test_hyrax 0.0.1.alpha

data/app/controllers/concerns/hyrax/uploads_controller_behavior.rb

@@ -0,0 +1,18 @@
+module Hyrax::UploadsControllerBehavior
+  extend ActiveSupport::Concern
+
+  included do
+    load_and_authorize_resource class: Hyrax::UploadedFile
+  end
+
+  def create
+    @upload.attributes = { file: params[:files].first,
+                           user: current_user }
+    @upload.save!
+  end
+
+  def destroy
+    @upload.destroy
+    head :no_content
+  end
+end

data/app/controllers/concerns/hyrax/users_controller_behavior.rb

@@ -0,0 +1,113 @@
+module Hyrax::UsersControllerBehavior
+  extend ActiveSupport::Concern
+
+  included do
+    include Blacklight::SearchContext
+    prepend_before_action :find_user, except: [:index, :search, :notifications_number]
+    before_action :authenticate_user!, only: [:edit, :update]
+    authorize_resource only: [:edit, :update]
+    # Catch permission errors
+    rescue_from CanCan::AccessDenied, with: :deny_access
+
+    helper Hyrax::TrophyHelper
+  end
+
+  def index
+    @users = search(params[:uq])
+  end
+
+  # Display user profile
+  def show
+    @presenter = Hyrax::UserProfilePresenter.new(@user, current_ability)
+  end
+
+  # Display form for users to edit their profile information
+  def edit
+    @trophies = Hyrax::TrophyPresenter.find_by_user(@user)
+  end
+
+  # Process changes from profile form
+  def update
+    if params[:user]
+      @user.attributes = user_params
+      @user.populate_attributes if update_directory?
+    end
+
+    unless @user.save
+      redirect_to hyrax.edit_profile_path(@user.to_param), alert: @user.errors.full_messages
+      return
+    end
+    # TODO: this should be moved to TrophiesController
+    params.keys.select { |k, _v| k.starts_with? 'remove_trophy_' }.each do |smash_trophy|
+      smash_trophy = smash_trophy.sub(/^remove_trophy_/, '')
+      current_user.trophies.where(work_id: smash_trophy).destroy_all
+    end
+    UserEditProfileEventJob.perform_later(@user)
+    redirect_to hyrax.profile_path(@user.to_param), notice: "Your profile has been updated"
+  end
+
+  def update_directory?
+    ['1', 'true'].include? params[:user][:update_directory]
+  end
+
+  def notifications_number
+    @notify_number = 0
+    return if action_name == "index" && controller_name == "mailbox"
+    return unless user_signed_in?
+    @notify_number = current_user.mailbox.inbox(unread: true).count
+  end
+
+  protected
+
+    # TODO: this should move to a service.
+    # Returns a list of users excluding the system users and guest_users
+    # @param query [String] the query string
+    def search(query)
+      clause = query.blank? ? nil : "%" + query.downcase + "%"
+      base = User.where(*base_query)
+      unless clause.blank?
+        base = base.where("#{Devise.authentication_keys.first} like lower(?) OR display_name like lower(?)", clause, clause)
+      end
+      base.registered
+          .where("#{Devise.authentication_keys.first} not in (?)",
+                 [User.batch_user_key, User.audit_user_key])
+          .references(:trophies)
+          .order(sort_value)
+          .page(params[:page]).per(10)
+    end
+
+    def user_params
+      params.require(:user).permit(:avatar, :facebook_handle, :twitter_handle,
+                                   :googleplus_handle, :linkedin_handle, :remove_avatar, :orcid)
+    end
+
+    # You can override base_query to return a list of arguments
+    def base_query
+      [nil]
+    end
+
+    def find_user
+      @user = User.from_url_component(params[:id])
+      redirect_to root_path, alert: "User '#{params[:id]}' does not exist" if @user.nil?
+    end
+
+    def sort_value
+      sort = params[:sort].blank? ? "name" : params[:sort]
+      case sort
+      when 'name'
+        'display_name'
+      when 'name desc'
+        'display_name DESC'
+      when 'login'
+        Devise.authentication_keys.first
+      when 'login desc'
+        "#{Devise.authentication_keys.first} DESC"
+      else
+        sort
+      end
+    end
+
+    def deny_access(_exception)
+      redirect_to hyrax.profile_path(@user.to_param), alert: "Permission denied: cannot access this page."
+    end
+end

data/app/controllers/concerns/hyrax/works_controller_behavior.rb

@@ -0,0 +1,80 @@
+module Hyrax
+  module WorksControllerBehavior
+    extend ActiveSupport::Concern
+    # TODO: merge with CurationConcernController
+    include Hyrax::CurationConcernController
+
+    def new
+      curation_concern.depositor = current_user.user_key
+      super
+    end
+
+    protected
+
+      # Override the default behavior from curation_concerns in order to add uploaded_files to the parameters received by the actor.
+      def attributes_for_actor
+        attributes = super
+        # If they selected a BrowseEverything file, but then clicked the
+        # remove button, it will still show up in `selected_files`, but
+        # it will no longer be in uploaded_files. By checking the
+        # intersection, we get the files they added via BrowseEverything
+        # that they have not removed from the upload widget.
+        uploaded_files = params.fetch(:uploaded_files, [])
+        selected_files = params.fetch(:selected_files, {}).values
+        browse_everything_urls = uploaded_files &
+                                 selected_files.map { |f| f[:url] }
+
+        # we need the hash of files with url and file_name
+        browse_everything_files = selected_files
+                                  .select { |v| uploaded_files.include?(v[:url]) }
+        attributes[:remote_files] = browse_everything_files
+        # Strip out any BrowseEverthing files from the regular uploads.
+        attributes[:uploaded_files] = uploaded_files -
+                                      browse_everything_urls
+        attributes
+      end
+
+      def after_create_response
+        respond_to do |wants|
+          wants.html do
+            # Calling `#t` in a controller context does not mark _html keys as html_safe
+            flash[:notice] = view_context.t('hyrax.works.create.after_create_html', application_name: view_context.application_name)
+            redirect_to [main_app, curation_concern]
+          end
+          wants.json { render :show, status: :created, location: polymorphic_path([main_app, curation_concern]) }
+        end
+      end
+
+      def after_update_response
+        if permissions_changed? && curation_concern.file_sets.present?
+          redirect_to hyrax.confirm_access_permission_path(curation_concern)
+        else
+          super
+        end
+      end
+
+      def after_destroy_response(title)
+        respond_to do |wants|
+          wants.html { redirect_to dashboard_works_path, notice: "Deleted #{title}" }
+          wants.json { render_json_response(response_type: :deleted, message: "Deleted #{curation_concern.id}") }
+        end
+      end
+
+      # Called by Hyrax::CurationConcernController#show
+      def additional_response_formats(format)
+        format.endnote do
+          send_data(presenter.solr_document.export_as_endnote,
+                    type: "application/x-endnote-refer",
+                    filename: presenter.solr_document.endnote_filename)
+        end
+      end
+
+      def save_permissions
+        @saved_permissions = curation_concern.permissions.map(&:to_hash)
+      end
+
+      def permissions_changed?
+        @saved_permissions != curation_concern.permissions.map(&:to_hash)
+      end
+  end
+end

data/app/controllers/hyrax/admin/admin_sets_controller.rb

@@ -0,0 +1,125 @@
+module Hyrax
+  class Admin::AdminSetsController < ApplicationController
+    include Hyrax::CollectionsControllerBehavior
+
+    # added skip to allow flash notices. see https://github.com/projecthydra-labs/hyrax/issues/202
+    skip_before_action :filter_docs_with_read_access!
+    before_action :ensure_admin!
+    load_and_authorize_resource
+
+    layout 'admin'
+    self.presenter_class = Hyrax::AdminSetPresenter
+    self.form_class = Hyrax::Forms::AdminSetForm
+
+    # Used for the show action
+    self.single_item_search_builder_class = Hyrax::SingleAdminSetSearchBuilder
+
+    # Used to get the members for the show action
+    self.member_search_builder_class = Hyrax::AdminSetMemberSearchBuilder
+
+    # Used to get a list of admin sets for the index action
+    self.list_search_builder_class = Hyrax::AdminSetSearchBuilder
+
+    # Used to create the admin set
+    class_attribute :admin_set_create_service
+    self.admin_set_create_service = AdminSetCreateService
+
+    def show
+      add_breadcrumb t(:'hyrax.controls.home'), root_path
+      add_breadcrumb t(:'hyrax.toolbar.admin.menu'), hyrax.admin_path
+      add_breadcrumb t(:'hyrax.admin.sidebar.admin_sets'), hyrax.admin_admin_sets_path
+      add_breadcrumb 'View Set', request.path
+      super
+    end
+
+    def index
+      add_breadcrumb t(:'hyrax.controls.home'), root_path
+      add_breadcrumb t(:'hyrax.toolbar.admin.menu'), hyrax.admin_path
+      add_breadcrumb t(:'hyrax.admin.sidebar.admin_sets'), hyrax.admin_admin_sets_path
+      @admin_sets = Hyrax::AdminSetService.new(self).search_results(:read)
+    end
+
+    def new
+      setup_form
+    end
+
+    def edit
+      setup_form
+    end
+
+    def update
+      if @admin_set.update(admin_set_params)
+        redirect_to hyrax.admin_admin_sets_path
+      else
+        setup_form
+        render :edit
+      end
+    end
+
+    def create
+      if create_admin_set
+        redirect_to hyrax.edit_admin_admin_set_path(@admin_set), notice: I18n.t('new_admin_set', scope: 'hyrax.admin.admin_sets.form.permission_update_notices', name: @admin_set.title.first)
+      else
+        setup_form
+        render :new
+      end
+    end
+
+    def destroy
+      @admin_set.destroy
+      redirect_to hyrax.admin_admin_sets_path, notice: t(:'hyrax.admin.admin_sets.delete.notification')
+    end
+
+    # for the AdminSetService
+    def repository
+      repository_class.new(blacklight_config)
+    end
+
+    # Override the default prefixes so that we use the collection partals.
+    def self.local_prefixes
+      ["hyrax/admin/admin_sets", "hyrax/collections", 'catalog']
+    end
+
+    private
+
+      def ensure_admin!
+        # Even though the user can view this admin set, they may not be able to view
+        # it on the admin page.
+        authorize! :read, :admin_dashboard
+      end
+
+      # Overriding the way that the search builder is initialized
+      def list_search_builder
+        list_search_builder_class.new(self, :read)
+      end
+
+      def create_admin_set
+        admin_set_create_service.call(@admin_set, current_user)
+      end
+
+      def setup_form
+        add_breadcrumb t(:'hyrax.controls.home'), root_path
+        add_breadcrumb t(:'hyrax.toolbar.admin.menu'), hyrax.admin_path
+        add_breadcrumb t(:'hyrax.admin.sidebar.admin_sets'), hyrax.admin_admin_sets_path
+        add_breadcrumb action_breadcrumb, request.path
+        @form = form_class.new(@admin_set)
+      end
+
+      def action_breadcrumb
+        case action_name
+        when 'edit', 'update'
+          t(:'helpers.action.edit')
+        else
+          t(:'helpers.action.admin_set.new')
+        end
+      end
+
+      def admin_set_params
+        form_class.model_attributes(params[:admin_set])
+      end
+
+      def repository_class
+        blacklight_config.repository_class
+      end
+  end
+end

data/app/controllers/hyrax/admin/features_controller.rb

@@ -0,0 +1,13 @@
+module Hyrax
+  module Admin
+    class FeaturesController < Flipflop::FeaturesController
+      layout 'admin'
+      before_action do
+        authorize! :manage, Hyrax::Feature
+        add_breadcrumb t(:'hyrax.controls.home'), root_path
+        add_breadcrumb t(:'hyrax.toolbar.admin.menu'), hyrax.admin_path
+        add_breadcrumb t(:'hyrax.admin.sidebar.settings'), hyrax.admin_features_path
+      end
+    end
+  end
+end

data/app/controllers/hyrax/admin/permission_template_accesses_controller.rb

@@ -0,0 +1,15 @@
+module Hyrax
+  module Admin
+    class PermissionTemplateAccessesController < ApplicationController
+      load_and_authorize_resource class: 'Hyrax::PermissionTemplateAccess'
+
+      def destroy
+        @permission_template_access.destroy
+
+        redirect_to hyrax.edit_admin_admin_set_path(@permission_template_access.permission_template.admin_set_id,
+                                                    anchor: 'participants'),
+                    notice: 'Permissions updated'
+      end
+    end
+  end
+end

data/app/controllers/hyrax/admin/permission_templates_controller.rb

@@ -0,0 +1,40 @@
+module Hyrax
+  module Admin
+    class PermissionTemplatesController < ApplicationController
+      load_and_authorize_resource find_by: 'admin_set_id',
+                                  id_param: 'admin_set_id',
+                                  class: 'Hyrax::PermissionTemplate'
+
+      def update
+        form.update(update_params)
+        # Ensure we redirect to currently active tab with the appropriate notice
+        redirect_to edit_admin_admin_set_path(params[:admin_set_id], anchor: current_tab),
+                    notice: translate(current_tab, scope: 'hyrax.admin.admin_sets.form.permission_update_notices')
+      end
+
+      private
+
+        def form
+          Forms::PermissionTemplateForm.new(@permission_template)
+        end
+
+        def update_params
+          params.require(:permission_template)
+                .permit(:release_date, :release_period, :release_varies, :release_embargo, :visibility, :workflow_name,
+                        access_grants_attributes: [:access, :agent_id, :agent_type, :id])
+        end
+
+        # @return [String] the name of the current UI tab to show
+        def current_tab
+          pt = params[:permission_template]
+          @current_tab ||= if pt[:access_grants_attributes].present?
+                             'participants'
+                           elsif pt[:workflow_name].present?
+                             'workflow'
+                           else
+                             'visibility'
+                           end
+        end
+    end
+  end
+end

data/app/controllers/hyrax/admin/stats_controller.rb

@@ -0,0 +1,5 @@
+module Hyrax
+  class Admin::StatsController < ApplicationController
+    include Hyrax::Admin::StatsBehavior
+  end
+end

data/app/controllers/hyrax/admin/strategies_controller.rb

@@ -0,0 +1,14 @@
+module Hyrax
+  module Admin
+    class StrategiesController < Flipflop::StrategiesController
+      before_action do
+        authorize! :manage, Hyrax::Feature
+      end
+
+      # TODO: we could remove this if we used an isolated engine
+      def features_url
+        hyrax.admin_features_path
+      end
+    end
+  end
+end

data/app/controllers/hyrax/admin/workflow_roles_controller.rb

@@ -0,0 +1,39 @@
+module Hyrax
+  module Admin
+    class WorkflowRolesController < ApplicationController
+      before_action :require_permissions
+      layout 'admin'
+
+      def index
+        add_breadcrumb t(:'hyrax.controls.home'), root_path
+        add_breadcrumb t(:'hyrax.toolbar.admin.menu'), hyrax.admin_path
+        add_breadcrumb t(:'hyrax.admin.workflow_roles.header'), hyrax.admin_workflow_roles_path
+        @presenter = WorkflowRolePresenter.new
+      end
+
+      def destroy
+        responsibility = Sipity::WorkflowResponsibility.find(params[:id])
+        authorize! :destroy, responsibility
+        responsibility.destroy
+        redirect_to admin_workflow_roles_path
+      end
+
+      def create
+        authorize! :create, Sipity::WorkflowResponsibility
+        form = Forms::WorkflowResponsibilityForm.new(params[:sipity_workflow_responsibility])
+        begin
+          form.save!
+        rescue ActiveRecord::RecordNotUnique
+          logger.info "Not unique *****\n\n\n"
+        end
+        redirect_to admin_workflow_roles_path
+      end
+
+      private
+
+        def require_permissions
+          authorize! :read, :admin_dashboard
+        end
+    end
+  end
+end