zena 0.15.0

data/History.txt

@@ -0,0 +1,18 @@
+== 0.15.0 2009-10-16
+
+* 5 major enhancements:
+  * running rails 2.3.4
+  * installable as gem without RMagick
+  * usable as gem with config.gem
+  * supports sqlite3
+  * 'zena' command to create app
+
+* 3 minor enhancemnts:
+  * huge speed improvement in version loading
+  * massive code cleanup
+  * better team workflow (reworked access rights)
+
+== 0.11.1 2009-04-03
+
+* minor enhancements:
+  * Better testing of custom queries using latest querybuilder (0.5.2)

data/README.txt

@@ -0,0 +1,133 @@
+== DESCRIPTION:
+
+CMS based on Ruby on Rails, (c) Gaspard Bucher, teti.ch 2007-2009, licenced under MIT
+
+This version of zena is *TOTALLY UNUSABLE* for the moment. It is the result of the slow migration from Rails 1.2.3 to Rails 2.x. You will need the latest rails edge with some patches which you can find here: http://github.com/gaspard/rails/tree/master.
+
+== Creating the database
+You need to set collation and charset to utf8 when creating the database. Example :
+# create database zena DEFAULT CHARSET=utf8 COLLATE=utf8_general_ci;
+
+== Development/testing
+1. Create the database using a mysql client
+   create database zena_dev DEFAULT CHARSET=utf8 COLLATE=utf8_general_ci;
+
+2. Rename 'config/database_example.yml' to 'config/database.yml' and update it's content
+
+3. Migrate the database and add initialize db (from within zena directory)
+   rake zena:migrate
+
+4. Create a first site or load fixtures
+   rake zena:mksite HOST=localhost PASSWORD=secret LANG=en
+
+5. Start server
+   script/server
+
+6. Connect to site 'http://localhost:3000'
+
+7. Login with 'admin' and 'secret'
+
+== Production
+You should use capistrano to ease deployment. See 'config/delploy.rb'.
+
+Manual deployment is done with the following commands:
+1. Create the database with (using a mysql client)
+   create database zena DEFAULT CHARSET=utf8 COLLATE=utf8_general_ci;
+
+2. Create log directory
+   mkdir log
+
+3. Rename 'config/database_example.yml' to 'config/database.yml' and update it's content
+   (change user, password if needed)
+
+4. Migrate the database
+   rake zena:migrate RAILS_ENV=production
+
+4. Create a site
+   rake zena:mksite HOST=example.com PASSWORD=secret LANG=en RAILS_ENV=production
+
+5. Login user is 'admin', password is the one set on the line above.
+
+== Create a new site
+# rake zena:mksite HOST=example.com PASSWORD=secret RAILS_ENV=production
+
+== Start
+# ruby lib/upload_progress_server.rb start
+# script/server -S config/mongrel_upload_progress.conf
+
+== Stop
+# ^C  (interrupt)
+# ruby lib/upload_progress_server.rb stop
+
+
+== Login
+You can now login with 'admin' and the password you used to make the site.
+
+== Dependencies
+
+=== 1. Original in debian etch (might need to replace jpeg by libjpeg62)
+  # aptitude install build-essential apache2 mysql-server libmagick9-dev gs-gpl libssl-dev gettext libgettext-ruby libreadline5 libreadline5-dev zlib1g-dev libncurses5 libncurses5-dev unzip liburi-perl libjpeg-dev subversion ssh sudo awstats
+
+If you want to enable LateX (PDF generation)
+tetex-bin tetex-extra latex-ucs
+
+For math mode (inline formulas), you will need
+latex dviutils gs-gpl imagemagick   # use 'dvips' if dviutils is not found. Use 'tetex' if 'latex' not found.
+
+For xsl-fo pdf generation
+xsltproc fop # (contrib sources needed on debian for 'fop')
+             # use 'libxslt' if the package 'xsltproc' does not exist for your platform.
+
+# ocaml-base-nox can be replaced by 'ocaml'
+=== 2. To be installed by hand
+ruby1.8.6
+    # wget ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.6.tar.gz
+    # tar xzf ruby-1.8.6.tar.gz
+    # cd ruby-1.8.6
+    # ./configure --with-openssl
+    # make && make install
+rubygems
+    # wget http://rubyforge.org/frs/download.php/45905/rubygems-1.3.1.tgz
+    # tar xzf rubygems-1.3.1.tgz
+    # cd rubygems-1.3.1
+    # ruby setup.rb (if ruby is not found, log out and log back in)
+
+ImageMagick (on Linux)
+    # wget ftp://ftp.imagemagick.org/pub/ImageMagick/ImageMagick.tar.gz
+    # tar xzf ImageMagick.tar.gz
+    # cd ImageMagick-*
+    # ./configure
+    # make && make install
+
+ImageMagick (on mac os X using macports)
+    # sudo port install tiff -macosx imagemagick +q8 +gs +wmf
+
+=== 3. install Gems
+
+You can remove "--no-ri --no-rdoc" if you want the documentation
+    # gem install querybuilder rake hoe gettext mongrel mongrel_cluster rmagick tzinfo syntax mongrel_upload_progress uuidtools daemons json capistrano yamltest ruby-debug --no-ri --no-rdoc
+
+Versions:
+
+ querybuilder >= 0.5.5
+ uuidtools >= 2.x
+
+=== Advised tools
+monit (debian package to monitor your mongrel processes)
+
+
+== Very experimental webDAV
+Should not be used for production.
+
+add this to nodes_controller macros:
+  act_as_railsdav
+  include Zena::WebDav
+
+add this to 'config/environment.rb'
+  require File.join(File.dirname(__FILE__), '../lib/webdav_adapter')
+
+install railsdav
+  # script/plugin install http://svn.liverail.net/svn/plugins/railsdav
+
+install dependencies
+  # sudo gem install mime-types, unicode

data/app/controllers/application_controller.rb

@@ -0,0 +1,3 @@
+class ApplicationController < ActionController::Base
+  include Zena::App
+end

data/app/controllers/comments_controller.rb

@@ -0,0 +1,141 @@
+# FIXME: rewrite !
+class CommentsController < ApplicationController
+  before_filter :find_comment, :except => [:create, :index, :empty_bin]
+  before_filter :find_node_and_discussion, :only => [:create]
+  before_filter :check_is_admin, :only=>[:index, :empty_bin]
+  helper_method :bin_content, :bin_content_size
+  layout :admin_layout
+
+  # TODO: test
+  def reply_to
+    @reply_to   = Comment.find(params[:id])
+    @discussion = @reply_to.discussion
+    @node = secure(Node) { Node.find(@discussion[:node_id]) }
+    if @node && @node.can_comment?
+      @comment = Comment.new(:reply_to=>@reply_to[:id], :discussion_id=>@discussion[:id])
+    else
+      render :nothing=>true
+    end
+  end
+
+
+  def create
+    @discussion.save if @discussion.new_record? && @node.can_comment?
+
+    @comment = secure!(Comment) { Comment.new(filter_attributes(params[:comment])) }
+
+    save_if_not_spam(@comment, params)
+
+    respond_to do |format|
+      if @comment.errors.empty?
+        flash[:notice] = _('Comment was successfully created.')
+        format.html { redirect_to zen_path(@node) } # TODO: add ':sharp => ...'
+        format.js
+        format.xml  { head :created, :location => comment_path(@node) }
+      else
+        format.html { render :action => "new" }
+        format.js
+        format.xml  { render :xml => @comment.errors.to_xml }
+      end
+    end
+  end
+
+  # TODO: test
+  def edit
+    @comment    = Comment.find(params[:id])
+    @discussion = @comment.discussion
+    @node = secure(Node) { Node.find(@discussion[:node_id]) }
+    @edit = true
+    unless @node && @node.can_comment? && @comment[:user_id] == visitor.id
+      render :nothing=>true
+    end
+  end
+
+
+  def update
+    @comment.update_attributes(params[:comment])
+
+    respond_to do |format|
+      format.html { redirect_to zen_path(@node) }
+      format.js
+      format.xml  { head :updated, :location => comment_path(@node) }
+    end
+  end
+
+  # TODO: test
+  def remove
+    @comment    = Comment.find(params[:id])
+    @discussion = @comment.discussion
+    @node = secure(Node) { Node.find(@discussion[:node_id]) }
+    if @node && visitor.is_admin? || @node.can_drive?
+      Node.logger.error "\n\nremoving...\n\n"
+      @comment.remove
+    else
+      render :nothing=>true
+    end
+  end
+
+  # TODO: test
+  def publish
+    @comment    = Comment.find(params[:id])
+    @discussion = @comment.discussion
+    @node = secure_drive(Node) { Node.find(@discussion[:node_id]) }
+    if @node
+      @comment.publish
+    else
+      render :nothing=>true
+    end
+  end
+  ### === admin only
+
+  # TODO:test
+  def index
+    @node = visitor.contact
+    secure!(Node) do
+      # TODO: preload node
+      @comments = Comment.paginate :all,
+                        :select => "comments.*, nodes.zip AS node_zip",
+                        :order => 'status ASC, comments.created_at DESC',
+                        :joins => ['INNER JOIN discussions on discussions.id = comments.discussion_id', 'INNER JOIN nodes on nodes.id = discussions.node_id'],
+                        :conditions=>"status > #{Zena::Status[:rem]} AND (#{secure_scope('nodes')})",
+                        :per_page => 10, :page => params[:page]
+    end
+  end
+
+  # TODO: test
+  def empty_bin
+    bin_content.each do |c|
+      c.destroy
+    end
+    # reset cached bin content
+    @bin_content = nil
+  end
+
+  private
+    def find_comment
+      @comment = secure!(Comment) { Comment.find(params[:id]) }
+      @discussion = @comment.discussion
+      @node = @discussion.node
+    end
+
+    def find_node_and_discussion
+      @node ||= secure!(Node) { Node.find_by_zip(params[:node_id]) }
+      @discussion ||= @node.discussion
+    end
+
+    def bin_content
+      @bin_content ||= secure(Comment) { Comment.find(:all, :conditions=>['status <= ?', Zena::Status[:rem]]) }
+    end
+
+    def bin_content_size
+      secure(Comment)  { Comment.count(:all, :conditions=>['status <= ?', Zena::Status[:rem]]) }
+    end
+
+    def filter_attributes(attributes)
+      attrs = attributes.dup
+      attrs['author_name']   = nil unless visitor.is_anon? # only anonymous user should set 'author_name'
+      attrs['discussion_id'] = @discussion[:id]
+      attrs['user_id']       = visitor[:id]
+      attrs
+    end
+end

data/app/controllers/data_entries_controller.rb

@@ -0,0 +1,81 @@
+class DataEntriesController < ApplicationController
+  before_filter :find_data_entry, :except => [:create]
+  before_filter :check_can_edit
+  layout :admin_layout
+
+  def show
+  end
+
+  def new
+    # TODO
+  end
+
+  def create
+    @data_entry = secure!(Node) { DataEntry.create_data_entry(params['data_entry']) }
+
+    respond_to do |format|
+      if @data_entry.errors.empty?
+        flash[:notice] = _('Data entry was successfully created.')
+        format.html { redirect_to data_entry_url(@data_entry) }
+        format.js
+        format.xml  { head :created, :location => data_entry_url(@data_entry) }
+      else
+        format.html { render :action => "new" }
+        format.js
+        format.xml  { render :xml => @data_entry.errors.to_xml }
+      end
+    end
+  end
+
+  def zafu
+    respond_to do |format|
+      format.js { render :action => 'show' }
+    end
+  end
+
+  # modifications of the node itself (dates, groups, revert editions, etc)
+  def edit
+    respond_to do |format|
+      format.js do
+        # zafu edit
+        render :template => 'data_entries/edit.rjs' # FIXME: this should not be needed. Rails bug ?
+      end
+    end
+  end
+
+  def update
+    @data_entry.update_attributes_with_transformation(params[:data_entry])
+
+    respond_to do |format|
+      format.html # TODO
+      format.js
+    end
+  end
+
+  def destroy
+    @data_entry.destroy
+
+    respond_to do |format|
+      format.html { redirect_to zen_path(@node) }
+      format.js
+      format.xml  { head :ok }
+    end
+  end
+
+  private
+    def find_data_entry
+      return false unless @data_entry = secure(DataEntry) { DataEntry.find_by_id(params[:id]) }
+      @node = @data_entry.node_a
+    end
+
+    def check_can_edit
+      if @data_entry
+        @data_entry.can_write?
+      else
+        unless @node = secure_write(Node) { Node.find_by_zip(params['data_entry']['node_a_id']) }
+          return false
+        end
+      end
+      return true
+    end
+end

data/app/controllers/discussions_controller.rb

@@ -0,0 +1,48 @@
+class DiscussionsController < ApplicationController
+
+  # TODO: test
+  def show
+    get_discussion
+    @comments = @discussion.comments
+  end
+
+  # TODO: test
+  def open
+    get_discussion
+    @discussion.update_attributes( :open => true )
+    render :action=>'update'
+  end
+
+  # TODO: test
+  def close
+    get_discussion
+    @discussion.update_attributes( :open => false )
+    render :action=>'update'
+  end
+
+  # TODO: test
+  def create
+    @node = secure(Node) { Node.find(params[:discussion][:node_id])}
+    unless @node
+      processing_error 'node not found'
+    else
+      @discussion = Discussion.create(params[:discussion])
+    end
+  end
+
+  # TODO: test
+  def remove
+    get_discussion
+    @discussion.destroy
+  end
+
+  private
+
+  def get_discussion
+    @discussion = Discussion.find(params[:id])
+    @node = secure(Node) { Node.find(@discussion[:node_id]) }
+    unless @node
+      processing_error 'node not found'
+    end
+  end
+end

data/app/controllers/documents_controller.rb

@@ -0,0 +1,136 @@
+class DocumentsController < ApplicationController
+  before_filter :find_node, :except => [ :file_form, :upload_progress ]
+
+  skip_before_filter :set_lang,      :only => :upload_progress
+  skip_before_filter :authorize,     :only => :upload_progress
+  skip_before_filter :check_lang,    :only => :upload_progress
+  skip_after_filter  :set_encoding,  :only => :upload_progress
+
+  layout :popup_layout
+
+
+  # add a new document to the current node
+  def new
+    @node = @parent.new_child(:class => Document)
+
+    respond_to do |format|
+      format.html
+    end
+  end
+
+  # show the result of an upload
+  def show
+    respond_to do |format|
+      format.html
+    end
+  end
+
+  # create a document (direct upload). Used when javascript is disabled.
+  def create
+    create_document
+
+    respond_to do |format|
+      if @node.new_record?
+        flash[:error] = _("Upload failed.")
+        format.html { render :action => 'new'}
+      else
+        flash[:notice] = _("Upload succeeded.")
+        format.html { redirect_to document_url(@node[:zip]) }
+      end
+    end
+  end
+
+  # Create a document with upload progression (upload in mongrel)
+  def upload
+    create_document
+
+    responds_to_parent do # execute the redirect in the main window
+      render :update do |page|
+        page.call "UploadProgress.setAsFinished"
+        page.delay(1) do # allow the progress bar fade to complete
+          page.redirect_to document_url(@node[:zip])
+        end
+      end
+    end
+  end
+
+  def upload_progress
+    # mimic apache2 mod_upload_progress
+    #
+    # if (!found) {
+    #   response = apr_psprintf(r->pool, "new Object({ 'state' : 'starting' })");
+    # } else if (err_status >= HTTP_BAD_REQUEST  ) {
+    #   response = apr_psprintf(r->pool, "new Object({ 'state' : 'error', 'status' : %d })", err_status);
+    # } else if (done) {
+    #   response = apr_psprintf(r->pool, "new Object({ 'state' : 'done' })");
+    # } else if ( length == 0 && received == 0 ) {
+    #   response = apr_psprintf(r->pool, "new Object({ 'state' : 'starting' })");
+    # } else {
+    #   response = apr_psprintf(r->pool, "new Object({ 'state' : 'uploading', 'received' : %d, 'size' : %d, 'speed' : %d  })", received, length, speed);
+    # }
+    render :update do |page|
+      begin
+        @status = Mongrel::Uploads.check(params[:"X-Progress-ID"])
+        if @status
+          if @status[:received] != @status[:size]
+            page << "new Object({ 'state' : 'uploading', 'received' : #{@status[:received]}, 'size' : #{@status[:size]} })"
+          else
+            page << "new Object({ 'state' : 'done' })"
+          end
+        else
+          #page << "new Object({ 'state' : 'done' })"
+        end
+      rescue NameError
+        page << "new Object({ 'state' : 'upload in progress..' })"
+      end
+    end
+  end
+
+  # TODO: test
+  # display an upload field.
+  def file_form
+    render :inline=>"<%= link_to_function(_('cancel'), \"['file', 'file_form'].each(Element.toggle);$('file_form').innerHTML = '';\")%><input id='attachment#{params[:uuid]}' name='attachment' class='file' type='file' />"
+  end
+
+  # TODO: test
+  # display the image editor
+  def crop_form
+    respond_to do |format|
+      format.js
+    end
+  end
+
+  protected
+    def find_node
+
+      if params[:id]
+        @node = secure!(Document) { Document.find_by_zip(params[:id]) }
+      elsif parent_zip = (params[:node] || params)[:parent_id]
+        @parent = secure!(Node) { Node.find_by_zip(parent_zip)}
+      else
+        # TODO: a better error message
+        raise ActiveRecord::RecordNotFound
+      end
+    end
+
+    def create_document
+      attrs = params['node']
+      attrs['c_file'] = params['attachment'] if params['attachment']
+      attrs[:klass] ||= 'Document'
+      if attrs['c_file'].kind_of?(String)
+        attrs['c_file'] = StringIO.new(attrs['c_file'])
+        # StringIO
+        if attrs['name'] =~ /^.*\.(\w+)$/ && types = EXT_TO_TYPE[$1]
+          content_type = types[0]
+        else
+          content_type = ''
+        end
+        (class << attrs['c_file']; self; end;).class_eval do
+          define_method(:content_type) { content_type }
+          define_method(:original_filename) { attrs['name'] || 'file.txt' }
+        end
+      end
+      @node = secure!(Document) { Document.create_node(attrs) }
+    end
+
+end