tennpipes-su 3.6.6

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 2f16940e31b9ad4b9b92fd7e6948d28e7f1964ef
+  data.tar.gz: 0f5eacef6b66f385b8b03d6ff8cc2042162b895d
+SHA512:
+  metadata.gz: 37fc640cacbcd194b278da8e2434b2683e7b4548c9822b2bcbeadbbbaf57930300436c00c2b169d8199c9bcd8a7f949deda63764b0168735b81c8ffb43cb5158
+  data.tar.gz: bfe1b70f59e5363062f1bf81acec7f0a818b6e0619349e778490cf4b083be09a1c25f682103b3dd6348e04ed271eaebda140309b38a36e93c23173450b765e19

data/LICENSE.txt

@@ -0,0 +1,20 @@
+Copyright (c) 2011 Tennpipes
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.rdoc

@@ -0,0 +1,70 @@
+= Admin Dashboard and Authentication (tennpipes-su)
+
+=== Overview
+
+Tennpipes has a beautiful Admin management dashboard with these features:
+
+Orm Agnostic:: Data Adapters for Datamapper, Activerecord, Sequel, Mongomapper, Mongoid, Couchrest, Dynamoid
+Template Agnostic:: Erb, Erubis and Haml Renderer
+Authentication:: Support for Account authentication, Account Permission management
+Scaffold:: You can simply create a new "admin interface" by providing a Model
+Access Control:: Supports authentication and role permissions for your application
+
+=== Admin Dashboard Usage
+
+For a complete look at usage of the Admin dashboard functionality, be sure to check out the
+{Tennpipes Admin}[http://www.tennpipesrb.com/guides/tennpipes-su] guide.
+
+Create a new project:
+
+  $ tennpipes-init project demo
+  $ cd demo
+
+Create the admin subapplication:
+
+  demo$ tennpipes-init admin
+
+Next, follow the admin setup steps:
+
+* configure your <tt>config/database.rb</tt> to connect to the correct data.
+* run <tt>tennpipes rake dm:migrate</tt> # or ar:migrate if you use activerecord
+* run <tt>tennpipes rake seed</tt>
+
+Your admin panel now is ready and you can start your server with <tt>tennpipes start</tt> and point your browser to <tt>/admin</tt>!
+
+To create a new "scaffold" you need to provide only a Model name to the command:
+
+  demo$ tennpipes-init model post --skip-migration # edit your post.rb model and add some fields
+  demo$ tennpipes-init rake dm:auto:migrate
+  demo$ tennpipes-init admin_page post
+  demo$ tennpipes start # and go to http://localhost:3000/admin
+
+That's all!!
+
+=== Admin Access Control
+
+Tennpipes Admin use a model Account for manage role, membership and permissions.
+
+For an ecommerce website, usually certain actions require permissions and authentication. This is supported
+by the admin access control features:
+
+  class EcommerceSite < Tennpipes::Application
+    register Tennpipes::Admin::AccessControl
+    enable :store_location
+    set    :login_page, "/login"
+
+    access_control.roles_for :any do |role|
+      role.protect "/customer/orders"
+      role.protect "/cart/checkout"
+    end
+  end
+
+In this example +if+ we visit URLs that start with /+customer+/+orders+ or /+cart/checkout+ we will be redirected
+to our :+login_page+ "/login". Once we are correctly logged in we can visit these pages.
+
+For a more complete look at using the Admin panel functionality and access features, be sure to check out the
+{Tennpipes Admin}[http://www.tennpipesrb.com/guides/tennpipes-su] guide.
+
+== Copyright
+
+Copyright (c) 2011-2013 Tennpipes. See LICENSE for details.

data/Rakefile

@@ -0,0 +1,22 @@
+require File.expand_path(File.dirname(__FILE__) + '/../gem_rake_helper')
+
+namespace :bootstrap do
+  desc 'Compile bootstrap assets'
+  task :compile do
+    puts "Implement"
+  end
+
+  desc 'Compile css'
+  task :css do
+    require 'less'
+    src = File.join(File.dirname(__FILE__), 'lib', 'tennpipes-su', 'bootstrap-less', 'tennpipes-su.less')
+    out = File.join(File.dirname(__FILE__), 'lib', 'tennpipes-su', 'generators', 'templates', 'assets', 'stylesheets', 'bootstrap.css')
+    css = Less::Parser.new(:paths => [File.dirname(src)]).parse(File.read(src)).to_css(:compress => true)
+    File.open(out, 'w') { |file| file.write css }
+    puts "Generated #{out}"
+  end
+
+  desc 'Compile js'
+  task :js do
+  end
+end

data/lib/tennpipes-su.rb

@@ -0,0 +1,35 @@
+require 'active_support/core_ext/array/conversions'
+require 'tennpipes-base'
+require 'tennpipes-helper'
+
+FileSet.glob_require('tennpipes-su/*.rb', __FILE__)
+FileSet.glob_require('tennpipes-su/{helpers,utils}/*.rb', __FILE__)
+
+module Tennpipes
+  ##
+  # Tennpipes::Admin is beautiful Ajax Admin, with these features:
+  #
+  # Orm Agnostic:: Adapters for datamapper, activerecord, mongomapper, couchdb (now only: datamapper and activerecord), ohm
+  # Authentication:: Support for Account authentication, Account Permission management
+  # Scaffold:: You can simply create a new "admin interface" simply providing a Model
+  # Ajax Uploads:: You can upload file, manage them and attach them to any model in a quick and simple way (coming soon)
+  #
+  module Admin
+    class << self
+      def registered(app)
+        # Load Tennpipes::Admin locales
+        I18n.load_path += Dir["#{File.dirname(__FILE__)}/tennpipes-su/locale/**/*.yml"]
+      end
+      alias :included :registered
+    end
+  end
+end
+
+##
+# Now we need to add admin generators to tennpipes-init
+#
+begin
+  require 'tennpipes-init'
+  Tennpipes::Generators.load_paths << Dir[File.dirname(__FILE__) + '/tennpipes-su/generators/{actions,orm,admin_app,admin_page}.rb']
+rescue LoadError
+end

data/lib/tennpipes-su/access_control.rb

@@ -0,0 +1,191 @@
+require 'active_support/core_ext/class/attribute_accessors'
+
+module Tennpipes
+  module Admin
+    class AccessControlError < StandardError
+    end
+    ##
+    # This module enables access control functionality within a Tennpipes application.
+    #
+    module AccessControl
+      class << self
+        ##
+        # Method used by Tennpipes::Application when we register the extension.
+        #
+        def registered(app)
+          app.register Tennpipes::Admin unless app.extensions.include?(Tennpipes::Admin)
+          app.set :session_id, "_tennpipes_#{File.basename(Tennpipes.root)}_#{app.app_name}".to_sym unless app.respond_to?(:session_id)
+          app.set :admin_model, 'Account' unless app.respond_to?(:admin_model)
+          app.helpers Tennpipes::Admin::Helpers::AuthenticationHelpers
+          app.helpers Tennpipes::Admin::Helpers::ViewHelpers
+          app.before { login_required }
+          app.send(:cattr_accessor, :access_control)
+          app.send(:access_control=, Tennpipes::Admin::AccessControl::Base.new)
+        end
+        alias :included :registered
+      end
+
+      ##
+      # This base access control class where roles are defined as are authorizations.
+      #
+      class Base
+        def initialize
+          @roles, @authorizations, @project_modules = [], [], []
+        end
+
+        ##
+        # We map project modules for a given role or roles.
+        #
+        def roles_for(*roles, &block)
+          raise Tennpipes::Admin::AccessControlError, "Role #{role} must be present and must be a symbol!" if roles.any? { |r| !r.kind_of?(Symbol) } || roles.empty?
+          raise Tennpipes::Admin::AccessControlError, "You can't merge :any with other roles" if roles.size > 1 && roles.any? { |r| r == :any }
+
+          @roles += roles
+          @authorizations << Authorization.new(*roles, &block)
+        end
+
+        ##
+        # Return an array of roles.
+        #
+        def roles
+          @roles.uniq.reject { |r| r == :any }
+        end
+
+        ##
+        # Return an array of project_modules.
+        #
+        def project_modules(account)
+          role = account.role.to_sym rescue :any
+          authorizations = @authorizations.find_all { |auth| auth.roles.include?(role) }
+          authorizations.flat_map(&:project_modules).uniq
+        end
+
+        ##
+        # Return true if the given account is allowed to see the given path.
+        #
+        # @example Hiding a disallowed link from a user.
+        #
+        #  # File: config/apps.rb
+        #  # [...]
+        #  Tennpipes.mount('Admin').to('/admin')
+        #
+        #  # File: admin/app.rb
+        #  class Admin < Tennpipes::Application
+        #    # [...]
+        #    register Tennpipes::Admin::AccessControl
+        #    # [...]
+        #
+        #    # Goals:
+        #    # * Admins can manage widgets and accounts.
+        #    # * Workers can only manage widgets.
+        #
+        #    access_control.roles_for :admin do |role|
+        #      role.project_module :accounts, '/accounts'
+        #      role.project_module :widgets, '/widgets'
+        #    end
+        #
+        #    access_control.roles_for :worker do |role|
+        #      role.project_module :widgets, '/widgets'
+        #    end
+        #  end
+        #
+        #  # File: admin/views/layouts/application.haml
+        #  # NOTE The un-mounted path is used ('/accounts' instead of '/admin/accounts')
+        #  - if access_control.allowed?(current_account, '/accounts')
+        #    # Admins see the "Profile" link, but Workers do not
+        #    = link_to 'Profile', url(:accounts, :edit, :id => current_account.id)
+        #
+        def allowed?(account=nil, path=nil)
+          path = "/" if path.blank?
+          role = account.role.to_sym rescue nil
+          authorizations = @authorizations.find_all { |auth| auth.roles.include?(:any) }
+          allowed_paths  = authorizations.map(&:allowed).flatten.uniq
+          denied_paths   = authorizations.map(&:denied).flatten.uniq
+          if account
+            denied_paths.clear
+            # explicit authorizations for the role associated with the given account
+            authorizations = @authorizations.find_all { |auth| auth.roles.include?(role) }
+            allowed_paths += authorizations.map(&:allowed).flatten.uniq
+            # other explicit authorizations
+            authorizations = @authorizations.find_all { |auth| !auth.roles.include?(role) && !auth.roles.include?(:any) }
+            denied_paths  += authorizations.map(&:allowed).flatten.uniq # remove paths explicitly allowed for other roles
+            denied_paths  += authorizations.map(&:denied).flatten.uniq # remove paths explicitly denied to other roles
+          end
+          return true  if allowed_paths.any? { |p| path =~ /^#{p}/ }
+          return false if denied_paths.any?  { |p| path =~ /^#{p}/ }
+          true
+        end
+      end
+
+      ###
+      # Project Authorization Class.
+      #
+      class Authorization
+        attr_reader :allowed, :denied, :project_modules, :roles
+
+        def initialize(*roles, &block)
+          @roles           = roles
+          @allowed         = []
+          @denied          = []
+          @project_modules = []
+          yield self
+        end
+
+        ##
+        # Allow a specified path.
+        #
+        def allow(path)
+          @allowed << path unless @allowed.include?(path)
+        end
+
+        ##
+        # Protect access from.
+        #
+        def protect(path)
+          @denied << path unless @denied.include?(path)
+        end
+
+        ##
+        # Create a project module.
+        #
+        def project_module(name, path, options={})
+          allow(path)
+          @project_modules << ProjectModule.new(name, path, options)
+        end
+      end
+
+      ##
+      # Project Module class.
+      #
+      class ProjectModule
+        attr_reader :name, :options
+
+        def initialize(name, path, options={})
+          @name, @path, @options = name, path, options
+        end
+
+        ##
+        # Returns the name of the project module humanize them for you.
+        #
+        def human_name
+           @name.to_s.humanize
+        end
+
+        ##
+        # Return the path of the project module. If a prefix given will be pre pended.
+        #
+        # @example
+        #   # => /accounts/new
+        #   project_module.path
+        #   # => /admin/accounts
+        #   project_module.path("/admin")
+        #
+        def path(prefix=nil)
+          path = prefix ? File.join(prefix, @path) : @path
+          path = File.join(ENV['RACK_BASE_URI'].to_s, path) if ENV['RACK_BASE_URI']
+          path
+        end
+      end
+    end
+  end
+end

data/lib/tennpipes-su/bootstrap-less/alerts.less

@@ -0,0 +1,67 @@
+//
+// Alerts
+// --------------------------------------------------
+
+
+// Base styles
+// -------------------------
+
+.alert {
+  padding: @alert-padding;
+  margin-bottom: @line-height-computed;
+  border: 1px solid transparent;
+  border-radius: @alert-border-radius;
+
+  // Headings for larger alerts
+  h4 {
+    margin-top: 0;
+    // Specified for the h4 to prevent conflicts of changing @headings-color
+    color: inherit;
+  }
+  // Provide class for links that match alerts
+  .alert-link {
+    font-weight: @alert-link-font-weight;
+  }
+
+  // Improve alignment and spacing of inner content
+  > p,
+  > ul {
+    margin-bottom: 0;
+  }
+  > p + p {
+    margin-top: 5px;
+  }
+}
+
+// Dismissable alerts
+//
+// Expand the right padding and account for the close button's positioning.
+
+.alert-dismissable {
+ padding-right: (@alert-padding + 20);
+
+  // Adjust close link position
+  .close {
+    position: relative;
+    top: -2px;
+    right: -21px;
+    color: inherit;
+  }
+}
+
+// Alternate styles
+//
+// Generate contextual modifier classes for colorizing the alert.
+
+.alert-success {
+  .alert-variant(@alert-success-bg; @alert-success-border; @alert-success-text);
+}
+.alert-info {
+  .alert-variant(@alert-info-bg; @alert-info-border; @alert-info-text);
+}
+.alert-warning {
+  .alert-variant(@alert-warning-bg; @alert-warning-border; @alert-warning-text);
+}
+.alert-danger {
+  .alert-variant(@alert-danger-bg; @alert-danger-border; @alert-danger-text);
+}

data/lib/tennpipes-su/bootstrap-less/badges.less

@@ -0,0 +1,55 @@
+//
+// Badges
+// --------------------------------------------------
+
+
+// Base classes
+.badge {
+  display: inline-block;
+  min-width: 10px;
+  padding: 3px 7px;
+  font-size: @font-size-small;
+  font-weight: @badge-font-weight;
+  color: @badge-color;
+  line-height: @badge-line-height;
+  vertical-align: baseline;
+  white-space: nowrap;
+  text-align: center;
+  background-color: @badge-bg;
+  border-radius: @badge-border-radius;
+
+  // Empty badges collapse automatically (not available in IE8)
+  &:empty {
+    display: none;
+  }
+
+  // Quick fix for badges in buttons
+  .btn & {
+    position: relative;
+    top: -1px;
+  }
+  .btn-xs & {
+    top: 0;
+    padding: 1px 5px;
+  }
+}
+
+// Hover state, but only for links
+a.badge {
+  &:hover,
+  &:focus {
+    color: @badge-link-hover-color;
+    text-decoration: none;
+    cursor: pointer;
+  }
+}
+
+// Account for counters in navs
+a.list-group-item.active > .badge,
+.nav-pills > .active > a > .badge {
+  color: @badge-active-color;
+  background-color: @badge-active-bg;
+}
+.nav-pills > li > a > .badge {
+  margin-left: 3px;
+}