Orbit/app/controllers/application_controller.rb

272 lines
7.5 KiB
Ruby
Raw Normal View History

2009-05-07 16:53:18 +00:00
class ApplicationController < ActionController::Base
protect_from_forgery
2012-09-13 07:53:36 +00:00
include ParserFrontEnd, ParserBackEnd, ApplicationHelper
include OrbitApp::ErrorHandlers::PageErrorHandler
include OrbitApp::ErrorHandlers::ObjectAuthErrorHandler
include OrbitApp::ErrorHandlers::ModuleAppErrorHandler
rescue_from ObjectAuthError, :with => :render_object_auth_error
2013-01-03 02:58:52 +00:00
rescue_from ModuleAppError, :with => :render_module_app_error
rescue_from PageError, :with => :render_page_error
2012-02-19 08:33:22 +00:00
layout :layout_by_resource
2013-01-08 21:18:16 +00:00
helper :admin, :orbit_form
2013-02-26 12:14:03 +00:00
before_filter :set_site, :set_locale, :prepare_for_mobile
2012-01-05 08:20:51 +00:00
2012-11-15 09:23:39 +00:00
helper_attr :site_valid_locales
def set_current_user
2012-08-23 08:05:14 +00:00
User.current = current_or_guest_user
end
2012-01-05 08:20:51 +00:00
def front_end_available(module_app_title='')
app_controller = ModuleApp.first(conditions: {:key => module_app_title} )
2012-01-05 08:20:51 +00:00
unless app_controller.enable_frontend?
2012-01-18 13:34:26 +00:00
render :nothing => true
2012-01-05 08:20:51 +00:00
end
end
def get_all_app_engines
2012-01-10 10:29:11 +00:00
ary = ["vender/plugins/new_blog"]
app_engines = ary.collect{|t|
Rails::Engine.find t
}
app_engines.each{ |t|
# t.
}
end
def flaten_controller
ary=[]
Find.find(File.join(Rails.root , 'vendor/plugins/')) { |name|
require_dependency(name) if /_controller\.rb$/ =~ name
ary << name
}
ary
end
# Find the parent for the given item
def find_parent_item
@parent_item = Item.first(:conditions => { :id => BSON::ObjectId(params[:parent_id]) }) rescue nil
end
2009-06-19 09:31:10 +00:00
def auth_failed_in_backend
#redirect_to admin_dashboards_url
redirect_to root_path
end
2012-09-11 03:30:58 +00:00
# Check if the current_user is admin,if not redirect
def is_admin?
2012-08-23 08:05:14 +00:00
current_or_guest_user.admin? ? true : auth_failed_in_backend
end
2012-09-11 03:30:58 +00:00
# def is_manager?
# @module_app.is_manager?(current_or_guest_user) || is_admin?
# end
2012-08-23 08:05:14 +00:00
2012-09-11 03:30:58 +00:00
# # Check if the current_user is admin
# def is_member?
# if (current_user rescue false)
# return true
# end
# return false
# end
2012-08-23 08:05:14 +00:00
2012-09-11 03:30:58 +00:00
# def is_guest?
# if session[:guest_user_id]
# return true
# end
# return false
# end
def for_admin_only
if is_admin?
true
else
2012-09-12 11:12:50 +00:00
flash[:error] = t("access.denied.not_admin")
auth_failed_in_backend
end
end
def for_app_manager
if is_manager?
true
else
2012-09-12 11:12:50 +00:00
flash[:error] = t("access.denied.app.not_manager")
auth_failed_in_backend
end
end
def for_app_sub_manager
2012-08-23 08:05:14 +00:00
if (@module_app.sub_managing_users.include?(current_or_guest_user) || is_manager?)
true
else
2012-09-12 11:12:50 +00:00
flash[:error] = t("access.denied.app.not_sub_manager")
auth_failed_in_backend
end
end
def for_app_user
2012-08-23 08:05:14 +00:00
if (@module_app.app_auth.auth_users.include?(current_or_guest_user) || for_app_sub_manager )
true
else
2012-09-12 11:12:50 +00:00
flash[:error] = t("access.denied.app.not_authed_user")
auth_failed_in_backend
end
end
def check_object_premission(obj,title)
2012-09-12 11:12:50 +00:00
flash[:error] = t("access.denied.object")
2012-08-23 08:05:14 +00:00
auth_failed_in_backend unless (obj.get_object_auth_by_title(title).auth_users.include?(current_or_guest_user) || is_manager? || is_admin? )
end
# Render the page
2012-05-13 11:32:05 +00:00
def render_page
if @item
2012-06-19 02:49:45 +00:00
respond_to do |format|
format.html { render :text => parse_page_content(@item), :layout => 'page_layout' }
2012-06-19 02:49:45 +00:00
format.rss { render_main_rss }
2013-01-16 00:14:42 +00:00
format.mobile { redirect_to mobile_path(:app => params[:app]) }
2012-06-19 02:49:45 +00:00
end
else
render :text => '404 Not Found'
end
end
def render_share
object_class = params[:model].classify.constantize
@object = object_class.find(params[:id])
2012-08-07 23:46:10 +00:00
module_app = ModuleApp.first(:conditions => {:key => params[:key]})
2012-09-19 07:09:08 +00:00
@item = @object.share_item
#@item = Item.where(module_app_id: module_app.id).all_of("tag" => {"$in" => [nil,'']},"category" => { "$in" => [nil,'']}).first
#binding.pry
@orig_url = "http://#{request.host_with_port}/#{@item.path}?id=#{@object.id}"
render 'shared/render_share', :layout => false
end
2011-08-18 05:43:33 +00:00
protected
# Set I18n.locale
2009-06-19 09:31:10 +00:00
def set_locale
# update session if passed
session[:locale] = params[:locale] if params[:locale]
2013-02-26 12:14:03 +00:00
browser_locale = condition = nil
# check if locale is valid for non site pages
if LIST[:forbidden_item_names].include?(env['PATH_INFO'].split('/')[1].to_s)
condition = VALID_LOCALES.include?(session[:locale])
elsif session[:locale]
condition = @site_in_use_locales.include?(session[:locale])
else
browser_locale = request.env['HTTP_ACCEPT_LANGUAGE'].scan(/^[a-z]{2}/).first rescue nil
condition = @site_in_use_locales.include?(browser_locale)
end
session[:locale] = condition ? (browser_locale || session[:locale]) : I18n.default_locale.to_s
I18n.locale = session[:locale].to_sym
2010-01-11 09:09:50 +00:00
end
2010-03-08 08:04:05 +00:00
# Set the site variables
def set_site
# set site if exist or create site
@site = Site.first || Site.create({:valid_locales => [], :in_use_locales => []})
session[:site] = @site.id
@site_in_use_locales = site_locales_default_head(@site.in_use_locales)
@site_valid_locales = site_locales_default_head(@site.valid_locales)
end
2011-05-13 01:08:42 +00:00
def set_current_item
session[:current_page] = params[:id] || @item.id rescue nil
2011-05-13 01:08:42 +00:00
end
2011-08-18 05:43:33 +00:00
def decrypt_data(encrypted_data, encrypted_key, encrypted_iv)
site = Site.find(session[:site])
if encrypted_data
private_key = OpenSSL::PKey::RSA.new(site.private_key)
cipher = OpenSSL::Cipher.new('aes-256-cbc')
cipher.decrypt
cipher.key = private_key.private_decrypt(encrypted_key)
cipher.iv = private_key.private_decrypt(encrypted_iv)
decrypted_data = cipher.update(encrypted_data)
decrypted_data << cipher.final
else
''
end
end
2011-09-01 01:12:41 +00:00
def get_homepage
2012-05-22 06:45:49 +00:00
Page.root
2011-09-01 01:12:41 +00:00
end
2012-02-19 08:33:22 +00:00
def layout_by_resource
if devise_controller?
"devise"
else
"application"
end
end
def site_locales_default_head(locales)
if locales[0].eql? I18n.locale.to_s
locales
else
a = Array.new(locales)
shift_out = a.delete(I18n.locale.to_s)
[shift_out] + a
end
end
2012-08-23 08:05:14 +00:00
# called (once) when the user logs in, insert any code your application needs
# to hand off from guest_user to current_user.
def logging_in
# For example:
# guest_comments = guest_user.comments.all
# guest_comments.each do |comment|
# comment.user_id = current_user.id
# comment.save
# end
end
2012-06-19 02:49:45 +00:00
def render_main_rss
ret = ''
ret << "/panel/#{@item.module_app.key}/front_end/#{@item.app_frontend_url}.rss"
ret << "/#{params[:id]}" if params[:id] && !params[:id].eql?(@item.id.to_s)
2013-03-05 10:34:41 +00:00
categories_str=params[:category].collect{|t| "category_id[]=#{t}"}.join('&')
tags_str=params[:tag].collect{|t| "tag_id[]=#{t}"}.join('&')
categories_str = "&#{categories_str}" unless categories_str.blank?
tags_str = "&#{tags_str}" unless tags_str.blank?
ret << "?inner=true#{categories_str}#{tags_str}&page_main=#{params[:page_main]}"
2012-06-19 02:49:45 +00:00
redirect_to ret
end
2012-12-19 19:21:50 +00:00
private
def mobile_device?
if session[:mobile_param]
session[:mobile_param] == "1"
else
request.user_agent =~ /iPhone|iPod|Android/
end
end
def prepare_for_mobile
2013-01-06 19:57:36 +00:00
if @site.mobile_on
2013-01-09 07:57:31 +00:00
session[:mobile_param] = if request.path =~ /mobile/
'1'
elsif params[:mobile]
params[:mobile]
else
session[:mobile_param]
end
2013-01-06 19:57:36 +00:00
request.format = :mobile if mobile_device?
end
2012-12-19 19:21:50 +00:00
end
2009-05-07 16:53:18 +00:00
end