openproject/app/controllers/members_controller.rb

#-- encoding: UTF-8
#-- copyright
# ChiliProject is a project management system.
#
# Copyright (C) 2010-2011 the ChiliProject Team
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# See doc/COPYRIGHT.rdoc for more details.
#++

class MembersController < ApplicationController
  model_object Member
  before_filter :find_model_object_and_project
  before_filter :authorize

  def create
    if params[:member]
      members = new_members_from_params
      @project.members << members
    end

    respond_to do |format|
      if members.present? && members.all? {|m| m.valid? }
        flash.now.notice = l(:notice_successful_create)

        format.html { redirect_to settings_project_path(@project, :tab => 'members') }

        format.js {
          render(:update) {|page|
            page.replace_html "tab-content-members", :partial => 'projects/settings/members'
            page.insert_html :top, "tab-content-members", render_flash_messages
            page << 'hideOnLoad()'
          }
        }
      else
        format.js {
          render(:update) {|page|
            if params[:member]
              page.insert_html :top, "tab-content-members", :partial => "members/member_errors", :locals => {:member => members.first}
            else
              page.insert_html :top, "tab-content-members", :partial => "members/common_error", :locals => {:message => l(:error_check_user_and_role)}
            end
            }
        }
      end
    end
  end

  def update
    if member = update_member_from_params and
      member.save

  	 respond_to do |format|
        format.html { redirect_to :controller => '/projects', :action => 'settings', :tab => 'members', :id => @project, :page => params[:page] }
        format.js {
          render(:update) { |page|
            if params[:membership]
              @user = member.user
              page.replace_html "tab-content-memberships", :partial => 'users/memberships'
            else
              page.replace_html "tab-content-members", :partial => 'projects/settings/members'
            end
            page << 'hideOnLoad()'
            page.visual_effect(:highlight, "member-#{@member.id}") unless Member.find_by_id(@member.id).nil?
          }
        }
      end
    end
  end

  def destroy
    if @member.deletable?
      @member.destroy
    end
    respond_to do |format|
      format.html { redirect_to :controller => '/projects', :action => 'settings', :tab => 'members', :id => @project }
      format.js { render(:update) {|page|
          page.replace_html "tab-content-members", :partial => 'projects/settings/members'
          page << 'hideOnLoad()'
        }
      }
    end
  end

  def autocomplete_for_member
    roles = Role.find_all_givable
    available_principals = @project.possible_members(params[:q], 100)

    render :partial => 'members/autocomplete_for_member', :locals => { :available_principals => available_principals, :roles => roles }
  end

  private

  def new_members_from_params
    members = []

    attrs = params[:member].dup
    user_ids = if attrs[:user_ids].present?
                 attrs.delete(:user_ids)
               elsif attrs[:user_id].present?
                 [attrs.delete(:user_id)]
               else
                 []
               end
    roles = Role.find_all_by_id(attrs.delete(:role_ids))

    user_ids.each do |user_id|
      member = Member.new attrs
      # workaround due to mass-assignment protected member_roles.role_id
      member.member_roles << roles.collect {|r| MemberRole.new :role => r }
      member.user_id = user_id
      members << member
    end

    members
  end

  def update_member_from_params
    # this way, mass assignment is considered and all updates happen in one transaction (autosave)
    attrs = params[:member].except(:user_id)
    attrs.merge! params[:membership].dup if params[:membership].present?
    attrs.delete(:project_id)

    role_ids = attrs.delete(:role_ids).map(&:to_i).select{ |i| i > 0 }
    roles = Role.find_all_by_id(role_ids)

    # Keep inherited roles
    role_ids += @member.member_roles.select { |mr| !mr.inherited_from.nil? }.collect(&:role_id)

    new_role_ids = role_ids - @member.role_ids
    # Add new roles
    new_role_ids.each { |id| @member.member_roles.build.tap { |r| r.role_id = id } }
    # Remove roles (Rails' #role_ids= will not trigger MemberRole#on_destroy)
    member_roles_to_destroy = @member.member_roles.select { |mr| !role_ids.include?(mr.role_id) }
    if member_roles_to_destroy.any?
      member_roles_to_destroy.each(&:mark_for_destruction)
      Watcher.prune(:user => @member.principal, :project => @member.project)
    end

    @member.attributes = attrs
    @member
  end
end