|
|
# Redmine - project management software
|
|
|
# Copyright (C) 2006-2011 Jean-Philippe Lang
|
|
|
#
|
|
|
# This program is free software; you can redistribute it and/or
|
|
|
# modify it under the terms of the GNU General Public License
|
|
|
# as published by the Free Software Foundation; either version 2
|
|
|
# of the License, or (at your option) any later version.
|
|
|
#
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
# GNU General Public License for more details.
|
|
|
#
|
|
|
# You should have received a copy of the GNU General Public License
|
|
|
# along with this program; if not, write to the Free Software
|
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
|
|
class RolesController < ApplicationController
|
|
|
layout 'admin'
|
|
|
|
|
|
before_filter :require_admin, :except => :index
|
|
|
before_filter :require_admin_or_api_request, :only => :index
|
|
|
before_filter :find_role, :only => [:edit, :update, :destroy]
|
|
|
accept_api_auth :index
|
|
|
|
|
|
def index
|
|
|
respond_to do |format|
|
|
|
format.html {
|
|
|
@role_pages, @roles = paginate :roles, :per_page => 25, :order => 'builtin, position'
|
|
|
render :action => "index", :layout => false if request.xhr?
|
|
|
}
|
|
|
format.api {
|
|
|
@roles = Role.givable.all
|
|
|
}
|
|
|
end
|
|
|
end
|
|
|
|
|
|
def new
|
|
|
# Prefills the form with 'Non member' role permissions
|
|
|
@role = Role.new(params[:role] || {:permissions => Role.non_member.permissions})
|
|
|
@roles = Role.sorted.all
|
|
|
end
|
|
|
|
|
|
def create
|
|
|
@role = Role.new(params[:role])
|
|
|
if request.post? && @role.save
|
|
|
# workflow copy
|
|
|
if !params[:copy_workflow_from].blank? && (copy_from = Role.find_by_id(params[:copy_workflow_from]))
|
|
|
@role.workflows.copy(copy_from)
|
|
|
end
|
|
|
flash[:notice] = l(:notice_successful_create)
|
|
|
redirect_to :action => 'index'
|
|
|
else
|
|
|
@roles = Role.sorted.all
|
|
|
render :action => 'new'
|
|
|
end
|
|
|
end
|
|
|
|
|
|
def edit
|
|
|
end
|
|
|
|
|
|
def update
|
|
|
if request.put? and @role.update_attributes(params[:role])
|
|
|
flash[:notice] = l(:notice_successful_update)
|
|
|
redirect_to :action => 'index'
|
|
|
else
|
|
|
render :action => 'edit'
|
|
|
end
|
|
|
end
|
|
|
|
|
|
def destroy
|
|
|
@role.destroy
|
|
|
redirect_to :action => 'index'
|
|
|
rescue
|
|
|
flash[:error] = l(:error_can_not_remove_role)
|
|
|
redirect_to :action => 'index'
|
|
|
end
|
|
|
|
|
|
def permissions
|
|
|
@roles = Role.sorted.all
|
|
|
@permissions = Redmine::AccessControl.permissions.select { |p| !p.public? }
|
|
|
if request.post?
|
|
|
@roles.each do |role|
|
|
|
role.permissions = params[:permissions][role.id.to_s]
|
|
|
role.save
|
|
|
end
|
|
|
flash[:notice] = l(:notice_successful_update)
|
|
|
redirect_to :action => 'index'
|
|
|
end
|
|
|
end
|
|
|
|
|
|
private
|
|
|
|
|
|
def find_role
|
|
|
@role = Role.find(params[:id])
|
|
|
rescue ActiveRecord::RecordNotFound
|
|
|
render_404
|
|
|
end
|
|
|
end
|
|
|
|
