tribeca_cms 0.1.1

data/app/controllers/locomotive/api/snippets_controller.rb

@@ -0,0 +1,40 @@
+module Locomotive
+  module Api
+    class SnippetsController < BaseController
+
+      load_and_authorize_resource :class => Locomotive::Snippet
+
+      def index
+        @snippets = current_site.snippets.order_by([[:name, :asc]])
+        respond_with(@snippets)
+      end
+
+      def show
+        @snippet = current_site.snippets.find(params[:id])
+        respond_with @snippet
+      end
+
+      def create
+        @snippet = current_site.snippets.new
+        @snippet.from_presenter(params[:snippet])
+        @snippet.save
+        respond_with @snippet, :location => main_app.locomotive_api_snippets_url
+      end
+
+      def update
+        @snippet = current_site.snippets.find(params[:id])
+        @snippet.from_presenter(params[:snippet])
+        @snippet.save
+        respond_with @snippet, :location => main_app.locomotive_api_snippets_url
+      end
+
+      def destroy
+        @snippet = current_site.snippets.find(params[:id])
+        @snippet.destroy
+        respond_with @snippet
+      end
+
+    end
+  end
+end
+

data/app/controllers/locomotive/api/theme_assets_controller.rb

@@ -0,0 +1,39 @@
+module Locomotive
+  module Api
+    class ThemeAssetsController < BaseController
+
+      load_and_authorize_resource :class => Locomotive::ThemeAsset
+
+      def index
+        @theme_assets = current_site.theme_assets.all
+        respond_with(@theme_assets)
+      end
+
+      def show
+        @theme_asset = current_site.theme_assets.find(params[:id])
+        respond_with @theme_asset
+      end
+
+      def create
+        @theme_asset = current_site.theme_assets.new
+        @theme_asset.from_presenter(params[:theme_asset])
+        @theme_asset.save
+        respond_with @theme_asset, :location => main_app.locomotive_api_theme_assets_url
+      end
+
+      def update
+        @theme_asset = current_site.theme_assets.find(params[:id])
+        @theme_asset.from_presenter(params[:theme_asset])
+        @theme_asset.save
+        respond_with @theme_asset, :location => main_app.locomotive_api_theme_assets_url
+      end
+
+      def destroy
+        @theme_asset = current_site.theme_assets.find(params[:id])
+        @theme_asset.destroy
+        respond_with @theme_asset
+      end
+
+    end
+  end
+end

data/app/controllers/locomotive/api/tokens_controller.rb

@@ -0,0 +1,54 @@
+module Locomotive
+  module Api
+    class TokensController < Locomotive::Api::BaseController
+
+      skip_before_filter :require_account, :require_site, :set_locale, :set_current_thread_variables
+
+      def create
+        begin
+          token = Account.create_api_token(current_site, params[:email], params[:password])
+          respond_with({ token: token }, location: root_url)
+        rescue Exception => e
+          respond_with({ message: e.message }, status: 401, location: root_url)
+        end
+      end
+
+      def destroy
+        begin
+          token = Account.invalidate_api_token(params[:id])
+          respond_with({ token: token }, location: root_url)
+        rescue Exception => e
+          respond_with({ message: e.message }, status: 404, location: root_url)
+        end
+      end
+
+      protected
+
+      def self.description
+        {
+          overall: %{Manage a session token which will be passed to all the other REST calls},
+          actions: {
+            create: {
+              description: %{Generate a session token from an email and a password},
+              params: { email: 'String', password: 'String' },
+              response: { token: 'String' },
+              example: {
+                command: %{curl -d 'email=john.doe@acme.org&password=secret' 'http://mysite.com/locomotive/api/tokens.json'},
+                response: %({ "token": "dtsjkqs1TJrWiSiJt2gg" })
+              }
+            },
+            destroy: {
+              description: %{Make a session token invalid},
+              response: { token: 'String' },
+              example: {
+                command: %{curl -X DELETE 'http://mysite.com/locomotive/api/tokens/dtsjkqs1TJrWiSiJt2gg.json'},
+                response: %({ "token": "dtsjkqs1TJrWiSiJt2gg" })
+              }
+            }
+          }
+        }
+      end
+
+    end
+  end
+end

data/app/controllers/locomotive/api/translations_controller.rb

@@ -0,0 +1,31 @@
+module Locomotive
+  module Api
+    class TranslationsController < BaseController
+
+      load_and_authorize_resource :class => Locomotive::Translation, through: :current_site
+
+      def index
+        respond_with(@translations)
+      end
+
+      def show
+        respond_with @translation
+      end
+
+      def create
+        @translation.save
+        respond_with @translation, :location => main_app.locomotive_api_translation_path(@translation)
+      end
+
+      def update
+        @translation.update_attributes(params[:translation])
+        respond_with @translation, :location => main_app.locomotive_api_translation_path(@translation)
+      end
+
+      def destroy
+        @translation.destroy
+        respond_with @translation
+      end
+    end
+  end
+end

data/app/controllers/locomotive/base_controller.rb

@@ -0,0 +1,61 @@
+module Locomotive
+  class BaseController < ApplicationController
+
+    include Locomotive::Routing::SiteDispatcher
+    include Locomotive::ActionController::LocaleHelpers
+    include Locomotive::ActionController::SectionHelpers
+    include Locomotive::ActionController::UrlHelpers
+
+    layout '/locomotive/layouts/application'
+
+    before_filter :require_account
+
+    before_filter :require_site
+
+    before_filter :validate_site_membership
+
+    load_and_authorize_resource
+
+    before_filter :set_back_office_locale
+
+    before_filter :set_current_content_locale
+
+    before_filter :set_current_thread_variables
+
+    helper_method :sections, :current_ability
+
+    helper Locomotive::BaseHelper, Locomotive::ContentTypesHelper
+
+    self.responder = Locomotive::ActionController::Responder # custom responder
+
+    respond_to :html
+
+    rescue_from CanCan::AccessDenied do |exception|
+      ::Locomotive.log "[CanCan::AccessDenied] #{exception.inspect}"
+
+      if request.xhr?
+        render :json => { :error => exception.message }
+      else
+        flash[:alert] = exception.message
+
+        redirect_to pages_url
+      end
+    end
+
+    protected
+
+    def set_current_thread_variables
+      Thread.current[:account]  = current_locomotive_account
+      Thread.current[:site]     = current_site
+    end
+
+    def current_ability
+      @current_ability ||= Ability.new(current_locomotive_account, current_site)
+    end
+
+    def require_account
+      authenticate_locomotive_account!
+    end
+
+  end
+end

data/app/controllers/locomotive/content_assets_controller.rb

@@ -0,0 +1,23 @@
+module Locomotive
+  class ContentAssetsController < BaseController
+
+    respond_to :json, :only => [:index, :create, :destroy]
+
+    def index
+      @content_assets = current_site.content_assets
+      respond_with(@content_assets)
+    end
+
+    def create
+      @content_asset = current_site.content_assets.create(params[:content_asset])
+      respond_with @content_asset
+    end
+
+    def destroy
+      @content_asset = current_site.content_assets.find(params[:id])
+      @content_asset.destroy
+      respond_with @content_asset
+    end
+
+  end
+end

data/app/controllers/locomotive/content_entries_controller.rb

@@ -0,0 +1,71 @@
+module Locomotive
+  class ContentEntriesController < BaseController
+
+    sections 'contents'
+
+    localized
+
+    before_filter :back_to_default_site_locale, :only => %w(new create)
+
+    before_filter :set_content_type
+
+    respond_to :json, :only => [:show, :edit, :create, :update, :sort]
+
+    skip_load_and_authorize_resource
+
+    before_filter :authorize_content
+
+    def index
+      @content_entries = @content_type.list_or_group_entries
+      respond_with @content_entries
+    end
+
+    def show
+      @content_entry = @content_type.entries.find(params[:id])
+      respond_with @content_entry
+    end
+
+    def new
+      @content_entry = @content_type.entries.build
+      respond_with @content_entry
+    end
+
+    def create
+      @content_entry = @content_type.entries.create(params[:content_entry])
+      respond_with @content_entry, :location => edit_content_entry_url(@content_type.slug, @content_entry._id)
+    end
+
+    def edit
+      @content_entry = @content_type.entries.find(params[:id])
+      respond_with @content_entry
+    end
+
+    def update
+      @content_entry = @content_type.entries.find(params[:id])
+      @content_entry.update_attributes(params[:content_entry])
+      respond_with @content_entry, :location => edit_content_entry_url(@content_type.slug, @content_entry._id)
+    end
+
+    def sort
+      @content_type.klass_with_custom_fields(:entries).sort_entries!(params[:entries])
+      respond_with @content_type
+    end
+
+    def destroy
+      @content_entry = @content_type.entries.find(params[:id])
+      @content_entry.destroy
+      respond_with @content_entry, :location => content_entries_url(@content_type.slug)
+    end
+
+    protected
+
+    def set_content_type
+      @content_type ||= current_site.content_types.where(:slug => params[:slug]).first
+    end
+
+    def authorize_content
+      authorize! params[:action].to_sym, ContentEntry
+    end
+
+  end
+end

data/app/controllers/locomotive/content_types_controller.rb

@@ -0,0 +1,40 @@
+module Locomotive
+  class ContentTypesController < BaseController
+
+    sections 'contents'
+
+    before_filter :back_to_default_site_locale, :only => %w(new create)
+
+    respond_to :json, :only => [:create, :update, :destroy]
+
+    helper 'Locomotive::Accounts', 'Locomotive::CustomFields'
+
+    def new
+      @content_type = current_site.content_types.new
+      respond_with @content_type
+    end
+
+    def create
+      @content_type = current_site.content_types.create(params[:content_type])
+      respond_with @content_type, :location => edit_content_type_url(@content_type._id)
+    end
+
+    def edit
+      @content_type = current_site.content_types.find(params[:id])
+      respond_with @content_type
+    end
+
+    def update
+      @content_type = current_site.content_types.find(params[:id])
+      @content_type.update_attributes(params[:content_type])
+      respond_with @content_type, :location => edit_content_type_url(@content_type._id)
+    end
+
+    def destroy
+      @content_type = current_site.content_types.find(params[:id])
+      @content_type.destroy
+      respond_with @content_type, :location => pages_url
+    end
+
+  end
+end

data/app/controllers/locomotive/current_site_controller.rb

@@ -0,0 +1,52 @@
+module Locomotive
+  class CurrentSiteController < BaseController
+
+    sections 'settings', 'site'
+
+    localized
+
+    skip_load_and_authorize_resource
+
+    load_and_authorize_resource :class => 'Site'
+
+    helper 'Locomotive::Sites'
+
+    before_filter :filter_attributes
+
+    before_filter :ensure_domains_list, :only => :update
+
+    respond_to :json, :only => :update
+
+    def edit
+      @site = current_site
+      respond_with @site
+    end
+
+    def update
+      @site = current_site
+      @site.update_attributes(params[:site])
+      respond_with @site, :location => edit_current_site_url(new_host_if_subdomain_changed)
+    end
+
+    protected
+
+    def filter_attributes
+      unless can?(:manage, Locomotive::Membership)
+        params[:site].delete(:memberships_attributes) if params[:site]
+      end
+    end
+
+    def new_host_if_subdomain_changed
+      if !Locomotive.config.manage_subdomain? || @site.domains.include?(request.host)
+        {}
+      else
+        { :host => site_url(@site, { :fullpath => false, :protocol => false }) }
+      end
+    end
+
+    def ensure_domains_list
+      params[:site][:domains] = [] unless params[:site][:domains]
+    end
+
+  end
+end

data/app/controllers/locomotive/installation_controller.rb

@@ -0,0 +1,72 @@
+module Locomotive
+  class InstallationController < ::ApplicationController
+
+    layout '/locomotive/layouts/not_logged_in'
+
+    before_filter :is_step_already_done?
+
+    before_filter :allow_installation?
+
+    helper Locomotive::BaseHelper, Locomotive::SitesHelper
+
+    def show
+      request.get? ? self.handle_get : self.handle_post
+    end
+
+    protected
+
+    def handle_get
+      case params[:step].to_i
+      when 1 then @account = Account.new
+      when 2 then @site = Site.new
+      end
+      render "step_#{params[:step]}"
+    end
+
+    def handle_post
+      case params[:step].to_i
+      when 1 # create account
+        @account = Account.create(params[:account])
+        if @account.valid?
+          redirect_to installation_step_url(2)
+        else
+          render 'step_1'
+        end
+      when 2 # create site
+        @site = Site.create_first_one(params[:site])
+
+        if @site.valid?
+          redirect_to last_url
+        else
+          logger.error "Unable to create the first website: #{@site.errors.inspect}"
+          render 'step_2'
+        end
+      end
+    end
+
+    def is_step_already_done?
+      case params[:step].to_i
+      when 1 # already an account in db
+        if account = Account.first
+          @step_done = I18n.t('locomotive.installation.step_1.done', :name => account.name, :email => account.email)
+          render 'step_1' and return false
+        end
+      else
+        true
+      end
+    end
+
+    def allow_installation?
+      redirect_to pages_url if Site.count > 0 && Account.count > 0
+    end
+
+    def last_url
+      if Locomotive.config.manage_domains?
+        locomotive_account_session_url(:host => Site.first.domains.first, :port => request.port)
+      else
+        locomotive_account_session_url
+      end
+    end
+
+  end
+end