#-- encoding: UTF-8 #-- copyright # OpenProject is a project management system. # Copyright (C) 2012-2015 the OpenProject Foundation (OPF) # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License version 3. # # OpenProject is a fork of ChiliProject, which is a fork of Redmine. The copyright follows: # Copyright (C) 2006-2013 Jean-Philippe Lang # Copyright (C) 2010-2013 the ChiliProject Team # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. # # See doc/COPYRIGHT.rdoc for more details. #++ class ProjectsController < ApplicationController menu_item :overview menu_item :roadmap, only: :roadmap menu_item :settings, only: :settings helper :timelines before_filter :disable_api before_filter :find_project, except: [:index, :level_list, :new, :create] before_filter :authorize, only: [ :show, :settings, :edit, :update, :modules, :types, :custom_fields ] before_filter :authorize_global, only: [:new, :create] before_filter :require_admin, only: [:archive, :unarchive, :destroy, :destroy_info] before_filter :jump_to_project_menu_item, only: :show before_filter :load_project_settings, only: :settings before_filter :determine_base accept_key_auth :index, :level_list, :show, :create, :update, :destroy after_filter only: [:create, :edit, :update, :archive, :unarchive, :destroy] do |controller| if controller.request.post? controller.send :expire_action, controller: '/welcome', action: 'robots.txt' end end include SortHelper include CustomFieldsHelper include QueriesHelper include RepositoriesHelper include ProjectsHelper # Lists visible projects def index respond_to do |format| format.html do @projects = Project.visible.order('lft') end format.atom do projects = Project.visible .order('created_on DESC') .limit(Setting.feeds_limit.to_i) render_feed(projects, title: "#{Setting.app_title}: #{l(:label_project_latest)}") end end end def new @issue_custom_fields = WorkPackageCustomField.order("#{CustomField.table_name}.position") @types = ::Type.all @project = Project.new @project.parent = Project.find(params[:parent_id]) if params[:parent_id] @project.safe_attributes = params[:project] end def create @issue_custom_fields = WorkPackageCustomField.order("#{CustomField.table_name}.position") @types = ::Type.all @project = Project.new @project.safe_attributes = params[:project] if validate_parent_id && @project.save @project.set_allowed_parent!(params[:project]['parent_id']) if params[:project].has_key?('parent_id') add_current_user_to_project_if_not_admin(@project) respond_to do |format| format.html do flash[:notice] = l(:notice_successful_create) redirect_to controller: '/projects', action: 'settings', id: @project end end else respond_to do |format| format.html do render action: 'new' end end end end # Show @project def show @users_by_role = @project.users_by_role @subprojects = @project.children.visible @news = @project.news.limit(5).includes(:author, :project).order("#{News.table_name}.created_on DESC") @types = @project.rolled_up_types cond = @project.project_condition(Setting.display_subprojects_work_packages?) @open_issues_by_type = WorkPackage.visible.group(:type) .includes(:project, :status, :type) .where(["(#{cond}) AND #{Status.table_name}.is_closed=?", false]) .references(:projects, :statuses, :types) .count @total_issues_by_type = WorkPackage.visible.group(:type) .includes(:project, :status, :type) .where(cond) .references(:projects, :statuses, :types) .count respond_to do |format| format.html end end def settings @altered_project ||= @project end def edit end def update @altered_project = Project.find(@project.id) @altered_project.safe_attributes = params[:project] if validate_parent_id && @altered_project.save if params[:project].has_key?('parent_id') @altered_project.set_allowed_parent!(params[:project]['parent_id']) end respond_to do |format| format.html do flash[:notice] = l(:notice_successful_update) redirect_to action: 'settings', id: @altered_project end end OpenProject::Notifications.send('project_updated', project: @altered_project) else respond_to do |format| format.html do load_project_settings render action: 'settings' end end end end def update_identifier @project.safe_attributes = params[:project] if @project.save respond_to do |format| format.html do flash[:notice] = l(:notice_successful_update) redirect_to action: 'settings', id: @project end end OpenProject::Notifications.send('project_updated', project: @project) else respond_to do |format| format.html do load_project_settings render action: 'identifier' end end end end def types if UpdateProjectsTypesService.new(@project).call(permitted_params.projects_type_ids) flash[:notice] = l('notice_successful_update') else flash[:error] = @project.errors.full_messages end redirect_to settings_project_path(@project.identifier, tab: 'types') end def modules @project.enabled_module_names = params[:project][:enabled_module_names] flash[:notice] = l(:notice_successful_update) redirect_to action: 'settings', id: @project, tab: 'modules' end def custom_fields @project.work_package_custom_field_ids = params[:project][:work_package_custom_field_ids] if @project.save flash[:notice] = l(:notice_successful_update) else flash[:error] = l(:notice_project_cannot_update_custom_fields) end redirect_to action: 'settings', id: @project, tab: 'custom_fields' end def archive flash[:error] = l(:error_can_not_archive_project) unless @project.archive redirect_to(url_for(controller: '/admin', action: 'projects', status: params[:status])) end def unarchive @project.unarchive if !@project.active? redirect_to(url_for(controller: '/admin', action: 'projects', status: params[:status])) end # Delete @project def destroy @project_to_destroy = @project OpenProject::Notifications.send('project_deletion_imminent', project: @project_to_destroy) @project_to_destroy.destroy respond_to do |format| format.html do redirect_to controller: '/admin', action: 'projects' end end hide_project_in_layout end def destroy_info @project_to_destroy = @project hide_project_in_layout end private def find_optional_project return true unless params[:id] @project = Project.find(params[:id]) authorize rescue ActiveRecord::RecordNotFound render_404 end def jump_to_project_menu_item if params[:jump] # try to redirect to the requested menu item redirect_to_project_menu_item(@project, params[:jump]) && return end end def load_project_settings @issue_custom_fields = WorkPackageCustomField.order("#{CustomField.table_name}.position") @category ||= Category.new @member ||= @project.members.new @types = ::Type.all @repository ||= @project.repository @wiki ||= @project.wiki end def hide_project_in_layout @project = nil end def add_current_user_to_project_if_not_admin(project) unless User.current.admin? r = Role.givable.find_by(id: Setting.new_project_user_role_id.to_i) || Role.givable.first m = Member.new do |member| member.user = User.current member.role_ids = [r].map(&:id) # member.roles = [r] fails, this works end project.members << m end end protected def determine_base if params[:project_type_id] @base = ProjectType.find(params[:project_type_id]).projects else @base = Project end end # Validates parent_id param according to user's permissions # TODO: move it to Project model in a validation that depends on User.current def validate_parent_id return true if User.current.admin? parent_id = params[:project] && params[:project][:parent_id] if parent_id || @project.new_record? parent = parent_id.blank? ? nil : Project.find_by(id: parent_id.to_i) unless @project.allowed_parents.include?(parent) @project.errors.add :parent_id, :invalid return false end end true end end