forked from External/greenlight
GRN2-180: First stages of refactoring code for v2.4 (#748)
* Email rescues and authenticator concern * Application controller and helper clean up * Moved controller code out of helpers * More helper and email clean up * Cleaned up remaining helpers and create omniauth_options * Controller code clean up * restructured views structure * Restructured role code * Restructured profile and code clean up * Master merge * Added bbb server concern to deal with bbb calls * Bug fixes and changes after changes * rspec * More rubocop fixes
This commit is contained in:
@ -21,18 +21,17 @@ class AdminsController < ApplicationController
|
||||
include Themer
|
||||
include Emailer
|
||||
include Recorder
|
||||
include Rolify
|
||||
|
||||
manage_users = [:edit_user, :promote, :demote, :ban_user, :unban_user, :approve, :reset]
|
||||
site_settings = [:branding, :coloring, :coloring_lighten, :coloring_darken,
|
||||
:registration_method, :room_authentication, :room_limit, :default_recording_visibility]
|
||||
|
||||
authorize_resource class: false
|
||||
before_action :find_user, only: manage_users
|
||||
before_action :verify_admin_of_user, only: manage_users
|
||||
before_action :find_setting, only: site_settings
|
||||
|
||||
# GET /admins
|
||||
def index
|
||||
# Initializa the data manipulation variables
|
||||
@search = params[:search] || ""
|
||||
@order_column = params[:column] && params[:direction] != "none" ? params[:column] : "created_at"
|
||||
@order_direction = params[:direction] && params[:direction] != "none" ? params[:direction] : "DESC"
|
||||
@ -49,13 +48,14 @@ class AdminsController < ApplicationController
|
||||
# GET /admins/server_recordings
|
||||
def server_recordings
|
||||
server_rooms = if Rails.configuration.loadbalanced_configuration
|
||||
Room.includes(:owner).where(users: { provider: user_settings_provider }).pluck(:bbb_id)
|
||||
Room.includes(:owner).where(users: { provider: @user_domain }).pluck(:bbb_id)
|
||||
else
|
||||
Room.pluck(:bbb_id)
|
||||
end
|
||||
|
||||
@search, @order_column, @order_direction, recs =
|
||||
all_recordings(server_rooms, @user_domain, params.permit(:search, :column, :direction), true, true)
|
||||
all_recordings(server_rooms, params.permit(:search, :column, :direction), true, true)
|
||||
|
||||
@pagy, @recordings = pagy_array(recs)
|
||||
end
|
||||
|
||||
@ -92,17 +92,10 @@ class AdminsController < ApplicationController
|
||||
def invite
|
||||
emails = params[:invite_user][:email].split(",")
|
||||
|
||||
begin
|
||||
emails.each do |email|
|
||||
invitation = create_or_update_invite(email)
|
||||
emails.each do |email|
|
||||
invitation = create_or_update_invite(email)
|
||||
|
||||
send_invitation_email(current_user.name, email, invitation.invite_token)
|
||||
end
|
||||
rescue => e
|
||||
logger.error "Support: Error in email delivery: #{e}"
|
||||
flash[:alert] = I18n.t(params[:message], default: I18n.t("delivery_error"))
|
||||
else
|
||||
flash[:success] = I18n.t("administrator.flash.invite", email: emails.join(', '))
|
||||
send_invitation_email(current_user.name, email, invitation.invite_token)
|
||||
end
|
||||
|
||||
redirect_to admins_path
|
||||
@ -118,39 +111,30 @@ class AdminsController < ApplicationController
|
||||
end
|
||||
# SITE SETTINGS
|
||||
|
||||
# POST /admins/branding
|
||||
def branding
|
||||
@settings.update_value("Branding Image", params[:url])
|
||||
redirect_to admin_site_settings_path, flash: { success: I18n.t("administrator.flash.settings") }
|
||||
# POST /admins/update_settings
|
||||
def update_settings
|
||||
@settings.update_value(params[:setting], params[:value])
|
||||
|
||||
flash_message = I18n.t("administrator.flash.settings")
|
||||
|
||||
if params[:value] == "Default Recording Visibility"
|
||||
flash_message += ". " + I18n.t("administrator.site_settings.recording_visibility.warning")
|
||||
end
|
||||
|
||||
redirect_to admin_site_settings_path, flash: { success: flash_message }
|
||||
end
|
||||
|
||||
# POST /admins/color
|
||||
def coloring
|
||||
@settings.update_value("Primary Color", params[:color])
|
||||
@settings.update_value("Primary Color Lighten", color_lighten(params[:color]))
|
||||
@settings.update_value("Primary Color Darken", color_darken(params[:color]))
|
||||
redirect_to admin_site_settings_path, flash: { success: I18n.t("administrator.flash.settings") }
|
||||
end
|
||||
|
||||
def coloring_lighten
|
||||
@settings.update_value("Primary Color Lighten", params[:color])
|
||||
redirect_to admin_site_settings_path, flash: { success: I18n.t("administrator.flash.settings") }
|
||||
end
|
||||
|
||||
def coloring_darken
|
||||
@settings.update_value("Primary Color Darken", params[:color])
|
||||
redirect_to admin_site_settings_path, flash: { success: I18n.t("administrator.flash.settings") }
|
||||
end
|
||||
|
||||
# POST /admins/room_authentication
|
||||
def room_authentication
|
||||
@settings.update_value("Room Authentication", params[:value])
|
||||
@settings.update_value("Primary Color", params[:value])
|
||||
@settings.update_value("Primary Color Lighten", color_lighten(params[:value]))
|
||||
@settings.update_value("Primary Color Darken", color_darken(params[:value]))
|
||||
redirect_to admin_site_settings_path, flash: { success: I18n.t("administrator.flash.settings") }
|
||||
end
|
||||
|
||||
# POST /admins/registration_method/:method
|
||||
def registration_method
|
||||
new_method = Rails.configuration.registration_methods[params[:method].to_sym]
|
||||
new_method = Rails.configuration.registration_methods[params[:value].to_sym]
|
||||
|
||||
# Only allow change to Join by Invitation if user has emails enabled
|
||||
if !Rails.configuration.enable_email_verification && new_method == Rails.configuration.registration_methods[:invite]
|
||||
@ -163,67 +147,19 @@ class AdminsController < ApplicationController
|
||||
end
|
||||
end
|
||||
|
||||
# POST /admins/room_limit
|
||||
def room_limit
|
||||
@settings.update_value("Room Limit", params[:limit])
|
||||
redirect_to admin_site_settings_path, flash: { success: I18n.t("administrator.flash.settings") }
|
||||
end
|
||||
|
||||
# POST /admins/default_recording_visibility
|
||||
def default_recording_visibility
|
||||
@settings.update_value("Default Recording Visibility", params[:visibility])
|
||||
redirect_to admin_site_settings_path, flash: {
|
||||
success: I18n.t("administrator.flash.settings") + ". " +
|
||||
I18n.t("administrator.site_settings.recording_visibility.warning")
|
||||
}
|
||||
end
|
||||
|
||||
# POST /admins/clear_cache
|
||||
def clear_cache
|
||||
Rails.cache.delete("#{@user_domain}/getUser")
|
||||
Rails.cache.delete("#{@user_domain}/getUserGreenlightCredentials")
|
||||
|
||||
redirect_to admin_site_settings_path, flash: { success: I18n.t("administrator.flash.settings") }
|
||||
end
|
||||
|
||||
# ROLES
|
||||
|
||||
# GET /admins/roles
|
||||
def roles
|
||||
@roles = Role.editable_roles(@user_domain)
|
||||
|
||||
if @roles.count.zero?
|
||||
Role.create_default_roles(@user_domain)
|
||||
@roles = Role.editable_roles(@user_domain)
|
||||
end
|
||||
|
||||
@selected_role = if params[:selected_role].nil?
|
||||
@roles.find_by(name: 'user')
|
||||
else
|
||||
@roles.find(params[:selected_role])
|
||||
end
|
||||
@roles = all_roles(params[:selected_role])
|
||||
end
|
||||
|
||||
# POST /admin/role
|
||||
# This method creates a new role scope to the users provider
|
||||
# POST /admins/role
|
||||
# This method creates a new role scoped to the users provider
|
||||
def new_role
|
||||
new_role_name = params[:role][:name]
|
||||
new_role = create_role(params[:role][:name])
|
||||
|
||||
# Make sure that the role name isn't a duplicate or a reserved name like super_admin
|
||||
if Role.duplicate_name(new_role_name, @user_domain)
|
||||
flash[:alert] = I18n.t("administrator.roles.duplicate_name")
|
||||
|
||||
return redirect_to admin_roles_path
|
||||
end
|
||||
|
||||
# Make sure the role name isn't empty
|
||||
if new_role_name.strip.empty?
|
||||
flash[:alert] = I18n.t("administrator.roles.empty_name")
|
||||
|
||||
return redirect_to admin_roles_path
|
||||
end
|
||||
|
||||
new_role = Role.create_new_role(new_role_name, @user_domain)
|
||||
return redirect_to admin_roles_path, flash: { alert: I18n.t("administrator.roles.invalid_create") } if new_role.nil?
|
||||
|
||||
redirect_to admin_roles_path(selected_role: new_role.id)
|
||||
end
|
||||
@ -232,82 +168,16 @@ class AdminsController < ApplicationController
|
||||
# This updates the priority of a site's roles
|
||||
# Note: A lower priority role will always get used before a higher priority one
|
||||
def change_role_order
|
||||
user_role = Role.find_by(name: "user", provider: @user_domain)
|
||||
admin_role = Role.find_by(name: "admin", provider: @user_domain)
|
||||
|
||||
current_user_role = current_user.highest_priority_role
|
||||
|
||||
# Users aren't allowed to update the priority of the admin or user roles
|
||||
if params[:role].include?(user_role.id.to_s) || params[:role].include?(admin_role.id.to_s)
|
||||
flash[:alert] = I18n.t("administrator.roles.invalid_order")
|
||||
|
||||
return redirect_to admin_roles_path
|
||||
unless update_priority(params[:role])
|
||||
redirect_to admin_roles_path, flash: { alert: I18n.t("administrator.roles.invalid_order") }
|
||||
end
|
||||
|
||||
# Restrict users to only updating the priority for roles in their domain with a higher
|
||||
# priority
|
||||
params[:role].each do |id|
|
||||
role = Role.find(id)
|
||||
if role.priority <= current_user_role.priority || role.provider != @user_domain
|
||||
flash[:alert] = I18n.t("administrator.roles.invalid_update")
|
||||
return redirect_to admin_roles_path
|
||||
end
|
||||
end
|
||||
|
||||
# Update the roles priority including the user role
|
||||
top_priority = 0
|
||||
|
||||
params[:role].each_with_index do |id, index|
|
||||
new_priority = index + [current_user_role.priority, 0].max + 1
|
||||
top_priority = new_priority
|
||||
Role.where(id: id).update_all(priority: new_priority)
|
||||
end
|
||||
|
||||
user_role.priority = top_priority + 1
|
||||
user_role.save!
|
||||
end
|
||||
|
||||
# POST /admin/role/:role_id
|
||||
# This method updates the permissions assigned to a role
|
||||
def update_role
|
||||
role = Role.find(params[:role_id])
|
||||
current_user_role = current_user.highest_priority_role
|
||||
|
||||
# Checks that it is valid for the provider to update the role
|
||||
if role.priority <= current_user_role.priority || role.provider != @user_domain
|
||||
flash[:alert] = I18n.t("administrator.roles.invalid_update")
|
||||
return redirect_to admin_roles_path(selected_role: role.id)
|
||||
end
|
||||
|
||||
role_params = params.require(:role).permit(:name)
|
||||
permission_params = params.require(:role)
|
||||
.permit(
|
||||
:can_create_rooms,
|
||||
:send_promoted_email,
|
||||
:send_demoted_email,
|
||||
:can_edit_site_settings,
|
||||
:can_edit_roles,
|
||||
:can_manage_users,
|
||||
:colour
|
||||
)
|
||||
|
||||
# Role is a default role so users can't change the name
|
||||
role_params[:name] = role.name if Role::RESERVED_ROLE_NAMES.include?(role.name)
|
||||
|
||||
# Make sure if the user is updating the role name that the role name is valid
|
||||
if role.name != role_params[:name] && !Role.duplicate_name(role_params[:name], @user_domain) &&
|
||||
!role_params[:name].strip.empty?
|
||||
role.name = role_params[:name]
|
||||
elsif role.name != role_params[:name]
|
||||
flash[:alert] = I18n.t("administrator.roles.duplicate_name")
|
||||
|
||||
return redirect_to admin_roles_path(selected_role: role.id)
|
||||
end
|
||||
|
||||
role.update(permission_params)
|
||||
|
||||
role.save!
|
||||
|
||||
flash[:alert] = I18n.t("administrator.roles.invalid_update") unless update_permissions(role)
|
||||
redirect_to admin_roles_path(selected_role: role.id)
|
||||
end
|
||||
|
||||
@ -337,10 +207,7 @@ class AdminsController < ApplicationController
|
||||
@user = User.where(uid: params[:user_uid]).includes(:roles).first
|
||||
end
|
||||
|
||||
def find_setting
|
||||
@settings = Setting.find_or_create_by!(provider: user_settings_provider)
|
||||
end
|
||||
|
||||
# Verifies that admin is an administrator of the user in the action
|
||||
def verify_admin_of_user
|
||||
redirect_to admins_path,
|
||||
flash: { alert: I18n.t("administrator.flash.unauthorized") } unless current_user.admin_of?(@user)
|
||||
@ -355,7 +222,7 @@ class AdminsController < ApplicationController
|
||||
end
|
||||
|
||||
if Rails.configuration.loadbalanced_configuration
|
||||
initial_list.where(provider: user_settings_provider)
|
||||
initial_list.where(provider: @user_domain)
|
||||
.admins_search(@search, @role)
|
||||
.admins_order(@order_column, @order_direction)
|
||||
else
|
||||
|
Reference in New Issue
Block a user