="content">
+<% if flash[:notice] %>
+  <div class="alert alert-success">
+    <a class="close" data-dismiss="alert">×</a>
+    <%= flash[:notice] %>
+  </div>
+<% end %>
+<% if flash[:warning] %>
+
+  <div class="alert alert-warning">
+    <a class="close" data-dismiss="alert">×</a>
+    <%= flash[:warning] %>
+  </div>
+<% end %>
+<% if flash[:error]%>
+
+<div class="alert alert-error">
+    <a class="close" data-dismiss="alert">×</a>
+	  <%= flash[:error] %>
+</div>
+<%-end%>
+	<%= content_for?(:content) ? yield(:content) : yield %>
+</div>
+
+
+
+
+<div id="modal_window" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">
+    <div class="modal-header">
+    <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button>
+    <h3 class="modal-title"></h3>
+  </div>
+  <div class="modal-body">
+
+  </div>
+  <div class="modal-footer modal-footer-default">
+    <button class="btn" data-dismiss="modal" aria-hidden="true">Close</button>
+    <button class="btn btn-primary form-submit">Save changes</button>
+  </div>
+</div>
+
+</body>
+</html>

data/app/views/layouts/spud/admin/detail.html.erb

@@ -0,0 +1,31 @@
+<%=content_for :content do %>
+	<div id="detail_wrapper">
+	<span class="data_controls">
+			<%=yield :data_controls%>
+		</span>
+		<h2>
+			<%if @page_thumbnail%>
+				<span class="thumb_wrapper"><%=image_tag(@page_thumbnail)%></span>
+			<%end%>
+			<%=@page_name%>
+		</h2>
+
+		<div id="details">
+			<%if content_for?(:detail_nav)%>
+				<div id="detail_nav_wrapper">
+					<div id="detail_nav">
+					<%= yield(:detail_nav)%>
+					</div>
+				</div>
+				<div id="detail_main_wrapper">
+					<div id="detail_main">
+					<%= content_for?(:detail) ? yield(:detail) : yield %></div>
+				</div>
+				<br style="clear:both;"/>
+			<%else%>
+				<%= content_for?(:detail) ? yield(:detail) : yield %>
+			<%end%>
+		</div>
+	</div>
+<%end%>
+<%= render :template => 'layouts/spud/admin/application' %>

data/app/views/layouts/spud/login/application.html.erb

@@ -0,0 +1,17 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Spud Admin</title>
+  <%= stylesheet_link_tag("spud/login/application") %>
+
+  <%= csrf_meta_tags %>
+  <%=content_for :head%>
+</head>
+<body>
+
+<div id="content_wrapper">
+	<div id="content"><%=yield%></div>
+</div>
+
+</body>
+</html>

data/app/views/layouts/spud/setup.html.erb

@@ -0,0 +1,47 @@
+<!DOCTYPE html>
+<html>
+<head>
+  <title>Spud Admin</title>
+  <%= stylesheet_link_tag    "spud/admin/application" %>
+  <%= javascript_include_tag "spud/admin/application" %>
+  <%= csrf_meta_tags %>
+  <%=content_for :head%>
+</head>
+<body>
+<div id="header">
+	<h1>Spud First Time Setup</h1>
+	
+</div>
+<div id="breadcrumbs">
+<%= render_breadcrumbs :separator => ' / ' %>
+</div>
+<div id="content">
+<div id="detail_wrapper">
+	<h2>
+			<%if @page_thumbnail%>
+				<span class="thumb_wrapper"><%=image_tag(@page_thumbnail)%></span>
+			<%end%>
+			<%=@page_name%>
+		</h2>
+		
+		<div id="details">
+			<%if content_for?(:detail_nav)%>
+				<div id="detail_nav_wrapper">
+					<div id="detail_nav">
+					<%= yield(:detail_nav)%></div>
+					
+				</div>
+				<div id="detail_main_wrapper">
+					<div id="detail_main">
+					<%= content_for?(:detail) ? yield(:detail) : yield %></div>
+				</div>
+				<br style="clear:both;"/>
+			<%else%>
+				<%= content_for?(:detail) ? yield(:detail) : yield %>
+			<%end%>
+		</div>
+		</div>
+</div>
+
+</body>
+</html>

data/app/views/spud/admin/dashboard/index.html.erb

@@ -0,0 +1,18 @@
+
+<div class="sortable">
+<%@admin_applications.each do |admin_application|%>
+
+	<div class="admin_application" id="application_name_<%=admin_application[:name]%>"><a href="<%=admin_application[:url]%>">
+		<div class="image_wrapper"><%=image_tag(admin_application[:thumbnail])%></div>
+		<span class="application_name"><%=admin_application[:name]%></span>
+		</a>
+	</div>
+
+<%end%>
+</div>
+<div id="dashboard-editmode">
+	<a href="#" class="btn btn-primary" id="dashboard-editsave">Done Editing</a>&nbsp;<a id="dashboard-editcancel" href="#" class="btn">Cancel</a>
+</div>
+<script type="text/javascript">
+$(document).ready(Spud.Admin.Dashboard.init);
+</script>

data/app/views/spud/admin/users/_edit.html.erb

@@ -0,0 +1,14 @@
+
+
+  <p> Fill in all information pertaining to the current user you wish to modify. Fields marked with * are required and must be filled out.</p>
+
+  <%=form_for @user,:url => spud_admin_user_path(:id => @user.id),:html=>{:class=>"form-horizontal"} do |f|%>
+    <%=render :partial => "form",:locals => {:f => f}%>
+
+    <div class="form-actions form-actions-no-modal">
+      <%=f.submit "Save User", :class=>"btn btn-primary"%> or <%=link_to "cancel",request.referer,:class => "btn"%>
+    </div>
+
+  <%end%>
+
+