The requested changes are too big and content was truncated. Show full diff
@@ -1,607 +1,592 | |||
|
1 | 1 | # Redmine - project management software |
|
2 | 2 | # Copyright (C) 2006-2013 Jean-Philippe Lang |
|
3 | 3 | # |
|
4 | 4 | # This program is free software; you can redistribute it and/or |
|
5 | 5 | # modify it under the terms of the GNU General Public License |
|
6 | 6 | # as published by the Free Software Foundation; either version 2 |
|
7 | 7 | # of the License, or (at your option) any later version. |
|
8 | 8 | # |
|
9 | 9 | # This program is distributed in the hope that it will be useful, |
|
10 | 10 | # but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
11 | 11 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
12 | 12 | # GNU General Public License for more details. |
|
13 | 13 | # |
|
14 | 14 | # You should have received a copy of the GNU General Public License |
|
15 | 15 | # along with this program; if not, write to the Free Software |
|
16 | 16 | # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. |
|
17 | 17 | |
|
18 | 18 | require 'uri' |
|
19 | 19 | require 'cgi' |
|
20 | 20 | |
|
21 | 21 | class Unauthorized < Exception; end |
|
22 | 22 | |
|
23 | 23 | class ApplicationController < ActionController::Base |
|
24 | 24 | include Redmine::I18n |
|
25 | 25 | include Redmine::Pagination |
|
26 | 26 | include RoutesHelper |
|
27 | 27 | helper :routes |
|
28 | 28 | |
|
29 | 29 | class_attribute :accept_api_auth_actions |
|
30 | 30 | class_attribute :accept_rss_auth_actions |
|
31 | 31 | class_attribute :model_object |
|
32 | 32 | |
|
33 | 33 | layout 'base' |
|
34 | 34 | |
|
35 | 35 | protect_from_forgery |
|
36 | 36 | def handle_unverified_request |
|
37 | 37 | super |
|
38 | 38 | cookies.delete(autologin_cookie_name) |
|
39 | 39 | end |
|
40 | 40 | |
|
41 | 41 | before_filter :session_expiration, :user_setup, :check_if_login_required, :set_localization |
|
42 | 42 | |
|
43 | 43 | rescue_from ActionController::InvalidAuthenticityToken, :with => :invalid_authenticity_token |
|
44 | 44 | rescue_from ::Unauthorized, :with => :deny_access |
|
45 | 45 | rescue_from ::ActionView::MissingTemplate, :with => :missing_template |
|
46 | 46 | |
|
47 | 47 | include Redmine::Search::Controller |
|
48 | 48 | include Redmine::MenuManager::MenuController |
|
49 | 49 | helper Redmine::MenuManager::MenuHelper |
|
50 | 50 | |
|
51 | 51 | def session_expiration |
|
52 | 52 | if session[:user_id] |
|
53 | 53 | if session_expired? && !try_to_autologin |
|
54 | 54 | reset_session |
|
55 | 55 | flash[:error] = l(:error_session_expired) |
|
56 | 56 | redirect_to signin_url |
|
57 | 57 | else |
|
58 | 58 | session[:atime] = Time.now.utc.to_i |
|
59 | 59 | end |
|
60 | 60 | end |
|
61 | 61 | end |
|
62 | 62 | |
|
63 | 63 | def session_expired? |
|
64 | 64 | if Setting.session_lifetime? |
|
65 | 65 | unless session[:ctime] && (Time.now.utc.to_i - session[:ctime].to_i <= Setting.session_lifetime.to_i * 60) |
|
66 | 66 | return true |
|
67 | 67 | end |
|
68 | 68 | end |
|
69 | 69 | if Setting.session_timeout? |
|
70 | 70 | unless session[:atime] && (Time.now.utc.to_i - session[:atime].to_i <= Setting.session_timeout.to_i * 60) |
|
71 | 71 | return true |
|
72 | 72 | end |
|
73 | 73 | end |
|
74 | 74 | false |
|
75 | 75 | end |
|
76 | 76 | |
|
77 | 77 | def start_user_session(user) |
|
78 | 78 | session[:user_id] = user.id |
|
79 | 79 | session[:ctime] = Time.now.utc.to_i |
|
80 | 80 | session[:atime] = Time.now.utc.to_i |
|
81 | 81 | end |
|
82 | 82 | |
|
83 | 83 | def user_setup |
|
84 | 84 | # Check the settings cache for each request |
|
85 | 85 | Setting.check_cache |
|
86 | 86 | # Find the current user |
|
87 | 87 | User.current = find_current_user |
|
88 | 88 | logger.info(" Current user: " + (User.current.logged? ? "#{User.current.login} (id=#{User.current.id})" : "anonymous")) if logger |
|
89 | 89 | end |
|
90 | 90 | |
|
91 | 91 | # Returns the current user or nil if no user is logged in |
|
92 | 92 | # and starts a session if needed |
|
93 | 93 | def find_current_user |
|
94 | 94 | user = nil |
|
95 | 95 | unless api_request? |
|
96 | 96 | if session[:user_id] |
|
97 | 97 | # existing session |
|
98 | 98 | user = (User.active.find(session[:user_id]) rescue nil) |
|
99 | 99 | elsif autologin_user = try_to_autologin |
|
100 | 100 | user = autologin_user |
|
101 | 101 | elsif params[:format] == 'atom' && params[:key] && request.get? && accept_rss_auth? |
|
102 | 102 | # RSS key authentication does not start a session |
|
103 | 103 | user = User.find_by_rss_key(params[:key]) |
|
104 | 104 | end |
|
105 | 105 | end |
|
106 | 106 | if user.nil? && Setting.rest_api_enabled? && accept_api_auth? |
|
107 | 107 | if (key = api_key_from_request) |
|
108 | 108 | # Use API key |
|
109 | 109 | user = User.find_by_api_key(key) |
|
110 | 110 | else |
|
111 | 111 | # HTTP Basic, either username/password or API key/random |
|
112 | 112 | authenticate_with_http_basic do |username, password| |
|
113 | 113 | user = User.try_to_login(username, password) || User.find_by_api_key(username) |
|
114 | 114 | end |
|
115 | 115 | end |
|
116 | 116 | # Switch user if requested by an admin user |
|
117 | 117 | if user && user.admin? && (username = api_switch_user_from_request) |
|
118 | 118 | su = User.find_by_login(username) |
|
119 | 119 | if su && su.active? |
|
120 | 120 | logger.info(" User switched by: #{user.login} (id=#{user.id})") if logger |
|
121 | 121 | user = su |
|
122 | 122 | else |
|
123 | 123 | render_error :message => 'Invalid X-Redmine-Switch-User header', :status => 412 |
|
124 | 124 | end |
|
125 | 125 | end |
|
126 | 126 | end |
|
127 | 127 | user |
|
128 | 128 | end |
|
129 | 129 | |
|
130 | 130 | def autologin_cookie_name |
|
131 | 131 | Redmine::Configuration['autologin_cookie_name'].presence || 'autologin' |
|
132 | 132 | end |
|
133 | 133 | |
|
134 | 134 | def try_to_autologin |
|
135 | 135 | if cookies[autologin_cookie_name] && Setting.autologin? |
|
136 | 136 | # auto-login feature starts a new session |
|
137 | 137 | user = User.try_to_autologin(cookies[autologin_cookie_name]) |
|
138 | 138 | if user |
|
139 | 139 | reset_session |
|
140 | 140 | start_user_session(user) |
|
141 | 141 | end |
|
142 | 142 | user |
|
143 | 143 | end |
|
144 | 144 | end |
|
145 | 145 | |
|
146 | 146 | # Sets the logged in user |
|
147 | 147 | def logged_user=(user) |
|
148 | 148 | reset_session |
|
149 | 149 | if user && user.is_a?(User) |
|
150 | 150 | User.current = user |
|
151 | 151 | start_user_session(user) |
|
152 | 152 | else |
|
153 | 153 | User.current = User.anonymous |
|
154 | 154 | end |
|
155 | 155 | end |
|
156 | 156 | |
|
157 | 157 | # Logs out current user |
|
158 | 158 | def logout_user |
|
159 | 159 | if User.current.logged? |
|
160 | 160 | cookies.delete(autologin_cookie_name) |
|
161 | 161 | Token.delete_all(["user_id = ? AND action = ?", User.current.id, 'autologin']) |
|
162 | 162 | self.logged_user = nil |
|
163 | 163 | end |
|
164 | 164 | end |
|
165 | 165 | |
|
166 | 166 | # check if login is globally required to access the application |
|
167 | 167 | def check_if_login_required |
|
168 | 168 | # no check needed if user is already logged in |
|
169 | 169 | return true if User.current.logged? |
|
170 | 170 | require_login if Setting.login_required? |
|
171 | 171 | end |
|
172 | 172 | |
|
173 | 173 | def set_localization |
|
174 | 174 | lang = nil |
|
175 | 175 | if User.current.logged? |
|
176 | 176 | lang = find_language(User.current.language) |
|
177 | 177 | end |
|
178 | 178 | if lang.nil? && request.env['HTTP_ACCEPT_LANGUAGE'] |
|
179 | 179 | accept_lang = parse_qvalues(request.env['HTTP_ACCEPT_LANGUAGE']).first |
|
180 | 180 | if !accept_lang.blank? |
|
181 | 181 | accept_lang = accept_lang.downcase |
|
182 | 182 | lang = find_language(accept_lang) || find_language(accept_lang.split('-').first) |
|
183 | 183 | end |
|
184 | 184 | end |
|
185 | 185 | lang ||= Setting.default_language |
|
186 | 186 | set_language_if_valid(lang) |
|
187 | 187 | end |
|
188 | 188 | |
|
189 | 189 | def require_login |
|
190 | 190 | if !User.current.logged? |
|
191 | 191 | # Extract only the basic url parameters on non-GET requests |
|
192 | 192 | if request.get? |
|
193 | 193 | url = url_for(params) |
|
194 | 194 | else |
|
195 | 195 | url = url_for(:controller => params[:controller], :action => params[:action], :id => params[:id], :project_id => params[:project_id]) |
|
196 | 196 | end |
|
197 | 197 | respond_to do |format| |
|
198 | 198 | format.html { redirect_to :controller => "account", :action => "login", :back_url => url } |
|
199 | 199 | format.atom { redirect_to :controller => "account", :action => "login", :back_url => url } |
|
200 | 200 | format.xml { head :unauthorized, 'WWW-Authenticate' => 'Basic realm="Redmine API"' } |
|
201 | 201 | format.js { head :unauthorized, 'WWW-Authenticate' => 'Basic realm="Redmine API"' } |
|
202 | 202 | format.json { head :unauthorized, 'WWW-Authenticate' => 'Basic realm="Redmine API"' } |
|
203 | 203 | end |
|
204 | 204 | return false |
|
205 | 205 | end |
|
206 | 206 | true |
|
207 | 207 | end |
|
208 | 208 | |
|
209 | 209 | def require_admin |
|
210 | 210 | return unless require_login |
|
211 | 211 | if !User.current.admin? |
|
212 | 212 | render_403 |
|
213 | 213 | return false |
|
214 | 214 | end |
|
215 | 215 | true |
|
216 | 216 | end |
|
217 | 217 | |
|
218 | 218 | def deny_access |
|
219 | 219 | User.current.logged? ? render_403 : require_login |
|
220 | 220 | end |
|
221 | 221 | |
|
222 | 222 | # Authorize the user for the requested action |
|
223 | 223 | def authorize(ctrl = params[:controller], action = params[:action], global = false) |
|
224 | 224 | allowed = User.current.allowed_to?({:controller => ctrl, :action => action}, @project || @projects, :global => global) |
|
225 | 225 | if allowed |
|
226 | 226 | true |
|
227 | 227 | else |
|
228 | 228 | if @project && @project.archived? |
|
229 | 229 | render_403 :message => :notice_not_authorized_archived_project |
|
230 | 230 | else |
|
231 | 231 | deny_access |
|
232 | 232 | end |
|
233 | 233 | end |
|
234 | 234 | end |
|
235 | 235 | |
|
236 | 236 | # Authorize the user for the requested action outside a project |
|
237 | 237 | def authorize_global(ctrl = params[:controller], action = params[:action], global = true) |
|
238 | 238 | authorize(ctrl, action, global) |
|
239 | 239 | end |
|
240 | 240 | |
|
241 | 241 | # Find project of id params[:id] |
|
242 | 242 | def find_project |
|
243 | 243 | @project = Project.find(params[:id]) |
|
244 | 244 | rescue ActiveRecord::RecordNotFound |
|
245 | 245 | render_404 |
|
246 | 246 | end |
|
247 | 247 | |
|
248 | 248 | # Find project of id params[:project_id] |
|
249 | 249 | def find_project_by_project_id |
|
250 | 250 | @project = Project.find(params[:project_id]) |
|
251 | 251 | rescue ActiveRecord::RecordNotFound |
|
252 | 252 | render_404 |
|
253 | 253 | end |
|
254 | 254 | |
|
255 | 255 | # Find a project based on params[:project_id] |
|
256 | 256 | # TODO: some subclasses override this, see about merging their logic |
|
257 | 257 | def find_optional_project |
|
258 | 258 | @project = Project.find(params[:project_id]) unless params[:project_id].blank? |
|
259 | 259 | allowed = User.current.allowed_to?({:controller => params[:controller], :action => params[:action]}, @project, :global => true) |
|
260 | 260 | allowed ? true : deny_access |
|
261 | 261 | rescue ActiveRecord::RecordNotFound |
|
262 | 262 | render_404 |
|
263 | 263 | end |
|
264 | 264 | |
|
265 | 265 | # Finds and sets @project based on @object.project |
|
266 | 266 | def find_project_from_association |
|
267 | 267 | render_404 unless @object.present? |
|
268 | 268 | |
|
269 | 269 | @project = @object.project |
|
270 | 270 | end |
|
271 | 271 | |
|
272 | 272 | def find_model_object |
|
273 | 273 | model = self.class.model_object |
|
274 | 274 | if model |
|
275 | 275 | @object = model.find(params[:id]) |
|
276 | 276 | self.instance_variable_set('@' + controller_name.singularize, @object) if @object |
|
277 | 277 | end |
|
278 | 278 | rescue ActiveRecord::RecordNotFound |
|
279 | 279 | render_404 |
|
280 | 280 | end |
|
281 | 281 | |
|
282 | 282 | def self.model_object(model) |
|
283 | 283 | self.model_object = model |
|
284 | 284 | end |
|
285 | 285 | |
|
286 | 286 | # Find the issue whose id is the :id parameter |
|
287 | 287 | # Raises a Unauthorized exception if the issue is not visible |
|
288 | 288 | def find_issue |
|
289 | 289 | # Issue.visible.find(...) can not be used to redirect user to the login form |
|
290 | 290 | # if the issue actually exists but requires authentication |
|
291 | 291 | @issue = Issue.find(params[:id]) |
|
292 | 292 | raise Unauthorized unless @issue.visible? |
|
293 | 293 | @project = @issue.project |
|
294 | 294 | rescue ActiveRecord::RecordNotFound |
|
295 | 295 | render_404 |
|
296 | 296 | end |
|
297 | 297 | |
|
298 | 298 | # Find issues with a single :id param or :ids array param |
|
299 | 299 | # Raises a Unauthorized exception if one of the issues is not visible |
|
300 | 300 | def find_issues |
|
301 | 301 | @issues = Issue.find_all_by_id(params[:id] || params[:ids]) |
|
302 | 302 | raise ActiveRecord::RecordNotFound if @issues.empty? |
|
303 | 303 | raise Unauthorized unless @issues.all?(&:visible?) |
|
304 | 304 | @projects = @issues.collect(&:project).compact.uniq |
|
305 | 305 | @project = @projects.first if @projects.size == 1 |
|
306 | 306 | rescue ActiveRecord::RecordNotFound |
|
307 | 307 | render_404 |
|
308 | 308 | end |
|
309 | 309 | |
|
310 | 310 | def find_attachments |
|
311 | 311 | if (attachments = params[:attachments]).present? |
|
312 | 312 | att = attachments.values.collect do |attachment| |
|
313 | 313 | Attachment.find_by_token( attachment[:token] ) if attachment[:token].present? |
|
314 | 314 | end |
|
315 | 315 | att.compact! |
|
316 | 316 | end |
|
317 | 317 | @attachments = att || [] |
|
318 | 318 | end |
|
319 | 319 | |
|
320 | 320 | # make sure that the user is a member of the project (or admin) if project is private |
|
321 | 321 | # used as a before_filter for actions that do not require any particular permission on the project |
|
322 | 322 | def check_project_privacy |
|
323 | 323 | if @project && !@project.archived? |
|
324 | 324 | if @project.visible? |
|
325 | 325 | true |
|
326 | 326 | else |
|
327 | 327 | deny_access |
|
328 | 328 | end |
|
329 | 329 | else |
|
330 | 330 | @project = nil |
|
331 | 331 | render_404 |
|
332 | 332 | false |
|
333 | 333 | end |
|
334 | 334 | end |
|
335 | 335 | |
|
336 | 336 | def back_url |
|
337 | 337 | url = params[:back_url] |
|
338 | 338 | if url.nil? && referer = request.env['HTTP_REFERER'] |
|
339 | 339 | url = CGI.unescape(referer.to_s) |
|
340 | 340 | end |
|
341 | 341 | url |
|
342 | 342 | end |
|
343 | 343 | |
|
344 | 344 | def redirect_back_or_default(default) |
|
345 | 345 | back_url = params[:back_url].to_s |
|
346 | 346 | if back_url.present? |
|
347 | 347 | begin |
|
348 | 348 | uri = URI.parse(back_url) |
|
349 | 349 | # do not redirect user to another host or to the login or register page |
|
350 | 350 | if (uri.relative? || (uri.host == request.host)) && !uri.path.match(%r{/(login|account/register)}) |
|
351 | 351 | redirect_to(back_url) |
|
352 | 352 | return |
|
353 | 353 | end |
|
354 | 354 | rescue URI::InvalidURIError |
|
355 | 355 | logger.warn("Could not redirect to invalid URL #{back_url}") |
|
356 | 356 | # redirect to default |
|
357 | 357 | end |
|
358 | 358 | end |
|
359 | 359 | redirect_to default |
|
360 | 360 | false |
|
361 | 361 | end |
|
362 | 362 | |
|
363 | 363 | # Redirects to the request referer if present, redirects to args or call block otherwise. |
|
364 | 364 | def redirect_to_referer_or(*args, &block) |
|
365 | 365 | redirect_to :back |
|
366 | 366 | rescue ::ActionController::RedirectBackError |
|
367 | 367 | if args.any? |
|
368 | 368 | redirect_to *args |
|
369 | 369 | elsif block_given? |
|
370 | 370 | block.call |
|
371 | 371 | else |
|
372 | 372 | raise "#redirect_to_referer_or takes arguments or a block" |
|
373 | 373 | end |
|
374 | 374 | end |
|
375 | 375 | |
|
376 | 376 | def render_403(options={}) |
|
377 | 377 | @project = nil |
|
378 | 378 | render_error({:message => :notice_not_authorized, :status => 403}.merge(options)) |
|
379 | 379 | return false |
|
380 | 380 | end |
|
381 | 381 | |
|
382 | 382 | def render_404(options={}) |
|
383 | 383 | render_error({:message => :notice_file_not_found, :status => 404}.merge(options)) |
|
384 | 384 | return false |
|
385 | 385 | end |
|
386 | 386 | |
|
387 | 387 | # Renders an error response |
|
388 | 388 | def render_error(arg) |
|
389 | 389 | arg = {:message => arg} unless arg.is_a?(Hash) |
|
390 | 390 | |
|
391 | 391 | @message = arg[:message] |
|
392 | 392 | @message = l(@message) if @message.is_a?(Symbol) |
|
393 | 393 | @status = arg[:status] || 500 |
|
394 | 394 | |
|
395 | 395 | respond_to do |format| |
|
396 | 396 | format.html { |
|
397 | 397 | render :template => 'common/error', :layout => use_layout, :status => @status |
|
398 | 398 | } |
|
399 | 399 | format.any { head @status } |
|
400 | 400 | end |
|
401 | 401 | end |
|
402 | 402 | |
|
403 | 403 | # Handler for ActionView::MissingTemplate exception |
|
404 | 404 | def missing_template |
|
405 | 405 | logger.warn "Missing template, responding with 404" |
|
406 | 406 | @project = nil |
|
407 | 407 | render_404 |
|
408 | 408 | end |
|
409 | 409 | |
|
410 | 410 | # Filter for actions that provide an API response |
|
411 | 411 | # but have no HTML representation for non admin users |
|
412 | 412 | def require_admin_or_api_request |
|
413 | 413 | return true if api_request? |
|
414 | 414 | if User.current.admin? |
|
415 | 415 | true |
|
416 | 416 | elsif User.current.logged? |
|
417 | 417 | render_error(:status => 406) |
|
418 | 418 | else |
|
419 | 419 | deny_access |
|
420 | 420 | end |
|
421 | 421 | end |
|
422 | 422 | |
|
423 | 423 | # Picks which layout to use based on the request |
|
424 | 424 | # |
|
425 | 425 | # @return [boolean, string] name of the layout to use or false for no layout |
|
426 | 426 | def use_layout |
|
427 | 427 | request.xhr? ? false : 'base' |
|
428 | 428 | end |
|
429 | 429 | |
|
430 | 430 | def invalid_authenticity_token |
|
431 | 431 | if api_request? |
|
432 | 432 | logger.error "Form authenticity token is missing or is invalid. API calls must include a proper Content-type header (text/xml or text/json)." |
|
433 | 433 | end |
|
434 | 434 | render_error "Invalid form authenticity token." |
|
435 | 435 | end |
|
436 | 436 | |
|
437 | 437 | def render_feed(items, options={}) |
|
438 | 438 | @items = items || [] |
|
439 | 439 | @items.sort! {|x,y| y.event_datetime <=> x.event_datetime } |
|
440 | 440 | @items = @items.slice(0, Setting.feeds_limit.to_i) |
|
441 | 441 | @title = options[:title] || Setting.app_title |
|
442 | 442 | render :template => "common/feed", :formats => [:atom], :layout => false, |
|
443 | 443 | :content_type => 'application/atom+xml' |
|
444 | 444 | end |
|
445 | 445 | |
|
446 | 446 | def self.accept_rss_auth(*actions) |
|
447 | 447 | if actions.any? |
|
448 | 448 | self.accept_rss_auth_actions = actions |
|
449 | 449 | else |
|
450 | 450 | self.accept_rss_auth_actions || [] |
|
451 | 451 | end |
|
452 | 452 | end |
|
453 | 453 | |
|
454 | 454 | def accept_rss_auth?(action=action_name) |
|
455 | 455 | self.class.accept_rss_auth.include?(action.to_sym) |
|
456 | 456 | end |
|
457 | 457 | |
|
458 | 458 | def self.accept_api_auth(*actions) |
|
459 | 459 | if actions.any? |
|
460 | 460 | self.accept_api_auth_actions = actions |
|
461 | 461 | else |
|
462 | 462 | self.accept_api_auth_actions || [] |
|
463 | 463 | end |
|
464 | 464 | end |
|
465 | 465 | |
|
466 | 466 | def accept_api_auth?(action=action_name) |
|
467 | 467 | self.class.accept_api_auth.include?(action.to_sym) |
|
468 | 468 | end |
|
469 | 469 | |
|
470 | 470 | # Returns the number of objects that should be displayed |
|
471 | 471 | # on the paginated list |
|
472 | 472 | def per_page_option |
|
473 | 473 | per_page = nil |
|
474 | 474 | if params[:per_page] && Setting.per_page_options_array.include?(params[:per_page].to_s.to_i) |
|
475 | 475 | per_page = params[:per_page].to_s.to_i |
|
476 | 476 | session[:per_page] = per_page |
|
477 | 477 | elsif session[:per_page] |
|
478 | 478 | per_page = session[:per_page] |
|
479 | 479 | else |
|
480 | 480 | per_page = Setting.per_page_options_array.first || 25 |
|
481 | 481 | end |
|
482 | 482 | per_page |
|
483 | 483 | end |
|
484 | 484 | |
|
485 | 485 | # Returns offset and limit used to retrieve objects |
|
486 | 486 | # for an API response based on offset, limit and page parameters |
|
487 | 487 | def api_offset_and_limit(options=params) |
|
488 | 488 | if options[:offset].present? |
|
489 | 489 | offset = options[:offset].to_i |
|
490 | 490 | if offset < 0 |
|
491 | 491 | offset = 0 |
|
492 | 492 | end |
|
493 | 493 | end |
|
494 | 494 | limit = options[:limit].to_i |
|
495 | 495 | if limit < 1 |
|
496 | 496 | limit = 25 |
|
497 | 497 | elsif limit > 100 |
|
498 | 498 | limit = 100 |
|
499 | 499 | end |
|
500 | 500 | if offset.nil? && options[:page].present? |
|
501 | 501 | offset = (options[:page].to_i - 1) * limit |
|
502 | 502 | offset = 0 if offset < 0 |
|
503 | 503 | end |
|
504 | 504 | offset ||= 0 |
|
505 | 505 | |
|
506 | 506 | [offset, limit] |
|
507 | 507 | end |
|
508 | 508 | |
|
509 | 509 | # qvalues http header parser |
|
510 | 510 | # code taken from webrick |
|
511 | 511 | def parse_qvalues(value) |
|
512 | 512 | tmp = [] |
|
513 | 513 | if value |
|
514 | 514 | parts = value.split(/,\s*/) |
|
515 | 515 | parts.each {|part| |
|
516 | 516 | if m = %r{^([^\s,]+?)(?:;\s*q=(\d+(?:\.\d+)?))?$}.match(part) |
|
517 | 517 | val = m[1] |
|
518 | 518 | q = (m[2] or 1).to_f |
|
519 | 519 | tmp.push([val, q]) |
|
520 | 520 | end |
|
521 | 521 | } |
|
522 | 522 | tmp = tmp.sort_by{|val, q| -q} |
|
523 | 523 | tmp.collect!{|val, q| val} |
|
524 | 524 | end |
|
525 | 525 | return tmp |
|
526 | 526 | rescue |
|
527 | 527 | nil |
|
528 | 528 | end |
|
529 | 529 | |
|
530 | 530 | # Returns a string that can be used as filename value in Content-Disposition header |
|
531 | 531 | def filename_for_content_disposition(name) |
|
532 | 532 | request.env['HTTP_USER_AGENT'] =~ %r{MSIE} ? ERB::Util.url_encode(name) : name |
|
533 | 533 | end |
|
534 | 534 | |
|
535 | 535 | def api_request? |
|
536 | 536 | %w(xml json).include? params[:format] |
|
537 | 537 | end |
|
538 | 538 | |
|
539 | 539 | # Returns the API key present in the request |
|
540 | 540 | def api_key_from_request |
|
541 | 541 | if params[:key].present? |
|
542 | 542 | params[:key].to_s |
|
543 | 543 | elsif request.headers["X-Redmine-API-Key"].present? |
|
544 | 544 | request.headers["X-Redmine-API-Key"].to_s |
|
545 | 545 | end |
|
546 | 546 | end |
|
547 | 547 | |
|
548 | 548 | # Returns the API 'switch user' value if present |
|
549 | 549 | def api_switch_user_from_request |
|
550 | 550 | request.headers["X-Redmine-Switch-User"].to_s.presence |
|
551 | 551 | end |
|
552 | 552 | |
|
553 | 553 | # Renders a warning flash if obj has unsaved attachments |
|
554 | 554 | def render_attachment_warning_if_needed(obj) |
|
555 | 555 | flash[:warning] = l(:warning_attachments_not_saved, obj.unsaved_attachments.size) if obj.unsaved_attachments.present? |
|
556 | 556 | end |
|
557 | 557 | |
|
558 | # Sets the `flash` notice or error based the number of issues that did not save | |
|
559 | # | |
|
560 | # @param [Array, Issue] issues all of the saved and unsaved Issues | |
|
561 | # @param [Array, Integer] unsaved_issue_ids the issue ids that were not saved | |
|
562 | def set_flash_from_bulk_issue_save(issues, unsaved_issue_ids) | |
|
563 | if unsaved_issue_ids.empty? | |
|
564 | flash[:notice] = l(:notice_successful_update) unless issues.empty? | |
|
565 | else | |
|
566 | flash[:error] = l(:notice_failed_to_save_issues, | |
|
567 | :count => unsaved_issue_ids.size, | |
|
568 | :total => issues.size, | |
|
569 | :ids => '#' + unsaved_issue_ids.join(', #')) | |
|
570 | end | |
|
571 | end | |
|
572 | ||
|
573 | 558 | # Rescues an invalid query statement. Just in case... |
|
574 | 559 | def query_statement_invalid(exception) |
|
575 | 560 | logger.error "Query::StatementInvalid: #{exception.message}" if logger |
|
576 | 561 | session.delete(:query) |
|
577 | 562 | sort_clear if respond_to?(:sort_clear) |
|
578 | 563 | render_error "An error occurred while executing the query and has been logged. Please report this error to your Redmine administrator." |
|
579 | 564 | end |
|
580 | 565 | |
|
581 | 566 | # Renders a 200 response for successfull updates or deletions via the API |
|
582 | 567 | def render_api_ok |
|
583 | 568 | render_api_head :ok |
|
584 | 569 | end |
|
585 | 570 | |
|
586 | 571 | # Renders a head API response |
|
587 | 572 | def render_api_head(status) |
|
588 | 573 | # #head would return a response body with one space |
|
589 | 574 | render :text => '', :status => status, :layout => nil |
|
590 | 575 | end |
|
591 | 576 | |
|
592 | 577 | # Renders API response on validation failure |
|
593 | 578 | def render_validation_errors(objects) |
|
594 | 579 | if objects.is_a?(Array) |
|
595 | 580 | @error_messages = objects.map {|object| object.errors.full_messages}.flatten |
|
596 | 581 | else |
|
597 | 582 | @error_messages = objects.errors.full_messages |
|
598 | 583 | end |
|
599 | 584 | render :template => 'common/error_messages.api', :status => :unprocessable_entity, :layout => nil |
|
600 | 585 | end |
|
601 | 586 | |
|
602 | 587 | # Overrides #_include_layout? so that #render with no arguments |
|
603 | 588 | # doesn't use the layout for api requests |
|
604 | 589 | def _include_layout?(*args) |
|
605 | 590 | api_request? ? false : super |
|
606 | 591 | end |
|
607 | 592 | end |
@@ -1,442 +1,447 | |||
|
1 | 1 | # Redmine - project management software |
|
2 | 2 | # Copyright (C) 2006-2013 Jean-Philippe Lang |
|
3 | 3 | # |
|
4 | 4 | # This program is free software; you can redistribute it and/or |
|
5 | 5 | # modify it under the terms of the GNU General Public License |
|
6 | 6 | # as published by the Free Software Foundation; either version 2 |
|
7 | 7 | # of the License, or (at your option) any later version. |
|
8 | 8 | # |
|
9 | 9 | # This program is distributed in the hope that it will be useful, |
|
10 | 10 | # but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
11 | 11 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
12 | 12 | # GNU General Public License for more details. |
|
13 | 13 | # |
|
14 | 14 | # You should have received a copy of the GNU General Public License |
|
15 | 15 | # along with this program; if not, write to the Free Software |
|
16 | 16 | # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. |
|
17 | 17 | |
|
18 | 18 | class IssuesController < ApplicationController |
|
19 | 19 | menu_item :new_issue, :only => [:new, :create] |
|
20 | 20 | default_search_scope :issues |
|
21 | 21 | |
|
22 | 22 | before_filter :find_issue, :only => [:show, :edit, :update] |
|
23 | 23 | before_filter :find_issues, :only => [:bulk_edit, :bulk_update, :destroy] |
|
24 | 24 | before_filter :find_project, :only => [:new, :create, :update_form] |
|
25 | 25 | before_filter :authorize, :except => [:index] |
|
26 | 26 | before_filter :find_optional_project, :only => [:index] |
|
27 | 27 | before_filter :check_for_default_issue_status, :only => [:new, :create] |
|
28 | 28 | before_filter :build_new_issue_from_params, :only => [:new, :create, :update_form] |
|
29 | 29 | accept_rss_auth :index, :show |
|
30 | 30 | accept_api_auth :index, :show, :create, :update, :destroy |
|
31 | 31 | |
|
32 | 32 | rescue_from Query::StatementInvalid, :with => :query_statement_invalid |
|
33 | 33 | |
|
34 | 34 | helper :journals |
|
35 | 35 | helper :projects |
|
36 | 36 | include ProjectsHelper |
|
37 | 37 | helper :custom_fields |
|
38 | 38 | include CustomFieldsHelper |
|
39 | 39 | helper :issue_relations |
|
40 | 40 | include IssueRelationsHelper |
|
41 | 41 | helper :watchers |
|
42 | 42 | include WatchersHelper |
|
43 | 43 | helper :attachments |
|
44 | 44 | include AttachmentsHelper |
|
45 | 45 | helper :queries |
|
46 | 46 | include QueriesHelper |
|
47 | 47 | helper :repositories |
|
48 | 48 | include RepositoriesHelper |
|
49 | 49 | helper :sort |
|
50 | 50 | include SortHelper |
|
51 | 51 | include IssuesHelper |
|
52 | 52 | helper :timelog |
|
53 | 53 | include Redmine::Export::PDF |
|
54 | 54 | |
|
55 | 55 | def index |
|
56 | 56 | retrieve_query |
|
57 | 57 | sort_init(@query.sort_criteria.empty? ? [['id', 'desc']] : @query.sort_criteria) |
|
58 | 58 | sort_update(@query.sortable_columns) |
|
59 | 59 | @query.sort_criteria = sort_criteria.to_a |
|
60 | 60 | |
|
61 | 61 | if @query.valid? |
|
62 | 62 | case params[:format] |
|
63 | 63 | when 'csv', 'pdf' |
|
64 | 64 | @limit = Setting.issues_export_limit.to_i |
|
65 | 65 | when 'atom' |
|
66 | 66 | @limit = Setting.feeds_limit.to_i |
|
67 | 67 | when 'xml', 'json' |
|
68 | 68 | @offset, @limit = api_offset_and_limit |
|
69 | 69 | else |
|
70 | 70 | @limit = per_page_option |
|
71 | 71 | end |
|
72 | 72 | |
|
73 | 73 | @issue_count = @query.issue_count |
|
74 | 74 | @issue_pages = Paginator.new @issue_count, @limit, params['page'] |
|
75 | 75 | @offset ||= @issue_pages.offset |
|
76 | 76 | @issues = @query.issues(:include => [:assigned_to, :tracker, :priority, :category, :fixed_version], |
|
77 | 77 | :order => sort_clause, |
|
78 | 78 | :offset => @offset, |
|
79 | 79 | :limit => @limit) |
|
80 | 80 | @issue_count_by_group = @query.issue_count_by_group |
|
81 | 81 | |
|
82 | 82 | respond_to do |format| |
|
83 | 83 | format.html { render :template => 'issues/index', :layout => !request.xhr? } |
|
84 | 84 | format.api { |
|
85 | 85 | Issue.load_visible_relations(@issues) if include_in_api_response?('relations') |
|
86 | 86 | } |
|
87 | 87 | format.atom { render_feed(@issues, :title => "#{@project || Setting.app_title}: #{l(:label_issue_plural)}") } |
|
88 | 88 | format.csv { send_data(query_to_csv(@issues, @query, params), :type => 'text/csv; header=present', :filename => 'issues.csv') } |
|
89 | 89 | format.pdf { send_data(issues_to_pdf(@issues, @project, @query), :type => 'application/pdf', :filename => 'issues.pdf') } |
|
90 | 90 | end |
|
91 | 91 | else |
|
92 | 92 | respond_to do |format| |
|
93 | 93 | format.html { render(:template => 'issues/index', :layout => !request.xhr?) } |
|
94 | 94 | format.any(:atom, :csv, :pdf) { render(:nothing => true) } |
|
95 | 95 | format.api { render_validation_errors(@query) } |
|
96 | 96 | end |
|
97 | 97 | end |
|
98 | 98 | rescue ActiveRecord::RecordNotFound |
|
99 | 99 | render_404 |
|
100 | 100 | end |
|
101 | 101 | |
|
102 | 102 | def show |
|
103 | 103 | @journals = @issue.journals.includes(:user, :details).reorder("#{Journal.table_name}.id ASC").all |
|
104 | 104 | @journals.each_with_index {|j,i| j.indice = i+1} |
|
105 | 105 | @journals.reject!(&:private_notes?) unless User.current.allowed_to?(:view_private_notes, @issue.project) |
|
106 | 106 | @journals.reverse! if User.current.wants_comments_in_reverse_order? |
|
107 | 107 | |
|
108 | 108 | @changesets = @issue.changesets.visible.all |
|
109 | 109 | @changesets.reverse! if User.current.wants_comments_in_reverse_order? |
|
110 | 110 | |
|
111 | 111 | @relations = @issue.relations.select {|r| r.other_issue(@issue) && r.other_issue(@issue).visible? } |
|
112 | 112 | @allowed_statuses = @issue.new_statuses_allowed_to(User.current) |
|
113 | 113 | @edit_allowed = User.current.allowed_to?(:edit_issues, @project) |
|
114 | 114 | @priorities = IssuePriority.active |
|
115 | 115 | @time_entry = TimeEntry.new(:issue => @issue, :project => @issue.project) |
|
116 | 116 | @relation = IssueRelation.new |
|
117 | 117 | |
|
118 | 118 | respond_to do |format| |
|
119 | 119 | format.html { |
|
120 | 120 | retrieve_previous_and_next_issue_ids |
|
121 | 121 | render :template => 'issues/show' |
|
122 | 122 | } |
|
123 | 123 | format.api |
|
124 | 124 | format.atom { render :template => 'journals/index', :layout => false, :content_type => 'application/atom+xml' } |
|
125 | 125 | format.pdf { |
|
126 | 126 | pdf = issue_to_pdf(@issue, :journals => @journals) |
|
127 | 127 | send_data(pdf, :type => 'application/pdf', :filename => "#{@project.identifier}-#{@issue.id}.pdf") |
|
128 | 128 | } |
|
129 | 129 | end |
|
130 | 130 | end |
|
131 | 131 | |
|
132 | 132 | # Add a new issue |
|
133 | 133 | # The new issue will be created from an existing one if copy_from parameter is given |
|
134 | 134 | def new |
|
135 | 135 | respond_to do |format| |
|
136 | 136 | format.html { render :action => 'new', :layout => !request.xhr? } |
|
137 | 137 | end |
|
138 | 138 | end |
|
139 | 139 | |
|
140 | 140 | def create |
|
141 | 141 | call_hook(:controller_issues_new_before_save, { :params => params, :issue => @issue }) |
|
142 | 142 | @issue.save_attachments(params[:attachments] || (params[:issue] && params[:issue][:uploads])) |
|
143 | 143 | if @issue.save |
|
144 | 144 | call_hook(:controller_issues_new_after_save, { :params => params, :issue => @issue}) |
|
145 | 145 | respond_to do |format| |
|
146 | 146 | format.html { |
|
147 | 147 | render_attachment_warning_if_needed(@issue) |
|
148 | 148 | flash[:notice] = l(:notice_issue_successful_create, :id => view_context.link_to("##{@issue.id}", issue_path(@issue), :title => @issue.subject)) |
|
149 | 149 | if params[:continue] |
|
150 | 150 | attrs = {:tracker_id => @issue.tracker, :parent_issue_id => @issue.parent_issue_id}.reject {|k,v| v.nil?} |
|
151 | 151 | redirect_to new_project_issue_path(@issue.project, :issue => attrs) |
|
152 | 152 | else |
|
153 | 153 | redirect_to issue_path(@issue) |
|
154 | 154 | end |
|
155 | 155 | } |
|
156 | 156 | format.api { render :action => 'show', :status => :created, :location => issue_url(@issue) } |
|
157 | 157 | end |
|
158 | 158 | return |
|
159 | 159 | else |
|
160 | 160 | respond_to do |format| |
|
161 | 161 | format.html { render :action => 'new' } |
|
162 | 162 | format.api { render_validation_errors(@issue) } |
|
163 | 163 | end |
|
164 | 164 | end |
|
165 | 165 | end |
|
166 | 166 | |
|
167 | 167 | def edit |
|
168 | 168 | return unless update_issue_from_params |
|
169 | 169 | |
|
170 | 170 | respond_to do |format| |
|
171 | 171 | format.html { } |
|
172 | 172 | format.xml { } |
|
173 | 173 | end |
|
174 | 174 | end |
|
175 | 175 | |
|
176 | 176 | def update |
|
177 | 177 | return unless update_issue_from_params |
|
178 | 178 | @issue.save_attachments(params[:attachments] || (params[:issue] && params[:issue][:uploads])) |
|
179 | 179 | saved = false |
|
180 | 180 | begin |
|
181 | 181 | saved = @issue.save_issue_with_child_records(params, @time_entry) |
|
182 | 182 | rescue ActiveRecord::StaleObjectError |
|
183 | 183 | @conflict = true |
|
184 | 184 | if params[:last_journal_id] |
|
185 | 185 | @conflict_journals = @issue.journals_after(params[:last_journal_id]).all |
|
186 | 186 | @conflict_journals.reject!(&:private_notes?) unless User.current.allowed_to?(:view_private_notes, @issue.project) |
|
187 | 187 | end |
|
188 | 188 | end |
|
189 | 189 | |
|
190 | 190 | if saved |
|
191 | 191 | render_attachment_warning_if_needed(@issue) |
|
192 | 192 | flash[:notice] = l(:notice_successful_update) unless @issue.current_journal.new_record? |
|
193 | 193 | |
|
194 | 194 | respond_to do |format| |
|
195 | 195 | format.html { redirect_back_or_default issue_path(@issue) } |
|
196 | 196 | format.api { render_api_ok } |
|
197 | 197 | end |
|
198 | 198 | else |
|
199 | 199 | respond_to do |format| |
|
200 | 200 | format.html { render :action => 'edit' } |
|
201 | 201 | format.api { render_validation_errors(@issue) } |
|
202 | 202 | end |
|
203 | 203 | end |
|
204 | 204 | end |
|
205 | 205 | |
|
206 | 206 | # Updates the issue form when changing the project, status or tracker |
|
207 | 207 | # on issue creation/update |
|
208 | 208 | def update_form |
|
209 | 209 | end |
|
210 | 210 | |
|
211 | 211 | # Bulk edit/copy a set of issues |
|
212 | 212 | def bulk_edit |
|
213 | 213 | @issues.sort! |
|
214 | 214 | @copy = params[:copy].present? |
|
215 | 215 | @notes = params[:notes] |
|
216 | 216 | |
|
217 | 217 | if User.current.allowed_to?(:move_issues, @projects) |
|
218 | 218 | @allowed_projects = Issue.allowed_target_projects_on_move |
|
219 | 219 | if params[:issue] |
|
220 | 220 | @target_project = @allowed_projects.detect {|p| p.id.to_s == params[:issue][:project_id].to_s} |
|
221 | 221 | if @target_project |
|
222 | 222 | target_projects = [@target_project] |
|
223 | 223 | end |
|
224 | 224 | end |
|
225 | 225 | end |
|
226 | 226 | target_projects ||= @projects |
|
227 | 227 | |
|
228 | 228 | if @copy |
|
229 | 229 | @available_statuses = [IssueStatus.default] |
|
230 | 230 | else |
|
231 | 231 | @available_statuses = @issues.map(&:new_statuses_allowed_to).reduce(:&) |
|
232 | 232 | end |
|
233 | 233 | @custom_fields = target_projects.map{|p|p.all_issue_custom_fields}.reduce(:&) |
|
234 | 234 | @assignables = target_projects.map(&:assignable_users).reduce(:&) |
|
235 | 235 | @trackers = target_projects.map(&:trackers).reduce(:&) |
|
236 | 236 | @versions = target_projects.map {|p| p.shared_versions.open}.reduce(:&) |
|
237 | 237 | @categories = target_projects.map {|p| p.issue_categories}.reduce(:&) |
|
238 | 238 | if @copy |
|
239 | 239 | @attachments_present = @issues.detect {|i| i.attachments.any?}.present? |
|
240 | 240 | @subtasks_present = @issues.detect {|i| !i.leaf?}.present? |
|
241 | 241 | end |
|
242 | 242 | |
|
243 | 243 | @safe_attributes = @issues.map(&:safe_attribute_names).reduce(:&) |
|
244 | render :layout => false if request.xhr? | |
|
245 | 244 | end |
|
246 | 245 | |
|
247 | 246 | def bulk_update |
|
248 | 247 | @issues.sort! |
|
249 | 248 | @copy = params[:copy].present? |
|
250 | 249 | attributes = parse_params_for_bulk_issue_attributes(params) |
|
251 | 250 | |
|
252 |
unsaved_issue |
|
|
253 |
|
|
|
251 | unsaved_issues = [] | |
|
252 | saved_issues = [] | |
|
254 | 253 | |
|
255 | 254 | if @copy && params[:copy_subtasks].present? |
|
256 | 255 | # Descendant issues will be copied with the parent task |
|
257 | 256 | # Don't copy them twice |
|
258 | 257 | @issues.reject! {|issue| @issues.detect {|other| issue.is_descendant_of?(other)}} |
|
259 | 258 | end |
|
260 | 259 | |
|
261 | 260 | @issues.each do |issue| |
|
262 | 261 | issue.reload |
|
263 | 262 | if @copy |
|
264 | 263 | issue = issue.copy({}, |
|
265 | 264 | :attachments => params[:copy_attachments].present?, |
|
266 | 265 | :subtasks => params[:copy_subtasks].present? |
|
267 | 266 | ) |
|
268 | 267 | end |
|
269 | 268 | journal = issue.init_journal(User.current, params[:notes]) |
|
270 | 269 | issue.safe_attributes = attributes |
|
271 | 270 | call_hook(:controller_issues_bulk_edit_before_save, { :params => params, :issue => issue }) |
|
272 | 271 | if issue.save |
|
273 |
|
|
|
272 | saved_issues << issue | |
|
274 | 273 | else |
|
275 | logger.info "issue could not be updated or copied: #{issue.errors.full_messages}" if logger && logger.info | |
|
276 | # Keep unsaved issue ids to display them in flash error | |
|
277 | unsaved_issue_ids << issue.id | |
|
274 | unsaved_issues << issue | |
|
278 | 275 | end |
|
279 | 276 | end |
|
280 | set_flash_from_bulk_issue_save(@issues, unsaved_issue_ids) | |
|
281 | 277 | |
|
278 | if unsaved_issues.empty? | |
|
279 | flash[:notice] = l(:notice_successful_update) unless saved_issues.empty? | |
|
282 | 280 | if params[:follow] |
|
283 |
if @issues.size == 1 && |
|
|
284 |
redirect_to issue_path( |
|
|
285 |
elsif |
|
|
286 |
redirect_to project_issues_path( |
|
|
281 | if @issues.size == 1 && saved_issues.size == 1 | |
|
282 | redirect_to issue_path(saved_issues.first) | |
|
283 | elsif saved_issues.map(&:project).uniq.size == 1 | |
|
284 | redirect_to project_issues_path(saved_issues.map(&:project).first) | |
|
287 | 285 | end |
|
288 | 286 | else |
|
289 | 287 | redirect_back_or_default _project_issues_path(@project) |
|
290 | 288 | end |
|
289 | else | |
|
290 | @saved_issues = @issues | |
|
291 | @unsaved_issues = unsaved_issues | |
|
292 | @issues = Issue.visible.find_all_by_id(@unsaved_issues.map(&:id)) | |
|
293 | bulk_edit | |
|
294 | render :action => 'bulk_edit' | |
|
295 | end | |
|
291 | 296 | end |
|
292 | 297 | |
|
293 | 298 | def destroy |
|
294 | 299 | @hours = TimeEntry.sum(:hours, :conditions => ['issue_id IN (?)', @issues]).to_f |
|
295 | 300 | if @hours > 0 |
|
296 | 301 | case params[:todo] |
|
297 | 302 | when 'destroy' |
|
298 | 303 | # nothing to do |
|
299 | 304 | when 'nullify' |
|
300 | 305 | TimeEntry.update_all('issue_id = NULL', ['issue_id IN (?)', @issues]) |
|
301 | 306 | when 'reassign' |
|
302 | 307 | reassign_to = @project.issues.find_by_id(params[:reassign_to_id]) |
|
303 | 308 | if reassign_to.nil? |
|
304 | 309 | flash.now[:error] = l(:error_issue_not_found_in_project) |
|
305 | 310 | return |
|
306 | 311 | else |
|
307 | 312 | TimeEntry.update_all("issue_id = #{reassign_to.id}", ['issue_id IN (?)', @issues]) |
|
308 | 313 | end |
|
309 | 314 | else |
|
310 | 315 | # display the destroy form if it's a user request |
|
311 | 316 | return unless api_request? |
|
312 | 317 | end |
|
313 | 318 | end |
|
314 | 319 | @issues.each do |issue| |
|
315 | 320 | begin |
|
316 | 321 | issue.reload.destroy |
|
317 | 322 | rescue ::ActiveRecord::RecordNotFound # raised by #reload if issue no longer exists |
|
318 | 323 | # nothing to do, issue was already deleted (eg. by a parent) |
|
319 | 324 | end |
|
320 | 325 | end |
|
321 | 326 | respond_to do |format| |
|
322 | 327 | format.html { redirect_back_or_default _project_issues_path(@project) } |
|
323 | 328 | format.api { render_api_ok } |
|
324 | 329 | end |
|
325 | 330 | end |
|
326 | 331 | |
|
327 | 332 | private |
|
328 | 333 | |
|
329 | 334 | def find_project |
|
330 | 335 | project_id = params[:project_id] || (params[:issue] && params[:issue][:project_id]) |
|
331 | 336 | @project = Project.find(project_id) |
|
332 | 337 | rescue ActiveRecord::RecordNotFound |
|
333 | 338 | render_404 |
|
334 | 339 | end |
|
335 | 340 | |
|
336 | 341 | def retrieve_previous_and_next_issue_ids |
|
337 | 342 | retrieve_query_from_session |
|
338 | 343 | if @query |
|
339 | 344 | sort_init(@query.sort_criteria.empty? ? [['id', 'desc']] : @query.sort_criteria) |
|
340 | 345 | sort_update(@query.sortable_columns, 'issues_index_sort') |
|
341 | 346 | limit = 500 |
|
342 | 347 | issue_ids = @query.issue_ids(:order => sort_clause, :limit => (limit + 1), :include => [:assigned_to, :tracker, :priority, :category, :fixed_version]) |
|
343 | 348 | if (idx = issue_ids.index(@issue.id)) && idx < limit |
|
344 | 349 | if issue_ids.size < 500 |
|
345 | 350 | @issue_position = idx + 1 |
|
346 | 351 | @issue_count = issue_ids.size |
|
347 | 352 | end |
|
348 | 353 | @prev_issue_id = issue_ids[idx - 1] if idx > 0 |
|
349 | 354 | @next_issue_id = issue_ids[idx + 1] if idx < (issue_ids.size - 1) |
|
350 | 355 | end |
|
351 | 356 | end |
|
352 | 357 | end |
|
353 | 358 | |
|
354 | 359 | # Used by #edit and #update to set some common instance variables |
|
355 | 360 | # from the params |
|
356 | 361 | # TODO: Refactor, not everything in here is needed by #edit |
|
357 | 362 | def update_issue_from_params |
|
358 | 363 | @edit_allowed = User.current.allowed_to?(:edit_issues, @project) |
|
359 | 364 | @time_entry = TimeEntry.new(:issue => @issue, :project => @issue.project) |
|
360 | 365 | @time_entry.attributes = params[:time_entry] |
|
361 | 366 | |
|
362 | 367 | @issue.init_journal(User.current) |
|
363 | 368 | |
|
364 | 369 | issue_attributes = params[:issue] |
|
365 | 370 | if issue_attributes && params[:conflict_resolution] |
|
366 | 371 | case params[:conflict_resolution] |
|
367 | 372 | when 'overwrite' |
|
368 | 373 | issue_attributes = issue_attributes.dup |
|
369 | 374 | issue_attributes.delete(:lock_version) |
|
370 | 375 | when 'add_notes' |
|
371 | 376 | issue_attributes = issue_attributes.slice(:notes) |
|
372 | 377 | when 'cancel' |
|
373 | 378 | redirect_to issue_path(@issue) |
|
374 | 379 | return false |
|
375 | 380 | end |
|
376 | 381 | end |
|
377 | 382 | @issue.safe_attributes = issue_attributes |
|
378 | 383 | @priorities = IssuePriority.active |
|
379 | 384 | @allowed_statuses = @issue.new_statuses_allowed_to(User.current) |
|
380 | 385 | true |
|
381 | 386 | end |
|
382 | 387 | |
|
383 | 388 | # TODO: Refactor, lots of extra code in here |
|
384 | 389 | # TODO: Changing tracker on an existing issue should not trigger this |
|
385 | 390 | def build_new_issue_from_params |
|
386 | 391 | if params[:id].blank? |
|
387 | 392 | @issue = Issue.new |
|
388 | 393 | if params[:copy_from] |
|
389 | 394 | begin |
|
390 | 395 | @copy_from = Issue.visible.find(params[:copy_from]) |
|
391 | 396 | @copy_attachments = params[:copy_attachments].present? || request.get? |
|
392 | 397 | @copy_subtasks = params[:copy_subtasks].present? || request.get? |
|
393 | 398 | @issue.copy_from(@copy_from, :attachments => @copy_attachments, :subtasks => @copy_subtasks) |
|
394 | 399 | rescue ActiveRecord::RecordNotFound |
|
395 | 400 | render_404 |
|
396 | 401 | return |
|
397 | 402 | end |
|
398 | 403 | end |
|
399 | 404 | @issue.project = @project |
|
400 | 405 | else |
|
401 | 406 | @issue = @project.issues.visible.find(params[:id]) |
|
402 | 407 | end |
|
403 | 408 | |
|
404 | 409 | @issue.project = @project |
|
405 | 410 | @issue.author ||= User.current |
|
406 | 411 | # Tracker must be set before custom field values |
|
407 | 412 | @issue.tracker ||= @project.trackers.find((params[:issue] && params[:issue][:tracker_id]) || params[:tracker_id] || :first) |
|
408 | 413 | if @issue.tracker.nil? |
|
409 | 414 | render_error l(:error_no_tracker_in_project) |
|
410 | 415 | return false |
|
411 | 416 | end |
|
412 | 417 | @issue.start_date ||= Date.today if Setting.default_issue_start_date_to_creation_date? |
|
413 | 418 | @issue.safe_attributes = params[:issue] |
|
414 | 419 | |
|
415 | 420 | @priorities = IssuePriority.active |
|
416 | 421 | @allowed_statuses = @issue.new_statuses_allowed_to(User.current, true) |
|
417 | 422 | @available_watchers = (@issue.project.users.sort + @issue.watcher_users).uniq |
|
418 | 423 | end |
|
419 | 424 | |
|
420 | 425 | def check_for_default_issue_status |
|
421 | 426 | if IssueStatus.default.nil? |
|
422 | 427 | render_error l(:error_no_default_issue_status) |
|
423 | 428 | return false |
|
424 | 429 | end |
|
425 | 430 | end |
|
426 | 431 | |
|
427 | 432 | def parse_params_for_bulk_issue_attributes(params) |
|
428 | 433 | attributes = (params[:issue] || {}).reject {|k,v| v.blank?} |
|
429 | 434 | attributes.keys.each {|k| attributes[k] = '' if attributes[k] == 'none'} |
|
430 | 435 | if custom = attributes[:custom_field_values] |
|
431 | 436 | custom.reject! {|k,v| v.blank?} |
|
432 | 437 | custom.keys.each do |k| |
|
433 | 438 | if custom[k].is_a?(Array) |
|
434 | 439 | custom[k] << '' if custom[k].delete('__none__') |
|
435 | 440 | else |
|
436 | 441 | custom[k] = '' if custom[k] == '__none__' |
|
437 | 442 | end |
|
438 | 443 | end |
|
439 | 444 | end |
|
440 | 445 | attributes |
|
441 | 446 | end |
|
442 | 447 | end |
@@ -1,378 +1,392 | |||
|
1 | 1 | # encoding: utf-8 |
|
2 | 2 | # |
|
3 | 3 | # Redmine - project management software |
|
4 | 4 | # Copyright (C) 2006-2013 Jean-Philippe Lang |
|
5 | 5 | # |
|
6 | 6 | # This program is free software; you can redistribute it and/or |
|
7 | 7 | # modify it under the terms of the GNU General Public License |
|
8 | 8 | # as published by the Free Software Foundation; either version 2 |
|
9 | 9 | # of the License, or (at your option) any later version. |
|
10 | 10 | # |
|
11 | 11 | # This program is distributed in the hope that it will be useful, |
|
12 | 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
13 | 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
14 | 14 | # GNU General Public License for more details. |
|
15 | 15 | # |
|
16 | 16 | # You should have received a copy of the GNU General Public License |
|
17 | 17 | # along with this program; if not, write to the Free Software |
|
18 | 18 | # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. |
|
19 | 19 | |
|
20 | 20 | module IssuesHelper |
|
21 | 21 | include ApplicationHelper |
|
22 | 22 | |
|
23 | 23 | def issue_list(issues, &block) |
|
24 | 24 | ancestors = [] |
|
25 | 25 | issues.each do |issue| |
|
26 | 26 | while (ancestors.any? && !issue.is_descendant_of?(ancestors.last)) |
|
27 | 27 | ancestors.pop |
|
28 | 28 | end |
|
29 | 29 | yield issue, ancestors.size |
|
30 | 30 | ancestors << issue unless issue.leaf? |
|
31 | 31 | end |
|
32 | 32 | end |
|
33 | 33 | |
|
34 | 34 | # Renders a HTML/CSS tooltip |
|
35 | 35 | # |
|
36 | 36 | # To use, a trigger div is needed. This is a div with the class of "tooltip" |
|
37 | 37 | # that contains this method wrapped in a span with the class of "tip" |
|
38 | 38 | # |
|
39 | 39 | # <div class="tooltip"><%= link_to_issue(issue) %> |
|
40 | 40 | # <span class="tip"><%= render_issue_tooltip(issue) %></span> |
|
41 | 41 | # </div> |
|
42 | 42 | # |
|
43 | 43 | def render_issue_tooltip(issue) |
|
44 | 44 | @cached_label_status ||= l(:field_status) |
|
45 | 45 | @cached_label_start_date ||= l(:field_start_date) |
|
46 | 46 | @cached_label_due_date ||= l(:field_due_date) |
|
47 | 47 | @cached_label_assigned_to ||= l(:field_assigned_to) |
|
48 | 48 | @cached_label_priority ||= l(:field_priority) |
|
49 | 49 | @cached_label_project ||= l(:field_project) |
|
50 | 50 | |
|
51 | 51 | link_to_issue(issue) + "<br /><br />".html_safe + |
|
52 | 52 | "<strong>#{@cached_label_project}</strong>: #{link_to_project(issue.project)}<br />".html_safe + |
|
53 | 53 | "<strong>#{@cached_label_status}</strong>: #{h(issue.status.name)}<br />".html_safe + |
|
54 | 54 | "<strong>#{@cached_label_start_date}</strong>: #{format_date(issue.start_date)}<br />".html_safe + |
|
55 | 55 | "<strong>#{@cached_label_due_date}</strong>: #{format_date(issue.due_date)}<br />".html_safe + |
|
56 | 56 | "<strong>#{@cached_label_assigned_to}</strong>: #{h(issue.assigned_to)}<br />".html_safe + |
|
57 | 57 | "<strong>#{@cached_label_priority}</strong>: #{h(issue.priority.name)}".html_safe |
|
58 | 58 | end |
|
59 | 59 | |
|
60 | 60 | def issue_heading(issue) |
|
61 | 61 | h("#{issue.tracker} ##{issue.id}") |
|
62 | 62 | end |
|
63 | 63 | |
|
64 | 64 | def render_issue_subject_with_tree(issue) |
|
65 | 65 | s = '' |
|
66 | 66 | ancestors = issue.root? ? [] : issue.ancestors.visible.all |
|
67 | 67 | ancestors.each do |ancestor| |
|
68 | 68 | s << '<div>' + content_tag('p', link_to_issue(ancestor, :project => (issue.project_id != ancestor.project_id))) |
|
69 | 69 | end |
|
70 | 70 | s << '<div>' |
|
71 | 71 | subject = h(issue.subject) |
|
72 | 72 | if issue.is_private? |
|
73 | 73 | subject = content_tag('span', l(:field_is_private), :class => 'private') + ' ' + subject |
|
74 | 74 | end |
|
75 | 75 | s << content_tag('h3', subject) |
|
76 | 76 | s << '</div>' * (ancestors.size + 1) |
|
77 | 77 | s.html_safe |
|
78 | 78 | end |
|
79 | 79 | |
|
80 | 80 | def render_descendants_tree(issue) |
|
81 | 81 | s = '<form><table class="list issues">' |
|
82 | 82 | issue_list(issue.descendants.visible.sort_by(&:lft)) do |child, level| |
|
83 | 83 | css = "issue issue-#{child.id} hascontextmenu" |
|
84 | 84 | css << " idnt idnt-#{level}" if level > 0 |
|
85 | 85 | s << content_tag('tr', |
|
86 | 86 | content_tag('td', check_box_tag("ids[]", child.id, false, :id => nil), :class => 'checkbox') + |
|
87 | 87 | content_tag('td', link_to_issue(child, :truncate => 60, :project => (issue.project_id != child.project_id)), :class => 'subject') + |
|
88 | 88 | content_tag('td', h(child.status)) + |
|
89 | 89 | content_tag('td', link_to_user(child.assigned_to)) + |
|
90 | 90 | content_tag('td', progress_bar(child.done_ratio, :width => '80px')), |
|
91 | 91 | :class => css) |
|
92 | 92 | end |
|
93 | 93 | s << '</table></form>' |
|
94 | 94 | s.html_safe |
|
95 | 95 | end |
|
96 | 96 | |
|
97 | # Returns an array of error messages for bulk edited issues | |
|
98 | def bulk_edit_error_messages(issues) | |
|
99 | messages = {} | |
|
100 | issues.each do |issue| | |
|
101 | issue.errors.full_messages.each do |message| | |
|
102 | messages[message] ||= [] | |
|
103 | messages[message] << issue | |
|
104 | end | |
|
105 | end | |
|
106 | messages.map { |message, issues| | |
|
107 | "#{message}: " + issues.map {|i| "##{i.id}"}.join(', ') | |
|
108 | } | |
|
109 | end | |
|
110 | ||
|
97 | 111 | # Returns a link for adding a new subtask to the given issue |
|
98 | 112 | def link_to_new_subtask(issue) |
|
99 | 113 | attrs = { |
|
100 | 114 | :tracker_id => issue.tracker, |
|
101 | 115 | :parent_issue_id => issue |
|
102 | 116 | } |
|
103 | 117 | link_to(l(:button_add), new_project_issue_path(issue.project, :issue => attrs)) |
|
104 | 118 | end |
|
105 | 119 | |
|
106 | 120 | class IssueFieldsRows |
|
107 | 121 | include ActionView::Helpers::TagHelper |
|
108 | 122 | |
|
109 | 123 | def initialize |
|
110 | 124 | @left = [] |
|
111 | 125 | @right = [] |
|
112 | 126 | end |
|
113 | 127 | |
|
114 | 128 | def left(*args) |
|
115 | 129 | args.any? ? @left << cells(*args) : @left |
|
116 | 130 | end |
|
117 | 131 | |
|
118 | 132 | def right(*args) |
|
119 | 133 | args.any? ? @right << cells(*args) : @right |
|
120 | 134 | end |
|
121 | 135 | |
|
122 | 136 | def size |
|
123 | 137 | @left.size > @right.size ? @left.size : @right.size |
|
124 | 138 | end |
|
125 | 139 | |
|
126 | 140 | def to_html |
|
127 | 141 | html = ''.html_safe |
|
128 | 142 | blank = content_tag('th', '') + content_tag('td', '') |
|
129 | 143 | size.times do |i| |
|
130 | 144 | left = @left[i] || blank |
|
131 | 145 | right = @right[i] || blank |
|
132 | 146 | html << content_tag('tr', left + right) |
|
133 | 147 | end |
|
134 | 148 | html |
|
135 | 149 | end |
|
136 | 150 | |
|
137 | 151 | def cells(label, text, options={}) |
|
138 | 152 | content_tag('th', "#{label}:", options) + content_tag('td', text, options) |
|
139 | 153 | end |
|
140 | 154 | end |
|
141 | 155 | |
|
142 | 156 | def issue_fields_rows |
|
143 | 157 | r = IssueFieldsRows.new |
|
144 | 158 | yield r |
|
145 | 159 | r.to_html |
|
146 | 160 | end |
|
147 | 161 | |
|
148 | 162 | def render_custom_fields_rows(issue) |
|
149 | 163 | return if issue.custom_field_values.empty? |
|
150 | 164 | ordered_values = [] |
|
151 | 165 | half = (issue.custom_field_values.size / 2.0).ceil |
|
152 | 166 | half.times do |i| |
|
153 | 167 | ordered_values << issue.custom_field_values[i] |
|
154 | 168 | ordered_values << issue.custom_field_values[i + half] |
|
155 | 169 | end |
|
156 | 170 | s = "<tr>\n" |
|
157 | 171 | n = 0 |
|
158 | 172 | ordered_values.compact.each do |value| |
|
159 | 173 | s << "</tr>\n<tr>\n" if n > 0 && (n % 2) == 0 |
|
160 | 174 | s << "\t<th>#{ h(value.custom_field.name) }:</th><td>#{ simple_format_without_paragraph(h(show_value(value))) }</td>\n" |
|
161 | 175 | n += 1 |
|
162 | 176 | end |
|
163 | 177 | s << "</tr>\n" |
|
164 | 178 | s.html_safe |
|
165 | 179 | end |
|
166 | 180 | |
|
167 | 181 | def issues_destroy_confirmation_message(issues) |
|
168 | 182 | issues = [issues] unless issues.is_a?(Array) |
|
169 | 183 | message = l(:text_issues_destroy_confirmation) |
|
170 | 184 | descendant_count = issues.inject(0) {|memo, i| memo += (i.right - i.left - 1)/2} |
|
171 | 185 | if descendant_count > 0 |
|
172 | 186 | issues.each do |issue| |
|
173 | 187 | next if issue.root? |
|
174 | 188 | issues.each do |other_issue| |
|
175 | 189 | descendant_count -= 1 if issue.is_descendant_of?(other_issue) |
|
176 | 190 | end |
|
177 | 191 | end |
|
178 | 192 | if descendant_count > 0 |
|
179 | 193 | message << "\n" + l(:text_issues_destroy_descendants_confirmation, :count => descendant_count) |
|
180 | 194 | end |
|
181 | 195 | end |
|
182 | 196 | message |
|
183 | 197 | end |
|
184 | 198 | |
|
185 | 199 | def sidebar_queries |
|
186 | 200 | unless @sidebar_queries |
|
187 | 201 | @sidebar_queries = IssueQuery.visible. |
|
188 | 202 | order("#{Query.table_name}.name ASC"). |
|
189 | 203 | # Project specific queries and global queries |
|
190 | 204 | where(@project.nil? ? ["project_id IS NULL"] : ["project_id IS NULL OR project_id = ?", @project.id]). |
|
191 | 205 | all |
|
192 | 206 | end |
|
193 | 207 | @sidebar_queries |
|
194 | 208 | end |
|
195 | 209 | |
|
196 | 210 | def query_links(title, queries) |
|
197 | 211 | return '' if queries.empty? |
|
198 | 212 | # links to #index on issues/show |
|
199 | 213 | url_params = controller_name == 'issues' ? {:controller => 'issues', :action => 'index', :project_id => @project} : params |
|
200 | 214 | |
|
201 | 215 | content_tag('h3', title) + "\n" + |
|
202 | 216 | content_tag('ul', |
|
203 | 217 | queries.collect {|query| |
|
204 | 218 | css = 'query' |
|
205 | 219 | css << ' selected' if query == @query |
|
206 | 220 | content_tag('li', link_to(query.name, url_params.merge(:query_id => query), :class => css)) |
|
207 | 221 | }.join("\n").html_safe, |
|
208 | 222 | :class => 'queries' |
|
209 | 223 | ) + "\n" |
|
210 | 224 | end |
|
211 | 225 | |
|
212 | 226 | def render_sidebar_queries |
|
213 | 227 | out = ''.html_safe |
|
214 | 228 | out << query_links(l(:label_my_queries), sidebar_queries.reject(&:is_public?)) |
|
215 | 229 | out << query_links(l(:label_query_plural), sidebar_queries.select(&:is_public?)) |
|
216 | 230 | out |
|
217 | 231 | end |
|
218 | 232 | |
|
219 | 233 | # Returns the textual representation of a journal details |
|
220 | 234 | # as an array of strings |
|
221 | 235 | def details_to_strings(details, no_html=false, options={}) |
|
222 | 236 | options[:only_path] = (options[:only_path] == false ? false : true) |
|
223 | 237 | strings = [] |
|
224 | 238 | values_by_field = {} |
|
225 | 239 | details.each do |detail| |
|
226 | 240 | if detail.property == 'cf' |
|
227 | 241 | field_id = detail.prop_key |
|
228 | 242 | field = CustomField.find_by_id(field_id) |
|
229 | 243 | if field && field.multiple? |
|
230 | 244 | values_by_field[field_id] ||= {:added => [], :deleted => []} |
|
231 | 245 | if detail.old_value |
|
232 | 246 | values_by_field[field_id][:deleted] << detail.old_value |
|
233 | 247 | end |
|
234 | 248 | if detail.value |
|
235 | 249 | values_by_field[field_id][:added] << detail.value |
|
236 | 250 | end |
|
237 | 251 | next |
|
238 | 252 | end |
|
239 | 253 | end |
|
240 | 254 | strings << show_detail(detail, no_html, options) |
|
241 | 255 | end |
|
242 | 256 | values_by_field.each do |field_id, changes| |
|
243 | 257 | detail = JournalDetail.new(:property => 'cf', :prop_key => field_id) |
|
244 | 258 | if changes[:added].any? |
|
245 | 259 | detail.value = changes[:added] |
|
246 | 260 | strings << show_detail(detail, no_html, options) |
|
247 | 261 | elsif changes[:deleted].any? |
|
248 | 262 | detail.old_value = changes[:deleted] |
|
249 | 263 | strings << show_detail(detail, no_html, options) |
|
250 | 264 | end |
|
251 | 265 | end |
|
252 | 266 | strings |
|
253 | 267 | end |
|
254 | 268 | |
|
255 | 269 | # Returns the textual representation of a single journal detail |
|
256 | 270 | def show_detail(detail, no_html=false, options={}) |
|
257 | 271 | multiple = false |
|
258 | 272 | case detail.property |
|
259 | 273 | when 'attr' |
|
260 | 274 | field = detail.prop_key.to_s.gsub(/\_id$/, "") |
|
261 | 275 | label = l(("field_" + field).to_sym) |
|
262 | 276 | case detail.prop_key |
|
263 | 277 | when 'due_date', 'start_date' |
|
264 | 278 | value = format_date(detail.value.to_date) if detail.value |
|
265 | 279 | old_value = format_date(detail.old_value.to_date) if detail.old_value |
|
266 | 280 | |
|
267 | 281 | when 'project_id', 'status_id', 'tracker_id', 'assigned_to_id', |
|
268 | 282 | 'priority_id', 'category_id', 'fixed_version_id' |
|
269 | 283 | value = find_name_by_reflection(field, detail.value) |
|
270 | 284 | old_value = find_name_by_reflection(field, detail.old_value) |
|
271 | 285 | |
|
272 | 286 | when 'estimated_hours' |
|
273 | 287 | value = "%0.02f" % detail.value.to_f unless detail.value.blank? |
|
274 | 288 | old_value = "%0.02f" % detail.old_value.to_f unless detail.old_value.blank? |
|
275 | 289 | |
|
276 | 290 | when 'parent_id' |
|
277 | 291 | label = l(:field_parent_issue) |
|
278 | 292 | value = "##{detail.value}" unless detail.value.blank? |
|
279 | 293 | old_value = "##{detail.old_value}" unless detail.old_value.blank? |
|
280 | 294 | |
|
281 | 295 | when 'is_private' |
|
282 | 296 | value = l(detail.value == "0" ? :general_text_No : :general_text_Yes) unless detail.value.blank? |
|
283 | 297 | old_value = l(detail.old_value == "0" ? :general_text_No : :general_text_Yes) unless detail.old_value.blank? |
|
284 | 298 | end |
|
285 | 299 | when 'cf' |
|
286 | 300 | custom_field = CustomField.find_by_id(detail.prop_key) |
|
287 | 301 | if custom_field |
|
288 | 302 | multiple = custom_field.multiple? |
|
289 | 303 | label = custom_field.name |
|
290 | 304 | value = format_value(detail.value, custom_field.field_format) if detail.value |
|
291 | 305 | old_value = format_value(detail.old_value, custom_field.field_format) if detail.old_value |
|
292 | 306 | end |
|
293 | 307 | when 'attachment' |
|
294 | 308 | label = l(:label_attachment) |
|
295 | 309 | end |
|
296 | 310 | call_hook(:helper_issues_show_detail_after_setting, |
|
297 | 311 | {:detail => detail, :label => label, :value => value, :old_value => old_value }) |
|
298 | 312 | |
|
299 | 313 | label ||= detail.prop_key |
|
300 | 314 | value ||= detail.value |
|
301 | 315 | old_value ||= detail.old_value |
|
302 | 316 | |
|
303 | 317 | unless no_html |
|
304 | 318 | label = content_tag('strong', label) |
|
305 | 319 | old_value = content_tag("i", h(old_value)) if detail.old_value |
|
306 | 320 | old_value = content_tag("del", old_value) if detail.old_value and detail.value.blank? |
|
307 | 321 | if detail.property == 'attachment' && !value.blank? && atta = Attachment.find_by_id(detail.prop_key) |
|
308 | 322 | # Link to the attachment if it has not been removed |
|
309 | 323 | value = link_to_attachment(atta, :download => true, :only_path => options[:only_path]) |
|
310 | 324 | if options[:only_path] != false && atta.is_text? |
|
311 | 325 | value += link_to( |
|
312 | 326 | image_tag('magnifier.png'), |
|
313 | 327 | :controller => 'attachments', :action => 'show', |
|
314 | 328 | :id => atta, :filename => atta.filename |
|
315 | 329 | ) |
|
316 | 330 | end |
|
317 | 331 | else |
|
318 | 332 | value = content_tag("i", h(value)) if value |
|
319 | 333 | end |
|
320 | 334 | end |
|
321 | 335 | |
|
322 | 336 | if detail.property == 'attr' && detail.prop_key == 'description' |
|
323 | 337 | s = l(:text_journal_changed_no_detail, :label => label) |
|
324 | 338 | unless no_html |
|
325 | 339 | diff_link = link_to 'diff', |
|
326 | 340 | {:controller => 'journals', :action => 'diff', :id => detail.journal_id, |
|
327 | 341 | :detail_id => detail.id, :only_path => options[:only_path]}, |
|
328 | 342 | :title => l(:label_view_diff) |
|
329 | 343 | s << " (#{ diff_link })" |
|
330 | 344 | end |
|
331 | 345 | s.html_safe |
|
332 | 346 | elsif detail.value.present? |
|
333 | 347 | case detail.property |
|
334 | 348 | when 'attr', 'cf' |
|
335 | 349 | if detail.old_value.present? |
|
336 | 350 | l(:text_journal_changed, :label => label, :old => old_value, :new => value).html_safe |
|
337 | 351 | elsif multiple |
|
338 | 352 | l(:text_journal_added, :label => label, :value => value).html_safe |
|
339 | 353 | else |
|
340 | 354 | l(:text_journal_set_to, :label => label, :value => value).html_safe |
|
341 | 355 | end |
|
342 | 356 | when 'attachment' |
|
343 | 357 | l(:text_journal_added, :label => label, :value => value).html_safe |
|
344 | 358 | end |
|
345 | 359 | else |
|
346 | 360 | l(:text_journal_deleted, :label => label, :old => old_value).html_safe |
|
347 | 361 | end |
|
348 | 362 | end |
|
349 | 363 | |
|
350 | 364 | # Find the name of an associated record stored in the field attribute |
|
351 | 365 | def find_name_by_reflection(field, id) |
|
352 | 366 | unless id.present? |
|
353 | 367 | return nil |
|
354 | 368 | end |
|
355 | 369 | association = Issue.reflect_on_association(field.to_sym) |
|
356 | 370 | if association |
|
357 | 371 | record = association.class_name.constantize.find_by_id(id) |
|
358 | 372 | if record |
|
359 | 373 | record.name.force_encoding('UTF-8') if record.name.respond_to?(:force_encoding) |
|
360 | 374 | return record.name |
|
361 | 375 | end |
|
362 | 376 | end |
|
363 | 377 | end |
|
364 | 378 | |
|
365 | 379 | # Renders issue children recursively |
|
366 | 380 | def render_api_issue_children(issue, api) |
|
367 | 381 | return if issue.leaf? |
|
368 | 382 | api.array :children do |
|
369 | 383 | issue.children.each do |child| |
|
370 | 384 | api.issue(:id => child.id) do |
|
371 | 385 | api.tracker(:id => child.tracker_id, :name => child.tracker.name) unless child.tracker.nil? |
|
372 | 386 | api.subject child.subject |
|
373 | 387 | render_api_issue_children(child, api) |
|
374 | 388 | end |
|
375 | 389 | end |
|
376 | 390 | end |
|
377 | 391 | end |
|
378 | 392 | end |
@@ -1,150 +1,166 | |||
|
1 | 1 | <h2><%= @copy ? l(:button_copy) : l(:label_bulk_edit_selected_issues) %></h2> |
|
2 | 2 | |
|
3 | <% if @saved_issues && @unsaved_issues.present? %> | |
|
4 | <div id="errorExplanation"> | |
|
5 | <span> | |
|
6 | <%= l(:notice_failed_to_save_issues, | |
|
7 | :count => @unsaved_issues.size, | |
|
8 | :total => @saved_issues.size, | |
|
9 | :ids => @unsaved_issues.map {|i| "##{i.id}"}.join(', ')) %> | |
|
10 | </span> | |
|
11 | <ul> | |
|
12 | <% bulk_edit_error_messages(@unsaved_issues).each do |message| %> | |
|
13 | <li><%= message %></li> | |
|
14 | <% end %> | |
|
15 | </ul> | |
|
16 | </div> | |
|
17 | <% end %> | |
|
18 | ||
|
3 | 19 | <ul id="bulk-selection"> |
|
4 | 20 | <% @issues.each do |issue| %> |
|
5 | 21 | <%= content_tag 'li', link_to_issue(issue) %> |
|
6 | 22 | <% end %> |
|
7 | 23 | </ul> |
|
8 | 24 | |
|
9 | 25 | <%= form_tag(bulk_update_issues_path, :id => 'bulk_edit_form') do %> |
|
10 | 26 | <%= @issues.collect {|i| hidden_field_tag('ids[]', i.id)}.join("\n").html_safe %> |
|
11 | 27 | <div class="box tabular"> |
|
12 | 28 | <fieldset class="attributes"> |
|
13 | 29 | <legend><%= l(:label_change_properties) %></legend> |
|
14 | 30 | |
|
15 | 31 | <div class="splitcontentleft"> |
|
16 | 32 | <% if @allowed_projects.present? %> |
|
17 | 33 | <p> |
|
18 | 34 | <label for="issue_project_id"><%= l(:field_project) %></label> |
|
19 | 35 | <%= select_tag('issue[project_id]', content_tag('option', l(:label_no_change_option), :value => '') + project_tree_options_for_select(@allowed_projects, :selected => @target_project), |
|
20 | 36 | :onchange => "updateBulkEditFrom('#{escape_javascript url_for(:action => 'bulk_edit', :format => 'js')}')") %> |
|
21 | 37 | </p> |
|
22 | 38 | <% end %> |
|
23 | 39 | <p> |
|
24 | 40 | <label for="issue_tracker_id"><%= l(:field_tracker) %></label> |
|
25 | 41 | <%= select_tag('issue[tracker_id]', content_tag('option', l(:label_no_change_option), :value => '') + options_from_collection_for_select(@trackers, :id, :name)) %> |
|
26 | 42 | </p> |
|
27 | 43 | <% if @available_statuses.any? %> |
|
28 | 44 | <p> |
|
29 | 45 | <label for='issue_status_id'><%= l(:field_status) %></label> |
|
30 | 46 | <%= select_tag('issue[status_id]',content_tag('option', l(:label_no_change_option), :value => '') + options_from_collection_for_select(@available_statuses, :id, :name)) %> |
|
31 | 47 | </p> |
|
32 | 48 | <% end %> |
|
33 | 49 | |
|
34 | 50 | <% if @safe_attributes.include?('priority_id') -%> |
|
35 | 51 | <p> |
|
36 | 52 | <label for='issue_priority_id'><%= l(:field_priority) %></label> |
|
37 | 53 | <%= select_tag('issue[priority_id]', content_tag('option', l(:label_no_change_option), :value => '') + options_from_collection_for_select(IssuePriority.active, :id, :name)) %> |
|
38 | 54 | </p> |
|
39 | 55 | <% end %> |
|
40 | 56 | |
|
41 | 57 | <% if @safe_attributes.include?('assigned_to_id') -%> |
|
42 | 58 | <p> |
|
43 | 59 | <label for='issue_assigned_to_id'><%= l(:field_assigned_to) %></label> |
|
44 | 60 | <%= select_tag('issue[assigned_to_id]', content_tag('option', l(:label_no_change_option), :value => '') + |
|
45 | 61 | content_tag('option', l(:label_nobody), :value => 'none') + |
|
46 | 62 | principals_options_for_select(@assignables)) %> |
|
47 | 63 | </p> |
|
48 | 64 | <% end %> |
|
49 | 65 | |
|
50 | 66 | <% if @safe_attributes.include?('category_id') -%> |
|
51 | 67 | <p> |
|
52 | 68 | <label for='issue_category_id'><%= l(:field_category) %></label> |
|
53 | 69 | <%= select_tag('issue[category_id]', content_tag('option', l(:label_no_change_option), :value => '') + |
|
54 | 70 | content_tag('option', l(:label_none), :value => 'none') + |
|
55 | 71 | options_from_collection_for_select(@categories, :id, :name)) %> |
|
56 | 72 | </p> |
|
57 | 73 | <% end %> |
|
58 | 74 | |
|
59 | 75 | <% if @safe_attributes.include?('fixed_version_id') -%> |
|
60 | 76 | <p> |
|
61 | 77 | <label for='issue_fixed_version_id'><%= l(:field_fixed_version) %></label> |
|
62 | 78 | <%= select_tag('issue[fixed_version_id]', content_tag('option', l(:label_no_change_option), :value => '') + |
|
63 | 79 | content_tag('option', l(:label_none), :value => 'none') + |
|
64 | 80 | version_options_for_select(@versions.sort)) %> |
|
65 | 81 | </p> |
|
66 | 82 | <% end %> |
|
67 | 83 | |
|
68 | 84 | <% @custom_fields.each do |custom_field| %> |
|
69 | 85 | <p><label><%= h(custom_field.name) %></label> <%= custom_field_tag_for_bulk_edit('issue', custom_field, @projects) %></p> |
|
70 | 86 | <% end %> |
|
71 | 87 | |
|
72 | 88 | <% if @copy && @attachments_present %> |
|
73 | 89 | <p> |
|
74 | 90 | <label for='copy_attachments'><%= l(:label_copy_attachments) %></label> |
|
75 | 91 | <%= check_box_tag 'copy_attachments', '1', true %> |
|
76 | 92 | </p> |
|
77 | 93 | <% end %> |
|
78 | 94 | |
|
79 | 95 | <% if @copy && @subtasks_present %> |
|
80 | 96 | <p> |
|
81 | 97 | <label for='copy_subtasks'><%= l(:label_copy_subtasks) %></label> |
|
82 | 98 | <%= check_box_tag 'copy_subtasks', '1', true %> |
|
83 | 99 | </p> |
|
84 | 100 | <% end %> |
|
85 | 101 | |
|
86 | 102 | <%= call_hook(:view_issues_bulk_edit_details_bottom, { :issues => @issues }) %> |
|
87 | 103 | </div> |
|
88 | 104 | |
|
89 | 105 | <div class="splitcontentright"> |
|
90 | 106 | <% if @safe_attributes.include?('is_private') %> |
|
91 | 107 | <p> |
|
92 | 108 | <label for='issue_is_private'><%= l(:field_is_private) %></label> |
|
93 | 109 | <%= select_tag('issue[is_private]', content_tag('option', l(:label_no_change_option), :value => '') + |
|
94 | 110 | content_tag('option', l(:general_text_Yes), :value => '1') + |
|
95 | 111 | content_tag('option', l(:general_text_No), :value => '0')) %> |
|
96 | 112 | </p> |
|
97 | 113 | <% end %> |
|
98 | 114 | |
|
99 | 115 | <% if @safe_attributes.include?('parent_issue_id') && @project %> |
|
100 | 116 | <p> |
|
101 | 117 | <label for='issue_parent_issue_id'><%= l(:field_parent_issue) %></label> |
|
102 | 118 | <%= text_field_tag 'issue[parent_issue_id]', '', :size => 10 %> |
|
103 | 119 | </p> |
|
104 | 120 | <%= javascript_tag "observeAutocompleteField('issue_parent_issue_id', '#{escape_javascript auto_complete_issues_path(:project_id => @project)}')" %> |
|
105 | 121 | <% end %> |
|
106 | 122 | |
|
107 | 123 | <% if @safe_attributes.include?('start_date') %> |
|
108 | 124 | <p> |
|
109 | 125 | <label for='issue_start_date'><%= l(:field_start_date) %></label> |
|
110 | 126 | <%= text_field_tag 'issue[start_date]', '', :size => 10 %><%= calendar_for('issue_start_date') %> |
|
111 | 127 | </p> |
|
112 | 128 | <% end %> |
|
113 | 129 | |
|
114 | 130 | <% if @safe_attributes.include?('due_date') %> |
|
115 | 131 | <p> |
|
116 | 132 | <label for='issue_due_date'><%= l(:field_due_date) %></label> |
|
117 | 133 | <%= text_field_tag 'issue[due_date]', '', :size => 10 %><%= calendar_for('issue_due_date') %> |
|
118 | 134 | </p> |
|
119 | 135 | <% end %> |
|
120 | 136 | |
|
121 | 137 | <% if @safe_attributes.include?('done_ratio') && Issue.use_field_for_done_ratio? %> |
|
122 | 138 | <p> |
|
123 | 139 | <label for='issue_done_ratio'><%= l(:field_done_ratio) %></label> |
|
124 | 140 | <%= select_tag 'issue[done_ratio]', options_for_select([[l(:label_no_change_option), '']] + (0..10).to_a.collect {|r| ["#{r*10} %", r*10] }) %> |
|
125 | 141 | </p> |
|
126 | 142 | <% end %> |
|
127 | 143 | </div> |
|
128 | 144 | </fieldset> |
|
129 | 145 | |
|
130 | 146 | <fieldset> |
|
131 | 147 | <legend><%= l(:field_notes) %></legend> |
|
132 | 148 | <%= text_area_tag 'notes', @notes, :cols => 60, :rows => 10, :class => 'wiki-edit' %> |
|
133 | 149 | <%= wikitoolbar_for 'notes' %> |
|
134 | 150 | </fieldset> |
|
135 | 151 | </div> |
|
136 | 152 | |
|
137 | 153 | <p> |
|
138 | 154 | <% if @copy %> |
|
139 | 155 | <%= hidden_field_tag 'copy', '1' %> |
|
140 | 156 | <%= submit_tag l(:button_copy) %> |
|
141 | 157 | <%= submit_tag l(:button_copy_and_follow), :name => 'follow' %> |
|
142 | 158 | <% elsif @target_project %> |
|
143 | 159 | <%= submit_tag l(:button_move) %> |
|
144 | 160 | <%= submit_tag l(:button_move_and_follow), :name => 'follow' %> |
|
145 | 161 | <% else %> |
|
146 | 162 | <%= submit_tag l(:button_submit) %> |
|
147 | 163 | <% end %> |
|
148 | 164 | </p> |
|
149 | 165 | |
|
150 | 166 | <% end %> |
|
1 | NO CONTENT: modified file | |
The requested commit or file is too big and content was truncated. Show full diff |
General Comments 0
You need to be logged in to leave comments.
Login now