xrono 1.0.0

data/app/controllers/comments_controller.rb

@@ -0,0 +1,75 @@
+class CommentsController < ApplicationController
+  before_filter :load_comment, :only => [:show, :edit, :update, :destroy]
+  before_filter :load_new_comment, :only => [:new, :create]
+
+  protected
+  def load_new_comment
+    @comment = Comment.new(params[:comment])
+  end
+
+  def load_comment
+    @comment = Comment.find(params[:id])
+  end
+
+  public
+  def create
+    @commentable = find_commentable
+    @comment = @commentable.comments.build(params[:comment])
+    @comment.user = current_user
+    if @comment.save
+      @comment.update_attributes(params[:comment])
+      @comment.update_attributes(:active => true)
+      flash[:notice] = t(:comment_created_successfully)
+      redirect_to_ref_url
+    else
+      flash.now[:error] = t(:comment_created_unsuccessfully)
+      render :new
+    end
+  end
+
+  def show
+  end
+
+  def new
+  end
+
+  def edit
+  end
+
+  def update
+    if @comment.active == false
+      @comment.update_attributes(:active => true)
+      @hide = 'Hide Comment'
+    elsif @comment.active == true
+      @comment.update_attributes(:active => false)
+      @hide = 'Unhide Comment'
+    end
+
+    if @comment.save
+      if @comment.active == false
+        flash[:notice] = "The comment has been hidden."
+      else
+        flash[:notice] = "The comment is no longer hidden."
+      end
+    end
+    redirect_to(:back)
+  end
+
+  def destroy
+    @comment = Comment.find(params[:id])
+    if @comment.destroy
+      flash[:notice] = "The comment was deleted"
+    end
+    redirect_to(:back)
+  end
+
+  private
+
+  def find_commentable
+    params.each do |name, value|
+      if name =~ /(.+)_id$/
+        return $1.classify.constantize.find(value)
+      end
+    end
+  end
+end

data/app/controllers/contacts_controller.rb

@@ -0,0 +1,54 @@
+class ContactsController < ApplicationController
+  include ControllerMixins::Contacts
+
+  before_filter :load_client
+  before_filter :load_contact, :only => [:show, :edit, :update, :destroy]
+  before_filter :require_admin, :only => [:destroy]
+
+  access_control do
+    allow :admin
+    allow :developer, :if => :current_user_has_client
+    allow :client, :to => [:new, :create, :edit, :update, :destroy, :show, :index], :if => :current_user_has_client
+  end
+
+  protected
+  def load_client
+    @client = Client.find(params[:client_id])
+  end
+
+  def load_contact
+    @contact = Contact.find(params[:id])
+  end
+
+  public
+  def index
+    @contacts = @client.contacts.all
+  end
+
+  def show
+  end
+
+  def new
+    @contact = Contact.new(params[:contact])
+  end
+
+  def create
+    create!(:client_contact_path)
+  end
+
+  def update
+    update!(:client_contact_path)
+  end
+
+  def edit
+  end
+
+  def destroy
+    destroy!(:client_contacts_path)
+  end
+
+  private
+  def current_user_has_client
+    Client.for_user(current_user).include?(@client)
+  end
+end

data/app/controllers/dashboard/base_controller.rb

@@ -0,0 +1,79 @@
+class Dashboard::BaseController < Xrono::ApplicationController
+  include ActionView::Helpers::SanitizeHelper
+  before_filter :get_calendar_details, :only => [:index, :calendar, :update_calendar]
+  before_filter :load_work_units, :only => [:index, :calendar, :update_calendar]
+  respond_to :html, :json, :js
+
+  def json_index
+    bucket = decide_bucket
+    bucket = bucket.for_user(current_user) unless params["all"] == "true"
+    bucket.order("name")
+    render :json => bucket.all
+  end
+
+  def index
+    @message = {:title => t(:management), :body => t(:enter_time_for_previous_day)} unless current_user.entered_time_yesterday?
+    @clients = Client.order("name").active.for_user(current_user)
+    @projects = []
+    @tickets = []
+
+    # NOTE: The following line is shameful
+    @project_report_rows = WorkUnit.for_user(current_user).scheduled_between(Time.zone.now - 2.weeks, Time.zone.now.end_of_day).joins(:ticket => :project).select("projects.name as project_name, projects.id as project_id, SUM(work_units.effective_hours) as total_hours").group("projects.name, projects.id").sort_by{|r| r.total_hours}.reverse # Sort in ruby because I ran into sql problems - should be sorting like 5 rows max so no worries
+  end
+
+  def client
+    @projects = Project.order("name").incomplete.for_client_id(params[:id])
+    unless admin?
+      @projects = @projects.for_user_and_role(current_user, :developer)
+    end
+    respond_with @projects
+  end
+
+  def project
+    @tickets = Ticket.order("name").incomplete.where("project_id = ?", params[:id])
+    respond_with @tickets
+  end
+
+  def calendar
+  end
+
+  def load_work_units
+    @work_units = current_user.work_units_between(@start_date, @start_date + 6.days)
+  end
+
+  def update_calendar
+    respond_to do |format|
+      format.js {
+        render :json => {
+          :success => true,
+          :data => render_to_string(
+            :partial => 'shared/calendar',
+            :locals => {
+              :start_date => @start_date,
+              :work_units => @work_units,
+              :user => current_user
+            }
+          ),
+          :week_pagination => render_to_string(
+            :partial => 'dashboard/base/week_pagination',
+            :locals => {
+              :start_date => @start_date
+            }
+          )
+        }
+      }
+    end
+  end
+
+  private
+  def decide_bucket
+    case params["bucket"]
+    when "Client"
+      Client.active
+    when "Project"
+      Project.incomplete.where("client_id = ?", params[:id])
+    when "Ticket"
+      Ticket.incomplete.where("project_id = ?", params[:id])
+    end
+  end
+end

data/app/controllers/data_vaults_controller.rb

@@ -0,0 +1,12 @@
+class DataVaultsController < ApplicationController
+  def show
+    @data_vault = DataVault.find(params[:id])
+    render :text => @data_vault.data
+  end
+
+  def update
+    @data_vault = DataVault.find(params[:id])
+    @data_vault.update_attribute(:data, params[:value])
+    render :text => ::Kramdown::Document.new(@data_vault.data).to_html
+  end
+end

data/app/controllers/doorkeeper/application_controller.rb

@@ -0,0 +1,33 @@
+module Doorkeeper
+  class ApplicationController < ::ApplicationController
+    layout 'doorkeeper'
+
+    private
+
+    def authenticate_resource_owner!
+      current_resource_owner
+    end
+
+    def current_resource_owner
+      instance_exec(main_app, &Doorkeeper.configuration.authenticate_resource_owner)
+    end
+
+    def resource_owner_from_credentials
+      instance_exec(main_app, &Doorkeeper.configuration.resource_owner_from_credentials)
+    end
+
+    def authenticate_admin!
+      if block = Doorkeeper.configuration.authenticate_admin
+        instance_exec(main_app, &block)
+      end
+    end
+
+    def method_missing(method, *args, &block)
+      if method =~ /_(url|path)$/
+        raise "Your path has not been found. Didn't you mean to call routes.#{method} in doorkeeper configuration blocks?"
+      else
+        super
+      end
+    end
+  end
+end

data/app/controllers/file_attachments_controller.rb

@@ -0,0 +1,60 @@
+class FileAttachmentsController < ApplicationController
+  before_filter :load_new_file_attachment, :only => [:new, :create]
+  before_filter :load_file_attachment, :only => [:show, :mark_as_invalid]
+  before_filter :get_referrer, :only => [:create]
+
+  protected
+  def load_new_file_attachment
+    @file_attachment = FileAttachment.new(params[:file_attachment])
+    if params[:ticket_id]
+      @file_attachment.ticket_id = params[:ticket_id]
+    end
+    if params[:client_id]
+      @file_attachment.client_id = params[:client_id]
+    end
+    if params[:project_id]
+      @file_attachment.project_id = params[:project_id]
+    end
+  end
+
+  def load_file_attachment
+    @file_attachment = FileAttachment.find(params[:id])
+  end
+
+  def get_referrer
+    @referrer_path = case
+    when params[:client_id]  then client_path params[:client_id]
+    when params[:project_id] then project_path params[:project_id]
+    when params[:ticket_id]  then ticket_path params[:ticket_id]
+    else                          root_path
+    end
+  end
+
+  public
+  def show
+    send_file(@file_attachment.attachment_file.path, :disposition => 'attachment')
+  end
+
+  def new
+  end
+
+  def mark_as_invalid
+    @file_attachment.not_valid = true
+    if @file_attachment.save
+      flash[:notice] = t(:marked_attachment_as_invalid)
+    else
+      flash[:error] = t(:could_not_mark_attachment_as_invalid)
+    end
+    redirect_to @file_attachment.client || @file_attachment.ticket || @file_attachment.project
+  end
+
+  def create
+    if @file_attachment.save
+      flash[:notice] = t(:file_attachment_created_successfully)
+      redirect_to @referrer_path
+    else
+      flash.now[:error] = t(:file_attachment_created_unsuccessfully)
+      render :new
+    end
+  end
+end

data/app/controllers/projects_controller.rb

@@ -0,0 +1,62 @@
+class ProjectsController < ApplicationController
+  include ControllerMixins::Authorization
+
+  before_filter :load_new_project, :only => [:new, :create]
+  before_filter :load_project, :only => [:show, :edit, :update]
+  before_filter :load_file_attachments, :only => [:show, :new, :create]
+  before_filter :handle_tags
+
+  authorize_owners_with_client_show(:project)
+
+  def new
+  end
+
+  def create
+    if @project.save
+      flash[:notice] = t(:project_created_successfully)
+      redirect_to @project
+    else
+      flash.now[:error] = t(:project_created_unsuccessfully)
+      render :new
+    end
+  end
+
+  def show
+    @bucket = Ticket.for_project(@project).sort_by_name
+
+    @incomplete_tickets = @bucket.incomplete
+    @complete_tickets = @bucket.complete
+    @work_units = WorkUnit.for_project(@project).order("work_units.created_at DESC")
+  end
+
+  def edit
+  end
+
+  def update
+    if @project.update_attributes(params[:project])
+      flash[:notice] = t(:project_updated_successfully)
+      redirect_to @project
+    else
+      flash.now[:error] = t(:project_updated_unsuccessfully)
+      render :edit
+    end
+  end
+
+  private
+  def load_new_project
+    @project = Project.new(params[:project])
+    @project.client = Client.find(params[:client])
+  end
+
+  def load_project
+    @project = Project.find(params[:id])
+  end
+
+  def load_file_attachments
+    @file_attachments = @project.file_attachments
+  end
+
+  def handle_tags
+    params[:project]['tag_list'] = get_tag_list_for(params[:tags]) if params[:tags]
+  end
+end

data/app/controllers/tickets_controller.rb

@@ -0,0 +1,48 @@
+class TicketsController < ApplicationController
+  include ControllerMixins::Generic
+  include ControllerMixins::Tickets
+  include ControllerMixins::Authorization
+
+  before_filter :load_new_ticket, :only => [:new, :create]
+  before_filter :load_ticket, :only => [:show, :edit, :update, :advance_state, :reverse_state, :ticket_detail, :toggle_complete]
+  before_filter :load_file_attachments, :only => [:show, :new, :create]
+  before_filter :load_project
+
+  authorize_owners_with_client_show(:project)
+
+  def new
+  end
+
+  def create
+    create!(:ticket_path) # In ControllerMixins::Tickets module
+  end
+
+  def show
+    @work_units = WorkUnit.for_ticket(@ticket).sort_by_scheduled_at
+    unless @ticket.estimated_hours
+      flash.now[:notice] = "NOTE: The estimated amount of time to complete this ticket has not been entered."
+    end
+
+    if @ticket.percentage_complete.to_i > 100
+      flash.now[:notice] = "WARNING: Ticket has exceeded the estimated amount of time to be completed."
+    end
+  end
+
+  def edit
+  end
+
+  def update
+    @ticket.update_attributes(params[:ticket])
+    generic_save_and_redirect(:ticket, :update)
+  end
+
+  private
+  def load_file_attachments
+    @file_attachments = @ticket.file_attachments
+  end
+
+  # Acl9's access control block looks for @project in order to use "allow <role> :of => :project"
+  def load_project
+    @project = @ticket.project
+  end
+end

data/app/controllers/users_controller.rb

@@ -0,0 +1,57 @@
+class UsersController < ApplicationController
+  before_filter :load_user, :only => [:show, :edit, :change_password, :historical_time, :update]
+  skip_before_filter :redirect_clients
+
+  access_control do
+    allow :admin
+    allow :developer, :to => [:edit, :change_password, :update], :if => :user_is_current_user?
+    allow :developer, :to => [:index, :show, :historical_time]
+    allow :client, :to => [:edit, :show, :change_password], :if => :user_is_current_user?
+  end
+
+  def index
+    @users = User.unlocked.sort_by_name
+  end
+
+  def show
+  end
+
+  def edit
+  end
+
+  def change_password
+    @user.password = params[:user][:password]
+    @user.password_confirmation = params[:user][:password_confirmation]
+    if @user.save
+      sign_in(@user, :bypass => true)
+      flash[:notice] = t(:password_updated_successfully)
+      redirect_to :action => :show
+    else
+      params[:user][:password] = params[:user][:password_confirmation] = ''
+      flash.now[:error] = t(:password_updated_unsuccessfully)
+      render :edit
+    end
+  end
+
+  def historical_time
+  end
+
+  def update
+    if @user.update_attributes(params[:user])
+      flash[:notice] = t(:user_updated_successfully)
+      redirect_to @user
+    else
+      flash.now[:error] = t(:user_updated_unsuccessfully)
+      render :action => 'edit'
+    end
+  end
+
+  private
+  def load_user
+    @user = User.find(params[:id])
+  end
+
+  def user_is_current_user?
+    @user == current_user
+  end
+end