underworld 1.0.0

data/app/models/underworld/group.rb

@@ -0,0 +1,57 @@
+# == Schema Information
+#
+# Table name: underworld_groups
+#
+#  id         :integer          not null, primary key
+#  name       :string
+#  role       :string
+#  created_at :datetime
+#  updated_at :datetime
+#
+
+module Underworld
+  # **Group** model for **Underworld** platform
+  class Group < ORM.proper_base_class
+
+    # Make this model authorizable
+    include Concerns::Authorizable
+
+    # Define **Group** fields if current ORM was **Mongoid**
+    if ORM.mongoid?
+      include Mongoid::Document
+      include Mongoid::Timestamps
+
+      field :name, type: String
+      field :role, type: String
+    end
+
+    has_and_belongs_to_many :users, class_name: 'Underworld::User'
+    has_and_belongs_to_many :permissions, class_name: 'Underworld::Permission'
+
+    # Validations
+    validates :name, presence: true
+    validates :role, presence: true, uniqueness: true
+
+    def self.policy_class
+      GroupPolicy
+    end
+
+    def include_permission?(perm)
+      if perm.is_a? Fixnum
+        permission_ids.include? perm
+      else
+        permission_ids.include? perm.id
+      end
+    end
+
+    def to_s
+      name
+    end
+
+    private
+
+    def permission_ids
+      @permission_ids ||= permissions.map(&:id)
+    end
+  end
+end

data/app/models/underworld/permission.rb

@@ -0,0 +1,43 @@
+# == Schema Information
+#
+# Table name: underworld_permissions
+#
+#  id              :integer          not null, primary key
+#  model           :string
+#  permission_type :string
+#  created_at      :datetime
+#  updated_at      :datetime
+#
+
+module Underworld
+  class Permission < ORM.proper_base_class
+
+    if ::Underworld::ORM.mongoid?
+      include Mongoid::Document
+      include Mongoid::Timestamps
+
+      field :model, type: String
+      field :permission_type, type: String
+
+    end
+
+    has_and_belongs_to_many :groups, class_name: 'Underworld::Group'
+    alias_attribute :action, :permission_type
+
+    #alias_method :action, :permission_type
+
+    def to_s
+      t('permission_string', action: t(self.permission_type.to_s),
+        model: t(self.model.underscore.humanize))
+    end
+
+    def id_repr
+      "#{self.permission_type.to_s}|#{self.model}"
+    end
+
+    def model_name
+      model.underscore.humanize
+    end
+
+  end
+end

data/app/models/underworld/user.rb

@@ -0,0 +1,81 @@
+# == Schema Information
+#
+# Table name: underworld_users
+#
+#  id                     :integer          not null, primary key
+#  email                  :string           default(""), not null
+#  encrypted_password     :string           default(""), not null
+#  reset_password_token   :string
+#  reset_password_sent_at :datetime
+#  remember_created_at    :datetime
+#  sign_in_count          :integer          default("0")
+#  current_sign_in_at     :datetime
+#  last_sign_in_at        :datetime
+#  current_sign_in_ip     :string
+#  last_sign_in_ip        :string
+#  first_name             :string
+#  last_name              :string
+#  group_id               :integer          default("2")
+#  failed_attempts        :integer          default("0")
+#  unlock_token           :string
+#  locked_at              :datetime
+#  created_at             :datetime
+#  updated_at             :datetime
+#
+
+module Underworld
+  # **User** model for **Underworld** platform
+  class User < ORM.proper_base_class
+
+    # Define **User** fields if current ORM was Mongoid -----------------------
+    if Underworld::ORM.mongoid?
+      include Mongoid::Document
+      include Mongoid::Timestamps
+      include Underworld::Concerns::User::MongoidFields
+    end
+
+    # Callbacks ---------------------------------------------------------------
+    before_create :join_guests
+
+    # AuthDefinitions contains all the **Devise** related configurations.
+    include Underworld::Concerns::User::AuthDefinitions
+    # Permission related methods for user
+    include Underworld::Concerns::User::Permission
+    # Roles related methods for user
+    include Underworld::Concerns::User::UserRoles
+
+    # Gravatar
+    include Underworld::Concerns::User::Gravatar
+
+    # Make this model authorizable
+    include Underworld::Concerns::Authorizable
+
+    has_and_belongs_to_many :groups, class_name: 'Underworld::Group', uniq: true
+
+    # Validations
+    validates :password, presence: true, length: { minimum: 5, maximum: 120 }, on: :create
+    validates :password, length: { minimum: 5, maximum: 120 }, on: :update, allow_blank: true
+    validates :email, format: { with: /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\z/i, on: :create }
+
+    devise *@@devise_options
+
+    # It's totally obviuse. Join the guest group if no group provided
+    def join_guests
+      #::Underworld::Group.find_by(role: 'guest')
+      if groups.empty?
+        guest_group = ::Underworld::Group.find_or_create_by(name: 'Guest',
+                                                        role: 'guest')
+        self.groups << guest_group
+      end
+    end
+
+    def self.policy_class
+      Underworld::UserPolicy
+    end
+
+    def to_s
+      full_name || email
+    end
+
+  end
+end

data/app/models/underworld/user_message.rb

@@ -0,0 +1,6 @@
+module Underworld
+  class UserMessage < ActiveRecord::Base
+    belongs_to :sender, class_name: 'Underworld::User'
+    belongs_to :reciever, class_name: 'Underworld::User'
+  end
+end

data/app/policies/underworld/admin_only_policy.rb

@@ -0,0 +1,66 @@
+# This class grant admin access only.
+# This can be a good base class for your resource
+# if you want to give access to admin only
+class Underworld::AdminOnlyPolicy
+  attr_reader :user, :record
+
+  def initialize(user, record)
+    @user = user
+    @record = record
+  end
+
+  def index?
+    return false if @user.nil?
+    return true if @user.admin?
+    false
+  end
+
+  def show?
+    return false if @user.nil?
+    return true if @user.admin?
+    false
+  end
+
+  def create?
+    return false if @user.nil?
+    return true if @user.admin?
+    false
+  end
+
+  def new?
+    create?
+  end
+
+  def update?
+    return false if @user.nil?
+    return true if @user.admin?
+    false
+  end
+
+  def edit?
+    update?
+  end
+
+  def destroy?
+    return false if @user.nil?
+    return true if @user.admin?
+    false
+  end
+
+  def scope
+    Pundit.policy_scope!(@user, record.class)
+  end
+
+  class Scope
+    attr_reader :user, :scope
+
+    def initialize(user, scope)
+      @@user = @user
+      @scope = scope
+    end
+
+    def resolve
+      scope
+    end
+  end
+end

data/app/policies/underworld/application_policy.rb

@@ -0,0 +1,55 @@
+# Main class for all the **Underworld** Policy classes.
+# It's totally a minimume Policy.
+class Underworld::ApplicationPolicy
+  attr_reader :user, :record
+
+  def initialize(user, record)
+    @user = user
+    @record = record
+  end
+
+  def authorize?(action)
+    return false if @user.nil?
+    return true if @user.admin?
+
+    # Check for ownership of the reocrd
+    record_class = @record.class
+
+    unless [Class, String, Symbol].include?(record_class)
+      if @user.has_ownership?(@record)
+        return false if !@user.owned? @record
+      end
+      @record = @record.class
+    end
+
+    user.can? action, @record.to_s
+  end
+
+  def method_missing(m, *args, &block_given)
+    return authorize? m.to_s[0..-2] if m.to_s =~ /.*\?$/
+    super
+  end
+
+
+  def scope
+    Pundit.policy_scope!(@user, record.class)
+  end
+
+  class Scope
+    attr_reader :user, :scope
+
+    def initialize(user, scope)
+      @user = user
+      @scope = scope
+    end
+
+    def resolve
+      if @user.has_ownership?(scope)
+        scope.where(user: @user)
+      else
+        scope
+      end
+    end
+  end
+
+end

data/app/policies/underworld/group_policy.rb

@@ -0,0 +1,8 @@
+class Underworld::GroupPolicy < Underworld::ApplicationPolicy
+
+  class Scope < Scope
+    def resolve
+      scope
+    end
+  end
+end

data/app/policies/underworld/user_message_policy.rb

@@ -0,0 +1,9 @@
+module Underworld
+  class UserMessagePolicy < ApplicationPolicy
+    class Scope < Scope
+      def resolve
+        scope
+      end
+    end
+  end
+end

data/app/policies/underworld/user_policy.rb

@@ -0,0 +1,9 @@
+module Underworld
+  class UserPolicy < ApplicationPolicy
+    class Scope < Scope
+      def resolve
+        scope
+      end
+    end
+  end
+end

data/app/views/angular/auth/groups/details.html

@@ -0,0 +1,2 @@
+<h1>TODO: You have to either use a template gem like 'dashstrap' or override this templates in your code base</h1>
+<h2>/auth/groups/details</h2>

data/app/views/angular/auth/groups/index.html

@@ -0,0 +1,2 @@
+<h1>TODO: You have to either use a template gem like 'dashstrap' or override this templates in your code base</h1>
+<h2>/auth/groups/index</h2>

data/app/views/angular/auth/groups/new.html

@@ -0,0 +1,2 @@
+<h1>TODO: You have to either use a template gem like 'dashstrap' or override this templates in your code base</h1>
+<h2>/auth/groups/new</h2>

data/app/views/angular/auth/index.html

@@ -0,0 +1,30 @@
+<div class="row clearmargin">
+
+  <div class="columns large-5 small-offset-1 clearpadding">
+
+    <a href="#/auth/users">
+    <div class="widget red">
+      <div class="text-center">
+        <span class="icon text-4x"><i class="fa fa-user"></i></span>
+        <span class="text-2x" translate>Users</span>
+      </div>
+
+    </div>
+    </a>
+
+  </div>
+
+
+  <div class="columns large-5 clearpadding">
+
+    <a href="#/auth/groups">
+      <div class="widget blue">
+        <div class=" text-center">
+          <span class="icon text-4x"><i class="fa fa-group"></i></span>
+          <span class="text-2x" translate>Groups</span>
+        </div>
+      </div>
+    </a>
+  </div>
+
+</div>

data/app/views/angular/auth/profile/edit.html

@@ -0,0 +1,54 @@
+<div class="newform">
+  <fieldset class="form">
+
+    <legend translate>Edit Profile</legend>
+
+    <div class="row">
+      <div class="small-4 columns">
+        <label for="first_name" translate>First Name :</label>
+        <input  id="id_first_name" type="text" name="first_name"  required ng-model="first_name" required>
+        <small id="id_first_name_msg"></small>
+      </div>
+
+      <div class="small-4 columns float-left small-offset-2">
+        <label for="last_name" translate>Last Name :</label>
+        <input  id="id_last_name" type="text" name="last_name"  required ng-model="last_name">
+        <small id="id_last_name_msg"></small>
+
+      </div>
+    </div>
+
+    <div class="row">
+      <div class="small-4 columns">
+        <label for="password" translate>Password :</label>
+        <input  id="id_password" type="password" name="password"  required ng-model="password" required>
+        <small id="id_first_name_msg"></small>
+      </div>
+
+      <div class="small-4 columns float-left small-offset-2">
+        <label for="password_confirmation" translate>Confirm Password :</label>
+        <input  id="id_password_confirmation" type="password" name="password_confirmation"  required ng-model="password_confirmation">
+        <small id="id_password_confirmation_msg"></small>
+
+      </div>
+    </div>
+    <div class="row">
+
+      <div class="small-4 columns">
+        <label for="email" translate>E-mail :</label>
+        <input  id="id_email" type="email" name="email" required ng-model="email">
+        <small id="id_email_msg"></small>
+
+      </div>
+    </div>
+
+  </fieldset>
+
+  <div class="row">
+    <div class="small-4 columns">
+      <button ng-click="save()" class="btn small green" ng-disabled="form.first_name.$pristine || form.first_name.$dirty && form.fist_name.$invalid"><i class="fa fa-check"></i> <span translate>Save</span></button>
+      <button ng-click="cancel()" class="btn small red"><i class="fa fa-times"></i> <span translate>Cancel</span></button>
+    </div>
+  </div>
+
+</div>

data/app/views/angular/auth/users/details.html

@@ -0,0 +1,28 @@
+<div class="details">
+<p >
+  <b translate>First Name :</b>{{this.object.first_name}}
+</p>
+
+<p>
+  <b translate>Last Name :</b>{{this.object.last_name}}
+</p>
+
+<p>
+  <b translate>E-mail :</b>{{this.object.email}}
+</p>
+<p>
+  <b translate>Group :</b>{{this.object.group.name}}
+</p>
+
+<ul class="button-group float-right">
+    <a href="#/auth/users/{{this.object.id}}/reply" class="small">
+    <span class="fa fa-edit"></span> <span translated>Edit</span>
+    </a>
+    <a href="" class="small">
+      <span class="fa fa-eye"></span><span translated>Show</span>
+    </a>
+    <a href="" class="small">
+      <span class="fa fa-check-circle-o"></span><span translated>Active</span>
+    </a>
+</ul>
+</div>