jro_apps/redmine Commit - r6737:ebff04692b80

5

# modify it under the terms of the GNU General Public License

5

# modify it under the terms of the GNU General Public License

6

# as published by the Free Software Foundation; either version 2

6

# as published by the Free Software Foundation; either version 2

7

# of the License, or (at your option) any later version.

7

# of the License, or (at your option) any later version.

8

#

8

#

9

# This program is distributed in the hope that it will be useful,

9

# This program is distributed in the hope that it will be useful,

10

# but WITHOUT ANY WARRANTY; without even the implied warranty of

10

# but WITHOUT ANY WARRANTY; without even the implied warranty of

11

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

11

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

12

# GNU General Public License for more details.

12

# GNU General Public License for more details.

13

#

13

#

14

# You should have received a copy of the GNU General Public License

14

# You should have received a copy of the GNU General Public License

15

# along with this program; if not, write to the Free Software

15

# along with this program; if not, write to the Free Software

16

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

16

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

19

# Built-in roles

19

# Built-in roles

20

BUILTIN_NON_MEMBER = 1

20

BUILTIN_NON_MEMBER = 1

21

BUILTIN_ANONYMOUS = 2

21

BUILTIN_ANONYMOUS = 2

22

23

ISSUES_VISIBILITY_OPTIONS = [

23

ISSUES_VISIBILITY_OPTIONS = [

24

['all', :label_issues_visibility_all],

24

['all', :label_issues_visibility_all],

25

['default', :label_issues_visibility_public],

25

['default', :label_issues_visibility_public],

31

compare = 'not' if args.first == true

31

compare = 'not' if args.first == true

32

{ :conditions => "#{compare} builtin = 0" }

32

{ :conditions => "#{compare} builtin = 0" }

33

}

33

}

34

35

before_destroy :check_deletable

35

before_destroy :check_deletable

36

has_many :workflows, :dependent => :delete_all do

36

has_many :workflows, :dependent => :delete_all do

37

def copy(source_role)

37

def copy(source_role)

38

Workflow.copy(nil, source_role, nil, proxy_owner)

38

Workflow.copy(nil, source_role, nil, proxy_owner)

39

end

39

end

40

end

40

end

41

42

has_many :member_roles, :dependent => :destroy

42

has_many :member_roles, :dependent => :destroy

43

has_many :members, :through => :member_roles

43

has_many :members, :through => :member_roles

44

acts_as_list

44

acts_as_list

45

46

serialize :permissions, Array

46

serialize :permissions, Array

47

attr_protected :builtin

47

attr_protected :builtin

48

52

validates_inclusion_of :issues_visibility,

52

validates_inclusion_of :issues_visibility,

53

:in => ISSUES_VISIBILITY_OPTIONS.collect(&:first),

53

:in => ISSUES_VISIBILITY_OPTIONS.collect(&:first),

54

:if => lambda {|role| role.respond_to?(:issues_visibility)}

54

:if => lambda {|role| role.respond_to?(:issues_visibility)}

55

56

def permissions

56

def permissions

57

read_attribute(:permissions) || []

57

read_attribute(:permissions) || []

58

end

58

end

59

60

def permissions=(perms)

60

def permissions=(perms)

61

perms = perms.collect {|p| p.to_sym unless p.blank? }.compact.uniq if perms

61

perms = perms.collect {|p| p.to_sym unless p.blank? }.compact.uniq if perms

62

write_attribute(:permissions, perms)

62

write_attribute(:permissions, perms)

79

perms.each { |p| permissions.delete(p.to_sym) }

79

perms.each { |p| permissions.delete(p.to_sym) }

80

save!

80

save!

81

end

81

end

82

83

# Returns true if the role has the given permission

83

# Returns true if the role has the given permission

84

def has_permission?(perm)

84

def has_permission?(perm)

85

!permissions.nil? && permissions.include?(perm.to_sym)

85

!permissions.nil? && permissions.include?(perm.to_sym)

86

end

86

end

87

88

def <=>(role)

88

def <=>(role)

89

role ? position <=> role.position : -1

89

role ? position <=> role.position : -1

90

end

90

end

91

92

def to_s

92

def to_s

93

name

93

name

94

end

94

end

95

96

def name

96

def name

97

case builtin

97

case builtin

98

when 1; l(:label_role_non_member, :default => read_attribute(:name))

98

when 1; l(:label_role_non_member, :default => read_attribute(:name))

100

else; read_attribute(:name)

100

else; read_attribute(:name)

101

end

101

end

102

end

102

end

103

104

# Return true if the role is a builtin role

104

# Return true if the role is a builtin role

105

def builtin?

105

def builtin?

106

self.builtin != 0

106

self.builtin != 0

107

end

107

end

108

109

# Return true if the role is a project member role

109

# Return true if the role is a project member role

110

def member?

110

def member?

111

!self.builtin?

111

!self.builtin?

112

end

112

end

113

114

# Return true if role is allowed to do the specified action

114

# Return true if role is allowed to do the specified action

115

# action can be:

115

# action can be:

116

# * a parameter-like Hash (eg. :controller => 'projects', :action => 'edit')

116

# * a parameter-like Hash (eg. :controller => 'projects', :action => 'edit')

122

allowed_permissions.include? action

122

allowed_permissions.include? action

123

end

123

end

124

end

124

end

125

126

# Return all the permissions that can be given to the role

126

# Return all the permissions that can be given to the role

127

def setable_permissions

127

def setable_permissions

128

setable_permissions = Redmine::AccessControl.permissions - Redmine::AccessControl.public_permissions

128

setable_permissions = Redmine::AccessControl.permissions - Redmine::AccessControl.public_permissions

147

def self.anonymous

147

def self.anonymous

148

find_or_create_system_role(BUILTIN_ANONYMOUS, 'Anonymous')

148

find_or_create_system_role(BUILTIN_ANONYMOUS, 'Anonymous')

149

end

149

end

150

151

private

151

private

152

153

def allowed_permissions

153

def allowed_permissions

154

@allowed_permissions ||= permissions + Redmine::AccessControl.public_permissions.collect {|p| p.name}

154

@allowed_permissions ||= permissions + Redmine::AccessControl.public_permissions.collect {|p| p.name}

155

end

155

end

157

def allowed_actions

157

def allowed_actions

158

@actions_allowed ||= allowed_permissions.inject([]) { |actions, permission| actions += Redmine::AccessControl.allowed_actions(permission) }.flatten

158

@actions_allowed ||= allowed_permissions.inject([]) { |actions, permission| actions += Redmine::AccessControl.allowed_actions(permission) }.flatten

159

end

159

end

160

161

def check_deletable

161

def check_deletable

162

raise "Can't delete role" if members.any?

162

raise "Can't delete role" if members.any?

163

raise "Can't delete builtin role" if builtin?

163

raise "Can't delete builtin role" if builtin?

164

end

164

end

165

166

def self.find_or_create_system_role(builtin, name)

166

def self.find_or_create_system_role(builtin, name)

167

role = first(:conditions => {:builtin => builtin})

167

role = first(:conditions => {:builtin => builtin})

168

if role.nil?

168

if role.nil?

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

             # modify it under the terms of the GNU General Public License
             # as published by the Free Software Foundation; either version 2
             # of the License, or (at your option) any later version.
+            #
             # This program is distributed in the hope that it will be useful,
             # but WITHOUT ANY WARRANTY; without even the implied warranty of
             # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
             # GNU General Public License for more details.
+            #
             # You should have received a copy of the GNU General Public License
             # along with this program; if not, write to the Free Software
             # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
               # Built-in roles
               BUILTIN_NON_MEMBER = 1
               BUILTIN_ANONYMOUS  = 2
               ISSUES_VISIBILITY_OPTIONS = [
                 ['all', :label_issues_visibility_all],
                 ['default', :label_issues_visibility_public],
                 compare = 'not' if args.first == true
                 { :conditions => "#{compare} builtin = 0" }
               }
               before_destroy :check_deletable
               has_many :workflows, :dependent => :delete_all do
                 def copy(source_role)
                   Workflow.copy(nil, source_role, nil, proxy_owner)
                 end
               end
               has_many :member_roles, :dependent => :destroy
               has_many :members, :through => :member_roles
               acts_as_list
               serialize :permissions, Array
               attr_protected :builtin
               validates_inclusion_of :issues_visibility,
                 :in => ISSUES_VISIBILITY_OPTIONS.collect(&:first),
                 :if => lambda {|role| role.respond_to?(:issues_visibility)}
               def permissions
                 read_attribute(:permissions) || []
               end
               def permissions=(perms)
                 perms = perms.collect {|p| p.to_sym unless p.blank? }.compact.uniq if perms
                 write_attribute(:permissions, perms)
                 perms.each { |p| permissions.delete(p.to_sym) }
                 save!
               end
               # Returns true if the role has the given permission
               def has_permission?(perm)
                 !permissions.nil? && permissions.include?(perm.to_sym)
               end
               def <=>(role)
                 role ? position <=> role.position : -1
               end
               def to_s
                 name
               end
               def name
                 case builtin
                 when 1; l(:label_role_non_member, :default => read_attribute(:name))
                 else; read_attribute(:name)
                 end
               end
               # Return true if the role is a builtin role
               def builtin?
                 self.builtin != 0
               end
               # Return true if the role is a project member role
               def member?
                 !self.builtin?
               end
               # Return true if role is allowed to do the specified action
               # action can be:
               # * a parameter-like Hash (eg. :controller => 'projects', :action => 'edit')
                   allowed_permissions.include? action
                 end
               end
               # Return all the permissions that can be given to the role
               def setable_permissions
                 setable_permissions = Redmine::AccessControl.permissions - Redmine::AccessControl.public_permissions
               def self.anonymous
                 find_or_create_system_role(BUILTIN_ANONYMOUS, 'Anonymous')
               end
             private
               def allowed_permissions
                 @allowed_permissions ||= permissions + Redmine::AccessControl.public_permissions.collect {|p| p.name}
               end
               def allowed_actions
                 @actions_allowed ||= allowed_permissions.inject([]) { |actions, permission| actions += Redmine::AccessControl.allowed_actions(permission) }.flatten
               end
               def check_deletable
                 raise "Can't delete role" if members.any?
                 raise "Can't delete builtin role" if builtin?
               end
               def self.find_or_create_system_role(builtin, name)
                 role = first(:conditions => {:builtin => builtin})
                 if role.nil?