ums 0.0.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 272ed6c390ebe0b96fff511b1e2e3ffe7eda162f
+  data.tar.gz: ee84462764d1d8368553dc8c4878dff2c2b665a7
+SHA512:
+  metadata.gz: af4f78d9f7651fae64fde42e4e250a2b9797564daf06cfebeb81dbeeb8d37bf7cbbac39c5c632313667b1af0f987c291b2f6acc3cbaa61e5a295b0e68938263d
+  data.tar.gz: 6b6db9df31ab86f4e8044e4cbbe105c472b482b34add3bcfd3e62820334d9eb15de0d463e7d8b35acc88dc841b7debf25ab0470a430bcc4cb21cecab45283764

data/README.rdoc

@@ -0,0 +1,3 @@
+= Ums
+
+This project rocks and uses MIT-LICENSE.

data/Rakefile

@@ -0,0 +1,34 @@
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rdoc/task'
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'Ums'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+APP_RAKEFILE = File.expand_path("../test/dummy/Rakefile", __FILE__)
+load 'rails/tasks/engine.rake'
+
+
+
+Bundler::GemHelper.install_tasks
+
+require 'rake/testtask'
+
+Rake::TestTask.new(:test) do |t|
+  t.libs << 'lib'
+  t.libs << 'test'
+  t.pattern = 'test/**/*_test.rb'
+  t.verbose = false
+end
+
+
+task default: :test

data/app/assets/javascripts/ums/application.js

@@ -0,0 +1,13 @@
+// This is a manifest file that'll be compiled into application.js, which will include all the files
+// listed below.
+//
+// Any JavaScript/Coffee file within this directory, lib/assets/javascripts, vendor/assets/javascripts,
+// or vendor/assets/javascripts of plugins, if any, can be referenced here using a relative path.
+//
+// It's not advisable to add code directly here, but if you do, it'll appear at the bottom of the
+// compiled file.
+//
+// Read Sprockets README (https://github.com/sstephenson/sprockets#sprockets-directives) for details
+// about supported directives.
+//
+//= require_tree .

data/app/assets/stylesheets/ums/application.css

@@ -0,0 +1,13 @@
+/*
+ * This is a manifest file that'll be compiled into application.css, which will include all the files
+ * listed below.
+ *
+ * Any CSS and SCSS file within this directory, lib/assets/stylesheets, vendor/assets/stylesheets,
+ * or vendor/assets/stylesheets of plugins, if any, can be referenced here using a relative path.
+ *
+ * You're free to add application-wide styles to this file and they'll appear at the top of the
+ * compiled file, but it's generally better to create a new file per style scope.
+ *
+ *= require_self
+ *= require_tree .
+ */

data/app/controllers/ums/application_controller.rb

@@ -0,0 +1,5 @@
+module Ums
+  #class ApplicationController < ActionController::Base
+  class Ums::ApplicationController < ApplicationController
+  end
+end

data/app/controllers/ums/functions_controller.rb

@@ -0,0 +1,74 @@
+class Ums::FunctionsController < ApplicationController
+  before_action :set_ums_function, only: [:show, :edit, :update, :destroy]
+
+  # GET /ums/functions
+  # GET /ums/functions.json
+  def index
+    @ums_functions = Ums::Function.all
+  end
+
+  # GET /ums/functions/1
+  # GET /ums/functions/1.json
+  def show
+  end
+
+  # GET /ums/functions/new
+  def new
+    @ums_function = Ums::Function.new
+  end
+
+  # GET /ums/functions/1/edit
+  def edit
+  end
+
+  # POST /ums/functions
+  # POST /ums/functions.json
+  def create
+    @ums_function = Ums::Function.new(ums_function_params)
+
+    respond_to do |format|
+      if @ums_function.save
+        format.html { redirect_to ums.functions_url, notice: 'Function was successfully created.' }
+        format.json { render action: 'show', status: :created, location: @ums_function }
+      else
+        format.html { render action: 'new' }
+        format.json { render json: @ums_function.errors, status: :unprocessable_entity }
+      end
+    end
+  end
+
+  # PATCH/PUT /ums/functions/1
+  # PATCH/PUT /ums/functions/1.json
+  def update
+    respond_to do |format|
+      if @ums_function.update(ums_function_params)
+        format.html { redirect_to ums.functions_url, notice: 'Function was successfully updated.' }
+        format.json { head :no_content }
+      else
+        format.html { render action: 'edit' }
+        format.json { render json: @ums_function.errors, status: :unprocessable_entity }
+      end
+    end
+  end
+
+  # DELETE /ums/functions/1
+  # DELETE /ums/functions/1.json
+  def destroy
+    @ums_function.destroy
+    respond_to do |format|
+      format.html { redirect_to ums.functions_url }
+      format.json { head :no_content }
+    end
+  end
+
+  private
+    # Use callbacks to share common setup or constraints between actions.
+    def set_ums_function
+      @ums_function = Ums::Function.find(params[:id])
+    end
+
+    # Never trust parameters from the scary internet, only allow the white list through.
+    def ums_function_params
+      params.require(:function).permit(:name, :controller, :action)
+    end
+end

data/app/controllers/ums/logs_controller.rb

@@ -0,0 +1,9 @@
+class Ums::LogsController < ApplicationController
+
+  # GET /ums/logs
+  # GET /ums/logs.json
+  def index
+    @ums_logs = Ums::Log.all.page(params[:page]).order("id DESC")
+  end
+
+end

data/app/controllers/ums/roles_controller.rb

@@ -0,0 +1,86 @@
+class Ums::RolesController < ApplicationController
+  before_action :set_ums_role, only: [:show, :edit, :update, :destroy]
+  before_action :set_ums_functions, only: [:new,:edit,:update,:create]
+  before_action :init_function_ids, only: [:create, :update]
+  # GET /ums/roles
+  # GET /ums/roles.json
+  def index
+    @ums_roles = Ums::Role.all
+  end
+
+  # GET /ums/roles/1
+  # GET /ums/roles/1.json
+  def show
+  end
+
+  # GET /ums/roles/new
+  def new
+    @ums_role = Ums::Role.new
+  end
+
+  # GET /ums/roles/1/edit
+  def edit
+  end
+
+  # POST /ums/roles
+  # POST /ums/roles.json
+  def create
+    @ums_role = Ums::Role.new(ums_role_params)
+
+    respond_to do |format|
+      if @ums_role.save
+        format.html { redirect_to ums.roles_url, notice: 'Role was successfully created.' }
+        format.json { render action: 'show', status: :created, location: @ums_role }
+      else
+        format.html { render action: 'new' }
+        format.json { render json: @ums_role.errors, status: :unprocessable_entity }
+      end
+    end
+  end
+
+  # PATCH/PUT /ums/roles/1
+  # PATCH/PUT /ums/roles/1.json
+  def update
+    respond_to do |format|
+      if @ums_role.update(ums_role_params)
+        format.html { redirect_to ums.roles_url, notice: 'Role was successfully updated.' }
+        format.json { head :no_content }
+      else
+        format.html { render action: 'edit' }
+        format.json { render json: @ums_role.errors, status: :unprocessable_entity }
+      end
+    end
+  end
+
+  # DELETE /ums/roles/1
+  # DELETE /ums/roles/1.json
+  def destroy
+    if  Ums::User.find_by_role_id(@ums_role.id)
+      flash[:error] = "该角色还有关联用户，不能删除"
+    else
+      @ums_role.destroy
+    end
+    respond_to do |format|
+      format.html { redirect_to ums.roles_url }
+      format.json { head :no_content }
+    end
+  end
+
+  private
+    # Use callbacks to share common setup or constraints between actions.
+    def set_ums_role
+      @ums_role = Ums::Role.find(params[:id])
+    end
+
+    # Never trust parameters from the scary internet, only allow the white list through.
+    def ums_role_params
+      params.require(:role).permit(:name,{:function_ids => []})
+    end
+    def set_ums_functions
+      @ums_functions = Ums::Function.all
+    end
+
+    def init_function_ids 
+      params[:role][:function_ids] ||= [] 
+    end
+end

data/app/controllers/ums/users_controller.rb

@@ -0,0 +1,177 @@
+class Ums::UsersController < ApplicationController
+
+  skip_before_filter :verify_authenticity_token, :if => Proc.new { |c| c.request.format == 'application/json' }
+  skip_before_filter :authorize, :only => [:login,:logout,:profile,:password]
+
+  before_action :set_ums_user, only: [:show, :edit, :update, :destroy]
+  before_action :set_ums_roles, only: [:new,:edit,:update,:create]
+  # GET /ums/users
+  # GET /ums/users.json
+
+ def login
+    if request.post?
+      #account = Account.authenticate(params[:login_name],params[:password])
+      user = Ums::User.authenticate(params[:login_name],params[:password])
+      if user 
+        login_count = user.login_count      
+        login_count = 0 if login_count.nil?
+        login_count += 1
+        user.last_login_time = Time.now
+        user.last_login_ip = request.remote_ip
+        user.login_count = login_count
+        user.save(validate: false)
+
+        session[:user_id] = user.id
+        session[:user_name] = user.name
+
+        uri = session[:original_uri]
+        session[:original_uri] = nil
+        log_info("login",params[:login_name] + " login success",request.remote_ip)
+
+        user_permission = '^redactor_rails|' # 上传组件
+        user.role.functions.each do |function| 
+          if function.action.blank?
+            user_permission += '^' + function.controller
+          else
+            user_permission += function.controller + "/" + function.action
+          end          
+          user_permission += "|"
+        end
+
+        user_permission.chop! unless user_permission.blank?
+        session[:user_permission] = user_permission
+
+        respond_to do |format|
+          format.html { redirect_to  uri || main_index_path }
+          format.json { render json: {is_success:"true",message:""} }
+        end
+
+      else
+        log_error("login",params[:login_name] + " login failed",request.remote_ip)
+        respond_to do |format|
+          error_info = "无效的账号或密码"
+          format.html { flash.now[:notice] = error_info }
+          format.json { render json: {is_success:"false",message:error_info} }
+        end
+        
+      end
+    end
+  end
+
+  def logout
+    session[:user_id] = nil
+    session[:user_name] = nil
+
+    #flash[:notice] = "已退出"
+    redirect_to  '/' #main_index_path
+  end
+
+  def password
+    if request.post?
+      if params[:new_password].blank?
+        flash.now[:error] = "新密码不能为空"
+        return
+      end
+      if params[:new_password] != params[:re_password]
+        flash.now[:error] = "两次新密码输入不一致"
+        return
+      end
+      if params[:new_password].blank?
+        flash.now[:error] = "新密码不能为空"
+        return
+      end
+      user = Ums::User.find_by_id(session[:user_id])
+      if user.verify_password(params[:old_password])
+        user.password=params[:new_password]
+        user.save
+        flash.now[:notice] = "密码修改成功"
+        params.delete(:new_password)
+        params.delete(:old_password)
+        params.delete(:re_password)
+      else 
+        flash.now[:error] = "旧密码输入错误"
+      end  
+    end
+  end
+
+  def profile
+    @ums_user = Ums::User.find_by_id(session[:user_id])
+    if request.patch?
+     if @ums_user.update(params.require(:user).permit(:email))
+       flash.now[:notice] = "资料修改成功"
+     else
+       flash.now[:error] = "资料修改失败"
+     end
+    end
+  end
+
+  def index
+    @ums_users = Ums::User.all
+  end
+  def show
+  end
+  # GET /ums/users/new
+  def new
+    @ums_user = Ums::User.new
+    @ums_user.is_enabled = true
+  end
+
+  # GET /ums/users/1/edit
+  def edit
+  end
+
+  # POST /ums/users
+  # POST /ums/users.json
+  def create
+    @ums_user = Ums::User.new(ums_user_params)
+
+    respond_to do |format|
+      if @ums_user.save
+        format.html { redirect_to ums.users_url, notice: 'User was successfully created.' }
+        format.json { render action: 'show', status: :created, location: @ums_user }
+      else
+        format.html { render action: 'new' }
+        format.json { render json: @ums_user.errors, status: :unprocessable_entity }
+      end
+    end
+  end
+
+  # PATCH/PUT /ums/users/1
+  # PATCH/PUT /ums/users/1.json
+  def update
+    respond_to do |format|
+      if @ums_user.update(ums_user_params)
+        format.html { redirect_to ums.users_url, notice: 'User was successfully updated.' }
+        format.json { head :no_content }
+      else
+        format.html { render action: 'edit' }
+        format.json { render json: @ums_user.errors, status: :unprocessable_entity }
+      end
+    end
+  end
+
+  # DELETE /ums/users/1
+  # DELETE /ums/users/1.json
+  def destroy
+    @ums_user.destroy
+    respond_to do |format|
+      format.html { redirect_to ums.users_url }
+      format.json { head :no_content }
+    end
+  end
+
+  private
+    # Use callbacks to share common setup or constraints between actions.
+    def set_ums_user
+      @ums_user = Ums::User.find(params[:id])
+    end
+
+    # Never trust parameters from the scary internet, only allow the white list through.
+    def ums_user_params
+      params.require(:user).permit(:name, :email, :password, :role_id, :is_enabled)
+    end
+
+    def set_ums_roles
+      @ums_roles = Ums::Role.all
+    end
+end

data/app/helpers/ums/application_helper.rb

@@ -0,0 +1,46 @@
+module Ums
+  module ApplicationHelper
+
+   def authorize
+      #unless Account.find_by_id(session[:account_id])
+      if session[:user_id].nil?
+        session[:original_uri] = request.url
+        #flash[:notice] = "Please log in"
+        redirect_to  ums.users_login_url 
+        return    
+      end
+
+      path = params[:controller] + "/" + params[:action]
+      unless validate_permission(path)
+         render status: :forbidden, text: "访问被拒绝"
+      end    
+   end
+
+   def log_info(log_type,log_content,log_ip)
+		log = Ums::Log.new
+		log.level="info"
+		log.log_type=log_type
+		log.data=log_content
+		log.ip=log_ip
+		log.save
+  end
+
+  def log_error(log_type,log_content,log_ip)
+		log = Ums::Log.new
+		log.level="error"
+		log.log_type=log_type
+		log.data=log_content
+		log.ip=log_ip
+		log.save
+  end
+
+  def validate_permission(path)
+    permission = session[:user_permission]
+
+    logger.debug("user_permission:" + permission) unless permission.nil?
+    logger.debug("user_path:" + path) unless path.nil?
+    return false if permission.nil? || path.nil?
+    return path.match(permission)
+  end
+  end
+end