wobauth 3.4.4

data/config/locales/de.yml

@@ -0,0 +1,80 @@
+de:
+  wobauth:
+    action: Aktion
+    configuration: Konfiguration
+    change_columns: Spalten ändern
+    show_all: alles anzeigen
+    restore: zurücksetzen
+    search: Suche
+    sort_helper: Sortierhilfe
+    applied_filter: Angewandter Filter
+    new_user_from_ad: Benutzer mit Vorlage erstellen
+
+  activerecord:
+    models:
+      wobauth/user: Benutzer
+      wobauth/ad_user: Active Directory User
+      wobauth/authority: Berechtigung
+      wobauth/group: Gruppe
+      wobauth/membership: Mitgliedschaft
+      wobauth/role: Rolle
+      wobauth/users/authority: Berechtigung
+      wobauth/users/membership: Mitgliedschaft
+      wobauth/groups/authority: Berechtigung
+      wobauth/groups/membership: Mitgliedschaft
+      wobauth/registration: Userprofil
+      wobauth/session: Login
+
+
+  attributes:
+    active_directory_guid: Active Directory GUID
+    authorizable: Authorisierbar
+    authorizable_id: Authorisierbar
+    authorizable_type: Authorisierbar/Typ
+    authorized_for: Berechtigung auf
+    authorized_for_id: Berechtigung auf
+    authorized_for_type: Berechtigung auf/Typ
+    auto: Auto
+    care_of: c/o
+    company: Organisation
+    current_sign_in_at: Login am
+    current_sign_in_ip: Login-IP
+    department: Abteilung
+    description: Beschreibung
+    displayname: Anzeigename
+    email: E-Mail
+    facsimiletelephonenumber: Telefax
+    group: Gruppe
+    gruppen: Gruppen (auto)
+    last_sign_in_at: Letzter Login
+    last_sign_in_ip: Letzte Login-IP
+    location: Ort
+    mail: E-Mail
+    members: Mitglieder
+    membership: Mitgliedschaft
+    mobile: Mobil
+    name: Name
+    ort: Ort
+    plz: PLZ
+    position: Position
+    postfach: Postfach
+    postfachplz: PLZ (Postfach)
+    role: Rolle
+    sign_in_count: Anzahl Logins
+    streetaddress: Straße, Nr.
+    telephone: Telefon
+    telephonenumber: Telefon
+    title: Titel
+    user: Benutzer
+    username: Username
+    userprincipalname: Principalname
+    valid_from: gültig von
+    valid_until: gültig bis
+
+  controller:
+    wobauth/users: Benutzer
+    wobauth/ad_users: Active Directory User
+    wobauth/authorities: Berechtigungen
+    wobauth/groups: Gruppen
+    wobauth/memberships: Mitgliedschaften
+    wobauth/roles: Rollen

data/config/locales/devise.de.yml

@@ -0,0 +1,60 @@
+# Additional translations at https://github.com/plataformatec/devise/wiki/I18n
+
+de:
+  devise:
+    confirmations:
+      confirmed: "Vielen Dank für Ihre Registrierung. Bitte melden Sie sich jetzt an."
+      confirmed_and_signed_in: "Vielen Dank für Ihre Registrierung. Sie sind jetzt angemeldet."
+      send_instructions: "Sie erhalten in wenigen Minuten eine E-Mail, mit der Sie Ihre Registrierung bestätigen können."
+      send_paranoid_instructions: "Falls Ihre E-Mail-Adresse in unserer Datenbank existiert erhalten Sie in wenigen Minuten eine E-Mail mit der Sie Ihre Registrierung bestätigen können."
+    failure:
+      already_authenticated: "Sie sind bereits angemeldet."
+      inactive: "Ihr Account ist nicht aktiv."
+      invalid: "Ungültige Anmeldedaten."
+      invalid_token: "Der Anmelde-Token ist ungültig."
+      locked: "Ihr Account ist gesperrt."
+      not_found_in_database: "E-Mail-Adresse oder Passwort ungültig."
+      timeout: "Ihre Sitzung ist abgelaufen, bitte melden Sie sich erneut an."
+      unauthenticated: "Sie müssen sich anmelden oder registrieren, bevor Sie fortfahren können."
+      unconfirmed: "Sie müssen Ihren Account bestätigen, bevor Sie fortfahren können."
+    mailer:
+      confirmation_instructions:
+        subject: "Anleitung zur Bestätigung Ihres Accounts"
+      reset_password_instructions:
+        subject: "Anleitung um Ihr Passwort zurückzusetzen"
+      unlock_instructions:
+        subject: "Anleitung um Ihren Account freizuschalten"
+    omniauth_callbacks:
+      failure: "Sie konnten nicht mit Ihrem %{kind}-Account angemeldet werden, weil '%{reason}'."
+      success: "Sie haben sich erfolgreich mit Ihrem %{kind}-Account angemeldet."
+    passwords:
+      no_token: "Sie können diese Seite nur von dem Link aus einer E-Mail zum Passwort-Zurücksetzen aufrufen. Wenn Sie einen solchen Link aufgerufen haben, stellen Sie bitte sicher, dass Sie die vollständige Adresse aufrufen."
+      send_instructions: "Sie erhalten in wenigen Minuten eine E-Mail mit der Anleitung, wie Sie Ihr Passwort zurücksetzen können."
+      send_paranoid_instructions: "Falls Ihre E-Mail-Adresse in unserer Datenbank existiert erhalten Sie in wenigen Minuten eine E-Mail mit der Anleitung, wie Sie Ihr Passwort zurücksetzen können."
+      updated: "Ihr Passwort wurde geändert. Sie sind jetzt angemeldet."
+      updated_not_active: "Ihr Passwort wurde geändert."
+    registrations:
+      destroyed: "Ihr Account wurde gelöscht."
+      signed_up: "Sie haben sich erfolgreich registriert."
+      signed_up_but_inactive: "Sie haben sich erfolgreich registriert. Wir konnten Sie noch nicht anmelden, da Ihr Account inaktiv ist."
+      signed_up_but_locked: "Sie haben sich erfolgreich registriert. Wir konnten Sie noch nicht anmelden, da Ihr Account gesperrt ist."
+      signed_up_but_unconfirmed: "Sie haben sich erfolgreich registriert. Wir konnten Sie noch nicht anmelden, da Ihr Account noch nicht bestätigt ist. Sie erhalten in Kürze eine E-Mail mit der Anleitung, wie Sie Ihren Account freischalten können."
+      update_needs_confirmation: "Ihre Daten wurden aktualisiert, aber Sie müssen Ihre neue E-Mail-Adresse bestätigen. Sie erhalten in wenigen Minuten eine E-Mail, mit der Sie die Änderung Ihrer E-Mail-Adresse abschliessen können."
+      updated: "Ihre Daten wurden aktualisiert."
+    sessions:
+      signed_in: "Erfolgreich angemeldet."
+      signed_out: "Erfolgreich abgemeldet."
+    unlocks:
+      send_instructions: "Sie erhalten in wenigen Minuten eine E-Mail mit der Anleitung, wie Sie Ihren Account entsperren können."
+      send_paranoid_instructions: "Falls Ihre E-Mail-Adresse in unserer Datenbank existiert erhalten Sie in wenigen Minuten eine E-Mail mit der Anleitung, wie Sie Ihren Account entsperren können."
+      unlocked: "Ihr Account wurde entsperrt. Sie sind jetzt angemeldet."
+  errors:
+    messages:
+      already_confirmed: "wurde bereits bestätigt"
+      confirmation_period_expired: "muss innerhalb %{period} bestätigt werden, bitte fordern Sie einen neuen Link an"
+      expired: "ist abgelaufen, bitte neu anfordern"
+      not_found: "nicht gefunden"
+      not_locked: "ist nicht gesperrt"
+      not_saved:
+        one: "Konnte %{resource} nicht speichern: ein Fehler."
+        other: "Konnte %{resource} nicht speichern: %{count} Fehler."

data/config/locales/devise.en.yml

@@ -0,0 +1,59 @@
+# Additional translations at https://github.com/plataformatec/devise/wiki/I18n
+
+en:
+  devise:
+    confirmations:
+      confirmed: "Your account was successfully confirmed."
+      send_instructions: "You will receive an email with instructions about how to confirm your account in a few minutes."
+      send_paranoid_instructions: "If your email address exists in our database, you will receive an email with instructions about how to confirm your account in a few minutes."
+    failure:
+      already_authenticated: "You are already signed in."
+      inactive: "Your account is not activated yet."
+      invalid: "Invalid email or password."
+      locked: "Your account is locked."
+      last_attempt: "You have one more attempt before your account will be locked."
+      not_found_in_database: "Invalid email or password."
+      timeout: "Your session expired. Please sign in again to continue."
+      unauthenticated: "You need to sign in or sign up before continuing."
+      unconfirmed: "You have to confirm your account before continuing."
+    mailer:
+      confirmation_instructions:
+        subject: "Confirmation instructions"
+      reset_password_instructions:
+        subject: "Reset password instructions"
+      unlock_instructions:
+        subject: "Unlock Instructions"
+    omniauth_callbacks:
+      failure: "Could not authenticate you from %{kind} because \"%{reason}\"."
+      success: "Successfully authenticated from %{kind} account."
+    passwords:
+      no_token: "You can't access this page without coming from a password reset email. If you do come from a password reset email, please make sure you used the full URL provided."
+      send_instructions: "You will receive an email with instructions on how to reset your password in a few minutes."
+      send_paranoid_instructions: "If your email address exists in our database, you will receive a password recovery link at your email address in a few minutes."
+      updated: "Your password was changed successfully. You are now signed in."
+      updated_not_active: "Your password was changed successfully."
+    registrations:
+      destroyed: "Bye! Your account was successfully cancelled. We hope to see you again soon."
+      signed_up: "Welcome! You have signed up successfully."
+      signed_up_but_inactive: "You have signed up successfully. However, we could not sign you in because your account is not yet activated."
+      signed_up_but_locked: "You have signed up successfully. However, we could not sign you in because your account is locked."
+      signed_up_but_unconfirmed: "A message with a confirmation link has been sent to your email address. Please open the link to activate your account."
+      update_needs_confirmation: "You updated your account successfully, but we need to verify your new email address. Please check your email and click on the confirm link to finalize confirming your new email address."
+      updated: "You updated your account successfully."
+    sessions:
+      signed_in: "Signed in successfully."
+      signed_out: "Signed out successfully."
+    unlocks:
+      send_instructions: "You will receive an email with instructions about how to unlock your account in a few minutes."
+      send_paranoid_instructions: "If your account exists, you will receive an email with instructions about how to unlock it in a few minutes."
+      unlocked: "Your account has been unlocked successfully. Please sign in to continue."
+  errors:
+    messages:
+      already_confirmed: "was already confirmed, please try signing in"
+      confirmation_period_expired: "needs to be confirmed within %{period}, please request a new one"
+      expired: "has expired, please request a new one"
+      not_found: "not found"
+      not_locked: "was not locked"
+      not_saved:
+        one: "1 error prohibited this %{resource} from being saved:"
+        other: "%{count} errors prohibited this %{resource} from being saved:"

data/config/locales/en.yml

@@ -0,0 +1,27 @@
+en:
+  activerecord:
+    models:
+      wobauth/authority: Authority
+      wobauth/group: Group
+      wobauth/membership: Member
+      wobauth/role: Role
+
+    attributes:
+      name: Name
+    authorizable: authorizable
+    authorizable_type: authorizable type
+    authorized_for: authorized for
+    authorized_for_type: authorized for type
+    auto: auto
+    group: gruppe
+    membership: membership
+    role: role
+    valid_from: valid from
+    valid_until: valid until
+
+  controller:
+    wobauth/authorities: Authorities
+    wobauth/groups: Groups
+    wobauth/memberships: Memberships
+    wobauth/roles: Roles
+

data/config/locales/simple_form.en.yml

@@ -0,0 +1,31 @@
+en:
+  simple_form:
+    "yes": 'Yes'
+    "no": 'No'
+    required:
+      text: 'required'
+      mark: '*'
+      # You can uncomment the line below if you need to overwrite the whole required html.
+      # When using html, text and mark won't be used.
+      # html: '<abbr title="required">*</abbr>'
+    error_notification:
+      default_message: "Please review the problems below:"
+    # Examples
+    # labels:
+    #   defaults:
+    #     password: 'Password'
+    #   user:
+    #     new:
+    #       email: 'E-mail to sign in.'
+    #     edit:
+    #       email: 'E-mail.'
+    # hints:
+    #   defaults:
+    #     username: 'User name to sign in.'
+    #     password: 'No special characters, please.'
+    # include_blanks:
+    #   defaults:
+    #     age: 'Rather not say'
+    # prompts:
+    #   defaults:
+    #     age: 'Select your age'

data/config/locales/wobapphelpers.de.yml

@@ -0,0 +1,10 @@
+de:
+  wobapphelpers:
+    helpers:
+      back: "Zurück"
+      cancel: "Abbrechen"
+    controller:
+      new:  "%{name} erstellen"
+      create:  "%{name} erstellen"
+      edit:  "%{name} bearbeiten"
+      update:  "%{name} bearbeiten"

data/config/locales/wobapphelpers.en.yml

@@ -0,0 +1,8 @@
+en:
+  wobapphelpers:
+    helpers:
+      back: Back
+      cancel: Cancel
+    controller:
+      new:  "create %{name}"
+      edit:  "update %{name}"

data/config/routes.rb

@@ -0,0 +1,24 @@
+Wobauth::Engine.routes.draw do
+
+  devise_for :users, path: 'accounts', class_name: "Wobauth::User", module: :devise,
+	      controllers: {registrations: 'wobauth/registrations'} 
+
+  resources :users do
+    resources :authorities, module: :users
+    resources :memberships, module: :users
+  end
+  resources :ad_users, :only => [:index] do
+    collection do
+      post :index
+    end
+  end
+  resources :authorities
+  resources :memberships
+  resources :groups do
+    resources :authorities, module: :groups
+    resources :memberships, module: :groups
+  end
+  resources :roles
+
+  get 'login' => 'login#login', as: :login
+end

data/db/migrate/20140501113226_create_wobauth_roles.rb

@@ -0,0 +1,9 @@
+class CreateWobauthRoles < ActiveRecord::Migration[5.1]
+  def change
+    create_table :wobauth_roles do |t|
+      t.string :name
+
+      t.timestamps
+    end
+  end
+end

data/db/migrate/20140501150743_create_wobauth_groups.rb

@@ -0,0 +1,10 @@
+class CreateWobauthGroups < ActiveRecord::Migration[5.1]
+  def change
+    create_table :wobauth_groups do |t|
+      t.string :name
+      t.string :description
+
+      t.timestamps
+    end
+  end
+end

data/db/migrate/20140504124045_create_wobauth_memberships.rb

@@ -0,0 +1,11 @@
+class CreateWobauthMemberships < ActiveRecord::Migration[5.1]
+  def change
+    create_table :wobauth_memberships do |t|
+      t.references :user, index: true
+      t.references :group, index: true
+      t.boolean :auto, default: false
+
+      t.timestamps
+    end
+  end
+end

data/db/migrate/20140504143328_create_wobauth_authorities.rb

@@ -0,0 +1,15 @@
+class CreateWobauthAuthorities < ActiveRecord::Migration[5.1]
+  def change
+    create_table :wobauth_authorities do |t|
+      t.references :authorizable, index: true
+      t.string :authorizable_type
+      t.references :role, index: true
+      t.references :authorized_for, index: true
+      t.string :authorized_for_type
+      t.date :valid_from
+      t.date :valid_until
+
+      t.timestamps
+    end
+  end
+end

data/db/migrate/20140508120810_devise_create_wobauth_users.rb

@@ -0,0 +1,55 @@
+class DeviseCreateWobauthUsers < ActiveRecord::Migration[5.1]
+  def change
+    create_table(:wobauth_users) do |t|
+
+      # -- devise_cas_authenticable
+      t.string :username, :null => false, :default => ""
+
+      # -- wob's extensions
+      t.text "gruppen"
+      t.string "sn"
+      t.string "givenname"
+      t.string "displayname"
+      t.string "telephone"
+      t.string "active_directory_guid"
+      t.string "userprincipalname"
+
+      ## Database authenticatable
+      t.string :email,              null: false, default: ""
+      t.string :encrypted_password, null: false, default: ""
+
+      ## Recoverable
+      t.string   :reset_password_token
+      t.datetime :reset_password_sent_at
+
+      ## Rememberable
+      t.datetime :remember_created_at
+
+      ## Trackable
+      t.integer  :sign_in_count, default: 0, null: false
+      t.datetime :current_sign_in_at
+      t.datetime :last_sign_in_at
+      t.string   :current_sign_in_ip
+      t.string   :last_sign_in_ip
+
+      ## Confirmable
+      # t.string   :confirmation_token
+      # t.datetime :confirmed_at
+      # t.datetime :confirmation_sent_at
+      # t.string   :unconfirmed_email # Only if using reconfirmable
+
+      ## Lockable
+      # t.integer  :failed_attempts, default: 0, null: false # Only if lock strategy is :failed_attempts
+      # t.string   :unlock_token # Only if unlock strategy is :email or :both
+      # t.datetime :locked_at
+
+
+      t.timestamps
+    end
+
+    add_index :wobauth_users, :username,             unique: true
+    add_index :wobauth_users, :reset_password_token, unique: true
+    # add_index :wobauth_users, :confirmation_token,   unique: true
+    # add_index :wobauth_users, :unlock_token,         unique: true
+  end
+end

data/db/migrate/20171231084355_additional_fields_to_wobauth_user.rb

@@ -0,0 +1,8 @@
+class AdditionalFieldsToWobauthUser < ActiveRecord::Migration[5.1]
+  def change
+    add_column :wobauth_users, :title, :string, default: ""
+    add_column :wobauth_users, :position, :string, default: ""
+    add_column :wobauth_users, :department, :string, default: ""
+    add_column :wobauth_users, :company, :string, default: ""
+  end
+end

data/lib/concerns/models/user.rb

@@ -0,0 +1,44 @@
+module Wobauth
+  module Concerns
+    module Models::User
+      extend ActiveSupport::Concern
+
+      included do
+	has_many :authorities, as: :authorizable, dependent: :destroy
+	has_many :roles,       through: :authorities
+	has_many :memberships, dependent: :destroy
+	has_many :groups, -> { distinct }, through: :memberships
+	has_many :group_roles, through: :groups, source: :roles
+	has_many :group_authorities, through: :groups, source: :authorities
+
+        validates :username, presence: true, uniqueness: true
+      end
+
+
+      def to_s
+        if sn.blank? and givenname.blank?
+          "#{username}" 
+        elsif title.blank?
+          "#{sn}, #{givenname} (#{username})"
+        else
+          "#{sn}, #{title} #{givenname} (#{username})"
+        end
+      end
+  
+      def name
+        to_s
+      end
+
+      def is_admin?
+        role?(:admin)
+      end
+
+      def role?(role)
+        (self.authorities.joins(:role)
+         .where("wobauth_roles.name = ?", role.to_s.camelize).present?) ||
+        (self.group_authorities.joins(:role)
+         .where("wobauth_roles.name = ?", role.to_s.camelize).present?)
+      end
+    end
+  end
+end

data/lib/generators/templates/initializers/wobauth.rb

@@ -0,0 +1,20 @@
+Wobauth.setup do |config|
+  #
+  # Configuration for Authorization
+  # 1. Subject: Authorizable
+  # do not change it unless you know exactly what you are doing
+  #
+  # config.authorizable_types = [ "Wobauth::User", "Wobauth::Group" ]
+  # config.authorizable_group_method = :all
+  #
+  # 2. Object: Authorized_for
+  # depends on your application ...
+  # default: []
+  #
+  # config.authorized_for_types = [ "MyClass", ...]
+  # config.authorized_for_group_method = :all
+  #
+  # or for ancestry trees:
+  # config.authorized_for_group_method = :arrange_as_array
+  #
+end

data/lib/generators/wobauth/install_generator.rb

@@ -0,0 +1,20 @@
+module Wobauth
+  module Generators
+    class InstallGenerator < Rails::Generators::Base
+      source_root File.expand_path("../../templates", __FILE__)
+      
+      desc "Copy locale files to your application"
+      def copy_locale
+        ['en', 'de'].each do |lang|
+          copy_file "../../../config/locales/#{lang}.yml", 
+                    "config/locales/wobauth.#{lang}.yml"
+        end
+      end
+
+      desc "create initializer"
+      def copy_initializer
+        copy_file "initializers/wobauth.rb", "config/initializers/wobauth.rb"
+      end
+    end
+  end
+end

data/lib/tasks/wobauth_tasks.rake

@@ -0,0 +1,4 @@
+# desc "Explaining what the task does"
+# task :wobauth do
+#   # Task goes here
+# end

data/lib/templates/erb/scaffold/_form.html.erb

@@ -0,0 +1,26 @@
+<%%= simple_form_for(@<%= singular_table_name %>,
+  html: { class: 'form-horizontal well' },
+  wrapper: :horizontal_form,
+  wrapper_mappings: {
+    check_boxes: :horizontal_radio_and_checkboxes,
+    radio_buttons: :horizontal_radio_and_checkboxes,
+    file: :horizontal_file_input,
+    boolean: :horizontal_boolean
+  }) do |f| %>
+
+  <fieldset>
+    <%%= form_legend %>
+
+    <div class="form-inputs">
+    <%- attributes.each do |attribute| -%>
+      <%%= f.<%= attribute.reference? ? :association : :input %> :<%= attribute.name %><% (attribute.field_type == :date_select) ? ', as: :string' : '' %>
+       %>
+    <%- end -%>
+    </div>
+
+    <div class="form-actions col-sm-9 col-sm-offset-3">
+      <%%= f.button :submit, class: 'btn btn-primary' %>
+      <%%= cancel_button %>
+    </div>
+  </fieldset>
+<%% end %>

data/lib/templates/erb/scaffold/edit.html.erb

@@ -0,0 +1 @@
+<%%= render 'form' %>

data/lib/templates/erb/scaffold/index.html.erb

@@ -0,0 +1,32 @@
+<h1><%%= t('controller.<%= plural_table_name %>') %></h1>
+
+<table id="dataTable" class="table table-bordered table-striped dataTable">
+<thead>
+  <tr>
+<% attributes.each do |attribute| -%>
+    <th><%%= t('attributes.<%= attribute.name %>') %></th>
+<% end -%>
+    <th></th>
+  </tr>
+</thead>
+<tbody>
+
+<%% @<%= plural_table_name %>.each do |<%= singular_table_name %>| %>
+  <%%= content_tag_for(:tr, <%= singular_table_name %>) do %>
+<% attributes.each do |attribute| -%>
+    <td><%%= <%= singular_table_name %>.<%= attribute.name %> %></td>
+<% end -%>
+    <td class="nowrap">
+      <%%= show_link <%= singular_table_name %> %>
+      <%%= edit_link <%= singular_table_name %> %>
+      <%%= delete_link <%= singular_table_name %> %>
+    </td>
+  <%% end %>
+<%% end %>
+</tbody>
+</table>
+
+<br />
+
+<%%= back_link %>
+<%%= new_link <%= class_name %> %>

data/lib/templates/erb/scaffold/new.html.erb

@@ -0,0 +1 @@
+<%%= render 'form' %>

data/lib/templates/erb/scaffold/show.html.erb

@@ -0,0 +1,15 @@
+<table class="table table-bordered table-hover autowidth">
+<% attributes.each do |attribute| -%>
+  <tr>
+    <th><%%= t('attributes.<%= attribute.name %>')%>:</th>
+    <td><%%= @<%= singular_table_name %>.<%= attribute.name %> %></td>
+  </tr>
+<% end -%>
+</table>
+
+<div class="btn-toolbar" role="toolbar">
+  <%%= back_link %>
+  <%%= edit_link(@<%= singular_table_name %>) %>
+  <%%= delete_link(@<%= singular_table_name %>) %>
+  <%%= new_link <%= class_name %> %>
+</div>

data/lib/templates/rails/scaffold_controller/controller.rb

@@ -0,0 +1,66 @@
+<% if namespaced? -%>
+require_dependency "<%= namespaced_file_path %>/application_controller"
+
+<% end -%>
+<% module_namespacing do -%>
+class <%= controller_class_name %>Controller < ApplicationController
+  before_action :set_<%= singular_table_name %>, only: [:show, :edit, :update, :destroy]
+  before_action :add_breadcrumb_show, only: [:show]
+
+  # GET <%= route_url %>
+  def index
+    @<%= plural_table_name %> = <%= orm_class.all(class_name) %>
+    respond_with(@<%= plural_table_name %>)
+  end
+
+  # GET <%= route_url %>/1
+  def show
+    respond_with(@<%= singular_table_name %>)
+  end
+
+  # GET <%= route_url %>/new
+  def new
+    @<%= singular_table_name %> = <%= orm_class.build(class_name) %>
+    respond_with(@<%= singular_table_name %>)
+  end
+
+  # GET <%= route_url %>/1/edit
+  def edit
+  end
+
+  # POST <%= route_url %>
+  def create
+    @<%= singular_table_name %> = <%= orm_class.build(class_name, "#{singular_table_name}_params") %>
+
+    @<%= orm_instance.save %>
+    respond_with(@<%= singular_table_name %>)
+  end
+
+  # PATCH/PUT <%= route_url %>/1
+  def update
+    @<%= orm_instance.update("#{singular_table_name}_params") %>
+    respond_with(@<%= singular_table_name %>)
+  end
+
+  # DELETE <%= route_url %>/1
+  def destroy
+    @<%= orm_instance.destroy %>
+    respond_with(@<%= singular_table_name %>)
+  end
+
+  private
+    # Use callbacks to share common setup or constraints between actions.
+    def set_<%= singular_table_name %>
+      @<%= singular_table_name %> = <%= orm_class.find(class_name, "params[:id]") %>
+    end
+
+    # Only allow a trusted parameter "white list" through.
+    def <%= "#{singular_table_name}_params" %>
+      <%- if attributes_names.empty? -%>
+      params[:<%= singular_table_name %>]
+      <%- else -%>
+      params.require(:<%= singular_table_name %>).permit(<%= attributes_names.map { |name| ":#{name}" }.join(', ') %>)
+      <%- end -%>
+    end
+end
+<% end -%>