diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..9b9ef02
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,2 @@
+.vscode
+config/database.yml
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
new file mode 100644
index 0000000..7894bca
--- /dev/null
+++ b/CONTRIBUTING.md
@@ -0,0 +1,8 @@
+
+**Do not send a pull request to this GitHub repository**.
+
+For more detail, please see [official website] wiki [Contribute].
+
+[official website]: http://www.redmine.org
+[Contribute]: http://www.redmine.org/projects/redmine/wiki/Contribute
+
diff --git a/Dockerfile b/Dockerfile
deleted file mode 100644
index a4b3233..0000000
--- a/Dockerfile
+++ /dev/null
@@ -1,59 +0,0 @@
-# Usar la imagen oficial de Redmine como base
-FROM redmine:4.1.7
-
-RUN apt-get update && apt-get install -y \
- shared-mime-info \
- git \
- build-essential \
- mariadb-client \
- libxml2-dev \
- libxslt-dev \
- zlib1g-dev \
- libpq-dev \
- libmariadb-dev-compat \
- libmariadb-dev \
- libssl-dev \
- libreadline-dev \
- libffi-dev \
- imagemagick \
- && rm -rf /var/lib/apt/lists/*
-
-# Definir el directorio de trabajo
-WORKDIR /usr/src/redmine
-
-# Copiar archivos personalizados dentro del contenedor
-COPY app/controllers/wiki_controller.rb /usr/src/redmine/app/controllers/wiki_controller.rb
-COPY app/helpers/search_helper.rb /usr/src/redmine/app/helpers/search_helper.rb
-COPY app/views/account/login.html.erb /usr/src/redmine/app/views/account/login.html.erb
-COPY app/views/issues/tabs/_changesets.html.erb /usr/src/redmine/app/views/issues/tabs/_changesets.html.erb
-COPY app/views/layouts/base.html.erb /usr/src/redmine/app/views/layouts/base.html.erb
-COPY app/views/repositories/_changeset.html.erb /usr/src/redmine/app/views/repositories/_changeset.html.erb
-COPY app/views/wiki/show.html.erb /usr/src/redmine/app/views/wiki/show.html.erb
-
-COPY config/database.yml /usr/src/redmine/config/database.yml
-COPY config/secrets.yml /usr/src/redmine/config/secrets.yml
-COPY config/locales/en.yml /usr/src/redmine/config/locales/en.yml
-COPY config/locales/es.yml /usr/src/redmine/config/locales/es.yml
-
-COPY plugins /usr/src/redmine/plugins
-
-COPY public/themes/circlepro /usr/src/redmine/public/themes/circlepro
-
-# Clonar el plugin "rich"
-RUN git clone https://github.com/a-ono/rich.git /usr/src/redmine/vendor/rich
-
-# Establecer permisos adecuados (opcional)
-RUN chown -R redmine:redmine /usr/src/redmine
-
-# Instalar dependencias de Ruby
-RUN bundle install --without development test --path vendor/bundle
-
-# Copiar el backup de la base de datos
-COPY suitepro-backup.sql /suitepro-backup.sql
-
-# Copiar el script de inicialización
-COPY entrypoint.sh /entrypoint.sh
-RUN chmod +x /entrypoint.sh
-
-# Configurar el punto de entrada
-ENTRYPOINT ["/entrypoint.sh"]
diff --git a/Gemfile b/Gemfile
new file mode 100644
index 0000000..68b1b43
--- /dev/null
+++ b/Gemfile
@@ -0,0 +1,116 @@
+source 'https://rubygems.org'
+
+gem "bundler", ">= 1.5.0", "< 2.0.0"
+
+gem "rails", "4.2.11.1"
+gem "addressable", "2.4.0" if RUBY_VERSION < "2.0"
+if RUBY_VERSION < "2.1"
+ gem "public_suffix", (RUBY_VERSION < "2.0" ? "~> 1.4" : "~> 2.0.5")
+end
+gem "jquery-rails", "~> 3.1.4"
+gem "coderay", "~> 1.1.1"
+gem "request_store", "1.0.5"
+gem "mime-types", (RUBY_VERSION >= "2.0" ? "~> 3.0" : "~> 2.99")
+gem "protected_attributes"
+gem "actionpack-xml_parser"
+gem "roadie-rails", "~> 1.1.1"
+gem "roadie", "~> 3.2.1"
+gem "mimemagic"
+gem "mail", "~> 2.6.4"
+
+gem "nokogiri", (RUBY_VERSION >= "2.1" ? "~> 1.8.1" : "~> 1.6.8")
+gem "i18n", "~> 0.7.0"
+gem "ffi", "1.9.14", :platforms => :mingw if RUBY_VERSION < "2.0"
+gem "xpath", "< 3.2.0" if RUBY_VERSION < "2.3"
+
+# Request at least rails-html-sanitizer 1.0.3 because of security advisories
+gem "rails-html-sanitizer", ">= 1.0.3"
+
+# TODO: Remove the following line when #32223 is fixed
+gem "sprockets", "~> 3.7.2"
+
+# Windows does not include zoneinfo files, so bundle the tzinfo-data gem
+gem 'tzinfo-data', platforms: [:mingw, :x64_mingw, :mswin]
+gem "rbpdf", "~> 1.19.6"
+
+# Optional gem for LDAP authentication
+group :ldap do
+ gem "net-ldap", "~> 0.12.0"
+end
+
+# Optional gem for OpenID authentication
+group :openid do
+ gem "ruby-openid", "~> 2.9.2", :require => "openid"
+ gem "rack-openid"
+end
+
+platforms :mri, :mingw, :x64_mingw do
+ # Optional gem for exporting the gantt to a PNG file, not supported with jruby
+ group :rmagick do
+ gem "rmagick", "~> 2.16.0"
+ end
+
+ # Optional Markdown support, not for JRuby
+ group :markdown do
+ gem "redcarpet", "~> 3.4.0"
+ end
+end
+
+# Include database gems for the adapters found in the database
+# configuration file
+require 'erb'
+require 'yaml'
+database_file = File.join(File.dirname(__FILE__), "config/database.yml")
+if File.exist?(database_file)
+ database_config = YAML::load(ERB.new(IO.read(database_file)).result)
+ adapters = database_config.values.map {|c| c['adapter']}.compact.uniq
+ if adapters.any?
+ adapters.each do |adapter|
+ case adapter
+ when 'mysql2'
+ gem "mysql2", "~> 0.4.6", :platforms => [:mri, :mingw, :x64_mingw]
+ when /postgresql/
+ gem "pg", "~> 0.18.1", :platforms => [:mri, :mingw, :x64_mingw]
+ when /sqlite3/
+ gem "sqlite3", (RUBY_VERSION < "2.0" && RUBY_PLATFORM =~ /mingw/ ? "1.3.12" : "~>1.3.12"),
+ :platforms => [:mri, :mingw, :x64_mingw]
+ when /sqlserver/
+ gem "tiny_tds", (RUBY_VERSION >= "2.0" ? "~> 1.0.5" : "~> 0.7.0"), :platforms => [:mri, :mingw, :x64_mingw]
+ gem "activerecord-sqlserver-adapter", :platforms => [:mri, :mingw, :x64_mingw]
+ else
+ warn("Unknown database adapter `#{adapter}` found in config/database.yml, use Gemfile.local to load your own database gems")
+ end
+ end
+ else
+ warn("No adapter found in config/database.yml, please configure it first")
+ end
+else
+ warn("Please configure your config/database.yml first")
+end
+
+group :development do
+ gem "rdoc", "~> 4.3"
+ gem "yard"
+end
+
+group :test do
+ gem "minitest"
+ gem "rails-dom-testing"
+ gem 'mocha', '>= 1.4.0'
+ gem "simplecov", "~> 0.9.1", :require => false
+ # TODO: remove this after upgrading to Rails 5
+ gem "test_after_commit", "~> 0.4.2"
+ # For running UI tests
+ gem "capybara", '~> 2.13'
+ gem "selenium-webdriver", "~> 2.53.4"
+end
+
+local_gemfile = File.join(File.dirname(__FILE__), "Gemfile.local")
+if File.exists?(local_gemfile)
+ eval_gemfile local_gemfile
+end
+
+# Load plugins' Gemfiles
+Dir.glob File.expand_path("../plugins/*/{Gemfile,PluginGemfile}", __FILE__) do |file|
+ eval_gemfile file
+end
diff --git a/README.md b/README.md
index 62a5bde..d75d08f 100644
--- a/README.md
+++ b/README.md
@@ -13,7 +13,7 @@ En **SuitePro** concurren potencia y sencillez para planificar, compartir
conocimiento, prestar soporte a clientes y acelerar la productividad, apremiando
la finalización de las tareas y manteniendo la información en un único sitio.
-**SuitePro 2.2.1** está instalado y operativo en https://suitepro.cillero.es
+**SuitePro** está instalado y operativo en https://suitepro.cillero.es
## SuitePro es software libre
@@ -27,45 +27,44 @@ License v2* (GPL).
# Código fuente
- * Proyecto: https://suitepro.cillero.es/projects/suitepro
- * Repositorio: https://git.cillero.es/manuelcillero/suitepro
+ * Repositorio: https://suitepro.cillero.es/projects/suitepro/repository
+ * GitLab: https://gitlab.com/manuelcillero/suitepro
## Plugins incluidos
### Redmine Additionals plugin
- * additionals 3.0.2-master
+ * additionals 2.0.20
* https://alphanodes.com/redmine-additionals
* https://github.com/alphanodes/additionals.git
### Redmine Checklists plugin (Light version)
- * checklists 3.1.18
+ * checklists 3.1.10
* https://www.redmine.org/plugins/redmine_checklists
* https://www.redmineup.com/pages/plugins/checklists
### Redmine CKEditor plugin
- * ckeditor 1.2.3
+ * ckeditor 1.1.5
* https://www.redmine.org/plugins/redmine-ckeditor
* http://github.com/a-ono/redmine_ckeditor
### Redmine Glossary Plugin
- * glossary 1.1.0
+ * glossary 0.9.2
* https://www.r-labs.org/projects/rp-glossary/wiki/UsageEn
* https://github.com/torutk/redmine_glossary
### Redmine Private Wiki Plugin
- * private_wiki 0.2.0 (mistraloz)
+ * private_wiki 0.2.0
* http://www.redmine.org/plugins/redmine_private_wiki
- * https://github.com/mistraloz/redmine_private_wiki (*fork* con ajustes para
- Redmine >= 4.0.3)
+ * https://github.com/BlueXML/redmine_private_wiki
### Redmine Q&A plugin
- * questions 1.0.2
+ * questions 1.0.0
* https://www.redmine.org/plugins/redmine_questions
* http://www.redminecrm.com/projects/questions
diff --git a/Rakefile b/Rakefile
new file mode 100644
index 0000000..5fbdf84
--- /dev/null
+++ b/Rakefile
@@ -0,0 +1,7 @@
+#!/usr/bin/env rake
+# Add your own tasks in files placed in lib/tasks ending in .rake,
+# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
+
+require File.expand_path('../config/application', __FILE__)
+
+RedmineApp::Application.load_tasks
diff --git a/app/controllers/account_controller.rb b/app/controllers/account_controller.rb
new file mode 100644
index 0000000..5070295
--- /dev/null
+++ b/app/controllers/account_controller.rb
@@ -0,0 +1,375 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class AccountController < ApplicationController
+ helper :custom_fields
+ include CustomFieldsHelper
+
+ self.main_menu = false
+
+ # prevents login action to be filtered by check_if_login_required application scope filter
+ skip_before_action :check_if_login_required, :check_password_change
+
+ # Overrides ApplicationController#verify_authenticity_token to disable
+ # token verification on openid callbacks
+ def verify_authenticity_token
+ unless using_open_id?
+ super
+ end
+ end
+
+ # Login request and validation
+ def login
+ if request.post?
+ authenticate_user
+ else
+ if User.current.logged?
+ redirect_back_or_default home_url, :referer => true
+ end
+ end
+ rescue AuthSourceException => e
+ logger.error "An error occurred when authenticating #{params[:username]}: #{e.message}"
+ render_error :message => e.message
+ end
+
+ # Log out current user and redirect to welcome page
+ def logout
+ if User.current.anonymous?
+ redirect_to home_url
+ elsif request.post?
+ logout_user
+ redirect_to home_url
+ end
+ # display the logout form
+ end
+
+ # Lets user choose a new password
+ def lost_password
+ (redirect_to(home_url); return) unless Setting.lost_password?
+ if prt = (params[:token] || session[:password_recovery_token])
+ @token = Token.find_token("recovery", prt.to_s)
+ if @token.nil? || @token.expired?
+ redirect_to home_url
+ return
+ end
+
+ # redirect to remove the token query parameter from the URL and add it to the session
+ if request.query_parameters[:token].present?
+ session[:password_recovery_token] = @token.value
+ redirect_to lost_password_url
+ return
+ end
+
+ @user = @token.user
+ unless @user && @user.active?
+ redirect_to home_url
+ return
+ end
+ if request.post?
+ if @user.must_change_passwd? && @user.check_password?(params[:new_password])
+ flash.now[:error] = l(:notice_new_password_must_be_different)
+ else
+ @user.password, @user.password_confirmation = params[:new_password], params[:new_password_confirmation]
+ @user.must_change_passwd = false
+ if @user.save
+ @token.destroy
+ Mailer.password_updated(@user, { remote_ip: request.remote_ip })
+ flash[:notice] = l(:notice_account_password_updated)
+ redirect_to signin_path
+ return
+ end
+ end
+ end
+ render :template => "account/password_recovery"
+ return
+ else
+ if request.post?
+ email = params[:mail].to_s.strip
+ user = User.find_by_mail(email)
+ # user not found
+ unless user
+ flash.now[:error] = l(:notice_account_unknown_email)
+ return
+ end
+ unless user.active?
+ handle_inactive_user(user, lost_password_path)
+ return
+ end
+ # user cannot change its password
+ unless user.change_password_allowed?
+ flash.now[:error] = l(:notice_can_t_change_password)
+ return
+ end
+ # create a new token for password recovery
+ token = Token.new(:user => user, :action => "recovery")
+ if token.save
+ # Don't use the param to send the email
+ recipent = user.mails.detect {|e| email.casecmp(e) == 0} || user.mail
+ Mailer.lost_password(token, recipent).deliver
+ flash[:notice] = l(:notice_account_lost_email_sent)
+ redirect_to signin_path
+ return
+ end
+ end
+ end
+ end
+
+ # User self-registration
+ def register
+ (redirect_to(home_url); return) unless Setting.self_registration? || session[:auth_source_registration]
+ if !request.post?
+ session[:auth_source_registration] = nil
+ @user = User.new(:language => current_language.to_s)
+ else
+ user_params = params[:user] || {}
+ @user = User.new
+ @user.safe_attributes = user_params
+ @user.pref.safe_attributes = params[:pref]
+ @user.admin = false
+ @user.register
+ if session[:auth_source_registration]
+ @user.activate
+ @user.login = session[:auth_source_registration][:login]
+ @user.auth_source_id = session[:auth_source_registration][:auth_source_id]
+ if @user.save
+ session[:auth_source_registration] = nil
+ self.logged_user = @user
+ flash[:notice] = l(:notice_account_activated)
+ redirect_to my_account_path
+ end
+ else
+ unless user_params[:identity_url].present? && user_params[:password].blank? && user_params[:password_confirmation].blank?
+ @user.password, @user.password_confirmation = user_params[:password], user_params[:password_confirmation]
+ end
+
+ case Setting.self_registration
+ when '1'
+ register_by_email_activation(@user)
+ when '3'
+ register_automatically(@user)
+ else
+ register_manually_by_administrator(@user)
+ end
+ end
+ end
+ end
+
+ # Token based account activation
+ def activate
+ (redirect_to(home_url); return) unless Setting.self_registration? && params[:token].present?
+ token = Token.find_token('register', params[:token].to_s)
+ (redirect_to(home_url); return) unless token and !token.expired?
+ user = token.user
+ (redirect_to(home_url); return) unless user.registered?
+ user.activate
+ if user.save
+ token.destroy
+ flash[:notice] = l(:notice_account_activated)
+ end
+ redirect_to signin_path
+ end
+
+ # Sends a new account activation email
+ def activation_email
+ if session[:registered_user_id] && Setting.self_registration == '1'
+ user_id = session.delete(:registered_user_id).to_i
+ user = User.find_by_id(user_id)
+ if user && user.registered?
+ register_by_email_activation(user)
+ return
+ end
+ end
+ redirect_to(home_url)
+ end
+
+ private
+
+ def authenticate_user
+ if Setting.openid? && using_open_id?
+ open_id_authenticate(params[:openid_url])
+ else
+ password_authentication
+ end
+ end
+
+ def password_authentication
+ user = User.try_to_login(params[:username], params[:password], false)
+
+ if user.nil?
+ invalid_credentials
+ elsif user.new_record?
+ onthefly_creation_failed(user, {:login => user.login, :auth_source_id => user.auth_source_id })
+ else
+ # Valid user
+ if user.active?
+ successful_authentication(user)
+ update_sudo_timestamp! # activate Sudo Mode
+ else
+ handle_inactive_user(user)
+ end
+ end
+ end
+
+ def open_id_authenticate(openid_url)
+ back_url = signin_url(:autologin => params[:autologin])
+ authenticate_with_open_id(
+ openid_url, :required => [:nickname, :fullname, :email],
+ :return_to => back_url, :method => :post
+ ) do |result, identity_url, registration|
+ if result.successful?
+ user = User.find_or_initialize_by_identity_url(identity_url)
+ if user.new_record?
+ # Self-registration off
+ (redirect_to(home_url); return) unless Setting.self_registration?
+ # Create on the fly
+ user.login = registration['nickname'] unless registration['nickname'].nil?
+ user.mail = registration['email'] unless registration['email'].nil?
+ user.firstname, user.lastname = registration['fullname'].split(' ') unless registration['fullname'].nil?
+ user.random_password
+ user.register
+ case Setting.self_registration
+ when '1'
+ register_by_email_activation(user) do
+ onthefly_creation_failed(user)
+ end
+ when '3'
+ register_automatically(user) do
+ onthefly_creation_failed(user)
+ end
+ else
+ register_manually_by_administrator(user) do
+ onthefly_creation_failed(user)
+ end
+ end
+ else
+ # Existing record
+ if user.active?
+ successful_authentication(user)
+ else
+ handle_inactive_user(user)
+ end
+ end
+ end
+ end
+ end
+
+ def successful_authentication(user)
+ logger.info "Successful authentication for '#{user.login}' from #{request.remote_ip} at #{Time.now.utc}"
+ # Valid user
+ self.logged_user = user
+ # generate a key and set cookie if autologin
+ if params[:autologin] && Setting.autologin?
+ set_autologin_cookie(user)
+ end
+ call_hook(:controller_account_success_authentication_after, {:user => user })
+ redirect_back_or_default my_page_path
+ end
+
+ def set_autologin_cookie(user)
+ token = user.generate_autologin_token
+ secure = Redmine::Configuration['autologin_cookie_secure']
+ if secure.nil?
+ secure = request.ssl?
+ end
+ cookie_options = {
+ :value => token,
+ :expires => 1.year.from_now,
+ :path => (Redmine::Configuration['autologin_cookie_path'] || RedmineApp::Application.config.relative_url_root || '/'),
+ :secure => secure,
+ :httponly => true
+ }
+ cookies[autologin_cookie_name] = cookie_options
+ end
+
+ # Onthefly creation failed, display the registration form to fill/fix attributes
+ def onthefly_creation_failed(user, auth_source_options = { })
+ @user = user
+ session[:auth_source_registration] = auth_source_options unless auth_source_options.empty?
+ render :action => 'register'
+ end
+
+ def invalid_credentials
+ logger.warn "Failed login for '#{params[:username]}' from #{request.remote_ip} at #{Time.now.utc}"
+ flash.now[:error] = l(:notice_account_invalid_credentials)
+ end
+
+ # Register a user for email activation.
+ #
+ # Pass a block for behavior when a user fails to save
+ def register_by_email_activation(user, &block)
+ token = Token.new(:user => user, :action => "register")
+ if user.save and token.save
+ Mailer.register(token).deliver
+ flash[:notice] = l(:notice_account_register_done, :email => ERB::Util.h(user.mail))
+ redirect_to signin_path
+ else
+ yield if block_given?
+ end
+ end
+
+ # Automatically register a user
+ #
+ # Pass a block for behavior when a user fails to save
+ def register_automatically(user, &block)
+ # Automatic activation
+ user.activate
+ user.last_login_on = Time.now
+ if user.save
+ self.logged_user = user
+ flash[:notice] = l(:notice_account_activated)
+ redirect_to my_account_path
+ else
+ yield if block_given?
+ end
+ end
+
+ # Manual activation by the administrator
+ #
+ # Pass a block for behavior when a user fails to save
+ def register_manually_by_administrator(user, &block)
+ if user.save
+ # Sends an email to the administrators
+ Mailer.account_activation_request(user).deliver
+ account_pending(user)
+ else
+ yield if block_given?
+ end
+ end
+
+ def handle_inactive_user(user, redirect_path=signin_path)
+ if user.registered?
+ account_pending(user, redirect_path)
+ else
+ account_locked(user, redirect_path)
+ end
+ end
+
+ def account_pending(user, redirect_path=signin_path)
+ if Setting.self_registration == '1'
+ flash[:error] = l(:notice_account_not_activated_yet, :url => activation_email_path)
+ session[:registered_user_id] = user.id
+ else
+ flash[:error] = l(:notice_account_pending)
+ end
+ redirect_to redirect_path
+ end
+
+ def account_locked(user, redirect_path=signin_path)
+ flash[:error] = l(:notice_account_locked)
+ redirect_to redirect_path
+ end
+end
diff --git a/app/controllers/activities_controller.rb b/app/controllers/activities_controller.rb
new file mode 100644
index 0000000..f82f011
--- /dev/null
+++ b/app/controllers/activities_controller.rb
@@ -0,0 +1,90 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class ActivitiesController < ApplicationController
+ menu_item :activity
+ before_action :find_optional_project
+ accept_rss_auth :index
+
+ def index
+ @days = Setting.activity_days_default.to_i
+
+ if params[:from]
+ begin; @date_to = params[:from].to_date + 1; rescue; end
+ end
+
+ @date_to ||= User.current.today + 1
+ @date_from = @date_to - @days
+ @with_subprojects = params[:with_subprojects].nil? ? Setting.display_subprojects_issues? : (params[:with_subprojects] == '1')
+ if params[:user_id].present?
+ @author = User.active.find(params[:user_id])
+ end
+
+ @activity = Redmine::Activity::Fetcher.new(User.current, :project => @project,
+ :with_subprojects => @with_subprojects,
+ :author => @author)
+ pref = User.current.pref
+ @activity.scope_select {|t| !params["show_#{t}"].nil?}
+ if @activity.scope.present?
+ if params[:submit].present?
+ pref.activity_scope = @activity.scope
+ pref.save
+ end
+ else
+ if @author.nil?
+ scope = pref.activity_scope & @activity.event_types
+ @activity.scope = scope.present? ? scope : :default
+ else
+ @activity.scope = :all
+ end
+ end
+
+ events = @activity.events(@date_from, @date_to)
+
+ if events.empty? || stale?(:etag => [@activity.scope, @date_to, @date_from, @with_subprojects, @author, events.first, events.size, User.current, current_language])
+ respond_to do |format|
+ format.html {
+ @events_by_day = events.group_by {|event| User.current.time_to_date(event.event_datetime)}
+ render :layout => false if request.xhr?
+ }
+ format.atom {
+ title = l(:label_activity)
+ if @author
+ title = @author.name
+ elsif @activity.scope.size == 1
+ title = l("label_#{@activity.scope.first.singularize}_plural")
+ end
+ render_feed(events, :title => "#{@project || Setting.app_title}: #{title}")
+ }
+ end
+ end
+
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ private
+
+ # TODO: refactor, duplicated in projects_controller
+ def find_optional_project
+ return true unless params[:id]
+ @project = Project.find(params[:id])
+ authorize
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+end
diff --git a/app/controllers/admin_controller.rb b/app/controllers/admin_controller.rb
new file mode 100644
index 0000000..dfc73c5
--- /dev/null
+++ b/app/controllers/admin_controller.rb
@@ -0,0 +1,85 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class AdminController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+ menu_item :projects, :only => :projects
+ menu_item :plugins, :only => :plugins
+ menu_item :info, :only => :info
+
+ before_action :require_admin
+
+ def index
+ @no_configuration_data = Redmine::DefaultData::Loader::no_data?
+ end
+
+ def projects
+ @status = params[:status] || 1
+
+ scope = Project.status(@status).sorted
+ scope = scope.like(params[:name]) if params[:name].present?
+
+ @project_count = scope.count
+ @project_pages = Paginator.new @project_count, per_page_option, params['page']
+ @projects = scope.limit(@project_pages.per_page).offset(@project_pages.offset).to_a
+
+ render :action => "projects", :layout => false if request.xhr?
+ end
+
+ def plugins
+ @plugins = Redmine::Plugin.all
+ end
+
+ # Loads the default configuration
+ # (roles, trackers, statuses, workflow, enumerations)
+ def default_configuration
+ if request.post?
+ begin
+ Redmine::DefaultData::Loader::load(params[:lang])
+ flash[:notice] = l(:notice_default_data_loaded)
+ rescue Exception => e
+ flash[:error] = l(:error_can_t_load_default_data, ERB::Util.h(e.message))
+ end
+ end
+ redirect_to admin_path
+ end
+
+ def test_email
+ raise_delivery_errors = ActionMailer::Base.raise_delivery_errors
+ # Force ActionMailer to raise delivery errors so we can catch it
+ ActionMailer::Base.raise_delivery_errors = true
+ begin
+ @test = Mailer.test_email(User.current).deliver
+ flash[:notice] = l(:notice_email_sent, ERB::Util.h(User.current.mail))
+ rescue Exception => e
+ flash[:error] = l(:notice_email_error, ERB::Util.h(Redmine::CodesetUtil.replace_invalid_utf8(e.message.dup)))
+ end
+ ActionMailer::Base.raise_delivery_errors = raise_delivery_errors
+ redirect_to settings_path(:tab => 'notifications')
+ end
+
+ def info
+ @checklist = [
+ [:text_default_administrator_account_changed, User.default_admin_account_changed?],
+ [:text_file_repository_writable, File.writable?(Attachment.storage_path)],
+ ["#{l :text_plugin_assets_writable} (./public/plugin_assets)", File.writable?(Redmine::Plugin.public_directory)],
+ [:text_rmagick_available, Object.const_defined?(:Magick)],
+ [:text_convert_available, Redmine::Thumbnail.convert_available?]
+ ]
+ end
+end
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
new file mode 100644
index 0000000..1d42901
--- /dev/null
+++ b/app/controllers/application_controller.rb
@@ -0,0 +1,679 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'uri'
+require 'cgi'
+
+class Unauthorized < Exception; end
+
+class ApplicationController < ActionController::Base
+ include Redmine::I18n
+ include Redmine::Pagination
+ include Redmine::Hook::Helper
+ include RoutesHelper
+ helper :routes
+
+ class_attribute :accept_api_auth_actions
+ class_attribute :accept_rss_auth_actions
+ class_attribute :model_object
+
+ layout 'base'
+
+ protect_from_forgery
+
+ def verify_authenticity_token
+ unless api_request?
+ super
+ end
+ end
+
+ def handle_unverified_request
+ unless api_request?
+ super
+ cookies.delete(autologin_cookie_name)
+ self.logged_user = nil
+ set_localization
+ render_error :status => 422, :message => "Invalid form authenticity token."
+ end
+ end
+
+ before_action :session_expiration, :user_setup, :check_if_login_required, :set_localization, :check_password_change
+
+ rescue_from ::Unauthorized, :with => :deny_access
+ rescue_from ::ActionView::MissingTemplate, :with => :missing_template
+
+ include Redmine::Search::Controller
+ include Redmine::MenuManager::MenuController
+ helper Redmine::MenuManager::MenuHelper
+
+ include Redmine::SudoMode::Controller
+
+ def session_expiration
+ if session[:user_id] && Rails.application.config.redmine_verify_sessions != false
+ if session_expired? && !try_to_autologin
+ set_localization(User.active.find_by_id(session[:user_id]))
+ self.logged_user = nil
+ flash[:error] = l(:error_session_expired)
+ require_login
+ end
+ end
+ end
+
+ def session_expired?
+ ! User.verify_session_token(session[:user_id], session[:tk])
+ end
+
+ def start_user_session(user)
+ session[:user_id] = user.id
+ session[:tk] = user.generate_session_token
+ if user.must_change_password?
+ session[:pwd] = '1'
+ end
+ end
+
+ def user_setup
+ # Check the settings cache for each request
+ Setting.check_cache
+ # Find the current user
+ User.current = find_current_user
+ logger.info(" Current user: " + (User.current.logged? ? "#{User.current.login} (id=#{User.current.id})" : "anonymous")) if logger
+ end
+
+ # Returns the current user or nil if no user is logged in
+ # and starts a session if needed
+ def find_current_user
+ user = nil
+ unless api_request?
+ if session[:user_id]
+ # existing session
+ user = (User.active.find(session[:user_id]) rescue nil)
+ elsif autologin_user = try_to_autologin
+ user = autologin_user
+ elsif params[:format] == 'atom' && params[:key] && request.get? && accept_rss_auth?
+ # RSS key authentication does not start a session
+ user = User.find_by_rss_key(params[:key])
+ end
+ end
+ if user.nil? && Setting.rest_api_enabled? && accept_api_auth?
+ if (key = api_key_from_request)
+ # Use API key
+ user = User.find_by_api_key(key)
+ elsif request.authorization.to_s =~ /\ABasic /i
+ # HTTP Basic, either username/password or API key/random
+ authenticate_with_http_basic do |username, password|
+ user = User.try_to_login(username, password) || User.find_by_api_key(username)
+ end
+ if user && user.must_change_password?
+ render_error :message => 'You must change your password', :status => 403
+ return
+ end
+ end
+ # Switch user if requested by an admin user
+ if user && user.admin? && (username = api_switch_user_from_request)
+ su = User.find_by_login(username)
+ if su && su.active?
+ logger.info(" User switched by: #{user.login} (id=#{user.id})") if logger
+ user = su
+ else
+ render_error :message => 'Invalid X-Redmine-Switch-User header', :status => 412
+ end
+ end
+ end
+ # store current ip address in user object ephemerally
+ user.remote_ip = request.remote_ip if user
+ user
+ end
+
+ def autologin_cookie_name
+ Redmine::Configuration['autologin_cookie_name'].presence || 'autologin'
+ end
+
+ def try_to_autologin
+ if cookies[autologin_cookie_name] && Setting.autologin?
+ # auto-login feature starts a new session
+ user = User.try_to_autologin(cookies[autologin_cookie_name])
+ if user
+ reset_session
+ start_user_session(user)
+ end
+ user
+ end
+ end
+
+ # Sets the logged in user
+ def logged_user=(user)
+ reset_session
+ if user && user.is_a?(User)
+ User.current = user
+ start_user_session(user)
+ else
+ User.current = User.anonymous
+ end
+ end
+
+ # Logs out current user
+ def logout_user
+ if User.current.logged?
+ if autologin = cookies.delete(autologin_cookie_name)
+ User.current.delete_autologin_token(autologin)
+ end
+ User.current.delete_session_token(session[:tk])
+ self.logged_user = nil
+ end
+ end
+
+ # check if login is globally required to access the application
+ def check_if_login_required
+ # no check needed if user is already logged in
+ return true if User.current.logged?
+ require_login if Setting.login_required?
+ end
+
+ def check_password_change
+ if session[:pwd]
+ if User.current.must_change_password?
+ flash[:error] = l(:error_password_expired)
+ redirect_to my_password_path
+ else
+ session.delete(:pwd)
+ end
+ end
+ end
+
+ def set_localization(user=User.current)
+ lang = nil
+ if user && user.logged?
+ lang = find_language(user.language)
+ end
+ if lang.nil? && !Setting.force_default_language_for_anonymous? && request.env['HTTP_ACCEPT_LANGUAGE']
+ accept_lang = parse_qvalues(request.env['HTTP_ACCEPT_LANGUAGE']).first
+ if !accept_lang.blank?
+ accept_lang = accept_lang.downcase
+ lang = find_language(accept_lang) || find_language(accept_lang.split('-').first)
+ end
+ end
+ lang ||= Setting.default_language
+ set_language_if_valid(lang)
+ end
+
+ def require_login
+ if !User.current.logged?
+ # Extract only the basic url parameters on non-GET requests
+ if request.get?
+ url = request.original_url
+ else
+ url = url_for(:controller => params[:controller], :action => params[:action], :id => params[:id], :project_id => params[:project_id])
+ end
+ respond_to do |format|
+ format.html {
+ if request.xhr?
+ head :unauthorized
+ else
+ redirect_to signin_path(:back_url => url)
+ end
+ }
+ format.any(:atom, :pdf, :csv) {
+ redirect_to signin_path(:back_url => url)
+ }
+ format.xml { head :unauthorized, 'WWW-Authenticate' => 'Basic realm="Redmine API"' }
+ format.js { head :unauthorized, 'WWW-Authenticate' => 'Basic realm="Redmine API"' }
+ format.json { head :unauthorized, 'WWW-Authenticate' => 'Basic realm="Redmine API"' }
+ format.any { head :unauthorized }
+ end
+ return false
+ end
+ true
+ end
+
+ def require_admin
+ return unless require_login
+ if !User.current.admin?
+ render_403
+ return false
+ end
+ true
+ end
+
+ def deny_access
+ User.current.logged? ? render_403 : require_login
+ end
+
+ # Authorize the user for the requested action
+ def authorize(ctrl = params[:controller], action = params[:action], global = false)
+ allowed = User.current.allowed_to?({:controller => ctrl, :action => action}, @project || @projects, :global => global)
+ if allowed
+ true
+ else
+ if @project && @project.archived?
+ render_403 :message => :notice_not_authorized_archived_project
+ else
+ deny_access
+ end
+ end
+ end
+
+ # Authorize the user for the requested action outside a project
+ def authorize_global(ctrl = params[:controller], action = params[:action], global = true)
+ authorize(ctrl, action, global)
+ end
+
+ # Find project of id params[:id]
+ def find_project
+ @project = Project.find(params[:id])
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ # Find project of id params[:project_id]
+ def find_project_by_project_id
+ @project = Project.find(params[:project_id])
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ # Find a project based on params[:project_id]
+ # TODO: some subclasses override this, see about merging their logic
+ def find_optional_project
+ @project = Project.find(params[:project_id]) unless params[:project_id].blank?
+ allowed = User.current.allowed_to?({:controller => params[:controller], :action => params[:action]}, @project, :global => true)
+ allowed ? true : deny_access
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ # Finds and sets @project based on @object.project
+ def find_project_from_association
+ render_404 unless @object.present?
+
+ @project = @object.project
+ end
+
+ def find_model_object
+ model = self.class.model_object
+ if model
+ @object = model.find(params[:id])
+ self.instance_variable_set('@' + controller_name.singularize, @object) if @object
+ end
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def self.model_object(model)
+ self.model_object = model
+ end
+
+ # Find the issue whose id is the :id parameter
+ # Raises a Unauthorized exception if the issue is not visible
+ def find_issue
+ # Issue.visible.find(...) can not be used to redirect user to the login form
+ # if the issue actually exists but requires authentication
+ @issue = Issue.find(params[:id])
+ raise Unauthorized unless @issue.visible?
+ @project = @issue.project
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ # Find issues with a single :id param or :ids array param
+ # Raises a Unauthorized exception if one of the issues is not visible
+ def find_issues
+ @issues = Issue.
+ where(:id => (params[:id] || params[:ids])).
+ preload(:project, :status, :tracker, :priority, :author, :assigned_to, :relations_to, {:custom_values => :custom_field}).
+ to_a
+ raise ActiveRecord::RecordNotFound if @issues.empty?
+ raise Unauthorized unless @issues.all?(&:visible?)
+ @projects = @issues.collect(&:project).compact.uniq
+ @project = @projects.first if @projects.size == 1
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def find_attachments
+ if (attachments = params[:attachments]).present?
+ att = attachments.values.collect do |attachment|
+ Attachment.find_by_token( attachment[:token] ) if attachment[:token].present?
+ end
+ att.compact!
+ end
+ @attachments = att || []
+ end
+
+ def parse_params_for_bulk_update(params)
+ attributes = (params || {}).reject {|k,v| v.blank?}
+ attributes.keys.each {|k| attributes[k] = '' if attributes[k] == 'none'}
+ if custom = attributes[:custom_field_values]
+ custom.reject! {|k,v| v.blank?}
+ custom.keys.each do |k|
+ if custom[k].is_a?(Array)
+ custom[k] << '' if custom[k].delete('__none__')
+ else
+ custom[k] = '' if custom[k] == '__none__'
+ end
+ end
+ end
+ attributes
+ end
+
+ # make sure that the user is a member of the project (or admin) if project is private
+ # used as a before_action for actions that do not require any particular permission on the project
+ def check_project_privacy
+ if @project && !@project.archived?
+ if @project.visible?
+ true
+ else
+ deny_access
+ end
+ else
+ @project = nil
+ render_404
+ false
+ end
+ end
+
+ def back_url
+ url = params[:back_url]
+ if url.nil? && referer = request.env['HTTP_REFERER']
+ url = CGI.unescape(referer.to_s)
+ end
+ url
+ end
+
+ def redirect_back_or_default(default, options={})
+ back_url = params[:back_url].to_s
+ if back_url.present? && valid_url = validate_back_url(back_url)
+ redirect_to(valid_url)
+ return
+ elsif options[:referer]
+ redirect_to_referer_or default
+ return
+ end
+ redirect_to default
+ false
+ end
+
+ # Returns a validated URL string if back_url is a valid url for redirection,
+ # otherwise false
+ def validate_back_url(back_url)
+ if CGI.unescape(back_url).include?('..')
+ return false
+ end
+
+ begin
+ uri = URI.parse(back_url)
+ rescue URI::InvalidURIError
+ return false
+ end
+
+ [:scheme, :host, :port].each do |component|
+ if uri.send(component).present? && uri.send(component) != request.send(component)
+ return false
+ end
+ uri.send(:"#{component}=", nil)
+ end
+ # Always ignore basic user:password in the URL
+ uri.userinfo = nil
+
+ path = uri.to_s
+ # Ensure that the remaining URL starts with a slash, followed by a
+ # non-slash character or the end
+ if path !~ %r{\A/([^/]|\z)}
+ return false
+ end
+
+ if path.match(%r{/(login|account/register|account/lost_password)})
+ return false
+ end
+
+ if relative_url_root.present? && !path.starts_with?(relative_url_root)
+ return false
+ end
+
+ return path
+ end
+ private :validate_back_url
+
+ def valid_back_url?(back_url)
+ !!validate_back_url(back_url)
+ end
+ private :valid_back_url?
+
+ # Redirects to the request referer if present, redirects to args or call block otherwise.
+ def redirect_to_referer_or(*args, &block)
+ if referer = request.headers["Referer"]
+ redirect_to referer
+ else
+ if args.any?
+ redirect_to *args
+ elsif block_given?
+ block.call
+ else
+ raise "#redirect_to_referer_or takes arguments or a block"
+ end
+ end
+ end
+
+ def render_403(options={})
+ @project = nil
+ render_error({:message => :notice_not_authorized, :status => 403}.merge(options))
+ return false
+ end
+
+ def render_404(options={})
+ render_error({:message => :notice_file_not_found, :status => 404}.merge(options))
+ return false
+ end
+
+ # Renders an error response
+ def render_error(arg)
+ arg = {:message => arg} unless arg.is_a?(Hash)
+
+ @message = arg[:message]
+ @message = l(@message) if @message.is_a?(Symbol)
+ @status = arg[:status] || 500
+
+ respond_to do |format|
+ format.html {
+ render :template => 'common/error', :layout => use_layout, :status => @status
+ }
+ format.any { head @status }
+ end
+ end
+
+ # Handler for ActionView::MissingTemplate exception
+ def missing_template
+ logger.warn "Missing template, responding with 404"
+ @project = nil
+ render_404
+ end
+
+ # Filter for actions that provide an API response
+ # but have no HTML representation for non admin users
+ def require_admin_or_api_request
+ return true if api_request?
+ if User.current.admin?
+ true
+ elsif User.current.logged?
+ render_error(:status => 406)
+ else
+ deny_access
+ end
+ end
+
+ # Picks which layout to use based on the request
+ #
+ # @return [boolean, string] name of the layout to use or false for no layout
+ def use_layout
+ request.xhr? ? false : 'base'
+ end
+
+ def render_feed(items, options={})
+ @items = (items || []).to_a
+ @items.sort! {|x,y| y.event_datetime <=> x.event_datetime }
+ @items = @items.slice(0, Setting.feeds_limit.to_i)
+ @title = options[:title] || Setting.app_title
+ render :template => "common/feed", :formats => [:atom], :layout => false,
+ :content_type => 'application/atom+xml'
+ end
+
+ def self.accept_rss_auth(*actions)
+ if actions.any?
+ self.accept_rss_auth_actions = actions
+ else
+ self.accept_rss_auth_actions || []
+ end
+ end
+
+ def accept_rss_auth?(action=action_name)
+ self.class.accept_rss_auth.include?(action.to_sym)
+ end
+
+ def self.accept_api_auth(*actions)
+ if actions.any?
+ self.accept_api_auth_actions = actions
+ else
+ self.accept_api_auth_actions || []
+ end
+ end
+
+ def accept_api_auth?(action=action_name)
+ self.class.accept_api_auth.include?(action.to_sym)
+ end
+
+ # Returns the number of objects that should be displayed
+ # on the paginated list
+ def per_page_option
+ per_page = nil
+ if params[:per_page] && Setting.per_page_options_array.include?(params[:per_page].to_s.to_i)
+ per_page = params[:per_page].to_s.to_i
+ session[:per_page] = per_page
+ elsif session[:per_page]
+ per_page = session[:per_page]
+ else
+ per_page = Setting.per_page_options_array.first || 25
+ end
+ per_page
+ end
+
+ # Returns offset and limit used to retrieve objects
+ # for an API response based on offset, limit and page parameters
+ def api_offset_and_limit(options=params)
+ if options[:offset].present?
+ offset = options[:offset].to_i
+ if offset < 0
+ offset = 0
+ end
+ end
+ limit = options[:limit].to_i
+ if limit < 1
+ limit = 25
+ elsif limit > 100
+ limit = 100
+ end
+ if offset.nil? && options[:page].present?
+ offset = (options[:page].to_i - 1) * limit
+ offset = 0 if offset < 0
+ end
+ offset ||= 0
+
+ [offset, limit]
+ end
+
+ # qvalues http header parser
+ # code taken from webrick
+ def parse_qvalues(value)
+ tmp = []
+ if value
+ parts = value.split(/,\s*/)
+ parts.each {|part|
+ if m = %r{^([^\s,]+?)(?:;\s*q=(\d+(?:\.\d+)?))?$}.match(part)
+ val = m[1]
+ q = (m[2] or 1).to_f
+ tmp.push([val, q])
+ end
+ }
+ tmp = tmp.sort_by{|val, q| -q}
+ tmp.collect!{|val, q| val}
+ end
+ return tmp
+ rescue
+ nil
+ end
+
+ # Returns a string that can be used as filename value in Content-Disposition header
+ def filename_for_content_disposition(name)
+ request.env['HTTP_USER_AGENT'] =~ %r{(MSIE|Trident|Edge)} ? ERB::Util.url_encode(name) : name
+ end
+
+ def api_request?
+ %w(xml json).include? params[:format]
+ end
+
+ # Returns the API key present in the request
+ def api_key_from_request
+ if params[:key].present?
+ params[:key].to_s
+ elsif request.headers["X-Redmine-API-Key"].present?
+ request.headers["X-Redmine-API-Key"].to_s
+ end
+ end
+
+ # Returns the API 'switch user' value if present
+ def api_switch_user_from_request
+ request.headers["X-Redmine-Switch-User"].to_s.presence
+ end
+
+ # Renders a warning flash if obj has unsaved attachments
+ def render_attachment_warning_if_needed(obj)
+ flash[:warning] = l(:warning_attachments_not_saved, obj.unsaved_attachments.size) if obj.unsaved_attachments.present?
+ end
+
+ # Rescues an invalid query statement. Just in case...
+ def query_statement_invalid(exception)
+ logger.error "Query::StatementInvalid: #{exception.message}" if logger
+ session.delete(:issue_query)
+ render_error "An error occurred while executing the query and has been logged. Please report this error to your Redmine administrator."
+ end
+
+ # Renders a 200 response for successful updates or deletions via the API
+ def render_api_ok
+ render_api_head :ok
+ end
+
+ # Renders a head API response
+ def render_api_head(status)
+ head status
+ end
+
+ # Renders API response on validation failure
+ # for an object or an array of objects
+ def render_validation_errors(objects)
+ messages = Array.wrap(objects).map {|object| object.errors.full_messages}.flatten
+ render_api_errors(messages)
+ end
+
+ def render_api_errors(*messages)
+ @error_messages = messages.flatten
+ render :template => 'common/error_messages.api', :status => :unprocessable_entity, :layout => nil
+ end
+
+ # Overrides #_include_layout? so that #render with no arguments
+ # doesn't use the layout for api requests
+ def _include_layout?(*args)
+ api_request? ? false : super
+ end
+end
diff --git a/app/controllers/attachments_controller.rb b/app/controllers/attachments_controller.rb
new file mode 100644
index 0000000..64cb05e
--- /dev/null
+++ b/app/controllers/attachments_controller.rb
@@ -0,0 +1,247 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class AttachmentsController < ApplicationController
+ before_action :find_attachment, :only => [:show, :download, :thumbnail, :update, :destroy]
+ before_action :find_editable_attachments, :only => [:edit_all, :update_all]
+ before_action :file_readable, :read_authorize, :only => [:show, :download, :thumbnail]
+ before_action :update_authorize, :only => :update
+ before_action :delete_authorize, :only => :destroy
+ before_action :authorize_global, :only => :upload
+
+ # Disable check for same origin requests for JS files, i.e. attachments with
+ # MIME type text/javascript.
+ skip_after_action :verify_same_origin_request, :only => :download
+
+ accept_api_auth :show, :download, :thumbnail, :upload, :update, :destroy
+
+ def show
+ respond_to do |format|
+ format.html {
+ if @attachment.is_diff?
+ @diff = File.read(@attachment.diskfile, :mode => "rb")
+ @diff_type = params[:type] || User.current.pref[:diff_type] || 'inline'
+ @diff_type = 'inline' unless %w(inline sbs).include?(@diff_type)
+ # Save diff type as user preference
+ if User.current.logged? && @diff_type != User.current.pref[:diff_type]
+ User.current.pref[:diff_type] = @diff_type
+ User.current.preference.save
+ end
+ render :action => 'diff'
+ elsif @attachment.is_text? && @attachment.filesize <= Setting.file_max_size_displayed.to_i.kilobyte
+ @content = File.read(@attachment.diskfile, :mode => "rb")
+ render :action => 'file'
+ elsif @attachment.is_image?
+ render :action => 'image'
+ else
+ render :action => 'other'
+ end
+ }
+ format.api
+ end
+ end
+
+ def download
+ if @attachment.container.is_a?(Version) || @attachment.container.is_a?(Project)
+ @attachment.increment_download
+ end
+
+ if stale?(:etag => @attachment.digest, :template => false)
+ # images are sent inline
+ send_file @attachment.diskfile, :filename => filename_for_content_disposition(@attachment.filename),
+ :type => detect_content_type(@attachment),
+ :disposition => disposition(@attachment)
+ end
+ end
+
+ def thumbnail
+ if @attachment.thumbnailable? && tbnail = @attachment.thumbnail(:size => params[:size])
+ if stale?(:etag => tbnail, :template => false)
+ send_file tbnail,
+ :filename => filename_for_content_disposition(@attachment.filename),
+ :type => detect_content_type(@attachment),
+ :disposition => 'inline'
+ end
+ else
+ # No thumbnail for the attachment or thumbnail could not be created
+ head 404
+ end
+ end
+
+ def upload
+ # Make sure that API users get used to set this content type
+ # as it won't trigger Rails' automatic parsing of the request body for parameters
+ unless request.content_type == 'application/octet-stream'
+ head 406
+ return
+ end
+
+ @attachment = Attachment.new(:file => request.raw_post)
+ @attachment.author = User.current
+ @attachment.filename = params[:filename].presence || Redmine::Utils.random_hex(16)
+ @attachment.content_type = params[:content_type].presence
+ saved = @attachment.save
+
+ respond_to do |format|
+ format.js
+ format.api {
+ if saved
+ render :action => 'upload', :status => :created
+ else
+ render_validation_errors(@attachment)
+ end
+ }
+ end
+ end
+
+ # Edit all the attachments of a container
+ def edit_all
+ end
+
+ # Update all the attachments of a container
+ def update_all
+ if Attachment.update_attachments(@attachments, update_all_params)
+ redirect_back_or_default home_path
+ return
+ end
+ render :action => 'edit_all'
+ end
+
+ def update
+ @attachment.safe_attributes = params[:attachment]
+ saved = @attachment.save
+
+ respond_to do |format|
+ format.api {
+ if saved
+ render_api_ok
+ else
+ render_validation_errors(@attachment)
+ end
+ }
+ end
+ end
+
+ def destroy
+ if @attachment.container.respond_to?(:init_journal)
+ @attachment.container.init_journal(User.current)
+ end
+ if @attachment.container
+ # Make sure association callbacks are called
+ @attachment.container.attachments.delete(@attachment)
+ else
+ @attachment.destroy
+ end
+
+ respond_to do |format|
+ format.html { redirect_to_referer_or project_path(@project) }
+ format.js
+ format.api { render_api_ok }
+ end
+ end
+
+ # Returns the menu item that should be selected when viewing an attachment
+ def current_menu_item
+ if @attachment
+ case @attachment.container
+ when WikiPage
+ :wiki
+ when Message
+ :boards
+ when Project, Version
+ :files
+ else
+ @attachment.container.class.name.pluralize.downcase.to_sym
+ end
+ end
+ end
+
+ private
+
+ def find_attachment
+ @attachment = Attachment.find(params[:id])
+ # Show 404 if the filename in the url is wrong
+ raise ActiveRecord::RecordNotFound if params[:filename] && params[:filename] != @attachment.filename
+ @project = @attachment.project
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def find_editable_attachments
+ klass = params[:object_type].to_s.singularize.classify.constantize rescue nil
+ unless klass && klass.reflect_on_association(:attachments)
+ render_404
+ return
+ end
+
+ @container = klass.find(params[:object_id])
+ if @container.respond_to?(:visible?) && !@container.visible?
+ render_403
+ return
+ end
+ @attachments = @container.attachments.select(&:editable?)
+ if @container.respond_to?(:project)
+ @project = @container.project
+ end
+ render_404 if @attachments.empty?
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ # Checks that the file exists and is readable
+ def file_readable
+ if @attachment.readable?
+ true
+ else
+ logger.error "Cannot send attachment, #{@attachment.diskfile} does not exist or is unreadable."
+ render_404
+ end
+ end
+
+ def read_authorize
+ @attachment.visible? ? true : deny_access
+ end
+
+ def update_authorize
+ @attachment.editable? ? true : deny_access
+ end
+
+ def delete_authorize
+ @attachment.deletable? ? true : deny_access
+ end
+
+ def detect_content_type(attachment)
+ content_type = attachment.content_type
+ if content_type.blank? || content_type == "application/octet-stream"
+ content_type = Redmine::MimeType.of(attachment.filename)
+ end
+ content_type.to_s
+ end
+
+ def disposition(attachment)
+ if attachment.is_pdf?
+ 'inline'
+ else
+ 'attachment'
+ end
+ end
+
+ # Returns attachments param for #update_all
+ def update_all_params
+ params.permit(:attachments => [:filename, :description]).require(:attachments)
+ end
+end
diff --git a/app/controllers/auth_sources_controller.rb b/app/controllers/auth_sources_controller.rb
new file mode 100644
index 0000000..dcbba36
--- /dev/null
+++ b/app/controllers/auth_sources_controller.rb
@@ -0,0 +1,105 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class AuthSourcesController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+ menu_item :ldap_authentication
+
+ before_action :require_admin
+ before_action :build_new_auth_source, :only => [:new, :create]
+ before_action :find_auth_source, :only => [:edit, :update, :test_connection, :destroy]
+ require_sudo_mode :update, :destroy
+
+ def index
+ @auth_source_pages, @auth_sources = paginate AuthSource, :per_page => 25
+ end
+
+ def new
+ end
+
+ def create
+ if @auth_source.save
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to auth_sources_path
+ else
+ render :action => 'new'
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ @auth_source.safe_attributes = params[:auth_source]
+ if @auth_source.save
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to auth_sources_path
+ else
+ render :action => 'edit'
+ end
+ end
+
+ def test_connection
+ begin
+ @auth_source.test_connection
+ flash[:notice] = l(:notice_successful_connection)
+ rescue Exception => e
+ flash[:error] = l(:error_unable_to_connect, e.message)
+ end
+ redirect_to auth_sources_path
+ end
+
+ def destroy
+ unless @auth_source.users.exists?
+ @auth_source.destroy
+ flash[:notice] = l(:notice_successful_delete)
+ end
+ redirect_to auth_sources_path
+ end
+
+ def autocomplete_for_new_user
+ results = AuthSource.search(params[:term])
+
+ render :json => results.map {|result| {
+ 'value' => result[:login],
+ 'label' => "#{result[:login]} (#{result[:firstname]} #{result[:lastname]})",
+ 'login' => result[:login].to_s,
+ 'firstname' => result[:firstname].to_s,
+ 'lastname' => result[:lastname].to_s,
+ 'mail' => result[:mail].to_s,
+ 'auth_source_id' => result[:auth_source_id].to_s
+ }}
+ end
+
+ private
+
+ def build_new_auth_source
+ @auth_source = AuthSource.new_subclass_instance(params[:type] || 'AuthSourceLdap')
+ if @auth_source
+ @auth_source.safe_attributes = params[:auth_source]
+ else
+ render_404
+ end
+ end
+
+ def find_auth_source
+ @auth_source = AuthSource.find(params[:id])
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+end
diff --git a/app/controllers/auto_completes_controller.rb b/app/controllers/auto_completes_controller.rb
new file mode 100644
index 0000000..2d707f9
--- /dev/null
+++ b/app/controllers/auto_completes_controller.rb
@@ -0,0 +1,63 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class AutoCompletesController < ApplicationController
+ before_action :find_project
+
+ def issues
+ issues = []
+ q = (params[:q] || params[:term]).to_s.strip
+ status = params[:status].to_s
+ issue_id = params[:issue_id].to_s
+ if q.present?
+ scope = Issue.cross_project_scope(@project, params[:scope]).visible
+ if status.present?
+ scope = scope.open(status == 'o')
+ end
+ if issue_id.present?
+ scope = scope.where.not(:id => issue_id.to_i)
+ end
+ if q.match(/\A#?(\d+)\z/)
+ issues << scope.find_by_id($1.to_i)
+ end
+
+ issues += scope.like(q).order(:id => :desc).limit(10).to_a
+ issues.compact!
+ end
+
+ render :json => format_issues_json(issues)
+ end
+
+ private
+
+ def find_project
+ if params[:project_id].present?
+ @project = Project.find(params[:project_id])
+ end
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def format_issues_json(issues)
+ issues.map {|issue| {
+ 'id' => issue.id,
+ 'label' => "#{issue.tracker} ##{issue.id}: #{issue.subject.to_s.truncate(60)}",
+ 'value' => issue.id
+ }
+ }
+ end
+end
diff --git a/app/controllers/boards_controller.rb b/app/controllers/boards_controller.rb
new file mode 100644
index 0000000..03ca50c
--- /dev/null
+++ b/app/controllers/boards_controller.rb
@@ -0,0 +1,121 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class BoardsController < ApplicationController
+ default_search_scope :messages
+ before_action :find_project_by_project_id, :find_board_if_available, :authorize
+ accept_rss_auth :index, :show
+
+ helper :sort
+ include SortHelper
+ helper :watchers
+
+ def index
+ @boards = @project.boards.preload(:last_message => :author).to_a
+ # show the board if there is only one
+ if @boards.size == 1
+ @board = @boards.first
+ show
+ end
+ end
+
+ def show
+ respond_to do |format|
+ format.html {
+ sort_init 'updated_on', 'desc'
+ sort_update 'created_on' => "#{Message.table_name}.id",
+ 'replies' => "#{Message.table_name}.replies_count",
+ 'updated_on' => "COALESCE(#{Message.table_name}.last_reply_id, #{Message.table_name}.id)"
+
+ @topic_count = @board.topics.count
+ @topic_pages = Paginator.new @topic_count, per_page_option, params['page']
+ @topics = @board.topics.
+ reorder(:sticky => :desc).
+ limit(@topic_pages.per_page).
+ offset(@topic_pages.offset).
+ order(sort_clause).
+ preload(:author, {:last_reply => :author}).
+ to_a
+ @message = Message.new(:board => @board)
+ render :action => 'show', :layout => !request.xhr?
+ }
+ format.atom {
+ @messages = @board.messages.
+ reorder(:id => :desc).
+ includes(:author, :board).
+ limit(Setting.feeds_limit.to_i).
+ to_a
+ render_feed(@messages, :title => "#{@project}: #{@board}")
+ }
+ end
+ end
+
+ def new
+ @board = @project.boards.build
+ @board.safe_attributes = params[:board]
+ end
+
+ def create
+ @board = @project.boards.build
+ @board.safe_attributes = params[:board]
+ if @board.save
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to_settings_in_projects
+ else
+ render :action => 'new'
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ @board.safe_attributes = params[:board]
+ if @board.save
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to_settings_in_projects
+ }
+ format.js { head 200 }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'edit' }
+ format.js { head 422 }
+ end
+ end
+ end
+
+ def destroy
+ if @board.destroy
+ flash[:notice] = l(:notice_successful_delete)
+ end
+ redirect_to_settings_in_projects
+ end
+
+private
+ def redirect_to_settings_in_projects
+ redirect_to settings_project_path(@project, :tab => 'boards')
+ end
+
+ def find_board_if_available
+ @board = @project.boards.find(params[:id]) if params[:id]
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+end
diff --git a/app/controllers/calendars_controller.rb b/app/controllers/calendars_controller.rb
new file mode 100644
index 0000000..e07ba2e
--- /dev/null
+++ b/app/controllers/calendars_controller.rb
@@ -0,0 +1,55 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class CalendarsController < ApplicationController
+ menu_item :calendar
+ before_action :find_optional_project
+
+ rescue_from Query::StatementInvalid, :with => :query_statement_invalid
+
+ helper :issues
+ helper :projects
+ helper :queries
+ include QueriesHelper
+
+ def show
+ if params[:year] and params[:year].to_i > 1900
+ @year = params[:year].to_i
+ if params[:month] and params[:month].to_i > 0 and params[:month].to_i < 13
+ @month = params[:month].to_i
+ end
+ end
+ @year ||= User.current.today.year
+ @month ||= User.current.today.month
+
+ @calendar = Redmine::Helpers::Calendar.new(Date.civil(@year, @month, 1), current_language, :month)
+ retrieve_query
+ @query.group_by = nil
+ @query.sort_criteria = nil
+ if @query.valid?
+ events = []
+ events += @query.issues(:include => [:tracker, :assigned_to, :priority],
+ :conditions => ["((start_date BETWEEN ? AND ?) OR (due_date BETWEEN ? AND ?))", @calendar.startdt, @calendar.enddt, @calendar.startdt, @calendar.enddt]
+ )
+ events += @query.versions(:conditions => ["effective_date BETWEEN ? AND ?", @calendar.startdt, @calendar.enddt])
+
+ @calendar.events = events
+ end
+
+ render :action => 'show', :layout => false if request.xhr?
+ end
+end
diff --git a/app/controllers/comments_controller.rb b/app/controllers/comments_controller.rb
new file mode 100644
index 0000000..e7974d4
--- /dev/null
+++ b/app/controllers/comments_controller.rb
@@ -0,0 +1,53 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class CommentsController < ApplicationController
+ default_search_scope :news
+ model_object News
+ before_action :find_model_object
+ before_action :find_project_from_association
+ before_action :authorize
+
+ def create
+ raise Unauthorized unless @news.commentable?
+
+ @comment = Comment.new
+ @comment.safe_attributes = params[:comment]
+ @comment.author = User.current
+ if @news.comments << @comment
+ flash[:notice] = l(:label_comment_added)
+ end
+
+ redirect_to news_path(@news)
+ end
+
+ def destroy
+ @news.comments.find(params[:comment_id]).destroy
+ redirect_to news_path(@news)
+ end
+
+ private
+
+ # ApplicationController's find_model_object sets it based on the controller
+ # name so it needs to be overridden and set to @news instead
+ def find_model_object
+ super
+ @news = @object
+ @comment = nil
+ @news
+ end
+end
diff --git a/app/controllers/context_menus_controller.rb b/app/controllers/context_menus_controller.rb
new file mode 100644
index 0000000..bd69775
--- /dev/null
+++ b/app/controllers/context_menus_controller.rb
@@ -0,0 +1,92 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class ContextMenusController < ApplicationController
+ helper :watchers
+ helper :issues
+
+ before_action :find_issues, :only => :issues
+
+ def issues
+ if (@issues.size == 1)
+ @issue = @issues.first
+ end
+ @issue_ids = @issues.map(&:id).sort
+
+ @allowed_statuses = @issues.map(&:new_statuses_allowed_to).reduce(:&)
+
+ @can = {:edit => @issues.all?(&:attributes_editable?),
+ :log_time => (@project && User.current.allowed_to?(:log_time, @project)),
+ :copy => User.current.allowed_to?(:copy_issues, @projects) && Issue.allowed_target_projects.any?,
+ :add_watchers => User.current.allowed_to?(:add_issue_watchers, @projects),
+ :delete => @issues.all?(&:deletable?)
+ }
+
+ @assignables = @issues.map(&:assignable_users).reduce(:&)
+ @trackers = @projects.map {|p| Issue.allowed_target_trackers(p) }.reduce(:&)
+ @versions = @projects.map {|p| p.shared_versions.open}.reduce(:&)
+
+ @priorities = IssuePriority.active.reverse
+ @back = back_url
+
+ @options_by_custom_field = {}
+ if @can[:edit]
+ custom_fields = @issues.map(&:editable_custom_fields).reduce(:&).reject(&:multiple?).select {|field| field.format.bulk_edit_supported}
+ custom_fields.each do |field|
+ values = field.possible_values_options(@projects)
+ if values.present?
+ @options_by_custom_field[field] = values
+ end
+ end
+ end
+
+ @safe_attributes = @issues.map(&:safe_attribute_names).reduce(:&)
+ render :layout => false
+ end
+
+ def time_entries
+ @time_entries = TimeEntry.where(:id => params[:ids]).
+ preload(:project => :time_entry_activities).
+ preload(:user).to_a
+
+ (render_404; return) unless @time_entries.present?
+ if (@time_entries.size == 1)
+ @time_entry = @time_entries.first
+ end
+
+ @projects = @time_entries.collect(&:project).compact.uniq
+ @project = @projects.first if @projects.size == 1
+ @activities = @projects.map(&:activities).reduce(:&)
+
+ edit_allowed = @time_entries.all? {|t| t.editable_by?(User.current)}
+ @can = {:edit => edit_allowed, :delete => edit_allowed}
+ @back = back_url
+
+ @options_by_custom_field = {}
+ if @can[:edit]
+ custom_fields = @time_entries.map(&:editable_custom_fields).reduce(:&).reject(&:multiple?).select {|field| field.format.bulk_edit_supported}
+ custom_fields.each do |field|
+ values = field.possible_values_options(@projects)
+ if values.present?
+ @options_by_custom_field[field] = values
+ end
+ end
+ end
+
+ render :layout => false
+ end
+end
diff --git a/app/controllers/custom_field_enumerations_controller.rb b/app/controllers/custom_field_enumerations_controller.rb
new file mode 100644
index 0000000..fc186b9
--- /dev/null
+++ b/app/controllers/custom_field_enumerations_controller.rb
@@ -0,0 +1,84 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class CustomFieldEnumerationsController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+
+ before_action :require_admin
+ before_action :find_custom_field
+ before_action :find_enumeration, :only => :destroy
+
+ helper :custom_fields
+
+ def index
+ @values = @custom_field.enumerations.order(:position)
+ end
+
+ def create
+ @value = @custom_field.enumerations.build
+ @value.attributes = enumeration_params
+ @value.save
+ respond_to do |format|
+ format.html { redirect_to custom_field_enumerations_path(@custom_field) }
+ format.js
+ end
+ end
+
+ def update_each
+ saved = CustomFieldEnumeration.update_each(@custom_field, update_each_params)
+ if saved
+ flash[:notice] = l(:notice_successful_update)
+ end
+ redirect_to :action => 'index'
+ end
+
+ def destroy
+ reassign_to = @custom_field.enumerations.find_by_id(params[:reassign_to_id])
+ if reassign_to.nil? && @value.in_use?
+ @enumerations = @custom_field.enumerations - [@value]
+ render :action => 'destroy'
+ return
+ end
+ @value.destroy(reassign_to)
+ redirect_to custom_field_enumerations_path(@custom_field)
+ end
+
+ private
+
+ def find_custom_field
+ @custom_field = CustomField.find(params[:custom_field_id])
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def find_enumeration
+ @value = @custom_field.enumerations.find(params[:id])
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def enumeration_params
+ params.require(:custom_field_enumeration).permit(:name, :active, :position)
+ end
+
+ def update_each_params
+ # params.require(:custom_field_enumerations).permit(:name, :active, :position) does not work here with param like this:
+ # "custom_field_enumerations":{"0":{"name": ...}, "1":{"name...}}
+ params.permit(:custom_field_enumerations => [:name, :active, :position]).require(:custom_field_enumerations)
+ end
+end
diff --git a/app/controllers/custom_fields_controller.rb b/app/controllers/custom_fields_controller.rb
new file mode 100644
index 0000000..41d4a73
--- /dev/null
+++ b/app/controllers/custom_fields_controller.rb
@@ -0,0 +1,104 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class CustomFieldsController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+
+ before_action :require_admin
+ before_action :build_new_custom_field, :only => [:new, :create]
+ before_action :find_custom_field, :only => [:edit, :update, :destroy]
+ accept_api_auth :index
+
+ def index
+ respond_to do |format|
+ format.html {
+ @custom_fields_by_type = CustomField.all.group_by {|f| f.class.name }
+ @custom_fields_projects_count =
+ IssueCustomField.where(is_for_all: false).joins(:projects).group(:custom_field_id).count
+ }
+ format.api {
+ @custom_fields = CustomField.all
+ }
+ end
+ end
+
+ def new
+ @custom_field.field_format = 'string' if @custom_field.field_format.blank?
+ @custom_field.default_value = nil
+ end
+
+ def create
+ if @custom_field.save
+ flash[:notice] = l(:notice_successful_create)
+ call_hook(:controller_custom_fields_new_after_save, :params => params, :custom_field => @custom_field)
+ redirect_to edit_custom_field_path(@custom_field)
+ else
+ render :action => 'new'
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ @custom_field.safe_attributes = params[:custom_field]
+ if @custom_field.save
+ call_hook(:controller_custom_fields_edit_after_save, :params => params, :custom_field => @custom_field)
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_update)
+ redirect_back_or_default edit_custom_field_path(@custom_field)
+ }
+ format.js { head 200 }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'edit' }
+ format.js { head 422 }
+ end
+ end
+ end
+
+ def destroy
+ begin
+ if @custom_field.destroy
+ flash[:notice] = l(:notice_successful_delete)
+ end
+ rescue
+ flash[:error] = l(:error_can_not_delete_custom_field)
+ end
+ redirect_to custom_fields_path(:tab => @custom_field.class.name)
+ end
+
+ private
+
+ def build_new_custom_field
+ @custom_field = CustomField.new_subclass_instance(params[:type])
+ if @custom_field.nil?
+ render :action => 'select_type'
+ else
+ @custom_field.safe_attributes = params[:custom_field]
+ end
+ end
+
+ def find_custom_field
+ @custom_field = CustomField.find(params[:id])
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+end
diff --git a/app/controllers/documents_controller.rb b/app/controllers/documents_controller.rb
new file mode 100644
index 0000000..dbf0e88
--- /dev/null
+++ b/app/controllers/documents_controller.rb
@@ -0,0 +1,95 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class DocumentsController < ApplicationController
+ default_search_scope :documents
+ model_object Document
+ before_action :find_project_by_project_id, :only => [:index, :new, :create]
+ before_action :find_model_object, :except => [:index, :new, :create]
+ before_action :find_project_from_association, :except => [:index, :new, :create]
+ before_action :authorize
+
+ helper :attachments
+ helper :custom_fields
+
+ def index
+ @sort_by = %w(category date title author).include?(params[:sort_by]) ? params[:sort_by] : 'category'
+ documents = @project.documents.includes(:attachments, :category).to_a
+ case @sort_by
+ when 'date'
+ @grouped = documents.group_by {|d| d.updated_on.to_date }
+ when 'title'
+ @grouped = documents.group_by {|d| d.title.first.upcase}
+ when 'author'
+ @grouped = documents.select{|d| d.attachments.any?}.group_by {|d| d.attachments.last.author}
+ else
+ @grouped = documents.group_by(&:category)
+ end
+ @document = @project.documents.build
+ render :layout => false if request.xhr?
+ end
+
+ def show
+ @attachments = @document.attachments.to_a
+ end
+
+ def new
+ @document = @project.documents.build
+ @document.safe_attributes = params[:document]
+ end
+
+ def create
+ @document = @project.documents.build
+ @document.safe_attributes = params[:document]
+ @document.save_attachments(params[:attachments])
+ if @document.save
+ render_attachment_warning_if_needed(@document)
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to project_documents_path(@project)
+ else
+ render :action => 'new'
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ @document.safe_attributes = params[:document]
+ if @document.save
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to document_path(@document)
+ else
+ render :action => 'edit'
+ end
+ end
+
+ def destroy
+ @document.destroy if request.delete?
+ redirect_to project_documents_path(@project)
+ end
+
+ def add_attachment
+ attachments = Attachment.attach_files(@document, params[:attachments])
+ render_attachment_warning_if_needed(@document)
+
+ if attachments.present? && attachments[:files].present? && Setting.notified_events.include?('document_added')
+ Mailer.attachments_added(attachments[:files]).deliver
+ end
+ redirect_to document_path(@document)
+ end
+end
diff --git a/app/controllers/email_addresses_controller.rb b/app/controllers/email_addresses_controller.rb
new file mode 100644
index 0000000..2202625
--- /dev/null
+++ b/app/controllers/email_addresses_controller.rb
@@ -0,0 +1,104 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class EmailAddressesController < ApplicationController
+ self.main_menu = false
+ before_action :find_user, :require_admin_or_current_user
+ before_action :find_email_address, :only => [:update, :destroy]
+ require_sudo_mode :create, :update, :destroy
+
+ def index
+ @addresses = @user.email_addresses.order(:id).where(:is_default => false).to_a
+ @address ||= EmailAddress.new
+ end
+
+ def create
+ saved = false
+ if @user.email_addresses.count <= Setting.max_additional_emails.to_i
+ @address = EmailAddress.new(:user => @user, :is_default => false)
+ @address.safe_attributes = params[:email_address]
+ saved = @address.save
+ end
+
+ respond_to do |format|
+ format.html {
+ if saved
+ redirect_to user_email_addresses_path(@user)
+ else
+ index
+ render :action => 'index'
+ end
+ }
+ format.js {
+ @address = nil if saved
+ index
+ render :action => 'index'
+ }
+ end
+ end
+
+ def update
+ if params[:notify].present?
+ @address.notify = params[:notify].to_s
+ end
+ @address.save
+
+ respond_to do |format|
+ format.html {
+ redirect_to user_email_addresses_path(@user)
+ }
+ format.js {
+ @address = nil
+ index
+ render :action => 'index'
+ }
+ end
+ end
+
+ def destroy
+ @address.destroy
+
+ respond_to do |format|
+ format.html {
+ redirect_to user_email_addresses_path(@user)
+ }
+ format.js {
+ @address = nil
+ index
+ render :action => 'index'
+ }
+ end
+ end
+
+ private
+
+ def find_user
+ @user = User.find(params[:user_id])
+ end
+
+ def find_email_address
+ @address = @user.email_addresses.where(:is_default => false).find(params[:id])
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def require_admin_or_current_user
+ unless @user == User.current
+ require_admin
+ end
+ end
+end
diff --git a/app/controllers/enumerations_controller.rb b/app/controllers/enumerations_controller.rb
new file mode 100644
index 0000000..a04d7b1
--- /dev/null
+++ b/app/controllers/enumerations_controller.rb
@@ -0,0 +1,113 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class EnumerationsController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+
+ before_action :require_admin, :except => :index
+ before_action :require_admin_or_api_request, :only => :index
+ before_action :build_new_enumeration, :only => [:new, :create]
+ before_action :find_enumeration, :only => [:edit, :update, :destroy]
+ accept_api_auth :index
+
+ helper :custom_fields
+
+ def index
+ respond_to do |format|
+ format.html
+ format.api {
+ @klass = Enumeration.get_subclass(params[:type])
+ if @klass
+ @enumerations = @klass.shared.sorted.to_a
+ else
+ render_404
+ end
+ }
+ end
+ end
+
+ def new
+ end
+
+ def create
+ if request.post? && @enumeration.save
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to enumerations_path
+ else
+ render :action => 'new'
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ if @enumeration.update_attributes(enumeration_params)
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to enumerations_path
+ }
+ format.js { head 200 }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'edit' }
+ format.js { head 422 }
+ end
+ end
+ end
+
+ def destroy
+ if !@enumeration.in_use?
+ # No associated objects
+ @enumeration.destroy
+ redirect_to enumerations_path
+ return
+ elsif params[:reassign_to_id].present? && (reassign_to = @enumeration.class.find_by_id(params[:reassign_to_id].to_i))
+ @enumeration.destroy(reassign_to)
+ redirect_to enumerations_path
+ return
+ end
+ @enumerations = @enumeration.class.system.to_a - [@enumeration]
+ end
+
+ private
+
+ def build_new_enumeration
+ class_name = params[:enumeration] && params[:enumeration][:type] || params[:type]
+ @enumeration = Enumeration.new_subclass_instance(class_name)
+ if @enumeration
+ @enumeration.attributes = enumeration_params || {}
+ else
+ render_404
+ end
+ end
+
+ def find_enumeration
+ @enumeration = Enumeration.find(params[:id])
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def enumeration_params
+ # can't require enumeration on #new action
+ cf_ids = @enumeration.available_custom_fields.map{|c| c.id.to_s}
+ params.permit(:enumeration => [:name, :active, :is_default, :position, :custom_field_values => cf_ids])[:enumeration]
+ end
+end
diff --git a/app/controllers/files_controller.rb b/app/controllers/files_controller.rb
new file mode 100644
index 0000000..7c59665
--- /dev/null
+++ b/app/controllers/files_controller.rb
@@ -0,0 +1,76 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class FilesController < ApplicationController
+ menu_item :files
+
+ before_action :find_project_by_project_id
+ before_action :authorize
+ accept_api_auth :index, :create
+
+ helper :attachments
+ helper :sort
+ include SortHelper
+
+ def index
+ sort_init 'filename', 'asc'
+ sort_update 'filename' => "#{Attachment.table_name}.filename",
+ 'created_on' => "#{Attachment.table_name}.created_on",
+ 'size' => "#{Attachment.table_name}.filesize",
+ 'downloads' => "#{Attachment.table_name}.downloads"
+
+ @containers = [Project.includes(:attachments).
+ references(:attachments).reorder(sort_clause).find(@project.id)]
+ @containers += @project.versions.includes(:attachments).
+ references(:attachments).reorder(sort_clause).to_a.sort.reverse
+ respond_to do |format|
+ format.html { render :layout => !request.xhr? }
+ format.api
+ end
+ end
+
+ def new
+ @versions = @project.versions.sort
+ end
+
+ def create
+ version_id = params[:version_id] || (params[:file] && params[:file][:version_id])
+ container = version_id.blank? ? @project : @project.versions.find_by_id(version_id)
+ attachments = Attachment.attach_files(container, (params[:attachments] || (params[:file] && params[:file][:token] && params)))
+ render_attachment_warning_if_needed(container)
+
+ if attachments[:files].present?
+ if Setting.notified_events.include?('file_added')
+ Mailer.attachments_added(attachments[:files]).deliver
+ end
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:label_file_added)
+ redirect_to project_files_path(@project) }
+ format.api { render_api_ok }
+ end
+ else
+ respond_to do |format|
+ format.html {
+ flash.now[:error] = l(:label_attachment) + " " + l('activerecord.errors.messages.invalid')
+ new
+ render :action => 'new' }
+ format.api { render :status => :bad_request }
+ end
+ end
+ end
+end
diff --git a/app/controllers/gantts_controller.rb b/app/controllers/gantts_controller.rb
new file mode 100644
index 0000000..3283282
--- /dev/null
+++ b/app/controllers/gantts_controller.rb
@@ -0,0 +1,46 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class GanttsController < ApplicationController
+ menu_item :gantt
+ before_action :find_optional_project
+
+ rescue_from Query::StatementInvalid, :with => :query_statement_invalid
+
+ helper :gantt
+ helper :issues
+ helper :projects
+ helper :queries
+ include QueriesHelper
+ include Redmine::Export::PDF
+
+ def show
+ @gantt = Redmine::Helpers::Gantt.new(params)
+ @gantt.project = @project
+ retrieve_query
+ @query.group_by = nil
+ @gantt.query = @query if @query.valid?
+
+ basename = (@project ? "#{@project.identifier}-" : '') + 'gantt'
+
+ respond_to do |format|
+ format.html { render :action => "show", :layout => !request.xhr? }
+ format.png { send_data(@gantt.to_image, :disposition => 'inline', :type => 'image/png', :filename => "#{basename}.png") } if @gantt.respond_to?('to_image')
+ format.pdf { send_data(@gantt.to_pdf, :type => 'application/pdf', :filename => "#{basename}.pdf") }
+ end
+ end
+end
diff --git a/app/controllers/groups_controller.rb b/app/controllers/groups_controller.rb
new file mode 100644
index 0000000..4379ee3
--- /dev/null
+++ b/app/controllers/groups_controller.rb
@@ -0,0 +1,155 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class GroupsController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+
+ before_action :require_admin
+ before_action :find_group, :except => [:index, :new, :create]
+ accept_api_auth :index, :show, :create, :update, :destroy, :add_users, :remove_user
+
+ require_sudo_mode :add_users, :remove_user, :create, :update, :destroy, :edit_membership, :destroy_membership
+
+ helper :custom_fields
+ helper :principal_memberships
+
+ def index
+ respond_to do |format|
+ format.html {
+ scope = Group.sorted
+ scope = scope.like(params[:name]) if params[:name].present?
+
+ @group_count = scope.count
+ @group_pages = Paginator.new @group_count, per_page_option, params['page']
+ @groups = scope.limit(@group_pages.per_page).offset(@group_pages.offset).to_a
+ @user_count_by_group_id = user_count_by_group_id
+ }
+ format.api {
+ scope = Group.sorted
+ scope = scope.givable unless params[:builtin] == '1'
+ @groups = scope.to_a
+ }
+ end
+ end
+
+ def show
+ respond_to do |format|
+ format.html
+ format.api
+ end
+ end
+
+ def new
+ @group = Group.new
+ end
+
+ def create
+ @group = Group.new
+ @group.safe_attributes = params[:group]
+
+ respond_to do |format|
+ if @group.save
+ format.html {
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to(params[:continue] ? new_group_path : groups_path)
+ }
+ format.api { render :action => 'show', :status => :created, :location => group_url(@group) }
+ else
+ format.html { render :action => "new" }
+ format.api { render_validation_errors(@group) }
+ end
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ @group.safe_attributes = params[:group]
+
+ respond_to do |format|
+ if @group.save
+ flash[:notice] = l(:notice_successful_update)
+ format.html { redirect_to_referer_or(groups_path) }
+ format.api { render_api_ok }
+ else
+ format.html { render :action => "edit" }
+ format.api { render_validation_errors(@group) }
+ end
+ end
+ end
+
+ def destroy
+ @group.destroy
+
+ respond_to do |format|
+ format.html { redirect_to_referer_or(groups_path) }
+ format.api { render_api_ok }
+ end
+ end
+
+ def new_users
+ end
+
+ def add_users
+ @users = User.not_in_group(@group).where(:id => (params[:user_id] || params[:user_ids])).to_a
+ @group.users << @users
+ respond_to do |format|
+ format.html { redirect_to edit_group_path(@group, :tab => 'users') }
+ format.js
+ format.api {
+ if @users.any?
+ render_api_ok
+ else
+ render_api_errors "#{l(:label_user)} #{l('activerecord.errors.messages.invalid')}"
+ end
+ }
+ end
+ end
+
+ def remove_user
+ @group.users.delete(User.find(params[:user_id])) if request.delete?
+ respond_to do |format|
+ format.html { redirect_to edit_group_path(@group, :tab => 'users') }
+ format.js
+ format.api { render_api_ok }
+ end
+ end
+
+ def autocomplete_for_user
+ respond_to do |format|
+ format.js
+ end
+ end
+
+ private
+
+ def find_group
+ @group = Group.find(params[:id])
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def user_count_by_group_id
+ h = User.joins(:groups).group('group_id').count
+ h.keys.each do |key|
+ h[key.to_i] = h.delete(key)
+ end
+ h
+ end
+end
diff --git a/app/controllers/imports_controller.rb b/app/controllers/imports_controller.rb
new file mode 100644
index 0000000..96589ac
--- /dev/null
+++ b/app/controllers/imports_controller.rb
@@ -0,0 +1,122 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'csv'
+
+class ImportsController < ApplicationController
+ menu_item :issues
+
+ before_action :find_import, :only => [:show, :settings, :mapping, :run]
+ before_action :authorize_global
+
+ helper :issues
+ helper :queries
+
+ def new
+ end
+
+ def create
+ @import = IssueImport.new
+ @import.user = User.current
+ @import.file = params[:file]
+ @import.set_default_settings
+
+ if @import.save
+ redirect_to import_settings_path(@import)
+ else
+ render :action => 'new'
+ end
+ end
+
+ def show
+ end
+
+ def settings
+ if request.post? && @import.parse_file
+ redirect_to import_mapping_path(@import)
+ end
+
+ rescue CSV::MalformedCSVError => e
+ flash.now[:error] = l(:error_invalid_csv_file_or_settings)
+ rescue ArgumentError, EncodingError => e
+ flash.now[:error] = l(:error_invalid_file_encoding, :encoding => ERB::Util.h(@import.settings['encoding']))
+ rescue SystemCallError => e
+ flash.now[:error] = l(:error_can_not_read_import_file)
+ end
+
+ def mapping
+ @custom_fields = @import.mappable_custom_fields
+
+ if request.post?
+ respond_to do |format|
+ format.html {
+ if params[:previous]
+ redirect_to import_settings_path(@import)
+ else
+ redirect_to import_run_path(@import)
+ end
+ }
+ format.js # updates mapping form on project or tracker change
+ end
+ end
+ end
+
+ def run
+ if request.post?
+ @current = @import.run(
+ :max_items => max_items_per_request,
+ :max_time => 10.seconds
+ )
+ respond_to do |format|
+ format.html {
+ if @import.finished?
+ redirect_to import_path(@import)
+ else
+ redirect_to import_run_path(@import)
+ end
+ }
+ format.js
+ end
+ end
+ end
+
+ private
+
+ def find_import
+ @import = Import.where(:user_id => User.current.id, :filename => params[:id]).first
+ if @import.nil?
+ render_404
+ return
+ elsif @import.finished? && action_name != 'show'
+ redirect_to import_path(@import)
+ return
+ end
+ update_from_params if request.post?
+ end
+
+ def update_from_params
+ if params[:import_settings].is_a?(Hash)
+ @import.settings ||= {}
+ @import.settings.merge!(params[:import_settings])
+ @import.save!
+ end
+ end
+
+ def max_items_per_request
+ 5
+ end
+end
diff --git a/app/controllers/issue_categories_controller.rb b/app/controllers/issue_categories_controller.rb
new file mode 100644
index 0000000..d635a28
--- /dev/null
+++ b/app/controllers/issue_categories_controller.rb
@@ -0,0 +1,122 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssueCategoriesController < ApplicationController
+ menu_item :settings
+ model_object IssueCategory
+ before_action :find_model_object, :except => [:index, :new, :create]
+ before_action :find_project_from_association, :except => [:index, :new, :create]
+ before_action :find_project_by_project_id, :only => [:index, :new, :create]
+ before_action :authorize
+ accept_api_auth :index, :show, :create, :update, :destroy
+
+ def index
+ respond_to do |format|
+ format.html { redirect_to_settings_in_projects }
+ format.api { @categories = @project.issue_categories.to_a }
+ end
+ end
+
+ def show
+ respond_to do |format|
+ format.html { redirect_to_settings_in_projects }
+ format.api
+ end
+ end
+
+ def new
+ @category = @project.issue_categories.build
+ @category.safe_attributes = params[:issue_category]
+
+ respond_to do |format|
+ format.html
+ format.js
+ end
+ end
+
+ def create
+ @category = @project.issue_categories.build
+ @category.safe_attributes = params[:issue_category]
+ if @category.save
+ respond_to do |format|
+ format.html do
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to_settings_in_projects
+ end
+ format.js
+ format.api { render :action => 'show', :status => :created, :location => issue_category_path(@category) }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'new'}
+ format.js { render :action => 'new'}
+ format.api { render_validation_errors(@category) }
+ end
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ @category.safe_attributes = params[:issue_category]
+ if @category.save
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to_settings_in_projects
+ }
+ format.api { render_api_ok }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'edit' }
+ format.api { render_validation_errors(@category) }
+ end
+ end
+ end
+
+ def destroy
+ @issue_count = @category.issues.size
+ if @issue_count == 0 || params[:todo] || api_request?
+ reassign_to = nil
+ if params[:reassign_to_id] && (params[:todo] == 'reassign' || params[:todo].blank?)
+ reassign_to = @project.issue_categories.find_by_id(params[:reassign_to_id])
+ end
+ @category.destroy(reassign_to)
+ respond_to do |format|
+ format.html { redirect_to_settings_in_projects }
+ format.api { render_api_ok }
+ end
+ return
+ end
+ @categories = @project.issue_categories - [@category]
+ end
+
+ private
+
+ def redirect_to_settings_in_projects
+ redirect_to settings_project_path(@project, :tab => 'categories')
+ end
+
+ # Wrap ApplicationController's find_model_object method to set
+ # @category instead of just @issue_category
+ def find_model_object
+ super
+ @category = @object
+ end
+end
diff --git a/app/controllers/issue_relations_controller.rb b/app/controllers/issue_relations_controller.rb
new file mode 100644
index 0000000..0bcc8c5
--- /dev/null
+++ b/app/controllers/issue_relations_controller.rb
@@ -0,0 +1,98 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssueRelationsController < ApplicationController
+ helper :issues
+
+ before_action :find_issue, :authorize, :only => [:index, :create]
+ before_action :find_relation, :only => [:show, :destroy]
+
+ accept_api_auth :index, :show, :create, :destroy
+
+ def index
+ @relations = @issue.relations
+
+ respond_to do |format|
+ format.html { head 200 }
+ format.api
+ end
+ end
+
+ def show
+ raise Unauthorized unless @relation.visible?
+
+ respond_to do |format|
+ format.html { head 200 }
+ format.api
+ end
+ end
+
+ def create
+ @relation = IssueRelation.new
+ @relation.issue_from = @issue
+ @relation.safe_attributes = params[:relation]
+ @relation.init_journals(User.current)
+
+ begin
+ saved = @relation.save
+ rescue ActiveRecord::RecordNotUnique
+ saved = false
+ @relation.errors.add :base, :taken
+ end
+
+ respond_to do |format|
+ format.html { redirect_to issue_path(@issue) }
+ format.js {
+ @relations = @issue.reload.relations.select {|r| r.other_issue(@issue) && r.other_issue(@issue).visible? }
+ }
+ format.api {
+ if saved
+ render :action => 'show', :status => :created, :location => relation_url(@relation)
+ else
+ render_validation_errors(@relation)
+ end
+ }
+ end
+ end
+
+ def destroy
+ raise Unauthorized unless @relation.deletable?
+ @relation.init_journals(User.current)
+ @relation.destroy
+
+ respond_to do |format|
+ format.html { redirect_to issue_path(@relation.issue_from) }
+ format.js
+ format.api { render_api_ok }
+ end
+ end
+
+ private
+
+ def find_issue
+ @issue = Issue.find(params[:issue_id])
+ @project = @issue.project
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def find_relation
+ @relation = IssueRelation.find(params[:id])
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+end
diff --git a/app/controllers/issue_statuses_controller.rb b/app/controllers/issue_statuses_controller.rb
new file mode 100644
index 0000000..92c0337
--- /dev/null
+++ b/app/controllers/issue_statuses_controller.rb
@@ -0,0 +1,88 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssueStatusesController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+
+ before_action :require_admin, :except => :index
+ before_action :require_admin_or_api_request, :only => :index
+ accept_api_auth :index
+
+ def index
+ @issue_statuses = IssueStatus.sorted.to_a
+ respond_to do |format|
+ format.html { render :layout => false if request.xhr? }
+ format.api
+ end
+ end
+
+ def new
+ @issue_status = IssueStatus.new
+ end
+
+ def create
+ @issue_status = IssueStatus.new
+ @issue_status.safe_attributes = params[:issue_status]
+ if @issue_status.save
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to issue_statuses_path
+ else
+ render :action => 'new'
+ end
+ end
+
+ def edit
+ @issue_status = IssueStatus.find(params[:id])
+ end
+
+ def update
+ @issue_status = IssueStatus.find(params[:id])
+ @issue_status.safe_attributes = params[:issue_status]
+ if @issue_status.save
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to issue_statuses_path(:page => params[:page])
+ }
+ format.js { head 200 }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'edit' }
+ format.js { head 422 }
+ end
+ end
+ end
+
+ def destroy
+ IssueStatus.find(params[:id]).destroy
+ redirect_to issue_statuses_path
+ rescue
+ flash[:error] = l(:error_unable_delete_issue_status)
+ redirect_to issue_statuses_path
+ end
+
+ def update_issue_done_ratio
+ if request.post? && IssueStatus.update_issue_done_ratios
+ flash[:notice] = l(:notice_issue_done_ratios_updated)
+ else
+ flash[:error] = l(:error_issue_done_ratios_not_updated)
+ end
+ redirect_to issue_statuses_path
+ end
+end
diff --git a/app/controllers/issues_controller.rb b/app/controllers/issues_controller.rb
new file mode 100644
index 0000000..69a947b
--- /dev/null
+++ b/app/controllers/issues_controller.rb
@@ -0,0 +1,602 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssuesController < ApplicationController
+ default_search_scope :issues
+
+ before_action :find_issue, :only => [:show, :edit, :update]
+ before_action :find_issues, :only => [:bulk_edit, :bulk_update, :destroy]
+ before_action :authorize, :except => [:index, :new, :create]
+ before_action :find_optional_project, :only => [:index, :new, :create]
+ before_action :build_new_issue_from_params, :only => [:new, :create]
+ accept_rss_auth :index, :show
+ accept_api_auth :index, :show, :create, :update, :destroy
+
+ rescue_from Query::StatementInvalid, :with => :query_statement_invalid
+
+ helper :journals
+ helper :projects
+ helper :custom_fields
+ helper :issue_relations
+ helper :watchers
+ helper :attachments
+ helper :queries
+ include QueriesHelper
+ helper :repositories
+ helper :timelog
+
+ def index
+ use_session = !request.format.csv?
+ retrieve_query(IssueQuery, use_session)
+
+ if @query.valid?
+ respond_to do |format|
+ format.html {
+ @issue_count = @query.issue_count
+ @issue_pages = Paginator.new @issue_count, per_page_option, params['page']
+ @issues = @query.issues(:offset => @issue_pages.offset, :limit => @issue_pages.per_page)
+ render :layout => !request.xhr?
+ }
+ format.api {
+ @offset, @limit = api_offset_and_limit
+ @query.column_names = %w(author)
+ @issue_count = @query.issue_count
+ @issues = @query.issues(:offset => @offset, :limit => @limit)
+ Issue.load_visible_relations(@issues) if include_in_api_response?('relations')
+ }
+ format.atom {
+ @issues = @query.issues(:limit => Setting.feeds_limit.to_i)
+ render_feed(@issues, :title => "#{@project || Setting.app_title}: #{l(:label_issue_plural)}")
+ }
+ format.csv {
+ @issues = @query.issues(:limit => Setting.issues_export_limit.to_i)
+ send_data(query_to_csv(@issues, @query, params[:csv]), :type => 'text/csv; header=present', :filename => 'issues.csv')
+ }
+ format.pdf {
+ @issues = @query.issues(:limit => Setting.issues_export_limit.to_i)
+ send_file_headers! :type => 'application/pdf', :filename => 'issues.pdf'
+ }
+ end
+ else
+ respond_to do |format|
+ format.html { render :layout => !request.xhr? }
+ format.any(:atom, :csv, :pdf) { head 422 }
+ format.api { render_validation_errors(@query) }
+ end
+ end
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def show
+ @journals = @issue.visible_journals_with_index
+ @changesets = @issue.changesets.visible.preload(:repository, :user).to_a
+ @relations = @issue.relations.select {|r| r.other_issue(@issue) && r.other_issue(@issue).visible? }
+
+ if User.current.wants_comments_in_reverse_order?
+ @journals.reverse!
+ @changesets.reverse!
+ end
+
+ if User.current.allowed_to?(:view_time_entries, @project)
+ Issue.load_visible_spent_hours([@issue])
+ Issue.load_visible_total_spent_hours([@issue])
+ end
+
+ respond_to do |format|
+ format.html {
+ @allowed_statuses = @issue.new_statuses_allowed_to(User.current)
+ @priorities = IssuePriority.active
+ @time_entry = TimeEntry.new(:issue => @issue, :project => @issue.project)
+ @relation = IssueRelation.new
+ retrieve_previous_and_next_issue_ids
+ render :template => 'issues/show'
+ }
+ format.api
+ format.atom { render :template => 'journals/index', :layout => false, :content_type => 'application/atom+xml' }
+ format.pdf {
+ send_file_headers! :type => 'application/pdf', :filename => "#{@project.identifier}-#{@issue.id}.pdf"
+ }
+ end
+ end
+
+ def new
+ respond_to do |format|
+ format.html { render :action => 'new', :layout => !request.xhr? }
+ format.js
+ end
+ end
+
+ def create
+ unless User.current.allowed_to?(:add_issues, @issue.project, :global => true)
+ raise ::Unauthorized
+ end
+ call_hook(:controller_issues_new_before_save, { :params => params, :issue => @issue })
+ @issue.save_attachments(params[:attachments] || (params[:issue] && params[:issue][:uploads]))
+ if @issue.save
+ call_hook(:controller_issues_new_after_save, { :params => params, :issue => @issue})
+ respond_to do |format|
+ format.html {
+ render_attachment_warning_if_needed(@issue)
+ flash[:notice] = l(:notice_issue_successful_create, :id => view_context.link_to("##{@issue.id}", issue_path(@issue), :title => @issue.subject))
+ redirect_after_create
+ }
+ format.api { render :action => 'show', :status => :created, :location => issue_url(@issue) }
+ end
+ return
+ else
+ respond_to do |format|
+ format.html {
+ if @issue.project.nil?
+ render_error :status => 422
+ else
+ render :action => 'new'
+ end
+ }
+ format.api { render_validation_errors(@issue) }
+ end
+ end
+ end
+
+ def edit
+ return unless update_issue_from_params
+
+ respond_to do |format|
+ format.html { }
+ format.js
+ end
+ end
+
+ def update
+ return unless update_issue_from_params
+ @issue.save_attachments(params[:attachments] || (params[:issue] && params[:issue][:uploads]))
+ saved = false
+ begin
+ saved = save_issue_with_child_records
+ rescue ActiveRecord::StaleObjectError
+ @conflict = true
+ if params[:last_journal_id]
+ @conflict_journals = @issue.journals_after(params[:last_journal_id]).to_a
+ @conflict_journals.reject!(&:private_notes?) unless User.current.allowed_to?(:view_private_notes, @issue.project)
+ end
+ end
+
+ if saved
+ render_attachment_warning_if_needed(@issue)
+ flash[:notice] = l(:notice_successful_update) unless @issue.current_journal.new_record?
+
+ respond_to do |format|
+ format.html { redirect_back_or_default issue_path(@issue, previous_and_next_issue_ids_params) }
+ format.api { render_api_ok }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'edit' }
+ format.api { render_validation_errors(@issue) }
+ end
+ end
+ end
+
+ # Bulk edit/copy a set of issues
+ def bulk_edit
+ @issues.sort!
+ @copy = params[:copy].present?
+ @notes = params[:notes]
+
+ if @copy
+ unless User.current.allowed_to?(:copy_issues, @projects)
+ raise ::Unauthorized
+ end
+ else
+ unless @issues.all?(&:attributes_editable?)
+ raise ::Unauthorized
+ end
+ end
+
+ edited_issues = Issue.where(:id => @issues.map(&:id)).to_a
+
+ @values_by_custom_field = {}
+ edited_issues.each do |issue|
+ issue.custom_field_values.each do |c|
+ if c.value_present?
+ @values_by_custom_field[c.custom_field] ||= []
+ @values_by_custom_field[c.custom_field] << issue.id
+ end
+ end
+ end
+
+ @allowed_projects = Issue.allowed_target_projects
+ if params[:issue]
+ @target_project = @allowed_projects.detect {|p| p.id.to_s == params[:issue][:project_id].to_s}
+ if @target_project
+ target_projects = [@target_project]
+ edited_issues.each {|issue| issue.project = @target_project}
+ end
+ end
+ target_projects ||= @projects
+
+ @trackers = target_projects.map {|p| Issue.allowed_target_trackers(p) }.reduce(:&)
+ if params[:issue]
+ @target_tracker = @trackers.detect {|t| t.id.to_s == params[:issue][:tracker_id].to_s}
+ if @target_tracker
+ edited_issues.each {|issue| issue.tracker = @target_tracker}
+ end
+ end
+
+ if @copy
+ # Copied issues will get their default statuses
+ @available_statuses = []
+ else
+ @available_statuses = edited_issues.map(&:new_statuses_allowed_to).reduce(:&)
+ end
+ if params[:issue]
+ @target_status = @available_statuses.detect {|t| t.id.to_s == params[:issue][:status_id].to_s}
+ if @target_status
+ edited_issues.each {|issue| issue.status = @target_status}
+ end
+ end
+
+ edited_issues.each do |issue|
+ issue.custom_field_values.each do |c|
+ if c.value_present? && @values_by_custom_field[c.custom_field]
+ @values_by_custom_field[c.custom_field].delete(issue.id)
+ end
+ end
+ end
+ @values_by_custom_field.delete_if {|k,v| v.blank?}
+
+ @custom_fields = edited_issues.map{|i|i.editable_custom_fields}.reduce(:&).select {|field| field.format.bulk_edit_supported}
+ @assignables = target_projects.map(&:assignable_users).reduce(:&)
+ @versions = target_projects.map {|p| p.shared_versions.open}.reduce(:&)
+ @categories = target_projects.map {|p| p.issue_categories}.reduce(:&)
+ if @copy
+ @attachments_present = @issues.detect {|i| i.attachments.any?}.present?
+ @subtasks_present = @issues.detect {|i| !i.leaf?}.present?
+ @watchers_present = User.current.allowed_to?(:add_issue_watchers, @projects) && Watcher.where(:watchable_type => 'Issue', :watchable_id => @issues.map(&:id)).exists?
+ end
+
+ @safe_attributes = edited_issues.map(&:safe_attribute_names).reduce(:&)
+
+ @issue_params = params[:issue] || {}
+ @issue_params[:custom_field_values] ||= {}
+ end
+
+ def bulk_update
+ @issues.sort!
+ @copy = params[:copy].present?
+
+ attributes = parse_params_for_bulk_update(params[:issue])
+ copy_subtasks = (params[:copy_subtasks] == '1')
+ copy_attachments = (params[:copy_attachments] == '1')
+ copy_watchers = (params[:copy_watchers] == '1')
+
+ if @copy
+ unless User.current.allowed_to?(:copy_issues, @projects)
+ raise ::Unauthorized
+ end
+ target_projects = @projects
+ if attributes['project_id'].present?
+ target_projects = Project.where(:id => attributes['project_id']).to_a
+ end
+ unless User.current.allowed_to?(:add_issues, target_projects)
+ raise ::Unauthorized
+ end
+ unless User.current.allowed_to?(:add_issue_watchers, @projects)
+ copy_watchers = false
+ end
+ else
+ unless @issues.all?(&:attributes_editable?)
+ raise ::Unauthorized
+ end
+ end
+
+ unsaved_issues = []
+ saved_issues = []
+
+ if @copy && copy_subtasks
+ # Descendant issues will be copied with the parent task
+ # Don't copy them twice
+ @issues.reject! {|issue| @issues.detect {|other| issue.is_descendant_of?(other)}}
+ end
+
+ @issues.each do |orig_issue|
+ orig_issue.reload
+ if @copy
+ issue = orig_issue.copy({},
+ :attachments => copy_attachments,
+ :subtasks => copy_subtasks,
+ :watchers => copy_watchers,
+ :link => link_copy?(params[:link_copy])
+ )
+ else
+ issue = orig_issue
+ end
+ journal = issue.init_journal(User.current, params[:notes])
+ issue.safe_attributes = attributes
+ call_hook(:controller_issues_bulk_edit_before_save, { :params => params, :issue => issue })
+ if issue.save
+ saved_issues << issue
+ else
+ unsaved_issues << orig_issue
+ end
+ end
+
+ if unsaved_issues.empty?
+ flash[:notice] = l(:notice_successful_update) unless saved_issues.empty?
+ if params[:follow]
+ if @issues.size == 1 && saved_issues.size == 1
+ redirect_to issue_path(saved_issues.first)
+ elsif saved_issues.map(&:project).uniq.size == 1
+ redirect_to project_issues_path(saved_issues.map(&:project).first)
+ end
+ else
+ redirect_back_or_default _project_issues_path(@project)
+ end
+ else
+ @saved_issues = @issues
+ @unsaved_issues = unsaved_issues
+ @issues = Issue.visible.where(:id => @unsaved_issues.map(&:id)).to_a
+ bulk_edit
+ render :action => 'bulk_edit'
+ end
+ end
+
+ def destroy
+ raise Unauthorized unless @issues.all?(&:deletable?)
+
+ # all issues and their descendants are about to be deleted
+ issues_and_descendants_ids = Issue.self_and_descendants(@issues).pluck(:id)
+ time_entries = TimeEntry.where(:issue_id => issues_and_descendants_ids)
+ @hours = time_entries.sum(:hours).to_f
+
+ if @hours > 0
+ case params[:todo]
+ when 'destroy'
+ # nothing to do
+ when 'nullify'
+ if Setting.timelog_required_fields.include?('issue_id')
+ flash.now[:error] = l(:field_issue) + " " + ::I18n.t('activerecord.errors.messages.blank')
+ return
+ else
+ time_entries.update_all(:issue_id => nil)
+ end
+ when 'reassign'
+ reassign_to = @project && @project.issues.find_by_id(params[:reassign_to_id])
+ if reassign_to.nil?
+ flash.now[:error] = l(:error_issue_not_found_in_project)
+ return
+ elsif issues_and_descendants_ids.include?(reassign_to.id)
+ flash.now[:error] = l(:error_cannot_reassign_time_entries_to_an_issue_about_to_be_deleted)
+ return
+ else
+ time_entries.update_all(:issue_id => reassign_to.id, :project_id => reassign_to.project_id)
+ end
+ else
+ # display the destroy form if it's a user request
+ return unless api_request?
+ end
+ end
+ @issues.each do |issue|
+ begin
+ issue.reload.destroy
+ rescue ::ActiveRecord::RecordNotFound # raised by #reload if issue no longer exists
+ # nothing to do, issue was already deleted (eg. by a parent)
+ end
+ end
+ respond_to do |format|
+ format.html { redirect_back_or_default _project_issues_path(@project) }
+ format.api { render_api_ok }
+ end
+ end
+
+ # Overrides Redmine::MenuManager::MenuController::ClassMethods for
+ # when the "New issue" tab is enabled
+ def current_menu_item
+ if Setting.new_item_menu_tab == '1' && [:new, :create].include?(action_name.to_sym)
+ :new_issue
+ else
+ super
+ end
+ end
+
+ private
+
+ def retrieve_previous_and_next_issue_ids
+ if params[:prev_issue_id].present? || params[:next_issue_id].present?
+ @prev_issue_id = params[:prev_issue_id].presence.try(:to_i)
+ @next_issue_id = params[:next_issue_id].presence.try(:to_i)
+ @issue_position = params[:issue_position].presence.try(:to_i)
+ @issue_count = params[:issue_count].presence.try(:to_i)
+ else
+ retrieve_query_from_session
+ if @query
+ @per_page = per_page_option
+ limit = 500
+ issue_ids = @query.issue_ids(:limit => (limit + 1))
+ if (idx = issue_ids.index(@issue.id)) && idx < limit
+ if issue_ids.size < 500
+ @issue_position = idx + 1
+ @issue_count = issue_ids.size
+ end
+ @prev_issue_id = issue_ids[idx - 1] if idx > 0
+ @next_issue_id = issue_ids[idx + 1] if idx < (issue_ids.size - 1)
+ end
+ query_params = @query.as_params
+ if @issue_position
+ query_params = query_params.merge(:page => (@issue_position / per_page_option) + 1, :per_page => per_page_option)
+ end
+ @query_path = _project_issues_path(@query.project, query_params)
+ end
+ end
+ end
+
+ def previous_and_next_issue_ids_params
+ {
+ :prev_issue_id => params[:prev_issue_id],
+ :next_issue_id => params[:next_issue_id],
+ :issue_position => params[:issue_position],
+ :issue_count => params[:issue_count]
+ }.reject {|k,v| k.blank?}
+ end
+
+ # Used by #edit and #update to set some common instance variables
+ # from the params
+ def update_issue_from_params
+ @time_entry = TimeEntry.new(:issue => @issue, :project => @issue.project)
+ if params[:time_entry]
+ @time_entry.safe_attributes = params[:time_entry]
+ end
+
+ @issue.init_journal(User.current)
+
+ issue_attributes = params[:issue]
+ if issue_attributes && params[:conflict_resolution]
+ case params[:conflict_resolution]
+ when 'overwrite'
+ issue_attributes = issue_attributes.dup
+ issue_attributes.delete(:lock_version)
+ when 'add_notes'
+ issue_attributes = issue_attributes.slice(:notes, :private_notes)
+ when 'cancel'
+ redirect_to issue_path(@issue)
+ return false
+ end
+ end
+ @issue.safe_attributes = issue_attributes
+ @priorities = IssuePriority.active
+ @allowed_statuses = @issue.new_statuses_allowed_to(User.current)
+ true
+ end
+
+ # Used by #new and #create to build a new issue from the params
+ # The new issue will be copied from an existing one if copy_from parameter is given
+ def build_new_issue_from_params
+ @issue = Issue.new
+ if params[:copy_from]
+ begin
+ @issue.init_journal(User.current)
+ @copy_from = Issue.visible.find(params[:copy_from])
+ unless User.current.allowed_to?(:copy_issues, @copy_from.project)
+ raise ::Unauthorized
+ end
+ @link_copy = link_copy?(params[:link_copy]) || request.get?
+ @copy_attachments = params[:copy_attachments].present? || request.get?
+ @copy_subtasks = params[:copy_subtasks].present? || request.get?
+ @copy_watchers = User.current.allowed_to?(:add_issue_watchers, @project)
+ @issue.copy_from(@copy_from, :attachments => @copy_attachments, :subtasks => @copy_subtasks, :watchers => @copy_watchers, :link => @link_copy)
+ @issue.parent_issue_id = @copy_from.parent_id
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ return
+ end
+ end
+ @issue.project = @project
+ if request.get?
+ @issue.project ||= @issue.allowed_target_projects.first
+ end
+ @issue.author ||= User.current
+ @issue.start_date ||= User.current.today if Setting.default_issue_start_date_to_creation_date?
+
+ attrs = (params[:issue] || {}).deep_dup
+ if action_name == 'new' && params[:was_default_status] == attrs[:status_id]
+ attrs.delete(:status_id)
+ end
+ if action_name == 'new' && params[:form_update_triggered_by] == 'issue_project_id'
+ # Discard submitted version when changing the project on the issue form
+ # so we can use the default version for the new project
+ attrs.delete(:fixed_version_id)
+ end
+ @issue.safe_attributes = attrs
+
+ if @issue.project
+ @issue.tracker ||= @issue.allowed_target_trackers.first
+ if @issue.tracker.nil?
+ if @issue.project.trackers.any?
+ # None of the project trackers is allowed to the user
+ render_error :message => l(:error_no_tracker_allowed_for_new_issue_in_project), :status => 403
+ else
+ # Project has no trackers
+ render_error l(:error_no_tracker_in_project)
+ end
+ return false
+ end
+ if @issue.status.nil?
+ render_error l(:error_no_default_issue_status)
+ return false
+ end
+ elsif request.get?
+ render_error :message => l(:error_no_projects_with_tracker_allowed_for_new_issue), :status => 403
+ return false
+ end
+
+ @priorities = IssuePriority.active
+ @allowed_statuses = @issue.new_statuses_allowed_to(User.current)
+ end
+
+ # Saves @issue and a time_entry from the parameters
+ def save_issue_with_child_records
+ Issue.transaction do
+ if params[:time_entry] && (params[:time_entry][:hours].present? || params[:time_entry][:comments].present?) && User.current.allowed_to?(:log_time, @issue.project)
+ time_entry = @time_entry || TimeEntry.new
+ time_entry.project = @issue.project
+ time_entry.issue = @issue
+ time_entry.user = User.current
+ time_entry.spent_on = User.current.today
+ time_entry.safe_attributes = params[:time_entry]
+ @issue.time_entries << time_entry
+ end
+
+ call_hook(:controller_issues_edit_before_save, { :params => params, :issue => @issue, :time_entry => time_entry, :journal => @issue.current_journal})
+ if @issue.save
+ call_hook(:controller_issues_edit_after_save, { :params => params, :issue => @issue, :time_entry => time_entry, :journal => @issue.current_journal})
+ else
+ raise ActiveRecord::Rollback
+ end
+ end
+ end
+
+ # Returns true if the issue copy should be linked
+ # to the original issue
+ def link_copy?(param)
+ case Setting.link_copied_issue
+ when 'yes'
+ true
+ when 'no'
+ false
+ when 'ask'
+ param == '1'
+ end
+ end
+
+ # Redirects user after a successful issue creation
+ def redirect_after_create
+ if params[:continue]
+ url_params = {}
+ url_params[:issue] = {:tracker_id => @issue.tracker, :parent_issue_id => @issue.parent_issue_id}.reject {|k,v| v.nil?}
+ url_params[:back_url] = params[:back_url].presence
+
+ if params[:project_id]
+ redirect_to new_project_issue_path(@issue.project, url_params)
+ else
+ url_params[:issue].merge! :project_id => @issue.project_id
+ redirect_to new_issue_path(url_params)
+ end
+ else
+ redirect_back_or_default issue_path(@issue)
+ end
+ end
+end
diff --git a/app/controllers/journals_controller.rb b/app/controllers/journals_controller.rb
new file mode 100644
index 0000000..7f07b38
--- /dev/null
+++ b/app/controllers/journals_controller.rb
@@ -0,0 +1,107 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class JournalsController < ApplicationController
+ before_action :find_journal, :only => [:edit, :update, :diff]
+ before_action :find_issue, :only => [:new]
+ before_action :find_optional_project, :only => [:index]
+ before_action :authorize, :only => [:new, :edit, :update, :diff]
+ accept_rss_auth :index
+ menu_item :issues
+
+ helper :issues
+ helper :custom_fields
+ helper :queries
+ include QueriesHelper
+
+ def index
+ retrieve_query
+ if @query.valid?
+ @journals = @query.journals(:order => "#{Journal.table_name}.created_on DESC",
+ :limit => 25)
+ end
+ @title = (@project ? @project.name : Setting.app_title) + ": " + (@query.new_record? ? l(:label_changes_details) : @query.name)
+ render :layout => false, :content_type => 'application/atom+xml'
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def diff
+ @issue = @journal.issue
+ if params[:detail_id].present?
+ @detail = @journal.details.find_by_id(params[:detail_id])
+ else
+ @detail = @journal.details.detect {|d| d.property == 'attr' && d.prop_key == 'description'}
+ end
+ unless @issue && @detail
+ render_404
+ return false
+ end
+ if @detail.property == 'cf'
+ unless @detail.custom_field && @detail.custom_field.visible_by?(@issue.project, User.current)
+ raise ::Unauthorized
+ end
+ end
+ @diff = Redmine::Helpers::Diff.new(@detail.value, @detail.old_value)
+ end
+
+ def new
+ @journal = Journal.visible.find(params[:journal_id]) if params[:journal_id]
+ if @journal
+ user = @journal.user
+ text = @journal.notes
+ else
+ user = @issue.author
+ text = @issue.description
+ end
+ # Replaces pre blocks with [...]
+ text = text.to_s.strip.gsub(%r{
(.*?)
}m, '[...]')
+ @content = "#{ll(Setting.default_language, :text_user_wrote, user)}\n> "
+ @content << text.gsub(/(\r?\n|\r\n?)/, "\n> ") + "\n\n"
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def edit
+ (render_403; return false) unless @journal.editable_by?(User.current)
+ respond_to do |format|
+ # TODO: implement non-JS journal update
+ format.js
+ end
+ end
+
+ def update
+ (render_403; return false) unless @journal.editable_by?(User.current)
+ @journal.safe_attributes = params[:journal]
+ @journal.save
+ @journal.destroy if @journal.details.empty? && @journal.notes.blank?
+ call_hook(:controller_journals_edit_post, { :journal => @journal, :params => params})
+ respond_to do |format|
+ format.html { redirect_to issue_path(@journal.journalized) }
+ format.js
+ end
+ end
+
+ private
+
+ def find_journal
+ @journal = Journal.visible.find(params[:id])
+ @project = @journal.journalized.project
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+end
diff --git a/app/controllers/mail_handler_controller.rb b/app/controllers/mail_handler_controller.rb
new file mode 100644
index 0000000..ccb832e
--- /dev/null
+++ b/app/controllers/mail_handler_controller.rb
@@ -0,0 +1,44 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class MailHandlerController < ActionController::Base
+ before_action :check_credential
+
+ # Displays the email submission form
+ def new
+ end
+
+ # Submits an incoming email to MailHandler
+ def index
+ options = params.dup
+ email = options.delete(:email)
+ if MailHandler.receive(email, options)
+ head :created
+ else
+ head :unprocessable_entity
+ end
+ end
+
+ private
+
+ def check_credential
+ User.current = nil
+ unless Setting.mail_handler_api_enabled? && params[:key].to_s == Setting.mail_handler_api_key
+ render :plain => 'Access denied. Incoming emails WS is disabled or key is invalid.', :status => 403
+ end
+ end
+end
diff --git a/app/controllers/members_controller.rb b/app/controllers/members_controller.rb
new file mode 100644
index 0000000..1583e9e
--- /dev/null
+++ b/app/controllers/members_controller.rb
@@ -0,0 +1,133 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class MembersController < ApplicationController
+ model_object Member
+ before_action :find_model_object, :except => [:index, :new, :create, :autocomplete]
+ before_action :find_project_from_association, :except => [:index, :new, :create, :autocomplete]
+ before_action :find_project_by_project_id, :only => [:index, :new, :create, :autocomplete]
+ before_action :authorize
+ accept_api_auth :index, :show, :create, :update, :destroy
+
+ require_sudo_mode :create, :update, :destroy
+
+ def index
+ scope = @project.memberships
+ @offset, @limit = api_offset_and_limit
+ @member_count = scope.count
+ @member_pages = Paginator.new @member_count, @limit, params['page']
+ @offset ||= @member_pages.offset
+ @members = scope.order(:id).limit(@limit).offset(@offset).to_a
+
+ respond_to do |format|
+ format.html { head 406 }
+ format.api
+ end
+ end
+
+ def show
+ respond_to do |format|
+ format.html { head 406 }
+ format.api
+ end
+ end
+
+ def new
+ @member = Member.new
+ end
+
+ def create
+ members = []
+ if params[:membership]
+ user_ids = Array.wrap(params[:membership][:user_id] || params[:membership][:user_ids])
+ user_ids << nil if user_ids.empty?
+ user_ids.each do |user_id|
+ member = Member.new(:project => @project, :user_id => user_id)
+ member.set_editable_role_ids(params[:membership][:role_ids])
+ members << member
+ end
+ @project.members << members
+ end
+
+ respond_to do |format|
+ format.html { redirect_to_settings_in_projects }
+ format.js {
+ @members = members
+ @member = Member.new
+ }
+ format.api {
+ @member = members.first
+ if @member.valid?
+ render :action => 'show', :status => :created, :location => membership_url(@member)
+ else
+ render_validation_errors(@member)
+ end
+ }
+ end
+ end
+
+ def edit
+ @roles = Role.givable.to_a
+ end
+
+ def update
+ if params[:membership]
+ @member.set_editable_role_ids(params[:membership][:role_ids])
+ end
+ saved = @member.save
+ respond_to do |format|
+ format.html { redirect_to_settings_in_projects }
+ format.js
+ format.api {
+ if saved
+ render_api_ok
+ else
+ render_validation_errors(@member)
+ end
+ }
+ end
+ end
+
+ def destroy
+ if @member.deletable?
+ @member.destroy
+ end
+ respond_to do |format|
+ format.html { redirect_to_settings_in_projects }
+ format.js
+ format.api {
+ if @member.destroyed?
+ render_api_ok
+ else
+ head :unprocessable_entity
+ end
+ }
+ end
+ end
+
+ def autocomplete
+ respond_to do |format|
+ format.js
+ end
+ end
+
+ private
+
+ def redirect_to_settings_in_projects
+ redirect_to settings_project_path(@project, :tab => 'members')
+ end
+end
diff --git a/app/controllers/messages_controller.rb b/app/controllers/messages_controller.rb
new file mode 100644
index 0000000..76bc19c
--- /dev/null
+++ b/app/controllers/messages_controller.rb
@@ -0,0 +1,142 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class MessagesController < ApplicationController
+ menu_item :boards
+ default_search_scope :messages
+ before_action :find_board, :only => [:new, :preview]
+ before_action :find_attachments, :only => [:preview]
+ before_action :find_message, :except => [:new, :preview]
+ before_action :authorize, :except => [:preview, :edit, :destroy]
+
+ helper :boards
+ helper :watchers
+ helper :attachments
+ include AttachmentsHelper
+
+ REPLIES_PER_PAGE = 25 unless const_defined?(:REPLIES_PER_PAGE)
+
+ # Show a topic and its replies
+ def show
+ page = params[:page]
+ # Find the page of the requested reply
+ if params[:r] && page.nil?
+ offset = @topic.children.where("#{Message.table_name}.id < ?", params[:r].to_i).count
+ page = 1 + offset / REPLIES_PER_PAGE
+ end
+
+ @reply_count = @topic.children.count
+ @reply_pages = Paginator.new @reply_count, REPLIES_PER_PAGE, page
+ @replies = @topic.children.
+ includes(:author, :attachments, {:board => :project}).
+ reorder("#{Message.table_name}.created_on ASC, #{Message.table_name}.id ASC").
+ limit(@reply_pages.per_page).
+ offset(@reply_pages.offset).
+ to_a
+
+ @reply = Message.new(:subject => "RE: #{@message.subject}")
+ render :action => "show", :layout => false if request.xhr?
+ end
+
+ # Create a new topic
+ def new
+ @message = Message.new
+ @message.author = User.current
+ @message.board = @board
+ @message.safe_attributes = params[:message]
+ if request.post?
+ @message.save_attachments(params[:attachments])
+ if @message.save
+ call_hook(:controller_messages_new_after_save, { :params => params, :message => @message})
+ render_attachment_warning_if_needed(@message)
+ redirect_to board_message_path(@board, @message)
+ end
+ end
+ end
+
+ # Reply to a topic
+ def reply
+ @reply = Message.new
+ @reply.author = User.current
+ @reply.board = @board
+ @reply.safe_attributes = params[:reply]
+ @topic.children << @reply
+ if !@reply.new_record?
+ call_hook(:controller_messages_reply_after_save, { :params => params, :message => @reply})
+ attachments = Attachment.attach_files(@reply, params[:attachments])
+ render_attachment_warning_if_needed(@reply)
+ end
+ redirect_to board_message_path(@board, @topic, :r => @reply)
+ end
+
+ # Edit a message
+ def edit
+ (render_403; return false) unless @message.editable_by?(User.current)
+ @message.safe_attributes = params[:message]
+ if request.post? && @message.save
+ attachments = Attachment.attach_files(@message, params[:attachments])
+ render_attachment_warning_if_needed(@message)
+ flash[:notice] = l(:notice_successful_update)
+ @message.reload
+ redirect_to board_message_path(@message.board, @message.root, :r => (@message.parent_id && @message.id))
+ end
+ end
+
+ # Delete a messages
+ def destroy
+ (render_403; return false) unless @message.destroyable_by?(User.current)
+ r = @message.to_param
+ @message.destroy
+ if @message.parent
+ redirect_to board_message_path(@board, @message.parent, :r => r)
+ else
+ redirect_to project_board_path(@project, @board)
+ end
+ end
+
+ def quote
+ @subject = @message.subject
+ @subject = "RE: #{@subject}" unless @subject.starts_with?('RE:')
+
+ @content = "#{ll(Setting.default_language, :text_user_wrote, @message.author)}\n> "
+ @content << @message.content.to_s.strip.gsub(%r{
(.*?)
}m, '[...]').gsub(/(\r?\n|\r\n?)/, "\n> ") + "\n\n"
+ end
+
+ def preview
+ message = @board.messages.find_by_id(params[:id])
+ @text = (params[:message] || params[:reply])[:content]
+ @previewed = message
+ render :partial => 'common/preview'
+ end
+
+private
+ def find_message
+ return unless find_board
+ @message = @board.messages.includes(:parent).find(params[:id])
+ @topic = @message.root
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def find_board
+ @board = Board.includes(:project).find(params[:board_id])
+ @project = @board.project
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ nil
+ end
+end
diff --git a/app/controllers/my_controller.rb b/app/controllers/my_controller.rb
new file mode 100644
index 0000000..bf04d55
--- /dev/null
+++ b/app/controllers/my_controller.rb
@@ -0,0 +1,186 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class MyController < ApplicationController
+ self.main_menu = false
+ before_action :require_login
+ # let user change user's password when user has to
+ skip_before_action :check_password_change, :only => :password
+
+ require_sudo_mode :account, only: :post
+ require_sudo_mode :reset_rss_key, :reset_api_key, :show_api_key, :destroy
+
+ helper :issues
+ helper :users
+ helper :custom_fields
+ helper :queries
+
+ def index
+ page
+ render :action => 'page'
+ end
+
+ # Show user's page
+ def page
+ @user = User.current
+ @groups = @user.pref.my_page_groups
+ @blocks = @user.pref.my_page_layout
+ end
+
+ # Edit user's account
+ def account
+ @user = User.current
+ @pref = @user.pref
+ if request.post?
+ @user.safe_attributes = params[:user]
+ @user.pref.safe_attributes = params[:pref]
+ if @user.save
+ @user.pref.save
+ set_language_if_valid @user.language
+ flash[:notice] = l(:notice_account_updated)
+ redirect_to my_account_path
+ return
+ end
+ end
+ end
+
+ # Destroys user's account
+ def destroy
+ @user = User.current
+ unless @user.own_account_deletable?
+ redirect_to my_account_path
+ return
+ end
+
+ if request.post? && params[:confirm]
+ @user.destroy
+ if @user.destroyed?
+ logout_user
+ flash[:notice] = l(:notice_account_deleted)
+ end
+ redirect_to home_path
+ end
+ end
+
+ # Manage user's password
+ def password
+ @user = User.current
+ unless @user.change_password_allowed?
+ flash[:error] = l(:notice_can_t_change_password)
+ redirect_to my_account_path
+ return
+ end
+ if request.post?
+ if !@user.check_password?(params[:password])
+ flash.now[:error] = l(:notice_account_wrong_password)
+ elsif params[:password] == params[:new_password]
+ flash.now[:error] = l(:notice_new_password_must_be_different)
+ else
+ @user.password, @user.password_confirmation = params[:new_password], params[:new_password_confirmation]
+ @user.must_change_passwd = false
+ if @user.save
+ # The session token was destroyed by the password change, generate a new one
+ session[:tk] = @user.generate_session_token
+ Mailer.password_updated(@user)
+ flash[:notice] = l(:notice_account_password_updated)
+ redirect_to my_account_path
+ end
+ end
+ end
+ end
+
+ # Create a new feeds key
+ def reset_rss_key
+ if request.post?
+ if User.current.rss_token
+ User.current.rss_token.destroy
+ User.current.reload
+ end
+ User.current.rss_key
+ flash[:notice] = l(:notice_feeds_access_key_reseted)
+ end
+ redirect_to my_account_path
+ end
+
+ def show_api_key
+ @user = User.current
+ end
+
+ # Create a new API key
+ def reset_api_key
+ if request.post?
+ if User.current.api_token
+ User.current.api_token.destroy
+ User.current.reload
+ end
+ User.current.api_key
+ flash[:notice] = l(:notice_api_access_key_reseted)
+ end
+ redirect_to my_account_path
+ end
+
+ def update_page
+ @user = User.current
+ block_settings = params[:settings] || {}
+
+ block_settings.each do |block, settings|
+ @user.pref.update_block_settings(block, settings)
+ end
+ @user.pref.save
+ @updated_blocks = block_settings.keys
+ end
+
+ # Add a block to user's page
+ # The block is added on top of the page
+ # params[:block] : id of the block to add
+ def add_block
+ @user = User.current
+ @block = params[:block]
+ if @user.pref.add_block @block
+ @user.pref.save
+ respond_to do |format|
+ format.html { redirect_to my_page_path }
+ format.js
+ end
+ else
+ render_error :status => 422
+ end
+ end
+
+ # Remove a block to user's page
+ # params[:block] : id of the block to remove
+ def remove_block
+ @user = User.current
+ @block = params[:block]
+ @user.pref.remove_block @block
+ @user.pref.save
+ respond_to do |format|
+ format.html { redirect_to my_page_path }
+ format.js
+ end
+ end
+
+ # Change blocks order on user's page
+ # params[:group] : group to order (top, left or right)
+ # params[:blocks] : array of block ids of the group
+ def order_blocks
+ @user = User.current
+ @user.pref.order_blocks params[:group], params[:blocks]
+ @user.pref.save
+ head 200
+ end
+end
diff --git a/app/controllers/news_controller.rb b/app/controllers/news_controller.rb
new file mode 100644
index 0000000..3df9e5e
--- /dev/null
+++ b/app/controllers/news_controller.rb
@@ -0,0 +1,101 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class NewsController < ApplicationController
+ default_search_scope :news
+ model_object News
+ before_action :find_model_object, :except => [:new, :create, :index]
+ before_action :find_project_from_association, :except => [:new, :create, :index]
+ before_action :find_project_by_project_id, :only => [:new, :create]
+ before_action :authorize, :except => [:index]
+ before_action :find_optional_project, :only => :index
+ accept_rss_auth :index
+ accept_api_auth :index
+
+ helper :watchers
+ helper :attachments
+
+ def index
+ case params[:format]
+ when 'xml', 'json'
+ @offset, @limit = api_offset_and_limit
+ else
+ @limit = 10
+ end
+
+ scope = @project ? @project.news.visible : News.visible
+
+ @news_count = scope.count
+ @news_pages = Paginator.new @news_count, @limit, params['page']
+ @offset ||= @news_pages.offset
+ @newss = scope.includes([:author, :project]).
+ order("#{News.table_name}.created_on DESC").
+ limit(@limit).
+ offset(@offset).
+ to_a
+ respond_to do |format|
+ format.html {
+ @news = News.new # for adding news inline
+ render :layout => false if request.xhr?
+ }
+ format.api
+ format.atom { render_feed(@newss, :title => (@project ? @project.name : Setting.app_title) + ": #{l(:label_news_plural)}") }
+ end
+ end
+
+ def show
+ @comments = @news.comments.to_a
+ @comments.reverse! if User.current.wants_comments_in_reverse_order?
+ end
+
+ def new
+ @news = News.new(:project => @project, :author => User.current)
+ end
+
+ def create
+ @news = News.new(:project => @project, :author => User.current)
+ @news.safe_attributes = params[:news]
+ @news.save_attachments(params[:attachments])
+ if @news.save
+ render_attachment_warning_if_needed(@news)
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to project_news_index_path(@project)
+ else
+ render :action => 'new'
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ @news.safe_attributes = params[:news]
+ @news.save_attachments(params[:attachments])
+ if @news.save
+ render_attachment_warning_if_needed(@news)
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to news_path(@news)
+ else
+ render :action => 'edit'
+ end
+ end
+
+ def destroy
+ @news.destroy
+ redirect_to project_news_index_path(@project)
+ end
+end
diff --git a/app/controllers/previews_controller.rb b/app/controllers/previews_controller.rb
new file mode 100644
index 0000000..37cdc46
--- /dev/null
+++ b/app/controllers/previews_controller.rb
@@ -0,0 +1,53 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class PreviewsController < ApplicationController
+ before_action :find_project, :find_attachments
+
+ def issue
+ @issue = Issue.visible.find_by_id(params[:id]) unless params[:id].blank?
+ if @issue
+ @description = params[:issue] && params[:issue][:description]
+ if @description && @description.gsub(/(\r?\n|\n\r?)/, "\n") == @issue.description.to_s.gsub(/(\r?\n|\n\r?)/, "\n")
+ @description = nil
+ end
+ @notes = params[:journal] ? params[:journal][:notes] : nil
+ @notes ||= params[:issue] ? params[:issue][:notes] : nil
+ else
+ @description = (params[:issue] ? params[:issue][:description] : nil)
+ end
+ render :layout => false
+ end
+
+ def news
+ if params[:id].present? && news = News.visible.find_by_id(params[:id])
+ @previewed = news
+ end
+ @text = (params[:news] ? params[:news][:description] : nil)
+ render :partial => 'common/preview'
+ end
+
+ private
+
+ def find_project
+ project_id = (params[:issue] && params[:issue][:project_id]) || params[:project_id]
+ @project = Project.find(project_id)
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+end
diff --git a/app/controllers/principal_memberships_controller.rb b/app/controllers/principal_memberships_controller.rb
new file mode 100644
index 0000000..924ecbd
--- /dev/null
+++ b/app/controllers/principal_memberships_controller.rb
@@ -0,0 +1,85 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class PrincipalMembershipsController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+
+ before_action :require_admin
+ before_action :find_principal, :only => [:new, :create]
+ before_action :find_membership, :only => [:edit, :update, :destroy]
+
+ def new
+ @projects = Project.active.all
+ @roles = Role.find_all_givable
+ respond_to do |format|
+ format.html
+ format.js
+ end
+ end
+
+ def create
+ @members = Member.create_principal_memberships(@principal, params[:membership])
+ respond_to do |format|
+ format.html { redirect_to_principal @principal }
+ format.js
+ end
+ end
+
+ def edit
+ @roles = Role.givable.to_a
+ end
+
+ def update
+ @membership.attributes = params.require(:membership).permit(:role_ids => [])
+ @membership.save
+ respond_to do |format|
+ format.html { redirect_to_principal @principal }
+ format.js
+ end
+ end
+
+ def destroy
+ if @membership.deletable?
+ @membership.destroy
+ end
+ respond_to do |format|
+ format.html { redirect_to_principal @principal }
+ format.js
+ end
+ end
+
+ private
+
+ def find_principal
+ principal_id = params[:user_id] || params[:group_id]
+ @principal = Principal.find(principal_id)
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def find_membership
+ @membership = Member.find(params[:id])
+ @principal = @membership.principal
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def redirect_to_principal(principal)
+ redirect_to edit_polymorphic_path(principal, :tab => 'memberships')
+ end
+end
diff --git a/app/controllers/project_enumerations_controller.rb b/app/controllers/project_enumerations_controller.rb
new file mode 100644
index 0000000..f68d948
--- /dev/null
+++ b/app/controllers/project_enumerations_controller.rb
@@ -0,0 +1,44 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class ProjectEnumerationsController < ApplicationController
+ before_action :find_project_by_project_id
+ before_action :authorize
+
+ def update
+ if params[:enumerations]
+ saved = Project.transaction do
+ params[:enumerations].each do |id, activity|
+ @project.update_or_create_time_entry_activity(id, activity)
+ end
+ end
+ if saved
+ flash[:notice] = l(:notice_successful_update)
+ end
+ end
+
+ redirect_to settings_project_path(@project, :tab => 'activities')
+ end
+
+ def destroy
+ @project.time_entry_activities.each do |time_entry_activity|
+ time_entry_activity.destroy(time_entry_activity.parent)
+ end
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to settings_project_path(@project, :tab => 'activities')
+ end
+end
diff --git a/app/controllers/projects_controller.rb b/app/controllers/projects_controller.rb
new file mode 100644
index 0000000..3e3fc69
--- /dev/null
+++ b/app/controllers/projects_controller.rb
@@ -0,0 +1,250 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class ProjectsController < ApplicationController
+ menu_item :overview
+ menu_item :settings, :only => :settings
+ menu_item :projects, :only => [:index, :new, :copy, :create]
+
+ before_action :find_project, :except => [ :index, :autocomplete, :list, :new, :create, :copy ]
+ before_action :authorize, :except => [ :index, :autocomplete, :list, :new, :create, :copy, :archive, :unarchive, :destroy]
+ before_action :authorize_global, :only => [:new, :create]
+ before_action :require_admin, :only => [ :copy, :archive, :unarchive, :destroy ]
+ accept_rss_auth :index
+ accept_api_auth :index, :show, :create, :update, :destroy
+ require_sudo_mode :destroy
+
+ helper :custom_fields
+ helper :issues
+ helper :queries
+ helper :repositories
+ helper :members
+
+ # Lists visible projects
+ def index
+ # try to redirect to the requested menu item
+ if params[:jump] && redirect_to_menu_item(params[:jump])
+ return
+ end
+
+ scope = Project.visible.sorted
+
+ respond_to do |format|
+ format.html {
+ unless params[:closed]
+ scope = scope.active
+ end
+ @projects = scope.to_a
+ }
+ format.api {
+ @offset, @limit = api_offset_and_limit
+ @project_count = scope.count
+ @projects = scope.offset(@offset).limit(@limit).to_a
+ }
+ format.atom {
+ projects = scope.reorder(:created_on => :desc).limit(Setting.feeds_limit.to_i).to_a
+ render_feed(projects, :title => "#{Setting.app_title}: #{l(:label_project_latest)}")
+ }
+ end
+ end
+
+ def autocomplete
+ respond_to do |format|
+ format.js {
+ if params[:q].present?
+ @projects = Project.visible.like(params[:q]).to_a
+ else
+ @projects = User.current.projects.to_a
+ end
+ }
+ end
+ end
+
+ def new
+ @issue_custom_fields = IssueCustomField.sorted.to_a
+ @trackers = Tracker.sorted.to_a
+ @project = Project.new
+ @project.safe_attributes = params[:project]
+ end
+
+ def create
+ @issue_custom_fields = IssueCustomField.sorted.to_a
+ @trackers = Tracker.sorted.to_a
+ @project = Project.new
+ @project.safe_attributes = params[:project]
+
+ if @project.save
+ unless User.current.admin?
+ @project.add_default_member(User.current)
+ end
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_create)
+ if params[:continue]
+ attrs = {:parent_id => @project.parent_id}.reject {|k,v| v.nil?}
+ redirect_to new_project_path(attrs)
+ else
+ redirect_to settings_project_path(@project)
+ end
+ }
+ format.api { render :action => 'show', :status => :created, :location => url_for(:controller => 'projects', :action => 'show', :id => @project.id) }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'new' }
+ format.api { render_validation_errors(@project) }
+ end
+ end
+ end
+
+ def copy
+ @issue_custom_fields = IssueCustomField.sorted.to_a
+ @trackers = Tracker.sorted.to_a
+ @source_project = Project.find(params[:id])
+ if request.get?
+ @project = Project.copy_from(@source_project)
+ @project.identifier = Project.next_identifier if Setting.sequential_project_identifiers?
+ else
+ Mailer.with_deliveries(params[:notifications] == '1') do
+ @project = Project.new
+ @project.safe_attributes = params[:project]
+ if @project.copy(@source_project, :only => params[:only])
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to settings_project_path(@project)
+ elsif !@project.new_record?
+ # Project was created
+ # But some objects were not copied due to validation failures
+ # (eg. issues from disabled trackers)
+ # TODO: inform about that
+ redirect_to settings_project_path(@project)
+ end
+ end
+ end
+ rescue ActiveRecord::RecordNotFound
+ # source_project not found
+ render_404
+ end
+
+ # Show @project
+ def show
+ # try to redirect to the requested menu item
+ if params[:jump] && redirect_to_project_menu_item(@project, params[:jump])
+ return
+ end
+
+ @users_by_role = @project.users_by_role
+ @subprojects = @project.children.visible.to_a
+ @news = @project.news.limit(5).includes(:author, :project).reorder("#{News.table_name}.created_on DESC").to_a
+ @trackers = @project.rolled_up_trackers.visible
+
+ cond = @project.project_condition(Setting.display_subprojects_issues?)
+
+ @open_issues_by_tracker = Issue.visible.open.where(cond).group(:tracker).count
+ @total_issues_by_tracker = Issue.visible.where(cond).group(:tracker).count
+
+ if User.current.allowed_to_view_all_time_entries?(@project)
+ @total_hours = TimeEntry.visible.where(cond).sum(:hours).to_f
+ end
+
+ @key = User.current.rss_key
+
+ respond_to do |format|
+ format.html
+ format.api
+ end
+ end
+
+ def settings
+ @issue_custom_fields = IssueCustomField.sorted.to_a
+ @issue_category ||= IssueCategory.new
+ @member ||= @project.members.new
+ @trackers = Tracker.sorted.to_a
+
+ @version_status = params[:version_status] || 'open'
+ @version_name = params[:version_name]
+ @versions = @project.shared_versions.status(@version_status).like(@version_name)
+ @wiki ||= @project.wiki || Wiki.new(:project => @project)
+ end
+
+ def edit
+ end
+
+ def update
+ @project.safe_attributes = params[:project]
+ if @project.save
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to settings_project_path(@project)
+ }
+ format.api { render_api_ok }
+ end
+ else
+ respond_to do |format|
+ format.html {
+ settings
+ render :action => 'settings'
+ }
+ format.api { render_validation_errors(@project) }
+ end
+ end
+ end
+
+ def modules
+ @project.enabled_module_names = params[:enabled_module_names]
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to settings_project_path(@project, :tab => 'modules')
+ end
+
+ def archive
+ unless @project.archive
+ flash[:error] = l(:error_can_not_archive_project)
+ end
+ redirect_to_referer_or admin_projects_path(:status => params[:status])
+ end
+
+ def unarchive
+ unless @project.active?
+ @project.unarchive
+ end
+ redirect_to_referer_or admin_projects_path(:status => params[:status])
+ end
+
+ def close
+ @project.close
+ redirect_to project_path(@project)
+ end
+
+ def reopen
+ @project.reopen
+ redirect_to project_path(@project)
+ end
+
+ # Delete @project
+ def destroy
+ @project_to_destroy = @project
+ if api_request? || params[:confirm]
+ @project_to_destroy.destroy
+ respond_to do |format|
+ format.html { redirect_to admin_projects_path }
+ format.api { render_api_ok }
+ end
+ end
+ # hide project in layout
+ @project = nil
+ end
+end
diff --git a/app/controllers/queries_controller.rb b/app/controllers/queries_controller.rb
new file mode 100644
index 0000000..54f695f
--- /dev/null
+++ b/app/controllers/queries_controller.rb
@@ -0,0 +1,165 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class QueriesController < ApplicationController
+ menu_item :issues
+ before_action :find_query, :only => [:edit, :update, :destroy]
+ before_action :find_optional_project, :only => [:new, :create]
+
+ accept_api_auth :index
+
+ include QueriesHelper
+
+ def index
+ case params[:format]
+ when 'xml', 'json'
+ @offset, @limit = api_offset_and_limit
+ else
+ @limit = per_page_option
+ end
+ scope = query_class.visible
+ @query_count = scope.count
+ @query_pages = Paginator.new @query_count, @limit, params['page']
+ @queries = scope.
+ order("#{Query.table_name}.name").
+ limit(@limit).
+ offset(@offset).
+ to_a
+ respond_to do |format|
+ format.html {render_error :status => 406}
+ format.api
+ end
+ end
+
+ def new
+ @query = query_class.new
+ @query.user = User.current
+ @query.project = @project
+ @query.build_from_params(params)
+ end
+
+ def create
+ @query = query_class.new
+ @query.user = User.current
+ @query.project = @project
+ update_query_from_params
+
+ if @query.save
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to_items(:query_id => @query)
+ else
+ render :action => 'new', :layout => !request.xhr?
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ update_query_from_params
+
+ if @query.save
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to_items(:query_id => @query)
+ else
+ render :action => 'edit'
+ end
+ end
+
+ def destroy
+ @query.destroy
+ redirect_to_items(:set_filter => 1)
+ end
+
+ # Returns the values for a query filter
+ def filter
+ q = query_class.new
+ if params[:project_id].present?
+ q.project = Project.find(params[:project_id])
+ end
+
+ unless User.current.allowed_to?(q.class.view_permission, q.project, :global => true)
+ raise Unauthorized
+ end
+
+ filter = q.available_filters[params[:name].to_s]
+ values = filter ? filter.values : []
+
+ render :json => values
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ private
+
+ def find_query
+ @query = Query.find(params[:id])
+ @project = @query.project
+ render_403 unless @query.editable_by?(User.current)
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def find_optional_project
+ @project = Project.find(params[:project_id]) if params[:project_id]
+ render_403 unless User.current.allowed_to?(:save_queries, @project, :global => true)
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def update_query_from_params
+ @query.project = params[:query_is_for_all] ? nil : @project
+ @query.build_from_params(params)
+ @query.column_names = nil if params[:default_columns]
+ @query.sort_criteria = params[:query] && params[:query][:sort_criteria]
+ @query.name = params[:query] && params[:query][:name]
+ if User.current.allowed_to?(:manage_public_queries, @query.project) || User.current.admin?
+ @query.visibility = (params[:query] && params[:query][:visibility]) || Query::VISIBILITY_PRIVATE
+ @query.role_ids = params[:query] && params[:query][:role_ids]
+ else
+ @query.visibility = Query::VISIBILITY_PRIVATE
+ end
+ @query
+ end
+
+ def redirect_to_items(options)
+ method = "redirect_to_#{@query.class.name.underscore}"
+ send method, options
+ end
+
+ def redirect_to_issue_query(options)
+ if params[:gantt]
+ if @project
+ redirect_to project_gantt_path(@project, options)
+ else
+ redirect_to issues_gantt_path(options)
+ end
+ else
+ redirect_to _project_issues_path(@project, options)
+ end
+ end
+
+ def redirect_to_time_entry_query(options)
+ redirect_to _time_entries_path(@project, nil, options)
+ end
+
+ # Returns the Query subclass, IssueQuery by default
+ # for compatibility with previous behaviour
+ def query_class
+ Query.get_subclass(params[:type] || 'IssueQuery')
+ end
+end
diff --git a/app/controllers/reports_controller.rb b/app/controllers/reports_controller.rb
new file mode 100644
index 0000000..08c30ef
--- /dev/null
+++ b/app/controllers/reports_controller.rb
@@ -0,0 +1,89 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class ReportsController < ApplicationController
+ menu_item :issues
+ before_action :find_project, :authorize, :find_issue_statuses
+
+ def issue_report
+ @trackers = @project.rolled_up_trackers(false).visible
+ @versions = @project.shared_versions.sort
+ @priorities = IssuePriority.all.reverse
+ @categories = @project.issue_categories
+ @assignees = (Setting.issue_group_assignment? ? @project.principals : @project.users).sort
+ @authors = @project.users.sort
+ @subprojects = @project.descendants.visible
+
+ @issues_by_tracker = Issue.by_tracker(@project)
+ @issues_by_version = Issue.by_version(@project)
+ @issues_by_priority = Issue.by_priority(@project)
+ @issues_by_category = Issue.by_category(@project)
+ @issues_by_assigned_to = Issue.by_assigned_to(@project)
+ @issues_by_author = Issue.by_author(@project)
+ @issues_by_subproject = Issue.by_subproject(@project) || []
+
+ render :template => "reports/issue_report"
+ end
+
+ def issue_report_details
+ case params[:detail]
+ when "tracker"
+ @field = "tracker_id"
+ @rows = @project.rolled_up_trackers(false).visible
+ @data = Issue.by_tracker(@project)
+ @report_title = l(:field_tracker)
+ when "version"
+ @field = "fixed_version_id"
+ @rows = @project.shared_versions.sort
+ @data = Issue.by_version(@project)
+ @report_title = l(:field_version)
+ when "priority"
+ @field = "priority_id"
+ @rows = IssuePriority.all.reverse
+ @data = Issue.by_priority(@project)
+ @report_title = l(:field_priority)
+ when "category"
+ @field = "category_id"
+ @rows = @project.issue_categories
+ @data = Issue.by_category(@project)
+ @report_title = l(:field_category)
+ when "assigned_to"
+ @field = "assigned_to_id"
+ @rows = (Setting.issue_group_assignment? ? @project.principals : @project.users).sort
+ @data = Issue.by_assigned_to(@project)
+ @report_title = l(:field_assigned_to)
+ when "author"
+ @field = "author_id"
+ @rows = @project.users.sort
+ @data = Issue.by_author(@project)
+ @report_title = l(:field_author)
+ when "subproject"
+ @field = "project_id"
+ @rows = @project.descendants.visible
+ @data = Issue.by_subproject(@project) || []
+ @report_title = l(:field_subproject)
+ else
+ render_404
+ end
+ end
+
+ private
+
+ def find_issue_statuses
+ @statuses = IssueStatus.sorted.to_a
+ end
+end
diff --git a/app/controllers/repositories_controller.rb b/app/controllers/repositories_controller.rb
new file mode 100644
index 0000000..29a3b59
--- /dev/null
+++ b/app/controllers/repositories_controller.rb
@@ -0,0 +1,439 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'SVG/Graph/Bar'
+require 'SVG/Graph/BarHorizontal'
+require 'digest/sha1'
+require 'redmine/scm/adapters'
+
+class ChangesetNotFound < Exception; end
+class InvalidRevisionParam < Exception; end
+
+class RepositoriesController < ApplicationController
+ menu_item :repository
+ menu_item :settings, :only => [:new, :create, :edit, :update, :destroy, :committers]
+ default_search_scope :changesets
+
+ before_action :find_project_by_project_id, :only => [:new, :create]
+ before_action :build_new_repository_from_params, :only => [:new, :create]
+ before_action :find_repository, :only => [:edit, :update, :destroy, :committers]
+ before_action :find_project_repository, :except => [:new, :create, :edit, :update, :destroy, :committers]
+ before_action :find_changeset, :only => [:revision, :add_related_issue, :remove_related_issue]
+ before_action :authorize
+ accept_rss_auth :revisions
+
+ rescue_from Redmine::Scm::Adapters::CommandFailed, :with => :show_error_command_failed
+
+ def new
+ @repository.is_default = @project.repository.nil?
+ end
+
+ def create
+ if @repository.save
+ redirect_to settings_project_path(@project, :tab => 'repositories')
+ else
+ render :action => 'new'
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ @repository.safe_attributes = params[:repository]
+ if @repository.save
+ redirect_to settings_project_path(@project, :tab => 'repositories')
+ else
+ render :action => 'edit'
+ end
+ end
+
+ def committers
+ @committers = @repository.committers
+ @users = @project.users.to_a
+ additional_user_ids = @committers.collect(&:last).collect(&:to_i) - @users.collect(&:id)
+ @users += User.where(:id => additional_user_ids).to_a unless additional_user_ids.empty?
+ @users.compact!
+ @users.sort!
+ if request.post? && params[:committers].present?
+ # Build a hash with repository usernames as keys and corresponding user ids as values
+ @repository.committer_ids = params[:committers].values.inject({}) {|h, c| h[c.first] = c.last; h}
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to settings_project_path(@project, :tab => 'repositories')
+ end
+ end
+
+ def destroy
+ @repository.destroy if request.delete?
+ redirect_to settings_project_path(@project, :tab => 'repositories')
+ end
+
+ def show
+ @repository.fetch_changesets if @project.active? && Setting.autofetch_changesets? && @path.empty?
+
+ @entries = @repository.entries(@path, @rev)
+ @changeset = @repository.find_changeset_by_name(@rev)
+ if request.xhr?
+ @entries ? render(:partial => 'dir_list_content') : head(200)
+ else
+ (show_error_not_found; return) unless @entries
+ @changesets = @repository.latest_changesets(@path, @rev)
+ @properties = @repository.properties(@path, @rev)
+ @repositories = @project.repositories
+ render :action => 'show'
+ end
+ end
+
+ alias_method :browse, :show
+
+ def changes
+ @entry = @repository.entry(@path, @rev)
+ (show_error_not_found; return) unless @entry
+ @changesets = @repository.latest_changesets(@path, @rev, Setting.repository_log_display_limit.to_i)
+ @properties = @repository.properties(@path, @rev)
+ @changeset = @repository.find_changeset_by_name(@rev)
+ end
+
+ def revisions
+ @changeset_count = @repository.changesets.count
+ @changeset_pages = Paginator.new @changeset_count,
+ per_page_option,
+ params['page']
+ @changesets = @repository.changesets.
+ limit(@changeset_pages.per_page).
+ offset(@changeset_pages.offset).
+ includes(:user, :repository, :parents).
+ to_a
+
+ respond_to do |format|
+ format.html { render :layout => false if request.xhr? }
+ format.atom { render_feed(@changesets, :title => "#{@project.name}: #{l(:label_revision_plural)}") }
+ end
+ end
+
+ def raw
+ entry_and_raw(true)
+ end
+
+ def entry
+ entry_and_raw(false)
+ end
+
+ def entry_and_raw(is_raw)
+ @entry = @repository.entry(@path, @rev)
+ (show_error_not_found; return) unless @entry
+
+ # If the entry is a dir, show the browser
+ (show; return) if @entry.is_dir?
+
+ if is_raw
+ # Force the download
+ send_opt = { :filename => filename_for_content_disposition(@path.split('/').last) }
+ send_type = Redmine::MimeType.of(@path)
+ send_opt[:type] = send_type.to_s if send_type
+ send_opt[:disposition] = disposition(@path)
+ send_data @repository.cat(@path, @rev), send_opt
+ else
+ if !@entry.size || @entry.size <= Setting.file_max_size_displayed.to_i.kilobyte
+ content = @repository.cat(@path, @rev)
+ (show_error_not_found; return) unless content
+
+ if content.size <= Setting.file_max_size_displayed.to_i.kilobyte &&
+ is_entry_text_data?(content, @path)
+ # TODO: UTF-16
+ # Prevent empty lines when displaying a file with Windows style eol
+ # Is this needed? AttachmentsController simply reads file.
+ @content = content.gsub("\r\n", "\n")
+ end
+ end
+ @changeset = @repository.find_changeset_by_name(@rev)
+ end
+ end
+ private :entry_and_raw
+
+ def is_entry_text_data?(ent, path)
+ # UTF-16 contains "\x00".
+ # It is very strict that file contains less than 30% of ascii symbols
+ # in non Western Europe.
+ return true if Redmine::MimeType.is_type?('text', path)
+ # Ruby 1.8.6 has a bug of integer divisions.
+ # http://apidock.com/ruby/v1_8_6_287/String/is_binary_data%3F
+ return false if Redmine::Scm::Adapters::ScmData.binary?(ent)
+ true
+ end
+ private :is_entry_text_data?
+
+ def annotate
+ @entry = @repository.entry(@path, @rev)
+ (show_error_not_found; return) unless @entry
+
+ @annotate = @repository.scm.annotate(@path, @rev)
+ if @annotate.nil? || @annotate.empty?
+ @annotate = nil
+ @error_message = l(:error_scm_annotate)
+ else
+ ann_buf_size = 0
+ @annotate.lines.each do |buf|
+ ann_buf_size += buf.size
+ end
+ if ann_buf_size > Setting.file_max_size_displayed.to_i.kilobyte
+ @annotate = nil
+ @error_message = l(:error_scm_annotate_big_text_file)
+ end
+ end
+ @changeset = @repository.find_changeset_by_name(@rev)
+ end
+
+ def revision
+ respond_to do |format|
+ format.html
+ format.js {render :layout => false}
+ end
+ end
+
+ # Adds a related issue to a changeset
+ # POST /projects/:project_id/repository/(:repository_id/)revisions/:rev/issues
+ def add_related_issue
+ issue_id = params[:issue_id].to_s.sub(/^#/,'')
+ @issue = @changeset.find_referenced_issue_by_id(issue_id)
+ if @issue && (!@issue.visible? || @changeset.issues.include?(@issue))
+ @issue = nil
+ end
+
+ if @issue
+ @changeset.issues << @issue
+ end
+ end
+
+ # Removes a related issue from a changeset
+ # DELETE /projects/:project_id/repository/(:repository_id/)revisions/:rev/issues/:issue_id
+ def remove_related_issue
+ @issue = Issue.visible.find_by_id(params[:issue_id])
+ if @issue
+ @changeset.issues.delete(@issue)
+ end
+ end
+
+ def diff
+ if params[:format] == 'diff'
+ @diff = @repository.diff(@path, @rev, @rev_to)
+ (show_error_not_found; return) unless @diff
+ filename = "changeset_r#{@rev}"
+ filename << "_r#{@rev_to}" if @rev_to
+ send_data @diff.join, :filename => "#{filename}.diff",
+ :type => 'text/x-patch',
+ :disposition => 'attachment'
+ else
+ @diff_type = params[:type] || User.current.pref[:diff_type] || 'inline'
+ @diff_type = 'inline' unless %w(inline sbs).include?(@diff_type)
+
+ # Save diff type as user preference
+ if User.current.logged? && @diff_type != User.current.pref[:diff_type]
+ User.current.pref[:diff_type] = @diff_type
+ User.current.preference.save
+ end
+ @cache_key = "repositories/diff/#{@repository.id}/" +
+ Digest::MD5.hexdigest("#{@path}-#{@rev}-#{@rev_to}-#{@diff_type}-#{current_language}")
+ unless read_fragment(@cache_key)
+ @diff = @repository.diff(@path, @rev, @rev_to)
+ show_error_not_found unless @diff
+ end
+
+ @changeset = @repository.find_changeset_by_name(@rev)
+ @changeset_to = @rev_to ? @repository.find_changeset_by_name(@rev_to) : nil
+ @diff_format_revisions = @repository.diff_format_revisions(@changeset, @changeset_to)
+ end
+ end
+
+ def stats
+ end
+
+ def graph
+ data = nil
+ case params[:graph]
+ when "commits_per_month"
+ data = graph_commits_per_month(@repository)
+ when "commits_per_author"
+ data = graph_commits_per_author(@repository)
+ end
+ if data
+ headers["Content-Type"] = "image/svg+xml"
+ send_data(data, :type => "image/svg+xml", :disposition => "inline")
+ else
+ render_404
+ end
+ end
+
+ private
+
+ def build_new_repository_from_params
+ scm = params[:repository_scm] || (Redmine::Scm::Base.all & Setting.enabled_scm).first
+ unless @repository = Repository.factory(scm)
+ render_404
+ return
+ end
+
+ @repository.project = @project
+ @repository.safe_attributes = params[:repository]
+ @repository
+ end
+
+ def find_repository
+ @repository = Repository.find(params[:id])
+ @project = @repository.project
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ REV_PARAM_RE = %r{\A[a-f0-9]*\Z}i
+
+ def find_project_repository
+ @project = Project.find(params[:id])
+ if params[:repository_id].present?
+ @repository = @project.repositories.find_by_identifier_param(params[:repository_id])
+ else
+ @repository = @project.repository
+ end
+ (render_404; return false) unless @repository
+ @path = params[:path].is_a?(Array) ? params[:path].join('/') : params[:path].to_s
+ @rev = params[:rev].blank? ? @repository.default_branch : params[:rev].to_s.strip
+ @rev_to = params[:rev_to]
+
+ unless @rev.to_s.match(REV_PARAM_RE) && @rev_to.to_s.match(REV_PARAM_RE)
+ if @repository.branches.blank?
+ raise InvalidRevisionParam
+ end
+ end
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ rescue InvalidRevisionParam
+ show_error_not_found
+ end
+
+ def find_changeset
+ if @rev.present?
+ @changeset = @repository.find_changeset_by_name(@rev)
+ end
+ show_error_not_found unless @changeset
+ end
+
+ def show_error_not_found
+ render_error :message => l(:error_scm_not_found), :status => 404
+ end
+
+ # Handler for Redmine::Scm::Adapters::CommandFailed exception
+ def show_error_command_failed(exception)
+ render_error l(:error_scm_command_failed, exception.message)
+ end
+
+ def graph_commits_per_month(repository)
+ @date_to = User.current.today
+ @date_from = @date_to << 11
+ @date_from = Date.civil(@date_from.year, @date_from.month, 1)
+ commits_by_day = Changeset.
+ where("repository_id = ? AND commit_date BETWEEN ? AND ?", repository.id, @date_from, @date_to).
+ group(:commit_date).
+ count
+ commits_by_month = [0] * 12
+ commits_by_day.each {|c| commits_by_month[(@date_to.month - c.first.to_date.month) % 12] += c.last }
+
+ changes_by_day = Change.
+ joins(:changeset).
+ where("#{Changeset.table_name}.repository_id = ? AND #{Changeset.table_name}.commit_date BETWEEN ? AND ?", repository.id, @date_from, @date_to).
+ group(:commit_date).
+ count
+ changes_by_month = [0] * 12
+ changes_by_day.each {|c| changes_by_month[(@date_to.month - c.first.to_date.month) % 12] += c.last }
+
+ fields = []
+ today = User.current.today
+ 12.times {|m| fields << month_name(((today.month - 1 - m) % 12) + 1)}
+
+ graph = SVG::Graph::Bar.new(
+ :height => 300,
+ :width => 800,
+ :fields => fields.reverse,
+ :stack => :side,
+ :scale_integers => true,
+ :step_x_labels => 2,
+ :show_data_values => false,
+ :graph_title => l(:label_commits_per_month),
+ :show_graph_title => true
+ )
+
+ graph.add_data(
+ :data => commits_by_month[0..11].reverse,
+ :title => l(:label_revision_plural)
+ )
+
+ graph.add_data(
+ :data => changes_by_month[0..11].reverse,
+ :title => l(:label_change_plural)
+ )
+
+ graph.burn
+ end
+
+ def graph_commits_per_author(repository)
+ #data
+ stats = repository.stats_by_author
+ fields, commits_data, changes_data = [], [], []
+ stats.each do |name, hsh|
+ fields << name
+ commits_data << hsh[:commits_count]
+ changes_data << hsh[:changes_count]
+ end
+
+ #expand to 10 values if needed
+ fields = fields + [""]*(10 - fields.length) if fields.length<10
+ commits_data = commits_data + [0]*(10 - commits_data.length) if commits_data.length<10
+ changes_data = changes_data + [0]*(10 - changes_data.length) if changes_data.length<10
+
+ # Remove email address in usernames
+ fields = fields.collect {|c| c.gsub(%r{<.+@.+>}, '') }
+
+ #prepare graph
+ graph = SVG::Graph::BarHorizontal.new(
+ :height => 30 * commits_data.length,
+ :width => 800,
+ :fields => fields,
+ :stack => :side,
+ :scale_integers => true,
+ :show_data_values => false,
+ :rotate_y_labels => false,
+ :graph_title => l(:label_commits_per_author),
+ :show_graph_title => true
+ )
+ graph.add_data(
+ :data => commits_data,
+ :title => l(:label_revision_plural)
+ )
+ graph.add_data(
+ :data => changes_data,
+ :title => l(:label_change_plural)
+ )
+ graph.burn
+ end
+
+ def disposition(path)
+ if Redmine::MimeType.of(@path) == "application/pdf"
+ 'inline'
+ else
+ 'attachment'
+ end
+ end
+end
diff --git a/app/controllers/roles_controller.rb b/app/controllers/roles_controller.rb
new file mode 100644
index 0000000..b85c51b
--- /dev/null
+++ b/app/controllers/roles_controller.rb
@@ -0,0 +1,123 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class RolesController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+
+ before_action :require_admin, :except => [:index, :show]
+ before_action :require_admin_or_api_request, :only => [:index, :show]
+ before_action :find_role, :only => [:show, :edit, :update, :destroy]
+ accept_api_auth :index, :show
+
+ require_sudo_mode :create, :update, :destroy
+
+ def index
+ respond_to do |format|
+ format.html {
+ @roles = Role.sorted.to_a
+ render :layout => false if request.xhr?
+ }
+ format.api {
+ @roles = Role.givable.to_a
+ }
+ end
+ end
+
+ def show
+ respond_to do |format|
+ format.api
+ end
+ end
+
+ def new
+ # Prefills the form with 'Non member' role permissions by default
+ @role = Role.new
+ @role.safe_attributes = params[:role] || {:permissions => Role.non_member.permissions}
+ if params[:copy].present? && @copy_from = Role.find_by_id(params[:copy])
+ @role.copy_from(@copy_from)
+ end
+ @roles = Role.sorted.to_a
+ end
+
+ def create
+ @role = Role.new
+ @role.safe_attributes = params[:role]
+ if request.post? && @role.save
+ # workflow copy
+ if !params[:copy_workflow_from].blank? && (copy_from = Role.find_by_id(params[:copy_workflow_from]))
+ @role.copy_workflow_rules(copy_from)
+ end
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to roles_path
+ else
+ @roles = Role.sorted.to_a
+ render :action => 'new'
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ @role.safe_attributes = params[:role]
+ if @role.save
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to roles_path(:page => params[:page])
+ }
+ format.js { head 200 }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'edit' }
+ format.js { head 422 }
+ end
+ end
+ end
+
+ def destroy
+ begin
+ @role.destroy
+ rescue
+ flash[:error] = l(:error_can_not_remove_role)
+ end
+ redirect_to roles_path
+ end
+
+ def permissions
+ @roles = Role.sorted.to_a
+ @permissions = Redmine::AccessControl.permissions.select { |p| !p.public? }
+ if request.post?
+ @roles.each do |role|
+ role.permissions = params[:permissions][role.id.to_s]
+ role.save
+ end
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to roles_path
+ end
+ end
+
+ private
+
+ def find_role
+ @role = Role.find(params[:id])
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+end
diff --git a/app/controllers/search_controller.rb b/app/controllers/search_controller.rb
new file mode 100644
index 0000000..ce9e21f
--- /dev/null
+++ b/app/controllers/search_controller.rb
@@ -0,0 +1,99 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class SearchController < ApplicationController
+ before_action :find_optional_project
+ accept_api_auth :index
+
+ def index
+ @question = params[:q] || ""
+ @question.strip!
+ @all_words = params[:all_words] ? params[:all_words].present? : true
+ @titles_only = params[:titles_only] ? params[:titles_only].present? : false
+ @search_attachments = params[:attachments].presence || '0'
+ @open_issues = params[:open_issues] ? params[:open_issues].present? : false
+
+ case params[:format]
+ when 'xml', 'json'
+ @offset, @limit = api_offset_and_limit
+ else
+ @offset = nil
+ @limit = Setting.search_results_per_page.to_i
+ @limit = 10 if @limit == 0
+ end
+
+ # quick jump to an issue
+ if !api_request? && (m = @question.match(/^#?(\d+)$/)) && (issue = Issue.visible.find_by_id(m[1].to_i))
+ redirect_to issue_path(issue)
+ return
+ end
+
+ projects_to_search =
+ case params[:scope]
+ when 'all'
+ nil
+ when 'my_projects'
+ User.current.projects
+ when 'subprojects'
+ @project ? (@project.self_and_descendants.to_a) : nil
+ else
+ @project
+ end
+
+ @object_types = Redmine::Search.available_search_types.dup
+ if projects_to_search.is_a? Project
+ # don't search projects
+ @object_types.delete('projects')
+ # only show what the user is allowed to view
+ @object_types = @object_types.select {|o| User.current.allowed_to?("view_#{o}".to_sym, projects_to_search)}
+ end
+
+ @scope = @object_types.select {|t| params[t]}
+ @scope = @object_types if @scope.empty?
+
+ fetcher = Redmine::Search::Fetcher.new(
+ @question, User.current, @scope, projects_to_search,
+ :all_words => @all_words, :titles_only => @titles_only, :attachments => @search_attachments, :open_issues => @open_issues,
+ :cache => params[:page].present?, :params => params
+ )
+
+ if fetcher.tokens.present?
+ @result_count = fetcher.result_count
+ @result_count_by_type = fetcher.result_count_by_type
+ @tokens = fetcher.tokens
+
+ @result_pages = Paginator.new @result_count, @limit, params['page']
+ @offset ||= @result_pages.offset
+ @results = fetcher.results(@offset, @result_pages.per_page)
+ else
+ @question = ""
+ end
+ respond_to do |format|
+ format.html { render :layout => false if request.xhr? }
+ format.api { @results ||= []; render :layout => false }
+ end
+ end
+
+private
+ def find_optional_project
+ return true unless params[:id]
+ @project = Project.find(params[:id])
+ check_project_privacy
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+end
diff --git a/app/controllers/settings_controller.rb b/app/controllers/settings_controller.rb
new file mode 100644
index 0000000..7b2dceb
--- /dev/null
+++ b/app/controllers/settings_controller.rb
@@ -0,0 +1,81 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class SettingsController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+ menu_item :plugins, :only => :plugin
+
+ helper :queries
+
+ before_action :require_admin
+
+ require_sudo_mode :index, :edit, :plugin
+
+ def index
+ edit
+ render :action => 'edit'
+ end
+
+ def edit
+ @notifiables = Redmine::Notifiable.all
+ if request.post?
+ errors = Setting.set_all_from_params(params[:settings])
+ if errors.blank?
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to settings_path(:tab => params[:tab])
+ return
+ else
+ @setting_errors = errors
+ # render the edit form with error messages
+ end
+ end
+
+ @options = {}
+ user_format = User::USER_FORMATS.collect{|key, value| [key, value[:setting_order]]}.sort{|a, b| a[1] <=> b[1]}
+ @options[:user_format] = user_format.collect{|f| [User.current.name(f[0]), f[0].to_s]}
+ @deliveries = ActionMailer::Base.perform_deliveries
+
+ @guessed_host_and_path = request.host_with_port.dup
+ @guessed_host_and_path << ('/'+ Redmine::Utils.relative_url_root.gsub(%r{^\/}, '')) unless Redmine::Utils.relative_url_root.blank?
+
+ @commit_update_keywords = Setting.commit_update_keywords.dup
+ @commit_update_keywords = [{}] unless @commit_update_keywords.is_a?(Array) && @commit_update_keywords.any?
+
+ Redmine::Themes.rescan
+ end
+
+ def plugin
+ @plugin = Redmine::Plugin.find(params[:id])
+ unless @plugin.configurable?
+ render_404
+ return
+ end
+
+ if request.post?
+ setting = params[:settings] ? params[:settings].permit!.to_h : {}
+ Setting.send "plugin_#{@plugin.id}=", setting
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to plugin_settings_path(@plugin)
+ else
+ @partial = @plugin.settings[:partial]
+ @settings = Setting.send "plugin_#{@plugin.id}"
+ end
+ rescue Redmine::PluginNotFound
+ render_404
+ end
+end
diff --git a/app/controllers/sys_controller.rb b/app/controllers/sys_controller.rb
new file mode 100644
index 0000000..bd8238a
--- /dev/null
+++ b/app/controllers/sys_controller.rb
@@ -0,0 +1,82 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class SysController < ActionController::Base
+ before_action :check_enabled
+
+ def projects
+ p = Project.active.has_module(:repository).
+ order("#{Project.table_name}.identifier").preload(:repository).to_a
+ # extra_info attribute from repository breaks activeresource client
+ render :json => p.to_json(
+ :only => [:id, :identifier, :name, :is_public, :status],
+ :include => {:repository => {:only => [:id, :url]}}
+ )
+ end
+
+ def create_project_repository
+ project = Project.find(params[:id])
+ if project.repository
+ head 409
+ else
+ logger.info "Repository for #{project.name} was reported to be created by #{request.remote_ip}."
+ repository = Repository.factory(params[:vendor])
+ repository.safe_attributes = params[:repository]
+ repository.project = project
+ if repository.save
+ render :json => {repository.class.name.underscore.gsub('/', '-') => {:id => repository.id, :url => repository.url}}, :status => 201
+ else
+ head 422
+ end
+ end
+ end
+
+ def fetch_changesets
+ projects = []
+ scope = Project.active.has_module(:repository)
+ if params[:id]
+ project = nil
+ if params[:id].to_s =~ /^\d*$/
+ project = scope.find(params[:id])
+ else
+ project = scope.find_by_identifier(params[:id])
+ end
+ raise ActiveRecord::RecordNotFound unless project
+ projects << project
+ else
+ projects = scope.to_a
+ end
+ projects.each do |project|
+ project.repositories.each do |repository|
+ repository.fetch_changesets
+ end
+ end
+ head 200
+ rescue ActiveRecord::RecordNotFound
+ head 404
+ end
+
+ protected
+
+ def check_enabled
+ User.current = nil
+ unless Setting.sys_api_enabled? && params[:key].to_s == Setting.sys_api_key
+ render :plain => 'Access denied. Repository management WS is disabled or key is invalid.', :status => 403
+ return false
+ end
+ end
+end
diff --git a/app/controllers/timelog_controller.rb b/app/controllers/timelog_controller.rb
new file mode 100644
index 0000000..df6b618
--- /dev/null
+++ b/app/controllers/timelog_controller.rb
@@ -0,0 +1,286 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class TimelogController < ApplicationController
+ menu_item :time_entries
+
+ before_action :find_time_entry, :only => [:show, :edit, :update]
+ before_action :check_editability, :only => [:edit, :update]
+ before_action :find_time_entries, :only => [:bulk_edit, :bulk_update, :destroy]
+ before_action :authorize, :only => [:show, :edit, :update, :bulk_edit, :bulk_update, :destroy]
+
+ before_action :find_optional_issue, :only => [:new, :create]
+ before_action :find_optional_project, :only => [:index, :report]
+ before_action :authorize_global, :only => [:new, :create, :index, :report]
+
+ accept_rss_auth :index
+ accept_api_auth :index, :show, :create, :update, :destroy
+
+ rescue_from Query::StatementInvalid, :with => :query_statement_invalid
+
+ helper :issues
+ include TimelogHelper
+ helper :custom_fields
+ include CustomFieldsHelper
+ helper :queries
+ include QueriesHelper
+
+ def index
+ retrieve_time_entry_query
+ scope = time_entry_scope.
+ preload(:issue => [:project, :tracker, :status, :assigned_to, :priority]).
+ preload(:project, :user)
+
+ respond_to do |format|
+ format.html {
+ @entry_count = scope.count
+ @entry_pages = Paginator.new @entry_count, per_page_option, params['page']
+ @entries = scope.offset(@entry_pages.offset).limit(@entry_pages.per_page).to_a
+
+ render :layout => !request.xhr?
+ }
+ format.api {
+ @entry_count = scope.count
+ @offset, @limit = api_offset_and_limit
+ @entries = scope.offset(@offset).limit(@limit).preload(:custom_values => :custom_field).to_a
+ }
+ format.atom {
+ entries = scope.limit(Setting.feeds_limit.to_i).reorder("#{TimeEntry.table_name}.created_on DESC").to_a
+ render_feed(entries, :title => l(:label_spent_time))
+ }
+ format.csv {
+ # Export all entries
+ @entries = scope.to_a
+ send_data(query_to_csv(@entries, @query, params), :type => 'text/csv; header=present', :filename => 'timelog.csv')
+ }
+ end
+ end
+
+ def report
+ retrieve_time_entry_query
+ scope = time_entry_scope
+
+ @report = Redmine::Helpers::TimeReport.new(@project, @issue, params[:criteria], params[:columns], scope)
+
+ respond_to do |format|
+ format.html { render :layout => !request.xhr? }
+ format.csv { send_data(report_to_csv(@report), :type => 'text/csv; header=present', :filename => 'timelog.csv') }
+ end
+ end
+
+ def show
+ respond_to do |format|
+ # TODO: Implement html response
+ format.html { head 406 }
+ format.api
+ end
+ end
+
+ def new
+ @time_entry ||= TimeEntry.new(:project => @project, :issue => @issue, :user => User.current, :spent_on => User.current.today)
+ @time_entry.safe_attributes = params[:time_entry]
+ end
+
+ def create
+ @time_entry ||= TimeEntry.new(:project => @project, :issue => @issue, :user => User.current, :spent_on => User.current.today)
+ @time_entry.safe_attributes = params[:time_entry]
+ if @time_entry.project && !User.current.allowed_to?(:log_time, @time_entry.project)
+ render_403
+ return
+ end
+
+ call_hook(:controller_timelog_edit_before_save, { :params => params, :time_entry => @time_entry })
+
+ if @time_entry.save
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_create)
+ if params[:continue]
+ options = {
+ :time_entry => {
+ :project_id => params[:time_entry][:project_id],
+ :issue_id => @time_entry.issue_id,
+ :spent_on => @time_entry.spent_on,
+ :activity_id => @time_entry.activity_id
+ },
+ :back_url => params[:back_url]
+ }
+ if params[:project_id] && @time_entry.project
+ redirect_to new_project_time_entry_path(@time_entry.project, options)
+ elsif params[:issue_id] && @time_entry.issue
+ redirect_to new_issue_time_entry_path(@time_entry.issue, options)
+ else
+ redirect_to new_time_entry_path(options)
+ end
+ else
+ redirect_back_or_default project_time_entries_path(@time_entry.project)
+ end
+ }
+ format.api { render :action => 'show', :status => :created, :location => time_entry_url(@time_entry) }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'new' }
+ format.api { render_validation_errors(@time_entry) }
+ end
+ end
+ end
+
+ def edit
+ @time_entry.safe_attributes = params[:time_entry]
+ end
+
+ def update
+ @time_entry.safe_attributes = params[:time_entry]
+
+ call_hook(:controller_timelog_edit_before_save, { :params => params, :time_entry => @time_entry })
+
+ if @time_entry.save
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_update)
+ redirect_back_or_default project_time_entries_path(@time_entry.project)
+ }
+ format.api { render_api_ok }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'edit' }
+ format.api { render_validation_errors(@time_entry) }
+ end
+ end
+ end
+
+ def bulk_edit
+ @available_activities = @projects.map(&:activities).reduce(:&)
+ @custom_fields = TimeEntry.first.available_custom_fields.select {|field| field.format.bulk_edit_supported}
+ end
+
+ def bulk_update
+ attributes = parse_params_for_bulk_update(params[:time_entry])
+
+ unsaved_time_entries = []
+ saved_time_entries = []
+
+ @time_entries.each do |time_entry|
+ time_entry.reload
+ time_entry.safe_attributes = attributes
+ call_hook(:controller_time_entries_bulk_edit_before_save, { :params => params, :time_entry => time_entry })
+ if time_entry.save
+ saved_time_entries << time_entry
+ else
+ unsaved_time_entries << time_entry
+ end
+ end
+
+ if unsaved_time_entries.empty?
+ flash[:notice] = l(:notice_successful_update) unless saved_time_entries.empty?
+ redirect_back_or_default project_time_entries_path(@projects.first)
+ else
+ @saved_time_entries = @time_entries
+ @unsaved_time_entries = unsaved_time_entries
+ @time_entries = TimeEntry.where(:id => unsaved_time_entries.map(&:id)).
+ preload(:project => :time_entry_activities).
+ preload(:user).to_a
+
+ bulk_edit
+ render :action => 'bulk_edit'
+ end
+ end
+
+ def destroy
+ destroyed = TimeEntry.transaction do
+ @time_entries.each do |t|
+ unless t.destroy && t.destroyed?
+ raise ActiveRecord::Rollback
+ end
+ end
+ end
+
+ respond_to do |format|
+ format.html {
+ if destroyed
+ flash[:notice] = l(:notice_successful_delete)
+ else
+ flash[:error] = l(:notice_unable_delete_time_entry)
+ end
+ redirect_back_or_default project_time_entries_path(@projects.first), :referer => true
+ }
+ format.api {
+ if destroyed
+ render_api_ok
+ else
+ render_validation_errors(@time_entries)
+ end
+ }
+ end
+ end
+
+private
+ def find_time_entry
+ @time_entry = TimeEntry.find(params[:id])
+ @project = @time_entry.project
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def check_editability
+ unless @time_entry.editable_by?(User.current)
+ render_403
+ return false
+ end
+ end
+
+ def find_time_entries
+ @time_entries = TimeEntry.where(:id => params[:id] || params[:ids]).
+ preload(:project => :time_entry_activities).
+ preload(:user).to_a
+
+ raise ActiveRecord::RecordNotFound if @time_entries.empty?
+ raise Unauthorized unless @time_entries.all? {|t| t.editable_by?(User.current)}
+ @projects = @time_entries.collect(&:project).compact.uniq
+ @project = @projects.first if @projects.size == 1
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def find_optional_issue
+ if params[:issue_id].present?
+ @issue = Issue.find(params[:issue_id])
+ @project = @issue.project
+ else
+ find_optional_project
+ end
+ end
+
+ def find_optional_project
+ if params[:project_id].present?
+ @project = Project.find(params[:project_id])
+ end
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ # Returns the TimeEntry scope for index and report actions
+ def time_entry_scope(options={})
+ @query.results_scope(options)
+ end
+
+ def retrieve_time_entry_query
+ retrieve_query(TimeEntryQuery, false)
+ end
+end
diff --git a/app/controllers/trackers_controller.rb b/app/controllers/trackers_controller.rb
new file mode 100644
index 0000000..caf6b11
--- /dev/null
+++ b/app/controllers/trackers_controller.rb
@@ -0,0 +1,111 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class TrackersController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+
+ before_action :require_admin, :except => :index
+ before_action :require_admin_or_api_request, :only => :index
+ accept_api_auth :index
+
+ def index
+ @trackers = Tracker.sorted.to_a
+ respond_to do |format|
+ format.html { render :layout => false if request.xhr? }
+ format.api
+ end
+ end
+
+ def new
+ @tracker ||= Tracker.new
+ @tracker.safe_attributes = params[:tracker]
+ @trackers = Tracker.sorted.to_a
+ @projects = Project.all
+ end
+
+ def create
+ @tracker = Tracker.new
+ @tracker.safe_attributes = params[:tracker]
+ if @tracker.save
+ # workflow copy
+ if !params[:copy_workflow_from].blank? && (copy_from = Tracker.find_by_id(params[:copy_workflow_from]))
+ @tracker.copy_workflow_rules(copy_from)
+ end
+ flash[:notice] = l(:notice_successful_create)
+ redirect_to trackers_path
+ return
+ end
+ new
+ render :action => 'new'
+ end
+
+ def edit
+ @tracker ||= Tracker.find(params[:id])
+ @projects = Project.all
+ end
+
+ def update
+ @tracker = Tracker.find(params[:id])
+ @tracker.safe_attributes = params[:tracker]
+ if @tracker.save
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to trackers_path(:page => params[:page])
+ }
+ format.js { head 200 }
+ end
+ else
+ respond_to do |format|
+ format.html {
+ edit
+ render :action => 'edit'
+ }
+ format.js { head 422 }
+ end
+ end
+ end
+
+ def destroy
+ @tracker = Tracker.find(params[:id])
+ unless @tracker.issues.empty?
+ flash[:error] = l(:error_can_not_delete_tracker)
+ else
+ @tracker.destroy
+ end
+ redirect_to trackers_path
+ end
+
+ def fields
+ if request.post? && params[:trackers]
+ params[:trackers].each do |tracker_id, tracker_params|
+ tracker = Tracker.find_by_id(tracker_id)
+ if tracker
+ tracker.core_fields = tracker_params[:core_fields]
+ tracker.custom_field_ids = tracker_params[:custom_field_ids]
+ tracker.save
+ end
+ end
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to fields_trackers_path
+ return
+ end
+ @trackers = Tracker.sorted.to_a
+ @custom_fields = IssueCustomField.sorted
+ end
+end
diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
new file mode 100644
index 0000000..0133f97
--- /dev/null
+++ b/app/controllers/users_controller.rb
@@ -0,0 +1,190 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class UsersController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+
+ before_action :require_admin, :except => :show
+ before_action ->{ find_user(false) }, :only => :show
+ before_action :find_user, :only => [:edit, :update, :destroy]
+ accept_api_auth :index, :show, :create, :update, :destroy
+
+ helper :sort
+ include SortHelper
+ helper :custom_fields
+ include CustomFieldsHelper
+ helper :principal_memberships
+
+ require_sudo_mode :create, :update, :destroy
+
+ def index
+ sort_init 'login', 'asc'
+ sort_update %w(login firstname lastname admin created_on last_login_on)
+
+ case params[:format]
+ when 'xml', 'json'
+ @offset, @limit = api_offset_and_limit
+ else
+ @limit = per_page_option
+ end
+
+ @status = params[:status] || 1
+
+ scope = User.logged.status(@status).preload(:email_address)
+ scope = scope.like(params[:name]) if params[:name].present?
+ scope = scope.in_group(params[:group_id]) if params[:group_id].present?
+
+ @user_count = scope.count
+ @user_pages = Paginator.new @user_count, @limit, params['page']
+ @offset ||= @user_pages.offset
+ @users = scope.order(sort_clause).limit(@limit).offset(@offset).to_a
+
+ respond_to do |format|
+ format.html {
+ @groups = Group.givable.sort
+ render :layout => !request.xhr?
+ }
+ format.api
+ end
+ end
+
+ def show
+ unless @user.visible?
+ render_404
+ return
+ end
+
+ # show projects based on current user visibility
+ @memberships = @user.memberships.preload(:roles, :project).where(Project.visible_condition(User.current)).to_a
+
+ respond_to do |format|
+ format.html {
+ events = Redmine::Activity::Fetcher.new(User.current, :author => @user).events(nil, nil, :limit => 10)
+ @events_by_day = events.group_by {|event| User.current.time_to_date(event.event_datetime)}
+ render :layout => 'base'
+ }
+ format.api
+ end
+ end
+
+ def new
+ @user = User.new(:language => Setting.default_language, :mail_notification => Setting.default_notification_option)
+ @user.safe_attributes = params[:user]
+ @auth_sources = AuthSource.all
+ end
+
+ def create
+ @user = User.new(:language => Setting.default_language, :mail_notification => Setting.default_notification_option, :admin => false)
+ @user.safe_attributes = params[:user]
+ @user.password, @user.password_confirmation = params[:user][:password], params[:user][:password_confirmation] unless @user.auth_source_id
+ @user.pref.safe_attributes = params[:pref]
+
+ if @user.save
+ Mailer.account_information(@user, @user.password).deliver if params[:send_information]
+
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_user_successful_create, :id => view_context.link_to(@user.login, user_path(@user)))
+ if params[:continue]
+ attrs = params[:user].slice(:generate_password)
+ redirect_to new_user_path(:user => attrs)
+ else
+ redirect_to edit_user_path(@user)
+ end
+ }
+ format.api { render :action => 'show', :status => :created, :location => user_url(@user) }
+ end
+ else
+ @auth_sources = AuthSource.all
+ # Clear password input
+ @user.password = @user.password_confirmation = nil
+
+ respond_to do |format|
+ format.html { render :action => 'new' }
+ format.api { render_validation_errors(@user) }
+ end
+ end
+ end
+
+ def edit
+ @auth_sources = AuthSource.all
+ @membership ||= Member.new
+ end
+
+ def update
+ if params[:user][:password].present? && (@user.auth_source_id.nil? || params[:user][:auth_source_id].blank?)
+ @user.password, @user.password_confirmation = params[:user][:password], params[:user][:password_confirmation]
+ end
+ @user.safe_attributes = params[:user]
+ # Was the account actived ? (do it before User#save clears the change)
+ was_activated = (@user.status_change == [User::STATUS_REGISTERED, User::STATUS_ACTIVE])
+ # TODO: Similar to My#account
+ @user.pref.safe_attributes = params[:pref]
+
+ if @user.save
+ @user.pref.save
+
+ if was_activated
+ Mailer.account_activated(@user).deliver
+ elsif @user.active? && params[:send_information] && @user != User.current
+ Mailer.account_information(@user, @user.password).deliver
+ end
+
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to_referer_or edit_user_path(@user)
+ }
+ format.api { render_api_ok }
+ end
+ else
+ @auth_sources = AuthSource.all
+ @membership ||= Member.new
+ # Clear password input
+ @user.password = @user.password_confirmation = nil
+
+ respond_to do |format|
+ format.html { render :action => :edit }
+ format.api { render_validation_errors(@user) }
+ end
+ end
+ end
+
+ def destroy
+ @user.destroy
+ respond_to do |format|
+ format.html { redirect_back_or_default(users_path) }
+ format.api { render_api_ok }
+ end
+ end
+
+ private
+
+ def find_user(logged = true)
+ if params[:id] == 'current'
+ require_login || return
+ @user = User.current
+ elsif logged
+ @user = User.logged.find(params[:id])
+ else
+ @user = User.find(params[:id])
+ end
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+end
diff --git a/app/controllers/versions_controller.rb b/app/controllers/versions_controller.rb
new file mode 100644
index 0000000..a536416
--- /dev/null
+++ b/app/controllers/versions_controller.rb
@@ -0,0 +1,183 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class VersionsController < ApplicationController
+ menu_item :roadmap
+ model_object Version
+ before_action :find_model_object, :except => [:index, :new, :create, :close_completed]
+ before_action :find_project_from_association, :except => [:index, :new, :create, :close_completed]
+ before_action :find_project_by_project_id, :only => [:index, :new, :create, :close_completed]
+ before_action :authorize
+
+ accept_api_auth :index, :show, :create, :update, :destroy
+
+ helper :custom_fields
+ helper :projects
+
+ def index
+ respond_to do |format|
+ format.html {
+ @trackers = @project.trackers.sorted.to_a
+ retrieve_selected_tracker_ids(@trackers, @trackers.select {|t| t.is_in_roadmap?})
+ @with_subprojects = params[:with_subprojects].nil? ? Setting.display_subprojects_issues? : (params[:with_subprojects] == '1')
+ project_ids = @with_subprojects ? @project.self_and_descendants.collect(&:id) : [@project.id]
+
+ @versions = @project.shared_versions.preload(:custom_values)
+ @versions += @project.rolled_up_versions.visible.preload(:custom_values) if @with_subprojects
+ @versions = @versions.to_a.uniq.sort
+ unless params[:completed]
+ @completed_versions = @versions.select(&:completed?).reverse
+ @versions -= @completed_versions
+ end
+
+ @issues_by_version = {}
+ if @selected_tracker_ids.any? && @versions.any?
+ issues = Issue.visible.
+ includes(:project, :tracker).
+ preload(:status, :priority, :fixed_version).
+ where(:tracker_id => @selected_tracker_ids, :project_id => project_ids, :fixed_version_id => @versions.map(&:id)).
+ order("#{Project.table_name}.lft, #{Tracker.table_name}.position, #{Issue.table_name}.id")
+ @issues_by_version = issues.group_by(&:fixed_version)
+ end
+ @versions.reject! {|version| !project_ids.include?(version.project_id) && @issues_by_version[version].blank?}
+ }
+ format.api {
+ @versions = @project.shared_versions.to_a
+ }
+ end
+ end
+
+ def show
+ respond_to do |format|
+ format.html {
+ @issues = @version.fixed_issues.visible.
+ includes(:status, :tracker, :priority).
+ preload(:project).
+ reorder("#{Tracker.table_name}.position, #{Issue.table_name}.id").
+ to_a
+ }
+ format.api
+ end
+ end
+
+ def new
+ @version = @project.versions.build
+ @version.safe_attributes = params[:version]
+
+ respond_to do |format|
+ format.html
+ format.js
+ end
+ end
+
+ def create
+ @version = @project.versions.build
+ if params[:version]
+ attributes = params[:version].dup
+ attributes.delete('sharing') unless attributes.nil? || @version.allowed_sharings.include?(attributes['sharing'])
+ @version.safe_attributes = attributes
+ end
+
+ if request.post?
+ if @version.save
+ respond_to do |format|
+ format.html do
+ flash[:notice] = l(:notice_successful_create)
+ redirect_back_or_default settings_project_path(@project, :tab => 'versions')
+ end
+ format.js
+ format.api do
+ render :action => 'show', :status => :created, :location => version_url(@version)
+ end
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'new' }
+ format.js { render :action => 'new' }
+ format.api { render_validation_errors(@version) }
+ end
+ end
+ end
+ end
+
+ def edit
+ end
+
+ def update
+ if params[:version]
+ attributes = params[:version].dup
+ attributes.delete('sharing') unless @version.allowed_sharings.include?(attributes['sharing'])
+ @version.safe_attributes = attributes
+ if @version.save
+ respond_to do |format|
+ format.html {
+ flash[:notice] = l(:notice_successful_update)
+ redirect_back_or_default settings_project_path(@project, :tab => 'versions')
+ }
+ format.api { render_api_ok }
+ end
+ else
+ respond_to do |format|
+ format.html { render :action => 'edit' }
+ format.api { render_validation_errors(@version) }
+ end
+ end
+ end
+ end
+
+ def close_completed
+ if request.put?
+ @project.close_completed_versions
+ end
+ redirect_to settings_project_path(@project, :tab => 'versions')
+ end
+
+ def destroy
+ if @version.deletable?
+ @version.destroy
+ respond_to do |format|
+ format.html { redirect_back_or_default settings_project_path(@project, :tab => 'versions') }
+ format.api { render_api_ok }
+ end
+ else
+ respond_to do |format|
+ format.html {
+ flash[:error] = l(:notice_unable_delete_version)
+ redirect_to settings_project_path(@project, :tab => 'versions')
+ }
+ format.api { head :unprocessable_entity }
+ end
+ end
+ end
+
+ def status_by
+ respond_to do |format|
+ format.html { render :action => 'show' }
+ format.js
+ end
+ end
+
+ private
+
+ def retrieve_selected_tracker_ids(selectable_trackers, default_trackers=nil)
+ if ids = params[:tracker_ids]
+ @selected_tracker_ids = (ids.is_a? Array) ? ids.collect { |id| id.to_i.to_s } : ids.split('/').collect { |id| id.to_i.to_s }
+ else
+ @selected_tracker_ids = (default_trackers || selectable_trackers).collect {|t| t.id.to_s }
+ end
+ end
+end
diff --git a/app/controllers/watchers_controller.rb b/app/controllers/watchers_controller.rb
new file mode 100644
index 0000000..3f080e9
--- /dev/null
+++ b/app/controllers/watchers_controller.rb
@@ -0,0 +1,152 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class WatchersController < ApplicationController
+ before_action :require_login, :find_watchables, :only => [:watch, :unwatch]
+
+ def watch
+ set_watcher(@watchables, User.current, true)
+ end
+
+ def unwatch
+ set_watcher(@watchables, User.current, false)
+ end
+
+ before_action :find_project, :authorize, :only => [:new, :create, :append, :destroy, :autocomplete_for_user]
+ accept_api_auth :create, :destroy
+
+ def new
+ @users = users_for_new_watcher
+ end
+
+ def create
+ user_ids = []
+ if params[:watcher]
+ user_ids << (params[:watcher][:user_ids] || params[:watcher][:user_id])
+ else
+ user_ids << params[:user_id]
+ end
+ users = User.active.visible.where(:id => user_ids.flatten.compact.uniq)
+ users.each do |user|
+ @watchables.each do |watchable|
+ Watcher.create(:watchable => watchable, :user => user)
+ end
+ end
+ respond_to do |format|
+ format.html { redirect_to_referer_or {render :html => 'Watcher added.', :status => 200, :layout => true}}
+ format.js { @users = users_for_new_watcher }
+ format.api { render_api_ok }
+ end
+ end
+
+ def append
+ if params[:watcher]
+ user_ids = params[:watcher][:user_ids] || [params[:watcher][:user_id]]
+ @users = User.active.visible.where(:id => user_ids).to_a
+ end
+ if @users.blank?
+ head 200
+ end
+ end
+
+ def destroy
+ user = User.find(params[:user_id])
+ @watchables.each do |watchable|
+ watchable.set_watcher(user, false)
+ end
+ respond_to do |format|
+ format.html { redirect_to_referer_or {render :html => 'Watcher removed.', :status => 200, :layout => true} }
+ format.js
+ format.api { render_api_ok }
+ end
+ rescue ActiveRecord::RecordNotFound
+ render_404
+ end
+
+ def autocomplete_for_user
+ @users = users_for_new_watcher
+ render :layout => false
+ end
+
+ private
+
+ def find_project
+ if params[:object_type] && params[:object_id]
+ @watchables = find_objets_from_params
+ @projects = @watchables.map(&:project).uniq
+ if @projects.size == 1
+ @project = @projects.first
+ end
+ elsif params[:project_id]
+ @project = Project.visible.find_by_param(params[:project_id])
+ end
+ end
+
+ def find_watchables
+ @watchables = find_objets_from_params
+ unless @watchables.present?
+ render_404
+ end
+ end
+
+ def set_watcher(watchables, user, watching)
+ watchables.each do |watchable|
+ watchable.set_watcher(user, watching)
+ end
+ respond_to do |format|
+ format.html {
+ text = watching ? 'Watcher added.' : 'Watcher removed.'
+ redirect_to_referer_or {render :html => text, :status => 200, :layout => true}
+ }
+ format.js { render :partial => 'set_watcher', :locals => {:user => user, :watched => watchables} }
+ end
+ end
+
+ def users_for_new_watcher
+ scope = nil
+ if params[:q].blank? && @project.present?
+ scope = @project.users
+ else
+ scope = User.all.limit(100)
+ end
+ users = scope.active.visible.sorted.like(params[:q]).to_a
+ if @watchables && @watchables.size == 1
+ users -= @watchables.first.watcher_users
+ end
+ users
+ end
+
+ def find_objets_from_params
+ klass = Object.const_get(params[:object_type].camelcase) rescue nil
+ return unless klass && klass.respond_to?('watched_by')
+
+ scope = klass.where(:id => Array.wrap(params[:object_id]))
+ if klass.reflect_on_association(:project)
+ scope = scope.preload(:project => :enabled_modules)
+ end
+ objects = scope.to_a
+
+ raise Unauthorized if objects.any? do |w|
+ if w.respond_to?(:visible?)
+ !w.visible?
+ elsif w.respond_to?(:project) && w.project
+ !w.project.visible?
+ end
+ end
+ objects
+ end
+end
diff --git a/app/controllers/welcome_controller.rb b/app/controllers/welcome_controller.rb
new file mode 100644
index 0000000..341a64d
--- /dev/null
+++ b/app/controllers/welcome_controller.rb
@@ -0,0 +1,29 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class WelcomeController < ApplicationController
+ self.main_menu = false
+
+ def index
+ @news = News.latest User.current
+ end
+
+ def robots
+ @projects = Project.all_public.active
+ render :layout => false, :content_type => 'text/plain'
+ end
+end
diff --git a/app/controllers/wiki_controller.rb b/app/controllers/wiki_controller.rb
index ff06a21..134765e 100644
--- a/app/controllers/wiki_controller.rb
+++ b/app/controllers/wiki_controller.rb
@@ -1,7 +1,5 @@
-# frozen_string_literal: true
-
# Redmine - project management software
-# Copyright (C) 2006-2019 Jean-Philippe Lang
+# Copyright (C) 2006-2017 Jean-Philippe Lang
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
@@ -74,7 +72,7 @@ class WikiController < ApplicationController
@page.title = '' unless editable?
@page.validate
if @page.errors[:title].blank?
- path = project_wiki_page_path(@project, @page.title, :parent => params[:parent])
+ path = project_wiki_page_path(@project, @page.title)
respond_to do |format|
format.html { redirect_to path }
format.js { render :js => "window.location = #{path.to_json}" }
@@ -91,7 +89,7 @@ class WikiController < ApplicationController
end
@content = @page.content_for_version(params[:version])
if @content.nil?
- if params[:version].blank? && User.current.allowed_to?(:edit_wiki_pages, @project) && editable? && !api_request?
+ if User.current.allowed_to?(:edit_wiki_pages, @project) && editable? && !api_request?
edit
render :action => 'edit'
else
@@ -327,7 +325,7 @@ class WikiController < ApplicationController
@attachments += page.attachments
@previewed = page.content
end
- @text = params[:content].present? ? params[:content][:text] : params[:text]
+ @text = params[:content][:text]
render :partial => 'common/preview'
end
@@ -338,7 +336,7 @@ class WikiController < ApplicationController
redirect_to :action => 'show', :id => @page.title, :project_id => @project
end
- private
+private
def find_wiki
@project = Project.find(params[:project_id])
diff --git a/app/controllers/wikis_controller.rb b/app/controllers/wikis_controller.rb
new file mode 100644
index 0000000..c61c2f9
--- /dev/null
+++ b/app/controllers/wikis_controller.rb
@@ -0,0 +1,36 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class WikisController < ApplicationController
+ menu_item :settings
+ before_action :find_project, :authorize
+
+ # Create or update a project's wiki
+ def edit
+ @wiki = @project.wiki || Wiki.new(:project => @project)
+ @wiki.safe_attributes = params[:wiki]
+ @wiki.save if request.post?
+ end
+
+ # Delete a project's wiki
+ def destroy
+ if request.post? && params[:confirm] && @project.wiki
+ @project.wiki.destroy
+ redirect_to settings_project_path(@project, :tab => 'wiki')
+ end
+ end
+end
diff --git a/app/controllers/workflows_controller.rb b/app/controllers/workflows_controller.rb
new file mode 100644
index 0000000..c831827
--- /dev/null
+++ b/app/controllers/workflows_controller.rb
@@ -0,0 +1,149 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class WorkflowsController < ApplicationController
+ layout 'admin'
+ self.main_menu = false
+
+ before_action :require_admin
+
+ def index
+ @roles = Role.sorted.select(&:consider_workflow?)
+ @trackers = Tracker.sorted
+ @workflow_counts = WorkflowTransition.group(:tracker_id, :role_id).count
+ end
+
+ def edit
+ find_trackers_roles_and_statuses_for_edit
+
+ if request.post? && @roles && @trackers && params[:transitions]
+ transitions = params[:transitions].deep_dup
+ transitions.each do |old_status_id, transitions_by_new_status|
+ transitions_by_new_status.each do |new_status_id, transition_by_rule|
+ transition_by_rule.reject! {|rule, transition| transition == 'no_change'}
+ end
+ end
+ WorkflowTransition.replace_transitions(@trackers, @roles, transitions)
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to_referer_or workflows_edit_path
+ return
+ end
+
+ if @trackers && @roles && @statuses.any?
+ workflows = WorkflowTransition.
+ where(:role_id => @roles.map(&:id), :tracker_id => @trackers.map(&:id)).
+ preload(:old_status, :new_status)
+ @workflows = {}
+ @workflows['always'] = workflows.select {|w| !w.author && !w.assignee}
+ @workflows['author'] = workflows.select {|w| w.author}
+ @workflows['assignee'] = workflows.select {|w| w.assignee}
+ end
+ end
+
+ def permissions
+ find_trackers_roles_and_statuses_for_edit
+
+ if request.post? && @roles && @trackers && params[:permissions]
+ permissions = params[:permissions].deep_dup
+ permissions.each { |field, rule_by_status_id|
+ rule_by_status_id.reject! {|status_id, rule| rule == 'no_change'}
+ }
+ WorkflowPermission.replace_permissions(@trackers, @roles, permissions)
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to_referer_or workflows_permissions_path
+ return
+ end
+
+ if @roles && @trackers
+ @fields = (Tracker::CORE_FIELDS_ALL - @trackers.map(&:disabled_core_fields).reduce(:&)).map {|field| [field, l("field_"+field.sub(/_id$/, ''))]}
+ @custom_fields = @trackers.map(&:custom_fields).flatten.uniq.sort
+ @permissions = WorkflowPermission.rules_by_status_id(@trackers, @roles)
+ @statuses.each {|status| @permissions[status.id] ||= {}}
+ end
+ end
+
+ def copy
+ @roles = Role.sorted.select(&:consider_workflow?)
+ @trackers = Tracker.sorted
+
+ if params[:source_tracker_id].blank? || params[:source_tracker_id] == 'any'
+ @source_tracker = nil
+ else
+ @source_tracker = Tracker.find_by_id(params[:source_tracker_id].to_i)
+ end
+ if params[:source_role_id].blank? || params[:source_role_id] == 'any'
+ @source_role = nil
+ else
+ @source_role = Role.find_by_id(params[:source_role_id].to_i)
+ end
+ @target_trackers = params[:target_tracker_ids].blank? ?
+ nil : Tracker.where(:id => params[:target_tracker_ids]).to_a
+ @target_roles = params[:target_role_ids].blank? ?
+ nil : Role.where(:id => params[:target_role_ids]).to_a
+ if request.post?
+ if params[:source_tracker_id].blank? || params[:source_role_id].blank? || (@source_tracker.nil? && @source_role.nil?)
+ flash.now[:error] = l(:error_workflow_copy_source)
+ elsif @target_trackers.blank? || @target_roles.blank?
+ flash.now[:error] = l(:error_workflow_copy_target)
+ else
+ WorkflowRule.copy(@source_tracker, @source_role, @target_trackers, @target_roles)
+ flash[:notice] = l(:notice_successful_update)
+ redirect_to workflows_copy_path(:source_tracker_id => @source_tracker, :source_role_id => @source_role)
+ end
+ end
+ end
+
+ private
+
+ def find_trackers_roles_and_statuses_for_edit
+ find_roles
+ find_trackers
+ find_statuses
+ end
+
+ def find_roles
+ ids = Array.wrap(params[:role_id])
+ if ids == ['all']
+ @roles = Role.sorted.to_a
+ elsif ids.present?
+ @roles = Role.where(:id => ids).to_a
+ end
+ @roles = nil if @roles.blank?
+ end
+
+ def find_trackers
+ ids = Array.wrap(params[:tracker_id])
+ if ids == ['all']
+ @trackers = Tracker.sorted.to_a
+ elsif ids.present?
+ @trackers = Tracker.where(:id => ids).to_a
+ end
+ @trackers = nil if @trackers.blank?
+ end
+
+ def find_statuses
+ @used_statuses_only = (params[:used_statuses_only] == '0' ? false : true)
+ if @trackers && @used_statuses_only
+ role_ids = Role.all.select(&:consider_workflow?).map(&:id)
+ status_ids = WorkflowTransition.where(
+ :tracker_id => @trackers.map(&:id), :role_id => role_ids
+ ).distinct.pluck(:old_status_id, :new_status_id).flatten.uniq
+ @statuses = IssueStatus.where(:id => status_ids).sorted.to_a.presence
+ end
+ @statuses ||= IssueStatus.sorted.to_a
+ end
+end
diff --git a/app/helpers/account_helper.rb b/app/helpers/account_helper.rb
new file mode 100644
index 0000000..e4d8222
--- /dev/null
+++ b/app/helpers/account_helper.rb
@@ -0,0 +1,21 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module AccountHelper
+end
diff --git a/app/helpers/activities_helper.rb b/app/helpers/activities_helper.rb
new file mode 100644
index 0000000..54e5580
--- /dev/null
+++ b/app/helpers/activities_helper.rb
@@ -0,0 +1,33 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module ActivitiesHelper
+ def sort_activity_events(events)
+ events_by_group = events.group_by(&:event_group)
+ sorted_events = []
+ events.sort {|x, y| y.event_datetime <=> x.event_datetime}.each do |event|
+ if group_events = events_by_group.delete(event.event_group)
+ group_events.sort {|x, y| y.event_datetime <=> x.event_datetime}.each_with_index do |e, i|
+ sorted_events << [e, i > 0]
+ end
+ end
+ end
+ sorted_events
+ end
+end
diff --git a/app/helpers/admin_helper.rb b/app/helpers/admin_helper.rb
new file mode 100644
index 0000000..e972ef0
--- /dev/null
+++ b/app/helpers/admin_helper.rb
@@ -0,0 +1,35 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module AdminHelper
+ def project_status_options_for_select(selected)
+ options_for_select([[l(:label_all), ''],
+ [l(:project_status_active), '1'],
+ [l(:project_status_closed), '5'],
+ [l(:project_status_archived), '9']], selected.to_s)
+ end
+
+ def plugin_data_for_updates(plugins)
+ data = {"v" => Redmine::VERSION.to_s, "p" => {}}
+ plugins.each do |plugin|
+ data["p"].merge! plugin.id => {"v" => plugin.version, "n" => plugin.name, "a" => plugin.author}
+ end
+ data
+ end
+end
diff --git a/app/helpers/application_helper.rb b/app/helpers/application_helper.rb
new file mode 100644
index 0000000..792af98
--- /dev/null
+++ b/app/helpers/application_helper.rb
@@ -0,0 +1,1522 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'forwardable'
+require 'cgi'
+
+module ApplicationHelper
+ include Redmine::WikiFormatting::Macros::Definitions
+ include Redmine::I18n
+ include GravatarHelper::PublicMethods
+ include Redmine::Pagination::Helper
+ include Redmine::SudoMode::Helper
+ include Redmine::Themes::Helper
+ include Redmine::Hook::Helper
+ include Redmine::Helpers::URL
+
+ extend Forwardable
+ def_delegators :wiki_helper, :wikitoolbar_for, :heads_for_wiki_formatter
+
+ # Return true if user is authorized for controller/action, otherwise false
+ def authorize_for(controller, action)
+ User.current.allowed_to?({:controller => controller, :action => action}, @project)
+ end
+
+ # Display a link if user is authorized
+ #
+ # @param [String] name Anchor text (passed to link_to)
+ # @param [Hash] options Hash params. This will checked by authorize_for to see if the user is authorized
+ # @param [optional, Hash] html_options Options passed to link_to
+ # @param [optional, Hash] parameters_for_method_reference Extra parameters for link_to
+ def link_to_if_authorized(name, options = {}, html_options = nil, *parameters_for_method_reference)
+ link_to(name, options, html_options, *parameters_for_method_reference) if authorize_for(options[:controller] || params[:controller], options[:action])
+ end
+
+ # Displays a link to user's account page if active
+ def link_to_user(user, options={})
+ if user.is_a?(User)
+ name = h(user.name(options[:format]))
+ if user.active? || (User.current.admin? && user.logged?)
+ link_to name, user_path(user), :class => user.css_classes
+ else
+ name
+ end
+ else
+ h(user.to_s)
+ end
+ end
+
+ # Displays a link to +issue+ with its subject.
+ # Examples:
+ #
+ # link_to_issue(issue) # => Defect #6: This is the subject
+ # link_to_issue(issue, :truncate => 6) # => Defect #6: This i...
+ # link_to_issue(issue, :subject => false) # => Defect #6
+ # link_to_issue(issue, :project => true) # => Foo - Defect #6
+ # link_to_issue(issue, :subject => false, :tracker => false) # => #6
+ #
+ def link_to_issue(issue, options={})
+ title = nil
+ subject = nil
+ text = options[:tracker] == false ? "##{issue.id}" : "#{issue.tracker} ##{issue.id}"
+ if options[:subject] == false
+ title = issue.subject.truncate(60)
+ else
+ subject = issue.subject
+ if truncate_length = options[:truncate]
+ subject = subject.truncate(truncate_length)
+ end
+ end
+ only_path = options[:only_path].nil? ? true : options[:only_path]
+ s = link_to(text, issue_url(issue, :only_path => only_path),
+ :class => issue.css_classes, :title => title)
+ s << h(": #{subject}") if subject
+ s = h("#{issue.project} - ") + s if options[:project]
+ s
+ end
+
+ # Generates a link to an attachment.
+ # Options:
+ # * :text - Link text (default to attachment filename)
+ # * :download - Force download (default: false)
+ def link_to_attachment(attachment, options={})
+ text = options.delete(:text) || attachment.filename
+ route_method = options.delete(:download) ? :download_named_attachment_url : :named_attachment_url
+ html_options = options.slice!(:only_path)
+ options[:only_path] = true unless options.key?(:only_path)
+ url = send(route_method, attachment, attachment.filename, options)
+ link_to text, url, html_options
+ end
+
+ # Generates a link to a SCM revision
+ # Options:
+ # * :text - Link text (default to the formatted revision)
+ def link_to_revision(revision, repository, options={})
+ if repository.is_a?(Project)
+ repository = repository.repository
+ end
+ text = options.delete(:text) || format_revision(revision)
+ rev = revision.respond_to?(:identifier) ? revision.identifier : revision
+ link_to(
+ h(text),
+ {:controller => 'repositories', :action => 'revision', :id => repository.project, :repository_id => repository.identifier_param, :rev => rev},
+ :title => l(:label_revision_id, format_revision(revision)),
+ :accesskey => options[:accesskey]
+ )
+ end
+
+ # Generates a link to a message
+ def link_to_message(message, options={}, html_options = nil)
+ link_to(
+ message.subject.truncate(60),
+ board_message_url(message.board_id, message.parent_id || message.id, {
+ :r => (message.parent_id && message.id),
+ :anchor => (message.parent_id ? "message-#{message.id}" : nil),
+ :only_path => true
+ }.merge(options)),
+ html_options
+ )
+ end
+
+ # Generates a link to a project if active
+ # Examples:
+ #
+ # link_to_project(project) # => link to the specified project overview
+ # link_to_project(project, {:only_path => false}, :class => "project") # => 3rd arg adds html options
+ # link_to_project(project, {}, :class => "project") # => html options with default url (project overview)
+ #
+ def link_to_project(project, options={}, html_options = nil)
+ if project.archived?
+ h(project.name)
+ else
+ link_to project.name,
+ project_url(project, {:only_path => true}.merge(options)),
+ html_options
+ end
+ end
+
+ # Generates a link to a project settings if active
+ def link_to_project_settings(project, options={}, html_options=nil)
+ if project.active?
+ link_to project.name, settings_project_path(project, options), html_options
+ elsif project.archived?
+ h(project.name)
+ else
+ link_to project.name, project_path(project, options), html_options
+ end
+ end
+
+ # Generates a link to a version
+ def link_to_version(version, options = {})
+ return '' unless version && version.is_a?(Version)
+ options = {:title => format_date(version.effective_date)}.merge(options)
+ link_to_if version.visible?, format_version_name(version), version_path(version), options
+ end
+
+ # Helper that formats object for html or text rendering
+ def format_object(object, html=true, &block)
+ if block_given?
+ object = yield object
+ end
+ case object.class.name
+ when 'Array'
+ formatted_objects = object.map {|o| format_object(o, html)}
+ html ? safe_join(formatted_objects, ', ') : formatted_objects.join(', ')
+ when 'Time'
+ format_time(object)
+ when 'Date'
+ format_date(object)
+ when 'Fixnum'
+ object.to_s
+ when 'Float'
+ sprintf "%.2f", object
+ when 'User'
+ html ? link_to_user(object) : object.to_s
+ when 'Project'
+ html ? link_to_project(object) : object.to_s
+ when 'Version'
+ html ? link_to_version(object) : object.to_s
+ when 'TrueClass'
+ l(:general_text_Yes)
+ when 'FalseClass'
+ l(:general_text_No)
+ when 'Issue'
+ object.visible? && html ? link_to_issue(object) : "##{object.id}"
+ when 'Attachment'
+ html ? link_to_attachment(object) : object.filename
+ when 'CustomValue', 'CustomFieldValue'
+ if object.custom_field
+ f = object.custom_field.format.formatted_custom_value(self, object, html)
+ if f.nil? || f.is_a?(String)
+ f
+ else
+ format_object(f, html, &block)
+ end
+ else
+ object.value.to_s
+ end
+ else
+ html ? h(object) : object.to_s
+ end
+ end
+
+ def wiki_page_path(page, options={})
+ url_for({:controller => 'wiki', :action => 'show', :project_id => page.project, :id => page.title}.merge(options))
+ end
+
+ def thumbnail_tag(attachment)
+ thumbnail_size = Setting.thumbnails_size.to_i
+ link_to(
+ image_tag(
+ thumbnail_path(attachment),
+ :srcset => "#{thumbnail_path(attachment, :size => thumbnail_size * 2)} 2x",
+ :style => "max-width: #{thumbnail_size}px; max-height: #{thumbnail_size}px;"
+ ),
+ named_attachment_path(
+ attachment,
+ attachment.filename
+ ),
+ :title => attachment.filename
+ )
+ end
+
+ def toggle_link(name, id, options={})
+ onclick = "$('##{id}').toggle(); "
+ onclick << (options[:focus] ? "$('##{options[:focus]}').focus(); " : "this.blur(); ")
+ onclick << "$(window).scrollTop($('##{options[:focus]}').position().top); " if options[:scroll]
+ onclick << "return false;"
+ link_to(name, "#", :onclick => onclick)
+ end
+
+ # Used to format item titles on the activity view
+ def format_activity_title(text)
+ text
+ end
+
+ def format_activity_day(date)
+ date == User.current.today ? l(:label_today).titleize : format_date(date)
+ end
+
+ def format_activity_description(text)
+ h(text.to_s.truncate(120).gsub(%r{[\r\n]*<(pre|code)>.*$}m, '...')
+ ).gsub(/[\r\n]+/, " ").html_safe
+ end
+
+ def format_version_name(version)
+ if version.project == @project
+ h(version)
+ else
+ h("#{version.project} - #{version}")
+ end
+ end
+
+ def format_changeset_comments(changeset, options={})
+ method = options[:short] ? :short_comments : :comments
+ textilizable changeset, method, :formatting => Setting.commit_logs_formatting?
+ end
+
+ def due_date_distance_in_words(date)
+ if date
+ l((date < User.current.today ? :label_roadmap_overdue : :label_roadmap_due_in), distance_of_date_in_words(User.current.today, date))
+ end
+ end
+
+ # Renders a tree of projects as a nested set of unordered lists
+ # The given collection may be a subset of the whole project tree
+ # (eg. some intermediate nodes are private and can not be seen)
+ def render_project_nested_lists(projects, &block)
+ s = ''
+ if projects.any?
+ ancestors = []
+ original_project = @project
+ projects.sort_by(&:lft).each do |project|
+ # set the project environment to please macros.
+ @project = project
+ if (ancestors.empty? || project.is_descendant_of?(ancestors.last))
+ s << "
\n"
+ else
+ ancestors.pop
+ s << ""
+ while (ancestors.any? && !project.is_descendant_of?(ancestors.last))
+ ancestors.pop
+ s << "
\n"
+ end
+ end
+ classes = (ancestors.empty? ? 'root' : 'child')
+ s << "
"
+ s << h(block_given? ? capture(project, &block) : project.name)
+ s << "
\n"
+ ancestors << project
+ end
+ s << ("
\n" * ancestors.size)
+ @project = original_project
+ end
+ s.html_safe
+ end
+
+ def render_page_hierarchy(pages, node=nil, options={})
+ content = ''
+ if pages[node]
+ content << "
'.html_safe)
+ end
+
+ def page_header_title
+ if @project.nil? || @project.new_record?
+ h(Setting.app_title)
+ else
+ b = []
+ ancestors = (@project.root? ? [] : @project.ancestors.visible.to_a)
+ if ancestors.any?
+ root = ancestors.shift
+ b << link_to_project(root, {:jump => current_menu_item}, :class => 'root')
+ if ancestors.size > 2
+ b << "\xe2\x80\xa6"
+ ancestors = ancestors[-2, 2]
+ end
+ b += ancestors.collect {|p| link_to_project(p, {:jump => current_menu_item}, :class => 'ancestor') }
+ end
+ b << content_tag(:span, h(@project), class: 'current-project')
+ if b.size > 1
+ separator = content_tag(:span, ' » '.html_safe, class: 'separator')
+ path = safe_join(b[0..-2], separator) + separator
+ b = [content_tag(:span, path.html_safe, class: 'breadcrumbs'), b[-1]]
+ end
+ safe_join b
+ end
+ end
+
+ # Returns a h2 tag and sets the html title with the given arguments
+ def title(*args)
+ strings = args.map do |arg|
+ if arg.is_a?(Array) && arg.size >= 2
+ link_to(*arg)
+ else
+ h(arg.to_s)
+ end
+ end
+ html_title args.reverse.map {|s| (s.is_a?(Array) ? s.first : s).to_s}
+ content_tag('h2', strings.join(' » ').html_safe)
+ end
+
+ # Sets the html title
+ # Returns the html title when called without arguments
+ # Current project name and app_title and automatically appended
+ # Exemples:
+ # html_title 'Foo', 'Bar'
+ # html_title # => 'Foo - Bar - My Project - Redmine'
+ def html_title(*args)
+ if args.empty?
+ title = @html_title || []
+ title << @project.name if @project
+ title << Setting.app_title unless Setting.app_title == title.last
+ title.reject(&:blank?).join(' - ')
+ else
+ @html_title ||= []
+ @html_title += args
+ end
+ end
+
+ # Returns the theme, controller name, and action as css classes for the
+ # HTML body.
+ def body_css_classes
+ css = []
+ if theme = Redmine::Themes.theme(Setting.ui_theme)
+ css << 'theme-' + theme.name
+ end
+
+ css << 'project-' + @project.identifier if @project && @project.identifier.present?
+ css << 'controller-' + controller_name
+ css << 'action-' + action_name
+ if UserPreference::TEXTAREA_FONT_OPTIONS.include?(User.current.pref.textarea_font)
+ css << "textarea-#{User.current.pref.textarea_font}"
+ end
+ css.join(' ')
+ end
+
+ def accesskey(s)
+ @used_accesskeys ||= []
+ key = Redmine::AccessKeys.key_for(s)
+ return nil if @used_accesskeys.include?(key)
+ @used_accesskeys << key
+ key
+ end
+
+ # Formats text according to system settings.
+ # 2 ways to call this method:
+ # * with a String: textilizable(text, options)
+ # * with an object and one of its attribute: textilizable(issue, :description, options)
+ def textilizable(*args)
+ options = args.last.is_a?(Hash) ? args.pop : {}
+ case args.size
+ when 1
+ obj = options[:object]
+ text = args.shift
+ when 2
+ obj = args.shift
+ attr = args.shift
+ text = obj.send(attr).to_s
+ else
+ raise ArgumentError, 'invalid arguments to textilizable'
+ end
+ return '' if text.blank?
+ project = options[:project] || @project || (obj && obj.respond_to?(:project) ? obj.project : nil)
+ @only_path = only_path = options.delete(:only_path) == false ? false : true
+
+ text = text.dup
+ macros = catch_macros(text)
+
+ if options[:formatting] == false
+ text = h(text)
+ else
+ formatting = Setting.text_formatting
+ text = Redmine::WikiFormatting.to_html(formatting, text, :object => obj, :attribute => attr)
+ end
+
+ @parsed_headings = []
+ @heading_anchors = {}
+ @current_section = 0 if options[:edit_section_links]
+
+ parse_sections(text, project, obj, attr, only_path, options)
+ text = parse_non_pre_blocks(text, obj, macros) do |text|
+ [:parse_inline_attachments, :parse_hires_images, :parse_wiki_links, :parse_redmine_links].each do |method_name|
+ send method_name, text, project, obj, attr, only_path, options
+ end
+ end
+ parse_headings(text, project, obj, attr, only_path, options)
+
+ if @parsed_headings.any?
+ replace_toc(text, @parsed_headings)
+ end
+
+ text.html_safe
+ end
+
+ def parse_non_pre_blocks(text, obj, macros)
+ s = StringScanner.new(text)
+ tags = []
+ parsed = ''
+ while !s.eos?
+ s.scan(/(.*?)(<(\/)?(pre|code)(.*?)>|\z)/im)
+ text, full_tag, closing, tag = s[1], s[2], s[3], s[4]
+ if tags.empty?
+ yield text
+ inject_macros(text, obj, macros) if macros.any?
+ else
+ inject_macros(text, obj, macros, false) if macros.any?
+ end
+ parsed << text
+ if tag
+ if closing
+ if tags.last && tags.last.casecmp(tag) == 0
+ tags.pop
+ end
+ else
+ tags << tag.downcase
+ end
+ parsed << full_tag
+ end
+ end
+ # Close any non closing tags
+ while tag = tags.pop
+ parsed << ""
+ end
+ parsed
+ end
+
+ # add srcset attribute to img tags if filename includes @2x, @3x, etc.
+ # to support hires displays
+ def parse_hires_images(text, project, obj, attr, only_path, options)
+ text.gsub!(/src="([^"]+@(\dx)\.(bmp|gif|jpg|jpe|jpeg|png))"/i) do |m|
+ filename, dpr = $1, $2
+ m + " srcset=\"#{filename} #{dpr}\""
+ end
+ end
+
+ def parse_inline_attachments(text, project, obj, attr, only_path, options)
+ return if options[:inline_attachments] == false
+
+ # when using an image link, try to use an attachment, if possible
+ attachments = options[:attachments] || []
+ attachments += obj.attachments if obj.respond_to?(:attachments)
+ if attachments.present?
+ text.gsub!(/src="([^\/"]+\.(bmp|gif|jpg|jpe|jpeg|png))"(\s+alt="([^"]*)")?/i) do |m|
+ filename, ext, alt, alttext = $1.downcase, $2, $3, $4
+ # search for the picture in attachments
+ if found = Attachment.latest_attach(attachments, CGI.unescape(filename))
+ image_url = download_named_attachment_url(found, found.filename, :only_path => only_path)
+ desc = found.description.to_s.gsub('"', '')
+ if !desc.blank? && alttext.blank?
+ alt = " title=\"#{desc}\" alt=\"#{desc}\""
+ end
+ "src=\"#{image_url}\"#{alt}"
+ else
+ m
+ end
+ end
+ end
+ end
+
+ # Wiki links
+ #
+ # Examples:
+ # [[mypage]]
+ # [[mypage|mytext]]
+ # wiki links can refer other project wikis, using project name or identifier:
+ # [[project:]] -> wiki starting page
+ # [[project:|mytext]]
+ # [[project:mypage]]
+ # [[project:mypage|mytext]]
+ def parse_wiki_links(text, project, obj, attr, only_path, options)
+ text.gsub!(/(!)?(\[\[([^\]\n\|]+)(\|([^\]\n\|]+))?\]\])/) do |m|
+ link_project = project
+ esc, all, page, title = $1, $2, $3, $5
+ if esc.nil?
+ if page =~ /^([^\:]+)\:(.*)$/
+ identifier, page = $1, $2
+ link_project = Project.find_by_identifier(identifier) || Project.find_by_name(identifier)
+ title ||= identifier if page.blank?
+ end
+
+ if link_project && link_project.wiki && User.current.allowed_to?(:view_wiki_pages, link_project)
+ # extract anchor
+ anchor = nil
+ if page =~ /^(.+?)\#(.+)$/
+ page, anchor = $1, $2
+ end
+ anchor = sanitize_anchor_name(anchor) if anchor.present?
+ # check if page exists
+ wiki_page = link_project.wiki.find_page(page)
+ url = if anchor.present? && wiki_page.present? && (obj.is_a?(WikiContent) || obj.is_a?(WikiContent::Version)) && obj.page == wiki_page
+ "##{anchor}"
+ else
+ case options[:wiki_links]
+ when :local; "#{page.present? ? Wiki.titleize(page) : ''}.html" + (anchor.present? ? "##{anchor}" : '')
+ when :anchor; "##{page.present? ? Wiki.titleize(page) : title}" + (anchor.present? ? "_#{anchor}" : '') # used for single-file wiki export
+ else
+ wiki_page_id = page.present? ? Wiki.titleize(page) : nil
+ parent = wiki_page.nil? && obj.is_a?(WikiContent) && obj.page && project == link_project ? obj.page.title : nil
+ url_for(:only_path => only_path, :controller => 'wiki', :action => 'show', :project_id => link_project,
+ :id => wiki_page_id, :version => nil, :anchor => anchor, :parent => parent)
+ end
+ end
+ link_to(title.present? ? title.html_safe : h(page), url, :class => ('wiki-page' + (wiki_page ? '' : ' new')))
+ else
+ # project or wiki doesn't exist
+ all
+ end
+ else
+ all
+ end
+ end
+ end
+
+ # Redmine links
+ #
+ # Examples:
+ # Issues:
+ # #52 -> Link to issue #52
+ # Changesets:
+ # r52 -> Link to revision 52
+ # commit:a85130f -> Link to scmid starting with a85130f
+ # Documents:
+ # document#17 -> Link to document with id 17
+ # document:Greetings -> Link to the document with title "Greetings"
+ # document:"Some document" -> Link to the document with title "Some document"
+ # Versions:
+ # version#3 -> Link to version with id 3
+ # version:1.0.0 -> Link to version named "1.0.0"
+ # version:"1.0 beta 2" -> Link to version named "1.0 beta 2"
+ # Attachments:
+ # attachment:file.zip -> Link to the attachment of the current object named file.zip
+ # Source files:
+ # source:some/file -> Link to the file located at /some/file in the project's repository
+ # source:some/file@52 -> Link to the file's revision 52
+ # source:some/file#L120 -> Link to line 120 of the file
+ # source:some/file@52#L120 -> Link to line 120 of the file's revision 52
+ # export:some/file -> Force the download of the file
+ # Forums:
+ # forum#1 -> Link to forum with id 1
+ # forum:Support -> Link to forum named "Support"
+ # forum:"Technical Support" -> Link to forum named "Technical Support"
+ # Forum messages:
+ # message#1218 -> Link to message with id 1218
+ # Projects:
+ # project:someproject -> Link to project named "someproject"
+ # project#3 -> Link to project with id 3
+ # News:
+ # news#2 -> Link to news item with id 1
+ # news:Greetings -> Link to news item named "Greetings"
+ # news:"First Release" -> Link to news item named "First Release"
+ # Users:
+ # user:jsmith -> Link to user with login jsmith
+ # @jsmith -> Link to user with login jsmith
+ # user#2 -> Link to user with id 2
+ #
+ # Links can refer other objects from other projects, using project identifier:
+ # identifier:r52
+ # identifier:document:"Some document"
+ # identifier:version:1.0.0
+ # identifier:source:some/file
+ def parse_redmine_links(text, default_project, obj, attr, only_path, options)
+ text.gsub!(LINKS_RE) do |_|
+ tag_content = $~[:tag_content]
+ leading = $~[:leading]
+ esc = $~[:esc]
+ project_prefix = $~[:project_prefix]
+ project_identifier = $~[:project_identifier]
+ prefix = $~[:prefix]
+ repo_prefix = $~[:repo_prefix]
+ repo_identifier = $~[:repo_identifier]
+ sep = $~[:sep1] || $~[:sep2] || $~[:sep3] || $~[:sep4]
+ identifier = $~[:identifier1] || $~[:identifier2] || $~[:identifier3]
+ comment_suffix = $~[:comment_suffix]
+ comment_id = $~[:comment_id]
+
+ if tag_content
+ $&
+ else
+ link = nil
+ project = default_project
+ if project_identifier
+ project = Project.visible.find_by_identifier(project_identifier)
+ end
+ if esc.nil?
+ if prefix.nil? && sep == 'r'
+ if project
+ repository = nil
+ if repo_identifier
+ repository = project.repositories.detect {|repo| repo.identifier == repo_identifier}
+ else
+ repository = project.repository
+ end
+ # project.changesets.visible raises an SQL error because of a double join on repositories
+ if repository &&
+ (changeset = Changeset.visible.
+ find_by_repository_id_and_revision(repository.id, identifier))
+ link = link_to(h("#{project_prefix}#{repo_prefix}r#{identifier}"),
+ {:only_path => only_path, :controller => 'repositories',
+ :action => 'revision', :id => project,
+ :repository_id => repository.identifier_param,
+ :rev => changeset.revision},
+ :class => 'changeset',
+ :title => truncate_single_line_raw(changeset.comments, 100))
+ end
+ end
+ elsif sep == '#'
+ oid = identifier.to_i
+ case prefix
+ when nil
+ if oid.to_s == identifier &&
+ issue = Issue.visible.find_by_id(oid)
+ anchor = comment_id ? "note-#{comment_id}" : nil
+ link = link_to("##{oid}#{comment_suffix}",
+ issue_url(issue, :only_path => only_path, :anchor => anchor),
+ :class => issue.css_classes,
+ :title => "#{issue.tracker.name}: #{issue.subject.truncate(100)} (#{issue.status.name})")
+ end
+ when 'document'
+ if document = Document.visible.find_by_id(oid)
+ link = link_to(document.title, document_url(document, :only_path => only_path), :class => 'document')
+ end
+ when 'version'
+ if version = Version.visible.find_by_id(oid)
+ link = link_to(version.name, version_url(version, :only_path => only_path), :class => 'version')
+ end
+ when 'message'
+ if message = Message.visible.find_by_id(oid)
+ link = link_to_message(message, {:only_path => only_path}, :class => 'message')
+ end
+ when 'forum'
+ if board = Board.visible.find_by_id(oid)
+ link = link_to(board.name, project_board_url(board.project, board, :only_path => only_path), :class => 'board')
+ end
+ when 'news'
+ if news = News.visible.find_by_id(oid)
+ link = link_to(news.title, news_url(news, :only_path => only_path), :class => 'news')
+ end
+ when 'project'
+ if p = Project.visible.find_by_id(oid)
+ link = link_to_project(p, {:only_path => only_path}, :class => 'project')
+ end
+ when 'user'
+ u = User.visible.where(:id => oid, :type => 'User').first
+ link = link_to_user(u) if u
+ end
+ elsif sep == ':'
+ name = remove_double_quotes(identifier)
+ case prefix
+ when 'document'
+ if project && document = project.documents.visible.find_by_title(name)
+ link = link_to(document.title, document_url(document, :only_path => only_path), :class => 'document')
+ end
+ when 'version'
+ if project && version = project.versions.visible.find_by_name(name)
+ link = link_to(version.name, version_url(version, :only_path => only_path), :class => 'version')
+ end
+ when 'forum'
+ if project && board = project.boards.visible.find_by_name(name)
+ link = link_to(board.name, project_board_url(board.project, board, :only_path => only_path), :class => 'board')
+ end
+ when 'news'
+ if project && news = project.news.visible.find_by_title(name)
+ link = link_to(news.title, news_url(news, :only_path => only_path), :class => 'news')
+ end
+ when 'commit', 'source', 'export'
+ if project
+ repository = nil
+ if name =~ %r{^(([a-z0-9\-_]+)\|)(.+)$}
+ repo_prefix, repo_identifier, name = $1, $2, $3
+ repository = project.repositories.detect {|repo| repo.identifier == repo_identifier}
+ else
+ repository = project.repository
+ end
+ if prefix == 'commit'
+ if repository && (changeset = Changeset.visible.where("repository_id = ? AND scmid LIKE ?", repository.id, "#{name}%").first)
+ link = link_to h("#{project_prefix}#{repo_prefix}#{name}"), {:only_path => only_path, :controller => 'repositories', :action => 'revision', :id => project, :repository_id => repository.identifier_param, :rev => changeset.identifier},
+ :class => 'changeset',
+ :title => truncate_single_line_raw(changeset.comments, 100)
+ end
+ else
+ if repository && User.current.allowed_to?(:browse_repository, project)
+ name =~ %r{^[/\\]*(.*?)(@([^/\\@]+?))?(#(L\d+))?$}
+ path, rev, anchor = $1, $3, $5
+ link = link_to h("#{project_prefix}#{prefix}:#{repo_prefix}#{name}"), {:only_path => only_path, :controller => 'repositories', :action => (prefix == 'export' ? 'raw' : 'entry'), :id => project, :repository_id => repository.identifier_param,
+ :path => to_path_param(path),
+ :rev => rev,
+ :anchor => anchor},
+ :class => (prefix == 'export' ? 'source download' : 'source')
+ end
+ end
+ repo_prefix = nil
+ end
+ when 'attachment'
+ attachments = options[:attachments] || []
+ attachments += obj.attachments if obj.respond_to?(:attachments)
+ if attachments && attachment = Attachment.latest_attach(attachments, name)
+ link = link_to_attachment(attachment, :only_path => only_path, :class => 'attachment')
+ end
+ when 'project'
+ if p = Project.visible.where("identifier = :s OR LOWER(name) = :s", :s => name.downcase).first
+ link = link_to_project(p, {:only_path => only_path}, :class => 'project')
+ end
+ when 'user'
+ u = User.visible.where(:login => name, :type => 'User').first
+ link = link_to_user(u) if u
+ end
+ elsif sep == "@"
+ name = remove_double_quotes(identifier)
+ u = User.visible.where(:login => name, :type => 'User').first
+ link = link_to_user(u) if u
+ end
+ end
+ (leading + (link || "#{project_prefix}#{prefix}#{repo_prefix}#{sep}#{identifier}#{comment_suffix}"))
+ end
+ end
+ end
+
+ LINKS_RE =
+ %r{
+ ]+?)?>(?.*?)|
+ (?[\s\(,\-\[\>]|^)
+ (?!)?
+ (?(?[a-z0-9\-_]+):)?
+ (?attachment|document|version|forum|news|message|project|commit|source|export|user)?
+ (
+ (
+ (?\#)|
+ (
+ (?(?[a-z0-9\-_]+)\|)?
+ (?r)
+ )
+ )
+ (
+ (?\d+)
+ (?
+ (\#note)?
+ -(?\d+)
+ )?
+ )|
+ (
+ (?:)
+ (?[^"\s<>][^\s<>]*?|"[^"]+?")
+ )|
+ (
+ (?@)
+ (?[a-z0-9_\-@\.]*)
+ )
+ )
+ (?=
+ (?=[[:punct:]][^A-Za-z0-9_/])|
+ ,|
+ \s|
+ \]|
+ <|
+ $)
+ }x
+ HEADING_RE = /(]+)?>(.+?)<\/h(\d)>)/i unless const_defined?(:HEADING_RE)
+
+ def parse_sections(text, project, obj, attr, only_path, options)
+ return unless options[:edit_section_links]
+ text.gsub!(HEADING_RE) do
+ heading, level = $1, $2
+ @current_section += 1
+ if @current_section > 1
+ content_tag('div',
+ link_to(l(:button_edit_section), options[:edit_section_links].merge(:section => @current_section),
+ :class => 'icon-only icon-edit'),
+ :class => "contextual heading-#{level}",
+ :title => l(:button_edit_section),
+ :id => "section-#{@current_section}") + heading.html_safe
+ else
+ heading
+ end
+ end
+ end
+
+ # Headings and TOC
+ # Adds ids and links to headings unless options[:headings] is set to false
+ def parse_headings(text, project, obj, attr, only_path, options)
+ return if options[:headings] == false
+
+ text.gsub!(HEADING_RE) do
+ level, attrs, content = $2.to_i, $3, $4
+ item = strip_tags(content).strip
+ anchor = sanitize_anchor_name(item)
+ # used for single-file wiki export
+ anchor = "#{obj.page.title}_#{anchor}" if options[:wiki_links] == :anchor && (obj.is_a?(WikiContent) || obj.is_a?(WikiContent::Version))
+ @heading_anchors[anchor] ||= 0
+ idx = (@heading_anchors[anchor] += 1)
+ if idx > 1
+ anchor = "#{anchor}-#{idx}"
+ end
+ @parsed_headings << [level, anchor, item]
+ "\n#{content}¶"
+ end
+ end
+
+ MACROS_RE = /(
+ (!)? # escaping
+ (
+ \{\{ # opening tag
+ ([\w]+) # macro name
+ (\(([^\n\r]*?)\))? # optional arguments
+ ([\n\r].*?[\n\r])? # optional block of text
+ \}\} # closing tag
+ )
+ )/mx unless const_defined?(:MACROS_RE)
+
+ MACRO_SUB_RE = /(
+ \{\{
+ macro\((\d+)\)
+ \}\}
+ )/x unless const_defined?(:MACRO_SUB_RE)
+
+ # Extracts macros from text
+ def catch_macros(text)
+ macros = {}
+ text.gsub!(MACROS_RE) do
+ all, macro = $1, $4.downcase
+ if macro_exists?(macro) || all =~ MACRO_SUB_RE
+ index = macros.size
+ macros[index] = all
+ "{{macro(#{index})}}"
+ else
+ all
+ end
+ end
+ macros
+ end
+
+ # Executes and replaces macros in text
+ def inject_macros(text, obj, macros, execute=true)
+ text.gsub!(MACRO_SUB_RE) do
+ all, index = $1, $2.to_i
+ orig = macros.delete(index)
+ if execute && orig && orig =~ MACROS_RE
+ esc, all, macro, args, block = $2, $3, $4.downcase, $6.to_s, $7.try(:strip)
+ if esc.nil?
+ h(exec_macro(macro, obj, args, block) || all)
+ else
+ h(all)
+ end
+ elsif orig
+ h(orig)
+ else
+ h(all)
+ end
+ end
+ end
+
+ TOC_RE = /
\{\{((<|<)|(>|>))?toc\}\}<\/p>/i unless const_defined?(:TOC_RE)
+
+ # Renders the TOC with given headings
+ def replace_toc(text, headings)
+ text.gsub!(TOC_RE) do
+ left_align, right_align = $2, $3
+ # Keep only the 4 first levels
+ headings = headings.select{|level, anchor, item| level <= 4}
+ if headings.empty?
+ ''
+ else
+ div_class = 'toc'
+ div_class << ' right' if right_align
+ div_class << ' left' if left_align
+ out = "
#{l :label_table_of_contents}
"
+ root = headings.map(&:first).min
+ current = root
+ started = false
+ headings.each do |level, anchor, item|
+ if level > current
+ out << '
' * (level - current)
+ elsif level < current
+ out << "
\n" * (current - level) + "
"
+ elsif started
+ out << '
'
+ end
+ out << "#{item}"
+ current = level
+ started = true
+ end
+ out << '
' * (current - root)
+ out << ''
+ end
+ end
+ end
+
+ # Same as Rails' simple_format helper without using paragraphs
+ def simple_format_without_paragraph(text)
+ text.to_s.
+ gsub(/\r\n?/, "\n"). # \r\n and \r -> \n
+ gsub(/\n\n+/, "
"). # 2+ newline -> 2 br
+ gsub(/([^\n]\n)(?=[^\n])/, '\1 '). # 1 newline -> br
+ html_safe
+ end
+
+ def lang_options_for_select(blank=true)
+ (blank ? [["(auto)", ""]] : []) + languages_options
+ end
+
+ def labelled_form_for(*args, &proc)
+ args << {} unless args.last.is_a?(Hash)
+ options = args.last
+ if args.first.is_a?(Symbol)
+ options.merge!(:as => args.shift)
+ end
+ options.merge!({:builder => Redmine::Views::LabelledFormBuilder})
+ form_for(*args, &proc)
+ end
+
+ def labelled_fields_for(*args, &proc)
+ args << {} unless args.last.is_a?(Hash)
+ options = args.last
+ options.merge!({:builder => Redmine::Views::LabelledFormBuilder})
+ fields_for(*args, &proc)
+ end
+
+ # Render the error messages for the given objects
+ def error_messages_for(*objects)
+ objects = objects.map {|o| o.is_a?(String) ? instance_variable_get("@#{o}") : o}.compact
+ errors = objects.map {|o| o.errors.full_messages}.flatten
+ render_error_messages(errors)
+ end
+
+ # Renders a list of error messages
+ def render_error_messages(errors)
+ html = ""
+ if errors.present?
+ html << "
\n"
+ errors.each do |error|
+ html << "
#{h error}
\n"
+ end
+ html << "
\n"
+ end
+ html.html_safe
+ end
+
+ def delete_link(url, options={})
+ options = {
+ :method => :delete,
+ :data => {:confirm => l(:text_are_you_sure)},
+ :class => 'icon icon-del'
+ }.merge(options)
+
+ link_to l(:button_delete), url, options
+ end
+
+ def preview_link(url, form, target='preview', options={})
+ content_tag 'a', l(:label_preview), {
+ :href => "#",
+ :onclick => %|submitPreview("#{escape_javascript url_for(url)}", "#{escape_javascript form}", "#{escape_javascript target}"); return false;|,
+ :accesskey => accesskey(:preview)
+ }.merge(options)
+ end
+
+ def link_to_function(name, function, html_options={})
+ content_tag(:a, name, {:href => '#', :onclick => "#{function}; return false;"}.merge(html_options))
+ end
+
+ # Helper to render JSON in views
+ def raw_json(arg)
+ arg.to_json.to_s.gsub('/', '\/').html_safe
+ end
+
+ def back_url
+ url = params[:back_url]
+ if url.nil? && referer = request.env['HTTP_REFERER']
+ url = CGI.unescape(referer.to_s)
+ # URLs that contains the utf8=[checkmark] parameter added by Rails are
+ # parsed as invalid by URI.parse so the redirect to the back URL would
+ # not be accepted (ApplicationController#validate_back_url would return
+ # false)
+ url.gsub!(/(\?|&)utf8=\u2713&?/, '\1')
+ end
+ url
+ end
+
+ def back_url_hidden_field_tag
+ url = back_url
+ hidden_field_tag('back_url', url, :id => nil) unless url.blank?
+ end
+
+ def check_all_links(form_name)
+ link_to_function(l(:button_check_all), "checkAll('#{form_name}', true)") +
+ " | ".html_safe +
+ link_to_function(l(:button_uncheck_all), "checkAll('#{form_name}', false)")
+ end
+
+ def toggle_checkboxes_link(selector)
+ link_to_function '',
+ "toggleCheckboxesBySelector('#{selector}')",
+ :title => "#{l(:button_check_all)} / #{l(:button_uncheck_all)}",
+ :class => 'icon icon-checked'
+ end
+
+ def progress_bar(pcts, options={})
+ pcts = [pcts, pcts] unless pcts.is_a?(Array)
+ pcts = pcts.collect(&:round)
+ pcts[1] = pcts[1] - pcts[0]
+ pcts << (100 - pcts[1] - pcts[0])
+ titles = options[:titles].to_a
+ titles[0] = "#{pcts[0]}%" if titles[0].blank?
+ legend = options[:legend] || ''
+ content_tag('table',
+ content_tag('tr',
+ (pcts[0] > 0 ? content_tag('td', '', :style => "width: #{pcts[0]}%;", :class => 'closed', :title => titles[0]) : ''.html_safe) +
+ (pcts[1] > 0 ? content_tag('td', '', :style => "width: #{pcts[1]}%;", :class => 'done', :title => titles[1]) : ''.html_safe) +
+ (pcts[2] > 0 ? content_tag('td', '', :style => "width: #{pcts[2]}%;", :class => 'todo', :title => titles[2]) : ''.html_safe)
+ ), :class => "progress progress-#{pcts[0]}").html_safe +
+ content_tag('p', legend, :class => 'percent').html_safe
+ end
+
+ def checked_image(checked=true)
+ if checked
+ @checked_image_tag ||= content_tag(:span, nil, :class => 'icon-only icon-checked')
+ end
+ end
+
+ def context_menu
+ unless @context_menu_included
+ content_for :header_tags do
+ javascript_include_tag('context_menu') +
+ stylesheet_link_tag('context_menu')
+ end
+ if l(:direction) == 'rtl'
+ content_for :header_tags do
+ stylesheet_link_tag('context_menu_rtl')
+ end
+ end
+ @context_menu_included = true
+ end
+ nil
+ end
+
+ def calendar_for(field_id)
+ include_calendar_headers_tags
+ javascript_tag("$(function() { $('##{field_id}').addClass('date').datepickerFallback(datepickerOptions); });")
+ end
+
+ def include_calendar_headers_tags
+ unless @calendar_headers_tags_included
+ tags = ''.html_safe
+ @calendar_headers_tags_included = true
+ content_for :header_tags do
+ start_of_week = Setting.start_of_week
+ start_of_week = l(:general_first_day_of_week, :default => '1') if start_of_week.blank?
+ # Redmine uses 1..7 (monday..sunday) in settings and locales
+ # JQuery uses 0..6 (sunday..saturday), 7 needs to be changed to 0
+ start_of_week = start_of_week.to_i % 7
+ tags << javascript_tag(
+ "var datepickerOptions={dateFormat: 'yy-mm-dd', firstDay: #{start_of_week}, " +
+ "showOn: 'button', buttonImageOnly: true, buttonImage: '" +
+ path_to_image('/images/calendar.png') +
+ "', showButtonPanel: true, showWeek: true, showOtherMonths: true, " +
+ "selectOtherMonths: true, changeMonth: true, changeYear: true, " +
+ "beforeShow: beforeShowDatePicker};")
+ jquery_locale = l('jquery.locale', :default => current_language.to_s)
+ unless jquery_locale == 'en'
+ tags << javascript_include_tag("i18n/datepicker-#{jquery_locale}.js")
+ end
+ tags
+ end
+ end
+ end
+
+ # Overrides Rails' stylesheet_link_tag with themes and plugins support.
+ # Examples:
+ # stylesheet_link_tag('styles') # => picks styles.css from the current theme or defaults
+ # stylesheet_link_tag('styles', :plugin => 'foo) # => picks styles.css from plugin's assets
+ #
+ def stylesheet_link_tag(*sources)
+ options = sources.last.is_a?(Hash) ? sources.pop : {}
+ plugin = options.delete(:plugin)
+ sources = sources.map do |source|
+ if plugin
+ "/plugin_assets/#{plugin}/stylesheets/#{source}"
+ elsif current_theme && current_theme.stylesheets.include?(source)
+ current_theme.stylesheet_path(source)
+ else
+ source
+ end
+ end
+ super *sources, options
+ end
+
+ # Overrides Rails' image_tag with themes and plugins support.
+ # Examples:
+ # image_tag('image.png') # => picks image.png from the current theme or defaults
+ # image_tag('image.png', :plugin => 'foo) # => picks image.png from plugin's assets
+ #
+ def image_tag(source, options={})
+ if plugin = options.delete(:plugin)
+ source = "/plugin_assets/#{plugin}/images/#{source}"
+ elsif current_theme && current_theme.images.include?(source)
+ source = current_theme.image_path(source)
+ end
+ super source, options
+ end
+
+ # Overrides Rails' javascript_include_tag with plugins support
+ # Examples:
+ # javascript_include_tag('scripts') # => picks scripts.js from defaults
+ # javascript_include_tag('scripts', :plugin => 'foo) # => picks scripts.js from plugin's assets
+ #
+ def javascript_include_tag(*sources)
+ options = sources.last.is_a?(Hash) ? sources.pop : {}
+ if plugin = options.delete(:plugin)
+ sources = sources.map do |source|
+ if plugin
+ "/plugin_assets/#{plugin}/javascripts/#{source}"
+ else
+ source
+ end
+ end
+ end
+ super *sources, options
+ end
+
+ def sidebar_content?
+ content_for?(:sidebar) || view_layouts_base_sidebar_hook_response.present?
+ end
+
+ def view_layouts_base_sidebar_hook_response
+ @view_layouts_base_sidebar_hook_response ||= call_hook(:view_layouts_base_sidebar)
+ end
+
+ def email_delivery_enabled?
+ !!ActionMailer::Base.perform_deliveries
+ end
+
+ # Returns the avatar image tag for the given +user+ if avatars are enabled
+ # +user+ can be a User or a string that will be scanned for an email address (eg. 'joe ')
+ def avatar(user, options = { })
+ if Setting.gravatar_enabled?
+ options.merge!(:default => Setting.gravatar_default)
+ email = nil
+ if user.respond_to?(:mail)
+ email = user.mail
+ elsif user.to_s =~ %r{<(.+?)>}
+ email = $1
+ end
+ if email.present?
+ gravatar(email.to_s.downcase, options) rescue nil
+ elsif user.is_a?(AnonymousUser)
+ options[:size] &&= options[:size].to_s
+ image_tag 'anonymous.png',
+ GravatarHelper::DEFAULT_OPTIONS
+ .except(:default, :rating, :ssl).merge(options)
+ else
+ nil
+ end
+ else
+ ''
+ end
+ end
+
+ # Returns a link to edit user's avatar if avatars are enabled
+ def avatar_edit_link(user, options={})
+ if Setting.gravatar_enabled?
+ url = "https://gravatar.com"
+ link_to avatar(user, {:title => l(:button_edit)}.merge(options)), url, :target => '_blank'
+ end
+ end
+
+ def sanitize_anchor_name(anchor)
+ anchor.gsub(%r{[^\s\-\p{Word}]}, '').gsub(%r{\s+(\-+\s*)?}, '-')
+ end
+
+ # Returns the javascript tags that are included in the html layout head
+ def javascript_heads
+ tags = javascript_include_tag('jquery-1.11.1-ui-1.11.0-ujs-3.1.4', 'application', 'responsive')
+ unless User.current.pref.warn_on_leaving_unsaved == '0'
+ tags << "\n".html_safe + javascript_tag("$(window).load(function(){ warnLeavingUnsaved('#{escape_javascript l(:text_warn_on_leaving_unsaved)}'); });")
+ end
+ tags
+ end
+
+ def favicon
+ "".html_safe
+ end
+
+ # Returns the path to the favicon
+ def favicon_path
+ icon = (current_theme && current_theme.favicon?) ? current_theme.favicon_path : '/favicon.ico'
+ image_path(icon)
+ end
+
+ # Returns the full URL to the favicon
+ def favicon_url
+ # TODO: use #image_url introduced in Rails4
+ path = favicon_path
+ base = url_for(:controller => 'welcome', :action => 'index', :only_path => false)
+ base.sub(%r{/+$},'') + '/' + path.sub(%r{^/+},'')
+ end
+
+ def robot_exclusion_tag
+ ''.html_safe
+ end
+
+ # Returns true if arg is expected in the API response
+ def include_in_api_response?(arg)
+ unless @included_in_api_response
+ param = params[:include]
+ @included_in_api_response = param.is_a?(Array) ? param.collect(&:to_s) : param.to_s.split(',')
+ @included_in_api_response.collect!(&:strip)
+ end
+ @included_in_api_response.include?(arg.to_s)
+ end
+
+ # Returns options or nil if nometa param or X-Redmine-Nometa header
+ # was set in the request
+ def api_meta(options)
+ if params[:nometa].present? || request.headers['X-Redmine-Nometa']
+ # compatibility mode for activeresource clients that raise
+ # an error when deserializing an array with attributes
+ nil
+ else
+ options
+ end
+ end
+
+ def generate_csv(&block)
+ decimal_separator = l(:general_csv_decimal_separator)
+ encoding = l(:general_csv_encoding)
+ end
+
+ private
+
+ def wiki_helper
+ helper = Redmine::WikiFormatting.helper_for(Setting.text_formatting)
+ extend helper
+ return self
+ end
+
+ # remove double quotes if any
+ def remove_double_quotes(identifier)
+ name = identifier.gsub(%r{^"(.*)"$}, "\\1")
+ return CGI.unescapeHTML(name)
+ end
+end
diff --git a/app/helpers/attachments_helper.rb b/app/helpers/attachments_helper.rb
new file mode 100644
index 0000000..36cf0d4
--- /dev/null
+++ b/app/helpers/attachments_helper.rb
@@ -0,0 +1,81 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module AttachmentsHelper
+
+ def container_attachments_edit_path(container)
+ object_attachments_edit_path container.class.name.underscore.pluralize, container.id
+ end
+
+ def container_attachments_path(container)
+ object_attachments_path container.class.name.underscore.pluralize, container.id
+ end
+
+ # Displays view/delete links to the attachments of the given object
+ # Options:
+ # :author -- author names are not displayed if set to false
+ # :thumbails -- display thumbnails if enabled in settings
+ def link_to_attachments(container, options = {})
+ options.assert_valid_keys(:author, :thumbnails)
+
+ attachments = if container.attachments.loaded?
+ container.attachments
+ else
+ container.attachments.preload(:author).to_a
+ end
+
+ if attachments.any?
+ options = {
+ :editable => container.attachments_editable?,
+ :deletable => container.attachments_deletable?,
+ :author => true
+ }.merge(options)
+ render :partial => 'attachments/links',
+ :locals => {
+ :container => container,
+ :attachments => attachments,
+ :options => options,
+ :thumbnails => (options[:thumbnails] && Setting.thumbnails_enabled?)
+ }
+ end
+ end
+
+ def render_api_attachment(attachment, api, options={})
+ api.attachment do
+ render_api_attachment_attributes(attachment, api)
+ options.each { |key, value| eval("api.#{key} value") }
+ end
+ end
+
+ def render_api_attachment_attributes(attachment, api)
+ api.id attachment.id
+ api.filename attachment.filename
+ api.filesize attachment.filesize
+ api.content_type attachment.content_type
+ api.description attachment.description
+ api.content_url download_named_attachment_url(attachment, attachment.filename)
+ if attachment.thumbnailable?
+ api.thumbnail_url thumbnail_url(attachment)
+ end
+ if attachment.author
+ api.author(:id => attachment.author.id, :name => attachment.author.name)
+ end
+ api.created_on attachment.created_on
+ end
+end
diff --git a/app/helpers/auth_sources_helper.rb b/app/helpers/auth_sources_helper.rb
new file mode 100644
index 0000000..4f4b1cd
--- /dev/null
+++ b/app/helpers/auth_sources_helper.rb
@@ -0,0 +1,24 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module AuthSourcesHelper
+ def auth_source_partial_name(auth_source)
+ "form_#{auth_source.class.name.underscore}"
+ end
+end
diff --git a/app/helpers/boards_helper.rb b/app/helpers/boards_helper.rb
new file mode 100644
index 0000000..0931dd0
--- /dev/null
+++ b/app/helpers/boards_helper.rb
@@ -0,0 +1,41 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module BoardsHelper
+ def board_breadcrumb(item)
+ board = item.is_a?(Message) ? item.board : item
+ links = [link_to(l(:label_board_plural), project_boards_path(item.project))]
+ boards = board.ancestors.reverse
+ if item.is_a?(Message)
+ boards << board
+ end
+ links += boards.map {|ancestor| link_to(h(ancestor.name), project_board_path(ancestor.project, ancestor))}
+ breadcrumb links
+ end
+
+ def boards_options_for_select(boards)
+ options = []
+ Board.board_tree(boards) do |board, level|
+ label = (level > 0 ? ' ' * 2 * level + '» ' : '').html_safe
+ label << board.name
+ options << [label, board.id]
+ end
+ options
+ end
+end
diff --git a/app/helpers/calendars_helper.rb b/app/helpers/calendars_helper.rb
new file mode 100644
index 0000000..715667c
--- /dev/null
+++ b/app/helpers/calendars_helper.rb
@@ -0,0 +1,58 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module CalendarsHelper
+ def link_to_previous_month(year, month, options={})
+ target_year, target_month = if month == 1
+ [year - 1, 12]
+ else
+ [year, month - 1]
+ end
+
+ name = if target_month == 12
+ "#{month_name(target_month)} #{target_year}"
+ else
+ "#{month_name(target_month)}"
+ end
+
+ # \xc2\xab(utf-8) = «
+ link_to_month(("\xc2\xab " + name), target_year, target_month, options)
+ end
+
+ def link_to_next_month(year, month, options={})
+ target_year, target_month = if month == 12
+ [year + 1, 1]
+ else
+ [year, month + 1]
+ end
+
+ name = if target_month == 1
+ "#{month_name(target_month)} #{target_year}"
+ else
+ "#{month_name(target_month)}"
+ end
+
+ # \xc2\xbb(utf-8) = »
+ link_to_month((name + " \xc2\xbb"), target_year, target_month, options)
+ end
+
+ def link_to_month(link_name, year, month, options={})
+ link_to(link_name, {:params => request.query_parameters.merge(:year => year, :month => month)}, options)
+ end
+end
diff --git a/app/helpers/context_menus_helper.rb b/app/helpers/context_menus_helper.rb
new file mode 100644
index 0000000..0254d3a
--- /dev/null
+++ b/app/helpers/context_menus_helper.rb
@@ -0,0 +1,50 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module ContextMenusHelper
+ def context_menu_link(name, url, options={})
+ options[:class] ||= ''
+ if options.delete(:selected)
+ options[:class] << ' icon-checked disabled'
+ options[:disabled] = true
+ end
+ if options.delete(:disabled)
+ options.delete(:method)
+ options.delete(:data)
+ options[:onclick] = 'return false;'
+ options[:class] << ' disabled'
+ url = '#'
+ end
+ link_to h(name), url, options
+ end
+
+ def bulk_update_custom_field_context_menu_link(field, text, value)
+ context_menu_link h(text),
+ bulk_update_issues_path(:ids => @issue_ids, :issue => {'custom_field_values' => {field.id => value}}, :back_url => @back),
+ :method => :post,
+ :selected => (@issue && @issue.custom_field_value(field) == value)
+ end
+
+ def bulk_update_time_entry_custom_field_context_menu_link(field, text, value)
+ context_menu_link h(text),
+ bulk_update_time_entries_path(:ids => @time_entries.map(&:id).sort, :time_entry => {'custom_field_values' => {field.id => value}}, :back_url => @back),
+ :method => :post,
+ :selected => (@time_entry && @time_entry.custom_field_value(field) == value)
+ end
+end
diff --git a/app/helpers/custom_fields_helper.rb b/app/helpers/custom_fields_helper.rb
new file mode 100644
index 0000000..08c8c58
--- /dev/null
+++ b/app/helpers/custom_fields_helper.rb
@@ -0,0 +1,183 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module CustomFieldsHelper
+
+ CUSTOM_FIELDS_TABS = [
+ {:name => 'IssueCustomField', :partial => 'custom_fields/index',
+ :label => :label_issue_plural},
+ {:name => 'TimeEntryCustomField', :partial => 'custom_fields/index',
+ :label => :label_spent_time},
+ {:name => 'ProjectCustomField', :partial => 'custom_fields/index',
+ :label => :label_project_plural},
+ {:name => 'VersionCustomField', :partial => 'custom_fields/index',
+ :label => :label_version_plural},
+ {:name => 'DocumentCustomField', :partial => 'custom_fields/index',
+ :label => :label_document_plural},
+ {:name => 'UserCustomField', :partial => 'custom_fields/index',
+ :label => :label_user_plural},
+ {:name => 'GroupCustomField', :partial => 'custom_fields/index',
+ :label => :label_group_plural},
+ {:name => 'TimeEntryActivityCustomField', :partial => 'custom_fields/index',
+ :label => TimeEntryActivity::OptionName},
+ {:name => 'IssuePriorityCustomField', :partial => 'custom_fields/index',
+ :label => IssuePriority::OptionName},
+ {:name => 'DocumentCategoryCustomField', :partial => 'custom_fields/index',
+ :label => DocumentCategory::OptionName}
+ ]
+
+ def render_custom_fields_tabs(types)
+ tabs = CUSTOM_FIELDS_TABS.select {|h| types.include?(h[:name]) }
+ render_tabs tabs
+ end
+
+ def custom_field_type_options
+ CUSTOM_FIELDS_TABS.map {|h| [l(h[:label]), h[:name]]}
+ end
+
+ def custom_field_title(custom_field)
+ items = []
+ items << [l(:label_custom_field_plural), custom_fields_path]
+ items << [l(custom_field.type_name), custom_fields_path(:tab => custom_field.class.name)] if custom_field
+ items << (custom_field.nil? || custom_field.new_record? ? l(:label_custom_field_new) : custom_field.name)
+
+ title(*items)
+ end
+
+ def render_custom_field_format_partial(form, custom_field)
+ partial = custom_field.format.form_partial
+ if partial
+ render :partial => custom_field.format.form_partial, :locals => {:f => form, :custom_field => custom_field}
+ end
+ end
+
+ def custom_field_tag_name(prefix, custom_field)
+ name = "#{prefix}[custom_field_values][#{custom_field.id}]"
+ name << "[]" if custom_field.multiple?
+ name
+ end
+
+ def custom_field_tag_id(prefix, custom_field)
+ "#{prefix}_custom_field_values_#{custom_field.id}"
+ end
+
+ # Return custom field html tag corresponding to its format
+ def custom_field_tag(prefix, custom_value)
+ custom_value.custom_field.format.edit_tag self,
+ custom_field_tag_id(prefix, custom_value.custom_field),
+ custom_field_tag_name(prefix, custom_value.custom_field),
+ custom_value,
+ :class => "#{custom_value.custom_field.field_format}_cf"
+ end
+
+ # Return custom field name tag
+ def custom_field_name_tag(custom_field)
+ title = custom_field.description.presence
+ css = title ? "field-description" : nil
+ content_tag 'span', custom_field.name, :title => title, :class => css
+ end
+
+ # Return custom field label tag
+ def custom_field_label_tag(name, custom_value, options={})
+ required = options[:required] || custom_value.custom_field.is_required?
+ for_tag_id = options.fetch(:for_tag_id, "#{name}_custom_field_values_#{custom_value.custom_field.id}")
+ content = custom_field_name_tag custom_value.custom_field
+
+ content_tag "label", content +
+ (required ? " *".html_safe : ""),
+ :for => for_tag_id
+ end
+
+ # Return custom field tag with its label tag
+ def custom_field_tag_with_label(name, custom_value, options={})
+ tag = custom_field_tag(name, custom_value)
+ tag_id = nil
+ ids = tag.scan(/ id="(.+?)"/)
+ if ids.size == 1
+ tag_id = ids.first.first
+ end
+ custom_field_label_tag(name, custom_value, options.merge(:for_tag_id => tag_id)) + tag
+ end
+
+ # Returns the custom field tag for when bulk editing objects
+ def custom_field_tag_for_bulk_edit(prefix, custom_field, objects=nil, value='')
+ custom_field.format.bulk_edit_tag self,
+ custom_field_tag_id(prefix, custom_field),
+ custom_field_tag_name(prefix, custom_field),
+ custom_field,
+ objects,
+ value,
+ :class => "#{custom_field.field_format}_cf"
+ end
+
+ # Return a string used to display a custom value
+ def show_value(custom_value, html=true)
+ format_object(custom_value, html)
+ end
+
+ # Return a string used to display a custom value
+ def format_value(value, custom_field)
+ format_object(custom_field.format.formatted_value(self, custom_field, value, false), false)
+ end
+
+ # Return an array of custom field formats which can be used in select_tag
+ def custom_field_formats_for_select(custom_field)
+ Redmine::FieldFormat.as_select(custom_field.class.customized_class.name)
+ end
+
+ # Yields the given block for each custom field value of object that should be
+ # displayed, with the custom field and the formatted value as arguments
+ def render_custom_field_values(object, &block)
+ object.visible_custom_field_values.each do |custom_value|
+ formatted = show_value(custom_value)
+ if formatted.present?
+ yield custom_value.custom_field, formatted
+ end
+ end
+ end
+
+ # Renders the custom_values in api views
+ def render_api_custom_values(custom_values, api)
+ api.array :custom_fields do
+ custom_values.each do |custom_value|
+ attrs = {:id => custom_value.custom_field_id, :name => custom_value.custom_field.name}
+ attrs.merge!(:multiple => true) if custom_value.custom_field.multiple?
+ api.custom_field attrs do
+ if custom_value.value.is_a?(Array)
+ api.array :value do
+ custom_value.value.each do |value|
+ api.value value unless value.blank?
+ end
+ end
+ else
+ api.value custom_value.value
+ end
+ end
+ end
+ end unless custom_values.empty?
+ end
+
+ def edit_tag_style_tag(form, options={})
+ select_options = [[l(:label_drop_down_list), ''], [l(:label_checkboxes), 'check_box']]
+ if options[:include_radio]
+ select_options << [l(:label_radio_buttons), 'radio']
+ end
+ form.select :edit_tag_style, select_options, :label => :label_display
+ end
+end
diff --git a/app/helpers/documents_helper.rb b/app/helpers/documents_helper.rb
new file mode 100644
index 0000000..a6741b8
--- /dev/null
+++ b/app/helpers/documents_helper.rb
@@ -0,0 +1,21 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module DocumentsHelper
+end
diff --git a/app/helpers/email_addresses_helper.rb b/app/helpers/email_addresses_helper.rb
new file mode 100644
index 0000000..1f44f21
--- /dev/null
+++ b/app/helpers/email_addresses_helper.rb
@@ -0,0 +1,38 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module EmailAddressesHelper
+
+ # Returns a link to enable or disable notifications for the address
+ def toggle_email_address_notify_link(address)
+ if address.notify?
+ link_to l(:label_disable_notifications),
+ user_email_address_path(address.user, address, :notify => '0'),
+ :method => :put, :remote => true,
+ :title => l(:label_disable_notifications),
+ :class => 'icon-only icon-email'
+ else
+ link_to l(:label_enable_notifications),
+ user_email_address_path(address.user, address, :notify => '1'),
+ :method => :put, :remote => true,
+ :title => l(:label_enable_notifications),
+ :class => 'icon-only icon-email-disabled'
+ end
+ end
+end
diff --git a/app/helpers/enumerations_helper.rb b/app/helpers/enumerations_helper.rb
new file mode 100644
index 0000000..2759e84
--- /dev/null
+++ b/app/helpers/enumerations_helper.rb
@@ -0,0 +1,21 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module EnumerationsHelper
+end
diff --git a/app/helpers/gantt_helper.rb b/app/helpers/gantt_helper.rb
new file mode 100644
index 0000000..6558589
--- /dev/null
+++ b/app/helpers/gantt_helper.rb
@@ -0,0 +1,43 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module GanttHelper
+
+ def gantt_zoom_link(gantt, in_or_out)
+ case in_or_out
+ when :in
+ if gantt.zoom < 4
+ link_to l(:text_zoom_in),
+ {:params => request.query_parameters.merge(gantt.params.merge(:zoom => (gantt.zoom + 1)))},
+ :class => 'icon icon-zoom-in'
+ else
+ content_tag(:span, l(:text_zoom_in), :class => 'icon icon-zoom-in').html_safe
+ end
+
+ when :out
+ if gantt.zoom > 1
+ link_to l(:text_zoom_out),
+ {:params => request.query_parameters.merge(gantt.params.merge(:zoom => (gantt.zoom - 1)))},
+ :class => 'icon icon-zoom-out'
+ else
+ content_tag(:span, l(:text_zoom_out), :class => 'icon icon-zoom-out').html_safe
+ end
+ end
+ end
+end
diff --git a/app/helpers/groups_helper.rb b/app/helpers/groups_helper.rb
new file mode 100644
index 0000000..7eb885f
--- /dev/null
+++ b/app/helpers/groups_helper.rb
@@ -0,0 +1,46 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module GroupsHelper
+ def group_settings_tabs(group)
+ tabs = []
+ tabs << {:name => 'general', :partial => 'groups/general', :label => :label_general}
+ tabs << {:name => 'users', :partial => 'groups/users', :label => :label_user_plural} if group.givable?
+ tabs << {:name => 'memberships', :partial => 'groups/memberships', :label => :label_project_plural}
+ tabs
+ end
+
+ def render_principals_for_new_group_users(group, limit=100)
+ scope = User.active.sorted.not_in_group(group).like(params[:q])
+ principal_count = scope.count
+ principal_pages = Redmine::Pagination::Paginator.new principal_count, limit, params['page']
+ principals = scope.offset(principal_pages.offset).limit(principal_pages.per_page).to_a
+
+ s = content_tag('div',
+ content_tag('div', principals_check_box_tags('user_ids[]', principals), :id => 'principals'),
+ :class => 'objects-selection'
+ )
+
+ links = pagination_links_full(principal_pages, principal_count, :per_page_links => false) {|text, parameters, options|
+ link_to text, autocomplete_for_user_group_path(group, parameters.merge(:q => params[:q], :format => 'js')), :remote => true
+ }
+
+ s + content_tag('span', links, :class => 'pagination')
+ end
+end
diff --git a/app/helpers/imports_helper.rb b/app/helpers/imports_helper.rb
new file mode 100644
index 0000000..39f3b95
--- /dev/null
+++ b/app/helpers/imports_helper.rb
@@ -0,0 +1,47 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module ImportsHelper
+ def options_for_mapping_select(import, field, options={})
+ tags = "".html_safe
+ blank_text = options[:required] ? "-- #{l(:actionview_instancetag_blank_option)} --" : " ".html_safe
+ tags << content_tag('option', blank_text, :value => '')
+ tags << options_for_select(import.columns_options, import.mapping[field])
+ if values = options[:values]
+ tags << content_tag('option', '--', :disabled => true)
+ tags << options_for_select(values.map {|text, value| [text, "value:#{value}"]}, import.mapping[field])
+ end
+ tags
+ end
+
+ def mapping_select_tag(import, field, options={})
+ name = "import_settings[mapping][#{field}]"
+ select_tag name, options_for_mapping_select(import, field, options), :id => "import_mapping_#{field}"
+ end
+
+ # Returns the options for the date_format setting
+ def date_format_options
+ Import::DATE_FORMATS.map do |f|
+ format = f.gsub('%', '').gsub(/[dmY]/) do
+ {'d' => 'DD', 'm' => 'MM', 'Y' => 'YYYY'}[$&]
+ end
+ [format, f]
+ end
+ end
+end
diff --git a/app/helpers/issue_categories_helper.rb b/app/helpers/issue_categories_helper.rb
new file mode 100644
index 0000000..8af3452
--- /dev/null
+++ b/app/helpers/issue_categories_helper.rb
@@ -0,0 +1,21 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module IssueCategoriesHelper
+end
diff --git a/app/helpers/issue_relations_helper.rb b/app/helpers/issue_relations_helper.rb
new file mode 100644
index 0000000..6208e56
--- /dev/null
+++ b/app/helpers/issue_relations_helper.rb
@@ -0,0 +1,25 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module IssueRelationsHelper
+ def collection_for_relation_type_select
+ values = IssueRelation::TYPES
+ values.keys.sort{|x,y| values[x][:order] <=> values[y][:order]}.collect{|k| [l(values[k][:name]), k]}
+ end
+end
diff --git a/app/helpers/issue_statuses_helper.rb b/app/helpers/issue_statuses_helper.rb
new file mode 100644
index 0000000..49441dd
--- /dev/null
+++ b/app/helpers/issue_statuses_helper.rb
@@ -0,0 +1,21 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module IssueStatusesHelper
+end
diff --git a/app/helpers/issues_helper.rb b/app/helpers/issues_helper.rb
new file mode 100644
index 0000000..181907e
--- /dev/null
+++ b/app/helpers/issues_helper.rb
@@ -0,0 +1,546 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module IssuesHelper
+ include ApplicationHelper
+ include Redmine::Export::PDF::IssuesPdfHelper
+
+ def issue_list(issues, &block)
+ ancestors = []
+ issues.each do |issue|
+ while (ancestors.any? && !issue.is_descendant_of?(ancestors.last))
+ ancestors.pop
+ end
+ yield issue, ancestors.size
+ ancestors << issue unless issue.leaf?
+ end
+ end
+
+ def grouped_issue_list(issues, query, &block)
+ ancestors = []
+ grouped_query_results(issues, query) do |issue, group_name, group_count, group_totals|
+ while (ancestors.any? && !issue.is_descendant_of?(ancestors.last))
+ ancestors.pop
+ end
+ yield issue, ancestors.size, group_name, group_count, group_totals
+ ancestors << issue unless issue.leaf?
+ end
+ end
+
+ # Renders a HTML/CSS tooltip
+ #
+ # To use, a trigger div is needed. This is a div with the class of "tooltip"
+ # that contains this method wrapped in a span with the class of "tip"
+ #
+ #
'
+ s.html_safe
+ end
+
+ # Renders the list of related issues on the issue details view
+ def render_issue_relations(issue, relations)
+ manage_relations = User.current.allowed_to?(:manage_issue_relations, issue.project)
+
+ s = ''.html_safe
+ relations.each do |relation|
+ other_issue = relation.other_issue(issue)
+ css = "issue hascontextmenu #{other_issue.css_classes}"
+ link = manage_relations ? link_to(l(:label_relation_delete),
+ relation_path(relation),
+ :remote => true,
+ :method => :delete,
+ :data => {:confirm => l(:text_are_you_sure)},
+ :title => l(:label_relation_delete),
+ :class => 'icon-only icon-link-break'
+ ) : nil
+
+ s << content_tag('tr',
+ content_tag('td', check_box_tag("ids[]", other_issue.id, false, :id => nil), :class => 'checkbox') +
+ content_tag('td', relation.to_s(@issue) {|other| link_to_issue(other, :project => Setting.cross_project_issue_relations?)}.html_safe, :class => 'subject', :style => 'width: 50%') +
+ content_tag('td', other_issue.status, :class => 'status') +
+ content_tag('td', format_date(other_issue.start_date), :class => 'start_date') +
+ content_tag('td', format_date(other_issue.due_date), :class => 'due_date') +
+ content_tag('td', other_issue.disabled_core_fields.include?('done_ratio') ? '' : progress_bar(other_issue.done_ratio), :class=> 'done_ratio') +
+ content_tag('td', link, :class => 'buttons'),
+ :id => "relation-#{relation.id}",
+ :class => css)
+ end
+
+ content_tag('table', s, :class => 'list issues odd-even')
+ end
+
+ def issue_estimated_hours_details(issue)
+ if issue.total_estimated_hours.present?
+ if issue.total_estimated_hours == issue.estimated_hours
+ l_hours_short(issue.estimated_hours)
+ else
+ s = issue.estimated_hours.present? ? l_hours_short(issue.estimated_hours) : ""
+ s << " (#{l(:label_total)}: #{l_hours_short(issue.total_estimated_hours)})"
+ s.html_safe
+ end
+ end
+ end
+
+ def issue_spent_hours_details(issue)
+ if issue.total_spent_hours > 0
+ path = project_time_entries_path(issue.project, :issue_id => "~#{issue.id}")
+
+ if issue.total_spent_hours == issue.spent_hours
+ link_to(l_hours_short(issue.spent_hours), path)
+ else
+ s = issue.spent_hours > 0 ? l_hours_short(issue.spent_hours) : ""
+ s << " (#{l(:label_total)}: #{link_to l_hours_short(issue.total_spent_hours), path})"
+ s.html_safe
+ end
+ end
+ end
+
+ # Returns an array of error messages for bulk edited issues
+ def bulk_edit_error_messages(issues)
+ messages = {}
+ issues.each do |issue|
+ issue.errors.full_messages.each do |message|
+ messages[message] ||= []
+ messages[message] << issue
+ end
+ end
+ messages.map { |message, issues|
+ "#{message}: " + issues.map {|i| "##{i.id}"}.join(', ')
+ }
+ end
+
+ # Returns a link for adding a new subtask to the given issue
+ def link_to_new_subtask(issue)
+ attrs = {
+ :parent_issue_id => issue
+ }
+ attrs[:tracker_id] = issue.tracker unless issue.tracker.disabled_core_fields.include?('parent_issue_id')
+ link_to(l(:button_add), new_project_issue_path(issue.project, :issue => attrs, :back_url => issue_path(issue)))
+ end
+
+ def trackers_options_for_select(issue)
+ trackers = issue.allowed_target_trackers
+ if issue.new_record? && issue.parent_issue_id.present?
+ trackers = trackers.reject do |tracker|
+ issue.tracker_id != tracker.id && tracker.disabled_core_fields.include?('parent_issue_id')
+ end
+ end
+ trackers.collect {|t| [t.name, t.id]}
+ end
+
+ class IssueFieldsRows
+ include ActionView::Helpers::TagHelper
+
+ def initialize
+ @left = []
+ @right = []
+ end
+
+ def left(*args)
+ args.any? ? @left << cells(*args) : @left
+ end
+
+ def right(*args)
+ args.any? ? @right << cells(*args) : @right
+ end
+
+ def size
+ @left.size > @right.size ? @left.size : @right.size
+ end
+
+ def to_html
+ content =
+ content_tag('div', @left.reduce(&:+), :class => 'splitcontentleft') +
+ content_tag('div', @right.reduce(&:+), :class => 'splitcontentleft')
+
+ content_tag('div', content, :class => 'splitcontent')
+ end
+
+ def cells(label, text, options={})
+ options[:class] = [options[:class] || "", 'attribute'].join(' ')
+ content_tag 'div',
+ content_tag('div', label + ":", :class => 'label') + content_tag('div', text, :class => 'value'),
+ options
+ end
+ end
+
+ def issue_fields_rows
+ r = IssueFieldsRows.new
+ yield r
+ r.to_html
+ end
+
+ def render_half_width_custom_fields_rows(issue)
+ values = issue.visible_custom_field_values.reject {|value| value.custom_field.full_width_layout?}
+ return if values.empty?
+ half = (values.size / 2.0).ceil
+ issue_fields_rows do |rows|
+ values.each_with_index do |value, i|
+ css = "cf_#{value.custom_field.id}"
+ attr_value = show_value(value)
+ if value.custom_field.text_formatting == 'full'
+ attr_value = content_tag('div', attr_value, class: 'wiki')
+ end
+ m = (i < half ? :left : :right)
+ rows.send m, custom_field_name_tag(value.custom_field), attr_value, :class => css
+ end
+ end
+ end
+
+ def render_full_width_custom_fields_rows(issue)
+ values = issue.visible_custom_field_values.select {|value| value.custom_field.full_width_layout?}
+ return if values.empty?
+
+ s = ''.html_safe
+ values.each_with_index do |value, i|
+ attr_value = show_value(value)
+ next if attr_value.blank?
+
+ if value.custom_field.text_formatting == 'full'
+ attr_value = content_tag('div', attr_value, class: 'wiki')
+ end
+
+ content =
+ content_tag('hr') +
+ content_tag('p', content_tag('strong', custom_field_name_tag(value.custom_field) )) +
+ content_tag('div', attr_value, class: 'value')
+ s << content_tag('div', content, class: "cf_#{value.custom_field.id} attribute")
+ end
+ s
+ end
+
+ # Returns the path for updating the issue form
+ # with project as the current project
+ def update_issue_form_path(project, issue)
+ options = {:format => 'js'}
+ if issue.new_record?
+ if project
+ new_project_issue_path(project, options)
+ else
+ new_issue_path(options)
+ end
+ else
+ edit_issue_path(issue, options)
+ end
+ end
+
+ # Returns the number of descendants for an array of issues
+ def issues_descendant_count(issues)
+ ids = issues.reject(&:leaf?).map {|issue| issue.descendants.ids}.flatten.uniq
+ ids -= issues.map(&:id)
+ ids.size
+ end
+
+ def issues_destroy_confirmation_message(issues)
+ issues = [issues] unless issues.is_a?(Array)
+ message = l(:text_issues_destroy_confirmation)
+
+ descendant_count = issues_descendant_count(issues)
+ if descendant_count > 0
+ message << "\n" + l(:text_issues_destroy_descendants_confirmation, :count => descendant_count)
+ end
+ message
+ end
+
+ # Returns an array of users that are proposed as watchers
+ # on the new issue form
+ def users_for_new_issue_watchers(issue)
+ users = issue.watcher_users.select{|u| u.status == User::STATUS_ACTIVE}
+ if issue.project.users.count <= 20
+ users = (users + issue.project.users.sort).uniq
+ end
+ users
+ end
+
+ def email_issue_attributes(issue, user, html)
+ items = []
+ %w(author status priority assigned_to category fixed_version).each do |attribute|
+ unless issue.disabled_core_fields.include?(attribute+"_id")
+ if html
+ items << content_tag('strong', "#{l("field_#{attribute}")}: ") + (issue.send attribute)
+ else
+ items << "#{l("field_#{attribute}")}: #{issue.send attribute}"
+ end
+ end
+ end
+ issue.visible_custom_field_values(user).each do |value|
+ if html
+ items << content_tag('strong', "#{value.custom_field.name}: ") + show_value(value, false)
+ else
+ items << "#{value.custom_field.name}: #{show_value(value, false)}"
+ end
+ end
+ items
+ end
+
+ def render_email_issue_attributes(issue, user, html=false)
+ items = email_issue_attributes(issue, user, html)
+ if html
+ content_tag('ul', items.map{|s| content_tag('li', s)}.join("\n").html_safe, :class => "details")
+ else
+ items.map{|s| "* #{s}"}.join("\n")
+ end
+ end
+
+ # Returns the textual representation of a journal details
+ # as an array of strings
+ def details_to_strings(details, no_html=false, options={})
+ options[:only_path] = (options[:only_path] == false ? false : true)
+ strings = []
+ values_by_field = {}
+ details.each do |detail|
+ if detail.property == 'cf'
+ field = detail.custom_field
+ if field && field.multiple?
+ values_by_field[field] ||= {:added => [], :deleted => []}
+ if detail.old_value
+ values_by_field[field][:deleted] << detail.old_value
+ end
+ if detail.value
+ values_by_field[field][:added] << detail.value
+ end
+ next
+ end
+ end
+ strings << show_detail(detail, no_html, options)
+ end
+ if values_by_field.present?
+ multiple_values_detail = Struct.new(:property, :prop_key, :custom_field, :old_value, :value)
+ values_by_field.each do |field, changes|
+ if changes[:added].any?
+ detail = multiple_values_detail.new('cf', field.id.to_s, field)
+ detail.value = changes[:added]
+ strings << show_detail(detail, no_html, options)
+ end
+ if changes[:deleted].any?
+ detail = multiple_values_detail.new('cf', field.id.to_s, field)
+ detail.old_value = changes[:deleted]
+ strings << show_detail(detail, no_html, options)
+ end
+ end
+ end
+ strings
+ end
+
+ # Returns the textual representation of a single journal detail
+ def show_detail(detail, no_html=false, options={})
+ multiple = false
+ show_diff = false
+ no_details = false
+
+ case detail.property
+ when 'attr'
+ field = detail.prop_key.to_s.gsub(/\_id$/, "")
+ label = l(("field_" + field).to_sym)
+ case detail.prop_key
+ when 'due_date', 'start_date'
+ value = format_date(detail.value.to_date) if detail.value
+ old_value = format_date(detail.old_value.to_date) if detail.old_value
+
+ when 'project_id', 'status_id', 'tracker_id', 'assigned_to_id',
+ 'priority_id', 'category_id', 'fixed_version_id'
+ value = find_name_by_reflection(field, detail.value)
+ old_value = find_name_by_reflection(field, detail.old_value)
+
+ when 'estimated_hours'
+ value = l_hours_short(detail.value.to_f) unless detail.value.blank?
+ old_value = l_hours_short(detail.old_value.to_f) unless detail.old_value.blank?
+
+ when 'parent_id'
+ label = l(:field_parent_issue)
+ value = "##{detail.value}" unless detail.value.blank?
+ old_value = "##{detail.old_value}" unless detail.old_value.blank?
+
+ when 'is_private'
+ value = l(detail.value == "0" ? :general_text_No : :general_text_Yes) unless detail.value.blank?
+ old_value = l(detail.old_value == "0" ? :general_text_No : :general_text_Yes) unless detail.old_value.blank?
+
+ when 'description'
+ show_diff = true
+ end
+ when 'cf'
+ custom_field = detail.custom_field
+ if custom_field
+ label = custom_field.name
+ if custom_field.format.class.change_no_details
+ no_details = true
+ elsif custom_field.format.class.change_as_diff
+ show_diff = true
+ else
+ multiple = custom_field.multiple?
+ value = format_value(detail.value, custom_field) if detail.value
+ old_value = format_value(detail.old_value, custom_field) if detail.old_value
+ end
+ end
+ when 'attachment'
+ label = l(:label_attachment)
+ when 'relation'
+ if detail.value && !detail.old_value
+ rel_issue = Issue.visible.find_by_id(detail.value)
+ value = rel_issue.nil? ? "#{l(:label_issue)} ##{detail.value}" :
+ (no_html ? rel_issue : link_to_issue(rel_issue, :only_path => options[:only_path]))
+ elsif detail.old_value && !detail.value
+ rel_issue = Issue.visible.find_by_id(detail.old_value)
+ old_value = rel_issue.nil? ? "#{l(:label_issue)} ##{detail.old_value}" :
+ (no_html ? rel_issue : link_to_issue(rel_issue, :only_path => options[:only_path]))
+ end
+ relation_type = IssueRelation::TYPES[detail.prop_key]
+ label = l(relation_type[:name]) if relation_type
+ end
+ call_hook(:helper_issues_show_detail_after_setting,
+ {:detail => detail, :label => label, :value => value, :old_value => old_value })
+
+ label ||= detail.prop_key
+ value ||= detail.value
+ old_value ||= detail.old_value
+
+ unless no_html
+ label = content_tag('strong', label)
+ old_value = content_tag("i", h(old_value)) if detail.old_value
+ if detail.old_value && detail.value.blank? && detail.property != 'relation'
+ old_value = content_tag("del", old_value)
+ end
+ if detail.property == 'attachment' && value.present? &&
+ atta = detail.journal.journalized.attachments.detect {|a| a.id == detail.prop_key.to_i}
+ # Link to the attachment if it has not been removed
+ value = link_to_attachment(atta, only_path: options[:only_path])
+ if options[:only_path] != false
+ value += ' '
+ value += link_to_attachment atta, class: 'icon-only icon-download', title: l(:button_download), download: true
+ end
+ else
+ value = content_tag("i", h(value)) if value
+ end
+ end
+
+ if no_details
+ s = l(:text_journal_changed_no_detail, :label => label).html_safe
+ elsif show_diff
+ s = l(:text_journal_changed_no_detail, :label => label)
+ unless no_html
+ diff_link = link_to 'diff',
+ diff_journal_url(detail.journal_id, :detail_id => detail.id, :only_path => options[:only_path]),
+ :title => l(:label_view_diff)
+ s << " (#{ diff_link })"
+ end
+ s.html_safe
+ elsif detail.value.present?
+ case detail.property
+ when 'attr', 'cf'
+ if detail.old_value.present?
+ l(:text_journal_changed, :label => label, :old => old_value, :new => value).html_safe
+ elsif multiple
+ l(:text_journal_added, :label => label, :value => value).html_safe
+ else
+ l(:text_journal_set_to, :label => label, :value => value).html_safe
+ end
+ when 'attachment', 'relation'
+ l(:text_journal_added, :label => label, :value => value).html_safe
+ end
+ else
+ l(:text_journal_deleted, :label => label, :old => old_value).html_safe
+ end
+ end
+
+ # Find the name of an associated record stored in the field attribute
+ def find_name_by_reflection(field, id)
+ unless id.present?
+ return nil
+ end
+ @detail_value_name_by_reflection ||= Hash.new do |hash, key|
+ association = Issue.reflect_on_association(key.first.to_sym)
+ name = nil
+ if association
+ record = association.klass.find_by_id(key.last)
+ if record
+ name = record.name.force_encoding('UTF-8')
+ end
+ end
+ hash[key] = name
+ end
+ @detail_value_name_by_reflection[[field, id]]
+ end
+
+ # Renders issue children recursively
+ def render_api_issue_children(issue, api)
+ return if issue.leaf?
+ api.array :children do
+ issue.children.each do |child|
+ api.issue(:id => child.id) do
+ api.tracker(:id => child.tracker_id, :name => child.tracker.name) unless child.tracker.nil?
+ api.subject child.subject
+ render_api_issue_children(child, api)
+ end
+ end
+ end
+ end
+end
diff --git a/app/helpers/journals_helper.rb b/app/helpers/journals_helper.rb
new file mode 100644
index 0000000..b1d8774
--- /dev/null
+++ b/app/helpers/journals_helper.rb
@@ -0,0 +1,69 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module JournalsHelper
+
+ # Returns the attachments of a journal that are displayed as thumbnails
+ def journal_thumbnail_attachments(journal)
+ ids = journal.details.select {|d| d.property == 'attachment' && d.value.present?}.map(&:prop_key)
+ ids.any? ? Attachment.where(:id => ids).select(&:thumbnailable?) : []
+ end
+
+ def render_notes(issue, journal, options={})
+ content = ''
+ css_classes = "wiki"
+ links = []
+ if journal.notes.present?
+ links << link_to(l(:button_quote),
+ quoted_issue_path(issue, :journal_id => journal),
+ :remote => true,
+ :method => 'post',
+ :title => l(:button_quote),
+ :class => 'icon-only icon-comment'
+ ) if options[:reply_links]
+
+ if journal.editable_by?(User.current)
+ links << link_to(l(:button_edit),
+ edit_journal_path(journal),
+ :remote => true,
+ :method => 'get',
+ :title => l(:button_edit),
+ :class => 'icon-only icon-edit'
+ )
+ links << link_to(l(:button_delete),
+ journal_path(journal, :journal => {:notes => ""}),
+ :remote => true,
+ :method => 'put', :data => {:confirm => l(:text_are_you_sure)},
+ :title => l(:button_delete),
+ :class => 'icon-only icon-del'
+ )
+ css_classes << " editable"
+ end
+ end
+ content << content_tag('div', links.join(' ').html_safe, :class => 'contextual') unless links.empty?
+ content << textilizable(journal, :notes)
+ content_tag('div', content.html_safe, :id => "journal-#{journal.id}-notes", :class => css_classes)
+ end
+
+ def render_private_notes_indicator(journal)
+ content = journal.private_notes? ? l(:field_is_private) : ''
+ css_classes = journal.private_notes? ? 'private' : ''
+ content_tag('span', content.html_safe, :id => "journal-#{journal.id}-private_notes", :class => css_classes)
+ end
+end
diff --git a/app/helpers/mail_handler_helper.rb b/app/helpers/mail_handler_helper.rb
new file mode 100644
index 0000000..f7957ce
--- /dev/null
+++ b/app/helpers/mail_handler_helper.rb
@@ -0,0 +1,21 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module MailHandlerHelper
+end
diff --git a/app/helpers/members_helper.rb b/app/helpers/members_helper.rb
new file mode 100644
index 0000000..ff7ff1b
--- /dev/null
+++ b/app/helpers/members_helper.rb
@@ -0,0 +1,38 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module MembersHelper
+ def render_principals_for_new_members(project, limit=100)
+ scope = Principal.active.visible.sorted.not_member_of(project).like(params[:q])
+ principal_count = scope.count
+ principal_pages = Redmine::Pagination::Paginator.new principal_count, limit, params['page']
+ principals = scope.offset(principal_pages.offset).limit(principal_pages.per_page).to_a
+
+ s = content_tag('div',
+ content_tag('div', principals_check_box_tags('membership[user_ids][]', principals), :id => 'principals'),
+ :class => 'objects-selection'
+ )
+
+ links = pagination_links_full(principal_pages, principal_count, :per_page_links => false) {|text, parameters, options|
+ link_to text, autocomplete_project_memberships_path(project, parameters.merge(:q => params[:q], :format => 'js')), :remote => true
+ }
+
+ s + content_tag('span', links, :class => 'pagination')
+ end
+end
diff --git a/app/helpers/messages_helper.rb b/app/helpers/messages_helper.rb
new file mode 100644
index 0000000..77ca385
--- /dev/null
+++ b/app/helpers/messages_helper.rb
@@ -0,0 +1,21 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module MessagesHelper
+end
diff --git a/app/helpers/my_helper.rb b/app/helpers/my_helper.rb
new file mode 100644
index 0000000..6c61de8
--- /dev/null
+++ b/app/helpers/my_helper.rb
@@ -0,0 +1,167 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module MyHelper
+ # Renders the blocks
+ def render_blocks(blocks, user, options={})
+ s = ''.html_safe
+
+ if blocks.present?
+ blocks.each do |block|
+ s << render_block(block, user).to_s
+ end
+ end
+ s
+ end
+
+ # Renders a single block
+ def render_block(block, user)
+ content = render_block_content(block, user)
+ if content.present?
+ handle = content_tag('span', '', :class => 'sort-handle', :title => l(:button_move))
+ close = link_to(l(:button_delete),
+ {:action => "remove_block", :block => block},
+ :remote => true, :method => 'post',
+ :class => "icon-only icon-close", :title => l(:button_delete))
+ content = content_tag('div', handle + close, :class => 'contextual') + content
+
+ content_tag('div', content, :class => "mypage-box", :id => "block-#{block}")
+ end
+ end
+
+ # Renders a single block content
+ def render_block_content(block, user)
+ unless block_definition = Redmine::MyPage.find_block(block)
+ Rails.logger.warn("Unknown block \"#{block}\" found in #{user.login} (id=#{user.id}) preferences")
+ return
+ end
+
+ settings = user.pref.my_page_settings(block)
+ if partial = block_definition[:partial]
+ begin
+ render(:partial => partial, :locals => {:user => user, :settings => settings, :block => block})
+ rescue ActionView::MissingTemplate
+ Rails.logger.warn("Partial \"#{partial}\" missing for block \"#{block}\" found in #{user.login} (id=#{user.id}) preferences")
+ return nil
+ end
+ else
+ send "render_#{block_definition[:name]}_block", block, settings
+ end
+ end
+
+ # Returns the select tag used to add a block to My page
+ def block_select_tag(user)
+ blocks_in_use = user.pref.my_page_layout.values.flatten
+ options = content_tag('option')
+ Redmine::MyPage.block_options(blocks_in_use).each do |label, block|
+ options << content_tag('option', label, :value => block, :disabled => block.blank?)
+ end
+ select_tag('block', options, :id => "block-select", :onchange => "$('#block-form').submit();")
+ end
+
+ def render_calendar_block(block, settings)
+ calendar = Redmine::Helpers::Calendar.new(User.current.today, current_language, :week)
+ calendar.events = Issue.visible.
+ where(:project_id => User.current.projects.map(&:id)).
+ where("(start_date>=? and start_date<=?) or (due_date>=? and due_date<=?)", calendar.startdt, calendar.enddt, calendar.startdt, calendar.enddt).
+ includes(:project, :tracker, :priority, :assigned_to).
+ references(:project, :tracker, :priority, :assigned_to).
+ to_a
+
+ render :partial => 'my/blocks/calendar', :locals => {:calendar => calendar, :block => block}
+ end
+
+ def render_documents_block(block, settings)
+ documents = Document.visible.order("#{Document.table_name}.created_on DESC").limit(10).to_a
+
+ render :partial => 'my/blocks/documents', :locals => {:block => block, :documents => documents}
+ end
+
+ def render_issuesassignedtome_block(block, settings)
+ query = IssueQuery.new(:name => l(:label_assigned_to_me_issues), :user => User.current)
+ query.add_filter 'assigned_to_id', '=', ['me']
+ query.column_names = settings[:columns].presence || ['project', 'tracker', 'status', 'subject']
+ query.sort_criteria = settings[:sort].presence || [['priority', 'desc'], ['updated_on', 'desc']]
+ issues = query.issues(:limit => 10)
+
+ render :partial => 'my/blocks/issues', :locals => {:query => query, :issues => issues, :block => block}
+ end
+
+ def render_issuesreportedbyme_block(block, settings)
+ query = IssueQuery.new(:name => l(:label_reported_issues), :user => User.current)
+ query.add_filter 'author_id', '=', ['me']
+ query.column_names = settings[:columns].presence || ['project', 'tracker', 'status', 'subject']
+ query.sort_criteria = settings[:sort].presence || [['updated_on', 'desc']]
+ issues = query.issues(:limit => 10)
+
+ render :partial => 'my/blocks/issues', :locals => {:query => query, :issues => issues, :block => block}
+ end
+
+ def render_issueswatched_block(block, settings)
+ query = IssueQuery.new(:name => l(:label_watched_issues), :user => User.current)
+ query.add_filter 'watcher_id', '=', ['me']
+ query.column_names = settings[:columns].presence || ['project', 'tracker', 'status', 'subject']
+ query.sort_criteria = settings[:sort].presence || [['updated_on', 'desc']]
+ issues = query.issues(:limit => 10)
+
+ render :partial => 'my/blocks/issues', :locals => {:query => query, :issues => issues, :block => block}
+ end
+
+ def render_issuequery_block(block, settings)
+ query = IssueQuery.visible.find_by_id(settings[:query_id])
+
+ if query
+ query.column_names = settings[:columns] if settings[:columns].present?
+ query.sort_criteria = settings[:sort] if settings[:sort].present?
+ issues = query.issues(:limit => 10)
+ render :partial => 'my/blocks/issues', :locals => {:query => query, :issues => issues, :block => block, :settings => settings}
+ else
+ queries = IssueQuery.visible.sorted
+ render :partial => 'my/blocks/issue_query_selection', :locals => {:queries => queries, :block => block, :settings => settings}
+ end
+ end
+
+ def render_news_block(block, settings)
+ news = News.visible.
+ where(:project_id => User.current.projects.map(&:id)).
+ limit(10).
+ includes(:project, :author).
+ references(:project, :author).
+ order("#{News.table_name}.created_on DESC").
+ to_a
+
+ render :partial => 'my/blocks/news', :locals => {:block => block, :news => news}
+ end
+
+ def render_timelog_block(block, settings)
+ days = settings[:days].to_i
+ days = 7 if days < 1 || days > 365
+
+ entries = TimeEntry.
+ where("#{TimeEntry.table_name}.user_id = ? AND #{TimeEntry.table_name}.spent_on BETWEEN ? AND ?", User.current.id, User.current.today - (days - 1), User.current.today).
+ joins(:activity, :project).
+ references(:issue => [:tracker, :status]).
+ includes(:issue => [:tracker, :status]).
+ order("#{TimeEntry.table_name}.spent_on DESC, #{Project.table_name}.name ASC, #{Tracker.table_name}.position ASC, #{Issue.table_name}.id ASC").
+ to_a
+ entries_by_day = entries.group_by(&:spent_on)
+
+ render :partial => 'my/blocks/timelog', :locals => {:block => block, :entries => entries, :entries_by_day => entries_by_day, :days => days}
+ end
+end
diff --git a/app/helpers/news_helper.rb b/app/helpers/news_helper.rb
new file mode 100644
index 0000000..f105593
--- /dev/null
+++ b/app/helpers/news_helper.rb
@@ -0,0 +1,21 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module NewsHelper
+end
diff --git a/app/helpers/principal_memberships_helper.rb b/app/helpers/principal_memberships_helper.rb
new file mode 100644
index 0000000..bf6898f
--- /dev/null
+++ b/app/helpers/principal_memberships_helper.rb
@@ -0,0 +1,64 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module PrincipalMembershipsHelper
+ def render_principal_memberships(principal)
+ render :partial => 'principal_memberships/index', :locals => {:principal => principal}
+ end
+
+ def call_table_header_hook(principal)
+ if principal.is_a?(Group)
+ call_hook :view_groups_memberships_table_header, :group => principal
+ else
+ call_hook :view_users_memberships_table_header, :user => principal
+ end
+ end
+
+ def call_table_row_hook(principal, membership)
+ if principal.is_a?(Group)
+ call_hook :view_groups_memberships_table_row, :group => principal, :membership => membership
+ else
+ call_hook :view_users_memberships_table_row, :user => principal, :membership => membership
+ end
+ end
+
+ def new_principal_membership_path(principal, *args)
+ if principal.is_a?(Group)
+ new_group_membership_path(principal, *args)
+ else
+ new_user_membership_path(principal, *args)
+ end
+ end
+
+ def edit_principal_membership_path(principal, *args)
+ if principal.is_a?(Group)
+ edit_group_membership_path(principal, *args)
+ else
+ edit_user_membership_path(principal, *args)
+ end
+ end
+
+ def principal_membership_path(principal, membership, *args)
+ if principal.is_a?(Group)
+ group_membership_path(principal, membership, *args)
+ else
+ user_membership_path(principal, membership, *args)
+ end
+ end
+end
diff --git a/app/helpers/projects_helper.rb b/app/helpers/projects_helper.rb
new file mode 100644
index 0000000..78e192b
--- /dev/null
+++ b/app/helpers/projects_helper.rb
@@ -0,0 +1,140 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module ProjectsHelper
+ def project_settings_tabs
+ tabs = [{:name => 'info', :action => :edit_project, :partial => 'projects/edit', :label => :label_information_plural},
+ {:name => 'modules', :action => :select_project_modules, :partial => 'projects/settings/modules', :label => :label_module_plural},
+ {:name => 'members', :action => :manage_members, :partial => 'projects/settings/members', :label => :label_member_plural},
+ {:name => 'versions', :action => :manage_versions, :partial => 'projects/settings/versions', :label => :label_version_plural,
+ :url => {:tab => 'versions', :version_status => params[:version_status], :version_name => params[:version_name]}},
+ {:name => 'categories', :action => :manage_categories, :partial => 'projects/settings/issue_categories', :label => :label_issue_category_plural},
+ {:name => 'wiki', :action => :manage_wiki, :partial => 'projects/settings/wiki', :label => :label_wiki},
+ {:name => 'repositories', :action => :manage_repository, :partial => 'projects/settings/repositories', :label => :label_repository_plural},
+ {:name => 'boards', :action => :manage_boards, :partial => 'projects/settings/boards', :label => :label_board_plural},
+ {:name => 'activities', :action => :manage_project_activities, :partial => 'projects/settings/activities', :label => :enumeration_activities}
+ ]
+ tabs.select {|tab| User.current.allowed_to?(tab[:action], @project)}
+ end
+
+ def parent_project_select_tag(project)
+ selected = project.parent
+ # retrieve the requested parent project
+ parent_id = (params[:project] && params[:project][:parent_id]) || params[:parent_id]
+ if parent_id
+ selected = (parent_id.blank? ? nil : Project.find(parent_id))
+ end
+
+ options = ''
+ options << "" if project.allowed_parents.include?(nil)
+ options << project_tree_options_for_select(project.allowed_parents.compact, :selected => selected)
+ content_tag('select', options.html_safe, :name => 'project[parent_id]', :id => 'project_parent_id')
+ end
+
+ def render_project_action_links
+ links = "".html_safe
+ if User.current.allowed_to?(:add_project, nil, :global => true)
+ links << link_to(l(:label_project_new), new_project_path, :class => 'icon icon-add')
+ end
+ links
+ end
+
+ # Renders the projects index
+ def render_project_hierarchy(projects)
+ render_project_nested_lists(projects) do |project|
+ s = link_to_project(project, {}, :class => "#{project.css_classes} #{User.current.member_of?(project) ? 'icon icon-fav my-project' : nil}")
+ if project.description.present?
+ s << content_tag('div', textilizable(project.short_description, :project => project), :class => 'wiki description')
+ end
+ s
+ end
+ end
+
+ # Returns a set of options for a select field, grouped by project.
+ def version_options_for_select(versions, selected=nil)
+ grouped = Hash.new {|h,k| h[k] = []}
+ versions.each do |version|
+ grouped[version.project.name] << [version.name, version.id]
+ end
+
+ selected = selected.is_a?(Version) ? selected.id : selected
+ if grouped.keys.size > 1
+ grouped_options_for_select(grouped, selected)
+ else
+ options_for_select((grouped.values.first || []), selected)
+ end
+ end
+
+ def project_default_version_options(project)
+ versions = project.shared_versions.open.to_a
+ if project.default_version && !versions.include?(project.default_version)
+ versions << project.default_version
+ end
+ version_options_for_select(versions, project.default_version)
+ end
+
+ def project_default_assigned_to_options(project)
+ assignable_users = (project.assignable_users.to_a + [project.default_assigned_to]).uniq.compact
+ principals_options_for_select(assignable_users, project.default_assigned_to)
+ end
+
+ def format_version_sharing(sharing)
+ sharing = 'none' unless Version::VERSION_SHARINGS.include?(sharing)
+ l("label_version_sharing_#{sharing}")
+ end
+
+ def render_boards_tree(boards, parent=nil, level=0, &block)
+ selection = boards.select {|b| b.parent == parent}
+ return '' if selection.empty?
+
+ s = ''.html_safe
+ selection.each do |board|
+ node = capture(board, level, &block)
+ node << render_boards_tree(boards, board, level+1, &block)
+ s << content_tag('div', node)
+ end
+ content_tag('div', s, :class => 'sort-level')
+ end
+
+ def render_api_includes(project, api)
+ api.array :trackers do
+ project.trackers.each do |tracker|
+ api.tracker(:id => tracker.id, :name => tracker.name)
+ end
+ end if include_in_api_response?('trackers')
+
+ api.array :issue_categories do
+ project.issue_categories.each do |category|
+ api.issue_category(:id => category.id, :name => category.name)
+ end
+ end if include_in_api_response?('issue_categories')
+
+ api.array :time_entry_activities do
+ project.activities.each do |activity|
+ api.time_entry_activity(:id => activity.id, :name => activity.name)
+ end
+ end if include_in_api_response?('time_entry_activities')
+
+ api.array :enabled_modules do
+ project.enabled_modules.each do |enabled_module|
+ api.enabled_module(:id => enabled_module.id, :name => enabled_module.name)
+ end
+ end if include_in_api_response?('enabled_modules')
+ end
+end
diff --git a/app/helpers/queries_helper.rb b/app/helpers/queries_helper.rb
new file mode 100644
index 0000000..6ad8437
--- /dev/null
+++ b/app/helpers/queries_helper.rb
@@ -0,0 +1,406 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module QueriesHelper
+ include ApplicationHelper
+
+ def filters_options_for_select(query)
+ ungrouped = []
+ grouped = {}
+ query.available_filters.map do |field, field_options|
+ if field_options[:type] == :relation
+ group = :label_relations
+ elsif field_options[:type] == :tree
+ group = query.is_a?(IssueQuery) ? :label_relations : nil
+ elsif field =~ /^cf_\d+\./
+ group = (field_options[:through] || field_options[:field]).try(:name)
+ elsif field =~ /^(.+)\./
+ # association filters
+ group = "field_#{$1}".to_sym
+ elsif %w(member_of_group assigned_to_role).include?(field)
+ group = :field_assigned_to
+ elsif field_options[:type] == :date_past || field_options[:type] == :date
+ group = :label_date
+ end
+ if group
+ (grouped[group] ||= []) << [field_options[:name], field]
+ else
+ ungrouped << [field_options[:name], field]
+ end
+ end
+ # Don't group dates if there's only one (eg. time entries filters)
+ if grouped[:label_date].try(:size) == 1
+ ungrouped << grouped.delete(:label_date).first
+ end
+ s = options_for_select([[]] + ungrouped)
+ if grouped.present?
+ localized_grouped = grouped.map {|k,v| [k.is_a?(Symbol) ? l(k) : k.to_s, v]}
+ s << grouped_options_for_select(localized_grouped)
+ end
+ s
+ end
+
+ def query_filters_hidden_tags(query)
+ tags = ''.html_safe
+ query.filters.each do |field, options|
+ tags << hidden_field_tag("f[]", field, :id => nil)
+ tags << hidden_field_tag("op[#{field}]", options[:operator], :id => nil)
+ options[:values].each do |value|
+ tags << hidden_field_tag("v[#{field}][]", value, :id => nil)
+ end
+ end
+ tags
+ end
+
+ def query_columns_hidden_tags(query)
+ tags = ''.html_safe
+ query.columns.each do |column|
+ tags << hidden_field_tag("c[]", column.name, :id => nil)
+ end
+ tags
+ end
+
+ def query_hidden_tags(query)
+ query_filters_hidden_tags(query) + query_columns_hidden_tags(query)
+ end
+
+ def group_by_column_select_tag(query)
+ options = [[]] + query.groupable_columns.collect {|c| [c.caption, c.name.to_s]}
+ select_tag('group_by', options_for_select(options, @query.group_by))
+ end
+
+ def available_block_columns_tags(query)
+ tags = ''.html_safe
+ query.available_block_columns.each do |column|
+ tags << content_tag('label', check_box_tag('c[]', column.name.to_s, query.has_column?(column), :id => nil) + " #{column.caption}", :class => 'inline')
+ end
+ tags
+ end
+
+ def available_totalable_columns_tags(query)
+ tags = ''.html_safe
+ query.available_totalable_columns.each do |column|
+ tags << content_tag('label', check_box_tag('t[]', column.name.to_s, query.totalable_columns.include?(column), :id => nil) + " #{column.caption}", :class => 'inline')
+ end
+ tags << hidden_field_tag('t[]', '')
+ tags
+ end
+
+ def query_available_inline_columns_options(query)
+ (query.available_inline_columns - query.columns).reject(&:frozen?).collect {|column| [column.caption, column.name]}
+ end
+
+ def query_selected_inline_columns_options(query)
+ (query.inline_columns & query.available_inline_columns).reject(&:frozen?).collect {|column| [column.caption, column.name]}
+ end
+
+ def render_query_columns_selection(query, options={})
+ tag_name = (options[:name] || 'c') + '[]'
+ render :partial => 'queries/columns', :locals => {:query => query, :tag_name => tag_name}
+ end
+
+ def grouped_query_results(items, query, &block)
+ result_count_by_group = query.result_count_by_group
+ previous_group, first = false, true
+ totals_by_group = query.totalable_columns.inject({}) do |h, column|
+ h[column] = query.total_by_group_for(column)
+ h
+ end
+ items.each do |item|
+ group_name = group_count = nil
+ if query.grouped?
+ group = query.group_by_column.value(item)
+ if first || group != previous_group
+ if group.blank? && group != false
+ group_name = "(#{l(:label_blank_value)})"
+ else
+ group_name = format_object(group)
+ end
+ group_name ||= ""
+ group_count = result_count_by_group ? result_count_by_group[group] : nil
+ group_totals = totals_by_group.map {|column, t| total_tag(column, t[group] || 0)}.join(" ").html_safe
+ end
+ end
+ yield item, group_name, group_count, group_totals
+ previous_group, first = group, false
+ end
+ end
+
+ def render_query_totals(query)
+ return unless query.totalable_columns.present?
+ totals = query.totalable_columns.map do |column|
+ total_tag(column, query.total_for(column))
+ end
+ content_tag('p', totals.join(" ").html_safe, :class => "query-totals")
+ end
+
+ def total_tag(column, value)
+ label = content_tag('span', "#{column.caption}:")
+ value = if [:hours, :spent_hours, :total_spent_hours, :estimated_hours].include? column.name
+ format_hours(value)
+ else
+ format_object(value)
+ end
+ value = content_tag('span', value, :class => 'value')
+ content_tag('span', label + " " + value, :class => "total-for-#{column.name.to_s.dasherize}")
+ end
+
+ def column_header(query, column, options={})
+ if column.sortable?
+ css, order = nil, column.default_order
+ if column.name.to_s == query.sort_criteria.first_key
+ if query.sort_criteria.first_asc?
+ css = 'sort asc'
+ order = 'desc'
+ else
+ css = 'sort desc'
+ order = 'asc'
+ end
+ end
+ param_key = options[:sort_param] || :sort
+ sort_param = { param_key => query.sort_criteria.add(column.name, order).to_param }
+ while sort_param.keys.first.to_s =~ /^(.+)\[(.+)\]$/
+ sort_param = {$1 => {$2 => sort_param.values.first}}
+ end
+ link_options = {
+ :title => l(:label_sort_by, "\"#{column.caption}\""),
+ :class => css
+ }
+ if options[:sort_link_options]
+ link_options.merge! options[:sort_link_options]
+ end
+ content = link_to(column.caption,
+ {:params => request.query_parameters.deep_merge(sort_param)},
+ link_options
+ )
+ else
+ content = column.caption
+ end
+ content_tag('th', content)
+ end
+
+ def column_content(column, item)
+ value = column.value_object(item)
+ if value.is_a?(Array)
+ values = value.collect {|v| column_value(column, item, v)}.compact
+ safe_join(values, ', ')
+ else
+ column_value(column, item, value)
+ end
+ end
+
+ def column_value(column, item, value)
+ case column.name
+ when :id
+ link_to value, issue_path(item)
+ when :subject
+ link_to value, issue_path(item)
+ when :parent
+ value ? (value.visible? ? link_to_issue(value, :subject => false) : "##{value.id}") : ''
+ when :description
+ item.description? ? content_tag('div', textilizable(item, :description), :class => "wiki") : ''
+ when :last_notes
+ item.last_notes.present? ? content_tag('div', textilizable(item, :last_notes), :class => "wiki") : ''
+ when :done_ratio
+ progress_bar(value)
+ when :relations
+ content_tag('span',
+ value.to_s(item) {|other| link_to_issue(other, :subject => false, :tracker => false)}.html_safe,
+ :class => value.css_classes_for(item))
+ when :hours, :estimated_hours
+ format_hours(value)
+ when :spent_hours
+ link_to_if(value > 0, format_hours(value), project_time_entries_path(item.project, :issue_id => "#{item.id}"))
+ when :total_spent_hours
+ link_to_if(value > 0, format_hours(value), project_time_entries_path(item.project, :issue_id => "~#{item.id}"))
+ when :attachments
+ value.to_a.map {|a| format_object(a)}.join(" ").html_safe
+ else
+ format_object(value)
+ end
+ end
+
+ def csv_content(column, item)
+ value = column.value_object(item)
+ if value.is_a?(Array)
+ value.collect {|v| csv_value(column, item, v)}.compact.join(', ')
+ else
+ csv_value(column, item, value)
+ end
+ end
+
+ def csv_value(column, object, value)
+ case column.name
+ when :attachments
+ value.to_a.map {|a| a.filename}.join("\n")
+ else
+ format_object(value, false) do |value|
+ case value.class.name
+ when 'Float'
+ sprintf("%.2f", value).gsub('.', l(:general_csv_decimal_separator))
+ when 'IssueRelation'
+ value.to_s(object)
+ when 'Issue'
+ if object.is_a?(TimeEntry)
+ "#{value.tracker} ##{value.id}: #{value.subject}"
+ else
+ value.id
+ end
+ else
+ value
+ end
+ end
+ end
+ end
+
+ def query_to_csv(items, query, options={})
+ columns = query.columns
+
+ Redmine::Export::CSV.generate do |csv|
+ # csv header fields
+ csv << columns.map {|c| c.caption.to_s}
+ # csv lines
+ items.each do |item|
+ csv << columns.map {|c| csv_content(c, item)}
+ end
+ end
+ end
+
+ # Retrieve query from session or build a new query
+ def retrieve_query(klass=IssueQuery, use_session=true)
+ session_key = klass.name.underscore.to_sym
+
+ if params[:query_id].present?
+ cond = "project_id IS NULL"
+ cond << " OR project_id = #{@project.id}" if @project
+ @query = klass.where(cond).find(params[:query_id])
+ raise ::Unauthorized unless @query.visible?
+ @query.project = @project
+ session[session_key] = {:id => @query.id, :project_id => @query.project_id} if use_session
+ elsif api_request? || params[:set_filter] || !use_session || session[session_key].nil? || session[session_key][:project_id] != (@project ? @project.id : nil)
+ # Give it a name, required to be valid
+ @query = klass.new(:name => "_", :project => @project)
+ @query.build_from_params(params)
+ session[session_key] = {:project_id => @query.project_id, :filters => @query.filters, :group_by => @query.group_by, :column_names => @query.column_names, :totalable_names => @query.totalable_names, :sort => @query.sort_criteria.to_a} if use_session
+ else
+ # retrieve from session
+ @query = nil
+ @query = klass.find_by_id(session[session_key][:id]) if session[session_key][:id]
+ @query ||= klass.new(:name => "_", :filters => session[session_key][:filters], :group_by => session[session_key][:group_by], :column_names => session[session_key][:column_names], :totalable_names => session[session_key][:totalable_names], :sort_criteria => session[session_key][:sort])
+ @query.project = @project
+ end
+ if params[:sort].present?
+ @query.sort_criteria = params[:sort]
+ if use_session
+ session[session_key] ||= {}
+ session[session_key][:sort] = @query.sort_criteria.to_a
+ end
+ end
+ @query
+ end
+
+ def retrieve_query_from_session(klass=IssueQuery)
+ session_key = klass.name.underscore.to_sym
+ session_data = session[session_key]
+
+ if session_data
+ if session_data[:id]
+ @query = IssueQuery.find_by_id(session_data[:id])
+ return unless @query
+ else
+ @query = IssueQuery.new(:name => "_", :filters => session_data[:filters], :group_by => session_data[:group_by], :column_names => session_data[:column_names], :totalable_names => session_data[:totalable_names], :sort_criteria => session[session_key][:sort])
+ end
+ if session_data.has_key?(:project_id)
+ @query.project_id = session_data[:project_id]
+ else
+ @query.project = @project
+ end
+ @query
+ end
+ end
+
+ # Returns the query definition as hidden field tags
+ def query_as_hidden_field_tags(query)
+ tags = hidden_field_tag("set_filter", "1", :id => nil)
+
+ if query.filters.present?
+ query.filters.each do |field, filter|
+ tags << hidden_field_tag("f[]", field, :id => nil)
+ tags << hidden_field_tag("op[#{field}]", filter[:operator], :id => nil)
+ filter[:values].each do |value|
+ tags << hidden_field_tag("v[#{field}][]", value, :id => nil)
+ end
+ end
+ else
+ tags << hidden_field_tag("f[]", "", :id => nil)
+ end
+ query.columns.each do |column|
+ tags << hidden_field_tag("c[]", column.name, :id => nil)
+ end
+ if query.totalable_names.present?
+ query.totalable_names.each do |name|
+ tags << hidden_field_tag("t[]", name, :id => nil)
+ end
+ end
+ if query.group_by.present?
+ tags << hidden_field_tag("group_by", query.group_by, :id => nil)
+ end
+ if query.sort_criteria.present?
+ tags << hidden_field_tag("sort", query.sort_criteria.to_param, :id => nil)
+ end
+
+ tags
+ end
+
+ def query_hidden_sort_tag(query)
+ hidden_field_tag("sort", query.sort_criteria.to_param, :id => nil)
+ end
+
+ # Returns the queries that are rendered in the sidebar
+ def sidebar_queries(klass, project)
+ klass.visible.global_or_on_project(@project).sorted.to_a
+ end
+
+ # Renders a group of queries
+ def query_links(title, queries)
+ return '' if queries.empty?
+ # links to #index on issues/show
+ url_params = controller_name == 'issues' ? {:controller => 'issues', :action => 'index', :project_id => @project} : {}
+
+ content_tag('h3', title) + "\n" +
+ content_tag('ul',
+ queries.collect {|query|
+ css = 'query'
+ css << ' selected' if query == @query
+ content_tag('li', link_to(query.name, url_params.merge(:query_id => query), :class => css))
+ }.join("\n").html_safe,
+ :class => 'queries'
+ ) + "\n"
+ end
+
+ # Renders the list of queries for the sidebar
+ def render_sidebar_queries(klass, project)
+ queries = sidebar_queries(klass, project)
+
+ out = ''.html_safe
+ out << query_links(l(:label_my_queries), queries.select(&:is_private?))
+ out << query_links(l(:label_query_plural), queries.reject(&:is_private?))
+ out
+ end
+end
diff --git a/app/helpers/reports_helper.rb b/app/helpers/reports_helper.rb
new file mode 100644
index 0000000..201c990
--- /dev/null
+++ b/app/helpers/reports_helper.rb
@@ -0,0 +1,43 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module ReportsHelper
+
+ def aggregate(data, criteria)
+ a = 0
+ data.each { |row|
+ match = 1
+ criteria.each { |k, v|
+ match = 0 unless (row[k].to_s == v.to_s) || (k == 'closed' && (v == 0 ? ['f', false] : ['t', true]).include?(row[k]))
+ } unless criteria.nil?
+ a = a + row["total"].to_i if match == 1
+ } unless data.nil?
+ a
+ end
+
+ def aggregate_link(data, criteria, *args)
+ a = aggregate data, criteria
+ a > 0 ? link_to(h(a), *args) : '-'
+ end
+
+ def aggregate_path(project, field, row, options={})
+ parameters = {:set_filter => 1, :subproject_id => '!*', field => row.id}.merge(options)
+ project_issues_path(row.is_a?(Project) ? row : project, parameters)
+ end
+end
diff --git a/app/helpers/repositories_helper.rb b/app/helpers/repositories_helper.rb
new file mode 100644
index 0000000..c2e0737
--- /dev/null
+++ b/app/helpers/repositories_helper.rb
@@ -0,0 +1,310 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module RepositoriesHelper
+ def format_revision(revision)
+ if revision.respond_to? :format_identifier
+ revision.format_identifier
+ else
+ revision.to_s
+ end
+ end
+
+ def truncate_at_line_break(text, length = 255)
+ if text
+ text.gsub(%r{^(.{#{length}}[^\n]*)\n.+$}m, '\\1...')
+ end
+ end
+
+ def render_properties(properties)
+ unless properties.nil? || properties.empty?
+ content = ''
+ properties.keys.sort.each do |property|
+ content << content_tag('li', "#{h property}: #{h properties[property]}".html_safe)
+ end
+ content_tag('ul', content.html_safe, :class => 'properties')
+ end
+ end
+
+ def render_changeset_changes
+ changes = @changeset.filechanges.limit(1000).reorder('path').collect do |change|
+ case change.action
+ when 'A'
+ # Detects moved/copied files
+ if !change.from_path.blank?
+ change.action =
+ @changeset.filechanges.detect {|c| c.action == 'D' && c.path == change.from_path} ? 'R' : 'C'
+ end
+ change
+ when 'D'
+ @changeset.filechanges.detect {|c| c.from_path == change.path} ? nil : change
+ else
+ change
+ end
+ end.compact
+
+ tree = { }
+ changes.each do |change|
+ p = tree
+ dirs = change.path.to_s.split('/').select {|d| !d.blank?}
+ path = ''
+ dirs.each do |dir|
+ path += '/' + dir
+ p[:s] ||= {}
+ p = p[:s]
+ p[path] ||= {}
+ p = p[path]
+ end
+ p[:c] = change
+ end
+ render_changes_tree(tree[:s])
+ end
+
+ def render_changes_tree(tree)
+ return '' if tree.nil?
+ output = ''
+ output << '
+#
+#
+# - Introduces instance variables: @sort_default, @sort_criteria
+# - Introduces param :sort
+#
+
+module SortHelper
+ def sort_name
+ controller_name + '_' + action_name + '_sort'
+ end
+
+ # Initializes the default sort.
+ # Examples:
+ #
+ # sort_init 'name'
+ # sort_init 'id', 'desc'
+ # sort_init ['name', ['id', 'desc']]
+ # sort_init [['name', 'desc'], ['id', 'desc']]
+ #
+ def sort_init(*args)
+ case args.size
+ when 1
+ @sort_default = args.first.is_a?(Array) ? args.first : [[args.first]]
+ when 2
+ @sort_default = [[args.first, args.last]]
+ else
+ raise ArgumentError
+ end
+ end
+
+ # Updates the sort state. Call this in the controller prior to calling
+ # sort_clause.
+ # - criteria can be either an array or a hash of allowed keys
+ #
+ def sort_update(criteria, sort_name=nil)
+ sort_name ||= self.sort_name
+ @sort_criteria = Redmine::SortCriteria.new(params[:sort] || session[sort_name] || @sort_default)
+ @sortable_columns = criteria
+ session[sort_name] = @sort_criteria.to_param
+ end
+
+ # Clears the sort criteria session data
+ #
+ def sort_clear
+ session[sort_name] = nil
+ end
+
+ # Returns an SQL sort clause corresponding to the current sort state.
+ # Use this to sort the controller's table items collection.
+ #
+ def sort_clause()
+ @sort_criteria.sort_clause(@sortable_columns)
+ end
+
+ def sort_criteria
+ @sort_criteria
+ end
+
+ # Returns a link which sorts by the named column.
+ #
+ # - column is the name of an attribute in the sorted record collection.
+ # - the optional caption explicitly specifies the displayed link text.
+ # - 2 CSS classes reflect the state of the link: sort and asc or desc
+ #
+ def sort_link(column, caption, default_order)
+ css, order = nil, default_order
+
+ if column.to_s == @sort_criteria.first_key
+ if @sort_criteria.first_asc?
+ css = 'sort asc'
+ order = 'desc'
+ else
+ css = 'sort desc'
+ order = 'asc'
+ end
+ end
+ caption = column.to_s.humanize unless caption
+
+ sort_options = { :sort => @sort_criteria.add(column.to_s, order).to_param }
+ link_to(caption, {:params => request.query_parameters.merge(sort_options)}, :class => css)
+ end
+
+ # Returns a table header
tag with a sort link for the named column
+ # attribute.
+ #
+ # Options:
+ # :caption The displayed link name (defaults to titleized column name).
+ # :title The tag's 'title' attribute (defaults to 'Sort by :caption').
+ #
+ # Other options hash entries generate additional table header tag attributes.
+ #
+ # Example:
+ #
+ # <%= sort_header_tag('id', :title => 'Sort by contact ID', :width => 40) %>
+ #
+ def sort_header_tag(column, options = {})
+ caption = options.delete(:caption) || column.to_s.humanize
+ default_order = options.delete(:default_order) || 'asc'
+ options[:title] = l(:label_sort_by, "\"#{caption}\"") unless options[:title]
+ content_tag('th', sort_link(column, caption, default_order), options)
+ end
+
+ # Returns the css classes for the current sort order
+ #
+ # Example:
+ #
+ # sort_css_classes
+ # # => "sort-by-created-on sort-desc"
+ def sort_css_classes
+ if @sort_criteria.first_key
+ "sort-by-#{@sort_criteria.first_key.to_s.dasherize} sort-#{@sort_criteria.first_asc? ? 'asc' : 'desc'}"
+ end
+ end
+end
+
diff --git a/app/helpers/timelog_helper.rb b/app/helpers/timelog_helper.rb
new file mode 100644
index 0000000..d1174fe
--- /dev/null
+++ b/app/helpers/timelog_helper.rb
@@ -0,0 +1,121 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module TimelogHelper
+ include ApplicationHelper
+
+ # Returns a collection of activities for a select field. time_entry
+ # is optional and will be used to check if the selected TimeEntryActivity
+ # is active.
+ def activity_collection_for_select_options(time_entry=nil, project=nil)
+ project ||= time_entry.try(:project)
+ project ||= @project
+ if project.nil?
+ activities = TimeEntryActivity.shared.active
+ else
+ activities = project.activities
+ end
+
+ collection = []
+ if time_entry && time_entry.activity && !time_entry.activity.active?
+ collection << [ "--- #{l(:actionview_instancetag_blank_option)} ---", '' ]
+ else
+ collection << [ "--- #{l(:actionview_instancetag_blank_option)} ---", '' ] unless activities.detect(&:is_default)
+ end
+ activities.each { |a| collection << [a.name, a.id] }
+ collection
+ end
+
+ def select_hours(data, criteria, value)
+ if value.to_s.empty?
+ data.select {|row| row[criteria].blank? }
+ else
+ data.select {|row| row[criteria].to_s == value.to_s}
+ end
+ end
+
+ def sum_hours(data)
+ sum = 0
+ data.each do |row|
+ sum += row['hours'].to_f
+ end
+ sum
+ end
+
+ def format_criteria_value(criteria_options, value)
+ if value.blank?
+ "[#{l(:label_none)}]"
+ elsif k = criteria_options[:klass]
+ obj = k.find_by_id(value.to_i)
+ if obj.is_a?(Issue)
+ obj.visible? ? "#{obj.tracker} ##{obj.id}: #{obj.subject}" : "##{obj.id}"
+ else
+ obj
+ end
+ elsif cf = criteria_options[:custom_field]
+ format_value(value, cf)
+ else
+ value.to_s
+ end
+ end
+
+ def report_to_csv(report)
+ Redmine::Export::CSV.generate do |csv|
+ # Column headers
+ headers = report.criteria.collect {|criteria| l(report.available_criteria[criteria][:label]) }
+ headers += report.periods
+ headers << l(:label_total_time)
+ csv << headers
+ # Content
+ report_criteria_to_csv(csv, report.available_criteria, report.columns, report.criteria, report.periods, report.hours)
+ # Total row
+ str_total = l(:label_total_time)
+ row = [ str_total ] + [''] * (report.criteria.size - 1)
+ total = 0
+ report.periods.each do |period|
+ sum = sum_hours(select_hours(report.hours, report.columns, period.to_s))
+ total += sum
+ row << (sum > 0 ? sum : '')
+ end
+ row << total
+ csv << row
+ end
+ end
+
+ def report_criteria_to_csv(csv, available_criteria, columns, criteria, periods, hours, level=0)
+ hours.collect {|h| h[criteria[level]].to_s}.uniq.each do |value|
+ hours_for_value = select_hours(hours, criteria[level], value)
+ next if hours_for_value.empty?
+ row = [''] * level
+ row << format_criteria_value(available_criteria[criteria[level]], value).to_s
+ row += [''] * (criteria.length - level - 1)
+ total = 0
+ periods.each do |period|
+ sum = sum_hours(select_hours(hours_for_value, columns, period.to_s))
+ total += sum
+ row << (sum > 0 ? sum : '')
+ end
+ row << total
+ csv << row
+ if criteria.length > level + 1
+ report_criteria_to_csv(csv, available_criteria, columns, criteria, periods, hours_for_value, level + 1)
+ end
+ end
+ end
+end
diff --git a/app/helpers/trackers_helper.rb b/app/helpers/trackers_helper.rb
new file mode 100644
index 0000000..ffb2ca3
--- /dev/null
+++ b/app/helpers/trackers_helper.rb
@@ -0,0 +1,21 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module TrackersHelper
+end
diff --git a/app/helpers/users_helper.rb b/app/helpers/users_helper.rb
new file mode 100644
index 0000000..d781286
--- /dev/null
+++ b/app/helpers/users_helper.rb
@@ -0,0 +1,64 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module UsersHelper
+ def users_status_options_for_select(selected)
+ user_count_by_status = User.group('status').count.to_hash
+ options_for_select([[l(:label_all), ''],
+ ["#{l(:status_active)} (#{user_count_by_status[1].to_i})", '1'],
+ ["#{l(:status_registered)} (#{user_count_by_status[2].to_i})", '2'],
+ ["#{l(:status_locked)} (#{user_count_by_status[3].to_i})", '3']], selected.to_s)
+ end
+
+ def user_mail_notification_options(user)
+ user.valid_notification_options.collect {|o| [l(o.last), o.first]}
+ end
+
+ def textarea_font_options
+ [[l(:label_font_default), '']] + UserPreference::TEXTAREA_FONT_OPTIONS.map {|o| [l("label_font_#{o}"), o]}
+ end
+
+ def change_status_link(user)
+ url = {:controller => 'users', :action => 'update', :id => user, :page => params[:page], :status => params[:status], :tab => nil}
+
+ if user.locked?
+ link_to l(:button_unlock), url.merge(:user => {:status => User::STATUS_ACTIVE}), :method => :put, :class => 'icon icon-unlock'
+ elsif user.registered?
+ link_to l(:button_activate), url.merge(:user => {:status => User::STATUS_ACTIVE}), :method => :put, :class => 'icon icon-unlock'
+ elsif user != User.current
+ link_to l(:button_lock), url.merge(:user => {:status => User::STATUS_LOCKED}), :method => :put, :class => 'icon icon-lock'
+ end
+ end
+
+ def additional_emails_link(user)
+ if user.email_addresses.count > 1 || Setting.max_additional_emails.to_i > 0
+ link_to l(:label_email_address_plural), user_email_addresses_path(@user), :class => 'icon icon-email-add', :remote => true
+ end
+ end
+
+ def user_settings_tabs
+ tabs = [{:name => 'general', :partial => 'users/general', :label => :label_general},
+ {:name => 'memberships', :partial => 'users/memberships', :label => :label_project_plural}
+ ]
+ if Group.givable.any?
+ tabs.insert 1, {:name => 'groups', :partial => 'users/groups', :label => :label_group_plural}
+ end
+ tabs
+ end
+end
diff --git a/app/helpers/versions_helper.rb b/app/helpers/versions_helper.rb
new file mode 100644
index 0000000..fe1fb88
--- /dev/null
+++ b/app/helpers/versions_helper.rb
@@ -0,0 +1,76 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module VersionsHelper
+
+ def version_anchor(version)
+ if @project == version.project
+ anchor version.name
+ else
+ anchor "#{version.project.try(:identifier)}-#{version.name}"
+ end
+ end
+
+ def version_filtered_issues_path(version, options = {})
+ options = {:fixed_version_id => version, :set_filter => 1}.merge(options)
+ project = case version.sharing
+ when 'hierarchy', 'tree'
+ if version.project && version.project.root.visible?
+ version.project.root
+ else
+ version.project
+ end
+ when 'system'
+ nil
+ else
+ version.project
+ end
+
+ if project
+ project_issues_path(project, options)
+ else
+ issues_path(options)
+ end
+ end
+
+ STATUS_BY_CRITERIAS = %w(tracker status priority author assigned_to category)
+
+ def render_issue_status_by(version, criteria)
+ criteria = 'tracker' unless STATUS_BY_CRITERIAS.include?(criteria)
+
+ h = Hash.new {|k,v| k[v] = [0, 0]}
+ begin
+ # Total issue count
+ version.fixed_issues.group(criteria).count.each {|c,s| h[c][0] = s}
+ # Open issues count
+ version.fixed_issues.open.group(criteria).count.each {|c,s| h[c][1] = s}
+ rescue ActiveRecord::RecordNotFound
+ # When grouping by an association, Rails throws this exception if there's no result (bug)
+ end
+ # Sort with nil keys in last position
+ counts = h.keys.sort {|a,b| a.nil? ? 1 : (b.nil? ? -1 : a <=> b)}.collect {|k| {:group => k, :total => h[k][0], :open => h[k][1], :closed => (h[k][0] - h[k][1])}}
+ max = counts.collect {|c| c[:total]}.max
+
+ render :partial => 'issue_counts', :locals => {:version => version, :criteria => criteria, :counts => counts, :max => max}
+ end
+
+ def status_by_options_for_select(value)
+ options_for_select(STATUS_BY_CRITERIAS.collect {|criteria| [l("field_#{criteria}".to_sym), criteria]}, value)
+ end
+end
diff --git a/app/helpers/watchers_helper.rb b/app/helpers/watchers_helper.rb
new file mode 100644
index 0000000..ad8cd59
--- /dev/null
+++ b/app/helpers/watchers_helper.rb
@@ -0,0 +1,80 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module WatchersHelper
+
+ def watcher_link(objects, user)
+ return '' unless user && user.logged?
+ objects = Array.wrap(objects)
+ return '' unless objects.any?
+
+ watched = Watcher.any_watched?(objects, user)
+ css = [watcher_css(objects), watched ? 'icon icon-fav' : 'icon icon-fav-off'].join(' ')
+ text = watched ? l(:button_unwatch) : l(:button_watch)
+ url = watch_path(
+ :object_type => objects.first.class.to_s.underscore,
+ :object_id => (objects.size == 1 ? objects.first.id : objects.map(&:id).sort)
+ )
+ method = watched ? 'delete' : 'post'
+
+ link_to text, url, :remote => true, :method => method, :class => css
+ end
+
+ # Returns the css class used to identify watch links for a given +object+
+ def watcher_css(objects)
+ objects = Array.wrap(objects)
+ id = (objects.size == 1 ? objects.first.id : 'bulk')
+ "#{objects.first.class.to_s.underscore}-#{id}-watcher"
+ end
+
+ # Returns a comma separated list of users watching the given object
+ def watchers_list(object)
+ remove_allowed = User.current.allowed_to?("delete_#{object.class.name.underscore}_watchers".to_sym, object.project)
+ content = ''.html_safe
+ lis = object.watcher_users.preload(:email_address).collect do |user|
+ s = ''.html_safe
+ s << avatar(user, :size => "16").to_s
+ s << link_to_user(user, :class => 'user')
+ if remove_allowed
+ url = {:controller => 'watchers',
+ :action => 'destroy',
+ :object_type => object.class.to_s.underscore,
+ :object_id => object.id,
+ :user_id => user}
+ s << ' '
+ s << link_to(l(:button_delete), url,
+ :remote => true, :method => 'delete',
+ :class => "delete icon-only icon-del",
+ :title => l(:button_delete))
+ end
+ content << content_tag('li', s, :class => "user-#{user.id}")
+ end
+ content.present? ? content_tag('ul', content, :class => 'watchers') : content
+ end
+
+ def watchers_checkboxes(object, users, checked=nil)
+ users.map do |user|
+ c = checked.nil? ? object.watched_by?(user) : checked
+ tag = check_box_tag 'issue[watcher_user_ids][]', user.id, c, :id => nil
+ content_tag 'label', "#{tag} #{h(user)}".html_safe,
+ :id => "issue_watcher_user_ids_#{user.id}",
+ :class => "floating"
+ end.join.html_safe
+ end
+end
diff --git a/app/helpers/welcome_helper.rb b/app/helpers/welcome_helper.rb
new file mode 100644
index 0000000..cc8ab38
--- /dev/null
+++ b/app/helpers/welcome_helper.rb
@@ -0,0 +1,21 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module WelcomeHelper
+end
diff --git a/app/helpers/wiki_helper.rb b/app/helpers/wiki_helper.rb
new file mode 100644
index 0000000..2a49f08
--- /dev/null
+++ b/app/helpers/wiki_helper.rb
@@ -0,0 +1,67 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module WikiHelper
+ include Redmine::Export::PDF::WikiPdfHelper
+
+ def wiki_page_options_for_select(pages, selected = nil, parent = nil, level = 0)
+ pages = pages.group_by(&:parent) unless pages.is_a?(Hash)
+ s = ''.html_safe
+ if pages.has_key?(parent)
+ pages[parent].each do |page|
+ attrs = "value='#{page.id}'"
+ attrs << " selected='selected'" if selected == page
+ indent = (level > 0) ? (' ' * level * 2 + '» ') : ''
+
+ s << content_tag('option', (indent + h(page.pretty_title)).html_safe, :value => page.id.to_s, :selected => selected == page) +
+ wiki_page_options_for_select(pages, selected, page, level + 1)
+ end
+ end
+ s
+ end
+
+ def wiki_page_wiki_options_for_select(page)
+ projects = Project.allowed_to(:rename_wiki_pages).joins(:wiki).preload(:wiki).to_a
+ projects << page.project unless projects.include?(page.project)
+
+ project_tree_options_for_select(projects, :selected => page.project) do |project|
+ wiki_id = project.wiki.try(:id)
+ {:value => wiki_id, :selected => wiki_id == page.wiki_id}
+ end
+ end
+
+ def wiki_page_breadcrumb(page)
+ breadcrumb(page.ancestors.reverse.collect {|parent|
+ link_to(h(parent.pretty_title), {:controller => 'wiki', :action => 'show', :id => parent.title, :project_id => parent.project, :version => nil})
+ })
+ end
+
+ # Returns the path for the Cancel link when editing a wiki page
+ def wiki_page_edit_cancel_path(page)
+ if page.new_record?
+ if parent = page.parent
+ project_wiki_page_path(parent.project, parent.title)
+ else
+ project_wiki_index_path(page.project)
+ end
+ else
+ project_wiki_page_path(page.project, page.title)
+ end
+ end
+end
diff --git a/app/helpers/workflows_helper.rb b/app/helpers/workflows_helper.rb
new file mode 100644
index 0000000..142569e
--- /dev/null
+++ b/app/helpers/workflows_helper.rb
@@ -0,0 +1,95 @@
+# encoding: utf-8
+#
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+module WorkflowsHelper
+ def options_for_workflow_select(name, objects, selected, options={})
+ option_tags = ''.html_safe
+ multiple = false
+ if selected
+ if selected.size == objects.size
+ selected = 'all'
+ else
+ selected = selected.map(&:id)
+ if selected.size > 1
+ multiple = true
+ end
+ end
+ else
+ selected = objects.first.try(:id)
+ end
+ all_tag_options = {:value => 'all', :selected => (selected == 'all')}
+ if multiple
+ all_tag_options.merge!(:style => "display:none;")
+ end
+ option_tags << content_tag('option', l(:label_all), all_tag_options)
+ option_tags << options_from_collection_for_select(objects, "id", "name", selected)
+ select_tag name, option_tags, {:multiple => multiple}.merge(options)
+ end
+
+ def field_required?(field)
+ field.is_a?(CustomField) ? field.is_required? : %w(project_id tracker_id subject priority_id is_private).include?(field)
+ end
+
+ def field_permission_tag(permissions, status, field, roles)
+ name = field.is_a?(CustomField) ? field.id.to_s : field
+ options = [["", ""], [l(:label_readonly), "readonly"]]
+ options << [l(:label_required), "required"] unless field_required?(field)
+ html_options = {}
+
+ if perm = permissions[status.id][name]
+ if perm.uniq.size > 1 || perm.size < @roles.size * @trackers.size
+ options << [l(:label_no_change_option), "no_change"]
+ selected = 'no_change'
+ else
+ selected = perm.first
+ end
+ end
+
+ hidden = field.is_a?(CustomField) &&
+ !field.visible? &&
+ !roles.detect {|role| role.custom_fields.to_a.include?(field)}
+
+ if hidden
+ options[0][0] = l(:label_hidden)
+ selected = ''
+ html_options[:disabled] = true
+ end
+
+ select_tag("permissions[#{status.id}][#{name}]", options_for_select(options, selected), html_options)
+ end
+
+ def transition_tag(workflows, old_status, new_status, name)
+ w = workflows.select {|w| w.old_status == old_status && w.new_status == new_status}.size
+
+ tag_name = "transitions[#{ old_status.try(:id) || 0 }][#{new_status.id}][#{name}]"
+ if w == 0 || w == @roles.size * @trackers.size
+
+ hidden_field_tag(tag_name, "0", :id => nil) +
+ check_box_tag(tag_name, "1", w != 0,
+ :class => "old-status-#{old_status.try(:id) || 0} new-status-#{new_status.id}")
+ else
+ select_tag tag_name,
+ options_for_select([
+ [l(:general_text_Yes), "1"],
+ [l(:general_text_No), "0"],
+ [l(:label_no_change_option), "no_change"]
+ ], "no_change")
+ end
+ end
+end
diff --git a/app/models/attachment.rb b/app/models/attachment.rb
new file mode 100644
index 0000000..64ac2c2
--- /dev/null
+++ b/app/models/attachment.rb
@@ -0,0 +1,492 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require "digest"
+require "fileutils"
+
+class Attachment < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ belongs_to :container, :polymorphic => true
+ belongs_to :author, :class_name => "User"
+
+ validates_presence_of :filename, :author
+ validates_length_of :filename, :maximum => 255
+ validates_length_of :disk_filename, :maximum => 255
+ validates_length_of :description, :maximum => 255
+ validate :validate_max_file_size, :validate_file_extension
+ attr_protected :id
+
+ acts_as_event :title => :filename,
+ :url => Proc.new {|o| {:controller => 'attachments', :action => 'show', :id => o.id, :filename => o.filename}}
+
+ acts_as_activity_provider :type => 'files',
+ :permission => :view_files,
+ :author_key => :author_id,
+ :scope => select("#{Attachment.table_name}.*").
+ joins("LEFT JOIN #{Version.table_name} ON #{Attachment.table_name}.container_type='Version' AND #{Version.table_name}.id = #{Attachment.table_name}.container_id " +
+ "LEFT JOIN #{Project.table_name} ON #{Version.table_name}.project_id = #{Project.table_name}.id OR ( #{Attachment.table_name}.container_type='Project' AND #{Attachment.table_name}.container_id = #{Project.table_name}.id )")
+
+ acts_as_activity_provider :type => 'documents',
+ :permission => :view_documents,
+ :author_key => :author_id,
+ :scope => select("#{Attachment.table_name}.*").
+ joins("LEFT JOIN #{Document.table_name} ON #{Attachment.table_name}.container_type='Document' AND #{Document.table_name}.id = #{Attachment.table_name}.container_id " +
+ "LEFT JOIN #{Project.table_name} ON #{Document.table_name}.project_id = #{Project.table_name}.id")
+
+ cattr_accessor :storage_path
+ @@storage_path = Redmine::Configuration['attachments_storage_path'] || File.join(Rails.root, "files")
+
+ cattr_accessor :thumbnails_storage_path
+ @@thumbnails_storage_path = File.join(Rails.root, "tmp", "thumbnails")
+
+ before_create :files_to_final_location
+ after_rollback :delete_from_disk, :on => :create
+ after_commit :delete_from_disk, :on => :destroy
+ after_commit :reuse_existing_file_if_possible, :on => :create
+
+ safe_attributes 'filename', 'content_type', 'description'
+
+ # Returns an unsaved copy of the attachment
+ def copy(attributes=nil)
+ copy = self.class.new
+ copy.attributes = self.attributes.dup.except("id", "downloads")
+ copy.attributes = attributes if attributes
+ copy
+ end
+
+ def validate_max_file_size
+ if @temp_file && self.filesize > Setting.attachment_max_size.to_i.kilobytes
+ errors.add(:base, l(:error_attachment_too_big, :max_size => Setting.attachment_max_size.to_i.kilobytes))
+ end
+ end
+
+ def validate_file_extension
+ if @temp_file
+ extension = File.extname(filename)
+ unless self.class.valid_extension?(extension)
+ errors.add(:base, l(:error_attachment_extension_not_allowed, :extension => extension))
+ end
+ end
+ end
+
+ def file=(incoming_file)
+ unless incoming_file.nil?
+ @temp_file = incoming_file
+ if @temp_file.respond_to?(:original_filename)
+ self.filename = @temp_file.original_filename
+ self.filename.force_encoding("UTF-8")
+ end
+ if @temp_file.respond_to?(:content_type)
+ self.content_type = @temp_file.content_type.to_s.chomp
+ end
+ self.filesize = @temp_file.size
+ end
+ end
+
+ def file
+ nil
+ end
+
+ def filename=(arg)
+ write_attribute :filename, sanitize_filename(arg.to_s)
+ filename
+ end
+
+ # Copies the temporary file to its final location
+ # and computes its MD5 hash
+ def files_to_final_location
+ if @temp_file
+ self.disk_directory = target_directory
+ self.disk_filename = Attachment.disk_filename(filename, disk_directory)
+ logger.info("Saving attachment '#{self.diskfile}' (#{@temp_file.size} bytes)") if logger
+ path = File.dirname(diskfile)
+ unless File.directory?(path)
+ FileUtils.mkdir_p(path)
+ end
+ sha = Digest::SHA256.new
+ File.open(diskfile, "wb") do |f|
+ if @temp_file.respond_to?(:read)
+ buffer = ""
+ while (buffer = @temp_file.read(8192))
+ f.write(buffer)
+ sha.update(buffer)
+ end
+ else
+ f.write(@temp_file)
+ sha.update(@temp_file)
+ end
+ end
+ self.digest = sha.hexdigest
+ end
+ @temp_file = nil
+
+ if content_type.blank? && filename.present?
+ self.content_type = Redmine::MimeType.of(filename)
+ end
+ # Don't save the content type if it's longer than the authorized length
+ if self.content_type && self.content_type.length > 255
+ self.content_type = nil
+ end
+ end
+
+ # Deletes the file from the file system if it's not referenced by other attachments
+ def delete_from_disk
+ if Attachment.where("disk_filename = ? AND id <> ?", disk_filename, id).empty?
+ delete_from_disk!
+ end
+ end
+
+ # Returns file's location on disk
+ def diskfile
+ File.join(self.class.storage_path, disk_directory.to_s, disk_filename.to_s)
+ end
+
+ def title
+ title = filename.dup
+ if description.present?
+ title << " (#{description})"
+ end
+ title
+ end
+
+ def increment_download
+ increment!(:downloads)
+ end
+
+ def project
+ container.try(:project)
+ end
+
+ def visible?(user=User.current)
+ if container_id
+ container && container.attachments_visible?(user)
+ else
+ author == user
+ end
+ end
+
+ def editable?(user=User.current)
+ if container_id
+ container && container.attachments_editable?(user)
+ else
+ author == user
+ end
+ end
+
+ def deletable?(user=User.current)
+ if container_id
+ container && container.attachments_deletable?(user)
+ else
+ author == user
+ end
+ end
+
+ def image?
+ !!(self.filename =~ /\.(bmp|gif|jpg|jpe|jpeg|png)$/i)
+ end
+
+ def thumbnailable?
+ image?
+ end
+
+ # Returns the full path the attachment thumbnail, or nil
+ # if the thumbnail cannot be generated.
+ def thumbnail(options={})
+ if thumbnailable? && readable?
+ size = options[:size].to_i
+ if size > 0
+ # Limit the number of thumbnails per image
+ size = (size / 50) * 50
+ # Maximum thumbnail size
+ size = 800 if size > 800
+ else
+ size = Setting.thumbnails_size.to_i
+ end
+ size = 100 unless size > 0
+ target = File.join(self.class.thumbnails_storage_path, "#{id}_#{digest}_#{size}.thumb")
+
+ begin
+ Redmine::Thumbnail.generate(self.diskfile, target, size)
+ rescue => e
+ logger.error "An error occured while generating thumbnail for #{disk_filename} to #{target}\nException was: #{e.message}" if logger
+ return nil
+ end
+ end
+ end
+
+ # Deletes all thumbnails
+ def self.clear_thumbnails
+ Dir.glob(File.join(thumbnails_storage_path, "*.thumb")).each do |file|
+ File.delete file
+ end
+ end
+
+ def is_text?
+ Redmine::MimeType.is_type?('text', filename)
+ end
+
+ def is_image?
+ Redmine::MimeType.is_type?('image', filename)
+ end
+
+ def is_diff?
+ self.filename =~ /\.(patch|diff)$/i
+ end
+
+ def is_pdf?
+ Redmine::MimeType.of(filename) == "application/pdf"
+ end
+
+ def previewable?
+ is_text? || is_image?
+ end
+
+ # Returns true if the file is readable
+ def readable?
+ disk_filename.present? && File.readable?(diskfile)
+ end
+
+ # Returns the attachment token
+ def token
+ "#{id}.#{digest}"
+ end
+
+ # Finds an attachment that matches the given token and that has no container
+ def self.find_by_token(token)
+ if token.to_s =~ /^(\d+)\.([0-9a-f]+)$/
+ attachment_id, attachment_digest = $1, $2
+ attachment = Attachment.where(:id => attachment_id, :digest => attachment_digest).first
+ if attachment && attachment.container.nil?
+ attachment
+ end
+ end
+ end
+
+ # Bulk attaches a set of files to an object
+ #
+ # Returns a Hash of the results:
+ # :files => array of the attached files
+ # :unsaved => array of the files that could not be attached
+ def self.attach_files(obj, attachments)
+ result = obj.save_attachments(attachments, User.current)
+ obj.attach_saved_attachments
+ result
+ end
+
+ # Updates the filename and description of a set of attachments
+ # with the given hash of attributes. Returns true if all
+ # attachments were updated.
+ #
+ # Example:
+ # Attachment.update_attachments(attachments, {
+ # 4 => {:filename => 'foo'},
+ # 7 => {:filename => 'bar', :description => 'file description'}
+ # })
+ #
+ def self.update_attachments(attachments, params)
+ params = params.transform_keys {|key| key.to_i}
+
+ saved = true
+ transaction do
+ attachments.each do |attachment|
+ if p = params[attachment.id]
+ attachment.filename = p[:filename] if p.key?(:filename)
+ attachment.description = p[:description] if p.key?(:description)
+ saved &&= attachment.save
+ end
+ end
+ unless saved
+ raise ActiveRecord::Rollback
+ end
+ end
+ saved
+ end
+
+ def self.latest_attach(attachments, filename)
+ attachments.sort_by(&:created_on).reverse.detect do |att|
+ filename.casecmp(att.filename) == 0
+ end
+ end
+
+ def self.prune(age=1.day)
+ Attachment.where("created_on < ? AND (container_type IS NULL OR container_type = '')", Time.now - age).destroy_all
+ end
+
+ # Moves an existing attachment to its target directory
+ def move_to_target_directory!
+ return unless !new_record? & readable?
+
+ src = diskfile
+ self.disk_directory = target_directory
+ dest = diskfile
+
+ return if src == dest
+
+ if !FileUtils.mkdir_p(File.dirname(dest))
+ logger.error "Could not create directory #{File.dirname(dest)}" if logger
+ return
+ end
+
+ if !FileUtils.mv(src, dest)
+ logger.error "Could not move attachment from #{src} to #{dest}" if logger
+ return
+ end
+
+ update_column :disk_directory, disk_directory
+ end
+
+ # Moves existing attachments that are stored at the root of the files
+ # directory (ie. created before Redmine 2.3) to their target subdirectories
+ def self.move_from_root_to_target_directory
+ Attachment.where("disk_directory IS NULL OR disk_directory = ''").find_each do |attachment|
+ attachment.move_to_target_directory!
+ end
+ end
+
+ # Updates digests to SHA256 for all attachments that have a MD5 digest
+ # (ie. created before Redmine 3.4)
+ def self.update_digests_to_sha256
+ Attachment.where("length(digest) < 64").find_each do |attachment|
+ attachment.update_digest_to_sha256!
+ end
+ end
+
+ # Updates attachment digest to SHA256
+ def update_digest_to_sha256!
+ if readable?
+ sha = Digest::SHA256.new
+ File.open(diskfile, 'rb') do |f|
+ while buffer = f.read(8192)
+ sha.update(buffer)
+ end
+ end
+ update_column :digest, sha.hexdigest
+ end
+ end
+
+ # Returns true if the extension is allowed regarding allowed/denied
+ # extensions defined in application settings, otherwise false
+ def self.valid_extension?(extension)
+ denied, allowed = [:attachment_extensions_denied, :attachment_extensions_allowed].map do |setting|
+ Setting.send(setting)
+ end
+ if denied.present? && extension_in?(extension, denied)
+ return false
+ end
+ if allowed.present? && !extension_in?(extension, allowed)
+ return false
+ end
+ true
+ end
+
+ # Returns true if extension belongs to extensions list.
+ def self.extension_in?(extension, extensions)
+ extension = extension.downcase.sub(/\A\.+/, '')
+
+ unless extensions.is_a?(Array)
+ extensions = extensions.to_s.split(",").map(&:strip)
+ end
+ extensions = extensions.map {|s| s.downcase.sub(/\A\.+/, '')}.reject(&:blank?)
+ extensions.include?(extension)
+ end
+
+ # Returns true if attachment's extension belongs to extensions list.
+ def extension_in?(extensions)
+ self.class.extension_in?(File.extname(filename), extensions)
+ end
+
+ # returns either MD5 or SHA256 depending on the way self.digest was computed
+ def digest_type
+ digest.size < 64 ? "MD5" : "SHA256" if digest.present?
+ end
+
+ private
+
+ def reuse_existing_file_if_possible
+ original_diskfile = nil
+
+ reused = with_lock do
+ if existing = Attachment
+ .where(digest: self.digest, filesize: self.filesize)
+ .where('id <> ? and disk_filename <> ?',
+ self.id, self.disk_filename)
+ .first
+ existing.with_lock do
+
+ original_diskfile = self.diskfile
+ existing_diskfile = existing.diskfile
+
+ if File.readable?(original_diskfile) &&
+ File.readable?(existing_diskfile) &&
+ FileUtils.identical?(original_diskfile, existing_diskfile)
+
+ self.update_columns disk_directory: existing.disk_directory,
+ disk_filename: existing.disk_filename
+ end
+ end
+ end
+ end
+ if reused
+ File.delete(original_diskfile)
+ end
+ rescue ActiveRecord::StatementInvalid, ActiveRecord::RecordNotFound
+ # Catch and ignore lock errors. It is not critical if deduplication does
+ # not happen, therefore we do not retry.
+ # with_lock throws ActiveRecord::RecordNotFound if the record isnt there
+ # anymore, thats why this is caught and ignored as well.
+ end
+
+
+ # Physically deletes the file from the file system
+ def delete_from_disk!
+ if disk_filename.present? && File.exist?(diskfile)
+ File.delete(diskfile)
+ end
+ end
+
+ def sanitize_filename(value)
+ # get only the filename, not the whole path
+ just_filename = value.gsub(/\A.*(\\|\/)/m, '')
+
+ # Finally, replace invalid characters with underscore
+ just_filename.gsub(/[\/\?\%\*\:\|\"\'<>\n\r]+/, '_')
+ end
+
+ # Returns the subdirectory in which the attachment will be saved
+ def target_directory
+ time = created_on || DateTime.now
+ time.strftime("%Y/%m")
+ end
+
+ # Returns an ASCII or hashed filename that do not
+ # exists yet in the given subdirectory
+ def self.disk_filename(filename, directory=nil)
+ timestamp = DateTime.now.strftime("%y%m%d%H%M%S")
+ ascii = ''
+ if filename =~ %r{^[a-zA-Z0-9_\.\-]*$} && filename.length <= 50
+ ascii = filename
+ else
+ ascii = Digest::MD5.hexdigest(filename)
+ # keep the extension if any
+ ascii << $1 if filename =~ %r{(\.[a-zA-Z0-9]+)$}
+ end
+ while File.exist?(File.join(storage_path, directory.to_s, "#{timestamp}_#{ascii}"))
+ timestamp.succ!
+ end
+ "#{timestamp}_#{ascii}"
+ end
+end
diff --git a/app/models/auth_source.rb b/app/models/auth_source.rb
new file mode 100644
index 0000000..4954c96
--- /dev/null
+++ b/app/models/auth_source.rb
@@ -0,0 +1,109 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+# Generic exception for when the AuthSource can not be reached
+# (eg. can not connect to the LDAP)
+class AuthSourceException < Exception; end
+class AuthSourceTimeoutException < AuthSourceException; end
+
+class AuthSource < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ include Redmine::SubclassFactory
+ include Redmine::Ciphering
+
+ has_many :users
+
+ validates_presence_of :name
+ validates_uniqueness_of :name
+ validates_length_of :name, :maximum => 60
+ attr_protected :id
+
+ safe_attributes 'name',
+ 'host',
+ 'port',
+ 'account',
+ 'account_password',
+ 'base_dn',
+ 'attr_login',
+ 'attr_firstname',
+ 'attr_lastname',
+ 'attr_mail',
+ 'onthefly_register',
+ 'tls',
+ 'filter',
+ 'timeout'
+
+ def authenticate(login, password)
+ end
+
+ def test_connection
+ end
+
+ def auth_method_name
+ "Abstract"
+ end
+
+ def account_password
+ read_ciphered_attribute(:account_password)
+ end
+
+ def account_password=(arg)
+ write_ciphered_attribute(:account_password, arg)
+ end
+
+ def searchable?
+ false
+ end
+
+ def self.search(q)
+ results = []
+ AuthSource.all.each do |source|
+ begin
+ if source.searchable?
+ results += source.search(q)
+ end
+ rescue AuthSourceException => e
+ logger.error "Error while searching users in #{source.name}: #{e.message}"
+ end
+ end
+ results
+ end
+
+ def allow_password_changes?
+ self.class.allow_password_changes?
+ end
+
+ # Does this auth source backend allow password changes?
+ def self.allow_password_changes?
+ false
+ end
+
+ # Try to authenticate a user not yet registered against available sources
+ def self.authenticate(login, password)
+ AuthSource.where(:onthefly_register => true).each do |source|
+ begin
+ logger.debug "Authenticating '#{login}' against '#{source.name}'" if logger && logger.debug?
+ attrs = source.authenticate(login, password)
+ rescue => e
+ logger.error "Error during authentication: #{e.message}"
+ attrs = nil
+ end
+ return attrs if attrs
+ end
+ return nil
+ end
+end
diff --git a/app/models/auth_source_ldap.rb b/app/models/auth_source_ldap.rb
new file mode 100644
index 0000000..c3565aa
--- /dev/null
+++ b/app/models/auth_source_ldap.rb
@@ -0,0 +1,209 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'net/ldap'
+require 'net/ldap/dn'
+require 'timeout'
+
+class AuthSourceLdap < AuthSource
+ NETWORK_EXCEPTIONS = [
+ Net::LDAP::LdapError,
+ Errno::ECONNABORTED, Errno::ECONNREFUSED, Errno::ECONNRESET,
+ Errno::EHOSTDOWN, Errno::EHOSTUNREACH,
+ SocketError
+ ]
+
+ validates_presence_of :host, :port, :attr_login
+ validates_length_of :name, :host, :maximum => 60, :allow_nil => true
+ validates_length_of :account, :account_password, :base_dn, :maximum => 255, :allow_blank => true
+ validates_length_of :attr_login, :attr_firstname, :attr_lastname, :attr_mail, :maximum => 30, :allow_nil => true
+ validates_numericality_of :port, :only_integer => true
+ validates_numericality_of :timeout, :only_integer => true, :allow_blank => true
+ validate :validate_filter
+
+ before_validation :strip_ldap_attributes
+
+ def initialize(attributes=nil, *args)
+ super
+ self.port = 389 if self.port == 0
+ end
+
+ def authenticate(login, password)
+ return nil if login.blank? || password.blank?
+
+ with_timeout do
+ attrs = get_user_dn(login, password)
+ if attrs && attrs[:dn] && authenticate_dn(attrs[:dn], password)
+ logger.debug "Authentication successful for '#{login}'" if logger && logger.debug?
+ return attrs.except(:dn)
+ end
+ end
+ rescue *NETWORK_EXCEPTIONS => e
+ raise AuthSourceException.new(e.message)
+ end
+
+ # Test the connection to the LDAP
+ def test_connection
+ with_timeout do
+ ldap_con = initialize_ldap_con(self.account, self.account_password)
+ ldap_con.open { }
+
+ if self.account.present? && !self.account.include?("$login") && self.account_password.present?
+ ldap_auth = authenticate_dn(self.account, self.account_password)
+ raise AuthSourceException.new(l(:error_ldap_bind_credentials)) if !ldap_auth
+ end
+ end
+ rescue *NETWORK_EXCEPTIONS => e
+ raise AuthSourceException.new(e.message)
+ end
+
+ def auth_method_name
+ "LDAP"
+ end
+
+ # Returns true if this source can be searched for users
+ def searchable?
+ !account.to_s.include?("$login") && %w(login firstname lastname mail).all? {|a| send("attr_#{a}?")}
+ end
+
+ # Searches the source for users and returns an array of results
+ def search(q)
+ q = q.to_s.strip
+ return [] unless searchable? && q.present?
+
+ results = []
+ search_filter = base_filter & Net::LDAP::Filter.begins(self.attr_login, q)
+ ldap_con = initialize_ldap_con(self.account, self.account_password)
+ ldap_con.search(:base => self.base_dn,
+ :filter => search_filter,
+ :attributes => ['dn', self.attr_login, self.attr_firstname, self.attr_lastname, self.attr_mail],
+ :size => 10) do |entry|
+ attrs = get_user_attributes_from_ldap_entry(entry)
+ attrs[:login] = AuthSourceLdap.get_attr(entry, self.attr_login)
+ results << attrs
+ end
+ results
+ rescue *NETWORK_EXCEPTIONS => e
+ raise AuthSourceException.new(e.message)
+ end
+
+ private
+
+ def with_timeout(&block)
+ timeout = self.timeout
+ timeout = 20 unless timeout && timeout > 0
+ Timeout.timeout(timeout) do
+ return yield
+ end
+ rescue Timeout::Error => e
+ raise AuthSourceTimeoutException.new(e.message)
+ end
+
+ def ldap_filter
+ if filter.present?
+ Net::LDAP::Filter.construct(filter)
+ end
+ rescue Net::LDAP::LdapError, Net::LDAP::FilterSyntaxInvalidError
+ nil
+ end
+
+ def base_filter
+ filter = Net::LDAP::Filter.eq("objectClass", "*")
+ if f = ldap_filter
+ filter = filter & f
+ end
+ filter
+ end
+
+ def validate_filter
+ if filter.present? && ldap_filter.nil?
+ errors.add(:filter, :invalid)
+ end
+ end
+
+ def strip_ldap_attributes
+ [:attr_login, :attr_firstname, :attr_lastname, :attr_mail].each do |attr|
+ write_attribute(attr, read_attribute(attr).strip) unless read_attribute(attr).nil?
+ end
+ end
+
+ def initialize_ldap_con(ldap_user, ldap_password)
+ options = { :host => self.host,
+ :port => self.port,
+ :encryption => (self.tls ? :simple_tls : nil)
+ }
+ options.merge!(:auth => { :method => :simple, :username => ldap_user, :password => ldap_password }) unless ldap_user.blank? && ldap_password.blank?
+ Net::LDAP.new options
+ end
+
+ def get_user_attributes_from_ldap_entry(entry)
+ {
+ :dn => entry.dn,
+ :firstname => AuthSourceLdap.get_attr(entry, self.attr_firstname),
+ :lastname => AuthSourceLdap.get_attr(entry, self.attr_lastname),
+ :mail => AuthSourceLdap.get_attr(entry, self.attr_mail),
+ :auth_source_id => self.id
+ }
+ end
+
+ # Return the attributes needed for the LDAP search. It will only
+ # include the user attributes if on-the-fly registration is enabled
+ def search_attributes
+ if onthefly_register?
+ ['dn', self.attr_firstname, self.attr_lastname, self.attr_mail]
+ else
+ ['dn']
+ end
+ end
+
+ # Check if a DN (user record) authenticates with the password
+ def authenticate_dn(dn, password)
+ if dn.present? && password.present?
+ initialize_ldap_con(dn, password).bind
+ end
+ end
+
+ # Get the user's dn and any attributes for them, given their login
+ def get_user_dn(login, password)
+ ldap_con = nil
+ if self.account && self.account.include?("$login")
+ ldap_con = initialize_ldap_con(self.account.sub("$login", Net::LDAP::DN.escape(login)), password)
+ else
+ ldap_con = initialize_ldap_con(self.account, self.account_password)
+ end
+ attrs = {}
+ search_filter = base_filter & Net::LDAP::Filter.eq(self.attr_login, login)
+ ldap_con.search( :base => self.base_dn,
+ :filter => search_filter,
+ :attributes=> search_attributes) do |entry|
+ if onthefly_register?
+ attrs = get_user_attributes_from_ldap_entry(entry)
+ else
+ attrs = {:dn => entry.dn}
+ end
+ logger.debug "DN found for #{login}: #{attrs[:dn]}" if logger && logger.debug?
+ end
+ attrs
+ end
+
+ def self.get_attr(entry, attr_name)
+ if !attr_name.blank?
+ value = entry[attr_name].is_a?(Array) ? entry[attr_name].first : entry[attr_name]
+ value.to_s.force_encoding('UTF-8')
+ end
+ end
+end
diff --git a/app/models/board.rb b/app/models/board.rb
new file mode 100644
index 0000000..21461e3
--- /dev/null
+++ b/app/models/board.rb
@@ -0,0 +1,96 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Board < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ belongs_to :project
+ has_many :messages, lambda {order("#{Message.table_name}.created_on DESC")}, :dependent => :destroy
+ belongs_to :last_message, :class_name => 'Message'
+ acts_as_tree :dependent => :nullify
+ acts_as_positioned :scope => [:project_id, :parent_id]
+ acts_as_watchable
+
+ validates_presence_of :name, :description
+ validates_length_of :name, :maximum => 30
+ validates_length_of :description, :maximum => 255
+ validate :validate_board
+ attr_protected :id
+
+ scope :visible, lambda {|*args|
+ joins(:project).
+ where(Project.allowed_to_condition(args.shift || User.current, :view_messages, *args))
+ }
+
+ safe_attributes 'name', 'description', 'parent_id', 'position'
+
+ def visible?(user=User.current)
+ !user.nil? && user.allowed_to?(:view_messages, project)
+ end
+
+ def reload(*args)
+ @valid_parents = nil
+ super
+ end
+
+ def to_s
+ name
+ end
+
+ # Returns a scope for the board topics (messages without parent)
+ def topics
+ messages.where(:parent_id => nil)
+ end
+
+ def valid_parents
+ @valid_parents ||= project.boards - self_and_descendants
+ end
+
+ def reset_counters!
+ self.class.reset_counters!(id)
+ end
+
+ # Updates topics_count, messages_count and last_message_id attributes for +board_id+
+ def self.reset_counters!(board_id)
+ board_id = board_id.to_i
+ Board.where(:id => board_id).
+ update_all(["topics_count = (SELECT COUNT(*) FROM #{Message.table_name} WHERE board_id=:id AND parent_id IS NULL)," +
+ " messages_count = (SELECT COUNT(*) FROM #{Message.table_name} WHERE board_id=:id)," +
+ " last_message_id = (SELECT MAX(id) FROM #{Message.table_name} WHERE board_id=:id)", :id => board_id])
+ end
+
+ def self.board_tree(boards, parent_id=nil, level=0)
+ tree = []
+ boards.select {|board| board.parent_id == parent_id}.sort_by(&:position).each do |board|
+ tree << [board, level]
+ tree += board_tree(boards, board.id, level+1)
+ end
+ if block_given?
+ tree.each do |board, level|
+ yield board, level
+ end
+ end
+ tree
+ end
+
+ protected
+
+ def validate_board
+ if parent_id && parent_id_changed?
+ errors.add(:parent_id, :invalid) unless valid_parents.include?(parent)
+ end
+ end
+end
diff --git a/app/models/change.rb b/app/models/change.rb
new file mode 100644
index 0000000..e0d25f3
--- /dev/null
+++ b/app/models/change.rb
@@ -0,0 +1,34 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Change < ActiveRecord::Base
+ belongs_to :changeset
+
+ validates_presence_of :changeset_id, :action, :path
+ before_save :init_path
+ before_validation :replace_invalid_utf8_of_path
+ attr_protected :id
+
+ def replace_invalid_utf8_of_path
+ self.path = Redmine::CodesetUtil.replace_invalid_utf8(self.path)
+ self.from_path = Redmine::CodesetUtil.replace_invalid_utf8(self.from_path)
+ end
+
+ def init_path
+ self.path ||= ""
+ end
+end
diff --git a/app/models/changeset.rb b/app/models/changeset.rb
new file mode 100644
index 0000000..4256f05
--- /dev/null
+++ b/app/models/changeset.rb
@@ -0,0 +1,296 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Changeset < ActiveRecord::Base
+ belongs_to :repository
+ belongs_to :user
+ has_many :filechanges, :class_name => 'Change', :dependent => :delete_all
+ has_and_belongs_to_many :issues
+ has_and_belongs_to_many :parents,
+ :class_name => "Changeset",
+ :join_table => "#{table_name_prefix}changeset_parents#{table_name_suffix}",
+ :association_foreign_key => 'parent_id', :foreign_key => 'changeset_id'
+ has_and_belongs_to_many :children,
+ :class_name => "Changeset",
+ :join_table => "#{table_name_prefix}changeset_parents#{table_name_suffix}",
+ :association_foreign_key => 'changeset_id', :foreign_key => 'parent_id'
+
+ acts_as_event :title => Proc.new {|o| o.title},
+ :description => :long_comments,
+ :datetime => :committed_on,
+ :url => Proc.new {|o| {:controller => 'repositories', :action => 'revision', :id => o.repository.project, :repository_id => o.repository.identifier_param, :rev => o.identifier}}
+
+ acts_as_searchable :columns => 'comments',
+ :preload => {:repository => :project},
+ :project_key => "#{Repository.table_name}.project_id",
+ :date_column => :committed_on
+
+ acts_as_activity_provider :timestamp => "#{table_name}.committed_on",
+ :author_key => :user_id,
+ :scope => preload(:user, {:repository => :project})
+
+ validates_presence_of :repository_id, :revision, :committed_on, :commit_date
+ validates_uniqueness_of :revision, :scope => :repository_id
+ validates_uniqueness_of :scmid, :scope => :repository_id, :allow_nil => true
+ attr_protected :id
+
+ scope :visible, lambda {|*args|
+ joins(:repository => :project).
+ where(Project.allowed_to_condition(args.shift || User.current, :view_changesets, *args))
+ }
+
+ after_create :scan_for_issues
+ before_create :before_create_cs
+
+ def revision=(r)
+ write_attribute :revision, (r.nil? ? nil : r.to_s)
+ end
+
+ # Returns the identifier of this changeset; depending on repository backends
+ def identifier
+ if repository.class.respond_to? :changeset_identifier
+ repository.class.changeset_identifier self
+ else
+ revision.to_s
+ end
+ end
+
+ def committed_on=(date)
+ self.commit_date = date
+ super
+ end
+
+ # Returns the readable identifier
+ def format_identifier
+ if repository.class.respond_to? :format_changeset_identifier
+ repository.class.format_changeset_identifier self
+ else
+ identifier
+ end
+ end
+
+ def project
+ repository.project
+ end
+
+ def author
+ user || committer.to_s.split('<').first
+ end
+
+ def before_create_cs
+ self.committer = self.class.to_utf8(self.committer, repository.repo_log_encoding)
+ self.comments = self.class.normalize_comments(
+ self.comments, repository.repo_log_encoding)
+ self.user = repository.find_committer_user(self.committer)
+ end
+
+ def scan_for_issues
+ scan_comment_for_issue_ids
+ end
+
+ TIMELOG_RE = /
+ (
+ ((\d+)(h|hours?))((\d+)(m|min)?)?
+ |
+ ((\d+)(h|hours?|m|min))
+ |
+ (\d+):(\d+)
+ |
+ (\d+([\.,]\d+)?)h?
+ )
+ /x
+
+ def scan_comment_for_issue_ids
+ return if comments.blank?
+ # keywords used to reference issues
+ ref_keywords = Setting.commit_ref_keywords.downcase.split(",").collect(&:strip)
+ ref_keywords_any = ref_keywords.delete('*')
+ # keywords used to fix issues
+ fix_keywords = Setting.commit_update_keywords_array.map {|r| r['keywords']}.flatten.compact
+
+ kw_regexp = (ref_keywords + fix_keywords).collect{|kw| Regexp.escape(kw)}.join("|")
+
+ referenced_issues = []
+
+ comments.scan(/([\s\(\[,-]|^)((#{kw_regexp})[\s:]+)?(#\d+(\s+@#{TIMELOG_RE})?([\s,;&]+#\d+(\s+@#{TIMELOG_RE})?)*)(?=[[:punct:]]|\s|<|$)/i) do |match|
+ action, refs = match[2].to_s.downcase, match[3]
+ next unless action.present? || ref_keywords_any
+
+ refs.scan(/#(\d+)(\s+@#{TIMELOG_RE})?/).each do |m|
+ issue, hours = find_referenced_issue_by_id(m[0].to_i), m[2]
+ if issue && !issue_linked_to_same_commit?(issue)
+ referenced_issues << issue
+ # Don't update issues or log time when importing old commits
+ unless repository.created_on && committed_on && committed_on < repository.created_on
+ fix_issue(issue, action) if fix_keywords.include?(action)
+ log_time(issue, hours) if hours && Setting.commit_logtime_enabled?
+ end
+ end
+ end
+ end
+
+ referenced_issues.uniq!
+ self.issues = referenced_issues unless referenced_issues.empty?
+ end
+
+ def short_comments
+ @short_comments || split_comments.first
+ end
+
+ def long_comments
+ @long_comments || split_comments.last
+ end
+
+ def text_tag(ref_project=nil)
+ repo = ""
+ if repository && repository.identifier.present?
+ repo = "#{repository.identifier}|"
+ end
+ tag = if scmid?
+ "commit:#{repo}#{scmid}"
+ else
+ "#{repo}r#{revision}"
+ end
+ if ref_project && project && ref_project != project
+ tag = "#{project.identifier}:#{tag}"
+ end
+ tag
+ end
+
+ # Returns the title used for the changeset in the activity/search results
+ def title
+ repo = (repository && repository.identifier.present?) ? " (#{repository.identifier})" : ''
+ comm = short_comments.blank? ? '' : (': ' + short_comments)
+ "#{l(:label_revision)} #{format_identifier}#{repo}#{comm}"
+ end
+
+ # Returns the previous changeset
+ def previous
+ @previous ||= Changeset.where(["id < ? AND repository_id = ?", id, repository_id]).order('id DESC').first
+ end
+
+ # Returns the next changeset
+ def next
+ @next ||= Changeset.where(["id > ? AND repository_id = ?", id, repository_id]).order('id ASC').first
+ end
+
+ # Creates a new Change from it's common parameters
+ def create_change(change)
+ Change.create(:changeset => self,
+ :action => change[:action],
+ :path => change[:path],
+ :from_path => change[:from_path],
+ :from_revision => change[:from_revision])
+ end
+
+ # Finds an issue that can be referenced by the commit message
+ def find_referenced_issue_by_id(id)
+ return nil if id.blank?
+ issue = Issue.find_by_id(id.to_i)
+ if Setting.commit_cross_project_ref?
+ # all issues can be referenced/fixed
+ elsif issue
+ # issue that belong to the repository project, a subproject or a parent project only
+ unless issue.project &&
+ (project == issue.project || project.is_ancestor_of?(issue.project) ||
+ project.is_descendant_of?(issue.project))
+ issue = nil
+ end
+ end
+ issue
+ end
+
+ private
+
+ # Returns true if the issue is already linked to the same commit
+ # from a different repository
+ def issue_linked_to_same_commit?(issue)
+ repository.same_commits_in_scope(issue.changesets, self).any?
+ end
+
+ # Updates the +issue+ according to +action+
+ def fix_issue(issue, action)
+ # the issue may have been updated by the closure of another one (eg. duplicate)
+ issue.reload
+ # don't change the status is the issue is closed
+ return if issue.closed?
+
+ journal = issue.init_journal(user || User.anonymous,
+ ll(Setting.default_language,
+ :text_status_changed_by_changeset,
+ text_tag(issue.project)))
+ rule = Setting.commit_update_keywords_array.detect do |rule|
+ rule['keywords'].include?(action) &&
+ (rule['if_tracker_id'].blank? || rule['if_tracker_id'] == issue.tracker_id.to_s)
+ end
+ if rule
+ issue.assign_attributes rule.slice(*Issue.attribute_names)
+ end
+ Redmine::Hook.call_hook(:model_changeset_scan_commit_for_issue_ids_pre_issue_update,
+ { :changeset => self, :issue => issue, :action => action })
+
+ if issue.changes.any?
+ unless issue.save
+ logger.warn("Issue ##{issue.id} could not be saved by changeset #{id}: #{issue.errors.full_messages}") if logger
+ end
+ else
+ issue.clear_journal
+ end
+ issue
+ end
+
+ def log_time(issue, hours)
+ time_entry = TimeEntry.new(
+ :user => user,
+ :hours => hours,
+ :issue => issue,
+ :spent_on => commit_date,
+ :comments => l(:text_time_logged_by_changeset, :value => text_tag(issue.project),
+ :locale => Setting.default_language)
+ )
+ time_entry.activity = log_time_activity unless log_time_activity.nil?
+
+ unless time_entry.save
+ logger.warn("TimeEntry could not be created by changeset #{id}: #{time_entry.errors.full_messages}") if logger
+ end
+ time_entry
+ end
+
+ def log_time_activity
+ if Setting.commit_logtime_activity_id.to_i > 0
+ TimeEntryActivity.find_by_id(Setting.commit_logtime_activity_id.to_i)
+ end
+ end
+
+ def split_comments
+ comments =~ /\A(.+?)\r?\n(.*)$/m
+ @short_comments = $1 || comments
+ @long_comments = $2.to_s.strip
+ return @short_comments, @long_comments
+ end
+
+ public
+
+ # Strips and reencodes a commit log before insertion into the database
+ def self.normalize_comments(str, encoding)
+ Changeset.to_utf8(str.to_s.strip, encoding)
+ end
+
+ def self.to_utf8(str, encoding)
+ Redmine::CodesetUtil.to_utf8(str, encoding)
+ end
+end
diff --git a/app/models/comment.rb b/app/models/comment.rb
new file mode 100644
index 0000000..48b47d9
--- /dev/null
+++ b/app/models/comment.rb
@@ -0,0 +1,38 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Comment < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ belongs_to :commented, :polymorphic => true, :counter_cache => true
+ belongs_to :author, :class_name => 'User'
+
+ validates_presence_of :commented, :author, :comments
+ attr_protected :id
+
+ after_create :send_notification
+
+ safe_attributes 'comments'
+
+ private
+
+ def send_notification
+ mailer_method = "#{commented.class.name.underscore}_comment_added"
+ if Setting.notified_events.include?(mailer_method)
+ Mailer.send(mailer_method, self).deliver
+ end
+ end
+end
diff --git a/app/models/custom_field.rb b/app/models/custom_field.rb
new file mode 100644
index 0000000..ca061a2
--- /dev/null
+++ b/app/models/custom_field.rb
@@ -0,0 +1,333 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class CustomField < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ include Redmine::SubclassFactory
+
+ has_many :enumerations,
+ lambda { order(:position) },
+ :class_name => 'CustomFieldEnumeration',
+ :dependent => :delete_all
+ has_many :custom_values, :dependent => :delete_all
+ has_and_belongs_to_many :roles, :join_table => "#{table_name_prefix}custom_fields_roles#{table_name_suffix}", :foreign_key => "custom_field_id"
+ acts_as_positioned
+ serialize :possible_values
+ store :format_store
+
+ validates_presence_of :name, :field_format
+ validates_uniqueness_of :name, :scope => :type
+ validates_length_of :name, :maximum => 30
+ validates_length_of :regexp, maximum: 255
+ validates_inclusion_of :field_format, :in => Proc.new { Redmine::FieldFormat.available_formats }
+ validate :validate_custom_field
+ attr_protected :id
+
+ before_validation :set_searchable
+ before_save do |field|
+ field.format.before_custom_field_save(field)
+ end
+ after_save :handle_multiplicity_change
+ after_save do |field|
+ if field.visible_changed? && field.visible
+ field.roles.clear
+ end
+ end
+
+ scope :sorted, lambda { order(:position) }
+ scope :visible, lambda {|*args|
+ user = args.shift || User.current
+ if user.admin?
+ # nop
+ elsif user.memberships.any?
+ where("#{table_name}.visible = ? OR #{table_name}.id IN (SELECT DISTINCT cfr.custom_field_id FROM #{Member.table_name} m" +
+ " INNER JOIN #{MemberRole.table_name} mr ON mr.member_id = m.id" +
+ " INNER JOIN #{table_name_prefix}custom_fields_roles#{table_name_suffix} cfr ON cfr.role_id = mr.role_id" +
+ " WHERE m.user_id = ?)",
+ true, user.id)
+ else
+ where(:visible => true)
+ end
+ }
+ def visible_by?(project, user=User.current)
+ visible? || user.admin?
+ end
+
+ safe_attributes 'name',
+ 'field_format',
+ 'possible_values',
+ 'regexp',
+ 'min_length',
+ 'max_length',
+ 'is_required',
+ 'is_for_all',
+ 'is_filter',
+ 'position',
+ 'searchable',
+ 'default_value',
+ 'editable',
+ 'visible',
+ 'multiple',
+ 'description',
+ 'role_ids',
+ 'url_pattern',
+ 'text_formatting',
+ 'edit_tag_style',
+ 'user_role',
+ 'version_status',
+ 'extensions_allowed',
+ 'full_width_layout'
+
+ def format
+ @format ||= Redmine::FieldFormat.find(field_format)
+ end
+
+ def field_format=(arg)
+ # cannot change format of a saved custom field
+ if new_record?
+ @format = nil
+ super
+ end
+ end
+
+ def set_searchable
+ # make sure these fields are not searchable
+ self.searchable = false unless format.class.searchable_supported
+ # make sure only these fields can have multiple values
+ self.multiple = false unless format.class.multiple_supported
+ true
+ end
+
+ def validate_custom_field
+ format.validate_custom_field(self).each do |attribute, message|
+ errors.add attribute, message
+ end
+
+ if regexp.present?
+ begin
+ Regexp.new(regexp)
+ rescue
+ errors.add(:regexp, :invalid)
+ end
+ end
+
+ if default_value.present?
+ validate_field_value(default_value).each do |message|
+ errors.add :default_value, message
+ end
+ end
+ end
+
+ def possible_custom_value_options(custom_value)
+ format.possible_custom_value_options(custom_value)
+ end
+
+ def possible_values_options(object=nil)
+ if object.is_a?(Array)
+ object.map {|o| format.possible_values_options(self, o)}.reduce(:&) || []
+ else
+ format.possible_values_options(self, object) || []
+ end
+ end
+
+ def possible_values
+ values = read_attribute(:possible_values)
+ if values.is_a?(Array)
+ values.each do |value|
+ value.to_s.force_encoding('UTF-8')
+ end
+ values
+ else
+ []
+ end
+ end
+
+ # Makes possible_values accept a multiline string
+ def possible_values=(arg)
+ if arg.is_a?(Array)
+ values = arg.compact.map {|a| a.to_s.strip}.reject(&:blank?)
+ write_attribute(:possible_values, values)
+ else
+ self.possible_values = arg.to_s.split(/[\n\r]+/)
+ end
+ end
+
+ def set_custom_field_value(custom_field_value, value)
+ format.set_custom_field_value(self, custom_field_value, value)
+ end
+
+ def cast_value(value)
+ format.cast_value(self, value)
+ end
+
+ def value_from_keyword(keyword, customized)
+ format.value_from_keyword(self, keyword, customized)
+ end
+
+ # Returns the options hash used to build a query filter for the field
+ def query_filter_options(query)
+ format.query_filter_options(self, query)
+ end
+
+ def totalable?
+ format.totalable_supported
+ end
+
+ def full_width_layout?
+ full_width_layout == '1'
+ end
+
+ # Returns a ORDER BY clause that can used to sort customized
+ # objects by their value of the custom field.
+ # Returns nil if the custom field can not be used for sorting.
+ def order_statement
+ return nil if multiple?
+ format.order_statement(self)
+ end
+
+ # Returns a GROUP BY clause that can used to group by custom value
+ # Returns nil if the custom field can not be used for grouping.
+ def group_statement
+ return nil if multiple?
+ format.group_statement(self)
+ end
+
+ def join_for_order_statement
+ format.join_for_order_statement(self)
+ end
+
+ def visibility_by_project_condition(project_key=nil, user=User.current, id_column=nil)
+ if visible? || user.admin?
+ "1=1"
+ elsif user.anonymous?
+ "1=0"
+ else
+ project_key ||= "#{self.class.customized_class.table_name}.project_id"
+ id_column ||= id
+ "#{project_key} IN (SELECT DISTINCT m.project_id FROM #{Member.table_name} m" +
+ " INNER JOIN #{MemberRole.table_name} mr ON mr.member_id = m.id" +
+ " INNER JOIN #{table_name_prefix}custom_fields_roles#{table_name_suffix} cfr ON cfr.role_id = mr.role_id" +
+ " WHERE m.user_id = #{user.id} AND cfr.custom_field_id = #{id_column})"
+ end
+ end
+
+ def self.visibility_condition
+ if user.admin?
+ "1=1"
+ elsif user.anonymous?
+ "#{table_name}.visible"
+ else
+ "#{project_key} IN (SELECT DISTINCT m.project_id FROM #{Member.table_name} m" +
+ " INNER JOIN #{MemberRole.table_name} mr ON mr.member_id = m.id" +
+ " INNER JOIN #{table_name_prefix}custom_fields_roles#{table_name_suffix} cfr ON cfr.role_id = mr.role_id" +
+ " WHERE m.user_id = #{user.id} AND cfr.custom_field_id = #{id})"
+ end
+ end
+
+ def <=>(field)
+ position <=> field.position
+ end
+
+ # Returns the class that values represent
+ def value_class
+ format.target_class if format.respond_to?(:target_class)
+ end
+
+ def self.customized_class
+ self.name =~ /^(.+)CustomField$/
+ $1.constantize rescue nil
+ end
+
+ # to move in project_custom_field
+ def self.for_all
+ where(:is_for_all => true).order(:position).to_a
+ end
+
+ def type_name
+ nil
+ end
+
+ # Returns the error messages for the given value
+ # or an empty array if value is a valid value for the custom field
+ def validate_custom_value(custom_value)
+ value = custom_value.value
+ errs = format.validate_custom_value(custom_value)
+
+ unless errs.any?
+ if value.is_a?(Array)
+ if !multiple?
+ errs << ::I18n.t('activerecord.errors.messages.invalid')
+ end
+ if is_required? && value.detect(&:present?).nil?
+ errs << ::I18n.t('activerecord.errors.messages.blank')
+ end
+ else
+ if is_required? && value.blank?
+ errs << ::I18n.t('activerecord.errors.messages.blank')
+ end
+ end
+ end
+
+ errs
+ end
+
+ # Returns the error messages for the default custom field value
+ def validate_field_value(value)
+ validate_custom_value(CustomFieldValue.new(:custom_field => self, :value => value))
+ end
+
+ # Returns true if value is a valid value for the custom field
+ def valid_field_value?(value)
+ validate_field_value(value).empty?
+ end
+
+ def after_save_custom_value(custom_value)
+ format.after_save_custom_value(self, custom_value)
+ end
+
+ def format_in?(*args)
+ args.include?(field_format)
+ end
+
+ def self.human_attribute_name(attribute_key_name, *args)
+ attr_name = attribute_key_name.to_s
+ if attr_name == 'url_pattern'
+ attr_name = "url"
+ end
+ super(attr_name, *args)
+ end
+
+ protected
+
+ # Removes multiple values for the custom field after setting the multiple attribute to false
+ # We kepp the value with the highest id for each customized object
+ def handle_multiplicity_change
+ if !new_record? && multiple_was && !multiple
+ ids = custom_values.
+ where("EXISTS(SELECT 1 FROM #{CustomValue.table_name} cve WHERE cve.custom_field_id = #{CustomValue.table_name}.custom_field_id" +
+ " AND cve.customized_type = #{CustomValue.table_name}.customized_type AND cve.customized_id = #{CustomValue.table_name}.customized_id" +
+ " AND cve.id > #{CustomValue.table_name}.id)").
+ pluck(:id)
+
+ if ids.any?
+ custom_values.where(:id => ids).delete_all
+ end
+ end
+ end
+end
+
+require_dependency 'redmine/field_format'
diff --git a/app/models/custom_field_enumeration.rb b/app/models/custom_field_enumeration.rb
new file mode 100644
index 0000000..125cd41
--- /dev/null
+++ b/app/models/custom_field_enumeration.rb
@@ -0,0 +1,82 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class CustomFieldEnumeration < ActiveRecord::Base
+ belongs_to :custom_field
+
+ validates_presence_of :name, :position, :custom_field_id
+ validates_length_of :name, :maximum => 60
+ validates_numericality_of :position, :only_integer => true
+ before_create :set_position
+
+ scope :active, lambda { where(:active => true) }
+
+ def to_s
+ name.to_s
+ end
+
+ def objects_count
+ custom_values.count
+ end
+
+ def in_use?
+ objects_count > 0
+ end
+
+ alias :destroy_without_reassign :destroy
+ def destroy(reassign_to=nil)
+ if reassign_to
+ custom_values.update_all(:value => reassign_to.id.to_s)
+ end
+ destroy_without_reassign
+ end
+
+ def custom_values
+ custom_field.custom_values.where(:value => id.to_s)
+ end
+
+ def self.update_each(custom_field, attributes)
+ transaction do
+ attributes.each do |enumeration_id, enumeration_attributes|
+ enumeration = custom_field.enumerations.find_by_id(enumeration_id)
+ if enumeration
+ if block_given?
+ yield enumeration, enumeration_attributes
+ else
+ enumeration.attributes = enumeration_attributes
+ end
+ unless enumeration.save
+ raise ActiveRecord::Rollback
+ end
+ end
+ end
+ end
+ end
+
+ def self.fields_for_order_statement(table=nil)
+ table ||= table_name
+ columns = ['position']
+ columns.uniq.map {|field| "#{table}.#{field}"}
+ end
+
+ private
+
+ def set_position
+ max = self.class.where(:custom_field_id => custom_field_id).maximum(:position) || 0
+ self.position = max + 1
+ end
+end
diff --git a/app/models/custom_field_value.rb b/app/models/custom_field_value.rb
new file mode 100644
index 0000000..b5481e1
--- /dev/null
+++ b/app/models/custom_field_value.rb
@@ -0,0 +1,68 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class CustomFieldValue
+ attr_accessor :custom_field, :customized, :value, :value_was
+
+ def initialize(attributes={})
+ attributes.each do |name, v|
+ send "#{name}=", v
+ end
+ end
+
+ def custom_field_id
+ custom_field.id
+ end
+
+ def true?
+ self.value == '1'
+ end
+
+ def editable?
+ custom_field.editable?
+ end
+
+ def visible?
+ custom_field.visible?
+ end
+
+ def required?
+ custom_field.is_required?
+ end
+
+ def to_s
+ value.to_s
+ end
+
+ def value=(v)
+ @value = custom_field.set_custom_field_value(self, v)
+ end
+
+ def value_present?
+ if value.is_a?(Array)
+ value.any?(&:present?)
+ else
+ value.present?
+ end
+ end
+
+ def validate_value
+ custom_field.validate_custom_value(self).each do |message|
+ customized.errors.add(:base, custom_field.name + ' ' + message)
+ end
+ end
+end
diff --git a/app/models/custom_value.rb b/app/models/custom_value.rb
new file mode 100644
index 0000000..33da1bd
--- /dev/null
+++ b/app/models/custom_value.rb
@@ -0,0 +1,68 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class CustomValue < ActiveRecord::Base
+ belongs_to :custom_field
+ belongs_to :customized, :polymorphic => true
+ attr_protected :id
+
+ after_save :custom_field_after_save_custom_value
+
+ def initialize(attributes=nil, *args)
+ super
+ if new_record? && custom_field && !attributes.key?(:value)
+ self.value ||= custom_field.default_value
+ end
+ end
+
+ # Returns true if the boolean custom value is true
+ def true?
+ self.value == '1'
+ end
+
+ def editable?
+ custom_field.editable?
+ end
+
+ def visible?(user=User.current)
+ if custom_field.visible?
+ true
+ elsif customized.respond_to?(:project)
+ custom_field.visible_by?(customized.project, user)
+ else
+ false
+ end
+ end
+
+ def attachments_visible?(user)
+ visible?(user) && customized && customized.visible?(user)
+ end
+
+ def required?
+ custom_field.is_required?
+ end
+
+ def to_s
+ value.to_s
+ end
+
+ private
+
+ def custom_field_after_save_custom_value
+ custom_field.after_save_custom_value(self)
+ end
+end
diff --git a/app/models/document.rb b/app/models/document.rb
new file mode 100644
index 0000000..d347e58
--- /dev/null
+++ b/app/models/document.rb
@@ -0,0 +1,75 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Document < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ belongs_to :project
+ belongs_to :category, :class_name => "DocumentCategory"
+ acts_as_attachable :delete_permission => :delete_documents
+ acts_as_customizable
+
+ acts_as_searchable :columns => ['title', "#{table_name}.description"],
+ :preload => :project
+ acts_as_event :title => Proc.new {|o| "#{l(:label_document)}: #{o.title}"},
+ :author => Proc.new {|o| o.attachments.reorder("#{Attachment.table_name}.created_on ASC").first.try(:author) },
+ :url => Proc.new {|o| {:controller => 'documents', :action => 'show', :id => o.id}}
+ acts_as_activity_provider :scope => preload(:project)
+
+ validates_presence_of :project, :title, :category
+ validates_length_of :title, :maximum => 255
+ attr_protected :id
+
+ after_create :send_notification
+
+ scope :visible, lambda {|*args|
+ joins(:project).
+ where(Project.allowed_to_condition(args.shift || User.current, :view_documents, *args))
+ }
+
+ safe_attributes 'category_id', 'title', 'description', 'custom_fields', 'custom_field_values'
+
+ def visible?(user=User.current)
+ !user.nil? && user.allowed_to?(:view_documents, project)
+ end
+
+ def initialize(attributes=nil, *args)
+ super
+ if new_record?
+ self.category ||= DocumentCategory.default
+ end
+ end
+
+ def updated_on
+ unless @updated_on
+ a = attachments.last
+ @updated_on = (a && a.created_on) || created_on
+ end
+ @updated_on
+ end
+
+ def notified_users
+ project.notified_users.reject {|user| !visible?(user)}
+ end
+
+ private
+
+ def send_notification
+ if Setting.notified_events.include?('document_added')
+ Mailer.document_added(self).deliver
+ end
+ end
+end
diff --git a/app/models/document_category.rb b/app/models/document_category.rb
new file mode 100644
index 0000000..218c6cd
--- /dev/null
+++ b/app/models/document_category.rb
@@ -0,0 +1,40 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class DocumentCategory < Enumeration
+ has_many :documents, :foreign_key => 'category_id'
+
+ OptionName = :enumeration_doc_categories
+
+ def option_name
+ OptionName
+ end
+
+ def objects_count
+ documents.count
+ end
+
+ def transfer_relations(to)
+ documents.update_all(:category_id => to.id)
+ end
+
+ def self.default
+ d = super
+ d = first if d.nil?
+ d
+ end
+end
diff --git a/app/models/document_category_custom_field.rb b/app/models/document_category_custom_field.rb
new file mode 100644
index 0000000..9ff5ee7
--- /dev/null
+++ b/app/models/document_category_custom_field.rb
@@ -0,0 +1,22 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class DocumentCategoryCustomField < CustomField
+ def type_name
+ :enumeration_doc_categories
+ end
+end
diff --git a/app/models/document_custom_field.rb b/app/models/document_custom_field.rb
new file mode 100644
index 0000000..7b689e8
--- /dev/null
+++ b/app/models/document_custom_field.rb
@@ -0,0 +1,22 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class DocumentCustomField < CustomField
+ def type_name
+ :label_document_plural
+ end
+end
diff --git a/app/models/email_address.rb b/app/models/email_address.rb
new file mode 100644
index 0000000..295b9bc
--- /dev/null
+++ b/app/models/email_address.rb
@@ -0,0 +1,111 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class EmailAddress < ActiveRecord::Base
+ include Redmine::SafeAttributes
+
+ belongs_to :user
+ attr_protected :id
+
+ after_create :deliver_security_notification_create
+ after_update :destroy_tokens, :deliver_security_notification_update
+ after_destroy :destroy_tokens, :deliver_security_notification_destroy
+
+ validates_presence_of :address
+ validates_format_of :address, :with => /\A([^@\s]+)@((?:[-a-z0-9]+\.)+[a-z]{2,})\z/i, :allow_blank => true
+ validates_length_of :address, :maximum => User::MAIL_LENGTH_LIMIT, :allow_nil => true
+ validates_uniqueness_of :address, :case_sensitive => false,
+ :if => Proc.new {|email| email.address_changed? && email.address.present?}
+
+ safe_attributes 'address'
+
+ def address=(arg)
+ write_attribute(:address, arg.to_s.strip)
+ end
+
+ def destroy
+ if is_default?
+ false
+ else
+ super
+ end
+ end
+
+ private
+
+ # send a security notification to user that a new email address was added
+ def deliver_security_notification_create
+ # only deliver if this isn't the only address.
+ # in that case, the user is just being created and
+ # should not receive this email.
+ if user.mails != [address]
+ deliver_security_notification(user,
+ message: :mail_body_security_notification_add,
+ field: :field_mail,
+ value: address
+ )
+ end
+ end
+
+ # send a security notification to user that an email has been changed (notified/not notified)
+ def deliver_security_notification_update
+ if address_changed?
+ recipients = [user, address_was]
+ options = {
+ message: :mail_body_security_notification_change_to,
+ field: :field_mail,
+ value: address
+ }
+ elsif notify_changed?
+ recipients = [user, address]
+ options = {
+ message: notify_was ? :mail_body_security_notification_notify_disabled : :mail_body_security_notification_notify_enabled,
+ value: address
+ }
+ end
+ deliver_security_notification(recipients, options)
+ end
+
+ # send a security notification to user that an email address was deleted
+ def deliver_security_notification_destroy
+ deliver_security_notification([user, address],
+ message: :mail_body_security_notification_remove,
+ field: :field_mail,
+ value: address
+ )
+ end
+
+ # generic method to send security notifications for email addresses
+ def deliver_security_notification(recipients, options={})
+ Mailer.security_notification(recipients,
+ options.merge(
+ title: :label_my_account,
+ url: {controller: 'my', action: 'account'}
+ )
+ ).deliver
+ end
+
+ # Delete all outstanding password reset tokens on email change.
+ # This helps to keep the account secure in case the associated email account
+ # was compromised.
+ def destroy_tokens
+ if address_changed? || destroyed?
+ tokens = ['recovery']
+ Token.where(:user_id => user_id, :action => tokens).delete_all
+ end
+ end
+end
diff --git a/app/models/enabled_module.rb b/app/models/enabled_module.rb
new file mode 100644
index 0000000..2548ba2
--- /dev/null
+++ b/app/models/enabled_module.rb
@@ -0,0 +1,40 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class EnabledModule < ActiveRecord::Base
+ belongs_to :project
+ acts_as_watchable
+
+ validates_presence_of :name
+ validates_uniqueness_of :name, :scope => :project_id
+ attr_protected :id
+
+ after_create :module_enabled
+
+ private
+
+ # after_create callback used to do things when a module is enabled
+ def module_enabled
+ case name
+ when 'wiki'
+ # Create a wiki with a default start page
+ if project && project.wiki.nil?
+ Wiki.create(:project => project, :start_page => 'Wiki')
+ end
+ end
+ end
+end
diff --git a/app/models/enumeration.rb b/app/models/enumeration.rb
new file mode 100644
index 0000000..eef691c
--- /dev/null
+++ b/app/models/enumeration.rb
@@ -0,0 +1,173 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Enumeration < ActiveRecord::Base
+ include Redmine::SubclassFactory
+
+ default_scope lambda {order(:position)}
+
+ belongs_to :project
+
+ acts_as_positioned :scope => :parent_id
+ acts_as_customizable
+ acts_as_tree
+
+ before_destroy :check_integrity
+ before_save :check_default
+
+ attr_protected :type
+
+ validates_presence_of :name
+ validates_uniqueness_of :name, :scope => [:type, :project_id]
+ validates_length_of :name, :maximum => 30
+
+ scope :shared, lambda { where(:project_id => nil) }
+ scope :sorted, lambda { order(:position) }
+ scope :active, lambda { where(:active => true) }
+ scope :system, lambda { where(:project_id => nil) }
+ scope :named, lambda {|arg| where("LOWER(#{table_name}.name) = LOWER(?)", arg.to_s.strip)}
+
+ def self.default
+ # Creates a fake default scope so Enumeration.default will check
+ # it's type. STI subclasses will automatically add their own
+ # types to the finder.
+ if self.descends_from_active_record?
+ where(:is_default => true, :type => 'Enumeration').first
+ else
+ # STI classes are
+ where(:is_default => true).first
+ end
+ end
+
+ # Overloaded on concrete classes
+ def option_name
+ nil
+ end
+
+ def check_default
+ if is_default? && is_default_changed?
+ Enumeration.where({:type => type}).update_all({:is_default => false})
+ end
+ end
+
+ # Overloaded on concrete classes
+ def objects_count
+ 0
+ end
+
+ def in_use?
+ self.objects_count != 0
+ end
+
+ # Is this enumeration overriding a system level enumeration?
+ def is_override?
+ !self.parent.nil?
+ end
+
+ alias :destroy_without_reassign :destroy
+
+ # Destroy the enumeration
+ # If a enumeration is specified, objects are reassigned
+ def destroy(reassign_to = nil)
+ if reassign_to && reassign_to.is_a?(Enumeration)
+ self.transfer_relations(reassign_to)
+ end
+ destroy_without_reassign
+ end
+
+ def <=>(enumeration)
+ position <=> enumeration.position
+ end
+
+ def to_s; name end
+
+ # Returns the Subclasses of Enumeration. Each Subclass needs to be
+ # required in development mode.
+ #
+ # Note: subclasses is protected in ActiveRecord
+ def self.get_subclasses
+ subclasses
+ end
+
+ # Does the +new+ Hash override the previous Enumeration?
+ def self.overriding_change?(new, previous)
+ if (same_active_state?(new['active'], previous.active)) && same_custom_values?(new,previous)
+ return false
+ else
+ return true
+ end
+ end
+
+ # Does the +new+ Hash have the same custom values as the previous Enumeration?
+ def self.same_custom_values?(new, previous)
+ previous.custom_field_values.each do |custom_value|
+ if custom_value.value != new["custom_field_values"][custom_value.custom_field_id.to_s]
+ return false
+ end
+ end
+
+ return true
+ end
+
+ # Are the new and previous fields equal?
+ def self.same_active_state?(new, previous)
+ new = (new == "1" ? true : false)
+ return new == previous
+ end
+
+ private
+
+ def check_integrity
+ raise "Cannot delete enumeration" if self.in_use?
+ end
+
+ # Overrides Redmine::Acts::Positioned#set_default_position so that enumeration overrides
+ # get the same position as the overridden enumeration
+ def set_default_position
+ if position.nil? && parent
+ self.position = parent.position
+ end
+ super
+ end
+
+ # Overrides Redmine::Acts::Positioned#update_position so that overrides get the same
+ # position as the overridden enumeration
+ def update_position
+ super
+ if position_changed?
+ self.class.where.not(:parent_id => nil).update_all(
+ "position = coalesce((
+ select position
+ from (select id, position from enumerations) as parent
+ where parent_id = parent.id), 1)"
+ )
+ end
+ end
+
+ # Overrides Redmine::Acts::Positioned#remove_position so that enumeration overrides
+ # get the same position as the overridden enumeration
+ def remove_position
+ if parent_id.blank?
+ super
+ end
+ end
+end
+
+# Force load the subclasses in development mode
+require_dependency 'time_entry_activity'
+require_dependency 'document_category'
+require_dependency 'issue_priority'
diff --git a/app/models/group.rb b/app/models/group.rb
new file mode 100644
index 0000000..d94ef75
--- /dev/null
+++ b/app/models/group.rb
@@ -0,0 +1,119 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Group < Principal
+ include Redmine::SafeAttributes
+
+ has_and_belongs_to_many :users,
+ :join_table => "#{table_name_prefix}groups_users#{table_name_suffix}",
+ :after_add => :user_added,
+ :after_remove => :user_removed
+
+ acts_as_customizable
+
+ validates_presence_of :lastname
+ validates_uniqueness_of :lastname, :case_sensitive => false
+ validates_length_of :lastname, :maximum => 255
+ attr_protected :id
+
+ self.valid_statuses = [STATUS_ACTIVE]
+
+ before_destroy :remove_references_before_destroy
+
+ scope :sorted, lambda { order(:type => :asc, :lastname => :asc) }
+ scope :named, lambda {|arg| where("LOWER(#{table_name}.lastname) = LOWER(?)", arg.to_s.strip)}
+ scope :givable, lambda {where(:type => 'Group')}
+
+ safe_attributes 'name',
+ 'user_ids',
+ 'custom_field_values',
+ 'custom_fields',
+ :if => lambda {|group, user| user.admin? && !group.builtin?}
+
+ def to_s
+ name.to_s
+ end
+
+ def name
+ lastname
+ end
+
+ def name=(arg)
+ self.lastname = arg
+ end
+
+ def builtin_type
+ nil
+ end
+
+ # Return true if the group is a builtin group
+ def builtin?
+ false
+ end
+
+ # Returns true if the group can be given to a user
+ def givable?
+ !builtin?
+ end
+
+ def user_added(user)
+ members.each do |member|
+ next if member.project.nil?
+ user_member = Member.find_by_project_id_and_user_id(member.project_id, user.id) || Member.new(:project_id => member.project_id, :user_id => user.id)
+ member.member_roles.each do |member_role|
+ user_member.member_roles << MemberRole.new(:role => member_role.role, :inherited_from => member_role.id)
+ end
+ user_member.save!
+ end
+ end
+
+ def user_removed(user)
+ members.each do |member|
+ MemberRole.
+ joins(:member).
+ where("#{Member.table_name}.user_id = ? AND #{MemberRole.table_name}.inherited_from IN (?)", user.id, member.member_role_ids).
+ each(&:destroy)
+ end
+ end
+
+ def self.human_attribute_name(attribute_key_name, *args)
+ attr_name = attribute_key_name.to_s
+ if attr_name == 'lastname'
+ attr_name = "name"
+ end
+ super(attr_name, *args)
+ end
+
+ def self.anonymous
+ GroupAnonymous.load_instance
+ end
+
+ def self.non_member
+ GroupNonMember.load_instance
+ end
+
+ private
+
+ # Removes references that are not handled by associations
+ def remove_references_before_destroy
+ return if self.id.nil?
+
+ Issue.where(['assigned_to_id = ?', id]).update_all('assigned_to_id = NULL')
+ end
+end
+
+require_dependency "group_builtin"
diff --git a/app/models/group_anonymous.rb b/app/models/group_anonymous.rb
new file mode 100644
index 0000000..a3e5f38
--- /dev/null
+++ b/app/models/group_anonymous.rb
@@ -0,0 +1,26 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class GroupAnonymous < GroupBuiltin
+ def name
+ l(:label_group_anonymous)
+ end
+
+ def builtin_type
+ "anonymous"
+ end
+end
diff --git a/app/models/group_builtin.rb b/app/models/group_builtin.rb
new file mode 100644
index 0000000..911e274
--- /dev/null
+++ b/app/models/group_builtin.rb
@@ -0,0 +1,56 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class GroupBuiltin < Group
+ validate :validate_uniqueness, :on => :create
+
+ def validate_uniqueness
+ errors.add :base, 'The builtin group already exists.' if self.class.exists?
+ end
+
+ def builtin?
+ true
+ end
+
+ def destroy
+ false
+ end
+
+ def user_added(user)
+ raise 'Cannot add users to a builtin group'
+ end
+
+ class << self
+ def load_instance
+ return nil if self == GroupBuiltin
+ instance = unscoped.order('id').first || create_instance
+ end
+
+ def create_instance
+ raise 'The builtin group already exists.' if exists?
+ instance = unscoped.new
+ instance.lastname = name
+ instance.save :validate => false
+ raise 'Unable to create builtin group.' if instance.new_record?
+ instance
+ end
+ private :create_instance
+ end
+end
+
+require_dependency "group_anonymous"
+require_dependency "group_non_member"
diff --git a/app/models/group_custom_field.rb b/app/models/group_custom_field.rb
new file mode 100644
index 0000000..76755ec
--- /dev/null
+++ b/app/models/group_custom_field.rb
@@ -0,0 +1,22 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class GroupCustomField < CustomField
+ def type_name
+ :label_group_plural
+ end
+end
diff --git a/app/models/group_non_member.rb b/app/models/group_non_member.rb
new file mode 100644
index 0000000..d94666a
--- /dev/null
+++ b/app/models/group_non_member.rb
@@ -0,0 +1,26 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class GroupNonMember < GroupBuiltin
+ def name
+ l(:label_group_non_member)
+ end
+
+ def builtin_type
+ "non_member"
+ end
+end
diff --git a/app/models/import.rb b/app/models/import.rb
new file mode 100644
index 0000000..71bc3c1
--- /dev/null
+++ b/app/models/import.rb
@@ -0,0 +1,270 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'csv'
+
+class Import < ActiveRecord::Base
+ has_many :items, :class_name => 'ImportItem', :dependent => :delete_all
+ belongs_to :user
+ serialize :settings
+
+ before_destroy :remove_file
+
+ validates_presence_of :filename, :user_id
+ validates_length_of :filename, :maximum => 255
+
+ DATE_FORMATS = [
+ '%Y-%m-%d',
+ '%d/%m/%Y',
+ '%m/%d/%Y',
+ '%d.%m.%Y',
+ '%d-%m-%Y'
+ ]
+
+ def initialize(*args)
+ super
+ self.settings ||= {}
+ end
+
+ def file=(arg)
+ return unless arg.present? && arg.size > 0
+
+ self.filename = generate_filename
+ Redmine::Utils.save_upload(arg, filepath)
+ end
+
+ def set_default_settings
+ separator = lu(user, :general_csv_separator)
+ if file_exists?
+ begin
+ content = File.read(filepath, 256)
+ separator = [',', ';'].sort_by {|sep| content.count(sep) }.last
+ rescue Exception => e
+ end
+ end
+ wrapper = '"'
+ encoding = lu(user, :general_csv_encoding)
+
+ date_format = lu(user, "date.formats.default", :default => "foo")
+ date_format = DATE_FORMATS.first unless DATE_FORMATS.include?(date_format)
+
+ self.settings.merge!(
+ 'separator' => separator,
+ 'wrapper' => wrapper,
+ 'encoding' => encoding,
+ 'date_format' => date_format
+ )
+ end
+
+ def to_param
+ filename
+ end
+
+ # Returns the full path of the file to import
+ # It is stored in tmp/imports with a random hex as filename
+ def filepath
+ if filename.present? && filename =~ /\A[0-9a-f]+\z/
+ File.join(Rails.root, "tmp", "imports", filename)
+ else
+ nil
+ end
+ end
+
+ # Returns true if the file to import exists
+ def file_exists?
+ filepath.present? && File.exists?(filepath)
+ end
+
+ # Returns the headers as an array that
+ # can be used for select options
+ def columns_options(default=nil)
+ i = -1
+ headers.map {|h| [h, i+=1]}
+ end
+
+ # Parses the file to import and updates the total number of items
+ def parse_file
+ count = 0
+ read_items {|row, i| count=i}
+ update_attribute :total_items, count
+ count
+ end
+
+ # Reads the items to import and yields the given block for each item
+ def read_items
+ i = 0
+ headers = true
+ read_rows do |row|
+ if i == 0 && headers
+ headers = false
+ next
+ end
+ i+= 1
+ yield row, i if block_given?
+ end
+ end
+
+ # Returns the count first rows of the file (including headers)
+ def first_rows(count=4)
+ rows = []
+ read_rows do |row|
+ rows << row
+ break if rows.size >= count
+ end
+ rows
+ end
+
+ # Returns an array of headers
+ def headers
+ first_rows(1).first || []
+ end
+
+ # Returns the mapping options
+ def mapping
+ settings['mapping'] || {}
+ end
+
+ # Adds a callback that will be called after the item at given position is imported
+ def add_callback(position, name, *args)
+ settings['callbacks'] ||= {}
+ settings['callbacks'][position.to_i] ||= []
+ settings['callbacks'][position.to_i] << [name, args]
+ save!
+ end
+
+ # Executes the callbacks for the given object
+ def do_callbacks(position, object)
+ if callbacks = (settings['callbacks'] || {}).delete(position)
+ callbacks.each do |name, args|
+ send "#{name}_callback", object, *args
+ end
+ save!
+ end
+ end
+
+ # Imports items and returns the position of the last processed item
+ def run(options={})
+ max_items = options[:max_items]
+ max_time = options[:max_time]
+ current = 0
+ imported = 0
+ resume_after = items.maximum(:position) || 0
+ interrupted = false
+ started_on = Time.now
+
+ read_items do |row, position|
+ if (max_items && imported >= max_items) || (max_time && Time.now >= started_on + max_time)
+ interrupted = true
+ break
+ end
+ if position > resume_after
+ item = items.build
+ item.position = position
+
+ if object = build_object(row, item)
+ if object.save
+ item.obj_id = object.id
+ else
+ item.message = object.errors.full_messages.join("\n")
+ end
+ end
+
+ item.save!
+ imported += 1
+
+ do_callbacks(item.position, object)
+ end
+ current = position
+ end
+
+ if imported == 0 || interrupted == false
+ if total_items.nil?
+ update_attribute :total_items, current
+ end
+ update_attribute :finished, true
+ remove_file
+ end
+
+ current
+ end
+
+ def unsaved_items
+ items.where(:obj_id => nil)
+ end
+
+ def saved_items
+ items.where("obj_id IS NOT NULL")
+ end
+
+ private
+
+ def read_rows
+ return unless file_exists?
+
+ csv_options = {:headers => false}
+ csv_options[:encoding] = settings['encoding'].to_s.presence || 'UTF-8'
+ csv_options[:encoding] = 'bom|UTF-8' if csv_options[:encoding] == 'UTF-8'
+ separator = settings['separator'].to_s
+ csv_options[:col_sep] = separator if separator.size == 1
+ wrapper = settings['wrapper'].to_s
+ csv_options[:quote_char] = wrapper if wrapper.size == 1
+
+ CSV.foreach(filepath, csv_options) do |row|
+ yield row if block_given?
+ end
+ end
+
+ def row_value(row, key)
+ if index = mapping[key].presence
+ row[index.to_i].presence
+ end
+ end
+
+ def row_date(row, key)
+ if s = row_value(row, key)
+ format = settings['date_format']
+ format = DATE_FORMATS.first unless DATE_FORMATS.include?(format)
+ Date.strptime(s, format) rescue s
+ end
+ end
+
+ # Builds a record for the given row and returns it
+ # To be implemented by subclasses
+ def build_object(row)
+ end
+
+ # Generates a filename used to store the import file
+ def generate_filename
+ Redmine::Utils.random_hex(16)
+ end
+
+ # Deletes the import file
+ def remove_file
+ if file_exists?
+ begin
+ File.delete filepath
+ rescue Exception => e
+ logger.error "Unable to delete file #{filepath}: #{e.message}" if logger
+ end
+ end
+ end
+
+ # Returns true if value is a string that represents a true value
+ def yes?(value)
+ value == lu(user, :general_text_yes) || value == '1'
+ end
+end
diff --git a/app/models/import_item.rb b/app/models/import_item.rb
new file mode 100644
index 0000000..74d5c37
--- /dev/null
+++ b/app/models/import_item.rb
@@ -0,0 +1,22 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class ImportItem < ActiveRecord::Base
+ belongs_to :import
+
+ validates_presence_of :import_id, :position
+end
diff --git a/app/models/issue.rb b/app/models/issue.rb
new file mode 100644
index 0000000..f995903
--- /dev/null
+++ b/app/models/issue.rb
@@ -0,0 +1,1875 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Issue < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ include Redmine::Utils::DateCalculation
+ include Redmine::I18n
+ before_save :set_parent_id
+ include Redmine::NestedSet::IssueNestedSet
+
+ belongs_to :project
+ belongs_to :tracker
+ belongs_to :status, :class_name => 'IssueStatus'
+ belongs_to :author, :class_name => 'User'
+ belongs_to :assigned_to, :class_name => 'Principal'
+ belongs_to :fixed_version, :class_name => 'Version'
+ belongs_to :priority, :class_name => 'IssuePriority'
+ belongs_to :category, :class_name => 'IssueCategory'
+
+ has_many :journals, :as => :journalized, :dependent => :destroy, :inverse_of => :journalized
+ has_many :time_entries, :dependent => :destroy
+ has_and_belongs_to_many :changesets, lambda {order("#{Changeset.table_name}.committed_on ASC, #{Changeset.table_name}.id ASC")}
+
+ has_many :relations_from, :class_name => 'IssueRelation', :foreign_key => 'issue_from_id', :dependent => :delete_all
+ has_many :relations_to, :class_name => 'IssueRelation', :foreign_key => 'issue_to_id', :dependent => :delete_all
+
+ acts_as_attachable :after_add => :attachment_added, :after_remove => :attachment_removed
+ acts_as_customizable
+ acts_as_watchable
+ acts_as_searchable :columns => ['subject', "#{table_name}.description"],
+ :preload => [:project, :status, :tracker],
+ :scope => lambda {|options| options[:open_issues] ? self.open : self.all}
+
+ acts_as_event :title => Proc.new {|o| "#{o.tracker.name} ##{o.id} (#{o.status}): #{o.subject}"},
+ :url => Proc.new {|o| {:controller => 'issues', :action => 'show', :id => o.id}},
+ :type => Proc.new {|o| 'issue' + (o.closed? ? '-closed' : '') }
+
+ acts_as_activity_provider :scope => preload(:project, :author, :tracker, :status),
+ :author_key => :author_id
+
+ DONE_RATIO_OPTIONS = %w(issue_field issue_status)
+
+ attr_accessor :deleted_attachment_ids
+ attr_reader :current_journal
+ delegate :notes, :notes=, :private_notes, :private_notes=, :to => :current_journal, :allow_nil => true
+
+ validates_presence_of :subject, :project, :tracker
+ validates_presence_of :priority, :if => Proc.new {|issue| issue.new_record? || issue.priority_id_changed?}
+ validates_presence_of :status, :if => Proc.new {|issue| issue.new_record? || issue.status_id_changed?}
+ validates_presence_of :author, :if => Proc.new {|issue| issue.new_record? || issue.author_id_changed?}
+
+ validates_length_of :subject, :maximum => 255
+ validates_inclusion_of :done_ratio, :in => 0..100
+ validates :estimated_hours, :numericality => {:greater_than_or_equal_to => 0, :allow_nil => true, :message => :invalid}
+ validates :start_date, :date => true
+ validates :due_date, :date => true
+ validate :validate_issue, :validate_required_fields, :validate_permissions
+ attr_protected :id
+
+ scope :visible, lambda {|*args|
+ joins(:project).
+ where(Issue.visible_condition(args.shift || User.current, *args))
+ }
+
+ scope :open, lambda {|*args|
+ is_closed = args.size > 0 ? !args.first : false
+ joins(:status).
+ where(:issue_statuses => {:is_closed => is_closed})
+ }
+
+ scope :recently_updated, lambda { order(:updated_on => :desc) }
+ scope :on_active_project, lambda {
+ joins(:project).
+ where(:projects => {:status => Project::STATUS_ACTIVE})
+ }
+ scope :fixed_version, lambda {|versions|
+ ids = [versions].flatten.compact.map {|v| v.is_a?(Version) ? v.id : v}
+ ids.any? ? where(:fixed_version_id => ids) : none
+ }
+ scope :assigned_to, lambda {|arg|
+ arg = Array(arg).uniq
+ ids = arg.map {|p| p.is_a?(Principal) ? p.id : p}
+ ids += arg.select {|p| p.is_a?(User)}.map(&:group_ids).flatten.uniq
+ ids.compact!
+ ids.any? ? where(:assigned_to_id => ids) : none
+ }
+ scope :like, lambda {|q|
+ q = q.to_s
+ if q.present?
+ where("LOWER(#{table_name}.subject) LIKE LOWER(?)", "%#{q}%")
+ end
+ }
+
+ before_validation :default_assign, on: :create
+ before_validation :clear_disabled_fields
+ before_save :close_duplicates, :update_done_ratio_from_issue_status,
+ :force_updated_on_change, :update_closed_on, :set_assigned_to_was
+ after_save {|issue| issue.send :after_project_change if !issue.id_changed? && issue.project_id_changed?}
+ after_save :reschedule_following_issues, :update_nested_set_attributes,
+ :update_parent_attributes, :delete_selected_attachments, :create_journal
+ # Should be after_create but would be called before previous after_save callbacks
+ after_save :after_create_from_copy
+ after_destroy :update_parent_attributes
+ after_create :send_notification
+
+ # Returns a SQL conditions string used to find all issues visible by the specified user
+ def self.visible_condition(user, options={})
+ Project.allowed_to_condition(user, :view_issues, options) do |role, user|
+ sql = if user.id && user.logged?
+ case role.issues_visibility
+ when 'all'
+ '1=1'
+ when 'default'
+ user_ids = [user.id] + user.groups.map(&:id).compact
+ "(#{table_name}.is_private = #{connection.quoted_false} OR #{table_name}.author_id = #{user.id} OR #{table_name}.assigned_to_id IN (#{user_ids.join(',')}))"
+ when 'own'
+ user_ids = [user.id] + user.groups.map(&:id).compact
+ "(#{table_name}.author_id = #{user.id} OR #{table_name}.assigned_to_id IN (#{user_ids.join(',')}))"
+ else
+ '1=0'
+ end
+ else
+ "(#{table_name}.is_private = #{connection.quoted_false})"
+ end
+ unless role.permissions_all_trackers?(:view_issues)
+ tracker_ids = role.permissions_tracker_ids(:view_issues)
+ if tracker_ids.any?
+ sql = "(#{sql} AND #{table_name}.tracker_id IN (#{tracker_ids.join(',')}))"
+ else
+ sql = '1=0'
+ end
+ end
+ sql
+ end
+ end
+
+ # Returns true if usr or current user is allowed to view the issue
+ def visible?(usr=nil)
+ (usr || User.current).allowed_to?(:view_issues, self.project) do |role, user|
+ visible = if user.logged?
+ case role.issues_visibility
+ when 'all'
+ true
+ when 'default'
+ !self.is_private? || (self.author == user || user.is_or_belongs_to?(assigned_to))
+ when 'own'
+ self.author == user || user.is_or_belongs_to?(assigned_to)
+ else
+ false
+ end
+ else
+ !self.is_private?
+ end
+ unless role.permissions_all_trackers?(:view_issues)
+ visible &&= role.permissions_tracker_ids?(:view_issues, tracker_id)
+ end
+ visible
+ end
+ end
+
+ # Returns true if user or current user is allowed to edit or add notes to the issue
+ def editable?(user=User.current)
+ attributes_editable?(user) || notes_addable?(user)
+ end
+
+ # Returns true if user or current user is allowed to edit the issue
+ def attributes_editable?(user=User.current)
+ user_tracker_permission?(user, :edit_issues)
+ end
+
+ # Overrides Redmine::Acts::Attachable::InstanceMethods#attachments_editable?
+ def attachments_editable?(user=User.current)
+ attributes_editable?(user)
+ end
+
+ # Returns true if user or current user is allowed to add notes to the issue
+ def notes_addable?(user=User.current)
+ user_tracker_permission?(user, :add_issue_notes)
+ end
+
+ # Returns true if user or current user is allowed to delete the issue
+ def deletable?(user=User.current)
+ user_tracker_permission?(user, :delete_issues)
+ end
+
+ def initialize(attributes=nil, *args)
+ super
+ if new_record?
+ # set default values for new records only
+ self.priority ||= IssuePriority.default
+ self.watcher_user_ids = []
+ end
+ end
+
+ def create_or_update
+ super
+ ensure
+ @status_was = nil
+ end
+ private :create_or_update
+
+ # AR#Persistence#destroy would raise and RecordNotFound exception
+ # if the issue was already deleted or updated (non matching lock_version).
+ # This is a problem when bulk deleting issues or deleting a project
+ # (because an issue may already be deleted if its parent was deleted
+ # first).
+ # The issue is reloaded by the nested_set before being deleted so
+ # the lock_version condition should not be an issue but we handle it.
+ def destroy
+ super
+ rescue ActiveRecord::StaleObjectError, ActiveRecord::RecordNotFound
+ # Stale or already deleted
+ begin
+ reload
+ rescue ActiveRecord::RecordNotFound
+ # The issue was actually already deleted
+ @destroyed = true
+ return freeze
+ end
+ # The issue was stale, retry to destroy
+ super
+ end
+
+ alias :base_reload :reload
+ def reload(*args)
+ @workflow_rule_by_attribute = nil
+ @assignable_versions = nil
+ @relations = nil
+ @spent_hours = nil
+ @total_spent_hours = nil
+ @total_estimated_hours = nil
+ @last_updated_by = nil
+ @last_notes = nil
+ base_reload(*args)
+ end
+
+ # Overrides Redmine::Acts::Customizable::InstanceMethods#available_custom_fields
+ def available_custom_fields
+ (project && tracker) ? (project.all_issue_custom_fields & tracker.custom_fields) : []
+ end
+
+ def visible_custom_field_values(user=nil)
+ user_real = user || User.current
+ custom_field_values.select do |value|
+ value.custom_field.visible_by?(project, user_real)
+ end
+ end
+
+ # Copies attributes from another issue, arg can be an id or an Issue
+ def copy_from(arg, options={})
+ issue = arg.is_a?(Issue) ? arg : Issue.visible.find(arg)
+ self.attributes = issue.attributes.dup.except("id", "root_id", "parent_id", "lft", "rgt", "created_on", "updated_on", "status_id", "closed_on")
+ self.custom_field_values = issue.custom_field_values.inject({}) {|h,v| h[v.custom_field_id] = v.value; h}
+ if options[:keep_status]
+ self.status = issue.status
+ end
+ self.author = User.current
+ unless options[:attachments] == false
+ self.attachments = issue.attachments.map do |attachement|
+ attachement.copy(:container => self)
+ end
+ end
+ unless options[:watchers] == false
+ self.watcher_user_ids =
+ issue.watcher_users.select{|u| u.status == User::STATUS_ACTIVE}.map(&:id)
+ end
+ @copied_from = issue
+ @copy_options = options
+ self
+ end
+
+ # Returns an unsaved copy of the issue
+ def copy(attributes=nil, copy_options={})
+ copy = self.class.new.copy_from(self, copy_options)
+ copy.attributes = attributes if attributes
+ copy
+ end
+
+ # Returns true if the issue is a copy
+ def copy?
+ @copied_from.present?
+ end
+
+ def status_id=(status_id)
+ if status_id.to_s != self.status_id.to_s
+ self.status = (status_id.present? ? IssueStatus.find_by_id(status_id) : nil)
+ end
+ self.status_id
+ end
+
+ # Sets the status.
+ def status=(status)
+ if status != self.status
+ @workflow_rule_by_attribute = nil
+ end
+ association(:status).writer(status)
+ end
+
+ def priority_id=(pid)
+ self.priority = nil
+ write_attribute(:priority_id, pid)
+ end
+
+ def category_id=(cid)
+ self.category = nil
+ write_attribute(:category_id, cid)
+ end
+
+ def fixed_version_id=(vid)
+ self.fixed_version = nil
+ write_attribute(:fixed_version_id, vid)
+ end
+
+ def tracker_id=(tracker_id)
+ if tracker_id.to_s != self.tracker_id.to_s
+ self.tracker = (tracker_id.present? ? Tracker.find_by_id(tracker_id) : nil)
+ end
+ self.tracker_id
+ end
+
+ # Sets the tracker.
+ # This will set the status to the default status of the new tracker if:
+ # * the status was the default for the previous tracker
+ # * or if the status was not part of the new tracker statuses
+ # * or the status was nil
+ def tracker=(tracker)
+ tracker_was = self.tracker
+ association(:tracker).writer(tracker)
+ if tracker != tracker_was
+ if status == tracker_was.try(:default_status)
+ self.status = nil
+ elsif status && tracker && !tracker.issue_status_ids.include?(status.id)
+ self.status = nil
+ end
+ reassign_custom_field_values
+ @workflow_rule_by_attribute = nil
+ end
+ self.status ||= default_status
+ self.tracker
+ end
+
+ def project_id=(project_id)
+ if project_id.to_s != self.project_id.to_s
+ self.project = (project_id.present? ? Project.find_by_id(project_id) : nil)
+ end
+ self.project_id
+ end
+
+ # Sets the project.
+ # Unless keep_tracker argument is set to true, this will change the tracker
+ # to the first tracker of the new project if the previous tracker is not part
+ # of the new project trackers.
+ # This will:
+ # * clear the fixed_version is it's no longer valid for the new project.
+ # * clear the parent issue if it's no longer valid for the new project.
+ # * set the category to the category with the same name in the new
+ # project if it exists, or clear it if it doesn't.
+ # * for new issue, set the fixed_version to the project default version
+ # if it's a valid fixed_version.
+ def project=(project, keep_tracker=false)
+ project_was = self.project
+ association(:project).writer(project)
+ if project != project_was
+ @safe_attribute_names = nil
+ end
+ if project_was && project && project_was != project
+ @assignable_versions = nil
+
+ unless keep_tracker || project.trackers.include?(tracker)
+ self.tracker = project.trackers.first
+ end
+ # Reassign to the category with same name if any
+ if category
+ self.category = project.issue_categories.find_by_name(category.name)
+ end
+ # Clear the assignee if not available in the new project for new issues (eg. copy)
+ # For existing issue, the previous assignee is still valid, so we keep it
+ if new_record? && assigned_to && !assignable_users.include?(assigned_to)
+ self.assigned_to_id = nil
+ end
+ # Keep the fixed_version if it's still valid in the new_project
+ if fixed_version && fixed_version.project != project && !project.shared_versions.include?(fixed_version)
+ self.fixed_version = nil
+ end
+ # Clear the parent task if it's no longer valid
+ unless valid_parent_project?
+ self.parent_issue_id = nil
+ end
+ reassign_custom_field_values
+ @workflow_rule_by_attribute = nil
+ end
+ # Set fixed_version to the project default version if it's valid
+ if new_record? && fixed_version.nil? && project && project.default_version_id?
+ if project.shared_versions.open.exists?(project.default_version_id)
+ self.fixed_version_id = project.default_version_id
+ end
+ end
+ self.project
+ end
+
+ def description=(arg)
+ if arg.is_a?(String)
+ arg = arg.gsub(/(\r\n|\n|\r)/, "\r\n")
+ end
+ write_attribute(:description, arg)
+ end
+
+ def deleted_attachment_ids
+ Array(@deleted_attachment_ids).map(&:to_i)
+ end
+
+ # Overrides assign_attributes so that project and tracker get assigned first
+ def assign_attributes(new_attributes, *args)
+ return if new_attributes.nil?
+ attrs = new_attributes.dup
+ attrs.stringify_keys!
+
+ %w(project project_id tracker tracker_id).each do |attr|
+ if attrs.has_key?(attr)
+ send "#{attr}=", attrs.delete(attr)
+ end
+ end
+ super attrs, *args
+ end
+
+ def attributes=(new_attributes)
+ assign_attributes new_attributes
+ end
+
+ def estimated_hours=(h)
+ write_attribute :estimated_hours, (h.is_a?(String) ? (h.to_hours || h) : h)
+ end
+
+ safe_attributes 'project_id',
+ 'tracker_id',
+ 'status_id',
+ 'category_id',
+ 'assigned_to_id',
+ 'priority_id',
+ 'fixed_version_id',
+ 'subject',
+ 'description',
+ 'start_date',
+ 'due_date',
+ 'done_ratio',
+ 'estimated_hours',
+ 'custom_field_values',
+ 'custom_fields',
+ 'lock_version',
+ 'notes',
+ :if => lambda {|issue, user| issue.new_record? || issue.attributes_editable?(user) }
+
+ safe_attributes 'notes',
+ :if => lambda {|issue, user| issue.notes_addable?(user)}
+
+ safe_attributes 'private_notes',
+ :if => lambda {|issue, user| !issue.new_record? && user.allowed_to?(:set_notes_private, issue.project)}
+
+ safe_attributes 'watcher_user_ids',
+ :if => lambda {|issue, user| issue.new_record? && user.allowed_to?(:add_issue_watchers, issue.project)}
+
+ safe_attributes 'is_private',
+ :if => lambda {|issue, user|
+ user.allowed_to?(:set_issues_private, issue.project) ||
+ (issue.author_id == user.id && user.allowed_to?(:set_own_issues_private, issue.project))
+ }
+
+ safe_attributes 'parent_issue_id',
+ :if => lambda {|issue, user| (issue.new_record? || issue.attributes_editable?(user)) &&
+ user.allowed_to?(:manage_subtasks, issue.project)}
+
+ safe_attributes 'deleted_attachment_ids',
+ :if => lambda {|issue, user| issue.attachments_deletable?(user)}
+
+ def safe_attribute_names(user=nil)
+ names = super
+ names -= disabled_core_fields
+ names -= read_only_attribute_names(user)
+ if new_record?
+ # Make sure that project_id can always be set for new issues
+ names |= %w(project_id)
+ end
+ if dates_derived?
+ names -= %w(start_date due_date)
+ end
+ if priority_derived?
+ names -= %w(priority_id)
+ end
+ if done_ratio_derived?
+ names -= %w(done_ratio)
+ end
+ names
+ end
+
+ # Safely sets attributes
+ # Should be called from controllers instead of #attributes=
+ # attr_accessible is too rough because we still want things like
+ # Issue.new(:project => foo) to work
+ def safe_attributes=(attrs, user=User.current)
+ @attributes_set_by = user
+ return unless attrs.is_a?(Hash)
+
+ attrs = attrs.deep_dup
+
+ # Project and Tracker must be set before since new_statuses_allowed_to depends on it.
+ if (p = attrs.delete('project_id')) && safe_attribute?('project_id')
+ if p.is_a?(String) && !p.match(/^\d*$/)
+ p_id = Project.find_by_identifier(p).try(:id)
+ else
+ p_id = p.to_i
+ end
+ if allowed_target_projects(user).where(:id => p_id).exists?
+ self.project_id = p_id
+ end
+
+ if project_id_changed? && attrs['category_id'].to_s == category_id_was.to_s
+ # Discard submitted category on previous project
+ attrs.delete('category_id')
+ end
+ end
+
+ if (t = attrs.delete('tracker_id')) && safe_attribute?('tracker_id')
+ if allowed_target_trackers(user).where(:id => t.to_i).exists?
+ self.tracker_id = t
+ end
+ end
+ if project && tracker.nil?
+ # Set a default tracker to accept custom field values
+ # even if tracker is not specified
+ allowed_trackers = allowed_target_trackers(user)
+
+ if attrs['parent_issue_id'].present?
+ # If parent_issue_id is present, the first tracker for which this field
+ # is not disabled is chosen as default
+ self.tracker = allowed_trackers.detect {|t| t.core_fields.include?('parent_issue_id')}
+ end
+ self.tracker ||= allowed_trackers.first
+ end
+
+ statuses_allowed = new_statuses_allowed_to(user)
+ if (s = attrs.delete('status_id')) && safe_attribute?('status_id')
+ if statuses_allowed.collect(&:id).include?(s.to_i)
+ self.status_id = s
+ end
+ end
+ if new_record? && !statuses_allowed.include?(status)
+ self.status = statuses_allowed.first || default_status
+ end
+ if (u = attrs.delete('assigned_to_id')) && safe_attribute?('assigned_to_id')
+ self.assigned_to_id = u
+ end
+
+
+ attrs = delete_unsafe_attributes(attrs, user)
+ return if attrs.empty?
+
+ if attrs['parent_issue_id'].present?
+ s = attrs['parent_issue_id'].to_s
+ unless (m = s.match(%r{\A#?(\d+)\z})) && (m[1] == parent_id.to_s || Issue.visible(user).exists?(m[1]))
+ @invalid_parent_issue_id = attrs.delete('parent_issue_id')
+ end
+ end
+
+ if attrs['custom_field_values'].present?
+ editable_custom_field_ids = editable_custom_field_values(user).map {|v| v.custom_field_id.to_s}
+ attrs['custom_field_values'].select! {|k, v| editable_custom_field_ids.include?(k.to_s)}
+ end
+
+ if attrs['custom_fields'].present?
+ editable_custom_field_ids = editable_custom_field_values(user).map {|v| v.custom_field_id.to_s}
+ attrs['custom_fields'].select! {|c| editable_custom_field_ids.include?(c['id'].to_s)}
+ end
+
+ # mass-assignment security bypass
+ assign_attributes attrs, :without_protection => true
+ end
+
+ def disabled_core_fields
+ tracker ? tracker.disabled_core_fields : []
+ end
+
+ # Returns the custom_field_values that can be edited by the given user
+ def editable_custom_field_values(user=nil)
+ read_only = read_only_attribute_names(user)
+ visible_custom_field_values(user).reject do |value|
+ read_only.include?(value.custom_field_id.to_s)
+ end
+ end
+
+ # Returns the custom fields that can be edited by the given user
+ def editable_custom_fields(user=nil)
+ editable_custom_field_values(user).map(&:custom_field).uniq
+ end
+
+ # Returns the names of attributes that are read-only for user or the current user
+ # For users with multiple roles, the read-only fields are the intersection of
+ # read-only fields of each role
+ # The result is an array of strings where sustom fields are represented with their ids
+ #
+ # Examples:
+ # issue.read_only_attribute_names # => ['due_date', '2']
+ # issue.read_only_attribute_names(user) # => []
+ def read_only_attribute_names(user=nil)
+ workflow_rule_by_attribute(user).reject {|attr, rule| rule != 'readonly'}.keys
+ end
+
+ # Returns the names of required attributes for user or the current user
+ # For users with multiple roles, the required fields are the intersection of
+ # required fields of each role
+ # The result is an array of strings where sustom fields are represented with their ids
+ #
+ # Examples:
+ # issue.required_attribute_names # => ['due_date', '2']
+ # issue.required_attribute_names(user) # => []
+ def required_attribute_names(user=nil)
+ workflow_rule_by_attribute(user).reject {|attr, rule| rule != 'required'}.keys
+ end
+
+ # Returns true if the attribute is required for user
+ def required_attribute?(name, user=nil)
+ required_attribute_names(user).include?(name.to_s)
+ end
+
+ # Returns a hash of the workflow rule by attribute for the given user
+ #
+ # Examples:
+ # issue.workflow_rule_by_attribute # => {'due_date' => 'required', 'start_date' => 'readonly'}
+ def workflow_rule_by_attribute(user=nil)
+ return @workflow_rule_by_attribute if @workflow_rule_by_attribute && user.nil?
+
+ user_real = user || User.current
+ roles = user_real.admin ? Role.all.to_a : user_real.roles_for_project(project)
+ roles = roles.select(&:consider_workflow?)
+ return {} if roles.empty?
+
+ result = {}
+ workflow_permissions = WorkflowPermission.where(:tracker_id => tracker_id, :old_status_id => status_id, :role_id => roles.map(&:id)).to_a
+ if workflow_permissions.any?
+ workflow_rules = workflow_permissions.inject({}) do |h, wp|
+ h[wp.field_name] ||= {}
+ h[wp.field_name][wp.role_id] = wp.rule
+ h
+ end
+ fields_with_roles = {}
+ IssueCustomField.where(:visible => false).joins(:roles).pluck(:id, "role_id").each do |field_id, role_id|
+ fields_with_roles[field_id] ||= []
+ fields_with_roles[field_id] << role_id
+ end
+ roles.each do |role|
+ fields_with_roles.each do |field_id, role_ids|
+ unless role_ids.include?(role.id)
+ field_name = field_id.to_s
+ workflow_rules[field_name] ||= {}
+ workflow_rules[field_name][role.id] = 'readonly'
+ end
+ end
+ end
+ workflow_rules.each do |attr, rules|
+ next if rules.size < roles.size
+ uniq_rules = rules.values.uniq
+ if uniq_rules.size == 1
+ result[attr] = uniq_rules.first
+ else
+ result[attr] = 'required'
+ end
+ end
+ end
+ @workflow_rule_by_attribute = result if user.nil?
+ result
+ end
+ private :workflow_rule_by_attribute
+
+ def done_ratio
+ if Issue.use_status_for_done_ratio? && status && status.default_done_ratio
+ status.default_done_ratio
+ else
+ read_attribute(:done_ratio)
+ end
+ end
+
+ def self.use_status_for_done_ratio?
+ Setting.issue_done_ratio == 'issue_status'
+ end
+
+ def self.use_field_for_done_ratio?
+ Setting.issue_done_ratio == 'issue_field'
+ end
+
+ def validate_issue
+ if due_date && start_date && (start_date_changed? || due_date_changed?) && due_date < start_date
+ errors.add :due_date, :greater_than_start_date
+ end
+
+ if start_date && start_date_changed? && soonest_start && start_date < soonest_start
+ errors.add :start_date, :earlier_than_minimum_start_date, :date => format_date(soonest_start)
+ end
+
+ if fixed_version
+ if !assignable_versions.include?(fixed_version)
+ errors.add :fixed_version_id, :inclusion
+ elsif reopening? && fixed_version.closed?
+ errors.add :base, I18n.t(:error_can_not_reopen_issue_on_closed_version)
+ end
+ end
+
+ # Checks that the issue can not be added/moved to a disabled tracker
+ if project && (tracker_id_changed? || project_id_changed?)
+ if tracker && !project.trackers.include?(tracker)
+ errors.add :tracker_id, :inclusion
+ end
+ end
+
+ if assigned_to_id_changed? && assigned_to_id.present?
+ unless assignable_users.include?(assigned_to)
+ errors.add :assigned_to_id, :invalid
+ end
+ end
+
+ # Checks parent issue assignment
+ if @invalid_parent_issue_id.present?
+ errors.add :parent_issue_id, :invalid
+ elsif @parent_issue
+ if !valid_parent_project?(@parent_issue)
+ errors.add :parent_issue_id, :invalid
+ elsif (@parent_issue != parent) && (
+ self.would_reschedule?(@parent_issue) ||
+ @parent_issue.self_and_ancestors.any? {|a| a.relations_from.any? {|r| r.relation_type == IssueRelation::TYPE_PRECEDES && r.issue_to.would_reschedule?(self)}}
+ )
+ errors.add :parent_issue_id, :invalid
+ elsif !closed? && @parent_issue.closed?
+ # cannot attach an open issue to a closed parent
+ errors.add :base, :open_issue_with_closed_parent
+ elsif !new_record?
+ # moving an existing issue
+ if move_possible?(@parent_issue)
+ # move accepted
+ else
+ errors.add :parent_issue_id, :invalid
+ end
+ end
+ end
+ end
+
+ # Validates the issue against additional workflow requirements
+ def validate_required_fields
+ user = new_record? ? author : current_journal.try(:user)
+
+ required_attribute_names(user).each do |attribute|
+ if attribute =~ /^\d+$/
+ attribute = attribute.to_i
+ v = custom_field_values.detect {|v| v.custom_field_id == attribute }
+ if v && Array(v.value).detect(&:present?).nil?
+ errors.add :base, v.custom_field.name + ' ' + l('activerecord.errors.messages.blank')
+ end
+ else
+ if respond_to?(attribute) && send(attribute).blank? && !disabled_core_fields.include?(attribute)
+ next if attribute == 'category_id' && project.try(:issue_categories).blank?
+ next if attribute == 'fixed_version_id' && assignable_versions.blank?
+ errors.add attribute, :blank
+ end
+ end
+ end
+ end
+
+ def validate_permissions
+ if @attributes_set_by && new_record? && copy?
+ unless allowed_target_trackers(@attributes_set_by).include?(tracker)
+ errors.add :tracker, :invalid
+ end
+ end
+ end
+
+ # Overrides Redmine::Acts::Customizable::InstanceMethods#validate_custom_field_values
+ # so that custom values that are not editable are not validated (eg. a custom field that
+ # is marked as required should not trigger a validation error if the user is not allowed
+ # to edit this field).
+ def validate_custom_field_values
+ user = new_record? ? author : current_journal.try(:user)
+ if new_record? || custom_field_values_changed?
+ editable_custom_field_values(user).each(&:validate_value)
+ end
+ end
+
+ # Set the done_ratio using the status if that setting is set. This will keep the done_ratios
+ # even if the user turns off the setting later
+ def update_done_ratio_from_issue_status
+ if Issue.use_status_for_done_ratio? && status && status.default_done_ratio
+ self.done_ratio = status.default_done_ratio
+ end
+ end
+
+ def init_journal(user, notes = "")
+ @current_journal ||= Journal.new(:journalized => self, :user => user, :notes => notes)
+ end
+
+ # Returns the current journal or nil if it's not initialized
+ def current_journal
+ @current_journal
+ end
+
+ # Clears the current journal
+ def clear_journal
+ @current_journal = nil
+ end
+
+ # Returns the names of attributes that are journalized when updating the issue
+ def journalized_attribute_names
+ names = Issue.column_names - %w(id root_id lft rgt lock_version created_on updated_on closed_on)
+ if tracker
+ names -= tracker.disabled_core_fields
+ end
+ names
+ end
+
+ # Returns the id of the last journal or nil
+ def last_journal_id
+ if new_record?
+ nil
+ else
+ journals.maximum(:id)
+ end
+ end
+
+ # Returns a scope for journals that have an id greater than journal_id
+ def journals_after(journal_id)
+ scope = journals.reorder("#{Journal.table_name}.id ASC")
+ if journal_id.present?
+ scope = scope.where("#{Journal.table_name}.id > ?", journal_id.to_i)
+ end
+ scope
+ end
+
+ # Returns the journals that are visible to user with their index
+ # Used to display the issue history
+ def visible_journals_with_index(user=User.current)
+ result = journals.
+ preload(:details).
+ preload(:user => :email_address).
+ reorder(:created_on, :id).to_a
+
+ result.each_with_index {|j,i| j.indice = i+1}
+
+ unless user.allowed_to?(:view_private_notes, project)
+ result.select! do |journal|
+ !journal.private_notes? || journal.user == user
+ end
+ end
+ Journal.preload_journals_details_custom_fields(result)
+ result.select! {|journal| journal.notes? || journal.visible_details.any?}
+ result
+ end
+
+ # Returns the initial status of the issue
+ # Returns nil for a new issue
+ def status_was
+ if status_id_changed?
+ if status_id_was.to_i > 0
+ @status_was ||= IssueStatus.find_by_id(status_id_was)
+ end
+ else
+ @status_was ||= status
+ end
+ end
+
+ # Return true if the issue is closed, otherwise false
+ def closed?
+ status.present? && status.is_closed?
+ end
+
+ # Returns true if the issue was closed when loaded
+ def was_closed?
+ status_was.present? && status_was.is_closed?
+ end
+
+ # Return true if the issue is being reopened
+ def reopening?
+ if new_record?
+ false
+ else
+ status_id_changed? && !closed? && was_closed?
+ end
+ end
+ alias :reopened? :reopening?
+
+ # Return true if the issue is being closed
+ def closing?
+ if new_record?
+ closed?
+ else
+ status_id_changed? && closed? && !was_closed?
+ end
+ end
+
+ # Returns true if the issue is overdue
+ def overdue?
+ due_date.present? && (due_date < User.current.today) && !closed?
+ end
+
+ # Is the amount of work done less than it should for the due date
+ def behind_schedule?
+ return false if start_date.nil? || due_date.nil?
+ done_date = start_date + ((due_date - start_date + 1) * done_ratio / 100).floor
+ return done_date <= User.current.today
+ end
+
+ # Does this issue have children?
+ def children?
+ !leaf?
+ end
+
+ # Users the issue can be assigned to
+ def assignable_users
+ users = project.assignable_users(tracker).to_a
+ users << author if author && author.active?
+ if assigned_to_id_was.present? && assignee = Principal.find_by_id(assigned_to_id_was)
+ users << assignee
+ end
+ users.uniq.sort
+ end
+
+ # Versions that the issue can be assigned to
+ def assignable_versions
+ return @assignable_versions if @assignable_versions
+
+ versions = project.shared_versions.open.to_a
+ if fixed_version
+ if fixed_version_id_changed?
+ # nothing to do
+ elsif project_id_changed?
+ if project.shared_versions.include?(fixed_version)
+ versions << fixed_version
+ end
+ else
+ versions << fixed_version
+ end
+ end
+ @assignable_versions = versions.uniq.sort
+ end
+
+ # Returns true if this issue is blocked by another issue that is still open
+ def blocked?
+ !relations_to.detect {|ir| ir.relation_type == 'blocks' && !ir.issue_from.closed?}.nil?
+ end
+
+ # Returns the default status of the issue based on its tracker
+ # Returns nil if tracker is nil
+ def default_status
+ tracker.try(:default_status)
+ end
+
+ # Returns an array of statuses that user is able to apply
+ def new_statuses_allowed_to(user=User.current, include_default=false)
+ initial_status = nil
+ if new_record?
+ # nop
+ elsif tracker_id_changed?
+ if Tracker.where(:id => tracker_id_was, :default_status_id => status_id_was).any?
+ initial_status = default_status
+ elsif tracker.issue_status_ids.include?(status_id_was)
+ initial_status = IssueStatus.find_by_id(status_id_was)
+ else
+ initial_status = default_status
+ end
+ else
+ initial_status = status_was
+ end
+
+ initial_assigned_to_id = assigned_to_id_changed? ? assigned_to_id_was : assigned_to_id
+ assignee_transitions_allowed = initial_assigned_to_id.present? &&
+ (user.id == initial_assigned_to_id || user.group_ids.include?(initial_assigned_to_id))
+
+ statuses = []
+ statuses += IssueStatus.new_statuses_allowed(
+ initial_status,
+ user.admin ? Role.all.to_a : user.roles_for_project(project),
+ tracker,
+ author == user,
+ assignee_transitions_allowed
+ )
+ statuses << initial_status unless statuses.empty?
+ statuses << default_status if include_default || (new_record? && statuses.empty?)
+
+ statuses = statuses.compact.uniq.sort
+ if blocked? || descendants.open.any?
+ # cannot close a blocked issue or a parent with open subtasks
+ statuses.reject!(&:is_closed?)
+ end
+ if ancestors.open(false).any?
+ # cannot reopen a subtask of a closed parent
+ statuses.select!(&:is_closed?)
+ end
+ statuses
+ end
+
+ # Returns the previous assignee (user or group) if changed
+ def assigned_to_was
+ # assigned_to_id_was is reset before after_save callbacks
+ user_id = @previous_assigned_to_id || assigned_to_id_was
+ if user_id && user_id != assigned_to_id
+ @assigned_to_was ||= Principal.find_by_id(user_id)
+ end
+ end
+
+ # Returns the original tracker
+ def tracker_was
+ Tracker.find_by_id(tracker_id_was)
+ end
+
+ # Returns the users that should be notified
+ def notified_users
+ notified = []
+ # Author and assignee are always notified unless they have been
+ # locked or don't want to be notified
+ notified << author if author
+ if assigned_to
+ notified += (assigned_to.is_a?(Group) ? assigned_to.users : [assigned_to])
+ end
+ if assigned_to_was
+ notified += (assigned_to_was.is_a?(Group) ? assigned_to_was.users : [assigned_to_was])
+ end
+ notified = notified.select {|u| u.active? && u.notify_about?(self)}
+
+ notified += project.notified_users
+ notified.uniq!
+ # Remove users that can not view the issue
+ notified.reject! {|user| !visible?(user)}
+ notified
+ end
+
+ # Returns the email addresses that should be notified
+ def recipients
+ notified_users.collect(&:mail)
+ end
+
+ def each_notification(users, &block)
+ if users.any?
+ if custom_field_values.detect {|value| !value.custom_field.visible?}
+ users_by_custom_field_visibility = users.group_by do |user|
+ visible_custom_field_values(user).map(&:custom_field_id).sort
+ end
+ users_by_custom_field_visibility.values.each do |users|
+ yield(users)
+ end
+ else
+ yield(users)
+ end
+ end
+ end
+
+ def notify?
+ @notify != false
+ end
+
+ def notify=(arg)
+ @notify = arg
+ end
+
+ # Returns the number of hours spent on this issue
+ def spent_hours
+ @spent_hours ||= time_entries.sum(:hours) || 0.0
+ end
+
+ # Returns the total number of hours spent on this issue and its descendants
+ def total_spent_hours
+ @total_spent_hours ||= if leaf?
+ spent_hours
+ else
+ self_and_descendants.joins(:time_entries).sum("#{TimeEntry.table_name}.hours").to_f || 0.0
+ end
+ end
+
+ def total_estimated_hours
+ if leaf?
+ estimated_hours
+ else
+ @total_estimated_hours ||= self_and_descendants.visible.sum(:estimated_hours)
+ end
+ end
+
+ def relations
+ @relations ||= IssueRelation::Relations.new(self, (relations_from + relations_to).sort)
+ end
+
+ def last_updated_by
+ if @last_updated_by
+ @last_updated_by.presence
+ else
+ journals.reorder(:id => :desc).first.try(:user)
+ end
+ end
+
+ def last_notes
+ if @last_notes
+ @last_notes
+ else
+ journals.where.not(notes: '').reorder(:id => :desc).first.try(:notes)
+ end
+ end
+
+ # Preloads relations for a collection of issues
+ def self.load_relations(issues)
+ if issues.any?
+ relations = IssueRelation.where("issue_from_id IN (:ids) OR issue_to_id IN (:ids)", :ids => issues.map(&:id)).all
+ issues.each do |issue|
+ issue.instance_variable_set "@relations", relations.select {|r| r.issue_from_id == issue.id || r.issue_to_id == issue.id}
+ end
+ end
+ end
+
+ # Preloads visible spent time for a collection of issues
+ def self.load_visible_spent_hours(issues, user=User.current)
+ if issues.any?
+ hours_by_issue_id = TimeEntry.visible(user).where(:issue_id => issues.map(&:id)).group(:issue_id).sum(:hours)
+ issues.each do |issue|
+ issue.instance_variable_set "@spent_hours", (hours_by_issue_id[issue.id] || 0.0)
+ end
+ end
+ end
+
+ # Preloads visible total spent time for a collection of issues
+ def self.load_visible_total_spent_hours(issues, user=User.current)
+ if issues.any?
+ hours_by_issue_id = TimeEntry.visible(user).joins(:issue).
+ joins("JOIN #{Issue.table_name} parent ON parent.root_id = #{Issue.table_name}.root_id" +
+ " AND parent.lft <= #{Issue.table_name}.lft AND parent.rgt >= #{Issue.table_name}.rgt").
+ where("parent.id IN (?)", issues.map(&:id)).group("parent.id").sum(:hours)
+ issues.each do |issue|
+ issue.instance_variable_set "@total_spent_hours", (hours_by_issue_id[issue.id] || 0.0)
+ end
+ end
+ end
+
+ # Preloads visible relations for a collection of issues
+ def self.load_visible_relations(issues, user=User.current)
+ if issues.any?
+ issue_ids = issues.map(&:id)
+ # Relations with issue_from in given issues and visible issue_to
+ relations_from = IssueRelation.joins(:issue_to => :project).
+ where(visible_condition(user)).where(:issue_from_id => issue_ids).to_a
+ # Relations with issue_to in given issues and visible issue_from
+ relations_to = IssueRelation.joins(:issue_from => :project).
+ where(visible_condition(user)).
+ where(:issue_to_id => issue_ids).to_a
+ issues.each do |issue|
+ relations =
+ relations_from.select {|relation| relation.issue_from_id == issue.id} +
+ relations_to.select {|relation| relation.issue_to_id == issue.id}
+
+ issue.instance_variable_set "@relations", IssueRelation::Relations.new(issue, relations.sort)
+ end
+ end
+ end
+
+ # Returns a scope of the given issues and their descendants
+ def self.self_and_descendants(issues)
+ Issue.joins("JOIN #{Issue.table_name} ancestors" +
+ " ON ancestors.root_id = #{Issue.table_name}.root_id" +
+ " AND ancestors.lft <= #{Issue.table_name}.lft AND ancestors.rgt >= #{Issue.table_name}.rgt"
+ ).
+ where(:ancestors => {:id => issues.map(&:id)})
+ end
+
+ # Preloads users who updated last a collection of issues
+ def self.load_visible_last_updated_by(issues, user=User.current)
+ if issues.any?
+ issue_ids = issues.map(&:id)
+ journal_ids = Journal.joins(issue: :project).
+ where(:journalized_type => 'Issue', :journalized_id => issue_ids).
+ where(Journal.visible_notes_condition(user, :skip_pre_condition => true)).
+ group(:journalized_id).
+ maximum(:id).
+ values
+ journals = Journal.where(:id => journal_ids).preload(:user).to_a
+
+ issues.each do |issue|
+ journal = journals.detect {|j| j.journalized_id == issue.id}
+ issue.instance_variable_set("@last_updated_by", journal.try(:user) || '')
+ end
+ end
+ end
+
+ # Preloads visible last notes for a collection of issues
+ def self.load_visible_last_notes(issues, user=User.current)
+ if issues.any?
+ issue_ids = issues.map(&:id)
+ journal_ids = Journal.joins(issue: :project).
+ where(:journalized_type => 'Issue', :journalized_id => issue_ids).
+ where(Journal.visible_notes_condition(user, :skip_pre_condition => true)).
+ where.not(notes: '').
+ group(:journalized_id).
+ maximum(:id).
+ values
+ journals = Journal.where(:id => journal_ids).to_a
+
+ issues.each do |issue|
+ journal = journals.detect {|j| j.journalized_id == issue.id}
+ issue.instance_variable_set("@last_notes", journal.try(:notes) || '')
+ end
+ end
+ end
+
+ # Finds an issue relation given its id.
+ def find_relation(relation_id)
+ IssueRelation.where("issue_to_id = ? OR issue_from_id = ?", id, id).find(relation_id)
+ end
+
+ # Returns true if this issue blocks the other issue, otherwise returns false
+ def blocks?(other)
+ all = [self]
+ last = [self]
+ while last.any?
+ current = last.map {|i| i.relations_from.where(:relation_type => IssueRelation::TYPE_BLOCKS).map(&:issue_to)}.flatten.uniq
+ current -= last
+ current -= all
+ return true if current.include?(other)
+ last = current
+ all += last
+ end
+ false
+ end
+
+ # Returns true if the other issue might be rescheduled if the start/due dates of this issue change
+ def would_reschedule?(other)
+ all = [self]
+ last = [self]
+ while last.any?
+ current = last.map {|i|
+ i.relations_from.where(:relation_type => IssueRelation::TYPE_PRECEDES).map(&:issue_to) +
+ i.leaves.to_a +
+ i.ancestors.map {|a| a.relations_from.where(:relation_type => IssueRelation::TYPE_PRECEDES).map(&:issue_to)}
+ }.flatten.uniq
+ current -= last
+ current -= all
+ return true if current.include?(other)
+ last = current
+ all += last
+ end
+ false
+ end
+
+ # Returns an array of issues that duplicate this one
+ def duplicates
+ relations_to.select {|r| r.relation_type == IssueRelation::TYPE_DUPLICATES}.collect {|r| r.issue_from}
+ end
+
+ # Returns the due date or the target due date if any
+ # Used on gantt chart
+ def due_before
+ due_date || (fixed_version ? fixed_version.effective_date : nil)
+ end
+
+ # Returns the time scheduled for this issue.
+ #
+ # Example:
+ # Start Date: 2/26/09, End Date: 3/04/09
+ # duration => 6
+ def duration
+ (start_date && due_date) ? due_date - start_date : 0
+ end
+
+ # Returns the duration in working days
+ def working_duration
+ (start_date && due_date) ? working_days(start_date, due_date) : 0
+ end
+
+ def soonest_start(reload=false)
+ if @soonest_start.nil? || reload
+ relations_to.reload if reload
+ dates = relations_to.collect{|relation| relation.successor_soonest_start}
+ p = @parent_issue || parent
+ if p && Setting.parent_issue_dates == 'derived'
+ dates << p.soonest_start
+ end
+ @soonest_start = dates.compact.max
+ end
+ @soonest_start
+ end
+
+ # Sets start_date on the given date or the next working day
+ # and changes due_date to keep the same working duration.
+ def reschedule_on(date)
+ wd = working_duration
+ date = next_working_date(date)
+ self.start_date = date
+ self.due_date = add_working_days(date, wd)
+ end
+
+ # Reschedules the issue on the given date or the next working day and saves the record.
+ # If the issue is a parent task, this is done by rescheduling its subtasks.
+ def reschedule_on!(date, journal=nil)
+ return if date.nil?
+ if leaf? || !dates_derived?
+ if start_date.nil? || start_date != date
+ if start_date && start_date > date
+ # Issue can not be moved earlier than its soonest start date
+ date = [soonest_start(true), date].compact.max
+ end
+ if journal
+ init_journal(journal.user)
+ end
+ reschedule_on(date)
+ begin
+ save
+ rescue ActiveRecord::StaleObjectError
+ reload
+ reschedule_on(date)
+ save
+ end
+ end
+ else
+ leaves.each do |leaf|
+ if leaf.start_date
+ # Only move subtask if it starts at the same date as the parent
+ # or if it starts before the given date
+ if start_date == leaf.start_date || date > leaf.start_date
+ leaf.reschedule_on!(date)
+ end
+ else
+ leaf.reschedule_on!(date)
+ end
+ end
+ end
+ end
+
+ def dates_derived?
+ !leaf? && Setting.parent_issue_dates == 'derived'
+ end
+
+ def priority_derived?
+ !leaf? && Setting.parent_issue_priority == 'derived'
+ end
+
+ def done_ratio_derived?
+ !leaf? && Setting.parent_issue_done_ratio == 'derived'
+ end
+
+ def <=>(issue)
+ if issue.nil?
+ -1
+ elsif root_id != issue.root_id
+ (root_id || 0) <=> (issue.root_id || 0)
+ else
+ (lft || 0) <=> (issue.lft || 0)
+ end
+ end
+
+ def to_s
+ "#{tracker} ##{id}: #{subject}"
+ end
+
+ # Returns a string of css classes that apply to the issue
+ def css_classes(user=User.current)
+ s = "issue tracker-#{tracker_id} status-#{status_id} #{priority.try(:css_classes)}"
+ s << ' closed' if closed?
+ s << ' overdue' if overdue?
+ s << ' child' if child?
+ s << ' parent' unless leaf?
+ s << ' private' if is_private?
+ if user.logged?
+ s << ' created-by-me' if author_id == user.id
+ s << ' assigned-to-me' if assigned_to_id == user.id
+ s << ' assigned-to-my-group' if user.groups.any? {|g| g.id == assigned_to_id}
+ end
+ s
+ end
+
+ # Unassigns issues from +version+ if it's no longer shared with issue's project
+ def self.update_versions_from_sharing_change(version)
+ # Update issues assigned to the version
+ update_versions(["#{Issue.table_name}.fixed_version_id = ?", version.id])
+ end
+
+ # Unassigns issues from versions that are no longer shared
+ # after +project+ was moved
+ def self.update_versions_from_hierarchy_change(project)
+ moved_project_ids = project.self_and_descendants.reload.collect(&:id)
+ # Update issues of the moved projects and issues assigned to a version of a moved project
+ Issue.update_versions(
+ ["#{Version.table_name}.project_id IN (?) OR #{Issue.table_name}.project_id IN (?)",
+ moved_project_ids, moved_project_ids]
+ )
+ end
+
+ def parent_issue_id=(arg)
+ s = arg.to_s.strip.presence
+ if s && (m = s.match(%r{\A#?(\d+)\z})) && (@parent_issue = Issue.find_by_id(m[1]))
+ @invalid_parent_issue_id = nil
+ elsif s.blank?
+ @parent_issue = nil
+ @invalid_parent_issue_id = nil
+ else
+ @parent_issue = nil
+ @invalid_parent_issue_id = arg
+ end
+ end
+
+ def parent_issue_id
+ if @invalid_parent_issue_id
+ @invalid_parent_issue_id
+ elsif instance_variable_defined? :@parent_issue
+ @parent_issue.nil? ? nil : @parent_issue.id
+ else
+ parent_id
+ end
+ end
+
+ def set_parent_id
+ self.parent_id = parent_issue_id
+ end
+
+ # Returns true if issue's project is a valid
+ # parent issue project
+ def valid_parent_project?(issue=parent)
+ return true if issue.nil? || issue.project_id == project_id
+
+ case Setting.cross_project_subtasks
+ when 'system'
+ true
+ when 'tree'
+ issue.project.root == project.root
+ when 'hierarchy'
+ issue.project.is_or_is_ancestor_of?(project) || issue.project.is_descendant_of?(project)
+ when 'descendants'
+ issue.project.is_or_is_ancestor_of?(project)
+ else
+ false
+ end
+ end
+
+ # Returns an issue scope based on project and scope
+ def self.cross_project_scope(project, scope=nil)
+ if project.nil?
+ return Issue
+ end
+ case scope
+ when 'all', 'system'
+ Issue
+ when 'tree'
+ Issue.joins(:project).where("(#{Project.table_name}.lft >= :lft AND #{Project.table_name}.rgt <= :rgt)",
+ :lft => project.root.lft, :rgt => project.root.rgt)
+ when 'hierarchy'
+ Issue.joins(:project).where("(#{Project.table_name}.lft >= :lft AND #{Project.table_name}.rgt <= :rgt) OR (#{Project.table_name}.lft < :lft AND #{Project.table_name}.rgt > :rgt)",
+ :lft => project.lft, :rgt => project.rgt)
+ when 'descendants'
+ Issue.joins(:project).where("(#{Project.table_name}.lft >= :lft AND #{Project.table_name}.rgt <= :rgt)",
+ :lft => project.lft, :rgt => project.rgt)
+ else
+ Issue.where(:project_id => project.id)
+ end
+ end
+
+ def self.by_tracker(project)
+ count_and_group_by(:project => project, :association => :tracker)
+ end
+
+ def self.by_version(project)
+ count_and_group_by(:project => project, :association => :fixed_version)
+ end
+
+ def self.by_priority(project)
+ count_and_group_by(:project => project, :association => :priority)
+ end
+
+ def self.by_category(project)
+ count_and_group_by(:project => project, :association => :category)
+ end
+
+ def self.by_assigned_to(project)
+ count_and_group_by(:project => project, :association => :assigned_to)
+ end
+
+ def self.by_author(project)
+ count_and_group_by(:project => project, :association => :author)
+ end
+
+ def self.by_subproject(project)
+ r = count_and_group_by(:project => project, :with_subprojects => true, :association => :project)
+ r.reject {|r| r["project_id"] == project.id.to_s}
+ end
+
+ # Query generator for selecting groups of issue counts for a project
+ # based on specific criteria
+ #
+ # Options
+ # * project - Project to search in.
+ # * with_subprojects - Includes subprojects issues if set to true.
+ # * association - Symbol. Association for grouping.
+ def self.count_and_group_by(options)
+ assoc = reflect_on_association(options[:association])
+ select_field = assoc.foreign_key
+
+ Issue.
+ visible(User.current, :project => options[:project], :with_subprojects => options[:with_subprojects]).
+ joins(:status, assoc.name).
+ group(:status_id, :is_closed, select_field).
+ count.
+ map do |columns, total|
+ status_id, is_closed, field_value = columns
+ is_closed = ['t', 'true', '1'].include?(is_closed.to_s)
+ {
+ "status_id" => status_id.to_s,
+ "closed" => is_closed,
+ select_field => field_value.to_s,
+ "total" => total.to_s
+ }
+ end
+ end
+
+ # Returns a scope of projects that user can assign the issue to
+ def allowed_target_projects(user=User.current)
+ current_project = new_record? ? nil : project
+ self.class.allowed_target_projects(user, current_project)
+ end
+
+ # Returns a scope of projects that user can assign issues to
+ # If current_project is given, it will be included in the scope
+ def self.allowed_target_projects(user=User.current, current_project=nil)
+ condition = Project.allowed_to_condition(user, :add_issues)
+ if current_project
+ condition = ["(#{condition}) OR #{Project.table_name}.id = ?", current_project.id]
+ end
+ Project.where(condition).having_trackers
+ end
+
+ # Returns a scope of trackers that user can assign the issue to
+ def allowed_target_trackers(user=User.current)
+ self.class.allowed_target_trackers(project, user, tracker_id_was)
+ end
+
+ # Returns a scope of trackers that user can assign project issues to
+ def self.allowed_target_trackers(project, user=User.current, current_tracker=nil)
+ if project
+ scope = project.trackers.sorted
+ unless user.admin?
+ roles = user.roles_for_project(project).select {|r| r.has_permission?(:add_issues)}
+ unless roles.any? {|r| r.permissions_all_trackers?(:add_issues)}
+ tracker_ids = roles.map {|r| r.permissions_tracker_ids(:add_issues)}.flatten.uniq
+ if current_tracker
+ tracker_ids << current_tracker
+ end
+ scope = scope.where(:id => tracker_ids)
+ end
+ end
+ scope
+ else
+ Tracker.none
+ end
+ end
+
+ private
+
+ def user_tracker_permission?(user, permission)
+ if project && !project.active?
+ perm = Redmine::AccessControl.permission(permission)
+ return false unless perm && perm.read?
+ end
+
+ if user.admin?
+ true
+ else
+ roles = user.roles_for_project(project).select {|r| r.has_permission?(permission)}
+ roles.any? {|r| r.permissions_all_trackers?(permission) || r.permissions_tracker_ids?(permission, tracker_id)}
+ end
+ end
+
+ def after_project_change
+ # Update project_id on related time entries
+ TimeEntry.where({:issue_id => id}).update_all(["project_id = ?", project_id])
+
+ # Delete issue relations
+ unless Setting.cross_project_issue_relations?
+ relations_from.clear
+ relations_to.clear
+ end
+
+ # Move subtasks that were in the same project
+ children.each do |child|
+ next unless child.project_id == project_id_was
+ # Change project and keep project
+ child.send :project=, project, true
+ unless child.save
+ errors.add :base, l(:error_move_of_child_not_possible, :child => "##{child.id}", :errors => child.errors.full_messages.join(", "))
+ raise ActiveRecord::Rollback
+ end
+ end
+ end
+
+ # Callback for after the creation of an issue by copy
+ # * adds a "copied to" relation with the copied issue
+ # * copies subtasks from the copied issue
+ def after_create_from_copy
+ return unless copy? && !@after_create_from_copy_handled
+
+ if (@copied_from.project_id == project_id || Setting.cross_project_issue_relations?) && @copy_options[:link] != false
+ if @current_journal
+ @copied_from.init_journal(@current_journal.user)
+ end
+ relation = IssueRelation.new(:issue_from => @copied_from, :issue_to => self, :relation_type => IssueRelation::TYPE_COPIED_TO)
+ unless relation.save
+ logger.error "Could not create relation while copying ##{@copied_from.id} to ##{id} due to validation errors: #{relation.errors.full_messages.join(', ')}" if logger
+ end
+ end
+
+ unless @copied_from.leaf? || @copy_options[:subtasks] == false
+ copy_options = (@copy_options || {}).merge(:subtasks => false)
+ copied_issue_ids = {@copied_from.id => self.id}
+ @copied_from.reload.descendants.reorder("#{Issue.table_name}.lft").each do |child|
+ # Do not copy self when copying an issue as a descendant of the copied issue
+ next if child == self
+ # Do not copy subtasks of issues that were not copied
+ next unless copied_issue_ids[child.parent_id]
+ # Do not copy subtasks that are not visible to avoid potential disclosure of private data
+ unless child.visible?
+ logger.error "Subtask ##{child.id} was not copied during ##{@copied_from.id} copy because it is not visible to the current user" if logger
+ next
+ end
+ copy = Issue.new.copy_from(child, copy_options)
+ if @current_journal
+ copy.init_journal(@current_journal.user)
+ end
+ copy.author = author
+ copy.project = project
+ copy.parent_issue_id = copied_issue_ids[child.parent_id]
+ copy.fixed_version_id = nil unless child.fixed_version.present? && child.fixed_version.status == 'open'
+ copy.assigned_to = nil unless child.assigned_to_id.present? && child.assigned_to.status == User::STATUS_ACTIVE
+ unless copy.save
+ logger.error "Could not copy subtask ##{child.id} while copying ##{@copied_from.id} to ##{id} due to validation errors: #{copy.errors.full_messages.join(', ')}" if logger
+ next
+ end
+ copied_issue_ids[child.id] = copy.id
+ end
+ end
+ @after_create_from_copy_handled = true
+ end
+
+ def update_nested_set_attributes
+ if parent_id_changed?
+ update_nested_set_attributes_on_parent_change
+ end
+ remove_instance_variable(:@parent_issue) if instance_variable_defined?(:@parent_issue)
+ end
+
+ # Updates the nested set for when an existing issue is moved
+ def update_nested_set_attributes_on_parent_change
+ former_parent_id = parent_id_was
+ # delete invalid relations of all descendants
+ self_and_descendants.each do |issue|
+ issue.relations.each do |relation|
+ relation.destroy unless relation.valid?
+ end
+ end
+ # update former parent
+ recalculate_attributes_for(former_parent_id) if former_parent_id
+ end
+
+ def update_parent_attributes
+ if parent_id
+ recalculate_attributes_for(parent_id)
+ association(:parent).reset
+ end
+ end
+
+ def recalculate_attributes_for(issue_id)
+ if issue_id && p = Issue.find_by_id(issue_id)
+ if p.priority_derived?
+ # priority = highest priority of open children
+ # priority is left unchanged if all children are closed and there's no default priority defined
+ if priority_position = p.children.open.joins(:priority).maximum("#{IssuePriority.table_name}.position")
+ p.priority = IssuePriority.find_by_position(priority_position)
+ elsif default_priority = IssuePriority.default
+ p.priority = default_priority
+ end
+ end
+
+ if p.dates_derived?
+ # start/due dates = lowest/highest dates of children
+ p.start_date = p.children.minimum(:start_date)
+ p.due_date = p.children.maximum(:due_date)
+ if p.start_date && p.due_date && p.due_date < p.start_date
+ p.start_date, p.due_date = p.due_date, p.start_date
+ end
+ end
+
+ if p.done_ratio_derived?
+ # done ratio = average ratio of children weighted with their total estimated hours
+ unless Issue.use_status_for_done_ratio? && p.status && p.status.default_done_ratio
+ children = p.children.to_a
+ if children.any?
+ child_with_total_estimated_hours = children.select {|c| c.total_estimated_hours.to_f > 0.0}
+ if child_with_total_estimated_hours.any?
+ average = child_with_total_estimated_hours.map(&:total_estimated_hours).sum.to_f / child_with_total_estimated_hours.count
+ else
+ average = 1.0
+ end
+ done = children.map {|c|
+ estimated = c.total_estimated_hours.to_f
+ estimated = average unless estimated > 0.0
+ ratio = c.closed? ? 100 : (c.done_ratio || 0)
+ estimated * ratio
+ }.sum
+ progress = done / (average * children.count)
+ p.done_ratio = progress.round
+ end
+ end
+ end
+
+ # ancestors will be recursively updated
+ p.save(:validate => false)
+ end
+ end
+
+ # Update issues so their versions are not pointing to a
+ # fixed_version that is not shared with the issue's project
+ def self.update_versions(conditions=nil)
+ # Only need to update issues with a fixed_version from
+ # a different project and that is not systemwide shared
+ Issue.joins(:project, :fixed_version).
+ where("#{Issue.table_name}.fixed_version_id IS NOT NULL" +
+ " AND #{Issue.table_name}.project_id <> #{Version.table_name}.project_id" +
+ " AND #{Version.table_name}.sharing <> 'system'").
+ where(conditions).each do |issue|
+ next if issue.project.nil? || issue.fixed_version.nil?
+ unless issue.project.shared_versions.include?(issue.fixed_version)
+ issue.init_journal(User.current)
+ issue.fixed_version = nil
+ issue.save
+ end
+ end
+ end
+
+ def delete_selected_attachments
+ if deleted_attachment_ids.present?
+ objects = attachments.where(:id => deleted_attachment_ids.map(&:to_i))
+ attachments.delete(objects)
+ end
+ end
+
+ # Callback on file attachment
+ def attachment_added(attachment)
+ if current_journal && !attachment.new_record?
+ current_journal.journalize_attachment(attachment, :added)
+ end
+ end
+
+ # Callback on attachment deletion
+ def attachment_removed(attachment)
+ if current_journal && !attachment.new_record?
+ current_journal.journalize_attachment(attachment, :removed)
+ current_journal.save
+ end
+ end
+
+ # Called after a relation is added
+ def relation_added(relation)
+ if current_journal
+ current_journal.journalize_relation(relation, :added)
+ current_journal.save
+ end
+ end
+
+ # Called after a relation is removed
+ def relation_removed(relation)
+ if current_journal
+ current_journal.journalize_relation(relation, :removed)
+ current_journal.save
+ end
+ end
+
+ # Default assignment based on project or category
+ def default_assign
+ if assigned_to.nil?
+ if category && category.assigned_to
+ self.assigned_to = category.assigned_to
+ elsif project && project.default_assigned_to
+ self.assigned_to = project.default_assigned_to
+ end
+ end
+ end
+
+ # Updates start/due dates of following issues
+ def reschedule_following_issues
+ if start_date_changed? || due_date_changed?
+ relations_from.each do |relation|
+ relation.set_issue_to_dates(@current_journal)
+ end
+ end
+ end
+
+ # Closes duplicates if the issue is being closed
+ def close_duplicates
+ if closing?
+ duplicates.each do |duplicate|
+ # Reload is needed in case the duplicate was updated by a previous duplicate
+ duplicate.reload
+ # Don't re-close it if it's already closed
+ next if duplicate.closed?
+ # Same user and notes
+ if @current_journal
+ duplicate.init_journal(@current_journal.user, @current_journal.notes)
+ duplicate.private_notes = @current_journal.private_notes
+ end
+ duplicate.update_attribute :status, self.status
+ end
+ end
+ end
+
+ # Make sure updated_on is updated when adding a note and set updated_on now
+ # so we can set closed_on with the same value on closing
+ def force_updated_on_change
+ if @current_journal || changed?
+ self.updated_on = current_time_from_proper_timezone
+ if new_record?
+ self.created_on = updated_on
+ end
+ end
+ end
+
+ # Callback for setting closed_on when the issue is closed.
+ # The closed_on attribute stores the time of the last closing
+ # and is preserved when the issue is reopened.
+ def update_closed_on
+ if closing?
+ self.closed_on = updated_on
+ end
+ end
+
+ # Saves the changes in a Journal
+ # Called after_save
+ def create_journal
+ if current_journal
+ current_journal.save
+ end
+ end
+
+ def send_notification
+ if notify? && Setting.notified_events.include?('issue_added')
+ Mailer.deliver_issue_add(self)
+ end
+ end
+
+ # Stores the previous assignee so we can still have access
+ # to it during after_save callbacks (assigned_to_id_was is reset)
+ def set_assigned_to_was
+ @previous_assigned_to_id = assigned_to_id_was
+ end
+
+ # Clears the previous assignee at the end of after_save callbacks
+ def clear_assigned_to_was
+ @assigned_to_was = nil
+ @previous_assigned_to_id = nil
+ end
+
+ def clear_disabled_fields
+ if tracker
+ tracker.disabled_core_fields.each do |attribute|
+ send "#{attribute}=", nil
+ end
+ self.done_ratio ||= 0
+ end
+ end
+end
diff --git a/app/models/issue_category.rb b/app/models/issue_category.rb
new file mode 100644
index 0000000..da96a85
--- /dev/null
+++ b/app/models/issue_category.rb
@@ -0,0 +1,49 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssueCategory < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ belongs_to :project
+ belongs_to :assigned_to, :class_name => 'Principal'
+ has_many :issues, :foreign_key => 'category_id', :dependent => :nullify
+
+ validates_presence_of :name
+ validates_uniqueness_of :name, :scope => [:project_id]
+ validates_length_of :name, :maximum => 60
+ attr_protected :id
+
+ safe_attributes 'name', 'assigned_to_id'
+
+ scope :named, lambda {|arg| where("LOWER(#{table_name}.name) = LOWER(?)", arg.to_s.strip)}
+
+ alias :destroy_without_reassign :destroy
+
+ # Destroy the category
+ # If a category is specified, issues are reassigned to this category
+ def destroy(reassign_to = nil)
+ if reassign_to && reassign_to.is_a?(IssueCategory) && reassign_to.project == self.project
+ Issue.where({:category_id => id}).update_all({:category_id => reassign_to.id})
+ end
+ destroy_without_reassign
+ end
+
+ def <=>(category)
+ name <=> category.name
+ end
+
+ def to_s; name end
+end
diff --git a/app/models/issue_custom_field.rb b/app/models/issue_custom_field.rb
new file mode 100644
index 0000000..fb7accd
--- /dev/null
+++ b/app/models/issue_custom_field.rb
@@ -0,0 +1,48 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssueCustomField < CustomField
+ has_and_belongs_to_many :projects, :join_table => "#{table_name_prefix}custom_fields_projects#{table_name_suffix}", :foreign_key => "custom_field_id"
+ has_and_belongs_to_many :trackers, :join_table => "#{table_name_prefix}custom_fields_trackers#{table_name_suffix}", :foreign_key => "custom_field_id"
+ has_many :issues, :through => :issue_custom_values
+
+ safe_attributes 'project_ids',
+ 'tracker_ids'
+
+ def type_name
+ :label_issue_plural
+ end
+
+ def visible_by?(project, user=User.current)
+ super || (roles & user.roles_for_project(project)).present?
+ end
+
+ def visibility_by_project_condition(project_key=nil, user=User.current, id_column=nil)
+ sql = super
+ id_column ||= id
+ tracker_condition = "#{Issue.table_name}.tracker_id IN (SELECT tracker_id FROM #{table_name_prefix}custom_fields_trackers#{table_name_suffix} WHERE custom_field_id = #{id_column})"
+ project_condition = "EXISTS (SELECT 1 FROM #{CustomField.table_name} ifa WHERE ifa.is_for_all = #{self.class.connection.quoted_true} AND ifa.id = #{id_column})" +
+ " OR #{Issue.table_name}.project_id IN (SELECT project_id FROM #{table_name_prefix}custom_fields_projects#{table_name_suffix} WHERE custom_field_id = #{id_column})"
+
+ "((#{sql}) AND (#{tracker_condition}) AND (#{project_condition}))"
+ end
+
+ def validate_custom_field
+ super
+ errors.add(:base, l(:label_role_plural) + ' ' + l('activerecord.errors.messages.blank')) unless visible? || roles.present?
+ end
+end
diff --git a/app/models/issue_import.rb b/app/models/issue_import.rb
new file mode 100644
index 0000000..9fc4f55
--- /dev/null
+++ b/app/models/issue_import.rb
@@ -0,0 +1,206 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssueImport < Import
+
+ # Returns the objects that were imported
+ def saved_objects
+ object_ids = saved_items.pluck(:obj_id)
+ objects = Issue.where(:id => object_ids).order(:id).preload(:tracker, :priority, :status)
+ end
+
+ # Returns a scope of projects that user is allowed to
+ # import issue to
+ def allowed_target_projects
+ Project.allowed_to(user, :import_issues)
+ end
+
+ def project
+ project_id = mapping['project_id'].to_i
+ allowed_target_projects.find_by_id(project_id) || allowed_target_projects.first
+ end
+
+ # Returns a scope of trackers that user is allowed to
+ # import issue to
+ def allowed_target_trackers
+ Issue.allowed_target_trackers(project, user)
+ end
+
+ def tracker
+ if mapping['tracker'].to_s =~ /\Avalue:(\d+)\z/
+ tracker_id = $1.to_i
+ allowed_target_trackers.find_by_id(tracker_id)
+ end
+ end
+
+ # Returns true if missing categories should be created during the import
+ def create_categories?
+ user.allowed_to?(:manage_categories, project) &&
+ mapping['create_categories'] == '1'
+ end
+
+ # Returns true if missing versions should be created during the import
+ def create_versions?
+ user.allowed_to?(:manage_versions, project) &&
+ mapping['create_versions'] == '1'
+ end
+
+ def mappable_custom_fields
+ if tracker
+ issue = Issue.new
+ issue.project = project
+ issue.tracker = tracker
+ issue.editable_custom_field_values(user).map(&:custom_field)
+ elsif project
+ project.all_issue_custom_fields
+ else
+ []
+ end
+ end
+
+ private
+
+ def build_object(row, item)
+ issue = Issue.new
+ issue.author = user
+ issue.notify = false
+
+ tracker_id = nil
+ if tracker
+ tracker_id = tracker.id
+ elsif tracker_name = row_value(row, 'tracker')
+ tracker_id = allowed_target_trackers.named(tracker_name).first.try(:id)
+ end
+
+ attributes = {
+ 'project_id' => mapping['project_id'],
+ 'tracker_id' => tracker_id,
+ 'subject' => row_value(row, 'subject'),
+ 'description' => row_value(row, 'description')
+ }
+ if status_name = row_value(row, 'status')
+ if status_id = IssueStatus.named(status_name).first.try(:id)
+ attributes['status_id'] = status_id
+ end
+ end
+ issue.send :safe_attributes=, attributes, user
+
+ attributes = {}
+ if priority_name = row_value(row, 'priority')
+ if priority_id = IssuePriority.active.named(priority_name).first.try(:id)
+ attributes['priority_id'] = priority_id
+ end
+ end
+ if issue.project && category_name = row_value(row, 'category')
+ if category = issue.project.issue_categories.named(category_name).first
+ attributes['category_id'] = category.id
+ elsif create_categories?
+ category = issue.project.issue_categories.build
+ category.name = category_name
+ if category.save
+ attributes['category_id'] = category.id
+ end
+ end
+ end
+ if assignee_name = row_value(row, 'assigned_to')
+ if assignee = Principal.detect_by_keyword(issue.assignable_users, assignee_name)
+ attributes['assigned_to_id'] = assignee.id
+ end
+ end
+ if issue.project && version_name = row_value(row, 'fixed_version')
+ version =
+ issue.project.versions.named(version_name).first ||
+ issue.project.shared_versions.named(version_name).first
+ if version
+ attributes['fixed_version_id'] = version.id
+ elsif create_versions?
+ version = issue.project.versions.build
+ version.name = version_name
+ if version.save
+ attributes['fixed_version_id'] = version.id
+ end
+ end
+ end
+ if is_private = row_value(row, 'is_private')
+ if yes?(is_private)
+ attributes['is_private'] = '1'
+ end
+ end
+ if parent_issue_id = row_value(row, 'parent_issue_id')
+ if parent_issue_id =~ /\A(#)?(\d+)\z/
+ parent_issue_id = $2.to_i
+ if $1
+ attributes['parent_issue_id'] = parent_issue_id
+ else
+ if parent_issue_id > item.position
+ add_callback(parent_issue_id, 'set_as_parent', item.position)
+ elsif issue_id = items.where(:position => parent_issue_id).first.try(:obj_id)
+ attributes['parent_issue_id'] = issue_id
+ end
+ end
+ else
+ attributes['parent_issue_id'] = parent_issue_id
+ end
+ end
+ if start_date = row_date(row, 'start_date')
+ attributes['start_date'] = start_date
+ end
+ if due_date = row_date(row, 'due_date')
+ attributes['due_date'] = due_date
+ end
+ if estimated_hours = row_value(row, 'estimated_hours')
+ attributes['estimated_hours'] = estimated_hours
+ end
+ if done_ratio = row_value(row, 'done_ratio')
+ attributes['done_ratio'] = done_ratio
+ end
+
+ attributes['custom_field_values'] = issue.custom_field_values.inject({}) do |h, v|
+ value = case v.custom_field.field_format
+ when 'date'
+ row_date(row, "cf_#{v.custom_field.id}")
+ else
+ row_value(row, "cf_#{v.custom_field.id}")
+ end
+ if value
+ h[v.custom_field.id.to_s] = v.custom_field.value_from_keyword(value, issue)
+ end
+ h
+ end
+
+ issue.send :safe_attributes=, attributes, user
+
+ if issue.tracker_id != tracker_id
+ issue.tracker_id = nil
+ end
+
+ issue
+ end
+
+ # Callback that sets issue as the parent of a previously imported issue
+ def set_as_parent_callback(issue, child_position)
+ child_id = items.where(:position => child_position).first.try(:obj_id)
+ return unless child_id
+
+ child = Issue.find_by_id(child_id)
+ return unless child
+
+ child.parent_issue_id = issue.id
+ child.save!
+ issue.reload
+ end
+end
diff --git a/app/models/issue_priority.rb b/app/models/issue_priority.rb
new file mode 100644
index 0000000..0858cbf
--- /dev/null
+++ b/app/models/issue_priority.rb
@@ -0,0 +1,68 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssuePriority < Enumeration
+ has_many :issues, :foreign_key => 'priority_id'
+
+ after_destroy {|priority| priority.class.compute_position_names}
+ after_save {|priority| priority.class.compute_position_names if (priority.position_changed? && priority.position) || priority.active_changed?}
+
+ OptionName = :enumeration_issue_priorities
+
+ def option_name
+ OptionName
+ end
+
+ def objects_count
+ issues.count
+ end
+
+ def transfer_relations(to)
+ issues.update_all(:priority_id => to.id)
+ end
+
+ def css_classes
+ "priority-#{id} priority-#{position_name}"
+ end
+
+ # Clears position_name for all priorities
+ # Called from migration 20121026003537_populate_enumerations_position_name
+ def self.clear_position_names
+ update_all :position_name => nil
+ end
+
+ # Updates position_name for active priorities
+ # Called from migration 20121026003537_populate_enumerations_position_name
+ def self.compute_position_names
+ priorities = where(:active => true).sort_by(&:position)
+ if priorities.any?
+ default = priorities.detect(&:is_default?) || priorities[(priorities.size - 1) / 2]
+ priorities.each_with_index do |priority, index|
+ name = case
+ when priority.position == default.position
+ "default"
+ when priority.position < default.position
+ index == 0 ? "lowest" : "low#{index+1}"
+ else
+ index == (priorities.size - 1) ? "highest" : "high#{priorities.size - index}"
+ end
+
+ where(:id => priority.id).update_all({:position_name => name})
+ end
+ end
+ end
+end
diff --git a/app/models/issue_priority_custom_field.rb b/app/models/issue_priority_custom_field.rb
new file mode 100644
index 0000000..ffcf2a9
--- /dev/null
+++ b/app/models/issue_priority_custom_field.rb
@@ -0,0 +1,23 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssuePriorityCustomField < CustomField
+ def type_name
+ :enumeration_issue_priorities
+ end
+end
+
diff --git a/app/models/issue_query.rb b/app/models/issue_query.rb
new file mode 100644
index 0000000..c833607
--- /dev/null
+++ b/app/models/issue_query.rb
@@ -0,0 +1,621 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssueQuery < Query
+
+ self.queried_class = Issue
+ self.view_permission = :view_issues
+
+ self.available_columns = [
+ QueryColumn.new(:id, :sortable => "#{Issue.table_name}.id", :default_order => 'desc', :caption => '#', :frozen => true),
+ QueryColumn.new(:project, :sortable => "#{Project.table_name}.name", :groupable => true),
+ QueryColumn.new(:tracker, :sortable => "#{Tracker.table_name}.position", :groupable => true),
+ QueryColumn.new(:parent, :sortable => ["#{Issue.table_name}.root_id", "#{Issue.table_name}.lft ASC"], :default_order => 'desc', :caption => :field_parent_issue),
+ QueryColumn.new(:status, :sortable => "#{IssueStatus.table_name}.position", :groupable => true),
+ QueryColumn.new(:priority, :sortable => "#{IssuePriority.table_name}.position", :default_order => 'desc', :groupable => true),
+ QueryColumn.new(:subject, :sortable => "#{Issue.table_name}.subject"),
+ QueryColumn.new(:author, :sortable => lambda {User.fields_for_order_statement("authors")}, :groupable => true),
+ QueryColumn.new(:assigned_to, :sortable => lambda {User.fields_for_order_statement}, :groupable => true),
+ QueryColumn.new(:updated_on, :sortable => "#{Issue.table_name}.updated_on", :default_order => 'desc'),
+ QueryColumn.new(:category, :sortable => "#{IssueCategory.table_name}.name", :groupable => true),
+ QueryColumn.new(:fixed_version, :sortable => lambda {Version.fields_for_order_statement}, :groupable => true),
+ QueryColumn.new(:start_date, :sortable => "#{Issue.table_name}.start_date"),
+ QueryColumn.new(:due_date, :sortable => "#{Issue.table_name}.due_date"),
+ QueryColumn.new(:estimated_hours, :sortable => "#{Issue.table_name}.estimated_hours", :totalable => true),
+ QueryColumn.new(:total_estimated_hours,
+ :sortable => -> { "COALESCE((SELECT SUM(estimated_hours) FROM #{Issue.table_name} subtasks" +
+ " WHERE #{Issue.visible_condition(User.current).gsub(/\bissues\b/, 'subtasks')} AND subtasks.root_id = #{Issue.table_name}.root_id AND subtasks.lft >= #{Issue.table_name}.lft AND subtasks.rgt <= #{Issue.table_name}.rgt), 0)" },
+ :default_order => 'desc'),
+ QueryColumn.new(:done_ratio, :sortable => "#{Issue.table_name}.done_ratio", :groupable => true),
+ QueryColumn.new(:created_on, :sortable => "#{Issue.table_name}.created_on", :default_order => 'desc'),
+ QueryColumn.new(:closed_on, :sortable => "#{Issue.table_name}.closed_on", :default_order => 'desc'),
+ QueryColumn.new(:last_updated_by, :sortable => lambda {User.fields_for_order_statement("last_journal_user")}),
+ QueryColumn.new(:relations, :caption => :label_related_issues),
+ QueryColumn.new(:attachments, :caption => :label_attachment_plural),
+ QueryColumn.new(:description, :inline => false),
+ QueryColumn.new(:last_notes, :caption => :label_last_notes, :inline => false)
+ ]
+
+ def initialize(attributes=nil, *args)
+ super attributes
+ self.filters ||= { 'status_id' => {:operator => "o", :values => [""]} }
+ end
+
+ def draw_relations
+ r = options[:draw_relations]
+ r.nil? || r == '1'
+ end
+
+ def draw_relations=(arg)
+ options[:draw_relations] = (arg == '0' ? '0' : nil)
+ end
+
+ def draw_progress_line
+ r = options[:draw_progress_line]
+ r == '1'
+ end
+
+ def draw_progress_line=(arg)
+ options[:draw_progress_line] = (arg == '1' ? '1' : nil)
+ end
+
+ def build_from_params(params)
+ super
+ self.draw_relations = params[:draw_relations] || (params[:query] && params[:query][:draw_relations])
+ self.draw_progress_line = params[:draw_progress_line] || (params[:query] && params[:query][:draw_progress_line])
+ self
+ end
+
+ def initialize_available_filters
+ add_available_filter "status_id",
+ :type => :list_status, :values => lambda { issue_statuses_values }
+
+ add_available_filter("project_id",
+ :type => :list, :values => lambda { project_values }
+ ) if project.nil?
+
+ add_available_filter "tracker_id",
+ :type => :list, :values => trackers.collect{|s| [s.name, s.id.to_s] }
+
+ add_available_filter "priority_id",
+ :type => :list, :values => IssuePriority.all.collect{|s| [s.name, s.id.to_s] }
+
+ add_available_filter("author_id",
+ :type => :list, :values => lambda { author_values }
+ )
+
+ add_available_filter("assigned_to_id",
+ :type => :list_optional, :values => lambda { assigned_to_values }
+ )
+
+ add_available_filter("member_of_group",
+ :type => :list_optional, :values => lambda { Group.givable.visible.collect {|g| [g.name, g.id.to_s] } }
+ )
+
+ add_available_filter("assigned_to_role",
+ :type => :list_optional, :values => lambda { Role.givable.collect {|r| [r.name, r.id.to_s] } }
+ )
+
+ add_available_filter "fixed_version_id",
+ :type => :list_optional, :values => lambda { fixed_version_values }
+
+ add_available_filter "fixed_version.due_date",
+ :type => :date,
+ :name => l(:label_attribute_of_fixed_version, :name => l(:field_effective_date))
+
+ add_available_filter "fixed_version.status",
+ :type => :list,
+ :name => l(:label_attribute_of_fixed_version, :name => l(:field_status)),
+ :values => Version::VERSION_STATUSES.map{|s| [l("version_status_#{s}"), s] }
+
+ add_available_filter "category_id",
+ :type => :list_optional,
+ :values => lambda { project.issue_categories.collect{|s| [s.name, s.id.to_s] } } if project
+
+ add_available_filter "subject", :type => :text
+ add_available_filter "description", :type => :text
+ add_available_filter "created_on", :type => :date_past
+ add_available_filter "updated_on", :type => :date_past
+ add_available_filter "closed_on", :type => :date_past
+ add_available_filter "start_date", :type => :date
+ add_available_filter "due_date", :type => :date
+ add_available_filter "estimated_hours", :type => :float
+ add_available_filter "done_ratio", :type => :integer
+
+ if User.current.allowed_to?(:set_issues_private, nil, :global => true) ||
+ User.current.allowed_to?(:set_own_issues_private, nil, :global => true)
+ add_available_filter "is_private",
+ :type => :list,
+ :values => [[l(:general_text_yes), "1"], [l(:general_text_no), "0"]]
+ end
+
+ add_available_filter "attachment",
+ :type => :text, :name => l(:label_attachment)
+
+ if User.current.logged?
+ add_available_filter "watcher_id",
+ :type => :list, :values => [["<< #{l(:label_me)} >>", "me"]]
+ end
+
+ add_available_filter("updated_by",
+ :type => :list, :values => lambda { author_values }
+ )
+
+ add_available_filter("last_updated_by",
+ :type => :list, :values => lambda { author_values }
+ )
+
+ if project && !project.leaf?
+ add_available_filter "subproject_id",
+ :type => :list_subprojects,
+ :values => lambda { subproject_values }
+ end
+
+ add_custom_fields_filters(issue_custom_fields)
+ add_associations_custom_fields_filters :project, :author, :assigned_to, :fixed_version
+
+ IssueRelation::TYPES.each do |relation_type, options|
+ add_available_filter relation_type, :type => :relation, :label => options[:name], :values => lambda {all_projects_values}
+ end
+ add_available_filter "parent_id", :type => :tree, :label => :field_parent_issue
+ add_available_filter "child_id", :type => :tree, :label => :label_subtask_plural
+
+ add_available_filter "issue_id", :type => :integer, :label => :label_issue
+
+ Tracker.disabled_core_fields(trackers).each {|field|
+ delete_available_filter field
+ }
+ end
+
+ def available_columns
+ return @available_columns if @available_columns
+ @available_columns = self.class.available_columns.dup
+ @available_columns += issue_custom_fields.visible.collect {|cf| QueryCustomFieldColumn.new(cf) }
+
+ if User.current.allowed_to?(:view_time_entries, project, :global => true)
+ # insert the columns after total_estimated_hours or at the end
+ index = @available_columns.find_index {|column| column.name == :total_estimated_hours}
+ index = (index ? index + 1 : -1)
+
+ subselect = "SELECT SUM(hours) FROM #{TimeEntry.table_name}" +
+ " JOIN #{Project.table_name} ON #{Project.table_name}.id = #{TimeEntry.table_name}.project_id" +
+ " WHERE (#{TimeEntry.visible_condition(User.current)}) AND #{TimeEntry.table_name}.issue_id = #{Issue.table_name}.id"
+
+ @available_columns.insert index, QueryColumn.new(:spent_hours,
+ :sortable => "COALESCE((#{subselect}), 0)",
+ :default_order => 'desc',
+ :caption => :label_spent_time,
+ :totalable => true
+ )
+
+ subselect = "SELECT SUM(hours) FROM #{TimeEntry.table_name}" +
+ " JOIN #{Project.table_name} ON #{Project.table_name}.id = #{TimeEntry.table_name}.project_id" +
+ " JOIN #{Issue.table_name} subtasks ON subtasks.id = #{TimeEntry.table_name}.issue_id" +
+ " WHERE (#{TimeEntry.visible_condition(User.current)})" +
+ " AND subtasks.root_id = #{Issue.table_name}.root_id AND subtasks.lft >= #{Issue.table_name}.lft AND subtasks.rgt <= #{Issue.table_name}.rgt"
+
+ @available_columns.insert index+1, QueryColumn.new(:total_spent_hours,
+ :sortable => "COALESCE((#{subselect}), 0)",
+ :default_order => 'desc',
+ :caption => :label_total_spent_time
+ )
+ end
+
+ if User.current.allowed_to?(:set_issues_private, nil, :global => true) ||
+ User.current.allowed_to?(:set_own_issues_private, nil, :global => true)
+ @available_columns << QueryColumn.new(:is_private, :sortable => "#{Issue.table_name}.is_private", :groupable => true)
+ end
+
+ disabled_fields = Tracker.disabled_core_fields(trackers).map {|field| field.sub(/_id$/, '')}
+ disabled_fields << "total_estimated_hours" if disabled_fields.include?("estimated_hours")
+ @available_columns.reject! {|column|
+ disabled_fields.include?(column.name.to_s)
+ }
+
+ @available_columns
+ end
+
+ def default_columns_names
+ @default_columns_names ||= begin
+ default_columns = Setting.issue_list_default_columns.map(&:to_sym)
+
+ project.present? ? default_columns : [:project] | default_columns
+ end
+ end
+
+ def default_totalable_names
+ Setting.issue_list_default_totals.map(&:to_sym)
+ end
+
+ def default_sort_criteria
+ [['id', 'desc']]
+ end
+
+ def base_scope
+ Issue.visible.joins(:status, :project).where(statement)
+ end
+
+ # Returns the issue count
+ def issue_count
+ base_scope.count
+ rescue ::ActiveRecord::StatementInvalid => e
+ raise StatementInvalid.new(e.message)
+ end
+
+ # Returns sum of all the issue's estimated_hours
+ def total_for_estimated_hours(scope)
+ map_total(scope.sum(:estimated_hours)) {|t| t.to_f.round(2)}
+ end
+
+ # Returns sum of all the issue's time entries hours
+ def total_for_spent_hours(scope)
+ total = scope.joins(:time_entries).
+ where(TimeEntry.visible_condition(User.current)).
+ sum("#{TimeEntry.table_name}.hours")
+
+ map_total(total) {|t| t.to_f.round(2)}
+ end
+
+ # Returns the issues
+ # Valid options are :order, :offset, :limit, :include, :conditions
+ def issues(options={})
+ order_option = [group_by_sort_order, (options[:order] || sort_clause)].flatten.reject(&:blank?)
+
+ scope = Issue.visible.
+ joins(:status, :project).
+ preload(:priority).
+ where(statement).
+ includes(([:status, :project] + (options[:include] || [])).uniq).
+ where(options[:conditions]).
+ order(order_option).
+ joins(joins_for_order_statement(order_option.join(','))).
+ limit(options[:limit]).
+ offset(options[:offset])
+
+ scope = scope.preload([:tracker, :author, :assigned_to, :fixed_version, :category, :attachments] & columns.map(&:name))
+ if has_custom_field_column?
+ scope = scope.preload(:custom_values)
+ end
+
+ issues = scope.to_a
+
+ if has_column?(:spent_hours)
+ Issue.load_visible_spent_hours(issues)
+ end
+ if has_column?(:total_spent_hours)
+ Issue.load_visible_total_spent_hours(issues)
+ end
+ if has_column?(:last_updated_by)
+ Issue.load_visible_last_updated_by(issues)
+ end
+ if has_column?(:relations)
+ Issue.load_visible_relations(issues)
+ end
+ if has_column?(:last_notes)
+ Issue.load_visible_last_notes(issues)
+ end
+ issues
+ rescue ::ActiveRecord::StatementInvalid => e
+ raise StatementInvalid.new(e.message)
+ end
+
+ # Returns the issues ids
+ def issue_ids(options={})
+ order_option = [group_by_sort_order, (options[:order] || sort_clause)].flatten.reject(&:blank?)
+
+ Issue.visible.
+ joins(:status, :project).
+ where(statement).
+ includes(([:status, :project] + (options[:include] || [])).uniq).
+ references(([:status, :project] + (options[:include] || [])).uniq).
+ where(options[:conditions]).
+ order(order_option).
+ joins(joins_for_order_statement(order_option.join(','))).
+ limit(options[:limit]).
+ offset(options[:offset]).
+ pluck(:id)
+ rescue ::ActiveRecord::StatementInvalid => e
+ raise StatementInvalid.new(e.message)
+ end
+
+ # Returns the journals
+ # Valid options are :order, :offset, :limit
+ def journals(options={})
+ Journal.visible.
+ joins(:issue => [:project, :status]).
+ where(statement).
+ order(options[:order]).
+ limit(options[:limit]).
+ offset(options[:offset]).
+ preload(:details, :user, {:issue => [:project, :author, :tracker, :status]}).
+ to_a
+ rescue ::ActiveRecord::StatementInvalid => e
+ raise StatementInvalid.new(e.message)
+ end
+
+ # Returns the versions
+ # Valid options are :conditions
+ def versions(options={})
+ Version.visible.
+ where(project_statement).
+ where(options[:conditions]).
+ includes(:project).
+ references(:project).
+ to_a
+ rescue ::ActiveRecord::StatementInvalid => e
+ raise StatementInvalid.new(e.message)
+ end
+
+ def sql_for_updated_by_field(field, operator, value)
+ neg = (operator == '!' ? 'NOT' : '')
+ subquery = "SELECT 1 FROM #{Journal.table_name}" +
+ " WHERE #{Journal.table_name}.journalized_type='Issue' AND #{Journal.table_name}.journalized_id=#{Issue.table_name}.id" +
+ " AND (#{sql_for_field field, '=', value, Journal.table_name, 'user_id'})" +
+ " AND (#{Journal.visible_notes_condition(User.current, :skip_pre_condition => true)})"
+
+ "#{neg} EXISTS (#{subquery})"
+ end
+
+ def sql_for_last_updated_by_field(field, operator, value)
+ neg = (operator == '!' ? 'NOT' : '')
+ subquery = "SELECT 1 FROM #{Journal.table_name} sj" +
+ " WHERE sj.journalized_type='Issue' AND sj.journalized_id=#{Issue.table_name}.id AND (#{sql_for_field field, '=', value, 'sj', 'user_id'})" +
+ " AND sj.id IN (SELECT MAX(#{Journal.table_name}.id) FROM #{Journal.table_name}" +
+ " WHERE #{Journal.table_name}.journalized_type='Issue' AND #{Journal.table_name}.journalized_id=#{Issue.table_name}.id" +
+ " AND (#{Journal.visible_notes_condition(User.current, :skip_pre_condition => true)}))"
+
+ "#{neg} EXISTS (#{subquery})"
+ end
+
+ def sql_for_watcher_id_field(field, operator, value)
+ db_table = Watcher.table_name
+
+ me, others = value.partition { |id| ['0', User.current.id.to_s].include?(id) }
+ sql = if others.any?
+ "SELECT #{Issue.table_name}.id FROM #{Issue.table_name} " +
+ "INNER JOIN #{db_table} ON #{Issue.table_name}.id = #{db_table}.watchable_id AND #{db_table}.watchable_type = 'Issue' " +
+ "LEFT OUTER JOIN #{Project.table_name} ON #{Project.table_name}.id = #{Issue.table_name}.project_id " +
+ "WHERE (" +
+ sql_for_field(field, '=', me, db_table, 'user_id') +
+ ') OR (' +
+ Project.allowed_to_condition(User.current, :view_issue_watchers) +
+ ' AND ' +
+ sql_for_field(field, '=', others, db_table, 'user_id') +
+ ')'
+ else
+ "SELECT #{db_table}.watchable_id FROM #{db_table} " +
+ "WHERE #{db_table}.watchable_type='Issue' AND " +
+ sql_for_field(field, '=', me, db_table, 'user_id')
+ end
+
+ "#{Issue.table_name}.id #{ operator == '=' ? 'IN' : 'NOT IN' } (#{sql})"
+ end
+
+ def sql_for_member_of_group_field(field, operator, value)
+ if operator == '*' # Any group
+ groups = Group.givable
+ operator = '=' # Override the operator since we want to find by assigned_to
+ elsif operator == "!*"
+ groups = Group.givable
+ operator = '!' # Override the operator since we want to find by assigned_to
+ else
+ groups = Group.where(:id => value).to_a
+ end
+ groups ||= []
+
+ members_of_groups = groups.inject([]) {|user_ids, group|
+ user_ids + group.user_ids + [group.id]
+ }.uniq.compact.sort.collect(&:to_s)
+
+ '(' + sql_for_field("assigned_to_id", operator, members_of_groups, Issue.table_name, "assigned_to_id", false) + ')'
+ end
+
+ def sql_for_assigned_to_role_field(field, operator, value)
+ case operator
+ when "*", "!*" # Member / Not member
+ sw = operator == "!*" ? 'NOT' : ''
+ nl = operator == "!*" ? "#{Issue.table_name}.assigned_to_id IS NULL OR" : ''
+ "(#{nl} #{Issue.table_name}.assigned_to_id #{sw} IN (SELECT DISTINCT #{Member.table_name}.user_id FROM #{Member.table_name}" +
+ " WHERE #{Member.table_name}.project_id = #{Issue.table_name}.project_id))"
+ when "=", "!"
+ role_cond = value.any? ?
+ "#{MemberRole.table_name}.role_id IN (" + value.collect{|val| "'#{self.class.connection.quote_string(val)}'"}.join(",") + ")" :
+ "1=0"
+
+ sw = operator == "!" ? 'NOT' : ''
+ nl = operator == "!" ? "#{Issue.table_name}.assigned_to_id IS NULL OR" : ''
+ "(#{nl} #{Issue.table_name}.assigned_to_id #{sw} IN (SELECT DISTINCT #{Member.table_name}.user_id FROM #{Member.table_name}, #{MemberRole.table_name}" +
+ " WHERE #{Member.table_name}.project_id = #{Issue.table_name}.project_id AND #{Member.table_name}.id = #{MemberRole.table_name}.member_id AND #{role_cond}))"
+ end
+ end
+
+ def sql_for_fixed_version_status_field(field, operator, value)
+ where = sql_for_field(field, operator, value, Version.table_name, "status")
+ version_ids = versions(:conditions => [where]).map(&:id)
+
+ nl = operator == "!" ? "#{Issue.table_name}.fixed_version_id IS NULL OR" : ''
+ "(#{nl} #{sql_for_field("fixed_version_id", "=", version_ids, Issue.table_name, "fixed_version_id")})"
+ end
+
+ def sql_for_fixed_version_due_date_field(field, operator, value)
+ where = sql_for_field(field, operator, value, Version.table_name, "effective_date")
+ version_ids = versions(:conditions => [where]).map(&:id)
+
+ nl = operator == "!*" ? "#{Issue.table_name}.fixed_version_id IS NULL OR" : ''
+ "(#{nl} #{sql_for_field("fixed_version_id", "=", version_ids, Issue.table_name, "fixed_version_id")})"
+ end
+
+ def sql_for_is_private_field(field, operator, value)
+ op = (operator == "=" ? 'IN' : 'NOT IN')
+ va = value.map {|v| v == '0' ? self.class.connection.quoted_false : self.class.connection.quoted_true}.uniq.join(',')
+
+ "#{Issue.table_name}.is_private #{op} (#{va})"
+ end
+
+ def sql_for_attachment_field(field, operator, value)
+ case operator
+ when "*", "!*"
+ e = (operator == "*" ? "EXISTS" : "NOT EXISTS")
+ "#{e} (SELECT 1 FROM #{Attachment.table_name} a WHERE a.container_type = 'Issue' AND a.container_id = #{Issue.table_name}.id)"
+ when "~", "!~"
+ c = sql_contains("a.filename", value.first)
+ e = (operator == "~" ? "EXISTS" : "NOT EXISTS")
+ "#{e} (SELECT 1 FROM #{Attachment.table_name} a WHERE a.container_type = 'Issue' AND a.container_id = #{Issue.table_name}.id AND #{c})"
+ end
+ end
+
+ def sql_for_parent_id_field(field, operator, value)
+ case operator
+ when "="
+ "#{Issue.table_name}.parent_id = #{value.first.to_i}"
+ when "~"
+ root_id, lft, rgt = Issue.where(:id => value.first.to_i).pluck(:root_id, :lft, :rgt).first
+ if root_id && lft && rgt
+ "#{Issue.table_name}.root_id = #{root_id} AND #{Issue.table_name}.lft > #{lft} AND #{Issue.table_name}.rgt < #{rgt}"
+ else
+ "1=0"
+ end
+ when "!*"
+ "#{Issue.table_name}.parent_id IS NULL"
+ when "*"
+ "#{Issue.table_name}.parent_id IS NOT NULL"
+ end
+ end
+
+ def sql_for_child_id_field(field, operator, value)
+ case operator
+ when "="
+ parent_id = Issue.where(:id => value.first.to_i).pluck(:parent_id).first
+ if parent_id
+ "#{Issue.table_name}.id = #{parent_id}"
+ else
+ "1=0"
+ end
+ when "~"
+ root_id, lft, rgt = Issue.where(:id => value.first.to_i).pluck(:root_id, :lft, :rgt).first
+ if root_id && lft && rgt
+ "#{Issue.table_name}.root_id = #{root_id} AND #{Issue.table_name}.lft < #{lft} AND #{Issue.table_name}.rgt > #{rgt}"
+ else
+ "1=0"
+ end
+ when "!*"
+ "#{Issue.table_name}.rgt - #{Issue.table_name}.lft = 1"
+ when "*"
+ "#{Issue.table_name}.rgt - #{Issue.table_name}.lft > 1"
+ end
+ end
+
+ def sql_for_updated_on_field(field, operator, value)
+ case operator
+ when "!*"
+ "#{Issue.table_name}.updated_on = #{Issue.table_name}.created_on"
+ when "*"
+ "#{Issue.table_name}.updated_on > #{Issue.table_name}.created_on"
+ else
+ sql_for_field("updated_on", operator, value, Issue.table_name, "updated_on")
+ end
+ end
+
+ def sql_for_issue_id_field(field, operator, value)
+ if operator == "="
+ # accepts a comma separated list of ids
+ ids = value.first.to_s.scan(/\d+/).map(&:to_i)
+ if ids.present?
+ "#{Issue.table_name}.id IN (#{ids.join(",")})"
+ else
+ "1=0"
+ end
+ else
+ sql_for_field("id", operator, value, Issue.table_name, "id")
+ end
+ end
+
+ def sql_for_relations(field, operator, value, options={})
+ relation_options = IssueRelation::TYPES[field]
+ return relation_options unless relation_options
+
+ relation_type = field
+ join_column, target_join_column = "issue_from_id", "issue_to_id"
+ if relation_options[:reverse] || options[:reverse]
+ relation_type = relation_options[:reverse] || relation_type
+ join_column, target_join_column = target_join_column, join_column
+ end
+
+ sql = case operator
+ when "*", "!*"
+ op = (operator == "*" ? 'IN' : 'NOT IN')
+ "#{Issue.table_name}.id #{op} (SELECT DISTINCT #{IssueRelation.table_name}.#{join_column} FROM #{IssueRelation.table_name} WHERE #{IssueRelation.table_name}.relation_type = '#{self.class.connection.quote_string(relation_type)}')"
+ when "=", "!"
+ op = (operator == "=" ? 'IN' : 'NOT IN')
+ "#{Issue.table_name}.id #{op} (SELECT DISTINCT #{IssueRelation.table_name}.#{join_column} FROM #{IssueRelation.table_name} WHERE #{IssueRelation.table_name}.relation_type = '#{self.class.connection.quote_string(relation_type)}' AND #{IssueRelation.table_name}.#{target_join_column} = #{value.first.to_i})"
+ when "=p", "=!p", "!p"
+ op = (operator == "!p" ? 'NOT IN' : 'IN')
+ comp = (operator == "=!p" ? '<>' : '=')
+ "#{Issue.table_name}.id #{op} (SELECT DISTINCT #{IssueRelation.table_name}.#{join_column} FROM #{IssueRelation.table_name}, #{Issue.table_name} relissues WHERE #{IssueRelation.table_name}.relation_type = '#{self.class.connection.quote_string(relation_type)}' AND #{IssueRelation.table_name}.#{target_join_column} = relissues.id AND relissues.project_id #{comp} #{value.first.to_i})"
+ when "*o", "!o"
+ op = (operator == "!o" ? 'NOT IN' : 'IN')
+ "#{Issue.table_name}.id #{op} (SELECT DISTINCT #{IssueRelation.table_name}.#{join_column} FROM #{IssueRelation.table_name}, #{Issue.table_name} relissues WHERE #{IssueRelation.table_name}.relation_type = '#{self.class.connection.quote_string(relation_type)}' AND #{IssueRelation.table_name}.#{target_join_column} = relissues.id AND relissues.status_id IN (SELECT id FROM #{IssueStatus.table_name} WHERE is_closed=#{self.class.connection.quoted_false}))"
+ end
+
+ if relation_options[:sym] == field && !options[:reverse]
+ sqls = [sql, sql_for_relations(field, operator, value, :reverse => true)]
+ sql = sqls.join(["!", "!*", "!p", '!o'].include?(operator) ? " AND " : " OR ")
+ end
+ "(#{sql})"
+ end
+
+ def find_assigned_to_id_filter_values(values)
+ Principal.visible.where(:id => values).map {|p| [p.name, p.id.to_s]}
+ end
+ alias :find_author_id_filter_values :find_assigned_to_id_filter_values
+
+ IssueRelation::TYPES.keys.each do |relation_type|
+ alias_method "sql_for_#{relation_type}_field".to_sym, :sql_for_relations
+ end
+
+ def joins_for_order_statement(order_options)
+ joins = [super]
+
+ if order_options
+ if order_options.include?('authors')
+ joins << "LEFT OUTER JOIN #{User.table_name} authors ON authors.id = #{queried_table_name}.author_id"
+ end
+ if order_options.include?('users')
+ joins << "LEFT OUTER JOIN #{User.table_name} ON #{User.table_name}.id = #{queried_table_name}.assigned_to_id"
+ end
+ if order_options.include?('last_journal_user')
+ joins << "LEFT OUTER JOIN #{Journal.table_name} ON #{Journal.table_name}.id = (SELECT MAX(#{Journal.table_name}.id) FROM #{Journal.table_name}" +
+ " WHERE #{Journal.table_name}.journalized_type='Issue' AND #{Journal.table_name}.journalized_id=#{Issue.table_name}.id AND #{Journal.visible_notes_condition(User.current, :skip_pre_condition => true)})" +
+ " LEFT OUTER JOIN #{User.table_name} last_journal_user ON last_journal_user.id = #{Journal.table_name}.user_id";
+ end
+ if order_options.include?('versions')
+ joins << "LEFT OUTER JOIN #{Version.table_name} ON #{Version.table_name}.id = #{queried_table_name}.fixed_version_id"
+ end
+ if order_options.include?('issue_categories')
+ joins << "LEFT OUTER JOIN #{IssueCategory.table_name} ON #{IssueCategory.table_name}.id = #{queried_table_name}.category_id"
+ end
+ if order_options.include?('trackers')
+ joins << "LEFT OUTER JOIN #{Tracker.table_name} ON #{Tracker.table_name}.id = #{queried_table_name}.tracker_id"
+ end
+ if order_options.include?('enumerations')
+ joins << "LEFT OUTER JOIN #{IssuePriority.table_name} ON #{IssuePriority.table_name}.id = #{queried_table_name}.priority_id"
+ end
+ end
+
+ joins.any? ? joins.join(' ') : nil
+ end
+end
diff --git a/app/models/issue_relation.rb b/app/models/issue_relation.rb
new file mode 100644
index 0000000..f23f744
--- /dev/null
+++ b/app/models/issue_relation.rb
@@ -0,0 +1,256 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssueRelation < ActiveRecord::Base
+ # Class used to represent the relations of an issue
+ class Relations < Array
+ include Redmine::I18n
+
+ def initialize(issue, *args)
+ @issue = issue
+ super(*args)
+ end
+
+ def to_s(*args)
+ map {|relation| relation.to_s(@issue)}.join(', ')
+ end
+ end
+
+ include Redmine::SafeAttributes
+
+ belongs_to :issue_from, :class_name => 'Issue'
+ belongs_to :issue_to, :class_name => 'Issue'
+
+ TYPE_RELATES = "relates"
+ TYPE_DUPLICATES = "duplicates"
+ TYPE_DUPLICATED = "duplicated"
+ TYPE_BLOCKS = "blocks"
+ TYPE_BLOCKED = "blocked"
+ TYPE_PRECEDES = "precedes"
+ TYPE_FOLLOWS = "follows"
+ TYPE_COPIED_TO = "copied_to"
+ TYPE_COPIED_FROM = "copied_from"
+
+ TYPES = {
+ TYPE_RELATES => { :name => :label_relates_to, :sym_name => :label_relates_to,
+ :order => 1, :sym => TYPE_RELATES },
+ TYPE_DUPLICATES => { :name => :label_duplicates, :sym_name => :label_duplicated_by,
+ :order => 2, :sym => TYPE_DUPLICATED },
+ TYPE_DUPLICATED => { :name => :label_duplicated_by, :sym_name => :label_duplicates,
+ :order => 3, :sym => TYPE_DUPLICATES, :reverse => TYPE_DUPLICATES },
+ TYPE_BLOCKS => { :name => :label_blocks, :sym_name => :label_blocked_by,
+ :order => 4, :sym => TYPE_BLOCKED },
+ TYPE_BLOCKED => { :name => :label_blocked_by, :sym_name => :label_blocks,
+ :order => 5, :sym => TYPE_BLOCKS, :reverse => TYPE_BLOCKS },
+ TYPE_PRECEDES => { :name => :label_precedes, :sym_name => :label_follows,
+ :order => 6, :sym => TYPE_FOLLOWS },
+ TYPE_FOLLOWS => { :name => :label_follows, :sym_name => :label_precedes,
+ :order => 7, :sym => TYPE_PRECEDES, :reverse => TYPE_PRECEDES },
+ TYPE_COPIED_TO => { :name => :label_copied_to, :sym_name => :label_copied_from,
+ :order => 8, :sym => TYPE_COPIED_FROM },
+ TYPE_COPIED_FROM => { :name => :label_copied_from, :sym_name => :label_copied_to,
+ :order => 9, :sym => TYPE_COPIED_TO, :reverse => TYPE_COPIED_TO }
+ }.freeze
+
+ validates_presence_of :issue_from, :issue_to, :relation_type
+ validates_inclusion_of :relation_type, :in => TYPES.keys
+ validates_numericality_of :delay, :allow_nil => true
+ validates_uniqueness_of :issue_to_id, :scope => :issue_from_id
+ validate :validate_issue_relation
+
+ attr_protected :issue_from_id, :issue_to_id
+ before_save :handle_issue_order
+ after_create :call_issues_relation_added_callback
+ after_destroy :call_issues_relation_removed_callback
+
+ safe_attributes 'relation_type',
+ 'delay',
+ 'issue_to_id'
+
+ def safe_attributes=(attrs, user=User.current)
+ return unless attrs.is_a?(Hash)
+ attrs = attrs.deep_dup
+
+ if issue_id = attrs.delete('issue_to_id')
+ if issue_id.to_s.strip.match(/\A#?(\d+)\z/)
+ issue_id = $1.to_i
+ self.issue_to = Issue.visible(user).find_by_id(issue_id)
+ end
+ end
+
+ super(attrs)
+ end
+
+ def visible?(user=User.current)
+ (issue_from.nil? || issue_from.visible?(user)) && (issue_to.nil? || issue_to.visible?(user))
+ end
+
+ def deletable?(user=User.current)
+ visible?(user) &&
+ ((issue_from.nil? || user.allowed_to?(:manage_issue_relations, issue_from.project)) ||
+ (issue_to.nil? || user.allowed_to?(:manage_issue_relations, issue_to.project)))
+ end
+
+ def initialize(attributes=nil, *args)
+ super
+ if new_record?
+ if relation_type.blank?
+ self.relation_type = IssueRelation::TYPE_RELATES
+ end
+ end
+ end
+
+ def validate_issue_relation
+ if issue_from && issue_to
+ errors.add :issue_to_id, :invalid if issue_from_id == issue_to_id
+ unless issue_from.project_id == issue_to.project_id ||
+ Setting.cross_project_issue_relations?
+ errors.add :issue_to_id, :not_same_project
+ end
+ if circular_dependency?
+ errors.add :base, :circular_dependency
+ end
+ if issue_from.is_descendant_of?(issue_to) || issue_from.is_ancestor_of?(issue_to)
+ errors.add :base, :cant_link_an_issue_with_a_descendant
+ end
+ end
+ end
+
+ def other_issue(issue)
+ (self.issue_from_id == issue.id) ? issue_to : issue_from
+ end
+
+ # Returns the relation type for +issue+
+ def relation_type_for(issue)
+ if TYPES[relation_type]
+ if self.issue_from_id == issue.id
+ relation_type
+ else
+ TYPES[relation_type][:sym]
+ end
+ end
+ end
+
+ def label_for(issue)
+ TYPES[relation_type] ?
+ TYPES[relation_type][(self.issue_from_id == issue.id) ? :name : :sym_name] :
+ :unknow
+ end
+
+ def to_s(issue=nil)
+ issue ||= issue_from
+ issue_text = block_given? ? yield(other_issue(issue)) : "##{other_issue(issue).try(:id)}"
+ s = []
+ s << l(label_for(issue))
+ s << "(#{l('datetime.distance_in_words.x_days', :count => delay)})" if delay && delay != 0
+ s << issue_text
+ s.join(' ')
+ end
+
+ def css_classes_for(issue)
+ "rel-#{relation_type_for(issue)}"
+ end
+
+ def handle_issue_order
+ reverse_if_needed
+
+ if TYPE_PRECEDES == relation_type
+ self.delay ||= 0
+ else
+ self.delay = nil
+ end
+ set_issue_to_dates
+ end
+
+ def set_issue_to_dates(journal=nil)
+ soonest_start = self.successor_soonest_start
+ if soonest_start && issue_to
+ issue_to.reschedule_on!(soonest_start, journal)
+ end
+ end
+
+ def successor_soonest_start
+ if (TYPE_PRECEDES == self.relation_type) && delay && issue_from &&
+ (issue_from.start_date || issue_from.due_date)
+ (issue_from.due_date || issue_from.start_date) + 1 + delay
+ end
+ end
+
+ def <=>(relation)
+ r = TYPES[self.relation_type][:order] <=> TYPES[relation.relation_type][:order]
+ r == 0 ? id <=> relation.id : r
+ end
+
+ def init_journals(user)
+ issue_from.init_journal(user) if issue_from
+ issue_to.init_journal(user) if issue_to
+ end
+
+ private
+
+ # Reverses the relation if needed so that it gets stored in the proper way
+ # Should not be reversed before validation so that it can be displayed back
+ # as entered on new relation form.
+ #
+ # Orders relates relations by ID, so that uniqueness index in DB is triggered
+ # on concurrent access.
+ def reverse_if_needed
+ if TYPES.has_key?(relation_type) && TYPES[relation_type][:reverse]
+ issue_tmp = issue_to
+ self.issue_to = issue_from
+ self.issue_from = issue_tmp
+ self.relation_type = TYPES[relation_type][:reverse]
+
+ elsif relation_type == TYPE_RELATES && issue_from_id > issue_to_id
+ self.issue_to, self.issue_from = issue_from, issue_to
+ end
+ end
+
+ # Returns true if the relation would create a circular dependency
+ def circular_dependency?
+ case relation_type
+ when 'follows'
+ issue_from.would_reschedule? issue_to
+ when 'precedes'
+ issue_to.would_reschedule? issue_from
+ when 'blocked'
+ issue_from.blocks? issue_to
+ when 'blocks'
+ issue_to.blocks? issue_from
+ when 'relates'
+ self.class.where(issue_from_id: issue_to, issue_to_id: issue_from).present?
+ else
+ false
+ end
+ end
+
+ def call_issues_relation_added_callback
+ call_issues_callback :relation_added
+ end
+
+ def call_issues_relation_removed_callback
+ call_issues_callback :relation_removed
+ end
+
+ def call_issues_callback(name)
+ [issue_from, issue_to].each do |issue|
+ if issue
+ issue.send name, self
+ end
+ end
+ end
+end
diff --git a/app/models/issue_status.rb b/app/models/issue_status.rb
new file mode 100644
index 0000000..6d29cfc
--- /dev/null
+++ b/app/models/issue_status.rb
@@ -0,0 +1,122 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class IssueStatus < ActiveRecord::Base
+ include Redmine::SafeAttributes
+
+ before_destroy :check_integrity
+ has_many :workflows, :class_name => 'WorkflowTransition', :foreign_key => "old_status_id"
+ has_many :workflow_transitions_as_new_status, :class_name => 'WorkflowTransition', :foreign_key => "new_status_id"
+ acts_as_positioned
+
+ after_update :handle_is_closed_change
+ before_destroy :delete_workflow_rules
+
+ validates_presence_of :name
+ validates_uniqueness_of :name
+ validates_length_of :name, :maximum => 30
+ validates_inclusion_of :default_done_ratio, :in => 0..100, :allow_nil => true
+ attr_protected :id
+
+ scope :sorted, lambda { order(:position) }
+ scope :named, lambda {|arg| where("LOWER(#{table_name}.name) = LOWER(?)", arg.to_s.strip)}
+
+ safe_attributes 'name',
+ 'is_closed',
+ 'position',
+ 'default_done_ratio'
+
+ # Update all the +Issues+ setting their done_ratio to the value of their +IssueStatus+
+ def self.update_issue_done_ratios
+ if Issue.use_status_for_done_ratio?
+ IssueStatus.where("default_done_ratio >= 0").each do |status|
+ Issue.where({:status_id => status.id}).update_all({:done_ratio => status.default_done_ratio})
+ end
+ end
+
+ return Issue.use_status_for_done_ratio?
+ end
+
+ # Returns an array of all statuses the given role can switch to
+ def new_statuses_allowed_to(roles, tracker, author=false, assignee=false)
+ self.class.new_statuses_allowed(self, roles, tracker, author, assignee)
+ end
+ alias :find_new_statuses_allowed_to :new_statuses_allowed_to
+
+ def self.new_statuses_allowed(status, roles, tracker, author=false, assignee=false)
+ if roles.present? && tracker
+ status_id = status.try(:id) || 0
+
+ scope = IssueStatus.
+ joins(:workflow_transitions_as_new_status).
+ where(:workflows => {:old_status_id => status_id, :role_id => roles.map(&:id), :tracker_id => tracker.id})
+
+ unless author && assignee
+ if author || assignee
+ scope = scope.where("author = ? OR assignee = ?", author, assignee)
+ else
+ scope = scope.where("author = ? AND assignee = ?", false, false)
+ end
+ end
+
+ scope.distinct.to_a.sort
+ else
+ []
+ end
+ end
+
+ def <=>(status)
+ position <=> status.position
+ end
+
+ def to_s; name end
+
+ private
+
+ # Updates issues closed_on attribute when an existing status is set as closed.
+ def handle_is_closed_change
+ if is_closed_changed? && is_closed == true
+ # First we update issues that have a journal for when the current status was set,
+ # a subselect is used to update all issues with a single query
+ subquery = Journal.joins(:details).
+ where(:journalized_type => 'Issue').
+ where("journalized_id = #{Issue.table_name}.id").
+ where(:journal_details => {:property => 'attr', :prop_key => 'status_id', :value => id.to_s}).
+ select("MAX(created_on)").
+ to_sql
+ Issue.where(:status_id => id, :closed_on => nil).update_all("closed_on = (#{subquery})")
+
+ # Then we update issues that don't have a journal which means the
+ # current status was set on creation
+ Issue.where(:status_id => id, :closed_on => nil).update_all("closed_on = created_on")
+ end
+ end
+
+ def check_integrity
+ if Issue.where(:status_id => id).any?
+ raise "This status is used by some issues"
+ elsif Tracker.where(:default_status_id => id).any?
+ raise "This status is used as the default status by some trackers"
+ end
+ end
+
+ # Deletes associated workflows
+ def delete_workflow_rules
+ WorkflowRule.where(:old_status_id => id).delete_all
+ WorkflowRule.where(:new_status_id => id).delete_all
+ end
+end
diff --git a/app/models/journal.rb b/app/models/journal.rb
new file mode 100644
index 0000000..0d2e479
--- /dev/null
+++ b/app/models/journal.rb
@@ -0,0 +1,328 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Journal < ActiveRecord::Base
+ include Redmine::SafeAttributes
+
+ belongs_to :journalized, :polymorphic => true
+ # added as a quick fix to allow eager loading of the polymorphic association
+ # since always associated to an issue, for now
+ belongs_to :issue, :foreign_key => :journalized_id
+
+ belongs_to :user
+ has_many :details, :class_name => "JournalDetail", :dependent => :delete_all, :inverse_of => :journal
+ attr_accessor :indice
+ attr_protected :id
+
+ acts_as_event :title => Proc.new {|o| status = ((s = o.new_status) ? " (#{s})" : nil); "#{o.issue.tracker} ##{o.issue.id}#{status}: #{o.issue.subject}" },
+ :description => :notes,
+ :author => :user,
+ :group => :issue,
+ :type => Proc.new {|o| (s = o.new_status) ? (s.is_closed? ? 'issue-closed' : 'issue-edit') : 'issue-note' },
+ :url => Proc.new {|o| {:controller => 'issues', :action => 'show', :id => o.issue.id, :anchor => "change-#{o.id}"}}
+
+ acts_as_activity_provider :type => 'issues',
+ :author_key => :user_id,
+ :scope => preload({:issue => :project}, :user).
+ joins("LEFT OUTER JOIN #{JournalDetail.table_name} ON #{JournalDetail.table_name}.journal_id = #{Journal.table_name}.id").
+ where("#{Journal.table_name}.journalized_type = 'Issue' AND" +
+ " (#{JournalDetail.table_name}.prop_key = 'status_id' OR #{Journal.table_name}.notes <> '')").distinct
+
+ before_create :split_private_notes
+ after_commit :send_notification, :on => :create
+
+ scope :visible, lambda {|*args|
+ user = args.shift || User.current
+ options = args.shift || {}
+
+ joins(:issue => :project).
+ where(Issue.visible_condition(user, options)).
+ where(Journal.visible_notes_condition(user, :skip_pre_condition => true))
+ }
+
+ safe_attributes 'notes',
+ :if => lambda {|journal, user| journal.new_record? || journal.editable_by?(user)}
+ safe_attributes 'private_notes',
+ :if => lambda {|journal, user| user.allowed_to?(:set_notes_private, journal.project)}
+
+ # Returns a SQL condition to filter out journals with notes that are not visible to user
+ def self.visible_notes_condition(user=User.current, options={})
+ private_notes_permission = Project.allowed_to_condition(user, :view_private_notes, options)
+ sanitize_sql_for_conditions(["(#{table_name}.private_notes = ? OR #{table_name}.user_id = ? OR (#{private_notes_permission}))", false, user.id])
+ end
+
+ def initialize(*args)
+ super
+ if journalized
+ if journalized.new_record?
+ self.notify = false
+ else
+ start
+ end
+ end
+ end
+
+ def save(*args)
+ journalize_changes
+ # Do not save an empty journal
+ (details.empty? && notes.blank?) ? false : super
+ end
+
+ # Returns journal details that are visible to user
+ def visible_details(user=User.current)
+ details.select do |detail|
+ if detail.property == 'cf'
+ detail.custom_field && detail.custom_field.visible_by?(project, user)
+ elsif detail.property == 'relation'
+ Issue.find_by_id(detail.value || detail.old_value).try(:visible?, user)
+ else
+ true
+ end
+ end
+ end
+
+ def each_notification(users, &block)
+ if users.any?
+ users_by_details_visibility = users.group_by do |user|
+ visible_details(user)
+ end
+ users_by_details_visibility.each do |visible_details, users|
+ if notes? || visible_details.any?
+ yield(users)
+ end
+ end
+ end
+ end
+
+ # Returns the JournalDetail for the given attribute, or nil if the attribute
+ # was not updated
+ def detail_for_attribute(attribute)
+ details.detect {|detail| detail.prop_key == attribute}
+ end
+
+ # Returns the new status if the journal contains a status change, otherwise nil
+ def new_status
+ s = new_value_for('status_id')
+ s ? IssueStatus.find_by_id(s.to_i) : nil
+ end
+
+ def new_value_for(prop)
+ detail_for_attribute(prop).try(:value)
+ end
+
+ def editable_by?(usr)
+ usr && usr.logged? && (usr.allowed_to?(:edit_issue_notes, project) || (self.user == usr && usr.allowed_to?(:edit_own_issue_notes, project)))
+ end
+
+ def project
+ journalized.respond_to?(:project) ? journalized.project : nil
+ end
+
+ def attachments
+ journalized.respond_to?(:attachments) ? journalized.attachments : []
+ end
+
+ # Returns a string of css classes
+ def css_classes
+ s = 'journal'
+ s << ' has-notes' unless notes.blank?
+ s << ' has-details' unless details.blank?
+ s << ' private-notes' if private_notes?
+ s
+ end
+
+ def notify?
+ @notify != false
+ end
+
+ def notify=(arg)
+ @notify = arg
+ end
+
+ def notified_users
+ notified = journalized.notified_users
+ if private_notes?
+ notified = notified.select {|user| user.allowed_to?(:view_private_notes, journalized.project)}
+ end
+ notified
+ end
+
+ def recipients
+ notified_users.map(&:mail)
+ end
+
+ def notified_watchers
+ notified = journalized.notified_watchers
+ if private_notes?
+ notified = notified.select {|user| user.allowed_to?(:view_private_notes, journalized.project)}
+ end
+ notified
+ end
+
+ def watcher_recipients
+ notified_watchers.map(&:mail)
+ end
+
+ # Sets @custom_field instance variable on journals details using a single query
+ def self.preload_journals_details_custom_fields(journals)
+ field_ids = journals.map(&:details).flatten.select {|d| d.property == 'cf'}.map(&:prop_key).uniq
+ if field_ids.any?
+ fields_by_id = CustomField.where(:id => field_ids).inject({}) {|h, f| h[f.id] = f; h}
+ journals.each do |journal|
+ journal.details.each do |detail|
+ if detail.property == 'cf'
+ detail.instance_variable_set "@custom_field", fields_by_id[detail.prop_key.to_i]
+ end
+ end
+ end
+ end
+ journals
+ end
+
+ # Stores the values of the attributes and custom fields of the journalized object
+ def start
+ if journalized
+ @attributes_before_change = journalized.journalized_attribute_names.inject({}) do |h, attribute|
+ h[attribute] = journalized.send(attribute)
+ h
+ end
+ @custom_values_before_change = journalized.custom_field_values.inject({}) do |h, c|
+ h[c.custom_field_id] = c.value
+ h
+ end
+ end
+ self
+ end
+
+ # Adds a journal detail for an attachment that was added or removed
+ def journalize_attachment(attachment, added_or_removed)
+ key = (added_or_removed == :removed ? :old_value : :value)
+ details << JournalDetail.new(
+ :property => 'attachment',
+ :prop_key => attachment.id,
+ key => attachment.filename
+ )
+ end
+
+ # Adds a journal detail for an issue relation that was added or removed
+ def journalize_relation(relation, added_or_removed)
+ key = (added_or_removed == :removed ? :old_value : :value)
+ details << JournalDetail.new(
+ :property => 'relation',
+ :prop_key => relation.relation_type_for(journalized),
+ key => relation.other_issue(journalized).try(:id)
+ )
+ end
+
+ private
+
+ # Generates journal details for attribute and custom field changes
+ def journalize_changes
+ # attributes changes
+ if @attributes_before_change
+ attrs = (journalized.journalized_attribute_names + @attributes_before_change.keys).uniq
+ attrs.each do |attribute|
+ before = @attributes_before_change[attribute]
+ after = journalized.send(attribute)
+ next if before == after || (before.blank? && after.blank?)
+ add_attribute_detail(attribute, before, after)
+ end
+ end
+ # custom fields changes
+ if @custom_values_before_change
+ values_by_custom_field_id = {}
+ @custom_values_before_change.each do |custom_field_id, value|
+ values_by_custom_field_id[custom_field_id] = nil
+ end
+ journalized.custom_field_values.each do |c|
+ values_by_custom_field_id[c.custom_field_id] = c.value
+ end
+
+ values_by_custom_field_id.each do |custom_field_id, after|
+ before = @custom_values_before_change[custom_field_id]
+ next if before == after || (before.blank? && after.blank?)
+
+ if before.is_a?(Array) || after.is_a?(Array)
+ before = [before] unless before.is_a?(Array)
+ after = [after] unless after.is_a?(Array)
+
+ # values removed
+ (before - after).reject(&:blank?).each do |value|
+ add_custom_field_detail(custom_field_id, value, nil)
+ end
+ # values added
+ (after - before).reject(&:blank?).each do |value|
+ add_custom_field_detail(custom_field_id, nil, value)
+ end
+ else
+ add_custom_field_detail(custom_field_id, before, after)
+ end
+ end
+ end
+ start
+ end
+
+ # Adds a journal detail for an attribute change
+ def add_attribute_detail(attribute, old_value, value)
+ add_detail('attr', attribute, old_value, value)
+ end
+
+ # Adds a journal detail for a custom field value change
+ def add_custom_field_detail(custom_field_id, old_value, value)
+ add_detail('cf', custom_field_id, old_value, value)
+ end
+
+ # Adds a journal detail
+ def add_detail(property, prop_key, old_value, value)
+ details << JournalDetail.new(
+ :property => property,
+ :prop_key => prop_key,
+ :old_value => old_value,
+ :value => value
+ )
+ end
+
+ def split_private_notes
+ if private_notes?
+ if notes.present?
+ if details.any?
+ # Split the journal (notes/changes) so we don't have half-private journals
+ journal = Journal.new(:journalized => journalized, :user => user, :notes => nil, :private_notes => false)
+ journal.details = details
+ journal.save
+ self.details = []
+ self.created_on = journal.created_on
+ end
+ else
+ # Blank notes should not be private
+ self.private_notes = false
+ end
+ end
+ true
+ end
+
+ def send_notification
+ if notify? && (Setting.notified_events.include?('issue_updated') ||
+ (Setting.notified_events.include?('issue_note_added') && notes.present?) ||
+ (Setting.notified_events.include?('issue_status_updated') && new_status.present?) ||
+ (Setting.notified_events.include?('issue_assigned_to_updated') && detail_for_attribute('assigned_to_id').present?) ||
+ (Setting.notified_events.include?('issue_priority_updated') && new_value_for('priority_id').present?)
+ )
+ Mailer.deliver_issue_edit(self)
+ end
+ end
+end
diff --git a/app/models/journal_detail.rb b/app/models/journal_detail.rb
new file mode 100644
index 0000000..f901d27
--- /dev/null
+++ b/app/models/journal_detail.rb
@@ -0,0 +1,50 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class JournalDetail < ActiveRecord::Base
+ belongs_to :journal
+ attr_protected :id
+
+ def custom_field
+ if property == 'cf'
+ @custom_field ||= CustomField.find_by_id(prop_key)
+ end
+ end
+
+ def value=(arg)
+ write_attribute :value, normalize(arg)
+ end
+
+ def old_value=(arg)
+ write_attribute :old_value, normalize(arg)
+ end
+
+ private
+
+ def normalize(v)
+ case v
+ when true
+ "1"
+ when false
+ "0"
+ when Date
+ v.strftime("%Y-%m-%d")
+ else
+ v
+ end
+ end
+end
diff --git a/app/models/mail_handler.rb b/app/models/mail_handler.rb
new file mode 100755
index 0000000..2390339
--- /dev/null
+++ b/app/models/mail_handler.rb
@@ -0,0 +1,591 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class MailHandler < ActionMailer::Base
+ include ActionView::Helpers::SanitizeHelper
+ include Redmine::I18n
+
+ class UnauthorizedAction < StandardError; end
+ class MissingInformation < StandardError; end
+
+ attr_reader :email, :user, :handler_options
+
+ def self.receive(raw_mail, options={})
+ options = options.deep_dup
+
+ options[:issue] ||= {}
+
+ options[:allow_override] ||= []
+ if options[:allow_override].is_a?(String)
+ options[:allow_override] = options[:allow_override].split(',')
+ end
+ options[:allow_override].map! {|s| s.strip.downcase.gsub(/\s+/, '_')}
+ # Project needs to be overridable if not specified
+ options[:allow_override] << 'project' unless options[:issue].has_key?(:project)
+
+ options[:no_account_notice] = (options[:no_account_notice].to_s == '1')
+ options[:no_notification] = (options[:no_notification].to_s == '1')
+ options[:no_permission_check] = (options[:no_permission_check].to_s == '1')
+
+ raw_mail.force_encoding('ASCII-8BIT')
+
+ ActiveSupport::Notifications.instrument("receive.action_mailer") do |payload|
+ mail = Mail.new(raw_mail)
+ set_payload_for_mail(payload, mail)
+ new.receive(mail, options)
+ end
+ end
+
+ # Receives an email and rescues any exception
+ def self.safe_receive(*args)
+ receive(*args)
+ rescue Exception => e
+ Rails.logger.error "MailHandler: an unexpected error occurred when receiving email: #{e.message}"
+ return false
+ end
+
+ # Extracts MailHandler options from environment variables
+ # Use when receiving emails with rake tasks
+ def self.extract_options_from_env(env)
+ options = {:issue => {}}
+ %w(project status tracker category priority assigned_to fixed_version).each do |option|
+ options[:issue][option.to_sym] = env[option] if env[option]
+ end
+ %w(allow_override unknown_user no_permission_check no_account_notice no_notification default_group project_from_subaddress).each do |option|
+ options[option.to_sym] = env[option] if env[option]
+ end
+ if env['private']
+ options[:issue][:is_private] = '1'
+ end
+ options
+ end
+
+ def logger
+ Rails.logger
+ end
+
+ cattr_accessor :ignored_emails_headers
+ self.ignored_emails_headers = {
+ 'Auto-Submitted' => /\Aauto-(replied|generated)/,
+ 'X-Autoreply' => 'yes'
+ }
+
+ # Processes incoming emails
+ # Returns the created object (eg. an issue, a message) or false
+ def receive(email, options={})
+ @email = email
+ @handler_options = options
+ sender_email = email.from.to_a.first.to_s.strip
+ # Ignore emails received from the application emission address to avoid hell cycles
+ if sender_email.casecmp(Setting.mail_from.to_s.strip) == 0
+ if logger
+ logger.info "MailHandler: ignoring email from Redmine emission address [#{sender_email}]"
+ end
+ return false
+ end
+ # Ignore auto generated emails
+ self.class.ignored_emails_headers.each do |key, ignored_value|
+ value = email.header[key]
+ if value
+ value = value.to_s.downcase
+ if (ignored_value.is_a?(Regexp) && value.match(ignored_value)) || value == ignored_value
+ if logger
+ logger.info "MailHandler: ignoring email with #{key}:#{value} header"
+ end
+ return false
+ end
+ end
+ end
+ @user = User.find_by_mail(sender_email) if sender_email.present?
+ if @user && !@user.active?
+ if logger
+ logger.info "MailHandler: ignoring email from non-active user [#{@user.login}]"
+ end
+ return false
+ end
+ if @user.nil?
+ # Email was submitted by an unknown user
+ case handler_options[:unknown_user]
+ when 'accept'
+ @user = User.anonymous
+ when 'create'
+ @user = create_user_from_email
+ if @user
+ if logger
+ logger.info "MailHandler: [#{@user.login}] account created"
+ end
+ add_user_to_group(handler_options[:default_group])
+ unless handler_options[:no_account_notice]
+ ::Mailer.account_information(@user, @user.password).deliver
+ end
+ else
+ if logger
+ logger.error "MailHandler: could not create account for [#{sender_email}]"
+ end
+ return false
+ end
+ else
+ # Default behaviour, emails from unknown users are ignored
+ if logger
+ logger.info "MailHandler: ignoring email from unknown user [#{sender_email}]"
+ end
+ return false
+ end
+ end
+ User.current = @user
+ dispatch
+ end
+
+ private
+
+ MESSAGE_ID_RE = %r{^ e
+ # TODO: send a email to the user
+ logger.error "MailHandler: #{e.message}" if logger
+ false
+ rescue MissingInformation => e
+ logger.error "MailHandler: missing information from #{user}: #{e.message}" if logger
+ false
+ rescue UnauthorizedAction => e
+ logger.error "MailHandler: unauthorized attempt from #{user}" if logger
+ false
+ end
+
+ def dispatch_to_default
+ receive_issue
+ end
+
+ # Creates a new issue
+ def receive_issue
+ project = target_project
+ # check permission
+ unless handler_options[:no_permission_check]
+ raise UnauthorizedAction unless user.allowed_to?(:add_issues, project)
+ end
+
+ issue = Issue.new(:author => user, :project => project)
+ attributes = issue_attributes_from_keywords(issue)
+ if handler_options[:no_permission_check]
+ issue.tracker_id = attributes['tracker_id']
+ if project
+ issue.tracker_id ||= project.trackers.first.try(:id)
+ end
+ end
+ issue.safe_attributes = attributes
+ issue.safe_attributes = {'custom_field_values' => custom_field_values_from_keywords(issue)}
+ issue.subject = cleaned_up_subject
+ if issue.subject.blank?
+ issue.subject = '(no subject)'
+ end
+ issue.description = cleaned_up_text_body
+ issue.start_date ||= User.current.today if Setting.default_issue_start_date_to_creation_date?
+ issue.is_private = (handler_options[:issue][:is_private] == '1')
+
+ # add To and Cc as watchers before saving so the watchers can reply to Redmine
+ add_watchers(issue)
+ issue.save!
+ add_attachments(issue)
+ logger.info "MailHandler: issue ##{issue.id} created by #{user}" if logger
+ issue
+ end
+
+ # Adds a note to an existing issue
+ def receive_issue_reply(issue_id, from_journal=nil)
+ issue = Issue.find_by_id(issue_id)
+ return unless issue
+ # check permission
+ unless handler_options[:no_permission_check]
+ unless user.allowed_to?(:add_issue_notes, issue.project) ||
+ user.allowed_to?(:edit_issues, issue.project)
+ raise UnauthorizedAction
+ end
+ end
+
+ # ignore CLI-supplied defaults for new issues
+ handler_options[:issue].clear
+
+ journal = issue.init_journal(user)
+ if from_journal && from_journal.private_notes?
+ # If the received email was a reply to a private note, make the added note private
+ issue.private_notes = true
+ end
+ issue.safe_attributes = issue_attributes_from_keywords(issue)
+ issue.safe_attributes = {'custom_field_values' => custom_field_values_from_keywords(issue)}
+ journal.notes = cleaned_up_text_body
+
+ # add To and Cc as watchers before saving so the watchers can reply to Redmine
+ add_watchers(issue)
+ issue.save!
+ add_attachments(issue)
+ if logger
+ logger.info "MailHandler: issue ##{issue.id} updated by #{user}"
+ end
+ journal
+ end
+
+ # Reply will be added to the issue
+ def receive_journal_reply(journal_id)
+ journal = Journal.find_by_id(journal_id)
+ if journal && journal.journalized_type == 'Issue'
+ receive_issue_reply(journal.journalized_id, journal)
+ end
+ end
+
+ # Receives a reply to a forum message
+ def receive_message_reply(message_id)
+ message = Message.find_by_id(message_id)
+ if message
+ message = message.root
+
+ unless handler_options[:no_permission_check]
+ raise UnauthorizedAction unless user.allowed_to?(:add_messages, message.project)
+ end
+
+ if !message.locked?
+ reply = Message.new(:subject => cleaned_up_subject.gsub(%r{^.*msg\d+\]}, '').strip,
+ :content => cleaned_up_text_body)
+ reply.author = user
+ reply.board = message.board
+ message.children << reply
+ add_attachments(reply)
+ reply
+ else
+ if logger
+ logger.info "MailHandler: ignoring reply from [#{email.from.first}] to a locked topic"
+ end
+ end
+ end
+ end
+
+ def add_attachments(obj)
+ if email.attachments && email.attachments.any?
+ email.attachments.each do |attachment|
+ next unless accept_attachment?(attachment)
+ next unless attachment.body.decoded.size > 0
+ obj.attachments << Attachment.create(:container => obj,
+ :file => attachment.body.decoded,
+ :filename => attachment.filename,
+ :author => user,
+ :content_type => attachment.mime_type)
+ end
+ end
+ end
+
+ # Returns false if the +attachment+ of the incoming email should be ignored
+ def accept_attachment?(attachment)
+ @excluded ||= Setting.mail_handler_excluded_filenames.to_s.split(',').map(&:strip).reject(&:blank?)
+ @excluded.each do |pattern|
+ regexp = %r{\A#{Regexp.escape(pattern).gsub("\\*", ".*")}\z}i
+ if attachment.filename.to_s =~ regexp
+ logger.info "MailHandler: ignoring attachment #{attachment.filename} matching #{pattern}"
+ return false
+ end
+ end
+ true
+ end
+
+ # Adds To and Cc as watchers of the given object if the sender has the
+ # appropriate permission
+ def add_watchers(obj)
+ if handler_options[:no_permission_check] || user.allowed_to?("add_#{obj.class.name.underscore}_watchers".to_sym, obj.project)
+ addresses = [email.to, email.cc].flatten.compact.uniq.collect {|a| a.strip.downcase}
+ unless addresses.empty?
+ users = User.active.having_mail(addresses).to_a
+ users -= obj.watcher_users
+ users.each do |u|
+ obj.add_watcher(u)
+ end
+ end
+ end
+ end
+
+ def get_keyword(attr, options={})
+ @keywords ||= {}
+ if @keywords.has_key?(attr)
+ @keywords[attr]
+ else
+ @keywords[attr] = begin
+ override = options.key?(:override) ?
+ options[:override] :
+ (handler_options[:allow_override] & [attr.to_s.downcase.gsub(/\s+/, '_'), 'all']).present?
+
+ if override && (v = extract_keyword!(cleaned_up_text_body, attr, options[:format]))
+ v
+ elsif !handler_options[:issue][attr].blank?
+ handler_options[:issue][attr]
+ end
+ end
+ end
+ end
+
+ # Destructively extracts the value for +attr+ in +text+
+ # Returns nil if no matching keyword found
+ def extract_keyword!(text, attr, format=nil)
+ keys = [attr.to_s.humanize]
+ if attr.is_a?(Symbol)
+ if user && user.language.present?
+ keys << l("field_#{attr}", :default => '', :locale => user.language)
+ end
+ if Setting.default_language.present?
+ keys << l("field_#{attr}", :default => '', :locale => Setting.default_language)
+ end
+ end
+ keys.reject! {|k| k.blank?}
+ keys.collect! {|k| Regexp.escape(k)}
+ format ||= '.+'
+ keyword = nil
+ regexp = /^(#{keys.join('|')})[ \t]*:[ \t]*(#{format})\s*$/i
+ if m = text.match(regexp)
+ keyword = m[2].strip
+ text.sub!(regexp, '')
+ end
+ keyword
+ end
+
+ def get_project_from_receiver_addresses
+ local, domain = handler_options[:project_from_subaddress].to_s.split("@")
+ return nil unless local && domain
+ local = Regexp.escape(local)
+
+ [:to, :cc, :bcc].each do |field|
+ header = @email[field]
+ next if header.blank? || header.field.blank? || !header.field.respond_to?(:addrs)
+ header.field.addrs.each do |addr|
+ if addr.domain.to_s.casecmp(domain)==0 && addr.local.to_s =~ /\A#{local}\+([^+]+)\z/
+ if project = Project.find_by_identifier($1)
+ return project
+ end
+ end
+ end
+ end
+ nil
+ end
+
+ def target_project
+ # TODO: other ways to specify project:
+ # * parse the email To field
+ # * specific project (eg. Setting.mail_handler_target_project)
+ target = get_project_from_receiver_addresses
+ target ||= Project.find_by_identifier(get_keyword(:project))
+ if target.nil?
+ # Invalid project keyword, use the project specified as the default one
+ default_project = handler_options[:issue][:project]
+ if default_project.present?
+ target = Project.find_by_identifier(default_project)
+ end
+ end
+ raise MissingInformation.new('Unable to determine target project') if target.nil?
+ target
+ end
+
+ # Returns a Hash of issue attributes extracted from keywords in the email body
+ def issue_attributes_from_keywords(issue)
+ attrs = {
+ 'tracker_id' => (k = get_keyword(:tracker)) && issue.project.trackers.named(k).first.try(:id),
+ 'status_id' => (k = get_keyword(:status)) && IssueStatus.named(k).first.try(:id),
+ 'priority_id' => (k = get_keyword(:priority)) && IssuePriority.named(k).first.try(:id),
+ 'category_id' => (k = get_keyword(:category)) && issue.project.issue_categories.named(k).first.try(:id),
+ 'assigned_to_id' => (k = get_keyword(:assigned_to)) && find_assignee_from_keyword(k, issue).try(:id),
+ 'fixed_version_id' => (k = get_keyword(:fixed_version)) && issue.project.shared_versions.named(k).first.try(:id),
+ 'start_date' => get_keyword(:start_date, :format => '\d{4}-\d{2}-\d{2}'),
+ 'due_date' => get_keyword(:due_date, :format => '\d{4}-\d{2}-\d{2}'),
+ 'estimated_hours' => get_keyword(:estimated_hours),
+ 'done_ratio' => get_keyword(:done_ratio, :format => '(\d|10)?0')
+ }.delete_if {|k, v| v.blank? }
+
+ attrs
+ end
+
+ # Returns a Hash of issue custom field values extracted from keywords in the email body
+ def custom_field_values_from_keywords(customized)
+ customized.custom_field_values.inject({}) do |h, v|
+ if keyword = get_keyword(v.custom_field.name)
+ h[v.custom_field.id.to_s] = v.custom_field.value_from_keyword(keyword, customized)
+ end
+ h
+ end
+ end
+
+ # Returns the text/plain part of the email
+ # If not found (eg. HTML-only email), returns the body with tags removed
+ def plain_text_body
+ return @plain_text_body unless @plain_text_body.nil?
+
+ # check if we have any plain-text parts with content
+ @plain_text_body = email_parts_to_text(email.all_parts.select {|p| p.mime_type == 'text/plain'}).presence
+
+ # if not, we try to parse the body from the HTML-parts
+ @plain_text_body ||= email_parts_to_text(email.all_parts.select {|p| p.mime_type == 'text/html'}).presence
+
+ # If there is still no body found, and there are no mime-parts defined,
+ # we use the whole raw mail body
+ @plain_text_body ||= email_parts_to_text([email]).presence if email.all_parts.empty?
+
+ # As a fallback we return an empty plain text body (e.g. if we have only
+ # empty text parts but a non-text attachment)
+ @plain_text_body ||= ""
+ end
+
+ def email_parts_to_text(parts)
+ parts.reject! do |part|
+ part.attachment?
+ end
+
+ parts.map do |p|
+ body_charset = Mail::RubyVer.respond_to?(:pick_encoding) ?
+ Mail::RubyVer.pick_encoding(p.charset).to_s : p.charset
+
+ body = Redmine::CodesetUtil.to_utf8(p.body.decoded, body_charset)
+ # convert html parts to text
+ p.mime_type == 'text/html' ? self.class.html_body_to_text(body) : self.class.plain_text_body_to_text(body)
+ end.join("\r\n")
+ end
+
+ def cleaned_up_text_body
+ @cleaned_up_text_body ||= cleanup_body(plain_text_body)
+ end
+
+ def cleaned_up_subject
+ subject = email.subject.to_s
+ subject.strip[0,255]
+ end
+
+ # Converts a HTML email body to text
+ def self.html_body_to_text(html)
+ Redmine::WikiFormatting.html_parser.to_text(html)
+ end
+
+ # Converts a plain/text email body to text
+ def self.plain_text_body_to_text(text)
+ # Removes leading spaces that would cause the line to be rendered as
+ # preformatted text with textile
+ text.gsub(/^ +(?![*#])/, '')
+ end
+
+ def self.assign_string_attribute_with_limit(object, attribute, value, limit=nil)
+ limit ||= object.class.columns_hash[attribute.to_s].limit || 255
+ value = value.to_s.slice(0, limit)
+ object.send("#{attribute}=", value)
+ end
+
+ # Returns a User from an email address and a full name
+ def self.new_user_from_attributes(email_address, fullname=nil)
+ user = User.new
+
+ # Truncating the email address would result in an invalid format
+ user.mail = email_address
+ assign_string_attribute_with_limit(user, 'login', email_address, User::LOGIN_LENGTH_LIMIT)
+
+ names = fullname.blank? ? email_address.gsub(/@.*$/, '').split('.') : fullname.split
+ assign_string_attribute_with_limit(user, 'firstname', names.shift, 30)
+ assign_string_attribute_with_limit(user, 'lastname', names.join(' '), 30)
+ user.lastname = '-' if user.lastname.blank?
+ user.language = Setting.default_language
+ user.generate_password = true
+ user.mail_notification = 'only_my_events'
+
+ unless user.valid?
+ user.login = "user#{Redmine::Utils.random_hex(6)}" unless user.errors[:login].blank?
+ user.firstname = "-" unless user.errors[:firstname].blank?
+ (puts user.errors[:lastname];user.lastname = "-") unless user.errors[:lastname].blank?
+ end
+
+ user
+ end
+
+ # Creates a User for the +email+ sender
+ # Returns the user or nil if it could not be created
+ def create_user_from_email
+ from = email.header['from'].to_s
+ addr, name = from, nil
+ if m = from.match(/^"?(.+?)"?\s+<(.+@.+)>$/)
+ addr, name = m[2], m[1]
+ end
+ if addr.present?
+ user = self.class.new_user_from_attributes(addr, name)
+ if handler_options[:no_notification]
+ user.mail_notification = 'none'
+ end
+ if user.save
+ user
+ else
+ logger.error "MailHandler: failed to create User: #{user.errors.full_messages}" if logger
+ nil
+ end
+ else
+ logger.error "MailHandler: failed to create User: no FROM address found" if logger
+ nil
+ end
+ end
+
+ # Adds the newly created user to default group
+ def add_user_to_group(default_group)
+ if default_group.present?
+ default_group.split(',').each do |group_name|
+ if group = Group.named(group_name).first
+ group.users << @user
+ elsif logger
+ logger.warn "MailHandler: could not add user to [#{group_name}], group not found"
+ end
+ end
+ end
+ end
+
+ # Removes the email body of text after the truncation configurations.
+ def cleanup_body(body)
+ delimiters = Setting.mail_handler_body_delimiters.to_s.split(/[\r\n]+/).reject(&:blank?)
+
+ if Setting.mail_handler_enable_regex_delimiters?
+ begin
+ delimiters = delimiters.map {|s| Regexp.new(s)}
+ rescue RegexpError => e
+ logger.error "MailHandler: invalid regexp delimiter found in mail_handler_body_delimiters setting (#{e.message})" if logger
+ end
+ end
+
+ unless delimiters.empty?
+ regex = Regexp.new("^[> ]*(#{ Regexp.union(delimiters) })[[:blank:]]*[\r\n].*", Regexp::MULTILINE)
+ body = body.gsub(regex, '')
+ end
+ body.strip
+ end
+
+ def find_assignee_from_keyword(keyword, issue)
+ Principal.detect_by_keyword(issue.assignable_users, keyword)
+ end
+end
diff --git a/app/models/mailer.rb b/app/models/mailer.rb
new file mode 100644
index 0000000..0c8c55c
--- /dev/null
+++ b/app/models/mailer.rb
@@ -0,0 +1,593 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'roadie'
+
+class Mailer < ActionMailer::Base
+ layout 'mailer'
+ helper :application
+ helper :issues
+ helper :custom_fields
+
+ include Redmine::I18n
+ include Roadie::Rails::Automatic
+
+ def self.default_url_options
+ options = {:protocol => Setting.protocol}
+ if Setting.host_name.to_s =~ /\A(https?\:\/\/)?(.+?)(\:(\d+))?(\/.+)?\z/i
+ host, port, prefix = $2, $4, $5
+ options.merge!({
+ :host => host, :port => port, :script_name => prefix
+ })
+ else
+ options[:host] = Setting.host_name
+ end
+ options
+ end
+
+ # Builds a mail for notifying to_users and cc_users about a new issue
+ def issue_add(issue, to_users, cc_users)
+ redmine_headers 'Project' => issue.project.identifier,
+ 'Issue-Id' => issue.id,
+ 'Issue-Author' => issue.author.login
+ redmine_headers 'Issue-Assignee' => issue.assigned_to.login if issue.assigned_to
+ message_id issue
+ references issue
+ @author = issue.author
+ @issue = issue
+ @users = to_users + cc_users
+ @issue_url = url_for(:controller => 'issues', :action => 'show', :id => issue)
+ mail :to => to_users,
+ :cc => cc_users,
+ :subject => "[#{issue.project.name} - #{issue.tracker.name} ##{issue.id}] (#{issue.status.name}) #{issue.subject}"
+ end
+
+ # Notifies users about a new issue
+ def self.deliver_issue_add(issue)
+ to = issue.notified_users
+ cc = issue.notified_watchers - to
+ issue.each_notification(to + cc) do |users|
+ issue_add(issue, to & users, cc & users).deliver
+ end
+ end
+
+ # Builds a mail for notifying to_users and cc_users about an issue update
+ def issue_edit(journal, to_users, cc_users)
+ issue = journal.journalized
+ redmine_headers 'Project' => issue.project.identifier,
+ 'Issue-Id' => issue.id,
+ 'Issue-Author' => issue.author.login
+ redmine_headers 'Issue-Assignee' => issue.assigned_to.login if issue.assigned_to
+ message_id journal
+ references issue
+ @author = journal.user
+ s = "[#{issue.project.name} - #{issue.tracker.name} ##{issue.id}] "
+ s << "(#{issue.status.name}) " if journal.new_value_for('status_id')
+ s << issue.subject
+ @issue = issue
+ @users = to_users + cc_users
+ @journal = journal
+ @journal_details = journal.visible_details(@users.first)
+ @issue_url = url_for(:controller => 'issues', :action => 'show', :id => issue, :anchor => "change-#{journal.id}")
+ mail :to => to_users,
+ :cc => cc_users,
+ :subject => s
+ end
+
+ # Notifies users about an issue update
+ def self.deliver_issue_edit(journal)
+ issue = journal.journalized.reload
+ to = journal.notified_users
+ cc = journal.notified_watchers - to
+ journal.each_notification(to + cc) do |users|
+ issue.each_notification(users) do |users2|
+ issue_edit(journal, to & users2, cc & users2).deliver
+ end
+ end
+ end
+
+ def reminder(user, issues, days)
+ set_language_if_valid user.language
+ @issues = issues
+ @days = days
+ @issues_url = url_for(:controller => 'issues', :action => 'index',
+ :set_filter => 1, :assigned_to_id => user.id,
+ :sort => 'due_date:asc')
+ mail :to => user,
+ :subject => l(:mail_subject_reminder, :count => issues.size, :days => days)
+ end
+
+ # Builds a Mail::Message object used to email users belonging to the added document's project.
+ #
+ # Example:
+ # document_added(document) => Mail::Message object
+ # Mailer.document_added(document).deliver => sends an email to the document's project recipients
+ def document_added(document)
+ redmine_headers 'Project' => document.project.identifier
+ @author = User.current
+ @document = document
+ @document_url = url_for(:controller => 'documents', :action => 'show', :id => document)
+ mail :to => document.notified_users,
+ :subject => "[#{document.project.name}] #{l(:label_document_new)}: #{document.title}"
+ end
+
+ # Builds a Mail::Message object used to email recipients of a project when an attachements are added.
+ #
+ # Example:
+ # attachments_added(attachments) => Mail::Message object
+ # Mailer.attachments_added(attachments).deliver => sends an email to the project's recipients
+ def attachments_added(attachments)
+ container = attachments.first.container
+ added_to = ''
+ added_to_url = ''
+ @author = attachments.first.author
+ case container.class.name
+ when 'Project'
+ added_to_url = url_for(:controller => 'files', :action => 'index', :project_id => container)
+ added_to = "#{l(:label_project)}: #{container}"
+ recipients = container.project.notified_users.select {|user| user.allowed_to?(:view_files, container.project)}
+ when 'Version'
+ added_to_url = url_for(:controller => 'files', :action => 'index', :project_id => container.project)
+ added_to = "#{l(:label_version)}: #{container.name}"
+ recipients = container.project.notified_users.select {|user| user.allowed_to?(:view_files, container.project)}
+ when 'Document'
+ added_to_url = url_for(:controller => 'documents', :action => 'show', :id => container.id)
+ added_to = "#{l(:label_document)}: #{container.title}"
+ recipients = container.notified_users
+ end
+ redmine_headers 'Project' => container.project.identifier
+ @attachments = attachments
+ @added_to = added_to
+ @added_to_url = added_to_url
+ mail :to => recipients,
+ :subject => "[#{container.project.name}] #{l(:label_attachment_new)}"
+ end
+
+ # Builds a Mail::Message object used to email recipients of a news' project when a news item is added.
+ #
+ # Example:
+ # news_added(news) => Mail::Message object
+ # Mailer.news_added(news).deliver => sends an email to the news' project recipients
+ def news_added(news)
+ redmine_headers 'Project' => news.project.identifier
+ @author = news.author
+ message_id news
+ references news
+ @news = news
+ @news_url = url_for(:controller => 'news', :action => 'show', :id => news)
+ mail :to => news.notified_users,
+ :cc => news.notified_watchers_for_added_news,
+ :subject => "[#{news.project.name}] #{l(:label_news)}: #{news.title}"
+ end
+
+ # Builds a Mail::Message object used to email recipients of a news' project when a news comment is added.
+ #
+ # Example:
+ # news_comment_added(comment) => Mail::Message object
+ # Mailer.news_comment_added(comment) => sends an email to the news' project recipients
+ def news_comment_added(comment)
+ news = comment.commented
+ redmine_headers 'Project' => news.project.identifier
+ @author = comment.author
+ message_id comment
+ references news
+ @news = news
+ @comment = comment
+ @news_url = url_for(:controller => 'news', :action => 'show', :id => news)
+ mail :to => news.notified_users,
+ :cc => news.notified_watchers,
+ :subject => "Re: [#{news.project.name}] #{l(:label_news)}: #{news.title}"
+ end
+
+ # Builds a Mail::Message object used to email the recipients of the specified message that was posted.
+ #
+ # Example:
+ # message_posted(message) => Mail::Message object
+ # Mailer.message_posted(message).deliver => sends an email to the recipients
+ def message_posted(message)
+ redmine_headers 'Project' => message.project.identifier,
+ 'Topic-Id' => (message.parent_id || message.id)
+ @author = message.author
+ message_id message
+ references message.root
+ recipients = message.notified_users
+ cc = ((message.root.notified_watchers + message.board.notified_watchers).uniq - recipients)
+ @message = message
+ @message_url = url_for(message.event_url)
+ mail :to => recipients,
+ :cc => cc,
+ :subject => "[#{message.board.project.name} - #{message.board.name} - msg#{message.root.id}] #{message.subject}"
+ end
+
+ # Builds a Mail::Message object used to email the recipients of a project of the specified wiki content was added.
+ #
+ # Example:
+ # wiki_content_added(wiki_content) => Mail::Message object
+ # Mailer.wiki_content_added(wiki_content).deliver => sends an email to the project's recipients
+ def wiki_content_added(wiki_content)
+ redmine_headers 'Project' => wiki_content.project.identifier,
+ 'Wiki-Page-Id' => wiki_content.page.id
+ @author = wiki_content.author
+ message_id wiki_content
+ recipients = wiki_content.notified_users
+ cc = wiki_content.page.wiki.notified_watchers - recipients
+ @wiki_content = wiki_content
+ @wiki_content_url = url_for(:controller => 'wiki', :action => 'show',
+ :project_id => wiki_content.project,
+ :id => wiki_content.page.title)
+ mail :to => recipients,
+ :cc => cc,
+ :subject => "[#{wiki_content.project.name}] #{l(:mail_subject_wiki_content_added, :id => wiki_content.page.pretty_title)}"
+ end
+
+ # Builds a Mail::Message object used to email the recipients of a project of the specified wiki content was updated.
+ #
+ # Example:
+ # wiki_content_updated(wiki_content) => Mail::Message object
+ # Mailer.wiki_content_updated(wiki_content).deliver => sends an email to the project's recipients
+ def wiki_content_updated(wiki_content)
+ redmine_headers 'Project' => wiki_content.project.identifier,
+ 'Wiki-Page-Id' => wiki_content.page.id
+ @author = wiki_content.author
+ message_id wiki_content
+ recipients = wiki_content.notified_users
+ cc = wiki_content.page.wiki.notified_watchers + wiki_content.page.notified_watchers - recipients
+ @wiki_content = wiki_content
+ @wiki_content_url = url_for(:controller => 'wiki', :action => 'show',
+ :project_id => wiki_content.project,
+ :id => wiki_content.page.title)
+ @wiki_diff_url = url_for(:controller => 'wiki', :action => 'diff',
+ :project_id => wiki_content.project, :id => wiki_content.page.title,
+ :version => wiki_content.version)
+ mail :to => recipients,
+ :cc => cc,
+ :subject => "[#{wiki_content.project.name}] #{l(:mail_subject_wiki_content_updated, :id => wiki_content.page.pretty_title)}"
+ end
+
+ # Builds a Mail::Message object used to email the specified user their account information.
+ #
+ # Example:
+ # account_information(user, password) => Mail::Message object
+ # Mailer.account_information(user, password).deliver => sends account information to the user
+ def account_information(user, password)
+ set_language_if_valid user.language
+ @user = user
+ @password = password
+ @login_url = url_for(:controller => 'account', :action => 'login')
+ mail :to => user.mail,
+ :subject => l(:mail_subject_register, Setting.app_title)
+ end
+
+ # Builds a Mail::Message object used to email all active administrators of an account activation request.
+ #
+ # Example:
+ # account_activation_request(user) => Mail::Message object
+ # Mailer.account_activation_request(user).deliver => sends an email to all active administrators
+ def account_activation_request(user)
+ # Send the email to all active administrators
+ recipients = User.active.where(:admin => true)
+ @user = user
+ @url = url_for(:controller => 'users', :action => 'index',
+ :status => User::STATUS_REGISTERED,
+ :sort_key => 'created_on', :sort_order => 'desc')
+ mail :to => recipients,
+ :subject => l(:mail_subject_account_activation_request, Setting.app_title)
+ end
+
+ # Builds a Mail::Message object used to email the specified user that their account was activated by an administrator.
+ #
+ # Example:
+ # account_activated(user) => Mail::Message object
+ # Mailer.account_activated(user).deliver => sends an email to the registered user
+ def account_activated(user)
+ set_language_if_valid user.language
+ @user = user
+ @login_url = url_for(:controller => 'account', :action => 'login')
+ mail :to => user.mail,
+ :subject => l(:mail_subject_register, Setting.app_title)
+ end
+
+ def lost_password(token, recipient=nil)
+ set_language_if_valid(token.user.language)
+ recipient ||= token.user.mail
+ @token = token
+ @url = url_for(:controller => 'account', :action => 'lost_password', :token => token.value)
+ mail :to => recipient,
+ :subject => l(:mail_subject_lost_password, Setting.app_title)
+ end
+
+ # Notifies user that his password was updated
+ def self.password_updated(user, options={})
+ # Don't send a notification to the dummy email address when changing the password
+ # of the default admin account which is required after the first login
+ # TODO: maybe not the best way to handle this
+ return if user.admin? && user.login == 'admin' && user.mail == 'admin@example.net'
+
+ security_notification(user,
+ message: :mail_body_password_updated,
+ title: :button_change_password,
+ remote_ip: options[:remote_ip],
+ originator: user,
+ url: {controller: 'my', action: 'password'}
+ ).deliver
+ end
+
+ def register(token)
+ set_language_if_valid(token.user.language)
+ @token = token
+ @url = url_for(:controller => 'account', :action => 'activate', :token => token.value)
+ mail :to => token.user.mail,
+ :subject => l(:mail_subject_register, Setting.app_title)
+ end
+
+ def security_notification(recipients, options={})
+ @user = Array(recipients).detect{|r| r.is_a? User }
+ set_language_if_valid(@user.try :language)
+ @message = l(options[:message],
+ field: (options[:field] && l(options[:field])),
+ value: options[:value]
+ )
+ @title = options[:title] && l(options[:title])
+ @originator = options[:originator] || User.current
+ @remote_ip = options[:remote_ip] || @originator.remote_ip
+ @url = options[:url] && (options[:url].is_a?(Hash) ? url_for(options[:url]) : options[:url])
+ redmine_headers 'Sender' => @originator.login
+ redmine_headers 'Url' => @url
+ mail :to => recipients,
+ :subject => "[#{Setting.app_title}] #{l(:mail_subject_security_notification)}"
+ end
+
+ def settings_updated(recipients, changes)
+ redmine_headers 'Sender' => User.current.login
+ @changes = changes
+ @url = url_for(controller: 'settings', action: 'index')
+ mail :to => recipients,
+ :subject => "[#{Setting.app_title}] #{l(:mail_subject_security_notification)}"
+ end
+
+ # Notifies admins about settings changes
+ def self.security_settings_updated(changes)
+ return unless changes.present?
+
+ users = User.active.where(admin: true).to_a
+ settings_updated(users, changes).deliver
+ end
+
+ def test_email(user)
+ set_language_if_valid(user.language)
+ @url = url_for(:controller => 'welcome')
+ mail :to => user.mail,
+ :subject => 'Redmine test'
+ end
+
+ # Sends reminders to issue assignees
+ # Available options:
+ # * :days => how many days in the future to remind about (defaults to 7)
+ # * :tracker => id of tracker for filtering issues (defaults to all trackers)
+ # * :project => id or identifier of project to process (defaults to all projects)
+ # * :users => array of user/group ids who should be reminded
+ # * :version => name of target version for filtering issues (defaults to none)
+ def self.reminders(options={})
+ days = options[:days] || 7
+ project = options[:project] ? Project.find(options[:project]) : nil
+ tracker = options[:tracker] ? Tracker.find(options[:tracker]) : nil
+ target_version_id = options[:version] ? Version.named(options[:version]).pluck(:id) : nil
+ if options[:version] && target_version_id.blank?
+ raise ActiveRecord::RecordNotFound.new("Couldn't find Version with named #{options[:version]}")
+ end
+ user_ids = options[:users]
+
+ scope = Issue.open.where("#{Issue.table_name}.assigned_to_id IS NOT NULL" +
+ " AND #{Project.table_name}.status = #{Project::STATUS_ACTIVE}" +
+ " AND #{Issue.table_name}.due_date <= ?", days.day.from_now.to_date
+ )
+ scope = scope.where(:assigned_to_id => user_ids) if user_ids.present?
+ scope = scope.where(:project_id => project.id) if project
+ scope = scope.where(:fixed_version_id => target_version_id) if target_version_id.present?
+ scope = scope.where(:tracker_id => tracker.id) if tracker
+ issues_by_assignee = scope.includes(:status, :assigned_to, :project, :tracker).
+ group_by(&:assigned_to)
+ issues_by_assignee.keys.each do |assignee|
+ if assignee.is_a?(Group)
+ assignee.users.each do |user|
+ issues_by_assignee[user] ||= []
+ issues_by_assignee[user] += issues_by_assignee[assignee]
+ end
+ end
+ end
+
+ issues_by_assignee.each do |assignee, issues|
+ if assignee.is_a?(User) && assignee.active? && issues.present?
+ visible_issues = issues.select {|i| i.visible?(assignee)}
+ reminder(assignee, visible_issues, days).deliver if visible_issues.present?
+ end
+ end
+ end
+
+ # Activates/desactivates email deliveries during +block+
+ def self.with_deliveries(enabled = true, &block)
+ was_enabled = ActionMailer::Base.perform_deliveries
+ ActionMailer::Base.perform_deliveries = !!enabled
+ yield
+ ensure
+ ActionMailer::Base.perform_deliveries = was_enabled
+ end
+
+ # Sends emails synchronously in the given block
+ def self.with_synched_deliveries(&block)
+ saved_method = ActionMailer::Base.delivery_method
+ if m = saved_method.to_s.match(%r{^async_(.+)$})
+ synched_method = m[1]
+ ActionMailer::Base.delivery_method = synched_method.to_sym
+ ActionMailer::Base.send "#{synched_method}_settings=", ActionMailer::Base.send("async_#{synched_method}_settings")
+ end
+ yield
+ ensure
+ ActionMailer::Base.delivery_method = saved_method
+ end
+
+ def mail(headers={}, &block)
+ headers.reverse_merge! 'X-Mailer' => 'Redmine',
+ 'X-Redmine-Host' => Setting.host_name,
+ 'X-Redmine-Site' => Setting.app_title,
+ 'X-Auto-Response-Suppress' => 'All',
+ 'Auto-Submitted' => 'auto-generated',
+ 'From' => Setting.mail_from,
+ 'List-Id' => "<#{Setting.mail_from.to_s.gsub('@', '.')}>"
+
+ # Replaces users with their email addresses
+ [:to, :cc, :bcc].each do |key|
+ if headers[key].present?
+ headers[key] = self.class.email_addresses(headers[key])
+ end
+ end
+
+ # Removes the author from the recipients and cc
+ # if the author does not want to receive notifications
+ # about what the author do
+ if @author && @author.logged? && @author.pref.no_self_notified
+ addresses = @author.mails
+ headers[:to] -= addresses if headers[:to].is_a?(Array)
+ headers[:cc] -= addresses if headers[:cc].is_a?(Array)
+ end
+
+ if @author && @author.logged?
+ redmine_headers 'Sender' => @author.login
+ end
+
+ # Blind carbon copy recipients
+ if Setting.bcc_recipients?
+ headers[:bcc] = [headers[:to], headers[:cc]].flatten.uniq.reject(&:blank?)
+ headers[:to] = nil
+ headers[:cc] = nil
+ end
+
+ if @message_id_object
+ headers[:message_id] = "<#{self.class.message_id_for(@message_id_object)}>"
+ end
+ if @references_objects
+ headers[:references] = @references_objects.collect {|o| "<#{self.class.references_for(o)}>"}.join(' ')
+ end
+
+ m = if block_given?
+ super headers, &block
+ else
+ super headers do |format|
+ format.text
+ format.html unless Setting.plain_text_mail?
+ end
+ end
+ set_language_if_valid @initial_language
+
+ m
+ end
+
+ def initialize(*args)
+ @initial_language = current_language
+ set_language_if_valid Setting.default_language
+ super
+ end
+
+ def self.deliver_mail(mail)
+ return false if mail.to.blank? && mail.cc.blank? && mail.bcc.blank?
+ begin
+ # Log errors when raise_delivery_errors is set to false, Rails does not
+ mail.raise_delivery_errors = true
+ super
+ rescue Exception => e
+ if ActionMailer::Base.raise_delivery_errors
+ raise e
+ else
+ Rails.logger.error "Email delivery error: #{e.message}"
+ end
+ end
+ end
+
+ def self.method_missing(method, *args, &block)
+ if m = method.to_s.match(%r{^deliver_(.+)$})
+ ActiveSupport::Deprecation.warn "Mailer.deliver_#{m[1]}(*args) is deprecated. Use Mailer.#{m[1]}(*args).deliver instead."
+ send(m[1], *args).deliver
+ else
+ super
+ end
+ end
+
+ # Returns an array of email addresses to notify by
+ # replacing users in arg with their notified email addresses
+ #
+ # Example:
+ # Mailer.email_addresses(users)
+ # => ["foo@example.net", "bar@example.net"]
+ def self.email_addresses(arg)
+ arr = Array.wrap(arg)
+ mails = arr.reject {|a| a.is_a? Principal}
+ users = arr - mails
+ if users.any?
+ mails += EmailAddress.
+ where(:user_id => users.map(&:id)).
+ where("is_default = ? OR notify = ?", true, true).
+ pluck(:address)
+ end
+ mails
+ end
+
+ private
+
+ # Appends a Redmine header field (name is prepended with 'X-Redmine-')
+ def redmine_headers(h)
+ h.each { |k,v| headers["X-Redmine-#{k}"] = v.to_s }
+ end
+
+ def self.token_for(object, rand=true)
+ timestamp = object.send(object.respond_to?(:created_on) ? :created_on : :updated_on)
+ hash = [
+ "redmine",
+ "#{object.class.name.demodulize.underscore}-#{object.id}",
+ timestamp.strftime("%Y%m%d%H%M%S")
+ ]
+ if rand
+ hash << Redmine::Utils.random_hex(8)
+ end
+ host = Setting.mail_from.to_s.strip.gsub(%r{^.*@|>}, '')
+ host = "#{::Socket.gethostname}.redmine" if host.empty?
+ "#{hash.join('.')}@#{host}"
+ end
+
+ # Returns a Message-Id for the given object
+ def self.message_id_for(object)
+ token_for(object, true)
+ end
+
+ # Returns a uniq token for a given object referenced by all notifications
+ # related to this object
+ def self.references_for(object)
+ token_for(object, false)
+ end
+
+ def message_id(object)
+ @message_id_object = object
+ end
+
+ def references(object)
+ @references_objects ||= []
+ @references_objects << object
+ end
+
+ def mylogger
+ Rails.logger
+ end
+end
diff --git a/app/models/member.rb b/app/models/member.rb
new file mode 100644
index 0000000..0e8fb1d
--- /dev/null
+++ b/app/models/member.rb
@@ -0,0 +1,219 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Member < ActiveRecord::Base
+ belongs_to :user
+ belongs_to :principal, :foreign_key => 'user_id'
+ has_many :member_roles, :dependent => :destroy
+ has_many :roles, lambda { distinct }, :through => :member_roles
+ belongs_to :project
+
+ validates_presence_of :principal, :project
+ validates_uniqueness_of :user_id, :scope => :project_id
+ validate :validate_role
+ attr_protected :id
+
+ before_destroy :set_issue_category_nil, :remove_from_project_default_assigned_to
+
+ scope :active, lambda { joins(:principal).where(:users => {:status => Principal::STATUS_ACTIVE})}
+
+ # Sort by first role and principal
+ scope :sorted, lambda {
+ includes(:member_roles, :roles, :principal).
+ reorder("#{Role.table_name}.position").
+ order(Principal.fields_for_order_statement)
+ }
+ scope :sorted_by_project, lambda {
+ includes(:project).
+ reorder("#{Project.table_name}.lft")
+ }
+
+ alias :base_reload :reload
+ def reload(*args)
+ @managed_roles = nil
+ base_reload(*args)
+ end
+
+ def role
+ end
+
+ def role=
+ end
+
+ def name
+ self.user.name
+ end
+
+ alias :base_role_ids= :role_ids=
+ def role_ids=(arg)
+ ids = (arg || []).collect(&:to_i) - [0]
+ # Keep inherited roles
+ ids += member_roles.select {|mr| !mr.inherited_from.nil?}.collect(&:role_id)
+
+ new_role_ids = ids - role_ids
+ # Add new roles
+ new_role_ids.each {|id| member_roles << MemberRole.new(:role_id => id, :member => self) }
+ # Remove roles (Rails' #role_ids= will not trigger MemberRole#on_destroy)
+ member_roles_to_destroy = member_roles.select {|mr| !ids.include?(mr.role_id)}
+ if member_roles_to_destroy.any?
+ member_roles_to_destroy.each(&:destroy)
+ end
+ end
+
+ def <=>(member)
+ a, b = roles.sort, member.roles.sort
+ if a == b
+ if principal
+ principal <=> member.principal
+ else
+ 1
+ end
+ elsif a.any?
+ b.any? ? a <=> b : -1
+ else
+ 1
+ end
+ end
+
+ # Set member role ids ignoring any change to roles that
+ # user is not allowed to manage
+ def set_editable_role_ids(ids, user=User.current)
+ ids = (ids || []).collect(&:to_i) - [0]
+ editable_role_ids = user.managed_roles(project).map(&:id)
+ untouched_role_ids = self.role_ids - editable_role_ids
+ touched_role_ids = ids & editable_role_ids
+ self.role_ids = untouched_role_ids + touched_role_ids
+ end
+
+ # Returns true if one of the member roles is inherited
+ def any_inherited_role?
+ member_roles.any? {|mr| mr.inherited_from}
+ end
+
+ # Returns true if the member has the role and if it's inherited
+ def has_inherited_role?(role)
+ member_roles.any? {|mr| mr.role_id == role.id && mr.inherited_from.present?}
+ end
+
+ # Returns true if the member's role is editable by user
+ def role_editable?(role, user=User.current)
+ if has_inherited_role?(role)
+ false
+ else
+ user.managed_roles(project).include?(role)
+ end
+ end
+
+ # Returns true if the member is deletable by user
+ def deletable?(user=User.current)
+ if any_inherited_role?
+ false
+ else
+ roles & user.managed_roles(project) == roles
+ end
+ end
+
+ # Destroys the member
+ def destroy
+ member_roles.reload.each(&:destroy_without_member_removal)
+ super
+ end
+
+ # Returns true if the member is user or is a group
+ # that includes user
+ def include?(user)
+ if principal.is_a?(Group)
+ !user.nil? && user.groups.include?(principal)
+ else
+ self.principal == user
+ end
+ end
+
+ def set_issue_category_nil
+ if user_id && project_id
+ # remove category based auto assignments for this member
+ IssueCategory.where(["project_id = ? AND assigned_to_id = ?", project_id, user_id]).
+ update_all("assigned_to_id = NULL")
+ end
+ end
+
+ def remove_from_project_default_assigned_to
+ if user_id && project && project.default_assigned_to_id == user_id
+ # remove project based auto assignments for this member
+ project.update_column(:default_assigned_to_id, nil)
+ end
+ end
+
+ # Returns the roles that the member is allowed to manage
+ # in the project the member belongs to
+ def managed_roles
+ @managed_roles ||= begin
+ if principal.try(:admin?)
+ Role.givable.to_a
+ else
+ members_management_roles = roles.select do |role|
+ role.has_permission?(:manage_members)
+ end
+ if members_management_roles.empty?
+ []
+ elsif members_management_roles.any?(&:all_roles_managed?)
+ Role.givable.to_a
+ else
+ members_management_roles.map(&:managed_roles).reduce(&:|)
+ end
+ end
+ end
+ end
+
+ # Creates memberships for principal with the attributes, or add the roles
+ # if the membership already exists.
+ # * project_ids : one or more project ids
+ # * role_ids : ids of the roles to give to each membership
+ #
+ # Example:
+ # Member.create_principal_memberships(user, :project_ids => [2, 5], :role_ids => [1, 3]
+ def self.create_principal_memberships(principal, attributes)
+ members = []
+ if attributes
+ project_ids = Array.wrap(attributes[:project_ids] || attributes[:project_id])
+ role_ids = Array.wrap(attributes[:role_ids])
+ project_ids.each do |project_id|
+ member = Member.find_or_new(project_id, principal)
+ member.role_ids |= role_ids
+ member.save
+ members << member
+ end
+ end
+ members
+ end
+
+ # Finds or initializes a Member for the given project and principal
+ def self.find_or_new(project, principal)
+ project_id = project.is_a?(Project) ? project.id : project
+ principal_id = principal.is_a?(Principal) ? principal.id : principal
+
+ member = Member.find_by_project_id_and_user_id(project_id, principal_id)
+ member ||= Member.new(:project_id => project_id, :user_id => principal_id)
+ member
+ end
+
+ protected
+
+ def validate_role
+ errors.add(:role, :empty) if member_roles.empty? && roles.empty?
+ end
+end
diff --git a/app/models/member_role.rb b/app/models/member_role.rb
new file mode 100644
index 0000000..5084759
--- /dev/null
+++ b/app/models/member_role.rb
@@ -0,0 +1,77 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class MemberRole < ActiveRecord::Base
+ belongs_to :member
+ belongs_to :role
+
+ after_destroy :remove_member_if_empty
+
+ after_create :add_role_to_group_users, :add_role_to_subprojects
+ after_destroy :remove_inherited_roles
+
+ validates_presence_of :role
+ validate :validate_role_member
+ attr_protected :id
+
+ def validate_role_member
+ errors.add :role_id, :invalid if role && !role.member?
+ end
+
+ def inherited?
+ !inherited_from.nil?
+ end
+
+ # Destroys the MemberRole without destroying its Member if it doesn't have
+ # any other roles
+ def destroy_without_member_removal
+ @member_removal = false
+ destroy
+ end
+
+ private
+
+ def remove_member_if_empty
+ if @member_removal != false && member.roles.empty?
+ member.destroy
+ end
+ end
+
+ def add_role_to_group_users
+ if member.principal.is_a?(Group) && !inherited?
+ member.principal.users.each do |user|
+ user_member = Member.find_or_new(member.project_id, user.id)
+ user_member.member_roles << MemberRole.new(:role => role, :inherited_from => id)
+ user_member.save!
+ end
+ end
+ end
+
+ def add_role_to_subprojects
+ member.project.children.each do |subproject|
+ if subproject.inherit_members?
+ child_member = Member.find_or_new(subproject.id, member.user_id)
+ child_member.member_roles << MemberRole.new(:role => role, :inherited_from => id)
+ child_member.save!
+ end
+ end
+ end
+
+ def remove_inherited_roles
+ MemberRole.where(:inherited_from => id).destroy_all
+ end
+end
diff --git a/app/models/message.rb b/app/models/message.rb
new file mode 100644
index 0000000..65ae314
--- /dev/null
+++ b/app/models/message.rb
@@ -0,0 +1,121 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Message < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ belongs_to :board
+ belongs_to :author, :class_name => 'User'
+ acts_as_tree :counter_cache => :replies_count, :order => "#{Message.table_name}.created_on ASC"
+ acts_as_attachable
+ belongs_to :last_reply, :class_name => 'Message'
+ attr_protected :id
+
+ acts_as_searchable :columns => ['subject', 'content'],
+ :preload => {:board => :project},
+ :project_key => "#{Board.table_name}.project_id"
+
+ acts_as_event :title => Proc.new {|o| "#{o.board.name}: #{o.subject}"},
+ :description => :content,
+ :group => :parent,
+ :type => Proc.new {|o| o.parent_id.nil? ? 'message' : 'reply'},
+ :url => Proc.new {|o| {:controller => 'messages', :action => 'show', :board_id => o.board_id}.merge(o.parent_id.nil? ? {:id => o.id} :
+ {:id => o.parent_id, :r => o.id, :anchor => "message-#{o.id}"})}
+
+ acts_as_activity_provider :scope => preload({:board => :project}, :author),
+ :author_key => :author_id
+ acts_as_watchable
+
+ validates_presence_of :board, :subject, :content
+ validates_length_of :subject, :maximum => 255
+ validate :cannot_reply_to_locked_topic, :on => :create
+
+ after_create :add_author_as_watcher, :reset_counters!
+ after_update :update_messages_board
+ after_destroy :reset_counters!
+ after_create :send_notification
+
+ scope :visible, lambda {|*args|
+ joins(:board => :project).
+ where(Project.allowed_to_condition(args.shift || User.current, :view_messages, *args))
+ }
+
+ safe_attributes 'subject', 'content'
+ safe_attributes 'locked', 'sticky', 'board_id',
+ :if => lambda {|message, user|
+ user.allowed_to?(:edit_messages, message.project)
+ }
+
+ def visible?(user=User.current)
+ !user.nil? && user.allowed_to?(:view_messages, project)
+ end
+
+ def cannot_reply_to_locked_topic
+ # Can not reply to a locked topic
+ errors.add :base, 'Topic is locked' if root.locked? && self != root
+ end
+
+ def update_messages_board
+ if board_id_changed?
+ Message.where(["id = ? OR parent_id = ?", root.id, root.id]).update_all({:board_id => board_id})
+ Board.reset_counters!(board_id_was)
+ Board.reset_counters!(board_id)
+ end
+ end
+
+ def reset_counters!
+ if parent && parent.id
+ Message.where({:id => parent.id}).update_all({:last_reply_id => parent.children.maximum(:id)})
+ end
+ board.reset_counters!
+ end
+
+ def sticky=(arg)
+ write_attribute :sticky, (arg == true || arg.to_s == '1' ? 1 : 0)
+ end
+
+ def sticky?
+ sticky == 1
+ end
+
+ def project
+ board.project
+ end
+
+ def editable_by?(usr)
+ usr && usr.logged? && (usr.allowed_to?(:edit_messages, project) || (self.author == usr && usr.allowed_to?(:edit_own_messages, project)))
+ end
+
+ def destroyable_by?(usr)
+ usr && usr.logged? && (usr.allowed_to?(:delete_messages, project) || (self.author == usr && usr.allowed_to?(:delete_own_messages, project)))
+ end
+
+ def notified_users
+ project.notified_users.reject {|user| !visible?(user)}
+ end
+
+ private
+
+ def add_author_as_watcher
+ Watcher.create(:watchable => self.root, :user => author)
+ end
+
+ def send_notification
+ if Setting.notified_events.include?('message_posted')
+ Mailer.message_posted(self).deliver
+ end
+ end
+end
diff --git a/app/models/news.rb b/app/models/news.rb
new file mode 100644
index 0000000..7d900d3
--- /dev/null
+++ b/app/models/news.rb
@@ -0,0 +1,98 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class News < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ belongs_to :project
+ belongs_to :author, :class_name => 'User'
+ has_many :comments, lambda {order("created_on")}, :as => :commented, :dependent => :delete_all
+
+ validates_presence_of :title, :description
+ validates_length_of :title, :maximum => 60
+ validates_length_of :summary, :maximum => 255
+ attr_protected :id
+
+ acts_as_attachable :edit_permission => :manage_news,
+ :delete_permission => :manage_news
+ acts_as_searchable :columns => ['title', 'summary', "#{table_name}.description"],
+ :preload => :project
+ acts_as_event :url => Proc.new {|o| {:controller => 'news', :action => 'show', :id => o.id}}
+ acts_as_activity_provider :scope => preload(:project, :author),
+ :author_key => :author_id
+ acts_as_watchable
+
+ after_create :add_author_as_watcher
+ after_create :send_notification
+
+ scope :visible, lambda {|*args|
+ joins(:project).
+ where(Project.allowed_to_condition(args.shift || User.current, :view_news, *args))
+ }
+
+ safe_attributes 'title', 'summary', 'description'
+
+ def visible?(user=User.current)
+ !user.nil? && user.allowed_to?(:view_news, project)
+ end
+
+ # Returns true if the news can be commented by user
+ def commentable?(user=User.current)
+ user.allowed_to?(:comment_news, project)
+ end
+
+ def notified_users
+ project.users.select {|user| user.notify_about?(self) && user.allowed_to?(:view_news, project)}
+ end
+
+ def recipients
+ notified_users.map(&:mail)
+ end
+
+ # Returns the users that should be cc'd when a new news is added
+ def notified_watchers_for_added_news
+ watchers = []
+ if m = project.enabled_module('news')
+ watchers = m.notified_watchers
+ unless project.is_public?
+ watchers = watchers.select {|user| project.users.include?(user)}
+ end
+ end
+ watchers
+ end
+
+ # Returns the email addresses that should be cc'd when a new news is added
+ def cc_for_added_news
+ notified_watchers_for_added_news.map(&:mail)
+ end
+
+ # returns latest news for projects visible by user
+ def self.latest(user = User.current, count = 5)
+ visible(user).preload(:author, :project).order("#{News.table_name}.created_on DESC").limit(count).to_a
+ end
+
+ private
+
+ def add_author_as_watcher
+ Watcher.create(:watchable => self, :user => author)
+ end
+
+ def send_notification
+ if Setting.notified_events.include?('news_added')
+ Mailer.news_added(self).deliver
+ end
+ end
+end
diff --git a/app/models/principal.rb b/app/models/principal.rb
new file mode 100644
index 0000000..e4410dd
--- /dev/null
+++ b/app/models/principal.rb
@@ -0,0 +1,209 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Principal < ActiveRecord::Base
+ self.table_name = "#{table_name_prefix}users#{table_name_suffix}"
+
+ # Account statuses
+ STATUS_ANONYMOUS = 0
+ STATUS_ACTIVE = 1
+ STATUS_REGISTERED = 2
+ STATUS_LOCKED = 3
+
+ class_attribute :valid_statuses
+
+ has_many :members, :foreign_key => 'user_id', :dependent => :destroy
+ has_many :memberships,
+ lambda {joins(:project).where.not(:projects => {:status => Project::STATUS_ARCHIVED})},
+ :class_name => 'Member',
+ :foreign_key => 'user_id'
+ has_many :projects, :through => :memberships
+ has_many :issue_categories, :foreign_key => 'assigned_to_id', :dependent => :nullify
+
+ validate :validate_status
+
+ # Groups and active users
+ scope :active, lambda { where(:status => STATUS_ACTIVE) }
+
+ scope :visible, lambda {|*args|
+ user = args.first || User.current
+
+ if user.admin?
+ all
+ else
+ view_all_active = false
+ if user.memberships.to_a.any?
+ view_all_active = user.memberships.any? {|m| m.roles.any? {|r| r.users_visibility == 'all'}}
+ else
+ view_all_active = user.builtin_role.users_visibility == 'all'
+ end
+
+ if view_all_active
+ active
+ else
+ # self and members of visible projects
+ active.where("#{table_name}.id = ? OR #{table_name}.id IN (SELECT user_id FROM #{Member.table_name} WHERE project_id IN (?))",
+ user.id, user.visible_project_ids
+ )
+ end
+ end
+ }
+
+ scope :like, lambda {|q|
+ q = q.to_s
+ if q.blank?
+ where({})
+ else
+ pattern = "%#{q}%"
+ sql = %w(login firstname lastname).map {|column| "LOWER(#{table_name}.#{column}) LIKE LOWER(:p)"}.join(" OR ")
+ sql << " OR #{table_name}.id IN (SELECT user_id FROM #{EmailAddress.table_name} WHERE LOWER(address) LIKE LOWER(:p))"
+ params = {:p => pattern}
+ if q =~ /^(.+)\s+(.+)$/
+ a, b = "#{$1}%", "#{$2}%"
+ sql << " OR (LOWER(#{table_name}.firstname) LIKE LOWER(:a) AND LOWER(#{table_name}.lastname) LIKE LOWER(:b))"
+ sql << " OR (LOWER(#{table_name}.firstname) LIKE LOWER(:b) AND LOWER(#{table_name}.lastname) LIKE LOWER(:a))"
+ params.merge!(:a => a, :b => b)
+ end
+ where(sql, params)
+ end
+ }
+
+ # Principals that are members of a collection of projects
+ scope :member_of, lambda {|projects|
+ projects = [projects] if projects.is_a?(Project)
+ if projects.blank?
+ where("1=0")
+ else
+ ids = projects.map(&:id)
+ active.where("#{Principal.table_name}.id IN (SELECT DISTINCT user_id FROM #{Member.table_name} WHERE project_id IN (?))", ids)
+ end
+ }
+ # Principals that are not members of projects
+ scope :not_member_of, lambda {|projects|
+ projects = [projects] unless projects.is_a?(Array)
+ if projects.empty?
+ where("1=0")
+ else
+ ids = projects.map(&:id)
+ where("#{Principal.table_name}.id NOT IN (SELECT DISTINCT user_id FROM #{Member.table_name} WHERE project_id IN (?))", ids)
+ end
+ }
+ scope :sorted, lambda { order(*Principal.fields_for_order_statement)}
+
+ before_create :set_default_empty_values
+ before_destroy :nullify_projects_default_assigned_to
+
+ def reload(*args)
+ @project_ids = nil
+ super
+ end
+
+ def name(formatter = nil)
+ to_s
+ end
+
+ def mail=(*args)
+ nil
+ end
+
+ def mail
+ nil
+ end
+
+ def visible?(user=User.current)
+ Principal.visible(user).where(:id => id).first == self
+ end
+
+ # Returns true if the principal is a member of project
+ def member_of?(project)
+ project.is_a?(Project) && project_ids.include?(project.id)
+ end
+
+ # Returns an array of the project ids that the principal is a member of
+ def project_ids
+ @project_ids ||= super.freeze
+ end
+
+ def <=>(principal)
+ if principal.nil?
+ -1
+ elsif self.class.name == principal.class.name
+ self.to_s.casecmp(principal.to_s)
+ else
+ # groups after users
+ principal.class.name <=> self.class.name
+ end
+ end
+
+ # Returns an array of fields names than can be used to make an order statement for principals.
+ # Users are sorted before Groups.
+ # Examples:
+ def self.fields_for_order_statement(table=nil)
+ table ||= table_name
+ columns = ['type DESC'] + (User.name_formatter[:order] - ['id']) + ['lastname', 'id']
+ columns.uniq.map {|field| "#{table}.#{field}"}
+ end
+
+ # Returns the principal that matches the keyword among principals
+ def self.detect_by_keyword(principals, keyword)
+ keyword = keyword.to_s
+ return nil if keyword.blank?
+
+ principal = nil
+ principal ||= principals.detect {|a| keyword.casecmp(a.login.to_s) == 0}
+ principal ||= principals.detect {|a| keyword.casecmp(a.mail.to_s) == 0}
+
+ if principal.nil? && keyword.match(/ /)
+ firstname, lastname = *(keyword.split) # "First Last Throwaway"
+ principal ||= principals.detect {|a|
+ a.is_a?(User) &&
+ firstname.casecmp(a.firstname.to_s) == 0 &&
+ lastname.casecmp(a.lastname.to_s) == 0
+ }
+ end
+ if principal.nil?
+ principal ||= principals.detect {|a| keyword.casecmp(a.name) == 0}
+ end
+ principal
+ end
+
+ def nullify_projects_default_assigned_to
+ Project.where(default_assigned_to: self).update_all(default_assigned_to_id: nil)
+ end
+
+ protected
+
+ # Make sure we don't try to insert NULL values (see #4632)
+ def set_default_empty_values
+ self.login ||= ''
+ self.hashed_password ||= ''
+ self.firstname ||= ''
+ self.lastname ||= ''
+ true
+ end
+
+ def validate_status
+ if status_changed? && self.class.valid_statuses.present?
+ unless self.class.valid_statuses.include?(status)
+ errors.add :status, :invalid
+ end
+ end
+ end
+end
+
+require_dependency "user"
+require_dependency "group"
diff --git a/app/models/project.rb b/app/models/project.rb
new file mode 100644
index 0000000..63eaf00
--- /dev/null
+++ b/app/models/project.rb
@@ -0,0 +1,1125 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Project < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ include Redmine::NestedSet::ProjectNestedSet
+
+ # Project statuses
+ STATUS_ACTIVE = 1
+ STATUS_CLOSED = 5
+ STATUS_ARCHIVED = 9
+
+ # Maximum length for project identifiers
+ IDENTIFIER_MAX_LENGTH = 100
+
+ # Specific overridden Activities
+ has_many :time_entry_activities
+ has_many :memberships, :class_name => 'Member', :inverse_of => :project
+ # Memberships of active users only
+ has_many :members,
+ lambda { joins(:principal).where(:users => {:type => 'User', :status => Principal::STATUS_ACTIVE}) }
+ has_many :enabled_modules, :dependent => :delete_all
+ has_and_belongs_to_many :trackers, lambda {order(:position)}
+ has_many :issues, :dependent => :destroy
+ has_many :issue_changes, :through => :issues, :source => :journals
+ has_many :versions, :dependent => :destroy
+ belongs_to :default_version, :class_name => 'Version'
+ belongs_to :default_assigned_to, :class_name => 'Principal'
+ has_many :time_entries, :dependent => :destroy
+ has_many :queries, :dependent => :delete_all
+ has_many :documents, :dependent => :destroy
+ has_many :news, lambda {includes(:author)}, :dependent => :destroy
+ has_many :issue_categories, lambda {order(:name)}, :dependent => :delete_all
+ has_many :boards, lambda {order(:position)}, :inverse_of => :project, :dependent => :destroy
+ has_one :repository, lambda {where(:is_default => true)}
+ has_many :repositories, :dependent => :destroy
+ has_many :changesets, :through => :repository
+ has_one :wiki, :dependent => :destroy
+ # Custom field for the project issues
+ has_and_belongs_to_many :issue_custom_fields,
+ lambda {order(:position)},
+ :class_name => 'IssueCustomField',
+ :join_table => "#{table_name_prefix}custom_fields_projects#{table_name_suffix}",
+ :association_foreign_key => 'custom_field_id'
+
+ acts_as_attachable :view_permission => :view_files,
+ :edit_permission => :manage_files,
+ :delete_permission => :manage_files
+
+ acts_as_customizable
+ acts_as_searchable :columns => ['name', 'identifier', 'description'], :project_key => "#{Project.table_name}.id", :permission => nil
+ acts_as_event :title => Proc.new {|o| "#{l(:label_project)}: #{o.name}"},
+ :url => Proc.new {|o| {:controller => 'projects', :action => 'show', :id => o}},
+ :author => nil
+
+ attr_protected :status
+
+ validates_presence_of :name, :identifier
+ validates_uniqueness_of :identifier, :if => Proc.new {|p| p.identifier_changed?}
+ validates_length_of :name, :maximum => 255
+ validates_length_of :homepage, :maximum => 255
+ validates_length_of :identifier, :maximum => IDENTIFIER_MAX_LENGTH
+ # downcase letters, digits, dashes but not digits only
+ validates_format_of :identifier, :with => /\A(?!\d+$)[a-z0-9\-_]*\z/, :if => Proc.new { |p| p.identifier_changed? }
+ # reserved words
+ validates_exclusion_of :identifier, :in => %w( new )
+ validate :validate_parent
+
+ after_save :update_inherited_members, :if => Proc.new {|project| project.inherit_members_changed?}
+ after_save :remove_inherited_member_roles, :add_inherited_member_roles, :if => Proc.new {|project| project.parent_id_changed?}
+ after_update :update_versions_from_hierarchy_change, :if => Proc.new {|project| project.parent_id_changed?}
+ before_destroy :delete_all_members
+
+ scope :has_module, lambda {|mod|
+ where("#{Project.table_name}.id IN (SELECT em.project_id FROM #{EnabledModule.table_name} em WHERE em.name=?)", mod.to_s)
+ }
+ scope :active, lambda { where(:status => STATUS_ACTIVE) }
+ scope :status, lambda {|arg| where(arg.blank? ? nil : {:status => arg.to_i}) }
+ scope :all_public, lambda { where(:is_public => true) }
+ scope :visible, lambda {|*args| where(Project.visible_condition(args.shift || User.current, *args)) }
+ scope :allowed_to, lambda {|*args|
+ user = User.current
+ permission = nil
+ if args.first.is_a?(Symbol)
+ permission = args.shift
+ else
+ user = args.shift
+ permission = args.shift
+ end
+ where(Project.allowed_to_condition(user, permission, *args))
+ }
+ scope :like, lambda {|arg|
+ if arg.present?
+ pattern = "%#{arg.to_s.strip}%"
+ where("LOWER(identifier) LIKE LOWER(:p) OR LOWER(name) LIKE LOWER(:p)", :p => pattern)
+ end
+ }
+ scope :sorted, lambda {order(:lft)}
+ scope :having_trackers, lambda {
+ where("#{Project.table_name}.id IN (SELECT DISTINCT project_id FROM #{table_name_prefix}projects_trackers#{table_name_suffix})")
+ }
+
+ def initialize(attributes=nil, *args)
+ super
+
+ initialized = (attributes || {}).stringify_keys
+ if !initialized.key?('identifier') && Setting.sequential_project_identifiers?
+ self.identifier = Project.next_identifier
+ end
+ if !initialized.key?('is_public')
+ self.is_public = Setting.default_projects_public?
+ end
+ if !initialized.key?('enabled_module_names')
+ self.enabled_module_names = Setting.default_projects_modules
+ end
+ if !initialized.key?('trackers') && !initialized.key?('tracker_ids')
+ default = Setting.default_projects_tracker_ids
+ if default.is_a?(Array)
+ self.trackers = Tracker.where(:id => default.map(&:to_i)).sorted.to_a
+ else
+ self.trackers = Tracker.sorted.to_a
+ end
+ end
+ end
+
+ def identifier=(identifier)
+ super unless identifier_frozen?
+ end
+
+ def identifier_frozen?
+ errors[:identifier].blank? && !(new_record? || identifier.blank?)
+ end
+
+ # returns latest created projects
+ # non public projects will be returned only if user is a member of those
+ def self.latest(user=nil, count=5)
+ visible(user).limit(count).
+ order(:created_on => :desc).
+ where("#{table_name}.created_on >= ?", 30.days.ago).
+ to_a
+ end
+
+ # Returns true if the project is visible to +user+ or to the current user.
+ def visible?(user=User.current)
+ user.allowed_to?(:view_project, self)
+ end
+
+ # Returns a SQL conditions string used to find all projects visible by the specified user.
+ #
+ # Examples:
+ # Project.visible_condition(admin) => "projects.status = 1"
+ # Project.visible_condition(normal_user) => "((projects.status = 1) AND (projects.is_public = 1 OR projects.id IN (1,3,4)))"
+ # Project.visible_condition(anonymous) => "((projects.status = 1) AND (projects.is_public = 1))"
+ def self.visible_condition(user, options={})
+ allowed_to_condition(user, :view_project, options)
+ end
+
+ # Returns a SQL conditions string used to find all projects for which +user+ has the given +permission+
+ #
+ # Valid options:
+ # * :skip_pre_condition => true don't check that the module is enabled (eg. when the condition is already set elsewhere in the query)
+ # * :project => project limit the condition to project
+ # * :with_subprojects => true limit the condition to project and its subprojects
+ # * :member => true limit the condition to the user projects
+ def self.allowed_to_condition(user, permission, options={})
+ perm = Redmine::AccessControl.permission(permission)
+ base_statement = (perm && perm.read? ? "#{Project.table_name}.status <> #{Project::STATUS_ARCHIVED}" : "#{Project.table_name}.status = #{Project::STATUS_ACTIVE}")
+ if !options[:skip_pre_condition] && perm && perm.project_module
+ # If the permission belongs to a project module, make sure the module is enabled
+ base_statement << " AND EXISTS (SELECT 1 AS one FROM #{EnabledModule.table_name} em WHERE em.project_id = #{Project.table_name}.id AND em.name='#{perm.project_module}')"
+ end
+ if project = options[:project]
+ project_statement = project.project_condition(options[:with_subprojects])
+ base_statement = "(#{project_statement}) AND (#{base_statement})"
+ end
+
+ if user.admin?
+ base_statement
+ else
+ statement_by_role = {}
+ unless options[:member]
+ role = user.builtin_role
+ if role.allowed_to?(permission)
+ s = "#{Project.table_name}.is_public = #{connection.quoted_true}"
+ if user.id
+ group = role.anonymous? ? Group.anonymous : Group.non_member
+ principal_ids = [user.id, group.id].compact
+ s = "(#{s} AND #{Project.table_name}.id NOT IN (SELECT project_id FROM #{Member.table_name} WHERE user_id IN (#{principal_ids.join(',')})))"
+ end
+ statement_by_role[role] = s
+ end
+ end
+ user.project_ids_by_role.each do |role, project_ids|
+ if role.allowed_to?(permission) && project_ids.any?
+ statement_by_role[role] = "#{Project.table_name}.id IN (#{project_ids.join(',')})"
+ end
+ end
+ if statement_by_role.empty?
+ "1=0"
+ else
+ if block_given?
+ statement_by_role.each do |role, statement|
+ if s = yield(role, user)
+ statement_by_role[role] = "(#{statement} AND (#{s}))"
+ end
+ end
+ end
+ "((#{base_statement}) AND (#{statement_by_role.values.join(' OR ')}))"
+ end
+ end
+ end
+
+ def override_roles(role)
+ @override_members ||= memberships.
+ joins(:principal).
+ where(:users => {:type => ['GroupAnonymous', 'GroupNonMember']}).to_a
+
+ group_class = role.anonymous? ? GroupAnonymous : GroupNonMember
+ member = @override_members.detect {|m| m.principal.is_a? group_class}
+ member ? member.roles.to_a : [role]
+ end
+
+ def principals
+ @principals ||= Principal.active.joins(:members).where("#{Member.table_name}.project_id = ?", id).distinct
+ end
+
+ def users
+ @users ||= User.active.joins(:members).where("#{Member.table_name}.project_id = ?", id).distinct
+ end
+
+ # Returns the Systemwide and project specific activities
+ def activities(include_inactive=false)
+ t = TimeEntryActivity.table_name
+ scope = TimeEntryActivity.where("#{t}.project_id IS NULL OR #{t}.project_id = ?", id)
+
+ overridden_activity_ids = self.time_entry_activities.pluck(:parent_id).compact
+ if overridden_activity_ids.any?
+ scope = scope.where("#{t}.id NOT IN (?)", overridden_activity_ids)
+ end
+ unless include_inactive
+ scope = scope.active
+ end
+ scope
+ end
+
+ # Will create a new Project specific Activity or update an existing one
+ #
+ # This will raise a ActiveRecord::Rollback if the TimeEntryActivity
+ # does not successfully save.
+ def update_or_create_time_entry_activity(id, activity_hash)
+ if activity_hash.respond_to?(:has_key?) && activity_hash.has_key?('parent_id')
+ self.create_time_entry_activity_if_needed(activity_hash)
+ else
+ activity = project.time_entry_activities.find_by_id(id.to_i)
+ activity.update_attributes(activity_hash) if activity
+ end
+ end
+
+ # Create a new TimeEntryActivity if it overrides a system TimeEntryActivity
+ #
+ # This will raise a ActiveRecord::Rollback if the TimeEntryActivity
+ # does not successfully save.
+ def create_time_entry_activity_if_needed(activity)
+ if activity['parent_id']
+ parent_activity = TimeEntryActivity.find(activity['parent_id'])
+ activity['name'] = parent_activity.name
+ activity['position'] = parent_activity.position
+ if Enumeration.overriding_change?(activity, parent_activity)
+ project_activity = self.time_entry_activities.create(activity)
+ if project_activity.new_record?
+ raise ActiveRecord::Rollback, "Overriding TimeEntryActivity was not successfully saved"
+ else
+ self.time_entries.
+ where(:activity_id => parent_activity.id).
+ update_all(:activity_id => project_activity.id)
+ end
+ end
+ end
+ end
+
+ # Returns a :conditions SQL string that can be used to find the issues associated with this project.
+ #
+ # Examples:
+ # project.project_condition(true) => "(projects.id = 1 OR (projects.lft > 1 AND projects.rgt < 10))"
+ # project.project_condition(false) => "projects.id = 1"
+ def project_condition(with_subprojects)
+ cond = "#{Project.table_name}.id = #{id}"
+ cond = "(#{cond} OR (#{Project.table_name}.lft > #{lft} AND #{Project.table_name}.rgt < #{rgt}))" if with_subprojects
+ cond
+ end
+
+ def self.find(*args)
+ if args.first && args.first.is_a?(String) && !args.first.match(/^\d*$/)
+ project = find_by_identifier(*args)
+ raise ActiveRecord::RecordNotFound, "Couldn't find Project with identifier=#{args.first}" if project.nil?
+ project
+ else
+ super
+ end
+ end
+
+ def self.find_by_param(*args)
+ self.find(*args)
+ end
+
+ alias :base_reload :reload
+ def reload(*args)
+ @principals = nil
+ @users = nil
+ @shared_versions = nil
+ @rolled_up_versions = nil
+ @rolled_up_trackers = nil
+ @rolled_up_statuses = nil
+ @rolled_up_custom_fields = nil
+ @all_issue_custom_fields = nil
+ @all_time_entry_custom_fields = nil
+ @to_param = nil
+ @allowed_parents = nil
+ @allowed_permissions = nil
+ @actions_allowed = nil
+ @start_date = nil
+ @due_date = nil
+ @override_members = nil
+ @assignable_users = nil
+ base_reload(*args)
+ end
+
+ def to_param
+ if new_record?
+ nil
+ else
+ # id is used for projects with a numeric identifier (compatibility)
+ @to_param ||= (identifier.to_s =~ %r{^\d*$} ? id.to_s : identifier)
+ end
+ end
+
+ def active?
+ self.status == STATUS_ACTIVE
+ end
+
+ def closed?
+ self.status == STATUS_CLOSED
+ end
+
+ def archived?
+ self.status == STATUS_ARCHIVED
+ end
+
+ # Archives the project and its descendants
+ def archive
+ # Check that there is no issue of a non descendant project that is assigned
+ # to one of the project or descendant versions
+ version_ids = self_and_descendants.joins(:versions).pluck("#{Version.table_name}.id")
+
+ if version_ids.any? &&
+ Issue.
+ joins(:project).
+ where("#{Project.table_name}.lft < ? OR #{Project.table_name}.rgt > ?", lft, rgt).
+ where(:fixed_version_id => version_ids).
+ exists?
+ return false
+ end
+ Project.transaction do
+ archive!
+ end
+ true
+ end
+
+ # Unarchives the project
+ # All its ancestors must be active
+ def unarchive
+ return false if ancestors.detect {|a| a.archived?}
+ new_status = STATUS_ACTIVE
+ if parent
+ new_status = parent.status
+ end
+ update_attribute :status, new_status
+ end
+
+ def close
+ self_and_descendants.status(STATUS_ACTIVE).update_all :status => STATUS_CLOSED
+ end
+
+ def reopen
+ self_and_descendants.status(STATUS_CLOSED).update_all :status => STATUS_ACTIVE
+ end
+
+ # Returns an array of projects the project can be moved to
+ # by the current user
+ def allowed_parents(user=User.current)
+ return @allowed_parents if @allowed_parents
+ @allowed_parents = Project.allowed_to(user, :add_subprojects).to_a
+ @allowed_parents = @allowed_parents - self_and_descendants
+ if user.allowed_to?(:add_project, nil, :global => true) || (!new_record? && parent.nil?)
+ @allowed_parents << nil
+ end
+ unless parent.nil? || @allowed_parents.empty? || @allowed_parents.include?(parent)
+ @allowed_parents << parent
+ end
+ @allowed_parents
+ end
+
+ # Sets the parent of the project with authorization check
+ def set_allowed_parent!(p)
+ ActiveSupport::Deprecation.warn "Project#set_allowed_parent! is deprecated and will be removed in Redmine 4, use #safe_attributes= instead."
+ p = p.id if p.is_a?(Project)
+ send :safe_attributes, {:project_id => p}
+ save
+ end
+
+ # Sets the parent of the project and saves the project
+ # Argument can be either a Project, a String, a Fixnum or nil
+ def set_parent!(p)
+ if p.is_a?(Project)
+ self.parent = p
+ else
+ self.parent_id = p
+ end
+ save
+ end
+
+ # Returns a scope of the trackers used by the project and its active sub projects
+ def rolled_up_trackers(include_subprojects=true)
+ if include_subprojects
+ @rolled_up_trackers ||= rolled_up_trackers_base_scope.
+ where("#{Project.table_name}.lft >= ? AND #{Project.table_name}.rgt <= ?", lft, rgt)
+ else
+ rolled_up_trackers_base_scope.
+ where(:projects => {:id => id})
+ end
+ end
+
+ def rolled_up_trackers_base_scope
+ Tracker.
+ joins(projects: :enabled_modules).
+ where("#{Project.table_name}.status <> ?", STATUS_ARCHIVED).
+ where(:enabled_modules => {:name => 'issue_tracking'}).
+ distinct.
+ sorted
+ end
+
+ def rolled_up_statuses
+ issue_status_ids = WorkflowTransition.
+ where(:tracker_id => rolled_up_trackers.map(&:id)).
+ distinct.
+ pluck(:old_status_id, :new_status_id).
+ flatten.
+ uniq
+
+ IssueStatus.where(:id => issue_status_ids).sorted
+ end
+
+ # Closes open and locked project versions that are completed
+ def close_completed_versions
+ Version.transaction do
+ versions.where(:status => %w(open locked)).each do |version|
+ if version.completed?
+ version.update_attribute(:status, 'closed')
+ end
+ end
+ end
+ end
+
+ # Returns a scope of the Versions on subprojects
+ def rolled_up_versions
+ @rolled_up_versions ||=
+ Version.
+ joins(:project).
+ where("#{Project.table_name}.lft >= ? AND #{Project.table_name}.rgt <= ? AND #{Project.table_name}.status <> ?", lft, rgt, STATUS_ARCHIVED)
+ end
+
+ # Returns a scope of the Versions used by the project
+ def shared_versions
+ if new_record?
+ Version.
+ joins(:project).
+ preload(:project).
+ where("#{Project.table_name}.status <> ? AND #{Version.table_name}.sharing = 'system'", STATUS_ARCHIVED)
+ else
+ @shared_versions ||= begin
+ r = root? ? self : root
+ Version.
+ joins(:project).
+ preload(:project).
+ where("#{Project.table_name}.id = #{id}" +
+ " OR (#{Project.table_name}.status <> #{Project::STATUS_ARCHIVED} AND (" +
+ " #{Version.table_name}.sharing = 'system'" +
+ " OR (#{Project.table_name}.lft >= #{r.lft} AND #{Project.table_name}.rgt <= #{r.rgt} AND #{Version.table_name}.sharing = 'tree')" +
+ " OR (#{Project.table_name}.lft < #{lft} AND #{Project.table_name}.rgt > #{rgt} AND #{Version.table_name}.sharing IN ('hierarchy', 'descendants'))" +
+ " OR (#{Project.table_name}.lft > #{lft} AND #{Project.table_name}.rgt < #{rgt} AND #{Version.table_name}.sharing = 'hierarchy')" +
+ "))")
+ end
+ end
+ end
+
+ # Returns a hash of project users grouped by role
+ def users_by_role
+ members.includes(:user, :roles).inject({}) do |h, m|
+ m.roles.each do |r|
+ h[r] ||= []
+ h[r] << m.user
+ end
+ h
+ end
+ end
+
+ # Adds user as a project member with the default role
+ # Used for when a non-admin user creates a project
+ def add_default_member(user)
+ role = self.class.default_member_role
+ member = Member.new(:project => self, :principal => user, :roles => [role])
+ self.members << member
+ member
+ end
+
+ # Default role that is given to non-admin users that
+ # create a project
+ def self.default_member_role
+ Role.givable.find_by_id(Setting.new_project_user_role_id.to_i) || Role.givable.first
+ end
+
+ # Deletes all project's members
+ def delete_all_members
+ me, mr = Member.table_name, MemberRole.table_name
+ self.class.connection.delete("DELETE FROM #{mr} WHERE #{mr}.member_id IN (SELECT #{me}.id FROM #{me} WHERE #{me}.project_id = #{id})")
+ Member.where(:project_id => id).delete_all
+ end
+
+ # Return a Principal scope of users/groups issues can be assigned to
+ def assignable_users(tracker=nil)
+ return @assignable_users[tracker] if @assignable_users && @assignable_users[tracker]
+
+ types = ['User']
+ types << 'Group' if Setting.issue_group_assignment?
+
+ scope = Principal.
+ active.
+ joins(:members => :roles).
+ where(:type => types, :members => {:project_id => id}, :roles => {:assignable => true}).
+ distinct.
+ sorted
+
+ if tracker
+ # Rejects users that cannot the view the tracker
+ roles = Role.where(:assignable => true).select {|role| role.permissions_tracker?(:view_issues, tracker)}
+ scope = scope.where(:roles => {:id => roles.map(&:id)})
+ end
+
+ @assignable_users ||= {}
+ @assignable_users[tracker] = scope
+ end
+
+ # Returns the mail addresses of users that should be always notified on project events
+ def recipients
+ notified_users.collect {|user| user.mail}
+ end
+
+ # Returns the users that should be notified on project events
+ def notified_users
+ # TODO: User part should be extracted to User#notify_about?
+ members.preload(:principal).select {|m| m.principal.present? && (m.mail_notification? || m.principal.mail_notification == 'all')}.collect {|m| m.principal}
+ end
+
+ # Returns a scope of all custom fields enabled for project issues
+ # (explicitly associated custom fields and custom fields enabled for all projects)
+ def all_issue_custom_fields
+ if new_record?
+ @all_issue_custom_fields ||= IssueCustomField.
+ sorted.
+ where("is_for_all = ? OR id IN (?)", true, issue_custom_field_ids)
+ else
+ @all_issue_custom_fields ||= IssueCustomField.
+ sorted.
+ where("is_for_all = ? OR id IN (SELECT DISTINCT cfp.custom_field_id" +
+ " FROM #{table_name_prefix}custom_fields_projects#{table_name_suffix} cfp" +
+ " WHERE cfp.project_id = ?)", true, id)
+ end
+ end
+
+ # Returns a scope of all custom fields enabled for issues of the project
+ # and its subprojects
+ def rolled_up_custom_fields
+ if leaf?
+ all_issue_custom_fields
+ else
+ @rolled_up_custom_fields ||= IssueCustomField.
+ sorted.
+ where("is_for_all = ? OR EXISTS (SELECT 1" +
+ " FROM #{table_name_prefix}custom_fields_projects#{table_name_suffix} cfp" +
+ " JOIN #{Project.table_name} p ON p.id = cfp.project_id" +
+ " WHERE cfp.custom_field_id = #{CustomField.table_name}.id" +
+ " AND p.lft >= ? AND p.rgt <= ?)", true, lft, rgt)
+ end
+ end
+
+ def project
+ self
+ end
+
+ def <=>(project)
+ name.casecmp(project.name)
+ end
+
+ def to_s
+ name
+ end
+
+ # Returns a short description of the projects (first lines)
+ def short_description(length = 255)
+ description.gsub(/^(.{#{length}}[^\n\r]*).*$/m, '\1...').strip if description
+ end
+
+ def css_classes
+ s = 'project'
+ s << ' root' if root?
+ s << ' child' if child?
+ s << (leaf? ? ' leaf' : ' parent')
+ unless active?
+ if archived?
+ s << ' archived'
+ else
+ s << ' closed'
+ end
+ end
+ s
+ end
+
+ # The earliest start date of a project, based on it's issues and versions
+ def start_date
+ @start_date ||= [
+ issues.minimum('start_date'),
+ shared_versions.minimum('effective_date'),
+ Issue.fixed_version(shared_versions).minimum('start_date')
+ ].compact.min
+ end
+
+ # The latest due date of an issue or version
+ def due_date
+ @due_date ||= [
+ issues.maximum('due_date'),
+ shared_versions.maximum('effective_date'),
+ Issue.fixed_version(shared_versions).maximum('due_date')
+ ].compact.max
+ end
+
+ def overdue?
+ active? && !due_date.nil? && (due_date < User.current.today)
+ end
+
+ # Returns the percent completed for this project, based on the
+ # progress on it's versions.
+ def completed_percent(options={:include_subprojects => false})
+ if options.delete(:include_subprojects)
+ total = self_and_descendants.collect(&:completed_percent).sum
+
+ total / self_and_descendants.count
+ else
+ if versions.count > 0
+ total = versions.collect(&:completed_percent).sum
+
+ total / versions.count
+ else
+ 100
+ end
+ end
+ end
+
+ # Return true if this project allows to do the specified action.
+ # action can be:
+ # * a parameter-like Hash (eg. :controller => 'projects', :action => 'edit')
+ # * a permission Symbol (eg. :edit_project)
+ def allows_to?(action)
+ if archived?
+ # No action allowed on archived projects
+ return false
+ end
+ unless active? || Redmine::AccessControl.read_action?(action)
+ # No write action allowed on closed projects
+ return false
+ end
+ # No action allowed on disabled modules
+ if action.is_a? Hash
+ allowed_actions.include? "#{action[:controller]}/#{action[:action]}"
+ else
+ allowed_permissions.include? action
+ end
+ end
+
+ # Return the enabled module with the given name
+ # or nil if the module is not enabled for the project
+ def enabled_module(name)
+ name = name.to_s
+ enabled_modules.detect {|m| m.name == name}
+ end
+
+ # Return true if the module with the given name is enabled
+ def module_enabled?(name)
+ enabled_module(name).present?
+ end
+
+ def enabled_module_names=(module_names)
+ if module_names && module_names.is_a?(Array)
+ module_names = module_names.collect(&:to_s).reject(&:blank?)
+ self.enabled_modules = module_names.collect {|name| enabled_modules.detect {|mod| mod.name == name} || EnabledModule.new(:name => name)}
+ else
+ enabled_modules.clear
+ end
+ end
+
+ # Returns an array of the enabled modules names
+ def enabled_module_names
+ enabled_modules.collect(&:name)
+ end
+
+ # Enable a specific module
+ #
+ # Examples:
+ # project.enable_module!(:issue_tracking)
+ # project.enable_module!("issue_tracking")
+ def enable_module!(name)
+ enabled_modules << EnabledModule.new(:name => name.to_s) unless module_enabled?(name)
+ end
+
+ # Disable a module if it exists
+ #
+ # Examples:
+ # project.disable_module!(:issue_tracking)
+ # project.disable_module!("issue_tracking")
+ # project.disable_module!(project.enabled_modules.first)
+ def disable_module!(target)
+ target = enabled_modules.detect{|mod| target.to_s == mod.name} unless enabled_modules.include?(target)
+ target.destroy unless target.blank?
+ end
+
+ safe_attributes 'name',
+ 'description',
+ 'homepage',
+ 'is_public',
+ 'identifier',
+ 'custom_field_values',
+ 'custom_fields',
+ 'tracker_ids',
+ 'issue_custom_field_ids',
+ 'parent_id',
+ 'default_version_id',
+ 'default_assigned_to_id'
+
+ safe_attributes 'enabled_module_names',
+ :if => lambda {|project, user|
+ if project.new_record?
+ if user.admin?
+ true
+ else
+ default_member_role.has_permission?(:select_project_modules)
+ end
+ else
+ user.allowed_to?(:select_project_modules, project)
+ end
+ }
+
+ safe_attributes 'inherit_members',
+ :if => lambda {|project, user| project.parent.nil? || project.parent.visible?(user)}
+
+ def safe_attributes=(attrs, user=User.current)
+ return unless attrs.is_a?(Hash)
+ attrs = attrs.deep_dup
+
+ @unallowed_parent_id = nil
+ if new_record? || attrs.key?('parent_id')
+ parent_id_param = attrs['parent_id'].to_s
+ if new_record? || parent_id_param != parent_id.to_s
+ p = parent_id_param.present? ? Project.find_by_id(parent_id_param) : nil
+ unless allowed_parents(user).include?(p)
+ attrs.delete('parent_id')
+ @unallowed_parent_id = true
+ end
+ end
+ end
+
+ super(attrs, user)
+ end
+
+ # Returns an auto-generated project identifier based on the last identifier used
+ def self.next_identifier
+ p = Project.order('id DESC').first
+ p.nil? ? nil : p.identifier.to_s.succ
+ end
+
+ # Copies and saves the Project instance based on the +project+.
+ # Duplicates the source project's:
+ # * Wiki
+ # * Versions
+ # * Categories
+ # * Issues
+ # * Members
+ # * Queries
+ #
+ # Accepts an +options+ argument to specify what to copy
+ #
+ # Examples:
+ # project.copy(1) # => copies everything
+ # project.copy(1, :only => 'members') # => copies members only
+ # project.copy(1, :only => ['members', 'versions']) # => copies members and versions
+ def copy(project, options={})
+ project = project.is_a?(Project) ? project : Project.find(project)
+
+ to_be_copied = %w(members wiki versions issue_categories issues queries boards)
+ to_be_copied = to_be_copied & Array.wrap(options[:only]) unless options[:only].nil?
+
+ Project.transaction do
+ if save
+ reload
+ to_be_copied.each do |name|
+ send "copy_#{name}", project
+ end
+ Redmine::Hook.call_hook(:model_project_copy_before_save, :source_project => project, :destination_project => self)
+ save
+ else
+ false
+ end
+ end
+ end
+
+ def member_principals
+ ActiveSupport::Deprecation.warn "Project#member_principals is deprecated and will be removed in Redmine 4.0. Use #memberships.active instead."
+ memberships.active
+ end
+
+ # Returns a new unsaved Project instance with attributes copied from +project+
+ def self.copy_from(project)
+ project = project.is_a?(Project) ? project : Project.find(project)
+ # clear unique attributes
+ attributes = project.attributes.dup.except('id', 'name', 'identifier', 'status', 'parent_id', 'lft', 'rgt')
+ copy = Project.new(attributes)
+ copy.enabled_module_names = project.enabled_module_names
+ copy.trackers = project.trackers
+ copy.custom_values = project.custom_values.collect {|v| v.clone}
+ copy.issue_custom_fields = project.issue_custom_fields
+ copy
+ end
+
+ # Yields the given block for each project with its level in the tree
+ def self.project_tree(projects, options={}, &block)
+ ancestors = []
+ if options[:init_level] && projects.first
+ ancestors = projects.first.ancestors.to_a
+ end
+ projects.sort_by(&:lft).each do |project|
+ while (ancestors.any? && !project.is_descendant_of?(ancestors.last))
+ ancestors.pop
+ end
+ yield project, ancestors.size
+ ancestors << project
+ end
+ end
+
+ private
+
+ def update_inherited_members
+ if parent
+ if inherit_members? && !inherit_members_was
+ remove_inherited_member_roles
+ add_inherited_member_roles
+ elsif !inherit_members? && inherit_members_was
+ remove_inherited_member_roles
+ end
+ end
+ end
+
+ def remove_inherited_member_roles
+ member_roles = MemberRole.where(:member_id => membership_ids).to_a
+ member_role_ids = member_roles.map(&:id)
+ member_roles.each do |member_role|
+ if member_role.inherited_from && !member_role_ids.include?(member_role.inherited_from)
+ member_role.destroy
+ end
+ end
+ end
+
+ def add_inherited_member_roles
+ if inherit_members? && parent
+ parent.memberships.each do |parent_member|
+ member = Member.find_or_new(self.id, parent_member.user_id)
+ parent_member.member_roles.each do |parent_member_role|
+ member.member_roles << MemberRole.new(:role => parent_member_role.role, :inherited_from => parent_member_role.id)
+ end
+ member.save!
+ end
+ memberships.reset
+ end
+ end
+
+ def update_versions_from_hierarchy_change
+ Issue.update_versions_from_hierarchy_change(self)
+ end
+
+ def validate_parent
+ if @unallowed_parent_id
+ errors.add(:parent_id, :invalid)
+ elsif parent_id_changed?
+ unless parent.nil? || (parent.active? && move_possible?(parent))
+ errors.add(:parent_id, :invalid)
+ end
+ end
+ end
+
+ # Copies wiki from +project+
+ def copy_wiki(project)
+ # Check that the source project has a wiki first
+ unless project.wiki.nil?
+ wiki = self.wiki || Wiki.new
+ wiki.attributes = project.wiki.attributes.dup.except("id", "project_id")
+ wiki_pages_map = {}
+ project.wiki.pages.each do |page|
+ # Skip pages without content
+ next if page.content.nil?
+ new_wiki_content = WikiContent.new(page.content.attributes.dup.except("id", "page_id", "updated_on"))
+ new_wiki_page = WikiPage.new(page.attributes.dup.except("id", "wiki_id", "created_on", "parent_id"))
+ new_wiki_page.content = new_wiki_content
+ wiki.pages << new_wiki_page
+ wiki_pages_map[page.id] = new_wiki_page
+ end
+
+ self.wiki = wiki
+ wiki.save
+ # Reproduce page hierarchy
+ project.wiki.pages.each do |page|
+ if page.parent_id && wiki_pages_map[page.id]
+ wiki_pages_map[page.id].parent = wiki_pages_map[page.parent_id]
+ wiki_pages_map[page.id].save
+ end
+ end
+ end
+ end
+
+ # Copies versions from +project+
+ def copy_versions(project)
+ project.versions.each do |version|
+ new_version = Version.new
+ new_version.attributes = version.attributes.dup.except("id", "project_id", "created_on", "updated_on")
+ self.versions << new_version
+ end
+ end
+
+ # Copies issue categories from +project+
+ def copy_issue_categories(project)
+ project.issue_categories.each do |issue_category|
+ new_issue_category = IssueCategory.new
+ new_issue_category.attributes = issue_category.attributes.dup.except("id", "project_id")
+ self.issue_categories << new_issue_category
+ end
+ end
+
+ # Copies issues from +project+
+ def copy_issues(project)
+ # Stores the source issue id as a key and the copied issues as the
+ # value. Used to map the two together for issue relations.
+ issues_map = {}
+
+ # Store status and reopen locked/closed versions
+ version_statuses = versions.reject(&:open?).map {|version| [version, version.status]}
+ version_statuses.each do |version, status|
+ version.update_attribute :status, 'open'
+ end
+
+ # Get issues sorted by root_id, lft so that parent issues
+ # get copied before their children
+ project.issues.reorder('root_id, lft').each do |issue|
+ new_issue = Issue.new
+ new_issue.copy_from(issue, :subtasks => false, :link => false, :keep_status => true)
+ new_issue.project = self
+ # Changing project resets the custom field values
+ # TODO: handle this in Issue#project=
+ new_issue.custom_field_values = issue.custom_field_values.inject({}) {|h,v| h[v.custom_field_id] = v.value; h}
+ # Reassign fixed_versions by name, since names are unique per project
+ if issue.fixed_version && issue.fixed_version.project == project
+ new_issue.fixed_version = self.versions.detect {|v| v.name == issue.fixed_version.name}
+ end
+ # Reassign version custom field values
+ new_issue.custom_field_values.each do |custom_value|
+ if custom_value.custom_field.field_format == 'version' && custom_value.value.present?
+ versions = Version.where(:id => custom_value.value).to_a
+ new_value = versions.map do |version|
+ if version.project == project
+ self.versions.detect {|v| v.name == version.name}.try(:id)
+ else
+ version.id
+ end
+ end
+ new_value.compact!
+ new_value = new_value.first unless custom_value.custom_field.multiple?
+ custom_value.value = new_value
+ end
+ end
+ # Reassign the category by name, since names are unique per project
+ if issue.category
+ new_issue.category = self.issue_categories.detect {|c| c.name == issue.category.name}
+ end
+ # Parent issue
+ if issue.parent_id
+ if copied_parent = issues_map[issue.parent_id]
+ new_issue.parent_issue_id = copied_parent.id
+ end
+ end
+
+ self.issues << new_issue
+ if new_issue.new_record?
+ logger.info "Project#copy_issues: issue ##{issue.id} could not be copied: #{new_issue.errors.full_messages}" if logger && logger.info?
+ else
+ issues_map[issue.id] = new_issue unless new_issue.new_record?
+ end
+ end
+
+ # Restore locked/closed version statuses
+ version_statuses.each do |version, status|
+ version.update_attribute :status, status
+ end
+
+ # Relations after in case issues related each other
+ project.issues.each do |issue|
+ new_issue = issues_map[issue.id]
+ unless new_issue
+ # Issue was not copied
+ next
+ end
+
+ # Relations
+ issue.relations_from.each do |source_relation|
+ new_issue_relation = IssueRelation.new
+ new_issue_relation.attributes = source_relation.attributes.dup.except("id", "issue_from_id", "issue_to_id")
+ new_issue_relation.issue_to = issues_map[source_relation.issue_to_id]
+ if new_issue_relation.issue_to.nil? && Setting.cross_project_issue_relations?
+ new_issue_relation.issue_to = source_relation.issue_to
+ end
+ new_issue.relations_from << new_issue_relation
+ end
+
+ issue.relations_to.each do |source_relation|
+ new_issue_relation = IssueRelation.new
+ new_issue_relation.attributes = source_relation.attributes.dup.except("id", "issue_from_id", "issue_to_id")
+ new_issue_relation.issue_from = issues_map[source_relation.issue_from_id]
+ if new_issue_relation.issue_from.nil? && Setting.cross_project_issue_relations?
+ new_issue_relation.issue_from = source_relation.issue_from
+ end
+ new_issue.relations_to << new_issue_relation
+ end
+ end
+ end
+
+ # Copies members from +project+
+ def copy_members(project)
+ # Copy users first, then groups to handle members with inherited and given roles
+ members_to_copy = []
+ members_to_copy += project.memberships.select {|m| m.principal.is_a?(User)}
+ members_to_copy += project.memberships.select {|m| !m.principal.is_a?(User)}
+
+ members_to_copy.each do |member|
+ new_member = Member.new
+ new_member.attributes = member.attributes.dup.except("id", "project_id", "created_on")
+ # only copy non inherited roles
+ # inherited roles will be added when copying the group membership
+ role_ids = member.member_roles.reject(&:inherited?).collect(&:role_id)
+ next if role_ids.empty?
+ new_member.role_ids = role_ids
+ new_member.project = self
+ self.members << new_member
+ end
+ end
+
+ # Copies queries from +project+
+ def copy_queries(project)
+ project.queries.each do |query|
+ new_query = query.class.new
+ new_query.attributes = query.attributes.dup.except("id", "project_id", "sort_criteria", "user_id", "type")
+ new_query.sort_criteria = query.sort_criteria if query.sort_criteria
+ new_query.project = self
+ new_query.user_id = query.user_id
+ new_query.role_ids = query.role_ids if query.visibility == ::Query::VISIBILITY_ROLES
+ self.queries << new_query
+ end
+ end
+
+ # Copies boards from +project+
+ def copy_boards(project)
+ project.boards.each do |board|
+ new_board = Board.new
+ new_board.attributes = board.attributes.dup.except("id", "project_id", "topics_count", "messages_count", "last_message_id")
+ new_board.project = self
+ self.boards << new_board
+ end
+ end
+
+ def allowed_permissions
+ @allowed_permissions ||= begin
+ module_names = enabled_modules.loaded? ? enabled_modules.map(&:name) : enabled_modules.pluck(:name)
+ Redmine::AccessControl.modules_permissions(module_names).collect {|p| p.name}
+ end
+ end
+
+ def allowed_actions
+ @actions_allowed ||= allowed_permissions.inject([]) { |actions, permission| actions += Redmine::AccessControl.allowed_actions(permission) }.flatten
+ end
+
+ # Archives subprojects recursively
+ def archive!
+ children.each do |subproject|
+ subproject.send :archive!
+ end
+ update_attribute :status, STATUS_ARCHIVED
+ end
+end
diff --git a/app/models/project_custom_field.rb b/app/models/project_custom_field.rb
new file mode 100644
index 0000000..54e7958
--- /dev/null
+++ b/app/models/project_custom_field.rb
@@ -0,0 +1,22 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class ProjectCustomField < CustomField
+ def type_name
+ :label_project_plural
+ end
+end
diff --git a/app/models/query.rb b/app/models/query.rb
new file mode 100644
index 0000000..bfa010d
--- /dev/null
+++ b/app/models/query.rb
@@ -0,0 +1,1376 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class QueryColumn
+ attr_accessor :name, :sortable, :groupable, :totalable, :default_order
+ include Redmine::I18n
+
+ def initialize(name, options={})
+ self.name = name
+ self.sortable = options[:sortable]
+ self.groupable = options[:groupable] || false
+ if groupable == true
+ self.groupable = name.to_s
+ end
+ self.totalable = options[:totalable] || false
+ self.default_order = options[:default_order]
+ @inline = options.key?(:inline) ? options[:inline] : true
+ @caption_key = options[:caption] || "field_#{name}".to_sym
+ @frozen = options[:frozen]
+ end
+
+ def caption
+ case @caption_key
+ when Symbol
+ l(@caption_key)
+ when Proc
+ @caption_key.call
+ else
+ @caption_key
+ end
+ end
+
+ # Returns true if the column is sortable, otherwise false
+ def sortable?
+ !@sortable.nil?
+ end
+
+ def sortable
+ @sortable.is_a?(Proc) ? @sortable.call : @sortable
+ end
+
+ def inline?
+ @inline
+ end
+
+ def frozen?
+ @frozen
+ end
+
+ def value(object)
+ object.send name
+ end
+
+ def value_object(object)
+ object.send name
+ end
+
+ def css_classes
+ name
+ end
+end
+
+class QueryAssociationColumn < QueryColumn
+
+ def initialize(association, attribute, options={})
+ @association = association
+ @attribute = attribute
+ name_with_assoc = "#{association}.#{attribute}".to_sym
+ super(name_with_assoc, options)
+ end
+
+ def value_object(object)
+ if assoc = object.send(@association)
+ assoc.send @attribute
+ end
+ end
+
+ def css_classes
+ @css_classes ||= "#{@association}-#{@attribute}"
+ end
+end
+
+class QueryCustomFieldColumn < QueryColumn
+
+ def initialize(custom_field, options={})
+ self.name = "cf_#{custom_field.id}".to_sym
+ self.sortable = custom_field.order_statement || false
+ self.groupable = custom_field.group_statement || false
+ self.totalable = options.key?(:totalable) ? !!options[:totalable] : custom_field.totalable?
+ @inline = true
+ @cf = custom_field
+ end
+
+ def caption
+ @cf.name
+ end
+
+ def custom_field
+ @cf
+ end
+
+ def value_object(object)
+ if custom_field.visible_by?(object.project, User.current)
+ cv = object.custom_values.select {|v| v.custom_field_id == @cf.id}
+ cv.size > 1 ? cv.sort {|a,b| a.value.to_s <=> b.value.to_s} : cv.first
+ else
+ nil
+ end
+ end
+
+ def value(object)
+ raw = value_object(object)
+ if raw.is_a?(Array)
+ raw.map {|r| @cf.cast_value(r.value)}
+ elsif raw
+ @cf.cast_value(raw.value)
+ else
+ nil
+ end
+ end
+
+ def css_classes
+ @css_classes ||= "#{name} #{@cf.field_format}"
+ end
+end
+
+class QueryAssociationCustomFieldColumn < QueryCustomFieldColumn
+
+ def initialize(association, custom_field, options={})
+ super(custom_field, options)
+ self.name = "#{association}.cf_#{custom_field.id}".to_sym
+ # TODO: support sorting/grouping by association custom field
+ self.sortable = false
+ self.groupable = false
+ @association = association
+ end
+
+ def value_object(object)
+ if assoc = object.send(@association)
+ super(assoc)
+ end
+ end
+
+ def css_classes
+ @css_classes ||= "#{@association}_cf_#{@cf.id} #{@cf.field_format}"
+ end
+end
+
+class QueryFilter
+ include Redmine::I18n
+
+ def initialize(field, options)
+ @field = field.to_s
+ @options = options
+ @options[:name] ||= l(options[:label] || "field_#{field}".gsub(/_id$/, ''))
+ # Consider filters with a Proc for values as remote by default
+ @remote = options.key?(:remote) ? options[:remote] : options[:values].is_a?(Proc)
+ end
+
+ def [](arg)
+ if arg == :values
+ values
+ else
+ @options[arg]
+ end
+ end
+
+ def values
+ @values ||= begin
+ values = @options[:values]
+ if values.is_a?(Proc)
+ values = values.call
+ end
+ values
+ end
+ end
+
+ def remote
+ @remote
+ end
+end
+
+class Query < ActiveRecord::Base
+ class StatementInvalid < ::ActiveRecord::StatementInvalid
+ end
+
+ include Redmine::SubclassFactory
+
+ VISIBILITY_PRIVATE = 0
+ VISIBILITY_ROLES = 1
+ VISIBILITY_PUBLIC = 2
+
+ belongs_to :project
+ belongs_to :user
+ has_and_belongs_to_many :roles, :join_table => "#{table_name_prefix}queries_roles#{table_name_suffix}", :foreign_key => "query_id"
+ serialize :filters
+ serialize :column_names
+ serialize :sort_criteria, Array
+ serialize :options, Hash
+
+ attr_protected :project_id, :user_id
+
+ validates_presence_of :name
+ validates_length_of :name, :maximum => 255
+ validates :visibility, :inclusion => { :in => [VISIBILITY_PUBLIC, VISIBILITY_ROLES, VISIBILITY_PRIVATE] }
+ validate :validate_query_filters
+ validate do |query|
+ errors.add(:base, l(:label_role_plural) + ' ' + l('activerecord.errors.messages.blank')) if query.visibility == VISIBILITY_ROLES && roles.blank?
+ end
+
+ after_save do |query|
+ if query.visibility_changed? && query.visibility != VISIBILITY_ROLES
+ query.roles.clear
+ end
+ end
+
+ class_attribute :operators
+ self.operators = {
+ "=" => :label_equals,
+ "!" => :label_not_equals,
+ "o" => :label_open_issues,
+ "c" => :label_closed_issues,
+ "!*" => :label_none,
+ "*" => :label_any,
+ ">=" => :label_greater_or_equal,
+ "<=" => :label_less_or_equal,
+ "><" => :label_between,
+ " :label_in_less_than,
+ ">t+" => :label_in_more_than,
+ "> :label_in_the_next_days,
+ "t+" => :label_in,
+ "t" => :label_today,
+ "ld" => :label_yesterday,
+ "w" => :label_this_week,
+ "lw" => :label_last_week,
+ "l2w" => [:label_last_n_weeks, {:count => 2}],
+ "m" => :label_this_month,
+ "lm" => :label_last_month,
+ "y" => :label_this_year,
+ ">t-" => :label_less_than_ago,
+ " :label_more_than_ago,
+ "> :label_in_the_past_days,
+ "t-" => :label_ago,
+ "~" => :label_contains,
+ "!~" => :label_not_contains,
+ "=p" => :label_any_issues_in_project,
+ "=!p" => :label_any_issues_not_in_project,
+ "!p" => :label_no_issues_in_project,
+ "*o" => :label_any_open_issues,
+ "!o" => :label_no_open_issues
+ }
+
+ class_attribute :operators_by_filter_type
+ self.operators_by_filter_type = {
+ :list => [ "=", "!" ],
+ :list_status => [ "o", "=", "!", "c", "*" ],
+ :list_optional => [ "=", "!", "!*", "*" ],
+ :list_subprojects => [ "*", "!*", "=", "!" ],
+ :date => [ "=", ">=", "<=", "><", "t+", ">t-", " [ "=", ">=", "<=", "><", ">t-", " [ "=", "~", "!", "!~", "!*", "*" ],
+ :text => [ "~", "!~", "!*", "*" ],
+ :integer => [ "=", ">=", "<=", "><", "!*", "*" ],
+ :float => [ "=", ">=", "<=", "><", "!*", "*" ],
+ :relation => ["=", "=p", "=!p", "!p", "*o", "!o", "!*", "*"],
+ :tree => ["=", "~", "!*", "*"]
+ }
+
+ class_attribute :available_columns
+ self.available_columns = []
+
+ class_attribute :queried_class
+
+ # Permission required to view the queries, set on subclasses.
+ class_attribute :view_permission
+
+ # Scope of queries that are global or on the given project
+ scope :global_or_on_project, lambda {|project|
+ where(:project_id => (project.nil? ? nil : [nil, project.id]))
+ }
+
+ scope :sorted, lambda {order(:name, :id)}
+
+ # Scope of visible queries, can be used from subclasses only.
+ # Unlike other visible scopes, a class methods is used as it
+ # let handle inheritance more nicely than scope DSL.
+ def self.visible(*args)
+ if self == ::Query
+ # Visibility depends on permissions for each subclass,
+ # raise an error if the scope is called from Query (eg. Query.visible)
+ raise Exception.new("Cannot call .visible scope from the base Query class, but from subclasses only.")
+ end
+
+ user = args.shift || User.current
+ base = Project.allowed_to_condition(user, view_permission, *args)
+ scope = joins("LEFT OUTER JOIN #{Project.table_name} ON #{table_name}.project_id = #{Project.table_name}.id").
+ where("#{table_name}.project_id IS NULL OR (#{base})")
+
+ if user.admin?
+ scope.where("#{table_name}.visibility <> ? OR #{table_name}.user_id = ?", VISIBILITY_PRIVATE, user.id)
+ elsif user.memberships.any?
+ scope.where("#{table_name}.visibility = ?" +
+ " OR (#{table_name}.visibility = ? AND #{table_name}.id IN (" +
+ "SELECT DISTINCT q.id FROM #{table_name} q" +
+ " INNER JOIN #{table_name_prefix}queries_roles#{table_name_suffix} qr on qr.query_id = q.id" +
+ " INNER JOIN #{MemberRole.table_name} mr ON mr.role_id = qr.role_id" +
+ " INNER JOIN #{Member.table_name} m ON m.id = mr.member_id AND m.user_id = ?" +
+ " INNER JOIN #{Project.table_name} p ON p.id = m.project_id AND p.status <> ?" +
+ " WHERE q.project_id IS NULL OR q.project_id = m.project_id))" +
+ " OR #{table_name}.user_id = ?",
+ VISIBILITY_PUBLIC, VISIBILITY_ROLES, user.id, Project::STATUS_ARCHIVED, user.id)
+ elsif user.logged?
+ scope.where("#{table_name}.visibility = ? OR #{table_name}.user_id = ?", VISIBILITY_PUBLIC, user.id)
+ else
+ scope.where("#{table_name}.visibility = ?", VISIBILITY_PUBLIC)
+ end
+ end
+
+ # Returns true if the query is visible to +user+ or the current user.
+ def visible?(user=User.current)
+ return true if user.admin?
+ return false unless project.nil? || user.allowed_to?(self.class.view_permission, project)
+ case visibility
+ when VISIBILITY_PUBLIC
+ true
+ when VISIBILITY_ROLES
+ if project
+ (user.roles_for_project(project) & roles).any?
+ else
+ user.memberships.joins(:member_roles).where(:member_roles => {:role_id => roles.map(&:id)}).any?
+ end
+ else
+ user == self.user
+ end
+ end
+
+ def is_private?
+ visibility == VISIBILITY_PRIVATE
+ end
+
+ def is_public?
+ !is_private?
+ end
+
+ def queried_table_name
+ @queried_table_name ||= self.class.queried_class.table_name
+ end
+
+ def initialize(attributes=nil, *args)
+ super attributes
+ @is_for_all = project.nil?
+ end
+
+ # Builds the query from the given params
+ def build_from_params(params)
+ if params[:fields] || params[:f]
+ self.filters = {}
+ add_filters(params[:fields] || params[:f], params[:operators] || params[:op], params[:values] || params[:v])
+ else
+ available_filters.keys.each do |field|
+ add_short_filter(field, params[field]) if params[field]
+ end
+ end
+ self.group_by = params[:group_by] || (params[:query] && params[:query][:group_by])
+ self.column_names = params[:c] || (params[:query] && params[:query][:column_names])
+ self.totalable_names = params[:t] || (params[:query] && params[:query][:totalable_names])
+ self.sort_criteria = params[:sort] || (params[:query] && params[:query][:sort_criteria])
+ self
+ end
+
+ # Builds a new query from the given params and attributes
+ def self.build_from_params(params, attributes={})
+ new(attributes).build_from_params(params)
+ end
+
+ def as_params
+ if new_record?
+ params = {}
+ filters.each do |field, options|
+ params[:f] ||= []
+ params[:f] << field
+ params[:op] ||= {}
+ params[:op][field] = options[:operator]
+ params[:v] ||= {}
+ params[:v][field] = options[:values]
+ end
+ params[:c] = column_names
+ params[:group_by] = group_by.to_s if group_by.present?
+ params[:t] = totalable_names.map(&:to_s) if totalable_names.any?
+ params[:sort] = sort_criteria.to_param
+ params[:set_filter] = 1
+ params
+ else
+ {:query_id => id}
+ end
+ end
+
+ def validate_query_filters
+ filters.each_key do |field|
+ if values_for(field)
+ case type_for(field)
+ when :integer
+ add_filter_error(field, :invalid) if values_for(field).detect {|v| v.present? && !v.match(/\A[+-]?\d+(,[+-]?\d+)*\z/) }
+ when :float
+ add_filter_error(field, :invalid) if values_for(field).detect {|v| v.present? && !v.match(/\A[+-]?\d+(\.\d*)?\z/) }
+ when :date, :date_past
+ case operator_for(field)
+ when "=", ">=", "<=", "><"
+ add_filter_error(field, :invalid) if values_for(field).detect {|v|
+ v.present? && (!v.match(/\A\d{4}-\d{2}-\d{2}(T\d{2}((:)?\d{2}){0,2}(Z|\d{2}:?\d{2})?)?\z/) || parse_date(v).nil?)
+ }
+ when ">t-", "t+", " 'activerecord.errors.messages')
+ errors.add(:base, m)
+ end
+
+ def editable_by?(user)
+ return false unless user
+ # Admin can edit them all and regular users can edit their private queries
+ return true if user.admin? || (is_private? && self.user_id == user.id)
+ # Members can not edit public queries that are for all project (only admin is allowed to)
+ is_public? && !@is_for_all && user.allowed_to?(:manage_public_queries, project)
+ end
+
+ def trackers
+ @trackers ||= (project.nil? ? Tracker.all : project.rolled_up_trackers).visible.sorted
+ end
+
+ # Returns a hash of localized labels for all filter operators
+ def self.operators_labels
+ operators.inject({}) {|h, operator| h[operator.first] = l(*operator.last); h}
+ end
+
+ # Returns a representation of the available filters for JSON serialization
+ def available_filters_as_json
+ json = {}
+ available_filters.each do |field, filter|
+ options = {:type => filter[:type], :name => filter[:name]}
+ options[:remote] = true if filter.remote
+
+ if has_filter?(field) || !filter.remote
+ options[:values] = filter.values
+ if options[:values] && values_for(field)
+ missing = Array(values_for(field)).select(&:present?) - options[:values].map(&:last)
+ if missing.any? && respond_to?(method = "find_#{field}_filter_values")
+ options[:values] += send(method, missing)
+ end
+ end
+ end
+ json[field] = options.stringify_keys
+ end
+ json
+ end
+
+ def all_projects
+ @all_projects ||= Project.visible.to_a
+ end
+
+ def all_projects_values
+ return @all_projects_values if @all_projects_values
+
+ values = []
+ Project.project_tree(all_projects) do |p, level|
+ prefix = (level > 0 ? ('--' * level + ' ') : '')
+ values << ["#{prefix}#{p.name}", p.id.to_s]
+ end
+ @all_projects_values = values
+ end
+
+ def project_values
+ project_values = []
+ if User.current.logged? && User.current.memberships.any?
+ project_values << ["<< #{l(:label_my_projects).downcase} >>", "mine"]
+ end
+ project_values += all_projects_values
+ project_values
+ end
+
+ def subproject_values
+ project.descendants.visible.collect{|s| [s.name, s.id.to_s] }
+ end
+
+ def principals
+ @principal ||= begin
+ principals = []
+ if project
+ principals += project.principals.visible
+ unless project.leaf?
+ principals += Principal.member_of(project.descendants.visible).visible
+ end
+ else
+ principals += Principal.member_of(all_projects).visible
+ end
+ principals.uniq!
+ principals.sort!
+ principals.reject! {|p| p.is_a?(GroupBuiltin)}
+ principals
+ end
+ end
+
+ def users
+ principals.select {|p| p.is_a?(User)}
+ end
+
+ def author_values
+ author_values = []
+ author_values << ["<< #{l(:label_me)} >>", "me"] if User.current.logged?
+ author_values += users.collect{|s| [s.name, s.id.to_s] }
+ author_values
+ end
+
+ def assigned_to_values
+ assigned_to_values = []
+ assigned_to_values << ["<< #{l(:label_me)} >>", "me"] if User.current.logged?
+ assigned_to_values += (Setting.issue_group_assignment? ? principals : users).collect{|s| [s.name, s.id.to_s] }
+ assigned_to_values
+ end
+
+ def fixed_version_values
+ versions = []
+ if project
+ versions = project.shared_versions.to_a
+ else
+ versions = Version.visible.where(:sharing => 'system').to_a
+ end
+ Version.sort_by_status(versions).collect{|s| ["#{s.project.name} - #{s.name}", s.id.to_s, l("version_status_#{s.status}")] }
+ end
+
+ # Returns a scope of issue statuses that are available as columns for filters
+ def issue_statuses_values
+ if project
+ statuses = project.rolled_up_statuses
+ else
+ statuses = IssueStatus.all.sorted
+ end
+ statuses.collect{|s| [s.name, s.id.to_s]}
+ end
+
+ # Returns a scope of issue custom fields that are available as columns or filters
+ def issue_custom_fields
+ if project
+ project.rolled_up_custom_fields
+ else
+ IssueCustomField.all
+ end
+ end
+
+ # Adds available filters
+ def initialize_available_filters
+ # implemented by sub-classes
+ end
+ protected :initialize_available_filters
+
+ # Adds an available filter
+ def add_available_filter(field, options)
+ @available_filters ||= ActiveSupport::OrderedHash.new
+ @available_filters[field] = QueryFilter.new(field, options)
+ @available_filters
+ end
+
+ # Removes an available filter
+ def delete_available_filter(field)
+ if @available_filters
+ @available_filters.delete(field)
+ end
+ end
+
+ # Return a hash of available filters
+ def available_filters
+ unless @available_filters
+ initialize_available_filters
+ @available_filters ||= {}
+ end
+ @available_filters
+ end
+
+ def add_filter(field, operator, values=nil)
+ # values must be an array
+ return unless values.nil? || values.is_a?(Array)
+ # check if field is defined as an available filter
+ if available_filters.has_key? field
+ filter_options = available_filters[field]
+ filters[field] = {:operator => operator, :values => (values || [''])}
+ end
+ end
+
+ def add_short_filter(field, expression)
+ return unless expression && available_filters.has_key?(field)
+ field_type = available_filters[field][:type]
+ operators_by_filter_type[field_type].sort.reverse.detect do |operator|
+ next unless expression =~ /^#{Regexp.escape(operator)}(.*)$/
+ values = $1
+ add_filter field, operator, values.present? ? values.split('|') : ['']
+ end || add_filter(field, '=', expression.to_s.split('|'))
+ end
+
+ # Add multiple filters using +add_filter+
+ def add_filters(fields, operators, values)
+ if fields.is_a?(Array) && operators.is_a?(Hash) && (values.nil? || values.is_a?(Hash))
+ fields.each do |field|
+ add_filter(field, operators[field], values && values[field])
+ end
+ end
+ end
+
+ def has_filter?(field)
+ filters and filters[field]
+ end
+
+ def type_for(field)
+ available_filters[field][:type] if available_filters.has_key?(field)
+ end
+
+ def operator_for(field)
+ has_filter?(field) ? filters[field][:operator] : nil
+ end
+
+ def values_for(field)
+ has_filter?(field) ? filters[field][:values] : nil
+ end
+
+ def value_for(field, index=0)
+ (values_for(field) || [])[index]
+ end
+
+ def label_for(field)
+ label = available_filters[field][:name] if available_filters.has_key?(field)
+ label ||= queried_class.human_attribute_name(field, :default => field)
+ end
+
+ def self.add_available_column(column)
+ self.available_columns << (column) if column.is_a?(QueryColumn)
+ end
+
+ # Returns an array of columns that can be used to group the results
+ def groupable_columns
+ available_columns.select {|c| c.groupable}
+ end
+
+ # Returns a Hash of columns and the key for sorting
+ def sortable_columns
+ available_columns.inject({}) {|h, column|
+ h[column.name.to_s] = column.sortable
+ h
+ }
+ end
+
+ def columns
+ # preserve the column_names order
+ cols = (has_default_columns? ? default_columns_names : column_names).collect do |name|
+ available_columns.find { |col| col.name == name }
+ end.compact
+ available_columns.select(&:frozen?) | cols
+ end
+
+ def inline_columns
+ columns.select(&:inline?)
+ end
+
+ def block_columns
+ columns.reject(&:inline?)
+ end
+
+ def available_inline_columns
+ available_columns.select(&:inline?)
+ end
+
+ def available_block_columns
+ available_columns.reject(&:inline?)
+ end
+
+ def available_totalable_columns
+ available_columns.select(&:totalable)
+ end
+
+ def default_columns_names
+ []
+ end
+
+ def default_totalable_names
+ []
+ end
+
+ def column_names=(names)
+ if names
+ names = names.select {|n| n.is_a?(Symbol) || !n.blank? }
+ names = names.collect {|n| n.is_a?(Symbol) ? n : n.to_sym }
+ if names.delete(:all_inline)
+ names = available_inline_columns.map(&:name) | names
+ end
+ # Set column_names to nil if default columns
+ if names == default_columns_names
+ names = nil
+ end
+ end
+ write_attribute(:column_names, names)
+ end
+
+ def has_column?(column)
+ name = column.is_a?(QueryColumn) ? column.name : column
+ columns.detect {|c| c.name == name}
+ end
+
+ def has_custom_field_column?
+ columns.any? {|column| column.is_a? QueryCustomFieldColumn}
+ end
+
+ def has_default_columns?
+ column_names.nil? || column_names.empty?
+ end
+
+ def totalable_columns
+ names = totalable_names
+ available_totalable_columns.select {|column| names.include?(column.name)}
+ end
+
+ def totalable_names=(names)
+ if names
+ names = names.select(&:present?).map {|n| n.is_a?(Symbol) ? n : n.to_sym}
+ end
+ options[:totalable_names] = names
+ end
+
+ def totalable_names
+ options[:totalable_names] || default_totalable_names || []
+ end
+
+ def default_sort_criteria
+ []
+ end
+
+ def sort_criteria=(arg)
+ c = Redmine::SortCriteria.new(arg)
+ write_attribute(:sort_criteria, c.to_a)
+ c
+ end
+
+ def sort_criteria
+ c = read_attribute(:sort_criteria)
+ if c.blank?
+ c = default_sort_criteria
+ end
+ Redmine::SortCriteria.new(c)
+ end
+
+ def sort_criteria_key(index)
+ sort_criteria[index].try(:first)
+ end
+
+ def sort_criteria_order(index)
+ sort_criteria[index].try(:last)
+ end
+
+ def sort_clause
+ sort_criteria.sort_clause(sortable_columns)
+ end
+
+ # Returns the SQL sort order that should be prepended for grouping
+ def group_by_sort_order
+ if column = group_by_column
+ order = (sort_criteria.order_for(column.name) || column.default_order || 'asc').try(:upcase)
+ Array(column.sortable).map {|s| "#{s} #{order}"}
+ end
+ end
+
+ # Returns true if the query is a grouped query
+ def grouped?
+ !group_by_column.nil?
+ end
+
+ def group_by_column
+ groupable_columns.detect {|c| c.groupable && c.name.to_s == group_by}
+ end
+
+ def group_by_statement
+ group_by_column.try(:groupable)
+ end
+
+ def project_statement
+ project_clauses = []
+ active_subprojects_ids = []
+
+ active_subprojects_ids = project.descendants.active.map(&:id) if project
+ if active_subprojects_ids.any?
+ if has_filter?("subproject_id")
+ case operator_for("subproject_id")
+ when '='
+ # include the selected subprojects
+ ids = [project.id] + values_for("subproject_id").map(&:to_i)
+ project_clauses << "#{Project.table_name}.id IN (%s)" % ids.join(',')
+ when '!'
+ # exclude the selected subprojects
+ ids = [project.id] + active_subprojects_ids - values_for("subproject_id").map(&:to_i)
+ project_clauses << "#{Project.table_name}.id IN (%s)" % ids.join(',')
+ when '!*'
+ # main project only
+ project_clauses << "#{Project.table_name}.id = %d" % project.id
+ else
+ # all subprojects
+ project_clauses << "#{Project.table_name}.lft >= #{project.lft} AND #{Project.table_name}.rgt <= #{project.rgt}"
+ end
+ elsif Setting.display_subprojects_issues?
+ project_clauses << "#{Project.table_name}.lft >= #{project.lft} AND #{Project.table_name}.rgt <= #{project.rgt}"
+ else
+ project_clauses << "#{Project.table_name}.id = %d" % project.id
+ end
+ elsif project
+ project_clauses << "#{Project.table_name}.id = %d" % project.id
+ end
+ project_clauses.any? ? project_clauses.join(' AND ') : nil
+ end
+
+ def statement
+ # filters clauses
+ filters_clauses = []
+ filters.each_key do |field|
+ next if field == "subproject_id"
+ v = values_for(field).clone
+ next unless v and !v.empty?
+ operator = operator_for(field)
+
+ # "me" value substitution
+ if %w(assigned_to_id author_id user_id watcher_id updated_by last_updated_by).include?(field)
+ if v.delete("me")
+ if User.current.logged?
+ v.push(User.current.id.to_s)
+ v += User.current.group_ids.map(&:to_s) if field == 'assigned_to_id'
+ else
+ v.push("0")
+ end
+ end
+ end
+
+ if field == 'project_id'
+ if v.delete('mine')
+ v += User.current.memberships.map(&:project_id).map(&:to_s)
+ end
+ end
+
+ if field =~ /^cf_(\d+)\.cf_(\d+)$/
+ filters_clauses << sql_for_chained_custom_field(field, operator, v, $1, $2)
+ elsif field =~ /cf_(\d+)$/
+ # custom field
+ filters_clauses << sql_for_custom_field(field, operator, v, $1)
+ elsif field =~ /^cf_(\d+)\.(.+)$/
+ filters_clauses << sql_for_custom_field_attribute(field, operator, v, $1, $2)
+ elsif respond_to?(method = "sql_for_#{field.gsub('.','_')}_field")
+ # specific statement
+ filters_clauses << send(method, field, operator, v)
+ else
+ # regular field
+ filters_clauses << '(' + sql_for_field(field, operator, v, queried_table_name, field) + ')'
+ end
+ end if filters and valid?
+
+ if (c = group_by_column) && c.is_a?(QueryCustomFieldColumn)
+ # Excludes results for which the grouped custom field is not visible
+ filters_clauses << c.custom_field.visibility_by_project_condition
+ end
+
+ filters_clauses << project_statement
+ filters_clauses.reject!(&:blank?)
+
+ filters_clauses.any? ? filters_clauses.join(' AND ') : nil
+ end
+
+ # Returns the result count by group or nil if query is not grouped
+ def result_count_by_group
+ grouped_query do |scope|
+ scope.count
+ end
+ end
+
+ # Returns the sum of values for the given column
+ def total_for(column)
+ total_with_scope(column, base_scope)
+ end
+
+ # Returns a hash of the sum of the given column for each group,
+ # or nil if the query is not grouped
+ def total_by_group_for(column)
+ grouped_query do |scope|
+ total_with_scope(column, scope)
+ end
+ end
+
+ def totals
+ totals = totalable_columns.map {|column| [column, total_for(column)]}
+ yield totals if block_given?
+ totals
+ end
+
+ def totals_by_group
+ totals = totalable_columns.map {|column| [column, total_by_group_for(column)]}
+ yield totals if block_given?
+ totals
+ end
+
+ def css_classes
+ s = sort_criteria.first
+ if s.present?
+ key, asc = s
+ "sort-by-#{key.to_s.dasherize} sort-#{asc}"
+ end
+ end
+
+ private
+
+ def grouped_query(&block)
+ r = nil
+ if grouped?
+ begin
+ # Rails3 will raise an (unexpected) RecordNotFound if there's only a nil group value
+ r = yield base_group_scope
+ rescue ActiveRecord::RecordNotFound
+ r = {nil => yield(base_scope)}
+ end
+ c = group_by_column
+ if c.is_a?(QueryCustomFieldColumn)
+ r = r.keys.inject({}) {|h, k| h[c.custom_field.cast_value(k)] = r[k]; h}
+ end
+ end
+ r
+ rescue ::ActiveRecord::StatementInvalid => e
+ raise StatementInvalid.new(e.message)
+ end
+
+ def total_with_scope(column, scope)
+ unless column.is_a?(QueryColumn)
+ column = column.to_sym
+ column = available_totalable_columns.detect {|c| c.name == column}
+ end
+ if column.is_a?(QueryCustomFieldColumn)
+ custom_field = column.custom_field
+ send "total_for_custom_field", custom_field, scope
+ else
+ send "total_for_#{column.name}", scope
+ end
+ rescue ::ActiveRecord::StatementInvalid => e
+ raise StatementInvalid.new(e.message)
+ end
+
+ def base_scope
+ raise "unimplemented"
+ end
+
+ def base_group_scope
+ base_scope.
+ joins(joins_for_order_statement(group_by_statement)).
+ group(group_by_statement)
+ end
+
+ def total_for_custom_field(custom_field, scope, &block)
+ total = custom_field.format.total_for_scope(custom_field, scope)
+ total = map_total(total) {|t| custom_field.format.cast_total_value(custom_field, t)}
+ total
+ end
+
+ def map_total(total, &block)
+ if total.is_a?(Hash)
+ total.keys.each {|k| total[k] = yield total[k]}
+ else
+ total = yield total
+ end
+ total
+ end
+
+ def sql_for_custom_field(field, operator, value, custom_field_id)
+ db_table = CustomValue.table_name
+ db_field = 'value'
+ filter = @available_filters[field]
+ return nil unless filter
+ if filter[:field].format.target_class && filter[:field].format.target_class <= User
+ if value.delete('me')
+ value.push User.current.id.to_s
+ end
+ end
+ not_in = nil
+ if operator == '!'
+ # Makes ! operator work for custom fields with multiple values
+ operator = '='
+ not_in = 'NOT'
+ end
+ customized_key = "id"
+ customized_class = queried_class
+ if field =~ /^(.+)\.cf_/
+ assoc = $1
+ customized_key = "#{assoc}_id"
+ customized_class = queried_class.reflect_on_association(assoc.to_sym).klass.base_class rescue nil
+ raise "Unknown #{queried_class.name} association #{assoc}" unless customized_class
+ end
+ where = sql_for_field(field, operator, value, db_table, db_field, true)
+ if operator =~ /[<>]/
+ where = "(#{where}) AND #{db_table}.#{db_field} <> ''"
+ end
+ "#{queried_table_name}.#{customized_key} #{not_in} IN (" +
+ "SELECT #{customized_class.table_name}.id FROM #{customized_class.table_name}" +
+ " LEFT OUTER JOIN #{db_table} ON #{db_table}.customized_type='#{customized_class}' AND #{db_table}.customized_id=#{customized_class.table_name}.id AND #{db_table}.custom_field_id=#{custom_field_id}" +
+ " WHERE (#{where}) AND (#{filter[:field].visibility_by_project_condition}))"
+ end
+
+ def sql_for_chained_custom_field(field, operator, value, custom_field_id, chained_custom_field_id)
+ not_in = nil
+ if operator == '!'
+ # Makes ! operator work for custom fields with multiple values
+ operator = '='
+ not_in = 'NOT'
+ end
+
+ filter = available_filters[field]
+ target_class = filter[:through].format.target_class
+
+ "#{queried_table_name}.id #{not_in} IN (" +
+ "SELECT customized_id FROM #{CustomValue.table_name}" +
+ " WHERE customized_type='#{queried_class}' AND custom_field_id=#{custom_field_id}" +
+ " AND CAST(CASE value WHEN '' THEN '0' ELSE value END AS decimal(30,0)) IN (" +
+ " SELECT customized_id FROM #{CustomValue.table_name}" +
+ " WHERE customized_type='#{target_class}' AND custom_field_id=#{chained_custom_field_id}" +
+ " AND #{sql_for_field(field, operator, value, CustomValue.table_name, 'value')}))"
+
+ end
+
+ def sql_for_custom_field_attribute(field, operator, value, custom_field_id, attribute)
+ attribute = 'effective_date' if attribute == 'due_date'
+ not_in = nil
+ if operator == '!'
+ # Makes ! operator work for custom fields with multiple values
+ operator = '='
+ not_in = 'NOT'
+ end
+
+ filter = available_filters[field]
+ target_table_name = filter[:field].format.target_class.table_name
+
+ "#{queried_table_name}.id #{not_in} IN (" +
+ "SELECT customized_id FROM #{CustomValue.table_name}" +
+ " WHERE customized_type='#{queried_class}' AND custom_field_id=#{custom_field_id}" +
+ " AND CAST(CASE value WHEN '' THEN '0' ELSE value END AS decimal(30,0)) IN (" +
+ " SELECT id FROM #{target_table_name} WHERE #{sql_for_field(field, operator, value, filter[:field].format.target_class.table_name, attribute)}))"
+ end
+
+ # Helper method to generate the WHERE sql for a +field+, +operator+ and a +value+
+ def sql_for_field(field, operator, value, db_table, db_field, is_custom_filter=false)
+ sql = ''
+ case operator
+ when "="
+ if value.any?
+ case type_for(field)
+ when :date, :date_past
+ sql = date_clause(db_table, db_field, parse_date(value.first), parse_date(value.first), is_custom_filter)
+ when :integer
+ int_values = value.first.to_s.scan(/[+-]?\d+/).map(&:to_i).join(",")
+ if int_values.present?
+ if is_custom_filter
+ sql = "(#{db_table}.#{db_field} <> '' AND CAST(CASE #{db_table}.#{db_field} WHEN '' THEN '0' ELSE #{db_table}.#{db_field} END AS decimal(30,3)) IN (#{int_values}))"
+ else
+ sql = "#{db_table}.#{db_field} IN (#{int_values})"
+ end
+ else
+ sql = "1=0"
+ end
+ when :float
+ if is_custom_filter
+ sql = "(#{db_table}.#{db_field} <> '' AND CAST(CASE #{db_table}.#{db_field} WHEN '' THEN '0' ELSE #{db_table}.#{db_field} END AS decimal(30,3)) BETWEEN #{value.first.to_f - 1e-5} AND #{value.first.to_f + 1e-5})"
+ else
+ sql = "#{db_table}.#{db_field} BETWEEN #{value.first.to_f - 1e-5} AND #{value.first.to_f + 1e-5}"
+ end
+ else
+ sql = queried_class.send(:sanitize_sql_for_conditions, ["#{db_table}.#{db_field} IN (?)", value])
+ end
+ else
+ # IN an empty set
+ sql = "1=0"
+ end
+ when "!"
+ if value.any?
+ sql = queried_class.send(:sanitize_sql_for_conditions, ["(#{db_table}.#{db_field} IS NULL OR #{db_table}.#{db_field} NOT IN (?))", value])
+ else
+ # NOT IN an empty set
+ sql = "1=1"
+ end
+ when "!*"
+ sql = "#{db_table}.#{db_field} IS NULL"
+ sql << " OR #{db_table}.#{db_field} = ''" if (is_custom_filter || [:text, :string].include?(type_for(field)))
+ when "*"
+ sql = "#{db_table}.#{db_field} IS NOT NULL"
+ sql << " AND #{db_table}.#{db_field} <> ''" if is_custom_filter
+ when ">="
+ if [:date, :date_past].include?(type_for(field))
+ sql = date_clause(db_table, db_field, parse_date(value.first), nil, is_custom_filter)
+ else
+ if is_custom_filter
+ sql = "(#{db_table}.#{db_field} <> '' AND CAST(CASE #{db_table}.#{db_field} WHEN '' THEN '0' ELSE #{db_table}.#{db_field} END AS decimal(30,3)) >= #{value.first.to_f})"
+ else
+ sql = "#{db_table}.#{db_field} >= #{value.first.to_f}"
+ end
+ end
+ when "<="
+ if [:date, :date_past].include?(type_for(field))
+ sql = date_clause(db_table, db_field, nil, parse_date(value.first), is_custom_filter)
+ else
+ if is_custom_filter
+ sql = "(#{db_table}.#{db_field} <> '' AND CAST(CASE #{db_table}.#{db_field} WHEN '' THEN '0' ELSE #{db_table}.#{db_field} END AS decimal(30,3)) <= #{value.first.to_f})"
+ else
+ sql = "#{db_table}.#{db_field} <= #{value.first.to_f}"
+ end
+ end
+ when "><"
+ if [:date, :date_past].include?(type_for(field))
+ sql = date_clause(db_table, db_field, parse_date(value[0]), parse_date(value[1]), is_custom_filter)
+ else
+ if is_custom_filter
+ sql = "(#{db_table}.#{db_field} <> '' AND CAST(CASE #{db_table}.#{db_field} WHEN '' THEN '0' ELSE #{db_table}.#{db_field} END AS decimal(30,3)) BETWEEN #{value[0].to_f} AND #{value[1].to_f})"
+ else
+ sql = "#{db_table}.#{db_field} BETWEEN #{value[0].to_f} AND #{value[1].to_f}"
+ end
+ end
+ when "o"
+ sql = "#{queried_table_name}.status_id IN (SELECT id FROM #{IssueStatus.table_name} WHERE is_closed=#{self.class.connection.quoted_false})" if field == "status_id"
+ when "c"
+ sql = "#{queried_table_name}.status_id IN (SELECT id FROM #{IssueStatus.table_name} WHERE is_closed=#{self.class.connection.quoted_true})" if field == "status_id"
+ when ">t-"
+ # >= today - n days
+ sql = relative_date_clause(db_table, db_field, - value.first.to_i, nil, is_custom_filter)
+ when "t+"
+ # >= today + n days
+ sql = relative_date_clause(db_table, db_field, value.first.to_i, nil, is_custom_filter)
+ when "= first_day_of_week ? day_of_week - first_day_of_week : day_of_week + 7 - first_day_of_week)
+ sql = relative_date_clause(db_table, db_field, - days_ago, - days_ago + 6, is_custom_filter)
+ when "lw"
+ # = last week
+ first_day_of_week = l(:general_first_day_of_week).to_i
+ day_of_week = User.current.today.cwday
+ days_ago = (day_of_week >= first_day_of_week ? day_of_week - first_day_of_week : day_of_week + 7 - first_day_of_week)
+ sql = relative_date_clause(db_table, db_field, - days_ago - 7, - days_ago - 1, is_custom_filter)
+ when "l2w"
+ # = last 2 weeks
+ first_day_of_week = l(:general_first_day_of_week).to_i
+ day_of_week = User.current.today.cwday
+ days_ago = (day_of_week >= first_day_of_week ? day_of_week - first_day_of_week : day_of_week + 7 - first_day_of_week)
+ sql = relative_date_clause(db_table, db_field, - days_ago - 14, - days_ago - 1, is_custom_filter)
+ when "m"
+ # = this month
+ date = User.current.today
+ sql = date_clause(db_table, db_field, date.beginning_of_month, date.end_of_month, is_custom_filter)
+ when "lm"
+ # = last month
+ date = User.current.today.prev_month
+ sql = date_clause(db_table, db_field, date.beginning_of_month, date.end_of_month, is_custom_filter)
+ when "y"
+ # = this year
+ date = User.current.today
+ sql = date_clause(db_table, db_field, date.beginning_of_year, date.end_of_year, is_custom_filter)
+ when "~"
+ sql = sql_contains("#{db_table}.#{db_field}", value.first)
+ when "!~"
+ sql = sql_contains("#{db_table}.#{db_field}", value.first, false)
+ else
+ raise "Unknown query operator #{operator}"
+ end
+
+ return sql
+ end
+
+ # Returns a SQL LIKE statement with wildcards
+ def sql_contains(db_field, value, match=true)
+ queried_class.send :sanitize_sql_for_conditions,
+ [Redmine::Database.like(db_field, '?', :match => match), "%#{value}%"]
+ end
+
+ # Adds a filter for the given custom field
+ def add_custom_field_filter(field, assoc=nil)
+ options = field.query_filter_options(self)
+
+ filter_id = "cf_#{field.id}"
+ filter_name = field.name
+ if assoc.present?
+ filter_id = "#{assoc}.#{filter_id}"
+ filter_name = l("label_attribute_of_#{assoc}", :name => filter_name)
+ end
+ add_available_filter filter_id, options.merge({
+ :name => filter_name,
+ :field => field
+ })
+ end
+
+ # Adds filters for custom fields associated to the custom field target class
+ # Eg. having a version custom field "Milestone" for issues and a date custom field "Release date"
+ # for versions, it will add an issue filter on Milestone'e Release date.
+ def add_chained_custom_field_filters(field)
+ klass = field.format.target_class
+ if klass
+ CustomField.where(:is_filter => true, :type => "#{klass.name}CustomField").each do |chained|
+ options = chained.query_filter_options(self)
+
+ filter_id = "cf_#{field.id}.cf_#{chained.id}"
+ filter_name = chained.name
+
+ add_available_filter filter_id, options.merge({
+ :name => l(:label_attribute_of_object, :name => chained.name, :object_name => field.name),
+ :field => chained,
+ :through => field
+ })
+ end
+ end
+ end
+
+ # Adds filters for the given custom fields scope
+ def add_custom_fields_filters(scope, assoc=nil)
+ scope.visible.where(:is_filter => true).sorted.each do |field|
+ add_custom_field_filter(field, assoc)
+ if assoc.nil?
+ add_chained_custom_field_filters(field)
+
+ if field.format.target_class && field.format.target_class == Version
+ add_available_filter "cf_#{field.id}.due_date",
+ :type => :date,
+ :field => field,
+ :name => l(:label_attribute_of_object, :name => l(:field_effective_date), :object_name => field.name)
+
+ add_available_filter "cf_#{field.id}.status",
+ :type => :list,
+ :field => field,
+ :name => l(:label_attribute_of_object, :name => l(:field_status), :object_name => field.name),
+ :values => Version::VERSION_STATUSES.map{|s| [l("version_status_#{s}"), s] }
+ end
+ end
+ end
+ end
+
+ # Adds filters for the given associations custom fields
+ def add_associations_custom_fields_filters(*associations)
+ fields_by_class = CustomField.visible.where(:is_filter => true).group_by(&:class)
+ associations.each do |assoc|
+ association_klass = queried_class.reflect_on_association(assoc).klass
+ fields_by_class.each do |field_class, fields|
+ if field_class.customized_class <= association_klass
+ fields.sort.each do |field|
+ add_custom_field_filter(field, assoc)
+ end
+ end
+ end
+ end
+ end
+
+ def quoted_time(time, is_custom_filter)
+ if is_custom_filter
+ # Custom field values are stored as strings in the DB
+ # using this format that does not depend on DB date representation
+ time.strftime("%Y-%m-%d %H:%M:%S")
+ else
+ self.class.connection.quoted_date(time)
+ end
+ end
+
+ def date_for_user_time_zone(y, m, d)
+ if tz = User.current.time_zone
+ tz.local y, m, d
+ else
+ Time.local y, m, d
+ end
+ end
+
+ # Returns a SQL clause for a date or datetime field.
+ def date_clause(table, field, from, to, is_custom_filter)
+ s = []
+ if from
+ if from.is_a?(Date)
+ from = date_for_user_time_zone(from.year, from.month, from.day).yesterday.end_of_day
+ else
+ from = from - 1 # second
+ end
+ if self.class.default_timezone == :utc
+ from = from.utc
+ end
+ s << ("#{table}.#{field} > '%s'" % [quoted_time(from, is_custom_filter)])
+ end
+ if to
+ if to.is_a?(Date)
+ to = date_for_user_time_zone(to.year, to.month, to.day).end_of_day
+ end
+ if self.class.default_timezone == :utc
+ to = to.utc
+ end
+ s << ("#{table}.#{field} <= '%s'" % [quoted_time(to, is_custom_filter)])
+ end
+ s.join(' AND ')
+ end
+
+ # Returns a SQL clause for a date or datetime field using relative dates.
+ def relative_date_clause(table, field, days_from, days_to, is_custom_filter)
+ date_clause(table, field, (days_from ? User.current.today + days_from : nil), (days_to ? User.current.today + days_to : nil), is_custom_filter)
+ end
+
+ # Returns a Date or Time from the given filter value
+ def parse_date(arg)
+ if arg.to_s =~ /\A\d{4}-\d{2}-\d{2}T/
+ Time.parse(arg) rescue nil
+ else
+ Date.parse(arg) rescue nil
+ end
+ end
+
+ # Additional joins required for the given sort options
+ def joins_for_order_statement(order_options)
+ joins = []
+
+ if order_options
+ order_options.scan(/cf_\d+/).uniq.each do |name|
+ column = available_columns.detect {|c| c.name.to_s == name}
+ join = column && column.custom_field.join_for_order_statement
+ if join
+ joins << join
+ end
+ end
+ end
+
+ joins.any? ? joins.join(' ') : nil
+ end
+end
diff --git a/app/models/repository.rb b/app/models/repository.rb
new file mode 100644
index 0000000..fd3a9fb
--- /dev/null
+++ b/app/models/repository.rb
@@ -0,0 +1,516 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class ScmFetchError < Exception; end
+
+class Repository < ActiveRecord::Base
+ include Redmine::Ciphering
+ include Redmine::SafeAttributes
+
+ # Maximum length for repository identifiers
+ IDENTIFIER_MAX_LENGTH = 255
+
+ belongs_to :project
+ has_many :changesets, lambda{order("#{Changeset.table_name}.committed_on DESC, #{Changeset.table_name}.id DESC")}
+ has_many :filechanges, :class_name => 'Change', :through => :changesets
+
+ serialize :extra_info
+
+ before_validation :normalize_identifier
+ before_save :check_default
+
+ # Raw SQL to delete changesets and changes in the database
+ # has_many :changesets, :dependent => :destroy is too slow for big repositories
+ before_destroy :clear_changesets
+
+ validates_length_of :login, maximum: 60, allow_nil: true
+ validates_length_of :password, :maximum => 255, :allow_nil => true
+ validates_length_of :root_url, :url, maximum: 255
+ validates_length_of :identifier, :maximum => IDENTIFIER_MAX_LENGTH, :allow_blank => true
+ validates_uniqueness_of :identifier, :scope => :project_id
+ validates_exclusion_of :identifier, :in => %w(browse show entry raw changes annotate diff statistics graph revisions revision)
+ # donwcase letters, digits, dashes, underscores but not digits only
+ validates_format_of :identifier, :with => /\A(?!\d+$)[a-z0-9\-_]*\z/, :allow_blank => true
+ # Checks if the SCM is enabled when creating a repository
+ validate :repo_create_validation, :on => :create
+ validate :validate_repository_path
+ attr_protected :id
+
+ safe_attributes 'identifier',
+ 'login',
+ 'password',
+ 'path_encoding',
+ 'log_encoding',
+ 'is_default'
+
+ safe_attributes 'url',
+ :if => lambda {|repository, user| repository.new_record?}
+
+ def repo_create_validation
+ unless Setting.enabled_scm.include?(self.class.name.demodulize)
+ errors.add(:type, :invalid)
+ end
+ end
+
+ def self.human_attribute_name(attribute_key_name, *args)
+ attr_name = attribute_key_name.to_s
+ if attr_name == "log_encoding"
+ attr_name = "commit_logs_encoding"
+ end
+ super(attr_name, *args)
+ end
+
+ # Removes leading and trailing whitespace
+ def url=(arg)
+ write_attribute(:url, arg ? arg.to_s.strip : nil)
+ end
+
+ # Removes leading and trailing whitespace
+ def root_url=(arg)
+ write_attribute(:root_url, arg ? arg.to_s.strip : nil)
+ end
+
+ def password
+ read_ciphered_attribute(:password)
+ end
+
+ def password=(arg)
+ write_ciphered_attribute(:password, arg)
+ end
+
+ def scm_adapter
+ self.class.scm_adapter_class
+ end
+
+ def scm
+ unless @scm
+ @scm = self.scm_adapter.new(url, root_url,
+ login, password, path_encoding)
+ if root_url.blank? && @scm.root_url.present?
+ update_attribute(:root_url, @scm.root_url)
+ end
+ end
+ @scm
+ end
+
+ def scm_name
+ self.class.scm_name
+ end
+
+ def name
+ if identifier.present?
+ identifier
+ elsif is_default?
+ l(:field_repository_is_default)
+ else
+ scm_name
+ end
+ end
+
+ def identifier=(identifier)
+ super unless identifier_frozen?
+ end
+
+ def identifier_frozen?
+ errors[:identifier].blank? && !(new_record? || identifier.blank?)
+ end
+
+ def identifier_param
+ if is_default?
+ nil
+ elsif identifier.present?
+ identifier
+ else
+ id.to_s
+ end
+ end
+
+ def <=>(repository)
+ if is_default?
+ -1
+ elsif repository.is_default?
+ 1
+ else
+ identifier.to_s <=> repository.identifier.to_s
+ end
+ end
+
+ def self.find_by_identifier_param(param)
+ if param.to_s =~ /^\d+$/
+ find_by_id(param)
+ else
+ find_by_identifier(param)
+ end
+ end
+
+ # TODO: should return an empty hash instead of nil to avoid many ||{}
+ def extra_info
+ h = read_attribute(:extra_info)
+ h.is_a?(Hash) ? h : nil
+ end
+
+ def merge_extra_info(arg)
+ h = extra_info || {}
+ return h if arg.nil?
+ h.merge!(arg)
+ write_attribute(:extra_info, h)
+ end
+
+ def report_last_commit
+ true
+ end
+
+ def supports_cat?
+ scm.supports_cat?
+ end
+
+ def supports_annotate?
+ scm.supports_annotate?
+ end
+
+ def supports_all_revisions?
+ true
+ end
+
+ def supports_directory_revisions?
+ false
+ end
+
+ def supports_revision_graph?
+ false
+ end
+
+ def entry(path=nil, identifier=nil)
+ scm.entry(path, identifier)
+ end
+
+ def scm_entries(path=nil, identifier=nil)
+ scm.entries(path, identifier)
+ end
+ protected :scm_entries
+
+ def entries(path=nil, identifier=nil)
+ entries = scm_entries(path, identifier)
+ load_entries_changesets(entries)
+ entries
+ end
+
+ def branches
+ scm.branches
+ end
+
+ def tags
+ scm.tags
+ end
+
+ def default_branch
+ nil
+ end
+
+ def properties(path, identifier=nil)
+ scm.properties(path, identifier)
+ end
+
+ def cat(path, identifier=nil)
+ scm.cat(path, identifier)
+ end
+
+ def diff(path, rev, rev_to)
+ scm.diff(path, rev, rev_to)
+ end
+
+ def diff_format_revisions(cs, cs_to, sep=':')
+ text = ""
+ text << cs_to.format_identifier + sep if cs_to
+ text << cs.format_identifier if cs
+ text
+ end
+
+ # Returns a path relative to the url of the repository
+ def relative_path(path)
+ path
+ end
+
+ # Finds and returns a revision with a number or the beginning of a hash
+ def find_changeset_by_name(name)
+ return nil if name.blank?
+ s = name.to_s
+ if s.match(/^\d*$/)
+ changesets.where("revision = ?", s).first
+ else
+ changesets.where("revision LIKE ?", s + '%').first
+ end
+ end
+
+ def latest_changeset
+ @latest_changeset ||= changesets.first
+ end
+
+ # Returns the latest changesets for +path+
+ # Default behaviour is to search in cached changesets
+ def latest_changesets(path, rev, limit=10)
+ if path.blank?
+ changesets.
+ reorder("#{Changeset.table_name}.committed_on DESC, #{Changeset.table_name}.id DESC").
+ limit(limit).
+ preload(:user).
+ to_a
+ else
+ filechanges.
+ where("path = ?", path.with_leading_slash).
+ reorder("#{Changeset.table_name}.committed_on DESC, #{Changeset.table_name}.id DESC").
+ limit(limit).
+ preload(:changeset => :user).
+ collect(&:changeset)
+ end
+ end
+
+ def scan_changesets_for_issue_ids
+ self.changesets.each(&:scan_comment_for_issue_ids)
+ end
+
+ # Returns an array of committers usernames and associated user_id
+ def committers
+ @committers ||= Changeset.where(:repository_id => id).distinct.pluck(:committer, :user_id)
+ end
+
+ # Maps committers username to a user ids
+ def committer_ids=(h)
+ if h.is_a?(Hash)
+ committers.each do |committer, user_id|
+ new_user_id = h[committer]
+ if new_user_id && (new_user_id.to_i != user_id.to_i)
+ new_user_id = (new_user_id.to_i > 0 ? new_user_id.to_i : nil)
+ Changeset.where(["repository_id = ? AND committer = ?", id, committer]).
+ update_all("user_id = #{new_user_id.nil? ? 'NULL' : new_user_id}")
+ end
+ end
+ @committers = nil
+ @found_committer_users = nil
+ true
+ else
+ false
+ end
+ end
+
+ # Returns the Redmine User corresponding to the given +committer+
+ # It will return nil if the committer is not yet mapped and if no User
+ # with the same username or email was found
+ def find_committer_user(committer)
+ unless committer.blank?
+ @found_committer_users ||= {}
+ return @found_committer_users[committer] if @found_committer_users.has_key?(committer)
+
+ user = nil
+ c = changesets.where(:committer => committer).
+ includes(:user).references(:user).first
+ if c && c.user
+ user = c.user
+ elsif committer.strip =~ /^([^<]+)(<(.*)>)?$/
+ username, email = $1.strip, $3
+ u = User.find_by_login(username)
+ u ||= User.find_by_mail(email) unless email.blank?
+ user = u
+ end
+ @found_committer_users[committer] = user
+ user
+ end
+ end
+
+ def repo_log_encoding
+ encoding = log_encoding.to_s.strip
+ encoding.blank? ? 'UTF-8' : encoding
+ end
+
+ # Fetches new changesets for all repositories of active projects
+ # Can be called periodically by an external script
+ # eg. ruby script/runner "Repository.fetch_changesets"
+ def self.fetch_changesets
+ Project.active.has_module(:repository).all.each do |project|
+ project.repositories.each do |repository|
+ begin
+ repository.fetch_changesets
+ rescue Redmine::Scm::Adapters::CommandFailed => e
+ logger.error "scm: error during fetching changesets: #{e.message}"
+ end
+ end
+ end
+ end
+
+ # scan changeset comments to find related and fixed issues for all repositories
+ def self.scan_changesets_for_issue_ids
+ all.each(&:scan_changesets_for_issue_ids)
+ end
+
+ def self.scm_name
+ 'Abstract'
+ end
+
+ def self.available_scm
+ subclasses.collect {|klass| [klass.scm_name, klass.name]}
+ end
+
+ def self.factory(klass_name, *args)
+ repository_class(klass_name).new(*args) rescue nil
+ end
+
+ def self.repository_class(class_name)
+ class_name = class_name.to_s.camelize
+ if Redmine::Scm::Base.all.include?(class_name)
+ "Repository::#{class_name}".constantize
+ end
+ end
+
+ def self.scm_adapter_class
+ nil
+ end
+
+ def self.scm_command
+ ret = ""
+ begin
+ ret = self.scm_adapter_class.client_command if self.scm_adapter_class
+ rescue Exception => e
+ logger.error "scm: error during get command: #{e.message}"
+ end
+ ret
+ end
+
+ def self.scm_version_string
+ ret = ""
+ begin
+ ret = self.scm_adapter_class.client_version_string if self.scm_adapter_class
+ rescue Exception => e
+ logger.error "scm: error during get version string: #{e.message}"
+ end
+ ret
+ end
+
+ def self.scm_available
+ ret = false
+ begin
+ ret = self.scm_adapter_class.client_available if self.scm_adapter_class
+ rescue Exception => e
+ logger.error "scm: error during get scm available: #{e.message}"
+ end
+ ret
+ end
+
+ def set_as_default?
+ new_record? && project && Repository.where(:project_id => project.id).empty?
+ end
+
+ # Returns a hash with statistics by author in the following form:
+ # {
+ # "John Smith" => { :commits => 45, :changes => 324 },
+ # "Bob" => { ... }
+ # }
+ #
+ # Notes:
+ # - this hash honnors the users mapping defined for the repository
+ def stats_by_author
+ commits = Changeset.where("repository_id = ?", id).select("committer, user_id, count(*) as count").group("committer, user_id")
+
+ #TODO: restore ordering ; this line probably never worked
+ #commits.to_a.sort! {|x, y| x.last <=> y.last}
+
+ changes = Change.joins(:changeset).where("#{Changeset.table_name}.repository_id = ?", id).select("committer, user_id, count(*) as count").group("committer, user_id")
+
+ user_ids = changesets.map(&:user_id).compact.uniq
+ authors_names = User.where(:id => user_ids).inject({}) do |memo, user|
+ memo[user.id] = user.to_s
+ memo
+ end
+
+ (commits + changes).inject({}) do |hash, element|
+ mapped_name = element.committer
+ if username = authors_names[element.user_id.to_i]
+ mapped_name = username
+ end
+ hash[mapped_name] ||= { :commits_count => 0, :changes_count => 0 }
+ if element.is_a?(Changeset)
+ hash[mapped_name][:commits_count] += element.count.to_i
+ else
+ hash[mapped_name][:changes_count] += element.count.to_i
+ end
+ hash
+ end
+ end
+
+ # Returns a scope of changesets that come from the same commit as the given changeset
+ # in different repositories that point to the same backend
+ def same_commits_in_scope(scope, changeset)
+ scope = scope.joins(:repository).where(:repositories => {:url => url, :root_url => root_url, :type => type})
+ if changeset.scmid.present?
+ scope = scope.where(:scmid => changeset.scmid)
+ else
+ scope = scope.where(:revision => changeset.revision)
+ end
+ scope
+ end
+
+ protected
+
+ # Validates repository url based against an optional regular expression
+ # that can be set in the Redmine configuration file.
+ def validate_repository_path(attribute=:url)
+ regexp = Redmine::Configuration["scm_#{scm_name.to_s.downcase}_path_regexp"]
+ if changes[attribute] && regexp.present?
+ regexp = regexp.to_s.strip.gsub('%project%') {Regexp.escape(project.try(:identifier).to_s)}
+ unless send(attribute).to_s.match(Regexp.new("\\A#{regexp}\\z"))
+ errors.add(attribute, :invalid)
+ end
+ end
+ end
+
+ def normalize_identifier
+ self.identifier = identifier.to_s.strip
+ end
+
+ def check_default
+ if !is_default? && set_as_default?
+ self.is_default = true
+ end
+ if is_default? && is_default_changed?
+ Repository.where(["project_id = ?", project_id]).update_all(["is_default = ?", false])
+ end
+ end
+
+ def load_entries_changesets(entries)
+ if entries
+ entries.each do |entry|
+ if entry.lastrev && entry.lastrev.identifier
+ entry.changeset = find_changeset_by_name(entry.lastrev.identifier)
+ end
+ end
+ end
+ end
+
+ private
+
+ # Deletes repository data
+ def clear_changesets
+ cs = Changeset.table_name
+ ch = Change.table_name
+ ci = "#{table_name_prefix}changesets_issues#{table_name_suffix}"
+ cp = "#{table_name_prefix}changeset_parents#{table_name_suffix}"
+
+ self.class.connection.delete("DELETE FROM #{ch} WHERE #{ch}.changeset_id IN (SELECT #{cs}.id FROM #{cs} WHERE #{cs}.repository_id = #{id})")
+ self.class.connection.delete("DELETE FROM #{ci} WHERE #{ci}.changeset_id IN (SELECT #{cs}.id FROM #{cs} WHERE #{cs}.repository_id = #{id})")
+ self.class.connection.delete("DELETE FROM #{cp} WHERE #{cp}.changeset_id IN (SELECT #{cs}.id FROM #{cs} WHERE #{cs}.repository_id = #{id})")
+ self.class.connection.delete("DELETE FROM #{cs} WHERE #{cs}.repository_id = #{id}")
+ end
+end
diff --git a/app/models/repository/bazaar.rb b/app/models/repository/bazaar.rb
new file mode 100644
index 0000000..9cc84da
--- /dev/null
+++ b/app/models/repository/bazaar.rb
@@ -0,0 +1,124 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'redmine/scm/adapters/bazaar_adapter'
+
+class Repository::Bazaar < Repository
+ attr_protected :root_url
+ validates_presence_of :url, :log_encoding
+
+ def self.human_attribute_name(attribute_key_name, *args)
+ attr_name = attribute_key_name.to_s
+ if attr_name == "url"
+ attr_name = "path_to_repository"
+ end
+ super(attr_name, *args)
+ end
+
+ def self.scm_adapter_class
+ Redmine::Scm::Adapters::BazaarAdapter
+ end
+
+ def self.scm_name
+ 'Bazaar'
+ end
+
+ def entry(path=nil, identifier=nil)
+ scm.bzr_path_encodig = log_encoding
+ scm.entry(path, identifier)
+ end
+
+ def cat(path, identifier=nil)
+ scm.bzr_path_encodig = log_encoding
+ scm.cat(path, identifier)
+ end
+
+ def annotate(path, identifier=nil)
+ scm.bzr_path_encodig = log_encoding
+ scm.annotate(path, identifier)
+ end
+
+ def diff(path, rev, rev_to)
+ scm.bzr_path_encodig = log_encoding
+ scm.diff(path, rev, rev_to)
+ end
+
+ def scm_entries(path=nil, identifier=nil)
+ scm.bzr_path_encodig = log_encoding
+ entries = scm.entries(path, identifier)
+ if entries
+ entries.each do |e|
+ next if e.lastrev.revision.blank?
+ # Set the filesize unless browsing a specific revision
+ if identifier.nil? && e.is_file?
+ full_path = File.join(root_url, e.path)
+ e.size = File.stat(full_path).size if File.file?(full_path)
+ end
+ c = Change.
+ includes(:changeset).
+ where("#{Change.table_name}.revision = ? and #{Changeset.table_name}.repository_id = ?", e.lastrev.revision, id).
+ order("#{Changeset.table_name}.revision DESC").
+ first
+ if c
+ e.lastrev.identifier = c.changeset.revision
+ e.lastrev.name = c.changeset.revision
+ e.lastrev.author = c.changeset.committer
+ end
+ end
+ end
+ entries
+ end
+ protected :scm_entries
+
+ def fetch_changesets
+ scm.bzr_path_encodig = log_encoding
+ scm_info = scm.info
+ if scm_info
+ # latest revision found in database
+ db_revision = latest_changeset ? latest_changeset.revision.to_i : 0
+ # latest revision in the repository
+ scm_revision = scm_info.lastrev.identifier.to_i
+ if db_revision < scm_revision
+ logger.debug "Fetching changesets for repository #{url}" if logger && logger.debug?
+ identifier_from = db_revision + 1
+ while (identifier_from <= scm_revision)
+ # loads changesets by batches of 200
+ identifier_to = [identifier_from + 199, scm_revision].min
+ revisions = scm.revisions('', identifier_to, identifier_from)
+ transaction do
+ revisions.reverse_each do |revision|
+ changeset = Changeset.create(:repository => self,
+ :revision => revision.identifier,
+ :committer => revision.author,
+ :committed_on => revision.time,
+ :scmid => revision.scmid,
+ :comments => revision.message)
+
+ revision.paths.each do |change|
+ Change.create(:changeset => changeset,
+ :action => change[:action],
+ :path => change[:path],
+ :revision => change[:revision])
+ end
+ end
+ end unless revisions.nil?
+ identifier_from = identifier_to + 1
+ end
+ end
+ end
+ end
+end
diff --git a/app/models/repository/cvs.rb b/app/models/repository/cvs.rb
new file mode 100644
index 0000000..4d4a51c
--- /dev/null
+++ b/app/models/repository/cvs.rb
@@ -0,0 +1,213 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'redmine/scm/adapters/cvs_adapter'
+require 'digest/sha1'
+
+class Repository::Cvs < Repository
+ validates_presence_of :url, :root_url, :log_encoding
+
+ safe_attributes 'root_url',
+ :if => lambda {|repository, user| repository.new_record?}
+
+ def self.human_attribute_name(attribute_key_name, *args)
+ attr_name = attribute_key_name.to_s
+ if attr_name == "root_url"
+ attr_name = "cvsroot"
+ elsif attr_name == "url"
+ attr_name = "cvs_module"
+ end
+ super(attr_name, *args)
+ end
+
+ def self.scm_adapter_class
+ Redmine::Scm::Adapters::CvsAdapter
+ end
+
+ def self.scm_name
+ 'CVS'
+ end
+
+ def entry(path=nil, identifier=nil)
+ rev = identifier.nil? ? nil : changesets.find_by_revision(identifier)
+ scm.entry(path, rev.nil? ? nil : rev.committed_on)
+ end
+
+ def scm_entries(path=nil, identifier=nil)
+ rev = nil
+ if ! identifier.nil?
+ rev = changesets.find_by_revision(identifier)
+ return nil if rev.nil?
+ end
+ entries = scm.entries(path, rev.nil? ? nil : rev.committed_on)
+ if entries
+ entries.each() do |entry|
+ if ( ! entry.lastrev.nil? ) && ( ! entry.lastrev.revision.nil? )
+ change = filechanges.where(
+ :revision => entry.lastrev.revision,
+ :path => scm.with_leading_slash(entry.path)).first
+ if change
+ entry.lastrev.identifier = change.changeset.revision
+ entry.lastrev.revision = change.changeset.revision
+ entry.lastrev.author = change.changeset.committer
+ # entry.lastrev.branch = change.branch
+ end
+ end
+ end
+ end
+ entries
+ end
+ protected :scm_entries
+
+ def cat(path, identifier=nil)
+ rev = nil
+ if ! identifier.nil?
+ rev = changesets.find_by_revision(identifier)
+ return nil if rev.nil?
+ end
+ scm.cat(path, rev.nil? ? nil : rev.committed_on)
+ end
+
+ def annotate(path, identifier=nil)
+ rev = nil
+ if ! identifier.nil?
+ rev = changesets.find_by_revision(identifier)
+ return nil if rev.nil?
+ end
+ scm.annotate(path, rev.nil? ? nil : rev.committed_on)
+ end
+
+ def diff(path, rev, rev_to)
+ # convert rev to revision. CVS can't handle changesets here
+ diff=[]
+ changeset_from = changesets.find_by_revision(rev)
+ if rev_to.to_i > 0
+ changeset_to = changesets.find_by_revision(rev_to)
+ end
+ changeset_from.filechanges.each() do |change_from|
+ revision_from = nil
+ revision_to = nil
+ if path.nil? || (change_from.path.starts_with? scm.with_leading_slash(path))
+ revision_from = change_from.revision
+ end
+ if revision_from
+ if changeset_to
+ changeset_to.filechanges.each() do |change_to|
+ revision_to = change_to.revision if change_to.path == change_from.path
+ end
+ end
+ unless revision_to
+ revision_to = scm.get_previous_revision(revision_from)
+ end
+ file_diff = scm.diff(change_from.path, revision_from, revision_to)
+ diff = diff + file_diff unless file_diff.nil?
+ end
+ end
+ return diff
+ end
+
+ def fetch_changesets
+ # some nifty bits to introduce a commit-id with cvs
+ # natively cvs doesn't provide any kind of changesets,
+ # there is only a revision per file.
+ # we now take a guess using the author, the commitlog and the commit-date.
+
+ # last one is the next step to take. the commit-date is not equal for all
+ # commits in one changeset. cvs update the commit-date when the *,v file was touched. so
+ # we use a small delta here, to merge all changes belonging to _one_ changeset
+ time_delta = 10.seconds
+ fetch_since = latest_changeset ? latest_changeset.committed_on : nil
+ transaction do
+ tmp_rev_num = 1
+ scm.revisions('', fetch_since, nil, :log_encoding => repo_log_encoding) do |revision|
+ # only add the change to the database, if it doen't exists. the cvs log
+ # is not exclusive at all.
+ tmp_time = revision.time.clone
+ unless filechanges.find_by_path_and_revision(
+ scm.with_leading_slash(revision.paths[0][:path]),
+ revision.paths[0][:revision]
+ )
+ cmt = Changeset.normalize_comments(revision.message, repo_log_encoding)
+ author_utf8 = Changeset.to_utf8(revision.author, repo_log_encoding)
+ cs = changesets.where(
+ :committed_on => tmp_time - time_delta .. tmp_time + time_delta,
+ :committer => author_utf8,
+ :comments => cmt
+ ).first
+ # create a new changeset....
+ unless cs
+ # we use a temporary revision number here (just for inserting)
+ # later on, we calculate a continuous positive number
+ tmp_time2 = tmp_time.clone.gmtime
+ branch = revision.paths[0][:branch]
+ scmid = branch + "-" + tmp_time2.strftime("%Y%m%d-%H%M%S")
+ cs = Changeset.create(:repository => self,
+ :revision => "tmp#{tmp_rev_num}",
+ :scmid => scmid,
+ :committer => revision.author,
+ :committed_on => tmp_time,
+ :comments => revision.message)
+ tmp_rev_num += 1
+ end
+ # convert CVS-File-States to internal Action-abbreviations
+ # default action is (M)odified
+ action = "M"
+ if revision.paths[0][:action] == "Exp" && revision.paths[0][:revision] == "1.1"
+ action = "A" # add-action always at first revision (= 1.1)
+ elsif revision.paths[0][:action] == "dead"
+ action = "D" # dead-state is similar to Delete
+ end
+ Change.create(
+ :changeset => cs,
+ :action => action,
+ :path => scm.with_leading_slash(revision.paths[0][:path]),
+ :revision => revision.paths[0][:revision],
+ :branch => revision.paths[0][:branch]
+ )
+ end
+ end
+
+ # Renumber new changesets in chronological order
+ Changeset.
+ order('committed_on ASC, id ASC').
+ where("repository_id = ? AND revision LIKE 'tmp%'", id).
+ each do |changeset|
+ changeset.update_attribute :revision, next_revision_number
+ end
+ end # transaction
+ @current_revision_number = nil
+ end
+
+ protected
+
+ # Overrides Repository#validate_repository_path to validate
+ # against root_url attribute.
+ def validate_repository_path(attribute=:root_url)
+ super(attribute)
+ end
+
+ private
+
+ # Returns the next revision number to assign to a CVS changeset
+ def next_revision_number
+ # Need to retrieve existing revision numbers to sort them as integers
+ sql = "SELECT revision FROM #{Changeset.table_name} "
+ sql << "WHERE repository_id = #{id} AND revision NOT LIKE 'tmp%'"
+ @current_revision_number ||= (self.class.connection.select_values(sql).collect(&:to_i).max || 0)
+ @current_revision_number += 1
+ end
+end
diff --git a/app/models/repository/darcs.rb b/app/models/repository/darcs.rb
new file mode 100644
index 0000000..8c1302c
--- /dev/null
+++ b/app/models/repository/darcs.rb
@@ -0,0 +1,114 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'redmine/scm/adapters/darcs_adapter'
+
+class Repository::Darcs < Repository
+ validates_presence_of :url, :log_encoding
+
+ def self.human_attribute_name(attribute_key_name, *args)
+ attr_name = attribute_key_name.to_s
+ if attr_name == "url"
+ attr_name = "path_to_repository"
+ end
+ super(attr_name, *args)
+ end
+
+ def self.scm_adapter_class
+ Redmine::Scm::Adapters::DarcsAdapter
+ end
+
+ def self.scm_name
+ 'Darcs'
+ end
+
+ def supports_directory_revisions?
+ true
+ end
+
+ def entry(path=nil, identifier=nil)
+ patch = identifier.nil? ? nil : changesets.find_by_revision(identifier)
+ scm.entry(path, patch.nil? ? nil : patch.scmid)
+ end
+
+ def scm_entries(path=nil, identifier=nil)
+ patch = nil
+ if ! identifier.nil?
+ patch = changesets.find_by_revision(identifier)
+ return nil if patch.nil?
+ end
+ entries = scm.entries(path, patch.nil? ? nil : patch.scmid)
+ if entries
+ entries.each do |entry|
+ # Search the DB for the entry's last change
+ if entry.lastrev && !entry.lastrev.scmid.blank?
+ changeset = changesets.find_by_scmid(entry.lastrev.scmid)
+ end
+ if changeset
+ entry.lastrev.identifier = changeset.revision
+ entry.lastrev.name = changeset.revision
+ entry.lastrev.time = changeset.committed_on
+ entry.lastrev.author = changeset.committer
+ end
+ end
+ end
+ entries
+ end
+ protected :scm_entries
+
+ def cat(path, identifier=nil)
+ patch = identifier.nil? ? nil : changesets.find_by_revision(identifier.to_s)
+ scm.cat(path, patch.nil? ? nil : patch.scmid)
+ end
+
+ def diff(path, rev, rev_to)
+ patch_from = changesets.find_by_revision(rev)
+ return nil if patch_from.nil?
+ patch_to = changesets.find_by_revision(rev_to) if rev_to
+ if path.blank?
+ path = patch_from.filechanges.collect{|change| change.path}.join(' ')
+ end
+ patch_from ? scm.diff(path, patch_from.scmid, patch_to ? patch_to.scmid : nil) : nil
+ end
+
+ def fetch_changesets
+ scm_info = scm.info
+ if scm_info
+ db_last_id = latest_changeset ? latest_changeset.scmid : nil
+ next_rev = latest_changeset ? latest_changeset.revision.to_i + 1 : 1
+ # latest revision in the repository
+ scm_revision = scm_info.lastrev.scmid
+ unless changesets.find_by_scmid(scm_revision)
+ revisions = scm.revisions('', db_last_id, nil, :with_path => true)
+ transaction do
+ revisions.reverse_each do |revision|
+ changeset = Changeset.create(:repository => self,
+ :revision => next_rev,
+ :scmid => revision.scmid,
+ :committer => revision.author,
+ :committed_on => revision.time,
+ :comments => revision.message)
+ revision.paths.each do |change|
+ changeset.create_change(change)
+ end
+ next_rev += 1
+ end if revisions
+ end
+ end
+ end
+ end
+end
diff --git a/app/models/repository/filesystem.rb b/app/models/repository/filesystem.rb
new file mode 100644
index 0000000..0a612ae
--- /dev/null
+++ b/app/models/repository/filesystem.rb
@@ -0,0 +1,50 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# FileSystem adapter
+# File written by Paul Rivier, at Demotera.
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'redmine/scm/adapters/filesystem_adapter'
+
+class Repository::Filesystem < Repository
+ attr_protected :root_url
+ validates_presence_of :url
+
+ def self.human_attribute_name(attribute_key_name, *args)
+ attr_name = attribute_key_name.to_s
+ if attr_name == "url"
+ attr_name = "root_directory"
+ end
+ super(attr_name, *args)
+ end
+
+ def self.scm_adapter_class
+ Redmine::Scm::Adapters::FilesystemAdapter
+ end
+
+ def self.scm_name
+ 'Filesystem'
+ end
+
+ def supports_all_revisions?
+ false
+ end
+
+ def fetch_changesets
+ nil
+ end
+end
diff --git a/app/models/repository/git.rb b/app/models/repository/git.rb
new file mode 100644
index 0000000..893dc53
--- /dev/null
+++ b/app/models/repository/git.rb
@@ -0,0 +1,265 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+# Copyright (C) 2007 Patrick Aljord patcito@ŋmail.com
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'redmine/scm/adapters/git_adapter'
+
+class Repository::Git < Repository
+ attr_protected :root_url
+ validates_presence_of :url
+
+ safe_attributes 'report_last_commit'
+
+ def self.human_attribute_name(attribute_key_name, *args)
+ attr_name = attribute_key_name.to_s
+ if attr_name == "url"
+ attr_name = "path_to_repository"
+ end
+ super(attr_name, *args)
+ end
+
+ def self.scm_adapter_class
+ Redmine::Scm::Adapters::GitAdapter
+ end
+
+ def self.scm_name
+ 'Git'
+ end
+
+ def report_last_commit
+ return false if extra_info.nil?
+ v = extra_info["extra_report_last_commit"]
+ return false if v.nil?
+ v.to_s != '0'
+ end
+
+ def report_last_commit=(arg)
+ merge_extra_info "extra_report_last_commit" => arg
+ end
+
+ def supports_directory_revisions?
+ true
+ end
+
+ def supports_revision_graph?
+ true
+ end
+
+ def repo_log_encoding
+ 'UTF-8'
+ end
+
+ # Returns the identifier for the given git changeset
+ def self.changeset_identifier(changeset)
+ changeset.scmid
+ end
+
+ # Returns the readable identifier for the given git changeset
+ def self.format_changeset_identifier(changeset)
+ changeset.revision[0, 8]
+ end
+
+ def branches
+ scm.branches
+ end
+
+ def tags
+ scm.tags
+ end
+
+ def default_branch
+ scm.default_branch
+ rescue Exception => e
+ logger.error "git: error during get default branch: #{e.message}"
+ nil
+ end
+
+ def find_changeset_by_name(name)
+ if name.present?
+ changesets.where(:revision => name.to_s).first ||
+ changesets.where('scmid LIKE ?', "#{name}%").first
+ end
+ end
+
+ def scm_entries(path=nil, identifier=nil)
+ scm.entries(path, identifier, :report_last_commit => report_last_commit)
+ end
+ protected :scm_entries
+
+ # With SCMs that have a sequential commit numbering,
+ # such as Subversion and Mercurial,
+ # Redmine is able to be clever and only fetch changesets
+ # going forward from the most recent one it knows about.
+ #
+ # However, Git does not have a sequential commit numbering.
+ #
+ # In order to fetch only new adding revisions,
+ # Redmine needs to save "heads".
+ #
+ # In Git and Mercurial, revisions are not in date order.
+ # Redmine Mercurial fixed issues.
+ # * Redmine Takes Too Long On Large Mercurial Repository
+ # http://www.redmine.org/issues/3449
+ # * Sorting for changesets might go wrong on Mercurial repos
+ # http://www.redmine.org/issues/3567
+ #
+ # Database revision column is text, so Redmine can not sort by revision.
+ # Mercurial has revision number, and revision number guarantees revision order.
+ # Redmine Mercurial model stored revisions ordered by database id to database.
+ # So, Redmine Mercurial model can use correct ordering revisions.
+ #
+ # Redmine Mercurial adapter uses "hg log -r 0:tip --limit 10"
+ # to get limited revisions from old to new.
+ # But, Git 1.7.3.4 does not support --reverse with -n or --skip.
+ #
+ # The repository can still be fully reloaded by calling #clear_changesets
+ # before fetching changesets (eg. for offline resync)
+ def fetch_changesets
+ scm_brs = branches
+ return if scm_brs.nil? || scm_brs.empty?
+
+ h1 = extra_info || {}
+ h = h1.dup
+ repo_heads = scm_brs.map{ |br| br.scmid }
+ h["heads"] ||= []
+ prev_db_heads = h["heads"].dup
+ if prev_db_heads.empty?
+ prev_db_heads += heads_from_branches_hash
+ end
+ return if prev_db_heads.sort == repo_heads.sort
+
+ h["db_consistent"] ||= {}
+ if ! changesets.exists?
+ h["db_consistent"]["ordering"] = 1
+ merge_extra_info(h)
+ self.save
+ elsif ! h["db_consistent"].has_key?("ordering")
+ h["db_consistent"]["ordering"] = 0
+ merge_extra_info(h)
+ self.save
+ end
+ save_revisions(prev_db_heads, repo_heads)
+ end
+
+ def save_revisions(prev_db_heads, repo_heads)
+ h = {}
+ opts = {}
+ opts[:reverse] = true
+ opts[:excludes] = prev_db_heads
+ opts[:includes] = repo_heads
+
+ revisions = scm.revisions('', nil, nil, opts)
+ return if revisions.blank?
+
+ # Make the search for existing revisions in the database in a more sufficient manner
+ #
+ # Git branch is the reference to the specific revision.
+ # Git can *delete* remote branch and *re-push* branch.
+ #
+ # $ git push remote :branch
+ # $ git push remote branch
+ #
+ # After deleting branch, revisions remain in repository until "git gc".
+ # On git 1.7.2.3, default pruning date is 2 weeks.
+ # So, "git log --not deleted_branch_head_revision" return code is 0.
+ #
+ # After re-pushing branch, "git log" returns revisions which are saved in database.
+ # So, Redmine needs to scan revisions and database every time.
+ #
+ # This is replacing the one-after-one queries.
+ # Find all revisions, that are in the database, and then remove them
+ # from the revision array.
+ # Then later we won't need any conditions for db existence.
+ # Query for several revisions at once, and remove them
+ # from the revisions array, if they are there.
+ # Do this in chunks, to avoid eventual memory problems
+ # (in case of tens of thousands of commits).
+ # If there are no revisions (because the original code's algorithm filtered them),
+ # then this part will be stepped over.
+ # We make queries, just if there is any revision.
+ limit = 100
+ offset = 0
+ revisions_copy = revisions.clone # revisions will change
+ while offset < revisions_copy.size
+ scmids = revisions_copy.slice(offset, limit).map{|x| x.scmid}
+ recent_changesets_slice = changesets.where(:scmid => scmids)
+ # Subtract revisions that redmine already knows about
+ recent_revisions = recent_changesets_slice.map{|c| c.scmid}
+ revisions.reject!{|r| recent_revisions.include?(r.scmid)}
+ offset += limit
+ end
+ revisions.each do |rev|
+ transaction do
+ # There is no search in the db for this revision, because above we ensured,
+ # that it's not in the db.
+ save_revision(rev)
+ end
+ end
+ h["heads"] = repo_heads.dup
+ merge_extra_info(h)
+ save(:validate => false)
+ end
+ private :save_revisions
+
+ def save_revision(rev)
+ parents = (rev.parents || []).collect{|rp| find_changeset_by_name(rp)}.compact
+ changeset = Changeset.create(
+ :repository => self,
+ :revision => rev.identifier,
+ :scmid => rev.scmid,
+ :committer => rev.author,
+ :committed_on => rev.time,
+ :comments => rev.message,
+ :parents => parents
+ )
+ unless changeset.new_record?
+ rev.paths.each { |change| changeset.create_change(change) }
+ end
+ changeset
+ end
+ private :save_revision
+
+ def heads_from_branches_hash
+ h1 = extra_info || {}
+ h = h1.dup
+ h["branches"] ||= {}
+ h['branches'].map{|br, hs| hs['last_scmid']}
+ end
+
+ def latest_changesets(path,rev,limit=10)
+ revisions = scm.revisions(path, nil, rev, :limit => limit, :all => false)
+ return [] if revisions.nil? || revisions.empty?
+ changesets.where(:scmid => revisions.map {|c| c.scmid}).to_a
+ end
+
+ def clear_extra_info_of_changesets
+ return if extra_info.nil?
+ v = extra_info["extra_report_last_commit"]
+ write_attribute(:extra_info, nil)
+ h = {}
+ h["extra_report_last_commit"] = v
+ merge_extra_info(h)
+ save(:validate => false)
+ end
+ private :clear_extra_info_of_changesets
+
+ def clear_changesets
+ super
+ clear_extra_info_of_changesets
+ end
+ private :clear_changesets
+end
diff --git a/app/models/repository/mercurial.rb b/app/models/repository/mercurial.rb
new file mode 100644
index 0000000..b9a767f
--- /dev/null
+++ b/app/models/repository/mercurial.rb
@@ -0,0 +1,211 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'redmine/scm/adapters/mercurial_adapter'
+
+class Repository::Mercurial < Repository
+ # sort changesets by revision number
+ has_many :changesets,
+ lambda {order("#{Changeset.table_name}.id DESC")},
+ :foreign_key => 'repository_id'
+
+ attr_protected :root_url
+ validates_presence_of :url
+
+ # number of changesets to fetch at once
+ FETCH_AT_ONCE = 100
+
+ def self.human_attribute_name(attribute_key_name, *args)
+ attr_name = attribute_key_name.to_s
+ if attr_name == "url"
+ attr_name = "path_to_repository"
+ end
+ super(attr_name, *args)
+ end
+
+ def self.scm_adapter_class
+ Redmine::Scm::Adapters::MercurialAdapter
+ end
+
+ def self.scm_name
+ 'Mercurial'
+ end
+
+ def supports_directory_revisions?
+ true
+ end
+
+ def supports_revision_graph?
+ true
+ end
+
+ def repo_log_encoding
+ 'UTF-8'
+ end
+
+ # Returns the readable identifier for the given mercurial changeset
+ def self.format_changeset_identifier(changeset)
+ "#{changeset.revision}:#{changeset.scmid[0, 12]}"
+ end
+
+ # Returns the identifier for the given Mercurial changeset
+ def self.changeset_identifier(changeset)
+ changeset.scmid
+ end
+
+ def diff_format_revisions(cs, cs_to, sep=':')
+ super(cs, cs_to, ' ')
+ end
+
+ def modify_entry_lastrev_identifier(entry)
+ if entry.lastrev && entry.lastrev.identifier
+ entry.lastrev.identifier = scmid_for_inserting_db(entry.lastrev.identifier)
+ end
+ end
+ private :modify_entry_lastrev_identifier
+
+ def entry(path=nil, identifier=nil)
+ entry = scm.entry(path, identifier)
+ return nil if entry.nil?
+ modify_entry_lastrev_identifier(entry)
+ entry
+ end
+
+ def scm_entries(path=nil, identifier=nil)
+ entries = scm.entries(path, identifier)
+ return nil if entries.nil?
+ entries.each {|entry| modify_entry_lastrev_identifier(entry)}
+ entries
+ end
+ protected :scm_entries
+
+ # Finds and returns a revision with a number or the beginning of a hash
+ def find_changeset_by_name(name)
+ return nil if name.blank?
+ s = name.to_s
+ if /[^\d]/ =~ s or s.size > 8
+ cs = changesets.where(:scmid => s).first
+ else
+ cs = changesets.where(:revision => s).first
+ end
+ return cs if cs
+ changesets.where('scmid LIKE ?', "#{s}%").first
+ end
+
+ # Returns the latest changesets for +path+; sorted by revision number
+ #
+ # Because :order => 'id DESC' is defined at 'has_many',
+ # there is no need to set 'order'.
+ # But, MySQL test fails.
+ # Sqlite3 and PostgreSQL pass.
+ # Is this MySQL bug?
+ def latest_changesets(path, rev, limit=10)
+ changesets.
+ includes(:user).
+ where(latest_changesets_cond(path, rev, limit)).
+ references(:user).
+ limit(limit).
+ order("#{Changeset.table_name}.id DESC").
+ to_a
+ end
+
+ def is_short_id_in_db?
+ return @is_short_id_in_db unless @is_short_id_in_db.nil?
+ cs = changesets.first
+ @is_short_id_in_db = (!cs.nil? && cs.scmid.length != 40)
+ end
+ private :is_short_id_in_db?
+
+ def scmid_for_inserting_db(scmid)
+ is_short_id_in_db? ? scmid[0, 12] : scmid
+ end
+
+ def nodes_in_branch(rev, branch_limit)
+ scm.nodes_in_branch(rev, :limit => branch_limit).collect do |b|
+ scmid_for_inserting_db(b)
+ end
+ end
+
+ def tag_scmid(rev)
+ scmid = scm.tagmap[rev]
+ scmid.nil? ? nil : scmid_for_inserting_db(scmid)
+ end
+
+ def latest_changesets_cond(path, rev, limit)
+ cond, args = [], []
+ if scm.branchmap.member? rev
+ # Mercurial named branch is *stable* in each revision.
+ # So, named branch can be stored in database.
+ # Mercurial provides *bookmark* which is equivalent with git branch.
+ # But, bookmark is not implemented.
+ cond << "#{Changeset.table_name}.scmid IN (?)"
+ # Revisions in root directory and sub directory are not equal.
+ # So, in order to get correct limit, we need to get all revisions.
+ # But, it is very heavy.
+ # Mercurial does not treat directory.
+ # So, "hg log DIR" is very heavy.
+ branch_limit = path.blank? ? limit : ( limit * 5 )
+ args << nodes_in_branch(rev, branch_limit)
+ elsif last = rev ? find_changeset_by_name(tag_scmid(rev) || rev) : nil
+ cond << "#{Changeset.table_name}.id <= ?"
+ args << last.id
+ end
+ unless path.blank?
+ cond << "EXISTS (SELECT * FROM #{Change.table_name}
+ WHERE #{Change.table_name}.changeset_id = #{Changeset.table_name}.id
+ AND (#{Change.table_name}.path = ?
+ OR #{Change.table_name}.path LIKE ? ESCAPE ?))"
+ args << path.with_leading_slash
+ args << "#{path.with_leading_slash.gsub(%r{[%_\\]}) { |s| "\\#{s}" }}/%" << '\\'
+ end
+ [cond.join(' AND '), *args] unless cond.empty?
+ end
+ private :latest_changesets_cond
+
+ def fetch_changesets
+ return if scm.info.nil?
+ scm_rev = scm.info.lastrev.revision.to_i
+ db_rev = latest_changeset ? latest_changeset.revision.to_i : -1
+ return unless db_rev < scm_rev # already up-to-date
+
+ logger.debug "Fetching changesets for repository #{url}" if logger
+ (db_rev + 1).step(scm_rev, FETCH_AT_ONCE) do |i|
+ scm.each_revision('', i, [i + FETCH_AT_ONCE - 1, scm_rev].min) do |re|
+ transaction do
+ parents = (re.parents || []).collect do |rp|
+ find_changeset_by_name(scmid_for_inserting_db(rp))
+ end.compact
+ cs = Changeset.create(:repository => self,
+ :revision => re.revision,
+ :scmid => scmid_for_inserting_db(re.scmid),
+ :committer => re.author,
+ :committed_on => re.time,
+ :comments => re.message,
+ :parents => parents)
+ unless cs.new_record?
+ re.paths.each do |e|
+ if from_revision = e[:from_revision]
+ e[:from_revision] = scmid_for_inserting_db(from_revision)
+ end
+ cs.create_change(e)
+ end
+ end
+ end
+ end
+ end
+ end
+end
diff --git a/app/models/repository/subversion.rb b/app/models/repository/subversion.rb
new file mode 100644
index 0000000..70d4977
--- /dev/null
+++ b/app/models/repository/subversion.rb
@@ -0,0 +1,117 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'redmine/scm/adapters/subversion_adapter'
+
+class Repository::Subversion < Repository
+ attr_protected :root_url
+ validates_presence_of :url
+ validates_format_of :url, :with => %r{\A(http|https|svn(\+[^\s:\/\\]+)?|file):\/\/.+}i
+
+ def self.scm_adapter_class
+ Redmine::Scm::Adapters::SubversionAdapter
+ end
+
+ def self.scm_name
+ 'Subversion'
+ end
+
+ def supports_directory_revisions?
+ true
+ end
+
+ def repo_log_encoding
+ 'UTF-8'
+ end
+
+ def latest_changesets(path, rev, limit=10)
+ revisions = scm.revisions(path, rev, nil, :limit => limit)
+ if revisions
+ identifiers = revisions.collect(&:identifier).compact
+ changesets.where(:revision => identifiers).reorder("committed_on DESC").includes(:repository, :user).to_a
+ else
+ []
+ end
+ end
+
+ # Returns a path relative to the url of the repository
+ def relative_path(path)
+ path.gsub(Regexp.new("^\/?#{Regexp.escape(relative_url)}"), '')
+ end
+
+ def fetch_changesets
+ scm_info = scm.info
+ if scm_info
+ # latest revision found in database
+ db_revision = latest_changeset ? latest_changeset.revision.to_i : 0
+ # latest revision in the repository
+ scm_revision = scm_info.lastrev.identifier.to_i
+ if db_revision < scm_revision
+ logger.debug "Fetching changesets for repository #{url}" if logger && logger.debug?
+ identifier_from = db_revision + 1
+ while (identifier_from <= scm_revision)
+ # loads changesets by batches of 200
+ identifier_to = [identifier_from + 199, scm_revision].min
+ revisions = scm.revisions('', identifier_to, identifier_from, :with_paths => true)
+ revisions.reverse_each do |revision|
+ transaction do
+ changeset = Changeset.create(:repository => self,
+ :revision => revision.identifier,
+ :committer => revision.author,
+ :committed_on => revision.time,
+ :comments => revision.message)
+
+ revision.paths.each do |change|
+ changeset.create_change(change)
+ end unless changeset.new_record?
+ end
+ end unless revisions.nil?
+ identifier_from = identifier_to + 1
+ end
+ end
+ end
+ end
+
+ protected
+
+ def load_entries_changesets(entries)
+ return unless entries
+ entries_with_identifier =
+ entries.select {|entry| entry.lastrev && entry.lastrev.identifier.present?}
+ identifiers = entries_with_identifier.map {|entry| entry.lastrev.identifier}.compact.uniq
+ if identifiers.any?
+ changesets_by_identifier =
+ changesets.where(:revision => identifiers).
+ includes(:user, :repository).group_by(&:revision)
+ entries_with_identifier.each do |entry|
+ if m = changesets_by_identifier[entry.lastrev.identifier]
+ entry.changeset = m.first
+ end
+ end
+ end
+ end
+
+ private
+
+ # Returns the relative url of the repository
+ # Eg: root_url = file:///var/svn/foo
+ # url = file:///var/svn/foo/bar
+ # => returns /bar
+ def relative_url
+ @relative_url ||= url.gsub(Regexp.new("^#{Regexp.escape(root_url || scm.root_url)}", Regexp::IGNORECASE), '')
+ end
+end
diff --git a/app/models/role.rb b/app/models/role.rb
new file mode 100644
index 0000000..8bd2e72
--- /dev/null
+++ b/app/models/role.rb
@@ -0,0 +1,311 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Role < ActiveRecord::Base
+ include Redmine::SafeAttributes
+
+ # Custom coder for the permissions attribute that should be an
+ # array of symbols. Rails 3 uses Psych which can be *unbelievably*
+ # slow on some platforms (eg. mingw32).
+ class PermissionsAttributeCoder
+ def self.load(str)
+ str.to_s.scan(/:([a-z0-9_]+)/).flatten.map(&:to_sym)
+ end
+
+ def self.dump(value)
+ YAML.dump(value)
+ end
+ end
+
+ # Built-in roles
+ BUILTIN_NON_MEMBER = 1
+ BUILTIN_ANONYMOUS = 2
+
+ ISSUES_VISIBILITY_OPTIONS = [
+ ['all', :label_issues_visibility_all],
+ ['default', :label_issues_visibility_public],
+ ['own', :label_issues_visibility_own]
+ ]
+
+ TIME_ENTRIES_VISIBILITY_OPTIONS = [
+ ['all', :label_time_entries_visibility_all],
+ ['own', :label_time_entries_visibility_own]
+ ]
+
+ USERS_VISIBILITY_OPTIONS = [
+ ['all', :label_users_visibility_all],
+ ['members_of_visible_projects', :label_users_visibility_members_of_visible_projects]
+ ]
+
+ scope :sorted, lambda { order(:builtin, :position) }
+ scope :givable, lambda { order(:position).where(:builtin => 0) }
+ scope :builtin, lambda { |*args|
+ compare = (args.first == true ? 'not' : '')
+ where("#{compare} builtin = 0")
+ }
+
+ before_destroy :check_deletable
+ has_many :workflow_rules, :dependent => :delete_all do
+ def copy(source_role)
+ ActiveSupport::Deprecation.warn "role.workflow_rules.copy is deprecated and will be removed in Redmine 4.0, use role.copy_worflow_rules instead"
+ proxy_association.owner.copy_workflow_rules(source_role)
+ end
+ end
+ has_and_belongs_to_many :custom_fields, :join_table => "#{table_name_prefix}custom_fields_roles#{table_name_suffix}", :foreign_key => "role_id"
+
+ has_and_belongs_to_many :managed_roles, :class_name => 'Role',
+ :join_table => "#{table_name_prefix}roles_managed_roles#{table_name_suffix}",
+ :association_foreign_key => "managed_role_id"
+
+ has_many :member_roles, :dependent => :destroy
+ has_many :members, :through => :member_roles
+ acts_as_positioned :scope => :builtin
+
+ serialize :permissions, ::Role::PermissionsAttributeCoder
+ store :settings, :accessors => [:permissions_all_trackers, :permissions_tracker_ids]
+ attr_protected :builtin
+
+ validates_presence_of :name
+ validates_uniqueness_of :name
+ validates_length_of :name, :maximum => 30
+ validates_inclusion_of :issues_visibility,
+ :in => ISSUES_VISIBILITY_OPTIONS.collect(&:first),
+ :if => lambda {|role| role.respond_to?(:issues_visibility) && role.issues_visibility_changed?}
+ validates_inclusion_of :users_visibility,
+ :in => USERS_VISIBILITY_OPTIONS.collect(&:first),
+ :if => lambda {|role| role.respond_to?(:users_visibility) && role.users_visibility_changed?}
+ validates_inclusion_of :time_entries_visibility,
+ :in => TIME_ENTRIES_VISIBILITY_OPTIONS.collect(&:first),
+ :if => lambda {|role| role.respond_to?(:time_entries_visibility) && role.time_entries_visibility_changed?}
+
+ safe_attributes 'name',
+ 'assignable',
+ 'position',
+ 'issues_visibility',
+ 'users_visibility',
+ 'time_entries_visibility',
+ 'all_roles_managed',
+ 'managed_role_ids',
+ 'permissions',
+ 'permissions_all_trackers',
+ 'permissions_tracker_ids'
+
+ # Copies attributes from another role, arg can be an id or a Role
+ def copy_from(arg, options={})
+ return unless arg.present?
+ role = arg.is_a?(Role) ? arg : Role.find_by_id(arg.to_s)
+ self.attributes = role.attributes.dup.except("id", "name", "position", "builtin", "permissions")
+ self.permissions = role.permissions.dup
+ self.managed_role_ids = role.managed_role_ids.dup
+ self
+ end
+
+ def permissions=(perms)
+ perms = perms.collect {|p| p.to_sym unless p.blank? }.compact.uniq if perms
+ write_attribute(:permissions, perms)
+ end
+
+ def add_permission!(*perms)
+ self.permissions = [] unless permissions.is_a?(Array)
+
+ permissions_will_change!
+ perms.each do |p|
+ p = p.to_sym
+ permissions << p unless permissions.include?(p)
+ end
+ save!
+ end
+
+ def remove_permission!(*perms)
+ return unless permissions.is_a?(Array)
+ permissions_will_change!
+ perms.each { |p| permissions.delete(p.to_sym) }
+ save!
+ end
+
+ # Returns true if the role has the given permission
+ def has_permission?(perm)
+ !permissions.nil? && permissions.include?(perm.to_sym)
+ end
+
+ def consider_workflow?
+ has_permission?(:add_issues) || has_permission?(:edit_issues)
+ end
+
+ def <=>(role)
+ if role
+ if builtin == role.builtin
+ position <=> role.position
+ else
+ builtin <=> role.builtin
+ end
+ else
+ -1
+ end
+ end
+
+ def to_s
+ name
+ end
+
+ def name
+ case builtin
+ when 1; l(:label_role_non_member, :default => read_attribute(:name))
+ when 2; l(:label_role_anonymous, :default => read_attribute(:name))
+ else; read_attribute(:name)
+ end
+ end
+
+ # Return true if the role is a builtin role
+ def builtin?
+ self.builtin != 0
+ end
+
+ # Return true if the role is the anonymous role
+ def anonymous?
+ builtin == 2
+ end
+
+ # Return true if the role is a project member role
+ def member?
+ !self.builtin?
+ end
+
+ # Return true if role is allowed to do the specified action
+ # action can be:
+ # * a parameter-like Hash (eg. :controller => 'projects', :action => 'edit')
+ # * a permission Symbol (eg. :edit_project)
+ def allowed_to?(action)
+ if action.is_a? Hash
+ allowed_actions.include? "#{action[:controller]}/#{action[:action]}"
+ else
+ allowed_permissions.include? action
+ end
+ end
+
+ # Return all the permissions that can be given to the role
+ def setable_permissions
+ setable_permissions = Redmine::AccessControl.permissions - Redmine::AccessControl.public_permissions
+ setable_permissions -= Redmine::AccessControl.members_only_permissions if self.builtin == BUILTIN_NON_MEMBER
+ setable_permissions -= Redmine::AccessControl.loggedin_only_permissions if self.builtin == BUILTIN_ANONYMOUS
+ setable_permissions
+ end
+
+ def permissions_tracker_ids(*args)
+ if args.any?
+ Array(permissions_tracker_ids[args.first.to_s]).map(&:to_i)
+ else
+ super || {}
+ end
+ end
+
+ def permissions_tracker_ids=(arg)
+ h = arg.to_hash
+ h.values.each {|v| v.reject!(&:blank?)}
+ super(h)
+ end
+
+ # Returns true if tracker_id belongs to the list of
+ # trackers for which permission is given
+ def permissions_tracker_ids?(permission, tracker_id)
+ permissions_tracker_ids(permission).include?(tracker_id)
+ end
+
+ def permissions_all_trackers
+ super || {}
+ end
+
+ def permissions_all_trackers=(arg)
+ super(arg.to_hash)
+ end
+
+ # Returns true if permission is given for all trackers
+ def permissions_all_trackers?(permission)
+ permissions_all_trackers[permission.to_s].to_s != '0'
+ end
+
+ # Returns true if permission is given for the tracker
+ # (explicitly or for all trackers)
+ def permissions_tracker?(permission, tracker)
+ permissions_all_trackers?(permission) ||
+ permissions_tracker_ids?(permission, tracker.try(:id))
+ end
+
+ # Sets the trackers that are allowed for a permission.
+ # tracker_ids can be an array of tracker ids or :all for
+ # no restrictions.
+ #
+ # Examples:
+ # role.set_permission_trackers :add_issues, [1, 3]
+ # role.set_permission_trackers :add_issues, :all
+ def set_permission_trackers(permission, tracker_ids)
+ h = {permission.to_s => (tracker_ids == :all ? '1' : '0')}
+ self.permissions_all_trackers = permissions_all_trackers.merge(h)
+
+ h = {permission.to_s => (tracker_ids == :all ? [] : tracker_ids)}
+ self.permissions_tracker_ids = permissions_tracker_ids.merge(h)
+
+ self
+ end
+
+ def copy_workflow_rules(source_role)
+ WorkflowRule.copy(nil, source_role, nil, self)
+ end
+
+ # Find all the roles that can be given to a project member
+ def self.find_all_givable
+ Role.givable.to_a
+ end
+
+ # Return the builtin 'non member' role. If the role doesn't exist,
+ # it will be created on the fly.
+ def self.non_member
+ find_or_create_system_role(BUILTIN_NON_MEMBER, 'Non member')
+ end
+
+ # Return the builtin 'anonymous' role. If the role doesn't exist,
+ # it will be created on the fly.
+ def self.anonymous
+ find_or_create_system_role(BUILTIN_ANONYMOUS, 'Anonymous')
+ end
+
+private
+
+ def allowed_permissions
+ @allowed_permissions ||= permissions + Redmine::AccessControl.public_permissions.collect {|p| p.name}
+ end
+
+ def allowed_actions
+ @actions_allowed ||= allowed_permissions.inject([]) { |actions, permission| actions += Redmine::AccessControl.allowed_actions(permission) }.flatten
+ end
+
+ def check_deletable
+ raise "Cannot delete role" if members.any?
+ raise "Cannot delete builtin role" if builtin?
+ end
+
+ def self.find_or_create_system_role(builtin, name)
+ role = unscoped.where(:builtin => builtin).first
+ if role.nil?
+ role = unscoped.create(:name => name) do |r|
+ r.builtin = builtin
+ end
+ raise "Unable to create the #{name} role (#{role.errors.full_messages.join(',')})." if role.new_record?
+ end
+ role
+ end
+end
diff --git a/app/models/setting.rb b/app/models/setting.rb
new file mode 100644
index 0000000..102bc65
--- /dev/null
+++ b/app/models/setting.rb
@@ -0,0 +1,321 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Setting < ActiveRecord::Base
+
+ DATE_FORMATS = [
+ '%Y-%m-%d',
+ '%d/%m/%Y',
+ '%d.%m.%Y',
+ '%d-%m-%Y',
+ '%m/%d/%Y',
+ '%d %b %Y',
+ '%d %B %Y',
+ '%b %d, %Y',
+ '%B %d, %Y'
+ ]
+
+ TIME_FORMATS = [
+ '%H:%M',
+ '%I:%M %p'
+ ]
+
+ ENCODINGS = %w(US-ASCII
+ windows-1250
+ windows-1251
+ windows-1252
+ windows-1253
+ windows-1254
+ windows-1255
+ windows-1256
+ windows-1257
+ windows-1258
+ windows-31j
+ ISO-2022-JP
+ ISO-2022-KR
+ ISO-8859-1
+ ISO-8859-2
+ ISO-8859-3
+ ISO-8859-4
+ ISO-8859-5
+ ISO-8859-6
+ ISO-8859-7
+ ISO-8859-8
+ ISO-8859-9
+ ISO-8859-13
+ ISO-8859-15
+ KOI8-R
+ UTF-8
+ UTF-16
+ UTF-16BE
+ UTF-16LE
+ EUC-JP
+ Shift_JIS
+ CP932
+ GB18030
+ GBK
+ ISCII91
+ EUC-KR
+ Big5
+ Big5-HKSCS
+ TIS-620)
+
+ cattr_accessor :available_settings
+ self.available_settings ||= {}
+
+ validates_uniqueness_of :name, :if => Proc.new {|setting| setting.new_record? || setting.name_changed?}
+ validates_inclusion_of :name, :in => Proc.new {available_settings.keys}
+ validates_numericality_of :value, :only_integer => true, :if => Proc.new { |setting|
+ (s = available_settings[setting.name]) && s['format'] == 'int'
+ }
+ attr_protected :id
+
+ # Hash used to cache setting values
+ @cached_settings = {}
+ @cached_cleared_on = Time.now
+
+ def value
+ v = read_attribute(:value)
+ # Unserialize serialized settings
+ if available_settings[name]['serialized'] && v.is_a?(String)
+ v = YAML::load(v)
+ v = force_utf8_strings(v)
+ end
+ v = v.to_sym if available_settings[name]['format'] == 'symbol' && !v.blank?
+ v
+ end
+
+ def value=(v)
+ v = v.to_yaml if v && available_settings[name] && available_settings[name]['serialized']
+ write_attribute(:value, v.to_s)
+ end
+
+ # Returns the value of the setting named name
+ def self.[](name)
+ v = @cached_settings[name]
+ v ? v : (@cached_settings[name] = find_or_default(name).value)
+ end
+
+ def self.[]=(name, v)
+ setting = find_or_default(name)
+ setting.value = (v ? v : "")
+ @cached_settings[name] = nil
+ setting.save
+ setting.value
+ end
+
+ # Updates multiple settings from params and sends a security notification if needed
+ def self.set_all_from_params(settings)
+ return nil unless settings.is_a?(Hash)
+ settings = settings.dup.symbolize_keys
+
+ errors = validate_all_from_params(settings)
+ return errors if errors.present?
+
+ changes = []
+ settings.each do |name, value|
+ next unless available_settings[name.to_s]
+ previous_value = Setting[name]
+ set_from_params name, value
+ if available_settings[name.to_s]['security_notifications'] && Setting[name] != previous_value
+ changes << name
+ end
+ end
+ if changes.any?
+ Mailer.security_settings_updated(changes)
+ end
+ nil
+ end
+
+ def self.validate_all_from_params(settings)
+ messages = []
+
+ if settings.key?(:mail_handler_body_delimiters) || settings.key?(:mail_handler_enable_regex_delimiters)
+ regexp = Setting.mail_handler_enable_regex_delimiters?
+ if settings.key?(:mail_handler_enable_regex_delimiters)
+ regexp = settings[:mail_handler_enable_regex_delimiters].to_s != '0'
+ end
+ if regexp
+ settings[:mail_handler_body_delimiters].to_s.split(/[\r\n]+/).each do |delimiter|
+ begin
+ Regexp.new(delimiter)
+ rescue RegexpError => e
+ messages << [:mail_handler_body_delimiters, "#{l('activerecord.errors.messages.not_a_regexp')} (#{e.message})"]
+ end
+ end
+ end
+ end
+
+ messages
+ end
+
+ # Sets a setting value from params
+ def self.set_from_params(name, params)
+ params = params.dup
+ params.delete_if {|v| v.blank? } if params.is_a?(Array)
+ params.symbolize_keys! if params.is_a?(Hash)
+
+ m = "#{name}_from_params"
+ if respond_to? m
+ self[name.to_sym] = send m, params
+ else
+ self[name.to_sym] = params
+ end
+ end
+
+ # Returns a hash suitable for commit_update_keywords setting
+ #
+ # Example:
+ # params = {:keywords => ['fixes', 'closes'], :status_id => ["3", "5"], :done_ratio => ["", "100"]}
+ # Setting.commit_update_keywords_from_params(params)
+ # # => [{'keywords => 'fixes', 'status_id' => "3"}, {'keywords => 'closes', 'status_id' => "5", 'done_ratio' => "100"}]
+ def self.commit_update_keywords_from_params(params)
+ s = []
+ if params.is_a?(Hash) && params.key?(:keywords) && params.values.all? {|v| v.is_a? Array}
+ attributes = params.except(:keywords).keys
+ params[:keywords].each_with_index do |keywords, i|
+ next if keywords.blank?
+ s << attributes.inject({}) {|h, a|
+ value = params[a][i].to_s
+ h[a.to_s] = value if value.present?
+ h
+ }.merge('keywords' => keywords)
+ end
+ end
+ s
+ end
+
+ # Helper that returns an array based on per_page_options setting
+ def self.per_page_options_array
+ per_page_options.split(%r{[\s,]}).collect(&:to_i).select {|n| n > 0}.sort
+ end
+
+ # Helper that returns a Hash with single update keywords as keys
+ def self.commit_update_keywords_array
+ a = []
+ if commit_update_keywords.is_a?(Array)
+ commit_update_keywords.each do |rule|
+ next unless rule.is_a?(Hash)
+ rule = rule.dup
+ rule.delete_if {|k, v| v.blank?}
+ keywords = rule['keywords'].to_s.downcase.split(",").map(&:strip).reject(&:blank?)
+ next if keywords.empty?
+ a << rule.merge('keywords' => keywords)
+ end
+ end
+ a
+ end
+
+ def self.openid?
+ Object.const_defined?(:OpenID) && self[:openid].to_i > 0
+ end
+
+ # Checks if settings have changed since the values were read
+ # and clears the cache hash if it's the case
+ # Called once per request
+ def self.check_cache
+ settings_updated_on = Setting.maximum(:updated_on)
+ if settings_updated_on && @cached_cleared_on <= settings_updated_on
+ clear_cache
+ end
+ end
+
+ # Clears the settings cache
+ def self.clear_cache
+ @cached_settings.clear
+ @cached_cleared_on = Time.now
+ logger.info "Settings cache cleared." if logger
+ end
+
+ def self.define_plugin_setting(plugin)
+ if plugin.settings
+ name = "plugin_#{plugin.id}"
+ define_setting name, {'default' => plugin.settings[:default], 'serialized' => true}
+ end
+ end
+
+ # Defines getter and setter for each setting
+ # Then setting values can be read using: Setting.some_setting_name
+ # or set using Setting.some_setting_name = "some value"
+ def self.define_setting(name, options={})
+ available_settings[name.to_s] = options
+
+ src = <<-END_SRC
+ def self.#{name}
+ self[:#{name}]
+ end
+
+ def self.#{name}?
+ self[:#{name}].to_i > 0
+ end
+
+ def self.#{name}=(value)
+ self[:#{name}] = value
+ end
+END_SRC
+ class_eval src, __FILE__, __LINE__
+ end
+
+ def self.load_available_settings
+ YAML::load(File.open("#{Rails.root}/config/settings.yml")).each do |name, options|
+ define_setting name, options
+ end
+ end
+
+ def self.load_plugin_settings
+ Redmine::Plugin.all.each do |plugin|
+ define_plugin_setting(plugin)
+ end
+ end
+
+ load_available_settings
+ load_plugin_settings
+
+private
+
+ def force_utf8_strings(arg)
+ if arg.is_a?(String)
+ arg.dup.force_encoding('UTF-8')
+ elsif arg.is_a?(Array)
+ arg.map do |a|
+ force_utf8_strings(a)
+ end
+ elsif arg.is_a?(Hash)
+ arg = arg.dup
+ arg.each do |k,v|
+ arg[k] = force_utf8_strings(v)
+ end
+ arg
+ else
+ arg
+ end
+ end
+
+ # Returns the Setting instance for the setting named name
+ # (record found in database or new record with default value)
+ def self.find_or_default(name)
+ name = name.to_s
+ raise "There's no setting named #{name}" unless available_settings.has_key?(name)
+ setting = where(:name => name).order(:id => :desc).first
+ unless setting
+ setting = new
+ setting.name = name
+ setting.value = available_settings[name]['default']
+ end
+ setting
+ end
+end
diff --git a/app/models/time_entry.rb b/app/models/time_entry.rb
new file mode 100644
index 0000000..1e0f5bc
--- /dev/null
+++ b/app/models/time_entry.rb
@@ -0,0 +1,169 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class TimeEntry < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ # could have used polymorphic association
+ # project association here allows easy loading of time entries at project level with one database trip
+ belongs_to :project
+ belongs_to :issue
+ belongs_to :user
+ belongs_to :activity, :class_name => 'TimeEntryActivity'
+
+ attr_protected :user_id, :tyear, :tmonth, :tweek
+
+ acts_as_customizable
+ acts_as_event :title => Proc.new { |o|
+ related = o.issue if o.issue && o.issue.visible?
+ related ||= o.project
+ "#{l_hours(o.hours)} (#{related.event_title})"
+ },
+ :url => Proc.new {|o| {:controller => 'timelog', :action => 'index', :project_id => o.project, :issue_id => o.issue}},
+ :author => :user,
+ :group => :issue,
+ :description => :comments
+
+ acts_as_activity_provider :timestamp => "#{table_name}.created_on",
+ :author_key => :user_id,
+ :scope => joins(:project).preload(:project)
+
+ validates_presence_of :user_id, :activity_id, :project_id, :hours, :spent_on
+ validates_presence_of :issue_id, :if => lambda { Setting.timelog_required_fields.include?('issue_id') }
+ validates_presence_of :comments, :if => lambda { Setting.timelog_required_fields.include?('comments') }
+ validates_numericality_of :hours, :allow_nil => true, :message => :invalid
+ validates_length_of :comments, :maximum => 1024, :allow_nil => true
+ validates :spent_on, :date => true
+ before_validation :set_project_if_nil
+ validate :validate_time_entry
+
+ scope :visible, lambda {|*args|
+ joins(:project).
+ where(TimeEntry.visible_condition(args.shift || User.current, *args))
+ }
+ scope :left_join_issue, lambda {
+ joins("LEFT OUTER JOIN #{Issue.table_name} ON #{Issue.table_name}.id = #{TimeEntry.table_name}.issue_id")
+ }
+ scope :on_issue, lambda {|issue|
+ joins(:issue).
+ where("#{Issue.table_name}.root_id = #{issue.root_id} AND #{Issue.table_name}.lft >= #{issue.lft} AND #{Issue.table_name}.rgt <= #{issue.rgt}")
+ }
+
+ safe_attributes 'hours', 'comments', 'project_id', 'issue_id', 'activity_id', 'spent_on', 'custom_field_values', 'custom_fields'
+
+ # Returns a SQL conditions string used to find all time entries visible by the specified user
+ def self.visible_condition(user, options={})
+ Project.allowed_to_condition(user, :view_time_entries, options) do |role, user|
+ if role.time_entries_visibility == 'all'
+ nil
+ elsif role.time_entries_visibility == 'own' && user.id && user.logged?
+ "#{table_name}.user_id = #{user.id}"
+ else
+ '1=0'
+ end
+ end
+ end
+
+ # Returns true if user or current user is allowed to view the time entry
+ def visible?(user=nil)
+ (user || User.current).allowed_to?(:view_time_entries, self.project) do |role, user|
+ if role.time_entries_visibility == 'all'
+ true
+ elsif role.time_entries_visibility == 'own'
+ self.user == user
+ else
+ false
+ end
+ end
+ end
+
+ def initialize(attributes=nil, *args)
+ super
+ if new_record? && self.activity.nil?
+ if default_activity = TimeEntryActivity.default
+ self.activity_id = default_activity.id
+ end
+ self.hours = nil if hours == 0
+ end
+ end
+
+ def safe_attributes=(attrs, user=User.current)
+ if attrs
+ attrs = super(attrs)
+ if issue_id_changed? && issue
+ if issue.visible?(user) && user.allowed_to?(:log_time, issue.project)
+ if attrs[:project_id].blank? && issue.project_id != project_id
+ self.project_id = issue.project_id
+ end
+ @invalid_issue_id = nil
+ else
+ @invalid_issue_id = issue_id
+ end
+ end
+ end
+ attrs
+ end
+
+ def set_project_if_nil
+ self.project = issue.project if issue && project.nil?
+ end
+
+ def validate_time_entry
+ errors.add :hours, :invalid if hours && (hours < 0 || hours >= 1000)
+ errors.add :project_id, :invalid if project.nil?
+ errors.add :issue_id, :invalid if (issue_id && !issue) || (issue && project!=issue.project) || @invalid_issue_id
+ errors.add :activity_id, :inclusion if activity_id_changed? && project && !project.activities.include?(activity)
+ end
+
+ def hours=(h)
+ write_attribute :hours, (h.is_a?(String) ? (h.to_hours || h) : h)
+ end
+
+ def hours
+ h = read_attribute(:hours)
+ if h.is_a?(Float)
+ h.round(2)
+ else
+ h
+ end
+ end
+
+ # tyear, tmonth, tweek assigned where setting spent_on attributes
+ # these attributes make time aggregations easier
+ def spent_on=(date)
+ super
+ self.tyear = spent_on ? spent_on.year : nil
+ self.tmonth = spent_on ? spent_on.month : nil
+ self.tweek = spent_on ? Date.civil(spent_on.year, spent_on.month, spent_on.day).cweek : nil
+ end
+
+ # Returns true if the time entry can be edited by usr, otherwise false
+ def editable_by?(usr)
+ visible?(usr) && (
+ (usr == user && usr.allowed_to?(:edit_own_time_entries, project)) || usr.allowed_to?(:edit_time_entries, project)
+ )
+ end
+
+ # Returns the custom_field_values that can be edited by the given user
+ def editable_custom_field_values(user=nil)
+ visible_custom_field_values
+ end
+
+ # Returns the custom fields that can be edited by the given user
+ def editable_custom_fields(user=nil)
+ editable_custom_field_values(user).map(&:custom_field).uniq
+ end
+end
diff --git a/app/models/time_entry_activity.rb b/app/models/time_entry_activity.rb
new file mode 100644
index 0000000..62fd18b
--- /dev/null
+++ b/app/models/time_entry_activity.rb
@@ -0,0 +1,38 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class TimeEntryActivity < Enumeration
+ has_many :time_entries, :foreign_key => 'activity_id'
+
+ OptionName = :enumeration_activities
+
+ def option_name
+ OptionName
+ end
+
+ def objects
+ TimeEntry.where(:activity_id => self_and_descendants(1).map(&:id))
+ end
+
+ def objects_count
+ objects.count
+ end
+
+ def transfer_relations(to)
+ objects.update_all(:activity_id => to.id)
+ end
+end
diff --git a/app/models/time_entry_activity_custom_field.rb b/app/models/time_entry_activity_custom_field.rb
new file mode 100644
index 0000000..93bc682
--- /dev/null
+++ b/app/models/time_entry_activity_custom_field.rb
@@ -0,0 +1,22 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class TimeEntryActivityCustomField < CustomField
+ def type_name
+ :enumeration_activities
+ end
+end
diff --git a/app/models/time_entry_custom_field.rb b/app/models/time_entry_custom_field.rb
new file mode 100644
index 0000000..78bfb9d
--- /dev/null
+++ b/app/models/time_entry_custom_field.rb
@@ -0,0 +1,23 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class TimeEntryCustomField < CustomField
+ def type_name
+ :label_spent_time
+ end
+end
+
diff --git a/app/models/time_entry_query.rb b/app/models/time_entry_query.rb
new file mode 100644
index 0000000..4092efc
--- /dev/null
+++ b/app/models/time_entry_query.rb
@@ -0,0 +1,227 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class TimeEntryQuery < Query
+
+ self.queried_class = TimeEntry
+ self.view_permission = :view_time_entries
+
+ self.available_columns = [
+ QueryColumn.new(:project, :sortable => "#{Project.table_name}.name", :groupable => true),
+ QueryColumn.new(:spent_on, :sortable => ["#{TimeEntry.table_name}.spent_on", "#{TimeEntry.table_name}.created_on"], :default_order => 'desc', :groupable => true),
+ QueryColumn.new(:tweek, :sortable => ["#{TimeEntry.table_name}.spent_on", "#{TimeEntry.table_name}.created_on"], :caption => :label_week),
+ QueryColumn.new(:user, :sortable => lambda {User.fields_for_order_statement}, :groupable => true),
+ QueryColumn.new(:activity, :sortable => "#{TimeEntryActivity.table_name}.position", :groupable => true),
+ QueryColumn.new(:issue, :sortable => "#{Issue.table_name}.id"),
+ QueryAssociationColumn.new(:issue, :tracker, :caption => :field_tracker, :sortable => "#{Tracker.table_name}.position"),
+ QueryAssociationColumn.new(:issue, :status, :caption => :field_status, :sortable => "#{IssueStatus.table_name}.position"),
+ QueryColumn.new(:comments),
+ QueryColumn.new(:hours, :sortable => "#{TimeEntry.table_name}.hours", :totalable => true),
+ ]
+
+ def initialize(attributes=nil, *args)
+ super attributes
+ self.filters ||= { 'spent_on' => {:operator => "*", :values => []} }
+ end
+
+ def initialize_available_filters
+ add_available_filter "spent_on", :type => :date_past
+
+ add_available_filter("project_id",
+ :type => :list, :values => lambda { project_values }
+ ) if project.nil?
+
+ if project && !project.leaf?
+ add_available_filter "subproject_id",
+ :type => :list_subprojects,
+ :values => lambda { subproject_values }
+ end
+
+ add_available_filter("issue_id", :type => :tree, :label => :label_issue)
+ add_available_filter("issue.tracker_id",
+ :type => :list,
+ :name => l("label_attribute_of_issue", :name => l(:field_tracker)),
+ :values => lambda { trackers.map {|t| [t.name, t.id.to_s]} })
+ add_available_filter("issue.status_id",
+ :type => :list,
+ :name => l("label_attribute_of_issue", :name => l(:field_status)),
+ :values => lambda { issue_statuses_values })
+ add_available_filter("issue.fixed_version_id",
+ :type => :list,
+ :name => l("label_attribute_of_issue", :name => l(:field_fixed_version)),
+ :values => lambda { fixed_version_values })
+
+ add_available_filter("user_id",
+ :type => :list_optional, :values => lambda { author_values }
+ )
+
+ activities = (project ? project.activities : TimeEntryActivity.shared)
+ add_available_filter("activity_id",
+ :type => :list, :values => activities.map {|a| [a.name, a.id.to_s]}
+ )
+
+ add_available_filter "comments", :type => :text
+ add_available_filter "hours", :type => :float
+
+ add_custom_fields_filters(TimeEntryCustomField)
+ add_associations_custom_fields_filters :project
+ add_custom_fields_filters(issue_custom_fields, :issue)
+ add_associations_custom_fields_filters :user
+ end
+
+ def available_columns
+ return @available_columns if @available_columns
+ @available_columns = self.class.available_columns.dup
+ @available_columns += TimeEntryCustomField.visible.
+ map {|cf| QueryCustomFieldColumn.new(cf) }
+ @available_columns += issue_custom_fields.visible.
+ map {|cf| QueryAssociationCustomFieldColumn.new(:issue, cf, :totalable => false) }
+ @available_columns += ProjectCustomField.visible.
+ map {|cf| QueryAssociationCustomFieldColumn.new(:project, cf) }
+ @available_columns
+ end
+
+ def default_columns_names
+ @default_columns_names ||= begin
+ default_columns = [:spent_on, :user, :activity, :issue, :comments, :hours]
+
+ project.present? ? default_columns : [:project] | default_columns
+ end
+ end
+
+ def default_totalable_names
+ [:hours]
+ end
+
+ def default_sort_criteria
+ [['spent_on', 'desc']]
+ end
+
+ # If a filter against a single issue is set, returns its id, otherwise nil.
+ def filtered_issue_id
+ if value_for('issue_id').to_s =~ /\A(\d+)\z/
+ $1
+ end
+ end
+
+ def base_scope
+ TimeEntry.visible.
+ joins(:project, :user).
+ includes(:activity).
+ references(:activity).
+ left_join_issue.
+ where(statement)
+ end
+
+ def results_scope(options={})
+ order_option = [group_by_sort_order, (options[:order] || sort_clause)].flatten.reject(&:blank?)
+
+ base_scope.
+ order(order_option).
+ joins(joins_for_order_statement(order_option.join(',')))
+ end
+
+ # Returns sum of all the spent hours
+ def total_for_hours(scope)
+ map_total(scope.sum(:hours)) {|t| t.to_f.round(2)}
+ end
+
+ def sql_for_issue_id_field(field, operator, value)
+ case operator
+ when "="
+ "#{TimeEntry.table_name}.issue_id = #{value.first.to_i}"
+ when "~"
+ issue = Issue.where(:id => value.first.to_i).first
+ if issue && (issue_ids = issue.self_and_descendants.pluck(:id)).any?
+ "#{TimeEntry.table_name}.issue_id IN (#{issue_ids.join(',')})"
+ else
+ "1=0"
+ end
+ when "!*"
+ "#{TimeEntry.table_name}.issue_id IS NULL"
+ when "*"
+ "#{TimeEntry.table_name}.issue_id IS NOT NULL"
+ end
+ end
+
+ def sql_for_issue_fixed_version_id_field(field, operator, value)
+ issue_ids = Issue.where(:fixed_version_id => value.map(&:to_i)).pluck(:id)
+ case operator
+ when "="
+ if issue_ids.any?
+ "#{TimeEntry.table_name}.issue_id IN (#{issue_ids.join(',')})"
+ else
+ "1=0"
+ end
+ when "!"
+ if issue_ids.any?
+ "#{TimeEntry.table_name}.issue_id NOT IN (#{issue_ids.join(',')})"
+ else
+ "1=1"
+ end
+ end
+ end
+
+ def sql_for_activity_id_field(field, operator, value)
+ condition_on_id = sql_for_field(field, operator, value, Enumeration.table_name, 'id')
+ condition_on_parent_id = sql_for_field(field, operator, value, Enumeration.table_name, 'parent_id')
+ ids = value.map(&:to_i).join(',')
+ table_name = Enumeration.table_name
+ if operator == '='
+ "(#{table_name}.id IN (#{ids}) OR #{table_name}.parent_id IN (#{ids}))"
+ else
+ "(#{table_name}.id NOT IN (#{ids}) AND (#{table_name}.parent_id IS NULL OR #{table_name}.parent_id NOT IN (#{ids})))"
+ end
+ end
+
+ def sql_for_issue_tracker_id_field(field, operator, value)
+ sql_for_field("tracker_id", operator, value, Issue.table_name, "tracker_id")
+ end
+
+ def sql_for_issue_status_id_field(field, operator, value)
+ sql_for_field("status_id", operator, value, Issue.table_name, "status_id")
+ end
+
+ # Accepts :from/:to params as shortcut filters
+ def build_from_params(params)
+ super
+ if params[:from].present? && params[:to].present?
+ add_filter('spent_on', '><', [params[:from], params[:to]])
+ elsif params[:from].present?
+ add_filter('spent_on', '>=', [params[:from]])
+ elsif params[:to].present?
+ add_filter('spent_on', '<=', [params[:to]])
+ end
+ self
+ end
+
+ def joins_for_order_statement(order_options)
+ joins = [super]
+
+ if order_options
+ if order_options.include?('issue_statuses')
+ joins << "LEFT OUTER JOIN #{IssueStatus.table_name} ON #{IssueStatus.table_name}.id = #{Issue.table_name}.status_id"
+ end
+ if order_options.include?('trackers')
+ joins << "LEFT OUTER JOIN #{Tracker.table_name} ON #{Tracker.table_name}.id = #{Issue.table_name}.tracker_id"
+ end
+ end
+
+ joins.compact!
+ joins.any? ? joins.join(' ') : nil
+ end
+end
diff --git a/app/models/token.rb b/app/models/token.rb
new file mode 100644
index 0000000..ee43865
--- /dev/null
+++ b/app/models/token.rb
@@ -0,0 +1,144 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Token < ActiveRecord::Base
+ belongs_to :user
+ validates_uniqueness_of :value
+ attr_protected :id
+
+ before_create :delete_previous_tokens, :generate_new_token
+
+ cattr_accessor :validity_time
+ self.validity_time = 1.day
+
+ class << self
+ attr_reader :actions
+
+ def add_action(name, options)
+ options.assert_valid_keys(:max_instances, :validity_time)
+ @actions ||= {}
+ @actions[name.to_s] = options
+ end
+ end
+
+ add_action :api, max_instances: 1, validity_time: nil
+ add_action :autologin, max_instances: 10, validity_time: Proc.new { Setting.autologin.to_i.days }
+ add_action :feeds, max_instances: 1, validity_time: nil
+ add_action :recovery, max_instances: 1, validity_time: Proc.new { Token.validity_time }
+ add_action :register, max_instances: 1, validity_time: Proc.new { Token.validity_time }
+ add_action :session, max_instances: 10, validity_time: nil
+
+ def generate_new_token
+ self.value = Token.generate_token_value
+ end
+
+ # Return true if token has expired
+ def expired?
+ validity_time = self.class.invalid_when_created_before(action)
+ validity_time.present? && created_on < validity_time
+ end
+
+ def max_instances
+ Token.actions.has_key?(action) ? Token.actions[action][:max_instances] : 1
+ end
+
+ def self.invalid_when_created_before(action = nil)
+ if Token.actions.has_key?(action)
+ validity_time = Token.actions[action][:validity_time]
+ validity_time = validity_time.call(action) if validity_time.respond_to? :call
+ else
+ validity_time = self.validity_time
+ end
+
+ if validity_time
+ Time.now - validity_time
+ end
+ end
+
+ # Delete all expired tokens
+ def self.destroy_expired
+ t = Token.arel_table
+
+ # Unknown actions have default validity_time
+ condition = t[:action].not_in(self.actions.keys).and(t[:created_on].lt(invalid_when_created_before))
+
+ self.actions.each do |action, options|
+ validity_time = invalid_when_created_before(action)
+
+ # Do not delete tokens, which don't become invalid
+ next if validity_time.nil?
+
+ condition = condition.or(
+ t[:action].eq(action).and(t[:created_on].lt(validity_time))
+ )
+ end
+
+ Token.where(condition).delete_all
+ end
+
+ # Returns the active user who owns the key for the given action
+ def self.find_active_user(action, key, validity_days=nil)
+ user = find_user(action, key, validity_days)
+ if user && user.active?
+ user
+ end
+ end
+
+ # Returns the user who owns the key for the given action
+ def self.find_user(action, key, validity_days=nil)
+ token = find_token(action, key, validity_days)
+ if token
+ token.user
+ end
+ end
+
+ # Returns the token for action and key with an optional
+ # validity duration (in number of days)
+ def self.find_token(action, key, validity_days=nil)
+ action = action.to_s
+ key = key.to_s
+ return nil unless action.present? && key =~ /\A[a-z0-9]+\z/i
+
+ token = Token.where(:action => action, :value => key).first
+ if token && (token.action == action) && (token.value == key) && token.user
+ if validity_days.nil? || (token.created_on > validity_days.days.ago)
+ token
+ end
+ end
+ end
+
+ def self.generate_token_value
+ Redmine::Utils.random_hex(20)
+ end
+
+ private
+
+ # Removes obsolete tokens (same user and action)
+ def delete_previous_tokens
+ if user
+ scope = Token.where(:user_id => user.id, :action => action)
+ if max_instances > 1
+ ids = scope.order(:updated_on => :desc).offset(max_instances - 1).ids
+ if ids.any?
+ Token.delete(ids)
+ end
+ else
+ scope.delete_all
+ end
+ end
+ end
+end
diff --git a/app/models/tracker.rb b/app/models/tracker.rb
new file mode 100644
index 0000000..5926321
--- /dev/null
+++ b/app/models/tracker.rb
@@ -0,0 +1,150 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Tracker < ActiveRecord::Base
+ include Redmine::SafeAttributes
+
+ CORE_FIELDS_UNDISABLABLE = %w(project_id tracker_id subject priority_id is_private).freeze
+ # Fields that can be disabled
+ # Other (future) fields should be appended, not inserted!
+ CORE_FIELDS = %w(assigned_to_id category_id fixed_version_id parent_issue_id start_date due_date estimated_hours done_ratio description).freeze
+ CORE_FIELDS_ALL = (CORE_FIELDS_UNDISABLABLE + CORE_FIELDS).freeze
+
+ before_destroy :check_integrity
+ belongs_to :default_status, :class_name => 'IssueStatus'
+ has_many :issues
+ has_many :workflow_rules, :dependent => :delete_all do
+ def copy(source_tracker)
+ ActiveSupport::Deprecation.warn "tracker.workflow_rules.copy is deprecated and will be removed in Redmine 4.0, use tracker.copy_worflow_rules instead"
+ proxy_association.owner.copy_workflow_rules(source_tracker)
+ end
+ end
+ has_and_belongs_to_many :projects
+ has_and_belongs_to_many :custom_fields, :class_name => 'IssueCustomField', :join_table => "#{table_name_prefix}custom_fields_trackers#{table_name_suffix}", :association_foreign_key => 'custom_field_id'
+ acts_as_positioned
+
+ attr_protected :fields_bits
+
+ validates_presence_of :default_status
+ validates_presence_of :name
+ validates_uniqueness_of :name
+ validates_length_of :name, :maximum => 30
+
+ scope :sorted, lambda { order(:position) }
+ scope :named, lambda {|arg| where("LOWER(#{table_name}.name) = LOWER(?)", arg.to_s.strip)}
+
+ # Returns the trackers that are visible by the user.
+ #
+ # Examples:
+ # project.trackers.visible(user)
+ # => returns the trackers that are visible by the user in project
+ #
+ # Tracker.visible(user)
+ # => returns the trackers that are visible by the user in at least on project
+ scope :visible, lambda {|*args|
+ user = args.shift || User.current
+ condition = Project.allowed_to_condition(user, :view_issues) do |role, user|
+ unless role.permissions_all_trackers?(:view_issues)
+ tracker_ids = role.permissions_tracker_ids(:view_issues)
+ if tracker_ids.any?
+ "#{Tracker.table_name}.id IN (#{tracker_ids.join(',')})"
+ else
+ '1=0'
+ end
+ end
+ end
+ joins(:projects).where(condition).distinct
+ }
+
+ safe_attributes 'name',
+ 'default_status_id',
+ 'is_in_roadmap',
+ 'core_fields',
+ 'position',
+ 'custom_field_ids',
+ 'project_ids'
+
+ def to_s; name end
+
+ def <=>(tracker)
+ position <=> tracker.position
+ end
+
+ # Returns an array of IssueStatus that are used
+ # in the tracker's workflows
+ def issue_statuses
+ @issue_statuses ||= IssueStatus.where(:id => issue_status_ids).to_a.sort
+ end
+
+ def issue_status_ids
+ if new_record?
+ []
+ else
+ @issue_status_ids ||= WorkflowTransition.where(:tracker_id => id).distinct.pluck(:old_status_id, :new_status_id).flatten.uniq
+ end
+ end
+
+ def disabled_core_fields
+ i = -1
+ @disabled_core_fields ||= CORE_FIELDS.select { i += 1; (fields_bits || 0) & (2 ** i) != 0}
+ end
+
+ def core_fields
+ CORE_FIELDS - disabled_core_fields
+ end
+
+ def core_fields=(fields)
+ raise ArgumentError.new("Tracker.core_fields takes an array") unless fields.is_a?(Array)
+
+ bits = 0
+ CORE_FIELDS.each_with_index do |field, i|
+ unless fields.include?(field)
+ bits |= 2 ** i
+ end
+ end
+ self.fields_bits = bits
+ @disabled_core_fields = nil
+ core_fields
+ end
+
+ def copy_workflow_rules(source_tracker)
+ WorkflowRule.copy(source_tracker, nil, self, nil)
+ end
+
+ # Returns the fields that are disabled for all the given trackers
+ def self.disabled_core_fields(trackers)
+ if trackers.present?
+ trackers.map(&:disabled_core_fields).reduce(:&)
+ else
+ []
+ end
+ end
+
+ # Returns the fields that are enabled for one tracker at least
+ def self.core_fields(trackers)
+ if trackers.present?
+ trackers.uniq.map(&:core_fields).reduce(:|)
+ else
+ CORE_FIELDS.dup
+ end
+ end
+
+private
+ def check_integrity
+ raise Exception.new("Cannot delete tracker") if Issue.where(:tracker_id => self.id).any?
+ end
+end
diff --git a/app/models/user.rb b/app/models/user.rb
new file mode 100644
index 0000000..3578566
--- /dev/null
+++ b/app/models/user.rb
@@ -0,0 +1,974 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require "digest/sha1"
+
+class User < Principal
+ include Redmine::SafeAttributes
+
+ # Different ways of displaying/sorting users
+ USER_FORMATS = {
+ :firstname_lastname => {
+ :string => '#{firstname} #{lastname}',
+ :order => %w(firstname lastname id),
+ :setting_order => 1
+ },
+ :firstname_lastinitial => {
+ :string => '#{firstname} #{lastname.to_s.chars.first}.',
+ :order => %w(firstname lastname id),
+ :setting_order => 2
+ },
+ :firstinitial_lastname => {
+ :string => '#{firstname.to_s.gsub(/(([[:alpha:]])[[:alpha:]]*\.?)/, \'\2.\')} #{lastname}',
+ :order => %w(firstname lastname id),
+ :setting_order => 2
+ },
+ :firstname => {
+ :string => '#{firstname}',
+ :order => %w(firstname id),
+ :setting_order => 3
+ },
+ :lastname_firstname => {
+ :string => '#{lastname} #{firstname}',
+ :order => %w(lastname firstname id),
+ :setting_order => 4
+ },
+ :lastnamefirstname => {
+ :string => '#{lastname}#{firstname}',
+ :order => %w(lastname firstname id),
+ :setting_order => 5
+ },
+ :lastname_comma_firstname => {
+ :string => '#{lastname}, #{firstname}',
+ :order => %w(lastname firstname id),
+ :setting_order => 6
+ },
+ :lastname => {
+ :string => '#{lastname}',
+ :order => %w(lastname id),
+ :setting_order => 7
+ },
+ :username => {
+ :string => '#{login}',
+ :order => %w(login id),
+ :setting_order => 8
+ },
+ }
+
+ MAIL_NOTIFICATION_OPTIONS = [
+ ['all', :label_user_mail_option_all],
+ ['selected', :label_user_mail_option_selected],
+ ['only_my_events', :label_user_mail_option_only_my_events],
+ ['only_assigned', :label_user_mail_option_only_assigned],
+ ['only_owner', :label_user_mail_option_only_owner],
+ ['none', :label_user_mail_option_none]
+ ]
+
+ has_and_belongs_to_many :groups,
+ :join_table => "#{table_name_prefix}groups_users#{table_name_suffix}",
+ :after_add => Proc.new {|user, group| group.user_added(user)},
+ :after_remove => Proc.new {|user, group| group.user_removed(user)}
+ has_many :changesets, :dependent => :nullify
+ has_one :preference, :dependent => :destroy, :class_name => 'UserPreference'
+ has_one :rss_token, lambda {where "action='feeds'"}, :class_name => 'Token'
+ has_one :api_token, lambda {where "action='api'"}, :class_name => 'Token'
+ has_one :email_address, lambda {where :is_default => true}, :autosave => true
+ has_many :email_addresses, :dependent => :delete_all
+ belongs_to :auth_source
+
+ scope :logged, lambda { where("#{User.table_name}.status <> #{STATUS_ANONYMOUS}") }
+ scope :status, lambda {|arg| where(arg.blank? ? nil : {:status => arg.to_i}) }
+
+ acts_as_customizable
+
+ attr_accessor :password, :password_confirmation, :generate_password
+ attr_accessor :last_before_login_on
+ attr_accessor :remote_ip
+
+ # Prevents unauthorized assignments
+ attr_protected :password, :password_confirmation, :hashed_password
+
+ LOGIN_LENGTH_LIMIT = 60
+ MAIL_LENGTH_LIMIT = 60
+
+ validates_presence_of :login, :firstname, :lastname, :if => Proc.new { |user| !user.is_a?(AnonymousUser) }
+ validates_uniqueness_of :login, :if => Proc.new { |user| user.login_changed? && user.login.present? }, :case_sensitive => false
+ # Login must contain letters, numbers, underscores only
+ validates_format_of :login, :with => /\A[a-z0-9_\-@\.]*\z/i
+ validates_length_of :login, :maximum => LOGIN_LENGTH_LIMIT
+ validates_length_of :firstname, :lastname, :maximum => 30
+ validates_length_of :identity_url, maximum: 255
+ validates_inclusion_of :mail_notification, :in => MAIL_NOTIFICATION_OPTIONS.collect(&:first), :allow_blank => true
+ validate :validate_password_length
+ validate do
+ if password_confirmation && password != password_confirmation
+ errors.add(:password, :confirmation)
+ end
+ end
+
+ self.valid_statuses = [STATUS_ACTIVE, STATUS_REGISTERED, STATUS_LOCKED]
+
+ before_validation :instantiate_email_address
+ before_create :set_mail_notification
+ before_save :generate_password_if_needed, :update_hashed_password
+ before_destroy :remove_references_before_destroy
+ after_save :update_notified_project_ids, :destroy_tokens, :deliver_security_notification
+ after_destroy :deliver_security_notification
+
+ scope :admin, lambda {|*args|
+ admin = args.size > 0 ? !!args.first : true
+ where(:admin => admin)
+ }
+ scope :in_group, lambda {|group|
+ group_id = group.is_a?(Group) ? group.id : group.to_i
+ where("#{User.table_name}.id IN (SELECT gu.user_id FROM #{table_name_prefix}groups_users#{table_name_suffix} gu WHERE gu.group_id = ?)", group_id)
+ }
+ scope :not_in_group, lambda {|group|
+ group_id = group.is_a?(Group) ? group.id : group.to_i
+ where("#{User.table_name}.id NOT IN (SELECT gu.user_id FROM #{table_name_prefix}groups_users#{table_name_suffix} gu WHERE gu.group_id = ?)", group_id)
+ }
+ scope :sorted, lambda { order(*User.fields_for_order_statement)}
+ scope :having_mail, lambda {|arg|
+ addresses = Array.wrap(arg).map {|a| a.to_s.downcase}
+ if addresses.any?
+ joins(:email_addresses).where("LOWER(#{EmailAddress.table_name}.address) IN (?)", addresses).distinct
+ else
+ none
+ end
+ }
+
+ def set_mail_notification
+ self.mail_notification = Setting.default_notification_option if self.mail_notification.blank?
+ true
+ end
+
+ def update_hashed_password
+ # update hashed_password if password was set
+ if self.password && self.auth_source_id.blank?
+ salt_password(password)
+ end
+ end
+
+ alias :base_reload :reload
+ def reload(*args)
+ @name = nil
+ @roles = nil
+ @projects_by_role = nil
+ @project_ids_by_role = nil
+ @membership_by_project_id = nil
+ @notified_projects_ids = nil
+ @notified_projects_ids_changed = false
+ @builtin_role = nil
+ @visible_project_ids = nil
+ @managed_roles = nil
+ base_reload(*args)
+ end
+
+ def mail
+ email_address.try(:address)
+ end
+
+ def mail=(arg)
+ email = email_address || build_email_address
+ email.address = arg
+ end
+
+ def mail_changed?
+ email_address.try(:address_changed?)
+ end
+
+ def mails
+ email_addresses.pluck(:address)
+ end
+
+ def self.find_or_initialize_by_identity_url(url)
+ user = where(:identity_url => url).first
+ unless user
+ user = User.new
+ user.identity_url = url
+ end
+ user
+ end
+
+ def identity_url=(url)
+ if url.blank?
+ write_attribute(:identity_url, '')
+ else
+ begin
+ write_attribute(:identity_url, OpenIdAuthentication.normalize_identifier(url))
+ rescue OpenIdAuthentication::InvalidOpenId
+ # Invalid url, don't save
+ end
+ end
+ self.read_attribute(:identity_url)
+ end
+
+ # Returns the user that matches provided login and password, or nil
+ def self.try_to_login(login, password, active_only=true)
+ login = login.to_s.strip
+ password = password.to_s
+
+ # Make sure no one can sign in with an empty login or password
+ return nil if login.empty? || password.empty?
+ user = find_by_login(login)
+ if user
+ # user is already in local database
+ return nil unless user.check_password?(password)
+ return nil if !user.active? && active_only
+ else
+ # user is not yet registered, try to authenticate with available sources
+ attrs = AuthSource.authenticate(login, password)
+ if attrs
+ user = new(attrs)
+ user.login = login
+ user.language = Setting.default_language
+ if user.save
+ user.reload
+ logger.info("User '#{user.login}' created from external auth source: #{user.auth_source.type} - #{user.auth_source.name}") if logger && user.auth_source
+ end
+ end
+ end
+ user.update_column(:last_login_on, Time.now) if user && !user.new_record? && user.active?
+ user
+ rescue => text
+ raise text
+ end
+
+ # Returns the user who matches the given autologin +key+ or nil
+ def self.try_to_autologin(key)
+ user = Token.find_active_user('autologin', key, Setting.autologin.to_i)
+ if user
+ user.update_column(:last_login_on, Time.now)
+ user
+ end
+ end
+
+ def self.name_formatter(formatter = nil)
+ USER_FORMATS[formatter || Setting.user_format] || USER_FORMATS[:firstname_lastname]
+ end
+
+ # Returns an array of fields names than can be used to make an order statement for users
+ # according to how user names are displayed
+ # Examples:
+ #
+ # User.fields_for_order_statement => ['users.login', 'users.id']
+ # User.fields_for_order_statement('authors') => ['authors.login', 'authors.id']
+ def self.fields_for_order_statement(table=nil)
+ table ||= table_name
+ name_formatter[:order].map {|field| "#{table}.#{field}"}
+ end
+
+ # Return user's full name for display
+ def name(formatter = nil)
+ f = self.class.name_formatter(formatter)
+ if formatter
+ eval('"' + f[:string] + '"')
+ else
+ @name ||= eval('"' + f[:string] + '"')
+ end
+ end
+
+ def active?
+ self.status == STATUS_ACTIVE
+ end
+
+ def registered?
+ self.status == STATUS_REGISTERED
+ end
+
+ def locked?
+ self.status == STATUS_LOCKED
+ end
+
+ def activate
+ self.status = STATUS_ACTIVE
+ end
+
+ def register
+ self.status = STATUS_REGISTERED
+ end
+
+ def lock
+ self.status = STATUS_LOCKED
+ end
+
+ def activate!
+ update_attribute(:status, STATUS_ACTIVE)
+ end
+
+ def register!
+ update_attribute(:status, STATUS_REGISTERED)
+ end
+
+ def lock!
+ update_attribute(:status, STATUS_LOCKED)
+ end
+
+ # Returns true if +clear_password+ is the correct user's password, otherwise false
+ def check_password?(clear_password)
+ if auth_source_id.present?
+ auth_source.authenticate(self.login, clear_password)
+ else
+ User.hash_password("#{salt}#{User.hash_password clear_password}") == hashed_password
+ end
+ end
+
+ # Generates a random salt and computes hashed_password for +clear_password+
+ # The hashed password is stored in the following form: SHA1(salt + SHA1(password))
+ def salt_password(clear_password)
+ self.salt = User.generate_salt
+ self.hashed_password = User.hash_password("#{salt}#{User.hash_password clear_password}")
+ self.passwd_changed_on = Time.now.change(:usec => 0)
+ end
+
+ # Does the backend storage allow this user to change their password?
+ def change_password_allowed?
+ return true if auth_source.nil?
+ return auth_source.allow_password_changes?
+ end
+
+ # Returns true if the user password has expired
+ def password_expired?
+ period = Setting.password_max_age.to_i
+ if period.zero?
+ false
+ else
+ changed_on = self.passwd_changed_on || Time.at(0)
+ changed_on < period.days.ago
+ end
+ end
+
+ def must_change_password?
+ (must_change_passwd? || password_expired?) && change_password_allowed?
+ end
+
+ def generate_password?
+ generate_password == '1' || generate_password == true
+ end
+
+ # Generate and set a random password on given length
+ def random_password(length=40)
+ chars = ("a".."z").to_a + ("A".."Z").to_a + ("0".."9").to_a
+ chars -= %w(0 O 1 l)
+ password = ''
+ length.times {|i| password << chars[SecureRandom.random_number(chars.size)] }
+ self.password = password
+ self.password_confirmation = password
+ self
+ end
+
+ def pref
+ self.preference ||= UserPreference.new(:user => self)
+ end
+
+ def time_zone
+ @time_zone ||= (self.pref.time_zone.blank? ? nil : ActiveSupport::TimeZone[self.pref.time_zone])
+ end
+
+ def force_default_language?
+ Setting.force_default_language_for_loggedin?
+ end
+
+ def language
+ if force_default_language?
+ Setting.default_language
+ else
+ super
+ end
+ end
+
+ def wants_comments_in_reverse_order?
+ self.pref[:comments_sorting] == 'desc'
+ end
+
+ # Return user's RSS key (a 40 chars long string), used to access feeds
+ def rss_key
+ if rss_token.nil?
+ create_rss_token(:action => 'feeds')
+ end
+ rss_token.value
+ end
+
+ # Return user's API key (a 40 chars long string), used to access the API
+ def api_key
+ if api_token.nil?
+ create_api_token(:action => 'api')
+ end
+ api_token.value
+ end
+
+ # Generates a new session token and returns its value
+ def generate_session_token
+ token = Token.create!(:user_id => id, :action => 'session')
+ token.value
+ end
+
+ def delete_session_token(value)
+ Token.where(:user_id => id, :action => 'session', :value => value).delete_all
+ end
+
+ # Generates a new autologin token and returns its value
+ def generate_autologin_token
+ token = Token.create!(:user_id => id, :action => 'autologin')
+ token.value
+ end
+
+ def delete_autologin_token(value)
+ Token.where(:user_id => id, :action => 'autologin', :value => value).delete_all
+ end
+
+ # Returns true if token is a valid session token for the user whose id is user_id
+ def self.verify_session_token(user_id, token)
+ return false if user_id.blank? || token.blank?
+
+ scope = Token.where(:user_id => user_id, :value => token.to_s, :action => 'session')
+ if Setting.session_lifetime?
+ scope = scope.where("created_on > ?", Setting.session_lifetime.to_i.minutes.ago)
+ end
+ if Setting.session_timeout?
+ scope = scope.where("updated_on > ?", Setting.session_timeout.to_i.minutes.ago)
+ end
+ scope.update_all(:updated_on => Time.now) == 1
+ end
+
+ # Return an array of project ids for which the user has explicitly turned mail notifications on
+ def notified_projects_ids
+ @notified_projects_ids ||= memberships.select {|m| m.mail_notification?}.collect(&:project_id)
+ end
+
+ def notified_project_ids=(ids)
+ @notified_projects_ids_changed = true
+ @notified_projects_ids = ids.map(&:to_i).uniq.select {|n| n > 0}
+ end
+
+ # Updates per project notifications (after_save callback)
+ def update_notified_project_ids
+ if @notified_projects_ids_changed
+ ids = (mail_notification == 'selected' ? Array.wrap(notified_projects_ids).reject(&:blank?) : [])
+ members.update_all(:mail_notification => false)
+ members.where(:project_id => ids).update_all(:mail_notification => true) if ids.any?
+ end
+ end
+ private :update_notified_project_ids
+
+ def valid_notification_options
+ self.class.valid_notification_options(self)
+ end
+
+ # Only users that belong to more than 1 project can select projects for which they are notified
+ def self.valid_notification_options(user=nil)
+ # Note that @user.membership.size would fail since AR ignores
+ # :include association option when doing a count
+ if user.nil? || user.memberships.length < 1
+ MAIL_NOTIFICATION_OPTIONS.reject {|option| option.first == 'selected'}
+ else
+ MAIL_NOTIFICATION_OPTIONS
+ end
+ end
+
+ # Find a user account by matching the exact login and then a case-insensitive
+ # version. Exact matches will be given priority.
+ def self.find_by_login(login)
+ login = Redmine::CodesetUtil.replace_invalid_utf8(login.to_s)
+ if login.present?
+ # First look for an exact match
+ user = where(:login => login).detect {|u| u.login == login}
+ unless user
+ # Fail over to case-insensitive if none was found
+ user = where("LOWER(login) = ?", login.downcase).first
+ end
+ user
+ end
+ end
+
+ def self.find_by_rss_key(key)
+ Token.find_active_user('feeds', key)
+ end
+
+ def self.find_by_api_key(key)
+ Token.find_active_user('api', key)
+ end
+
+ # Makes find_by_mail case-insensitive
+ def self.find_by_mail(mail)
+ having_mail(mail).first
+ end
+
+ # Returns true if the default admin account can no longer be used
+ def self.default_admin_account_changed?
+ !User.active.find_by_login("admin").try(:check_password?, "admin")
+ end
+
+ def to_s
+ name
+ end
+
+ CSS_CLASS_BY_STATUS = {
+ STATUS_ANONYMOUS => 'anon',
+ STATUS_ACTIVE => 'active',
+ STATUS_REGISTERED => 'registered',
+ STATUS_LOCKED => 'locked'
+ }
+
+ def css_classes
+ "user #{CSS_CLASS_BY_STATUS[status]}"
+ end
+
+ # Returns the current day according to user's time zone
+ def today
+ if time_zone.nil?
+ Date.today
+ else
+ time_zone.today
+ end
+ end
+
+ # Returns the day of +time+ according to user's time zone
+ def time_to_date(time)
+ if time_zone.nil?
+ time.to_date
+ else
+ time.in_time_zone(time_zone).to_date
+ end
+ end
+
+ def logged?
+ true
+ end
+
+ def anonymous?
+ !logged?
+ end
+
+ # Returns user's membership for the given project
+ # or nil if the user is not a member of project
+ def membership(project)
+ project_id = project.is_a?(Project) ? project.id : project
+
+ @membership_by_project_id ||= Hash.new {|h, project_id|
+ h[project_id] = memberships.where(:project_id => project_id).first
+ }
+ @membership_by_project_id[project_id]
+ end
+
+ def roles
+ @roles ||= Role.joins(members: :project).where(["#{Project.table_name}.status <> ?", Project::STATUS_ARCHIVED]).where(Member.arel_table[:user_id].eq(id)).distinct
+ end
+
+ # Returns the user's bult-in role
+ def builtin_role
+ @builtin_role ||= Role.non_member
+ end
+
+ # Return user's roles for project
+ def roles_for_project(project)
+ # No role on archived projects
+ return [] if project.nil? || project.archived?
+ if membership = membership(project)
+ membership.roles.to_a
+ elsif project.is_public?
+ project.override_roles(builtin_role)
+ else
+ []
+ end
+ end
+
+ # Returns a hash of user's projects grouped by roles
+ # TODO: No longer used, should be deprecated
+ def projects_by_role
+ return @projects_by_role if @projects_by_role
+
+ result = Hash.new([])
+ project_ids_by_role.each do |role, ids|
+ result[role] = Project.where(:id => ids).to_a
+ end
+ @projects_by_role = result
+ end
+
+ # Returns a hash of project ids grouped by roles.
+ # Includes the projects that the user is a member of and the projects
+ # that grant custom permissions to the builtin groups.
+ def project_ids_by_role
+ # Clear project condition for when called from chained scopes
+ # eg. project.children.visible(user)
+ Project.unscoped do
+ return @project_ids_by_role if @project_ids_by_role
+
+ group_class = anonymous? ? GroupAnonymous : GroupNonMember
+ group_id = group_class.pluck(:id).first
+
+ members = Member.joins(:project, :member_roles).
+ where("#{Project.table_name}.status <> 9").
+ where("#{Member.table_name}.user_id = ? OR (#{Project.table_name}.is_public = ? AND #{Member.table_name}.user_id = ?)", self.id, true, group_id).
+ pluck(:user_id, :role_id, :project_id)
+
+ hash = {}
+ members.each do |user_id, role_id, project_id|
+ # Ignore the roles of the builtin group if the user is a member of the project
+ next if user_id != id && project_ids.include?(project_id)
+
+ hash[role_id] ||= []
+ hash[role_id] << project_id
+ end
+
+ result = Hash.new([])
+ if hash.present?
+ roles = Role.where(:id => hash.keys).to_a
+ hash.each do |role_id, proj_ids|
+ role = roles.detect {|r| r.id == role_id}
+ if role
+ result[role] = proj_ids.uniq
+ end
+ end
+ end
+ @project_ids_by_role = result
+ end
+ end
+
+ # Returns the ids of visible projects
+ def visible_project_ids
+ @visible_project_ids ||= Project.visible(self).pluck(:id)
+ end
+
+ # Returns the roles that the user is allowed to manage for the given project
+ def managed_roles(project)
+ if admin?
+ @managed_roles ||= Role.givable.to_a
+ else
+ membership(project).try(:managed_roles) || []
+ end
+ end
+
+ # Returns true if user is arg or belongs to arg
+ def is_or_belongs_to?(arg)
+ if arg.is_a?(User)
+ self == arg
+ elsif arg.is_a?(Group)
+ arg.users.include?(self)
+ else
+ false
+ end
+ end
+
+ # Return true if the user is allowed to do the specified action on a specific context
+ # Action can be:
+ # * a parameter-like Hash (eg. :controller => 'projects', :action => 'edit')
+ # * a permission Symbol (eg. :edit_project)
+ # Context can be:
+ # * a project : returns true if user is allowed to do the specified action on this project
+ # * an array of projects : returns true if user is allowed on every project
+ # * nil with options[:global] set : check if user has at least one role allowed for this action,
+ # or falls back to Non Member / Anonymous permissions depending if the user is logged
+ def allowed_to?(action, context, options={}, &block)
+ if context && context.is_a?(Project)
+ return false unless context.allows_to?(action)
+ # Admin users are authorized for anything else
+ return true if admin?
+
+ roles = roles_for_project(context)
+ return false unless roles
+ roles.any? {|role|
+ (context.is_public? || role.member?) &&
+ role.allowed_to?(action) &&
+ (block_given? ? yield(role, self) : true)
+ }
+ elsif context && context.is_a?(Array)
+ if context.empty?
+ false
+ else
+ # Authorize if user is authorized on every element of the array
+ context.map {|project| allowed_to?(action, project, options, &block)}.reduce(:&)
+ end
+ elsif context
+ raise ArgumentError.new("#allowed_to? context argument must be a Project, an Array of projects or nil")
+ elsif options[:global]
+ # Admin users are always authorized
+ return true if admin?
+
+ # authorize if user has at least one role that has this permission
+ roles = self.roles.to_a | [builtin_role]
+ roles.any? {|role|
+ role.allowed_to?(action) &&
+ (block_given? ? yield(role, self) : true)
+ }
+ else
+ false
+ end
+ end
+
+ # Is the user allowed to do the specified action on any project?
+ # See allowed_to? for the actions and valid options.
+ #
+ # NB: this method is not used anywhere in the core codebase as of
+ # 2.5.2, but it's used by many plugins so if we ever want to remove
+ # it it has to be carefully deprecated for a version or two.
+ def allowed_to_globally?(action, options={}, &block)
+ allowed_to?(action, nil, options.reverse_merge(:global => true), &block)
+ end
+
+ def allowed_to_view_all_time_entries?(context)
+ allowed_to?(:view_time_entries, context) do |role, user|
+ role.time_entries_visibility == 'all'
+ end
+ end
+
+ # Returns true if the user is allowed to delete the user's own account
+ def own_account_deletable?
+ Setting.unsubscribe? &&
+ (!admin? || User.active.admin.where("id <> ?", id).exists?)
+ end
+
+ safe_attributes 'firstname',
+ 'lastname',
+ 'mail',
+ 'mail_notification',
+ 'notified_project_ids',
+ 'language',
+ 'custom_field_values',
+ 'custom_fields',
+ 'identity_url'
+
+ safe_attributes 'login',
+ :if => lambda {|user, current_user| user.new_record?}
+
+ safe_attributes 'status',
+ 'auth_source_id',
+ 'generate_password',
+ 'must_change_passwd',
+ 'login',
+ 'admin',
+ :if => lambda {|user, current_user| current_user.admin?}
+
+ safe_attributes 'group_ids',
+ :if => lambda {|user, current_user| current_user.admin? && !user.new_record?}
+
+ # Utility method to help check if a user should be notified about an
+ # event.
+ #
+ # TODO: only supports Issue events currently
+ def notify_about?(object)
+ if mail_notification == 'all'
+ true
+ elsif mail_notification.blank? || mail_notification == 'none'
+ false
+ else
+ case object
+ when Issue
+ case mail_notification
+ when 'selected', 'only_my_events'
+ # user receives notifications for created/assigned issues on unselected projects
+ object.author == self || is_or_belongs_to?(object.assigned_to) || is_or_belongs_to?(object.assigned_to_was)
+ when 'only_assigned'
+ is_or_belongs_to?(object.assigned_to) || is_or_belongs_to?(object.assigned_to_was)
+ when 'only_owner'
+ object.author == self
+ end
+ when News
+ # always send to project members except when mail_notification is set to 'none'
+ true
+ end
+ end
+ end
+
+ def self.current=(user)
+ RequestStore.store[:current_user] = user
+ end
+
+ def self.current
+ RequestStore.store[:current_user] ||= User.anonymous
+ end
+
+ # Returns the anonymous user. If the anonymous user does not exist, it is created. There can be only
+ # one anonymous user per database.
+ def self.anonymous
+ anonymous_user = AnonymousUser.unscoped.first
+ if anonymous_user.nil?
+ anonymous_user = AnonymousUser.unscoped.create(:lastname => 'Anonymous', :firstname => '', :login => '', :status => 0)
+ raise 'Unable to create the anonymous user.' if anonymous_user.new_record?
+ end
+ anonymous_user
+ end
+
+ # Salts all existing unsalted passwords
+ # It changes password storage scheme from SHA1(password) to SHA1(salt + SHA1(password))
+ # This method is used in the SaltPasswords migration and is to be kept as is
+ def self.salt_unsalted_passwords!
+ transaction do
+ User.where("salt IS NULL OR salt = ''").find_each do |user|
+ next if user.hashed_password.blank?
+ salt = User.generate_salt
+ hashed_password = User.hash_password("#{salt}#{user.hashed_password}")
+ User.where(:id => user.id).update_all(:salt => salt, :hashed_password => hashed_password)
+ end
+ end
+ end
+
+ protected
+
+ def validate_password_length
+ return if password.blank? && generate_password?
+ # Password length validation based on setting
+ if !password.nil? && password.size < Setting.password_min_length.to_i
+ errors.add(:password, :too_short, :count => Setting.password_min_length.to_i)
+ end
+ end
+
+ def instantiate_email_address
+ email_address || build_email_address
+ end
+
+ private
+
+ def generate_password_if_needed
+ if generate_password? && auth_source.nil?
+ length = [Setting.password_min_length.to_i + 2, 10].max
+ random_password(length)
+ end
+ end
+
+ # Delete all outstanding password reset tokens on password change.
+ # Delete the autologin tokens on password change to prohibit session leakage.
+ # This helps to keep the account secure in case the associated email account
+ # was compromised.
+ def destroy_tokens
+ if hashed_password_changed? || (status_changed? && !active?)
+ tokens = ['recovery', 'autologin', 'session']
+ Token.where(:user_id => id, :action => tokens).delete_all
+ end
+ end
+
+ # Removes references that are not handled by associations
+ # Things that are not deleted are reassociated with the anonymous user
+ def remove_references_before_destroy
+ return if self.id.nil?
+
+ substitute = User.anonymous
+ Attachment.where(['author_id = ?', id]).update_all(['author_id = ?', substitute.id])
+ Comment.where(['author_id = ?', id]).update_all(['author_id = ?', substitute.id])
+ Issue.where(['author_id = ?', id]).update_all(['author_id = ?', substitute.id])
+ Issue.where(['assigned_to_id = ?', id]).update_all('assigned_to_id = NULL')
+ Journal.where(['user_id = ?', id]).update_all(['user_id = ?', substitute.id])
+ JournalDetail.
+ where(["property = 'attr' AND prop_key = 'assigned_to_id' AND old_value = ?", id.to_s]).
+ update_all(['old_value = ?', substitute.id.to_s])
+ JournalDetail.
+ where(["property = 'attr' AND prop_key = 'assigned_to_id' AND value = ?", id.to_s]).
+ update_all(['value = ?', substitute.id.to_s])
+ Message.where(['author_id = ?', id]).update_all(['author_id = ?', substitute.id])
+ News.where(['author_id = ?', id]).update_all(['author_id = ?', substitute.id])
+ # Remove private queries and keep public ones
+ ::Query.where('user_id = ? AND visibility = ?', id, ::Query::VISIBILITY_PRIVATE).delete_all
+ ::Query.where(['user_id = ?', id]).update_all(['user_id = ?', substitute.id])
+ TimeEntry.where(['user_id = ?', id]).update_all(['user_id = ?', substitute.id])
+ Token.where('user_id = ?', id).delete_all
+ Watcher.where('user_id = ?', id).delete_all
+ WikiContent.where(['author_id = ?', id]).update_all(['author_id = ?', substitute.id])
+ WikiContent::Version.where(['author_id = ?', id]).update_all(['author_id = ?', substitute.id])
+ end
+
+ # Return password digest
+ def self.hash_password(clear_password)
+ Digest::SHA1.hexdigest(clear_password || "")
+ end
+
+ # Returns a 128bits random salt as a hex string (32 chars long)
+ def self.generate_salt
+ Redmine::Utils.random_hex(16)
+ end
+
+ # Send a security notification to all admins if the user has gained/lost admin privileges
+ def deliver_security_notification
+ options = {
+ field: :field_admin,
+ value: login,
+ title: :label_user_plural,
+ url: {controller: 'users', action: 'index'}
+ }
+
+ deliver = false
+ if (admin? && id_changed? && active?) || # newly created admin
+ (admin? && admin_changed? && active?) || # regular user became admin
+ (admin? && status_changed? && active?) # locked admin became active again
+
+ deliver = true
+ options[:message] = :mail_body_security_notification_add
+
+ elsif (admin? && destroyed? && active?) || # active admin user was deleted
+ (!admin? && admin_changed? && active?) || # admin is no longer admin
+ (admin? && status_changed? && !active?) # admin was locked
+
+ deliver = true
+ options[:message] = :mail_body_security_notification_remove
+ end
+
+ if deliver
+ users = User.active.where(admin: true).to_a
+ Mailer.security_notification(users, options).deliver
+ end
+ end
+end
+
+class AnonymousUser < User
+ validate :validate_anonymous_uniqueness, :on => :create
+
+ self.valid_statuses = [STATUS_ANONYMOUS]
+
+ def validate_anonymous_uniqueness
+ # There should be only one AnonymousUser in the database
+ errors.add :base, 'An anonymous user already exists.' if AnonymousUser.exists?
+ end
+
+ def available_custom_fields
+ []
+ end
+
+ # Overrides a few properties
+ def logged?; false end
+ def admin; false end
+ def name(*args); I18n.t(:label_user_anonymous) end
+ def mail=(*args); nil end
+ def mail; nil end
+ def time_zone; nil end
+ def rss_key; nil end
+
+ def pref
+ UserPreference.new(:user => self)
+ end
+
+ # Returns the user's bult-in role
+ def builtin_role
+ @builtin_role ||= Role.anonymous
+ end
+
+ def membership(*args)
+ nil
+ end
+
+ def member_of?(*args)
+ false
+ end
+
+ # Anonymous user can not be destroyed
+ def destroy
+ false
+ end
+
+ protected
+
+ def instantiate_email_address
+ end
+end
diff --git a/app/models/user_custom_field.rb b/app/models/user_custom_field.rb
new file mode 100644
index 0000000..8b4b347
--- /dev/null
+++ b/app/models/user_custom_field.rb
@@ -0,0 +1,23 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class UserCustomField < CustomField
+ def type_name
+ :label_user_plural
+ end
+end
+
diff --git a/app/models/user_preference.rb b/app/models/user_preference.rb
new file mode 100644
index 0000000..c6b7fc2
--- /dev/null
+++ b/app/models/user_preference.rb
@@ -0,0 +1,168 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class UserPreference < ActiveRecord::Base
+ include Redmine::SafeAttributes
+
+ belongs_to :user
+ serialize :others
+
+ attr_protected :others, :user_id
+
+ before_save :set_others_hash, :clear_unused_block_settings
+
+ safe_attributes 'hide_mail',
+ 'time_zone',
+ 'comments_sorting',
+ 'warn_on_leaving_unsaved',
+ 'no_self_notified',
+ 'textarea_font'
+
+ TEXTAREA_FONT_OPTIONS = ['monospace', 'proportional']
+
+ def initialize(attributes=nil, *args)
+ super
+ if new_record?
+ unless attributes && attributes.key?(:hide_mail)
+ self.hide_mail = Setting.default_users_hide_mail?
+ end
+ unless attributes && attributes.key?(:time_zone)
+ self.time_zone = Setting.default_users_time_zone
+ end
+ unless attributes && attributes.key?(:no_self_notified)
+ self.no_self_notified = true
+ end
+ end
+ self.others ||= {}
+ end
+
+ def set_others_hash
+ self.others ||= {}
+ end
+
+ def [](attr_name)
+ if has_attribute? attr_name
+ super
+ else
+ others ? others[attr_name] : nil
+ end
+ end
+
+ def []=(attr_name, value)
+ if has_attribute? attr_name
+ super
+ else
+ h = (read_attribute(:others) || {}).dup
+ h.update(attr_name => value)
+ write_attribute(:others, h)
+ value
+ end
+ end
+
+ def comments_sorting; self[:comments_sorting] end
+ def comments_sorting=(order); self[:comments_sorting]=order end
+
+ def warn_on_leaving_unsaved; self[:warn_on_leaving_unsaved] || '1'; end
+ def warn_on_leaving_unsaved=(value); self[:warn_on_leaving_unsaved]=value; end
+
+ def no_self_notified; (self[:no_self_notified] == true || self[:no_self_notified] == '1'); end
+ def no_self_notified=(value); self[:no_self_notified]=value; end
+
+ def activity_scope; Array(self[:activity_scope]) ; end
+ def activity_scope=(value); self[:activity_scope]=value ; end
+
+ def textarea_font; self[:textarea_font] end
+ def textarea_font=(value); self[:textarea_font]=value; end
+
+ # Returns the names of groups that are displayed on user's page
+ # Example:
+ # preferences.my_page_groups
+ # # => ['top', 'left, 'right']
+ def my_page_groups
+ Redmine::MyPage.groups
+ end
+
+ def my_page_layout
+ self[:my_page_layout] ||= Redmine::MyPage.default_layout.deep_dup
+ end
+
+ def my_page_layout=(arg)
+ self[:my_page_layout] = arg
+ end
+
+ def my_page_settings(block=nil)
+ s = self[:my_page_settings] ||= {}
+ if block
+ s[block] ||= {}
+ else
+ s
+ end
+ end
+
+ def my_page_settings=(arg)
+ self[:my_page_settings] = arg
+ end
+
+ # Removes block from the user page layout
+ # Example:
+ # preferences.remove_block('news')
+ def remove_block(block)
+ block = block.to_s.underscore
+ my_page_layout.keys.each do |group|
+ my_page_layout[group].delete(block)
+ end
+ my_page_layout
+ end
+
+ # Adds block to the user page layout
+ # Returns nil if block is not valid or if it's already
+ # present in the user page layout
+ def add_block(block)
+ block = block.to_s.underscore
+ return unless Redmine::MyPage.valid_block?(block, my_page_layout.values.flatten)
+
+ remove_block(block)
+ # add it to the first group
+ group = my_page_groups.first
+ my_page_layout[group] ||= []
+ my_page_layout[group].unshift(block)
+ end
+
+ # Sets the block order for the given group.
+ # Example:
+ # preferences.order_blocks('left', ['issueswatched', 'news'])
+ def order_blocks(group, blocks)
+ group = group.to_s
+ if Redmine::MyPage.groups.include?(group) && blocks.present?
+ blocks = blocks.map(&:underscore) & my_page_layout.values.flatten
+ blocks.each {|block| remove_block(block)}
+ my_page_layout[group] = blocks
+ end
+ end
+
+ def update_block_settings(block, settings)
+ block = block.to_s
+ block_settings = my_page_settings(block).merge(settings.symbolize_keys)
+ my_page_settings[block] = block_settings
+ end
+
+ def clear_unused_block_settings
+ blocks = my_page_layout.values.flatten
+ my_page_settings.keep_if {|block, settings| blocks.include?(block)}
+ end
+ private :clear_unused_block_settings
+end
diff --git a/app/models/version.rb b/app/models/version.rb
new file mode 100644
index 0000000..ee1d3da
--- /dev/null
+++ b/app/models/version.rb
@@ -0,0 +1,362 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Version < ActiveRecord::Base
+ include Redmine::SafeAttributes
+
+ after_update :update_issues_from_sharing_change
+ after_save :update_default_project_version
+ before_destroy :nullify_projects_default_version
+
+ belongs_to :project
+ has_many :fixed_issues, :class_name => 'Issue', :foreign_key => 'fixed_version_id', :dependent => :nullify
+ acts_as_customizable
+ acts_as_attachable :view_permission => :view_files,
+ :edit_permission => :manage_files,
+ :delete_permission => :manage_files
+
+ VERSION_STATUSES = %w(open locked closed)
+ VERSION_SHARINGS = %w(none descendants hierarchy tree system)
+
+ validates_presence_of :name
+ validates_uniqueness_of :name, :scope => [:project_id]
+ validates_length_of :name, :maximum => 60
+ validates_length_of :description, :wiki_page_title, :maximum => 255
+ validates :effective_date, :date => true
+ validates_inclusion_of :status, :in => VERSION_STATUSES
+ validates_inclusion_of :sharing, :in => VERSION_SHARINGS
+ attr_protected :id
+
+ scope :named, lambda {|arg| where("LOWER(#{table_name}.name) = LOWER(?)", arg.to_s.strip)}
+ scope :like, lambda {|arg|
+ if arg.present?
+ pattern = "%#{arg.to_s.strip}%"
+ where([Redmine::Database.like("#{Version.table_name}.name", '?'), pattern])
+ end
+ }
+ scope :open, lambda { where(:status => 'open') }
+ scope :status, lambda {|status|
+ if status.present?
+ where(:status => status.to_s)
+ end
+ }
+ scope :visible, lambda {|*args|
+ joins(:project).
+ where(Project.allowed_to_condition(args.first || User.current, :view_issues))
+ }
+
+ safe_attributes 'name',
+ 'description',
+ 'effective_date',
+ 'due_date',
+ 'wiki_page_title',
+ 'status',
+ 'sharing',
+ 'default_project_version',
+ 'custom_field_values',
+ 'custom_fields'
+
+ # Returns true if +user+ or current user is allowed to view the version
+ def visible?(user=User.current)
+ user.allowed_to?(:view_issues, self.project)
+ end
+
+ # Version files have same visibility as project files
+ def attachments_visible?(*args)
+ project.present? && project.attachments_visible?(*args)
+ end
+
+ def attachments_deletable?(usr=User.current)
+ project.present? && project.attachments_deletable?(usr)
+ end
+
+ alias :base_reload :reload
+ def reload(*args)
+ @default_project_version = nil
+ base_reload(*args)
+ end
+
+ def start_date
+ @start_date ||= fixed_issues.minimum('start_date')
+ end
+
+ def due_date
+ effective_date
+ end
+
+ def due_date=(arg)
+ self.effective_date=(arg)
+ end
+
+ # Returns the total estimated time for this version
+ # (sum of leaves estimated_hours)
+ def estimated_hours
+ @estimated_hours ||= fixed_issues.sum(:estimated_hours).to_f
+ end
+
+ # Returns the total reported time for this version
+ def spent_hours
+ @spent_hours ||= TimeEntry.joins(:issue).where("#{Issue.table_name}.fixed_version_id = ?", id).sum(:hours).to_f
+ end
+
+ def closed?
+ status == 'closed'
+ end
+
+ def open?
+ status == 'open'
+ end
+
+ # Returns true if the version is completed: closed or due date reached and no open issues
+ def completed?
+ closed? || (effective_date && (effective_date < User.current.today) && (open_issues_count == 0))
+ end
+
+ def behind_schedule?
+ if completed_percent == 100
+ return false
+ elsif due_date && start_date
+ done_date = start_date + ((due_date - start_date+1)* completed_percent/100).floor
+ return done_date <= User.current.today
+ else
+ false # No issues so it's not late
+ end
+ end
+
+ # Returns the completion percentage of this version based on the amount of open/closed issues
+ # and the time spent on the open issues.
+ def completed_percent
+ if issues_count == 0
+ 0
+ elsif open_issues_count == 0
+ 100
+ else
+ issues_progress(false) + issues_progress(true)
+ end
+ end
+
+ # Returns the percentage of issues that have been marked as 'closed'.
+ def closed_percent
+ if issues_count == 0
+ 0
+ else
+ issues_progress(false)
+ end
+ end
+
+ # Returns true if the version is overdue: due date reached and some open issues
+ def overdue?
+ effective_date && (effective_date < User.current.today) && (open_issues_count > 0)
+ end
+
+ # Returns assigned issues count
+ def issues_count
+ load_issue_counts
+ @issue_count
+ end
+
+ # Returns the total amount of open issues for this version.
+ def open_issues_count
+ load_issue_counts
+ @open_issues_count
+ end
+
+ # Returns the total amount of closed issues for this version.
+ def closed_issues_count
+ load_issue_counts
+ @closed_issues_count
+ end
+
+ def wiki_page
+ if project.wiki && !wiki_page_title.blank?
+ @wiki_page ||= project.wiki.find_page(wiki_page_title)
+ end
+ @wiki_page
+ end
+
+ def to_s; name end
+
+ def to_s_with_project
+ "#{project} - #{name}"
+ end
+
+ # Versions are sorted by effective_date and name
+ # Those with no effective_date are at the end, sorted by name
+ def <=>(version)
+ if self.effective_date
+ if version.effective_date
+ if self.effective_date == version.effective_date
+ name == version.name ? id <=> version.id : name <=> version.name
+ else
+ self.effective_date <=> version.effective_date
+ end
+ else
+ -1
+ end
+ else
+ if version.effective_date
+ 1
+ else
+ name == version.name ? id <=> version.id : name <=> version.name
+ end
+ end
+ end
+
+ # Sort versions by status (open, locked then closed versions)
+ def self.sort_by_status(versions)
+ versions.sort do |a, b|
+ if a.status == b.status
+ a <=> b
+ else
+ b.status <=> a.status
+ end
+ end
+ end
+
+ def css_classes
+ [
+ completed? ? 'version-completed' : 'version-incompleted',
+ "version-#{status}"
+ ].join(' ')
+ end
+
+ def self.fields_for_order_statement(table=nil)
+ table ||= table_name
+ ["(CASE WHEN #{table}.effective_date IS NULL THEN 1 ELSE 0 END)", "#{table}.effective_date", "#{table}.name", "#{table}.id"]
+ end
+
+ scope :sorted, lambda { order(fields_for_order_statement) }
+
+ # Returns the sharings that +user+ can set the version to
+ def allowed_sharings(user = User.current)
+ VERSION_SHARINGS.select do |s|
+ if sharing == s
+ true
+ else
+ case s
+ when 'system'
+ # Only admin users can set a systemwide sharing
+ user.admin?
+ when 'hierarchy', 'tree'
+ # Only users allowed to manage versions of the root project can
+ # set sharing to hierarchy or tree
+ project.nil? || user.allowed_to?(:manage_versions, project.root)
+ else
+ true
+ end
+ end
+ end
+ end
+
+ # Returns true if the version is shared, otherwise false
+ def shared?
+ sharing != 'none'
+ end
+
+ def deletable?
+ fixed_issues.empty? && !referenced_by_a_custom_field? && attachments.empty?
+ end
+
+ def default_project_version
+ if @default_project_version.nil?
+ project.present? && project.default_version == self
+ else
+ @default_project_version
+ end
+ end
+
+ def default_project_version=(arg)
+ @default_project_version = (arg == '1' || arg == true)
+ end
+
+ private
+
+ def load_issue_counts
+ unless @issue_count
+ @open_issues_count = 0
+ @closed_issues_count = 0
+ fixed_issues.group(:status).count.each do |status, count|
+ if status.is_closed?
+ @closed_issues_count += count
+ else
+ @open_issues_count += count
+ end
+ end
+ @issue_count = @open_issues_count + @closed_issues_count
+ end
+ end
+
+ # Update the issue's fixed versions. Used if a version's sharing changes.
+ def update_issues_from_sharing_change
+ if sharing_changed?
+ if VERSION_SHARINGS.index(sharing_was).nil? ||
+ VERSION_SHARINGS.index(sharing).nil? ||
+ VERSION_SHARINGS.index(sharing_was) > VERSION_SHARINGS.index(sharing)
+ Issue.update_versions_from_sharing_change self
+ end
+ end
+ end
+
+ def update_default_project_version
+ if @default_project_version && project.present?
+ project.update_columns :default_version_id => id
+ end
+ end
+
+ # Returns the average estimated time of assigned issues
+ # or 1 if no issue has an estimated time
+ # Used to weight unestimated issues in progress calculation
+ def estimated_average
+ if @estimated_average.nil?
+ average = fixed_issues.average(:estimated_hours).to_f
+ if average == 0
+ average = 1
+ end
+ @estimated_average = average
+ end
+ @estimated_average
+ end
+
+ # Returns the total progress of open or closed issues. The returned percentage takes into account
+ # the amount of estimated time set for this version.
+ #
+ # Examples:
+ # issues_progress(true) => returns the progress percentage for open issues.
+ # issues_progress(false) => returns the progress percentage for closed issues.
+ def issues_progress(open)
+ @issues_progress ||= {}
+ @issues_progress[open] ||= begin
+ progress = 0
+ if issues_count > 0
+ ratio = open ? 'done_ratio' : 100
+
+ done = fixed_issues.open(open).sum("COALESCE(estimated_hours, #{estimated_average}) * #{ratio}").to_f
+ progress = done / (estimated_average * issues_count)
+ end
+ progress
+ end
+ end
+
+ def referenced_by_a_custom_field?
+ CustomValue.joins(:custom_field).
+ where(:value => id.to_s, :custom_fields => {:field_format => 'version'}).any?
+ end
+
+ def nullify_projects_default_version
+ Project.where(:default_version_id => id).update_all(:default_version_id => nil)
+ end
+end
diff --git a/app/models/version_custom_field.rb b/app/models/version_custom_field.rb
new file mode 100644
index 0000000..f353d7f
--- /dev/null
+++ b/app/models/version_custom_field.rb
@@ -0,0 +1,22 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class VersionCustomField < CustomField
+ def type_name
+ :label_version_plural
+ end
+end
diff --git a/app/models/watcher.rb b/app/models/watcher.rb
new file mode 100644
index 0000000..6198cef
--- /dev/null
+++ b/app/models/watcher.rb
@@ -0,0 +1,81 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Watcher < ActiveRecord::Base
+ belongs_to :watchable, :polymorphic => true
+ belongs_to :user
+
+ validates_presence_of :user
+ validates_uniqueness_of :user_id, :scope => [:watchable_type, :watchable_id]
+ validate :validate_user
+ attr_protected :id
+
+ # Returns true if at least one object among objects is watched by user
+ def self.any_watched?(objects, user)
+ objects = objects.reject(&:new_record?)
+ if objects.any?
+ objects.group_by {|object| object.class.base_class}.each do |base_class, objects|
+ if Watcher.where(:watchable_type => base_class.name, :watchable_id => objects.map(&:id), :user_id => user.id).exists?
+ return true
+ end
+ end
+ end
+ false
+ end
+
+ # Unwatch things that users are no longer allowed to view
+ def self.prune(options={})
+ if options.has_key?(:user)
+ prune_single_user(options[:user], options)
+ else
+ pruned = 0
+ User.where("id IN (SELECT DISTINCT user_id FROM #{table_name})").each do |user|
+ pruned += prune_single_user(user, options)
+ end
+ pruned
+ end
+ end
+
+ protected
+
+ def validate_user
+ errors.add :user_id, :invalid unless user.nil? || user.active?
+ end
+
+ private
+
+ def self.prune_single_user(user, options={})
+ return unless user.is_a?(User)
+ pruned = 0
+ where(:user_id => user.id).each do |watcher|
+ next if watcher.watchable.nil?
+ if options.has_key?(:project)
+ unless watcher.watchable.respond_to?(:project) &&
+ watcher.watchable.project == options[:project]
+ next
+ end
+ end
+ if watcher.watchable.respond_to?(:visible?)
+ unless watcher.watchable.visible?(user)
+ watcher.destroy
+ pruned += 1
+ end
+ end
+ end
+ pruned
+ end
+end
diff --git a/app/models/wiki.rb b/app/models/wiki.rb
new file mode 100644
index 0000000..9ed9554
--- /dev/null
+++ b/app/models/wiki.rb
@@ -0,0 +1,107 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class Wiki < ActiveRecord::Base
+ include Redmine::SafeAttributes
+ belongs_to :project
+ has_many :pages, lambda {order('title')}, :class_name => 'WikiPage', :dependent => :destroy
+ has_many :redirects, :class_name => 'WikiRedirect'
+
+ acts_as_watchable
+
+ validates_presence_of :start_page
+ validates_format_of :start_page, :with => /\A[^,\.\/\?\;\|\:]*\z/
+ validates_length_of :start_page, maximum: 255
+ attr_protected :id
+
+ before_destroy :delete_redirects
+
+ safe_attributes 'start_page'
+
+ def visible?(user=User.current)
+ !user.nil? && user.allowed_to?(:view_wiki_pages, project)
+ end
+
+ # Returns the wiki page that acts as the sidebar content
+ # or nil if no such page exists
+ def sidebar
+ @sidebar ||= find_page('Sidebar', :with_redirect => false)
+ end
+
+ # find the page with the given title
+ # if page doesn't exist, return a new page
+ def find_or_new_page(title)
+ title = start_page if title.blank?
+ find_page(title) || WikiPage.new(:wiki => self, :title => Wiki.titleize(title))
+ end
+
+ # find the page with the given title
+ def find_page(title, options = {})
+ @page_found_with_redirect = false
+ title = start_page if title.blank?
+ title = Wiki.titleize(title)
+ page = pages.where("LOWER(title) = LOWER(?)", title).first
+ if page.nil? && options[:with_redirect] != false
+ # search for a redirect
+ redirect = redirects.where("LOWER(title) = LOWER(?)", title).first
+ if redirect
+ page = redirect.target_page
+ @page_found_with_redirect = true
+ end
+ end
+ page
+ end
+
+ # Returns true if the last page was found with a redirect
+ def page_found_with_redirect?
+ @page_found_with_redirect
+ end
+
+ # Deletes all redirects from/to the wiki
+ def delete_redirects
+ WikiRedirect.where(:wiki_id => id).delete_all
+ WikiRedirect.where(:redirects_to_wiki_id => id).delete_all
+ end
+
+ # Finds a page by title
+ # The given string can be of one of the forms: "title" or "project:title"
+ # Examples:
+ # Wiki.find_page("bar", project => foo)
+ # Wiki.find_page("foo:bar")
+ def self.find_page(title, options = {})
+ project = options[:project]
+ if title.to_s =~ %r{^([^\:]+)\:(.*)$}
+ project_identifier, title = $1, $2
+ project = Project.find_by_identifier(project_identifier) || Project.find_by_name(project_identifier)
+ end
+ if project && project.wiki
+ page = project.wiki.find_page(title)
+ if page && page.content
+ page
+ end
+ end
+ end
+
+ # turn a string into a valid page title
+ def self.titleize(title)
+ # replace spaces with _ and remove unwanted caracters
+ title = title.gsub(/\s+/, '_').delete(',./?;|:') if title
+ # upcase the first letter
+ title = (title.slice(0..0).upcase + (title.slice(1..-1) || '')) if title
+ title
+ end
+end
diff --git a/app/models/wiki_content.rb b/app/models/wiki_content.rb
new file mode 100644
index 0000000..3d992f8
--- /dev/null
+++ b/app/models/wiki_content.rb
@@ -0,0 +1,174 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'zlib'
+
+class WikiContent < ActiveRecord::Base
+ self.locking_column = 'version'
+ belongs_to :page, :class_name => 'WikiPage'
+ belongs_to :author, :class_name => 'User'
+ validates_presence_of :text
+ validates_length_of :comments, :maximum => 1024, :allow_nil => true
+ attr_protected :id
+
+ acts_as_versioned
+
+ after_save :send_notification
+
+ scope :without_text, lambda {select(:id, :page_id, :version, :updated_on)}
+
+ def visible?(user=User.current)
+ page.visible?(user)
+ end
+
+ def project
+ page.project
+ end
+
+ def attachments
+ page.nil? ? [] : page.attachments
+ end
+
+ def notified_users
+ project.notified_users.reject {|user| !visible?(user)}
+ end
+
+ # Returns the mail addresses of users that should be notified
+ def recipients
+ notified_users.collect(&:mail)
+ end
+
+ # Return true if the content is the current page content
+ def current_version?
+ true
+ end
+
+ class Version
+ belongs_to :page, :class_name => '::WikiPage'
+ belongs_to :author, :class_name => '::User'
+ attr_protected :data
+
+ acts_as_event :title => Proc.new {|o| "#{l(:label_wiki_edit)}: #{o.page.title} (##{o.version})"},
+ :description => :comments,
+ :datetime => :updated_on,
+ :type => 'wiki-page',
+ :group => :page,
+ :url => Proc.new {|o| {:controller => 'wiki', :action => 'show', :project_id => o.page.wiki.project, :id => o.page.title, :version => o.version}}
+
+ acts_as_activity_provider :type => 'wiki_edits',
+ :timestamp => "#{WikiContent.versioned_table_name}.updated_on",
+ :author_key => "#{WikiContent.versioned_table_name}.author_id",
+ :permission => :view_wiki_edits,
+ :scope => select("#{WikiContent.versioned_table_name}.updated_on, #{WikiContent.versioned_table_name}.comments, " +
+ "#{WikiContent.versioned_table_name}.#{WikiContent.version_column}, #{WikiPage.table_name}.title, " +
+ "#{WikiContent.versioned_table_name}.page_id, #{WikiContent.versioned_table_name}.author_id, " +
+ "#{WikiContent.versioned_table_name}.id").
+ joins("LEFT JOIN #{WikiPage.table_name} ON #{WikiPage.table_name}.id = #{WikiContent.versioned_table_name}.page_id " +
+ "LEFT JOIN #{Wiki.table_name} ON #{Wiki.table_name}.id = #{WikiPage.table_name}.wiki_id " +
+ "LEFT JOIN #{Project.table_name} ON #{Project.table_name}.id = #{Wiki.table_name}.project_id")
+
+ after_destroy :page_update_after_destroy
+
+ def text=(plain)
+ case Setting.wiki_compression
+ when 'gzip'
+ begin
+ self.data = Zlib::Deflate.deflate(plain, Zlib::BEST_COMPRESSION)
+ self.compression = 'gzip'
+ rescue
+ self.data = plain
+ self.compression = ''
+ end
+ else
+ self.data = plain
+ self.compression = ''
+ end
+ plain
+ end
+
+ def text
+ @text ||= begin
+ str = case compression
+ when 'gzip'
+ Zlib::Inflate.inflate(data)
+ else
+ # uncompressed data
+ data
+ end
+ str.force_encoding("UTF-8")
+ str
+ end
+ end
+
+ def project
+ page.project
+ end
+
+ def attachments
+ page.nil? ? [] : page.attachments
+ end
+
+ # Return true if the content is the current page content
+ def current_version?
+ page.content.version == self.version
+ end
+
+ # Returns the previous version or nil
+ def previous
+ @previous ||= WikiContent::Version.
+ reorder('version DESC').
+ includes(:author).
+ where("wiki_content_id = ? AND version < ?", wiki_content_id, version).first
+ end
+
+ # Returns the next version or nil
+ def next
+ @next ||= WikiContent::Version.
+ reorder('version ASC').
+ includes(:author).
+ where("wiki_content_id = ? AND version > ?", wiki_content_id, version).first
+ end
+
+ private
+
+ # Updates page's content if the latest version is removed
+ # or destroys the page if it was the only version
+ def page_update_after_destroy
+ latest = page.content.versions.reorder("#{self.class.table_name}.version DESC").first
+ if latest && page.content.version != latest.version
+ raise ActiveRecord::Rollback unless page.content.revert_to!(latest)
+ elsif latest.nil?
+ raise ActiveRecord::Rollback unless page.destroy
+ end
+ end
+ end
+
+ private
+
+ def send_notification
+ # new_record? returns false in after_save callbacks
+ if id_changed?
+ if Setting.notified_events.include?('wiki_content_added')
+ Mailer.wiki_content_added(self).deliver
+ end
+ elsif text_changed?
+ if Setting.notified_events.include?('wiki_content_updated')
+ Mailer.wiki_content_updated(self).deliver
+ end
+ end
+ end
+end
diff --git a/app/models/wiki_page.rb b/app/models/wiki_page.rb
new file mode 100644
index 0000000..d7b09f3
--- /dev/null
+++ b/app/models/wiki_page.rb
@@ -0,0 +1,298 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+require 'diff'
+require 'enumerator'
+
+class WikiPage < ActiveRecord::Base
+ include Redmine::SafeAttributes
+
+ belongs_to :wiki
+ has_one :content, :class_name => 'WikiContent', :foreign_key => 'page_id', :dependent => :destroy
+ has_one :content_without_text, lambda {without_text.readonly}, :class_name => 'WikiContent', :foreign_key => 'page_id'
+
+ acts_as_attachable :delete_permission => :delete_wiki_pages_attachments
+ acts_as_tree :dependent => :nullify, :order => 'title'
+
+ acts_as_watchable
+ acts_as_event :title => Proc.new {|o| "#{l(:label_wiki)}: #{o.title}"},
+ :description => :text,
+ :datetime => :created_on,
+ :url => Proc.new {|o| {:controller => 'wiki', :action => 'show', :project_id => o.wiki.project, :id => o.title}}
+
+ acts_as_searchable :columns => ['title', "#{WikiContent.table_name}.text"],
+ :scope => joins(:content, {:wiki => :project}),
+ :preload => [:content, {:wiki => :project}],
+ :permission => :view_wiki_pages,
+ :project_key => "#{Wiki.table_name}.project_id"
+
+ attr_accessor :redirect_existing_links
+
+ validates_presence_of :title
+ validates_format_of :title, :with => /\A[^,\.\/\?\;\|\s]*\z/
+ validates_uniqueness_of :title, :scope => :wiki_id, :case_sensitive => false
+ validates_length_of :title, maximum: 255
+ validates_associated :content
+ attr_protected :id
+
+ validate :validate_parent_title
+ before_destroy :delete_redirects
+ before_save :handle_rename_or_move
+ after_save :handle_children_move
+
+ # eager load information about last updates, without loading text
+ scope :with_updated_on, lambda { preload(:content_without_text) }
+
+ # Wiki pages that are protected by default
+ DEFAULT_PROTECTED_PAGES = %w(sidebar)
+
+ safe_attributes 'parent_id', 'parent_title', 'title', 'redirect_existing_links', 'wiki_id',
+ :if => lambda {|page, user| page.new_record? || user.allowed_to?(:rename_wiki_pages, page.project)}
+
+ def initialize(attributes=nil, *args)
+ super
+ if new_record? && DEFAULT_PROTECTED_PAGES.include?(title.to_s.downcase)
+ self.protected = true
+ end
+ end
+
+ def visible?(user=User.current)
+ !user.nil? && user.allowed_to?(:view_wiki_pages, project)
+ end
+
+ def title=(value)
+ value = Wiki.titleize(value)
+ write_attribute(:title, value)
+ end
+
+ def safe_attributes=(attrs, user=User.current)
+ return unless attrs.is_a?(Hash)
+ attrs = attrs.deep_dup
+
+ # Project and Tracker must be set before since new_statuses_allowed_to depends on it.
+ if (w_id = attrs.delete('wiki_id')) && safe_attribute?('wiki_id')
+ if (w = Wiki.find_by_id(w_id)) && w.project && user.allowed_to?(:rename_wiki_pages, w.project)
+ self.wiki = w
+ end
+ end
+
+ super attrs, user
+ end
+
+ # Manages redirects if page is renamed or moved
+ def handle_rename_or_move
+ if !new_record? && (title_changed? || wiki_id_changed?)
+ # Update redirects that point to the old title
+ WikiRedirect.where(:redirects_to => title_was, :redirects_to_wiki_id => wiki_id_was).each do |r|
+ r.redirects_to = title
+ r.redirects_to_wiki_id = wiki_id
+ (r.title == r.redirects_to && r.wiki_id == r.redirects_to_wiki_id) ? r.destroy : r.save
+ end
+ # Remove redirects for the new title
+ WikiRedirect.where(:wiki_id => wiki_id, :title => title).delete_all
+ # Create a redirect to the new title
+ unless redirect_existing_links == "0"
+ WikiRedirect.create(
+ :wiki_id => wiki_id_was, :title => title_was,
+ :redirects_to_wiki_id => wiki_id, :redirects_to => title
+ )
+ end
+ end
+ if !new_record? && wiki_id_changed? && parent.present?
+ unless parent.wiki_id == wiki_id
+ self.parent_id = nil
+ end
+ end
+ end
+ private :handle_rename_or_move
+
+ # Moves child pages if page was moved
+ def handle_children_move
+ if !new_record? && wiki_id_changed?
+ children.each do |child|
+ child.wiki_id = wiki_id
+ child.redirect_existing_links = redirect_existing_links
+ unless child.save
+ WikiPage.where(:id => child.id).update_all :parent_id => nil
+ end
+ end
+ end
+ end
+ private :handle_children_move
+
+ # Deletes redirects to this page
+ def delete_redirects
+ WikiRedirect.where(:redirects_to_wiki_id => wiki_id, :redirects_to => title).delete_all
+ end
+
+ def pretty_title
+ WikiPage.pretty_title(title)
+ end
+
+ def content_for_version(version=nil)
+ if content
+ result = content.versions.find_by_version(version.to_i) if version
+ result ||= content
+ result
+ end
+ end
+
+ def diff(version_to=nil, version_from=nil)
+ version_to = version_to ? version_to.to_i : self.content.version
+ content_to = content.versions.find_by_version(version_to)
+ content_from = version_from ? content.versions.find_by_version(version_from.to_i) : content_to.try(:previous)
+ return nil unless content_to && content_from
+
+ if content_from.version > content_to.version
+ content_to, content_from = content_from, content_to
+ end
+
+ (content_to && content_from) ? WikiDiff.new(content_to, content_from) : nil
+ end
+
+ def annotate(version=nil)
+ version = version ? version.to_i : self.content.version
+ c = content.versions.find_by_version(version)
+ c ? WikiAnnotate.new(c) : nil
+ end
+
+ def self.pretty_title(str)
+ (str && str.is_a?(String)) ? str.tr('_', ' ') : str
+ end
+
+ def project
+ wiki.try(:project)
+ end
+
+ def text
+ content.text if content
+ end
+
+ def updated_on
+ content_attribute(:updated_on)
+ end
+
+ def version
+ content_attribute(:version)
+ end
+
+ # Returns true if usr is allowed to edit the page, otherwise false
+ def editable_by?(usr)
+ !protected? || usr.allowed_to?(:protect_wiki_pages, wiki.project)
+ end
+
+ def attachments_deletable?(usr=User.current)
+ editable_by?(usr) && super(usr)
+ end
+
+ def parent_title
+ @parent_title || (self.parent && self.parent.pretty_title)
+ end
+
+ def parent_title=(t)
+ @parent_title = t
+ parent_page = t.blank? ? nil : self.wiki.find_page(t)
+ self.parent = parent_page
+ end
+
+ # Saves the page and its content if text was changed
+ # Return true if the page was saved
+ def save_with_content(content)
+ ret = nil
+ transaction do
+ ret = save
+ if content.text_changed?
+ begin
+ self.content = content
+ ret = ret && content.changed?
+ rescue ActiveRecord::RecordNotSaved
+ ret = false
+ end
+ end
+ raise ActiveRecord::Rollback unless ret
+ end
+ ret
+ end
+
+ protected
+
+ def validate_parent_title
+ errors.add(:parent_title, :invalid) if !@parent_title.blank? && parent.nil?
+ errors.add(:parent_title, :circular_dependency) if parent && (parent == self || parent.ancestors.include?(self))
+ if parent_id_changed? && parent && (parent.wiki_id != wiki_id)
+ errors.add(:parent_title, :not_same_project)
+ end
+ end
+
+ private
+
+ def content_attribute(name)
+ (association(:content).loaded? ? content : content_without_text).try(name)
+ end
+end
+
+class WikiDiff < Redmine::Helpers::Diff
+ attr_reader :content_to, :content_from
+
+ def initialize(content_to, content_from)
+ @content_to = content_to
+ @content_from = content_from
+ super(content_to.text, content_from.text)
+ end
+end
+
+class WikiAnnotate
+ attr_reader :lines, :content
+
+ def initialize(content)
+ @content = content
+ current = content
+ current_lines = current.text.split(/\r?\n/)
+ @lines = current_lines.collect {|t| [nil, nil, t]}
+ positions = []
+ current_lines.size.times {|i| positions << i}
+ while (current.previous)
+ d = current.previous.text.split(/\r?\n/).diff(current.text.split(/\r?\n/)).diffs.flatten
+ d.each_slice(3) do |s|
+ sign, line = s[0], s[1]
+ if sign == '+' && positions[line] && positions[line] != -1
+ if @lines[positions[line]][0].nil?
+ @lines[positions[line]][0] = current.version
+ @lines[positions[line]][1] = current.author
+ end
+ end
+ end
+ d.each_slice(3) do |s|
+ sign, line = s[0], s[1]
+ if sign == '-'
+ positions.insert(line, -1)
+ else
+ positions[line] = nil
+ end
+ end
+ positions.compact!
+ # Stop if every line is annotated
+ break unless @lines.detect { |line| line[0].nil? }
+ current = current.previous
+ end
+ @lines.each { |line|
+ line[0] ||= current.version
+ # if the last known version is > 1 (eg. history was cleared), we don't know the author
+ line[1] ||= current.author if current.version == 1
+ }
+ end
+end
diff --git a/app/models/wiki_redirect.rb b/app/models/wiki_redirect.rb
new file mode 100644
index 0000000..eb4de86
--- /dev/null
+++ b/app/models/wiki_redirect.rb
@@ -0,0 +1,39 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class WikiRedirect < ActiveRecord::Base
+ belongs_to :wiki
+
+ validates_presence_of :wiki_id, :title, :redirects_to
+ validates_length_of :title, :redirects_to, :maximum => 255
+ attr_protected :id
+
+ before_save :set_redirects_to_wiki_id
+
+ def target_page
+ wiki = Wiki.find_by_id(redirects_to_wiki_id)
+ if wiki
+ wiki.find_page(redirects_to, :with_redirect => false)
+ end
+ end
+
+ private
+
+ def set_redirects_to_wiki_id
+ self.redirects_to_wiki_id ||= wiki_id
+ end
+end
diff --git a/app/models/workflow_permission.rb b/app/models/workflow_permission.rb
new file mode 100644
index 0000000..a231978
--- /dev/null
+++ b/app/models/workflow_permission.rb
@@ -0,0 +1,69 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class WorkflowPermission < WorkflowRule
+ validates_inclusion_of :rule, :in => %w(readonly required)
+ validates_presence_of :old_status
+ validate :validate_field_name
+
+ # Returns the workflow permissions for the given trackers and roles
+ # grouped by status_id
+ #
+ # Example:
+ # WorkflowPermission.rules_by_status_id trackers, roles
+ # # => {1 => {'start_date' => 'required', 'due_date' => 'readonly'}}
+ def self.rules_by_status_id(trackers, roles)
+ WorkflowPermission.where(:tracker_id => trackers.map(&:id), :role_id => roles.map(&:id)).inject({}) do |h, w|
+ h[w.old_status_id] ||= {}
+ h[w.old_status_id][w.field_name] ||= []
+ h[w.old_status_id][w.field_name] << w.rule
+ h
+ end
+ end
+
+ # Replaces the workflow permissions for the given trackers and roles
+ #
+ # Example:
+ # WorkflowPermission.replace_permissions trackers, roles, {'1' => {'start_date' => 'required', 'due_date' => 'readonly'}}
+ def self.replace_permissions(trackers, roles, permissions)
+ trackers = Array.wrap trackers
+ roles = Array.wrap roles
+
+ transaction do
+ permissions.each { |status_id, rule_by_field|
+ rule_by_field.each { |field, rule|
+ where(:tracker_id => trackers.map(&:id), :role_id => roles.map(&:id), :old_status_id => status_id, :field_name => field).destroy_all
+ if rule.present?
+ trackers.each do |tracker|
+ roles.each do |role|
+ WorkflowPermission.create(:role_id => role.id, :tracker_id => tracker.id, :old_status_id => status_id, :field_name => field, :rule => rule)
+ end
+ end
+ end
+ }
+ }
+ end
+ end
+
+ protected
+
+ def validate_field_name
+ unless Tracker::CORE_FIELDS_ALL.include?(field_name) || field_name.to_s.match(/^\d+$/)
+ errors.add :field_name, :invalid
+ end
+ end
+end
diff --git a/app/models/workflow_rule.rb b/app/models/workflow_rule.rb
new file mode 100644
index 0000000..8872d84
--- /dev/null
+++ b/app/models/workflow_rule.rb
@@ -0,0 +1,74 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class WorkflowRule < ActiveRecord::Base
+ self.table_name = "#{table_name_prefix}workflows#{table_name_suffix}"
+
+ belongs_to :role
+ belongs_to :tracker
+ belongs_to :old_status, :class_name => 'IssueStatus'
+ belongs_to :new_status, :class_name => 'IssueStatus'
+
+ validates_presence_of :role, :tracker
+ attr_protected :id
+
+ # Copies workflows from source to targets
+ def self.copy(source_tracker, source_role, target_trackers, target_roles)
+ unless source_tracker.is_a?(Tracker) || source_role.is_a?(Role)
+ raise ArgumentError.new("source_tracker or source_role must be specified, given: #{source_tracker.class.name} and #{source_role.class.name}")
+ end
+
+ target_trackers = [target_trackers].flatten.compact
+ target_roles = [target_roles].flatten.compact
+
+ target_trackers = Tracker.sorted.to_a if target_trackers.empty?
+ target_roles = Role.all.select(&:consider_workflow?) if target_roles.empty?
+
+ target_trackers.each do |target_tracker|
+ target_roles.each do |target_role|
+ copy_one(source_tracker || target_tracker,
+ source_role || target_role,
+ target_tracker,
+ target_role)
+ end
+ end
+ end
+
+ # Copies a single set of workflows from source to target
+ def self.copy_one(source_tracker, source_role, target_tracker, target_role)
+ unless source_tracker.is_a?(Tracker) && !source_tracker.new_record? &&
+ source_role.is_a?(Role) && !source_role.new_record? &&
+ target_tracker.is_a?(Tracker) && !target_tracker.new_record? &&
+ target_role.is_a?(Role) && !target_role.new_record?
+
+ raise ArgumentError.new("arguments can not be nil or unsaved objects")
+ end
+
+ if source_tracker == target_tracker && source_role == target_role
+ false
+ else
+ transaction do
+ where(:tracker_id => target_tracker.id, :role_id => target_role.id).delete_all
+ connection.insert "INSERT INTO #{WorkflowRule.table_name} (tracker_id, role_id, old_status_id, new_status_id, author, assignee, field_name, #{connection.quote_column_name 'rule'}, type)" +
+ " SELECT #{target_tracker.id}, #{target_role.id}, old_status_id, new_status_id, author, assignee, field_name, #{connection.quote_column_name 'rule'}, type" +
+ " FROM #{WorkflowRule.table_name}" +
+ " WHERE tracker_id = #{source_tracker.id} AND role_id = #{source_role.id}"
+ end
+ true
+ end
+ end
+end
diff --git a/app/models/workflow_transition.rb b/app/models/workflow_transition.rb
new file mode 100644
index 0000000..4f161df
--- /dev/null
+++ b/app/models/workflow_transition.rb
@@ -0,0 +1,85 @@
+# Redmine - project management software
+# Copyright (C) 2006-2017 Jean-Philippe Lang
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+class WorkflowTransition < WorkflowRule
+ validates_presence_of :new_status
+
+ def self.replace_transitions(trackers, roles, transitions)
+ trackers = Array.wrap trackers
+ roles = Array.wrap roles
+
+ transaction do
+ records = WorkflowTransition.where(:tracker_id => trackers.map(&:id), :role_id => roles.map(&:id)).to_a
+
+ transitions.each do |old_status_id, transitions_by_new_status|
+ transitions_by_new_status.each do |new_status_id, transition_by_rule|
+ transition_by_rule.each do |rule, transition|
+ trackers.each do |tracker|
+ roles.each do |role|
+ w = records.select {|r|
+ r.old_status_id == old_status_id.to_i &&
+ r.new_status_id == new_status_id.to_i &&
+ r.tracker_id == tracker.id &&
+ r.role_id == role.id &&
+ !r.destroyed?
+ }
+
+ if rule == 'always'
+ w = w.select {|r| !r.author && !r.assignee}
+ else
+ w = w.select {|r| r.author || r.assignee}
+ end
+ if w.size > 1
+ w[1..-1].each(&:destroy)
+ end
+ w = w.first
+
+ if transition == "1" || transition == true
+ unless w
+ w = WorkflowTransition.new(:old_status_id => old_status_id, :new_status_id => new_status_id, :tracker_id => tracker.id, :role_id => role.id)
+ records << w
+ end
+ w.author = true if rule == "author"
+ w.assignee = true if rule == "assignee"
+ w.save if w.changed?
+ elsif w
+ if rule == 'always'
+ w.destroy
+ elsif rule == 'author'
+ if w.assignee
+ w.author = false
+ w.save if w.changed?
+ else
+ w.destroy
+ end
+ elsif rule == 'assignee'
+ if w.author
+ w.assignee = false
+ w.save if w.changed?
+ else
+ w.destroy
+ end
+ end
+ end
+ end
+ end
+ end
+ end
+ end
+ end
+ end
+end
diff --git a/app/views/account/logout.html.erb b/app/views/account/logout.html.erb
new file mode 100644
index 0000000..3095976
--- /dev/null
+++ b/app/views/account/logout.html.erb
@@ -0,0 +1,3 @@
+<%= form_tag(signout_path) do %>
+
<%= submit_tag l(:label_logout) %>
+<% end %>
diff --git a/app/views/account/lost_password.html.erb b/app/views/account/lost_password.html.erb
new file mode 100644
index 0000000..19df8d9
--- /dev/null
+++ b/app/views/account/lost_password.html.erb
@@ -0,0 +1,11 @@
+