tenon 1.1.8 → 2.0.0

data/app/controllers/tenon/users_controller.rb

@@ -1,64 +0,0 @@
-module Tenon
-  class UsersController < Tenon::ResourcesController
-    before_filter :get_roles, only: [:new, :edit, :update, :create]
-
-    def index
-      respond_to do |format|
-        format.html
-        format.json do
-          if current_user.is_super_admin?
-            @users = Tenon::User.all
-          elsif current_user.is_admin?
-            @users = Tenon::User.exclude_super_admins
-          end
-
-          @users = @users.where(search_args) unless params[:q].blank?
-          @users = @users.paginate(per_page: 20, page: params[:page])
-          @users = Tenon::PaginatingDecorator.new(@users)
-        end
-      end
-    end
-
-    def update
-      if params[:user][:password].blank?
-        params[:user].delete('password')
-        params[:user].delete('password_confirmation')
-      end
-      super
-    end
-
-    private
-
-    def get_roles
-      @roles = Tenon::Role.all
-    end
-
-    def search_args
-      ['email ILIKE ?', "%#{params[:q]}%"]
-    end
-
-    def resource_params
-      if current_user.is_admin? || current_user.is_super_admin?
-        cleaned_role_ids(params.require(:user).permit!)
-      else
-        untrusted_params
-      end
-    end
-
-    def cleaned_role_ids(rp)
-      sa_role = Tenon::Role.find_by_title('Super Admin')
-      if sa_role && rp[:role_ids] && !current_user.is_super_admin?
-        rp[:role_ids].delete(sa_role.id.to_s)
-      end
-      rp
-    end
-
-    def untrusted_params
-      params.require(:user).permit(
-        :email,
-        :password,
-        :password_confirmation
-      )
-    end
-  end
-end

data/app/decorators/tenon/comment_decorator.rb

@@ -1,22 +0,0 @@
-module Tenon
-  class CommentDecorator < ApplicationDecorator
-    def email
-      @object.author_email
-    end
-
-    def author_url
-      url = @object.author_url
-      if url.blank? || url.match('http://') || url.match('https://')
-        url
-      else
-        'http://' + url
-      end
-    end
-
-    def error_message
-      errors = []
-      @object.errors.full_messages.each { |error| errors << "<li>#{error}</li>" }
-      "<div class='error-explanation' id='error-explanation'>#{I18n.t('tenon.common.there_were_problems_with_the_following_fields')}:<ul>#{errors.join('')}<ul></div>"
-    end
-  end
-end

data/app/decorators/tenon/contact_decorator.rb

@@ -1,13 +0,0 @@
-module Tenon
-  class ContactDecorator < ApplicationDecorator
-    def sent_date
-      "#{@object.created_at.strftime('%B %e, %Y')} #{I18n.t('tenon.common.at')} #{@object.created_at.strftime('%l:%M %p')}"
-    end
-
-    def error_message
-      errors = []
-      @object.errors.full_messages.each { |error| errors << "<li>#{error}</li>" }
-      "<div class='error-explanation' id='error-explanation'>#{I18n.t('tenon.common.there_were_problems_with_the_following_fields')}:<ul>#{errors.join('')}<ul></div>"
-    end
-  end
-end

data/app/decorators/tenon/event_decorator.rb

@@ -1,11 +0,0 @@
-module Tenon
-  class EventDecorator < ApplicationDecorator
-    def display_date
-      if @object.starts_at.to_date == @object.ends_at.to_date
-        "#{@object.starts_at.strftime('%B %d, %Y')} #{I18n.t('tenon.events.from')} #{@object.starts_at.strftime('%I:%M%p')} #{I18n.t('tenon.events.until')} #{@object.ends_at.strftime('%I:%M%p')}"
-      else
-        "#{@object.starts_at.strftime("%B %d, %Y at %I:%M%p")} #{I18n.t('tenon.events.until')} #{@object.ends_at.strftime("%B %d, %Y at %I:%M%p")}"
-      end
-    end
-  end
-end

data/app/decorators/tenon/gallery_decorator.rb

@@ -1,4 +0,0 @@
-module Tenon
-  class GalleryDecorator < ApplicationDecorator
-  end
-end

data/app/decorators/tenon/page_decorator.rb

@@ -1,11 +0,0 @@
-module Tenon
-  class PageDecorator < ApplicationDecorator
-    def option_title
-      ot = ''
-      ot << '&nbsp;' * ((@object.depth || 0) * 3)
-      ot << '- ' if (@object.depth || 0) > 0
-      ot << @object.title
-      ot.html_safe
-    end
-  end
-end

data/app/decorators/tenon/post_category_decorator.rb

@@ -1,4 +0,0 @@
-module Tenon
-  class PostCategoryDecorator < ApplicationDecorator
-  end
-end

data/app/decorators/tenon/post_decorator.rb

@@ -1,4 +0,0 @@
-module Tenon
-  class PostDecorator < ApplicationDecorator
-  end
-end

data/app/decorators/tenon/redirect_decorator.rb

@@ -1,2 +0,0 @@
-class Tenon::RedirectDecorator < Tenon::ApplicationDecorator
-end

data/app/decorators/tenon/tenon_callout_decorator.rb

@@ -1,4 +0,0 @@
-module Tenon
-  class TenonCalloutDecorator < ApplicationDecorator
-  end
-end

data/app/decorators/tenon/user_decorator.rb

@@ -1,4 +0,0 @@
-module Tenon
-  class UserDecorator < ApplicationDecorator
-  end
-end

data/app/mailers/tenon/comment_mailer.rb

@@ -1,16 +0,0 @@
-module Tenon
-  class CommentMailer < ActionMailer::Base
-    # TODO: Find a better way to set the host
-    # default_url_options[:host] = MySettings.site_url ? MySettings.site_url.gsub('http://', '') : 'localhost:3000'
-
-    def comment_notification(email, comment)
-      @post = comment.commentable
-      @comment = comment
-      mail(
-        to: email,
-        subject: "#{Tenon::MySettings.site_name} - #{I18n.t('tenon.comment_mailer.new_comment')}: #{@post.title}",
-        from: Tenon::MySettings.from_email
-      )
-    end
-  end
-end

data/app/mailers/tenon/contact_mailer.rb

@@ -1,15 +0,0 @@
-module Tenon
-  class ContactMailer < ActionMailer::Base
-    # TODO: Find a better way to set the host
-    # default_url_options[:host] = MySettings.site_url ? MySettings.site_url.gsub('http://', '') : 'localhost:3000'
-
-    def contact_notification(contact)
-      @contact = contact
-      mail(
-        to: Tenon::MySettings.contact_email,
-        subject: "#{Tenon::MySettings.site_name} - #{I18n.t('tenon.contact_mailer.new_contact_request')}",
-        from: @contact.email
-      )
-    end
-  end
-end

data/app/models/ability.rb

@@ -1,32 +0,0 @@
-class Ability
-  include CanCan::Ability
-
-  def initialize(u)
-    if u.is_super_admin?
-      can :manage, :all
-      can :publish, :all
-      can :assign_roles, Tenon::User
-    elsif u.is_admin?
-      can :manage, :all
-      can :publish, :all
-      can :assign_roles, Tenon::User
-      can(:destroy, Tenon::Page) { |page| page.key.blank? }
-
-      cannot :update, Tenon::User
-      can([:update], Tenon::User) do |user|
-        !user.is_super_admin?
-      end
-      can :create, Tenon::User
-    elsif u.is_contributor?
-      can([:update, :edit, :publish], Tenon::User) { |user| user == u }
-      can :read, :all
-      can :create, Tenon::Page
-      can([:update, :destroy, :edit], Tenon::Page) do |item|
-        u.id == item.creator_id
-      end
-      can(:destroy, Tenon::Page) { |page| page.key.blank? }
-    else
-      can :read, :all
-    end
-  end
-end

data/app/models/tenon/comment.rb

@@ -1,47 +0,0 @@
-module Tenon
-  class Comment < ActiveRecord::Base
-    include Humanizer
-    require_human_on :create, unless: :bypass_humanizer
-
-    validates_presence_of :commentable, :author, :author_email, :content
-    validates_format_of :author_email, with: /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\Z/i
-
-    belongs_to :commentable, polymorphic: true
-
-    attr_accessor :subscribe, :controller, :bypass_humanizer
-
-    default_scope { order('created_at DESC') }
-    scope :approved, -> { where(approved: true) }
-    scope :unapproved, -> { where(approved: false) }
-
-    # Comment/uncomment this to turn off/on moderation
-    # before_save :approve
-
-    after_save :handle_subscribers
-
-    def self.create_comment(object, session)
-      session.blank? ? Comment.new(commentable_type: object.class.to_s, commentable_id: object.id) : Comment.new(session)
-    end
-
-    def toggle_approved!
-      self.approved = self.approved? ? false : true
-      save
-    end
-
-    def approve
-      self.approved = true
-    end
-
-    private
-
-    def handle_subscribers
-      # create subscriber
-      CommentSubscriber.create(commentable: commentable, email: author_email) if subscribe.to_i == 1
-
-      # notify subscribers
-      if approved? && commentable.respond_to?(:subscribers)
-        commentable.subscribers.each { |subscriber| CommentMailer.comment_notification(subscriber.email, self).deliver }
-      end
-    end
-  end
-end

data/app/models/tenon/comment_subscriber.rb

@@ -1,7 +0,0 @@
-module Tenon
-  class CommentSubscriber < ActiveRecord::Base
-    validates_presence_of :email, :commentable
-    validates_uniqueness_of :email, scope: [:commentable_id, :commentable_type]
-    belongs_to :commentable, polymorphic: true
-  end
-end

data/app/models/tenon/contact.rb

@@ -1,46 +0,0 @@
-module Tenon
-  class Contact < ActiveRecord::Base
-    include Humanizer
-    require_human_on :create, unless: :bypass_humanizer
-
-    attr_accessor :subscribe, :controller, :bypass_humanizer, :page_id, :address
-    # attr_accessor :address is for the honeypot
-
-    # Validations
-    validates_presence_of :name, :email, :content
-    validates_format_of :email, with: /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\Z/i
-
-    # Scopes
-    default_scope { order('created_at DESC') }
-    scope :read, -> { where(read: true) }
-    scope :unread, -> { where(read: false) }
-    scope :replied, -> { where(replied: true) }
-    scope :unreplied, -> { where(replied: false) }
-
-    def toggle_replied!
-      self.replied = self.replied? ? false : true
-      save
-    end
-
-    def toggle_read!
-      self.read = self.read? ? false : true
-      save
-    end
-
-    def pooh_in_the_honey?
-      address.present?
-    end
-
-    # To send contact requests from a controller:
-    # ContactMailer.contact_notification(@contact).deliver
-
-    # To check the honeypot from a controller:
-    # if @contact.pooh_in_the_honey?
-    #   return false positive
-    # elsif @contact.save
-    #   return positive
-    # else
-    #   return errors
-    # end
-  end
-end

data/app/models/tenon/event.rb

@@ -1,45 +0,0 @@
-module Tenon
-  class Event < ActiveRecord::Base
-    # Scopes, attachments, etc.
-    scope :published, -> { where('publish_at <= ?', Time.now) }
-    scope :upcoming, -> { where(['ends_at > ?', Time.now]).order(:starts_at) }
-    scope :past, -> { where(['ends_at < ?', Time.now]).order(:starts_at) }
-    default_scope -> { order 'starts_at DESC' }
-    tenon_content :description, i18n: true
-    has_history includes: [:description_tenon_content_rows]
-
-    # Validations
-    validates_presence_of :title, :starts_at, :ends_at
-
-    def self.on(year, month = nil, day = nil)
-      fail ArgumentError, 'must pass a month to pass a day' if day && !month
-      time = Time.mktime(year, month, day)
-      # delta = day ? 1.day : month ? 1.month : year ? 1.year : fail
-      if day
-        delta = 1.day
-      elsif month
-        delta = 1.month
-      elsif year
-        delta = 1.year
-      else
-        fail
-      end
-
-      limit = time + delta
-
-      where('starts_at > ? AND starts_at < ?', time, limit).order('starts_at')
-    end
-
-    def to_param
-      "#{id}-#{title.parameterize}"
-    end
-
-    def next
-      Event.published.where('starts_at > ?', starts_at).first
-    end
-
-    def previous
-      Event.published.where('starts_at < ?', starts_at).last
-    end
-  end
-end

data/app/models/tenon/gallery.rb

@@ -1,15 +0,0 @@
-module Tenon
-  class Gallery < ActiveRecord::Base
-    include Tenon::Reorderable
-    has_many :photos, inverse_of: :gallery, dependent: :destroy
-    accepts_nested_attributes_for :photos, allow_destroy: true, reject_if: ->(p) { p[:file_id].blank? }
-    validates_presence_of :title
-    validates_uniqueness_of :title
-    default_scope { order('tenon_galleries.list_order') }
-    has_history includes: [:photos]
-
-    def self.find_with_photos(id)
-      includes(:photos).order('tenon_photos.list_order').find(id)
-    end
-  end
-end

data/app/models/tenon/page.rb

@@ -1,105 +0,0 @@
-module Tenon
-  class Page < ActiveRecord::Base
-    # Scopes, Attrs, Etc.
-    acts_as_nested_set
-    has_history except: [:lft, :rgt, :parent_id, :depth],
-                includes: [:content_tenon_content_rows]
-    tenon_content :content, i18n: true
-    default_scope { order('tenon_pages.lft, tenon_pages.list_order') }
-    scope :published, -> { where('publish_at <= ?', Time.now) }
-    scope :for_menu, -> { published.where(show_in_menu: true) }
-    scope :top, -> { where(parent_id: nil) }
-    scope :find_for_menu, -> { top.for_menu } # Backwards compatibility
-
-
-    # Relationships
-    belongs_to :parent, class_name: 'Page', foreign_key: 'parent_id'
-    belongs_to :creator, class_name: 'User', foreign_key: 'creator_id'
-    belongs_to :updater, class_name: 'User', foreign_key: 'updater_id'
-    has_many :subpages, -> { order 'list_order' }, class_name: 'Page', foreign_key: 'parent_id', dependent: :destroy
-
-    # Validations
-    before_validation :set_slug_and_path
-    after_move :set_slug_and_path
-    validates_presence_of :title
-    validates_presence_of :slug, message: I18n.t('tenon.pages.must_exist_in_order_to_have')
-    validates_uniqueness_of :slug, scope: :parent_id
-    validate :path_is_not_route
-    validate :parent_is_not_in_tree
-
-    # Return siblings if subpages aren't available
-    def subpages_for_menu
-      if subpages.blank?
-        siblings_for_menu
-      else
-        subpages.for_menu
-      end
-    end
-
-    def siblings_for_menu
-      if parent
-        parent.subpages_for_menu
-      else
-        []
-      end
-    end
-
-    def self.reorder!(list, parent_id)
-      unless list.blank?
-        pages = []
-
-        # Move all the pages to the right parent_id first
-        list.each_with_index do |id, order|
-          pages << Page.find_by_id(id)
-          pages[order].move_to_child_of(parent_id) if pages[order] && parent_id
-        end
-
-        # Then give them the ol shuffle
-        first_page = pages[0]
-        previous_page = first_page
-        pages.each_with_index do |page, order|
-          next if order == 0
-          page = pages[order]
-          page.move_to_right_of(previous_page)
-          page.save
-          previous_page = page
-        end
-      end
-    end
-
-    def published?
-      publish_at.present? ? publish_at <= Time.now : false
-    end
-
-    # Update each subpage.path up the tree:
-    after_save :update_subpage_slugs
-    def update_subpage_slugs
-      subpages.each(&:save)
-    end
-
-    protected
-
-    def path_is_not_route
-      match = Rails.application.routes.recognize_path(path, method: :get) rescue nil
-      errors.add(:base, I18n.t('tenon.pages.theres_already_something_happening', path: "#{MySettings.site_url}#{path}")) if match && !match[:slugs]
-    end
-
-    def set_slug_and_path
-      self.slug = title.parameterize
-
-      parent, pages = self.parent, [slug]
-      while parent
-        pages << parent.slug
-        parent = parent.parent
-      end
-      self.path = '/' + pages.reverse.join('/')
-    end
-
-    def parent_is_not_in_tree
-      if id && [id, descendants.map(&:id)].flatten.include?(parent_id)
-        msg = I18n.t('tenon.pages.cannot_be_itself_or_one_of_its_subpages')
-        errors.add(:parent_id, msg)
-      end
-    end
-  end
-end

data/app/models/tenon/photo.rb

@@ -1,10 +0,0 @@
-module Tenon
-  class Photo < ActiveRecord::Base
-    belongs_to :gallery, class_name: 'Gallery', foreign_key: 'gallery_id', inverse_of: :photos
-    has_asset :file, styles: {
-      original: '800x800>',
-      thumbnail: '300x300#' # DEPRECATED
-    }
-    default_scope { order(:list_order) }
-  end
-end

data/app/models/tenon/post.rb

@@ -1,35 +0,0 @@
-module Tenon
-  class Post < ActiveRecord::Base
-    # Scopes, Attachments, etc.
-    default_scope { order('publish_at DESC') }
-    scope :posted, -> { where('publish_at <= ?', Time.now) }
-    scope :for_archive, ->(year, month) { where(Post.for_archive_conditions(year, month)) }
-    tenon_content :content, i18n: true
-    has_history includes: [:content_tenon_content_rows]
-
-    # Relationships
-    has_and_belongs_to_many :post_categories, class_name: 'Tenon::PostCategory'
-    belongs_to :user
-    can_have_comments
-
-    # Validations
-    validates_presence_of :title
-
-    def to_param
-      "#{id}-#{title.parameterize}"
-    end
-
-    # previous and next posts for mobile post nav
-    def next
-      Post.posted.where('publish_at > ?', publish_at).last
-    end
-
-    def previous
-      Post.posted.where('publish_at < ?', publish_at).first
-    end
-
-    def posted?
-      publish_at.present? ? publish_at <= Time.now : false
-    end
-  end
-end

data/app/models/tenon/post_category.rb

@@ -1,7 +0,0 @@
-module Tenon
-  class PostCategory < ActiveRecord::Base
-    has_and_belongs_to_many :posts, class_name: 'Tenon::Post'
-    validates_uniqueness_of :title
-    validates_presence_of :title
-  end
-end

data/app/models/tenon/redirect.rb

@@ -1,17 +0,0 @@
-class Tenon::Redirect < ActiveRecord::Base
-  # Scopes, attachments, etc.
-  has_history
-  include Tenon::Reorderable
-
-  default_scope { order('tenon_redirects.list_order') }
-  scope :active, -> { where(active: true) }
-
-  # Validations
-  validates_presence_of :in, :out
-  validates_uniqueness_of :in
-
-  def toggle_active!
-    self.active = self.active? ? false : true
-    save
-  end
-end

data/app/models/tenon/role.rb

@@ -1,8 +0,0 @@
-module Tenon
-  class Role < ActiveRecord::Base
-    has_many :role_assignments
-    has_many :users, through: :role_assignments
-
-    validates :title, presence: true
-  end
-end

data/app/models/tenon/role_assignment.rb

@@ -1,6 +0,0 @@
-module Tenon
-  class RoleAssignment < ActiveRecord::Base
-    belongs_to :user
-    belongs_to :role, class_name: 'Tenon::Role'
-  end
-end

data/app/models/tenon/s3_direct_upload.rb

@@ -1,75 +0,0 @@
-require 'tenon/s3_signature'
-module Tenon
-  class S3DirectUpload
-    include S3SwfUpload::Signature
-    attr_accessor :bucket, :access_key_id, :secret_access_key, :options
-
-    def initialize(opts = {})
-      self.options           = default_options.merge(opts.symbolize_keys)
-
-      config                 = YAML.load_file(options[:config_file])
-      self.bucket            = config[Rails.env]['bucket']
-      self.access_key_id     = config[Rails.env]['access_key_id']
-      self.secret_access_key = config[Rails.env]['secret_access_key']
-    end
-
-    def post_params
-      {
-        'key' => "#{options[:key]}/#{time}-${filename}",
-        'AWSAccessKeyId' => "#{access_key_id}",
-        'acl' => "#{options[:acl]}",
-        'policy' => "#{policy}",
-        'signature' => "#{signature}",
-        'success_action_status' => '201',
-        '__utma' => '1',
-        '__utmb' => '1',
-        '__utmc' => '1',
-        '__utmz' => '1',
-        'auth_token' => '1'
-      }
-    end
-
-    def upload_url
-      "http://#{bucket}.s3.amazonaws.com/"
-    end
-
-    private
-
-    def default_options
-      {
-        config_file: File.join(Rails.root, 'config', 's3.yml'),
-        key: 'videos',
-        acl: 'public-read',
-        expiration_date: 10.hours.from_now.utc.strftime('%Y-%m-%dT%H:%M:%S.000Z'),
-        max_filesize: 2.gigabyte
-      }
-    end
-
-    def policy
-      Base64.encode64(
-        "{'expiration': '#{options[:expiration_date]}',
-          'conditions': [
-            {'bucket': '#{bucket}'},
-            ['starts-with', '$key', '#{options[:key]}'],
-            {'acl': '#{options[:acl]}'},
-            {'success_action_status': '201'},
-            ['starts-with', '$Filename', ''],
-            ['starts-with', '$__utmz', ''],
-            ['starts-with', '$__utma', ''],
-            ['starts-with', '$__utmc', ''],
-            ['starts-with', '$__utmb', ''],
-            ['starts-with', '$auth_token', ''],
-            ['content-length-range', 0, #{options[:max_filesize]}],
-          ]
-        }").gsub(/\n|\r/, '')
-    end
-
-    def signature
-      b64_hmac_sha1(secret_access_key, policy)
-    end
-
-    def time
-      time = Digest::MD5.hexdigest(Time.now.to_s)
-    end
-  end
-end