2009-01-06 11:49:19 +01:00
|
|
|
class ApplicationController < ActionController::Base
|
2009-01-06 15:45:19 +01:00
|
|
|
|
|
|
|
#before_filter :select_foodcoop
|
|
|
|
before_filter :authenticate, :store_controller
|
2009-03-09 13:02:43 +01:00
|
|
|
after_filter :remove_controller
|
2009-01-06 11:49:19 +01:00
|
|
|
|
|
|
|
# sends a mail, when an error occurs
|
|
|
|
# see plugins/exception_notification
|
|
|
|
include ExceptionNotifiable
|
|
|
|
|
|
|
|
# Returns the controller handling the current request.
|
|
|
|
def self.current
|
|
|
|
Thread.current[:application_controller]
|
|
|
|
end
|
2009-01-15 18:26:37 +01:00
|
|
|
|
|
|
|
# Use this method to call a rake task,,
|
|
|
|
# e.g. to deliver mails after there are created.
|
|
|
|
def call_rake(task, options = {})
|
|
|
|
options[:rails_env] ||= Rails.env
|
|
|
|
args = options.map { |n, v| "#{n.to_s.upcase}='#{v}'" }
|
|
|
|
system "/usr/bin/rake #{task} #{args.join(' ')} --trace 2>&1 >> #{Rails.root}/log/rake.log &"
|
|
|
|
end
|
|
|
|
|
2009-01-06 11:49:19 +01:00
|
|
|
|
|
|
|
protected
|
|
|
|
|
|
|
|
def current_user
|
|
|
|
begin
|
|
|
|
# check if there is a valid session and return the logged-in user (its object)
|
|
|
|
if session['user_and_subdomain']
|
|
|
|
id, subdomain = session['user_and_subdomain'].split
|
|
|
|
# for shared-host installations. check if the cookie-subdomain fits to request.
|
|
|
|
return User.current_user = User.find(id) if request.subdomains.first == subdomain
|
|
|
|
end
|
|
|
|
rescue
|
|
|
|
reset_session
|
|
|
|
flash[:error]= _("An error has occurred. Please login again.")
|
|
|
|
redirect_to :controller => 'login'
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def current_user=(user)
|
|
|
|
session['user_and_subdomain'] = [user.id, request.subdomains.first].join(" ")
|
|
|
|
end
|
|
|
|
|
|
|
|
def return_to
|
|
|
|
session['return_to']
|
|
|
|
end
|
|
|
|
|
|
|
|
def return_to=(uri)
|
|
|
|
session['return_to'] = uri
|
|
|
|
end
|
|
|
|
|
|
|
|
def deny_access
|
|
|
|
self.return_to = request.request_uri
|
2009-02-03 21:14:48 +01:00
|
|
|
redirect_to :controller => '/login', :action => 'denied'
|
2009-01-06 11:49:19 +01:00
|
|
|
return false
|
|
|
|
end
|
|
|
|
|
|
|
|
private
|
|
|
|
|
|
|
|
# selects the foodcoop depending on the subdomain
|
2009-01-06 15:45:19 +01:00
|
|
|
# def select_foodcoop
|
|
|
|
# # get subdomain and set FoodSoft-class-variable (for later config-requests)
|
|
|
|
# FoodSoft.subdomain = request.subdomains.first
|
|
|
|
# # set database-connection
|
|
|
|
# ActiveRecord::Base.establish_connection(FoodSoft.get_database)
|
|
|
|
# end
|
2009-01-06 11:49:19 +01:00
|
|
|
|
|
|
|
# Ensures the HTTP content-type encoding is set to "UTF-8" for "text/html" contents.
|
|
|
|
def ensureUTF8
|
|
|
|
content_type = headers["Content-Type"] || "text/html"
|
|
|
|
if /^text\//.match(content_type)
|
|
|
|
headers["Content-Type"] = "#{content_type}; charset=utf-8"
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def authenticate(role = 'any')
|
|
|
|
# Attempt to retrieve authenticated user from controller instance or session...
|
|
|
|
if !(user = current_user)
|
|
|
|
# No user at all: redirect to login page.
|
|
|
|
self.return_to = request.request_uri
|
|
|
|
redirect_to :controller => 'login'
|
|
|
|
return false
|
|
|
|
else
|
|
|
|
# We have an authenticated user, now check role...
|
|
|
|
# Roles gets the user through his memberships.
|
|
|
|
hasRole = case role
|
|
|
|
when "admin" then user.role_admin?
|
|
|
|
when "finance" then user.role_finance?
|
|
|
|
when "article_meta" then user.role_article_meta?
|
|
|
|
when "suppliers" then user.role_suppliers?
|
|
|
|
when "orders" then user.role_orders?
|
|
|
|
when "any" then true # no role required
|
|
|
|
else false # any unknown role will always fail
|
|
|
|
end
|
|
|
|
if hasRole
|
|
|
|
@current_user = user
|
|
|
|
else
|
|
|
|
deny_access
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def authenticate_admin
|
|
|
|
authenticate('admin')
|
|
|
|
end
|
|
|
|
|
|
|
|
def authenticate_finance
|
|
|
|
authenticate('finance')
|
|
|
|
end
|
|
|
|
|
|
|
|
def authenticate_article_meta
|
|
|
|
authenticate('article_meta')
|
|
|
|
end
|
|
|
|
|
|
|
|
def authenticate_suppliers
|
|
|
|
authenticate('suppliers')
|
|
|
|
end
|
|
|
|
|
|
|
|
def authenticate_orders
|
|
|
|
authenticate('orders')
|
|
|
|
end
|
|
|
|
|
2009-01-15 12:14:01 +01:00
|
|
|
# checks if the current_user is member of given group.
|
|
|
|
# if fails the user will redirected to startpage
|
|
|
|
def authenticate_membership_or_admin
|
|
|
|
@group = Group.find(params[:id])
|
|
|
|
unless @group.member?(@current_user) or @current_user.role_admin?
|
|
|
|
flash[:error] = ERROR_NO_GROUP_MEMBER
|
|
|
|
if request.xml_http_request?
|
|
|
|
render(:update) {|page| page.redirect_to root_path }
|
|
|
|
else
|
|
|
|
redirect_to root_path
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
2009-01-06 11:49:19 +01:00
|
|
|
# Stores this controller instance as a thread local varibale to be accessible from outside ActionController/ActionView.
|
|
|
|
def store_controller
|
|
|
|
Thread.current[:application_controller] = self
|
|
|
|
end
|
|
|
|
|
|
|
|
# Sets the thread local variable that holds a reference to the current controller to nil.
|
|
|
|
def remove_controller
|
|
|
|
Thread.current[:application_controller] = nil
|
|
|
|
end
|
2009-01-08 16:33:27 +01:00
|
|
|
|
2009-01-16 16:19:26 +01:00
|
|
|
# Get supplier in nested resources
|
|
|
|
def find_supplier
|
|
|
|
@supplier = Supplier.find(params[:supplier_id]) if params[:supplier_id]
|
|
|
|
end
|
2009-01-06 11:49:19 +01:00
|
|
|
end
|