rails 3 + ldap + additional rights

.gitignore

@@ -1,8 +1,19 @@
+
+# ide files
+.idea
+*.iml
+
+# confid files
 config/*.yml
 config/webistrano_config.rb
-tmp/*
-log/*
+
+# mac files
 *~
 .DS_Store
 *.tmproj
-Gemfile.lock
+
+# rails3 default
+.bundle
+db/*.sqlite3
+log/*.log
+tmp/

CHANGELOG.txt

@@ -1,3 +1,10 @@
+1.5 - JS 1.0
+* added rails 3 support (merged from janschumann)
+
+* added ldap and extra rights (merged from bradly)
+
+* included auth sources ui in user edit view
+
 
 edge
 

Gemfile

@@ -1,15 +1,50 @@
-source "http://rubygems.org"
-
-gem 'bundler', "~>1.0.10"
-gem "rails", "2.3.11"
-gem "mysql"
-gem "erubis"
-gem "rake"
-gem "syntax", "1.0.0"
-gem "capistrano", "2.6.0"
-gem "open4", "0.9.3"
-gem "exception_notification", "2.3.3.0"
+source 'http://rubygems.org'
+
+gem 'rails', '3.0.20'
+
+# Bundle edge Rails instead:
+# gem 'rails', :git => 'git://github.com/rails/rails.git'
+
+gem 'mysql2', '~> 0.2.17'
+
+gem 'net-ssh', :require => 'net/ssh'
+gem 'net-scp', :require => 'net/scp'
+gem 'net-sftp', :require => 'net/sftp'
+gem 'net-ldap', :require => 'net/ldap'
+gem 'net-ssh-gateway', :require => 'net/ssh/gateway'
+gem 'capistrano'
+gem 'highline'
+gem 'open4'
+gem 'syntax'
+
+# could not make it work
+#gem 'exception_notification', :require => 'exception_notifier'
+
+gem 'prototype_legacy_helper', '0.0.0', :git => 'git://github.com/rails/prototype_legacy_helper.git'
+
+# Use unicorn as the web server
+# gem 'unicorn'
+
+# Deploy with Capistrano
+# gem 'capistrano'
+
+# To use debugger (ruby-debug for Ruby 1.8.7+, ruby-debug19 for Ruby 1.9.2+)
+# gem 'ruby-debug'
+# gem 'ruby-debug19', :require => 'ruby-debug'
+
+# Bundle the extra gems:
+# gem 'bj'
+# gem 'nokogiri'
+# gem 'sqlite3-ruby', :require => 'sqlite3'
+# gem 'aws-s3', :require => 'aws/s3'
+
+# Bundle gems for the local environment. Make sure to
+# put test-only gems in this group so their generators
+# and rake tasks are available in development mode:
+# group :development, :test do
+#   gem 'webrat'
+# end
 
 group :test do
-  gem "mocha", "0.9.8"
+  gem "mocha", "0.13.2", :require => false
 end

Gemfile.lock

@@ -0,0 +1,115 @@
+GIT
+  remote: git://github.com/rails/prototype_legacy_helper.git
+  revision: a2cd95c3e3c1a4f7a9566efdab5ce59c886cb05f
+  specs:
+    prototype_legacy_helper (0.0.0)
+
+GEM
+  remote: http://rubygems.org/
+  specs:
+    abstract (1.0.0)
+    actionmailer (3.0.20)
+      actionpack (= 3.0.20)
+      mail (~> 2.2.19)
+    actionpack (3.0.20)
+      activemodel (= 3.0.20)
+      activesupport (= 3.0.20)
+      builder (~> 2.1.2)
+      erubis (~> 2.6.6)
+      i18n (~> 0.5.0)
+      rack (~> 1.2.5)
+      rack-mount (~> 0.6.14)
+      rack-test (~> 0.5.7)
+      tzinfo (~> 0.3.23)
+    activemodel (3.0.20)
+      activesupport (= 3.0.20)
+      builder (~> 2.1.2)
+      i18n (~> 0.5.0)
+    activerecord (3.0.20)
+      activemodel (= 3.0.20)
+      activesupport (= 3.0.20)
+      arel (~> 2.0.10)
+      tzinfo (~> 0.3.23)
+    activeresource (3.0.20)
+      activemodel (= 3.0.20)
+      activesupport (= 3.0.20)
+    activesupport (3.0.20)
+    arel (2.0.10)
+    builder (2.1.2)
+    capistrano (2.6.0)
+      highline
+      net-scp (>= 1.0.0)
+      net-sftp (>= 2.0.0)
+      net-ssh (>= 2.0.14)
+      net-ssh-gateway (>= 1.1.0)
+    erubis (2.6.6)
+      abstract (>= 1.0.0)
+    highline (1.6.19)
+    i18n (0.5.0)
+    json (1.8.0)
+    mail (2.2.20)
+      activesupport (>= 2.3.6)
+      i18n (>= 0.4.0)
+      mime-types (~> 1.16)
+      treetop (~> 1.4.8)
+    metaclass (0.0.1)
+    mime-types (1.24)
+    mocha (0.13.2)
+      metaclass (~> 0.0.1)
+    mysql2 (0.2.20)
+    net-ldap (0.3.1)
+    net-scp (1.1.1)
+      net-ssh (>= 2.6.5)
+    net-sftp (2.1.2)
+      net-ssh (>= 2.6.5)
+    net-ssh (2.6.7)
+    net-ssh-gateway (1.2.0)
+      net-ssh (>= 2.6.5)
+    open4 (0.9.3)
+    polyglot (0.3.3)
+    rack (1.2.8)
+    rack-mount (0.6.14)
+      rack (>= 1.0.0)
+    rack-test (0.5.7)
+      rack (>= 1.0)
+    rails (3.0.20)
+      actionmailer (= 3.0.20)
+      actionpack (= 3.0.20)
+      activerecord (= 3.0.20)
+      activeresource (= 3.0.20)
+      activesupport (= 3.0.20)
+      bundler (~> 1.0)
+      railties (= 3.0.20)
+    railties (3.0.20)
+      actionpack (= 3.0.20)
+      activesupport (= 3.0.20)
+      rake (>= 0.8.7)
+      rdoc (~> 3.4)
+      thor (~> 0.14.4)
+    rake (10.1.0)
+    rdoc (3.12.2)
+      json (~> 1.4)
+    syntax (1.0.0)
+    thor (0.14.6)
+    treetop (1.4.14)
+      polyglot
+      polyglot (>= 0.3.1)
+    tzinfo (0.3.37)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  capistrano
+  highline
+  mocha (= 0.13.2)
+  mysql2 (~> 0.2.17)
+  net-ldap
+  net-scp
+  net-sftp
+  net-ssh
+  net-ssh-gateway
+  open4
+  prototype_legacy_helper (= 0.0.0)!
+  rails (= 3.0.20)
+  syntax

README

@@ -0,0 +1,25 @@
+== Welcome to Webistrano on Rails 3 including LDAP authentication
+
+
+
+== Getting Started
+
+To install this version just clone the repo into your local directory and run "bundle install". 
+This should download all needed dependencies. If you encounter problems check if ruby 1.9.x and bundler
+(gem install bundle) are installed.
+
+== Configure Webistrano
+
+To configure webistrano please remove (or copy the files) the sample files in the config dir and edit it accordingly.
+
+== First run
+
+To initialize the database you have to run a rake command. You can execute it via "bundle exec rake db:migrate" this will
+execute the migration of the development environment. If you want to migrate or initialize another environment just run
+the command like that: "RAILS_ENV=production bundle exec rake db:migrate".
+
+To do a dry run you can just execute "script/rails s" and a server should be launched on http://localhost:3000.
+
+== Passenger configuration
+TBD
+

Rakefile

@@ -1,10 +1,7 @@
 # Add your own tasks in files placed in lib/tasks ending in .rake,
 # for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
 
-require(File.join(File.dirname(__FILE__), 'config', 'boot'))
-
+require File.expand_path('../config/application', __FILE__)
 require 'rake'
-require 'rake/testtask'
-require 'rake/rdoctask'
 
-require 'tasks/rails'
+Www::Application.load_tasks

app/controllers/application_controller.rb

@@ -1,57 +1,93 @@
 class ApplicationController < ActionController::Base
   include BrowserFilters
-  include ExceptionNotification::Notifiable
+
+  # could not male it work
+  # include ExceptionNotification::Notifiable
   include AuthenticatedSystem
-  
+
   before_filter CASClient::Frameworks::Rails::Filter if WebistranoConfig[:authentication_method] == :cas
-  before_filter :login_from_cookie, :login_required, :ensure_not_disabled
+  before_filter :login_from_cookie, :login_required, :ensure_not_disabled, :setup_sidebar_vars
   around_filter :set_timezone
 
   layout 'application'
-  
+
   helper :all # include all helpers, all the time
   helper_method :current_stage, :current_project
 
   # See ActionController::RequestForgeryProtection for details
   # Uncomment the :secret if you're not using the cookie session store
   protect_from_forgery
-  
+
   protected
+
+  def setup_sidebar_vars
+    if logged_in?
+      @sidebar_projects = Project.active.select { |p| current_user.can_view?(p) }
+      @sidebar_hosts    = @sidebar_projects.collect(&:stages).flatten.uniq.collect(&:hosts).flatten.uniq
+      @sidebar_recipes  = @sidebar_projects.collect(&:stages).flatten.uniq.collect(&:recipes).flatten.uniq
+      @sidebar_users    = User.find(:all, :order => "login ASC")
+    end
+  end
 
   def set_timezone
     # default timezone is UTC
     Time.zone = logged_in? ? ( current_user.time_zone rescue 'UTC'): 'UTC'
     yield
     Time.zone = 'UTC'
   end
-  
+
   def load_project
-    @project = Project.find(params[:project_id])
+    @project = Project.active.find(params[:project_id] || params[:id])
   end
-  
+
   def load_stage
     load_project
     @stage = @project.stages.find(params[:stage_id])
   end
-  
+
   def current_stage
     @stage
   end
-  
+
   def current_project
     @project
   end
-  
+
   def ensure_admin
     if logged_in? && current_user.admin?
       return true
     else
-      flash[:notice] = "Action not allowed"
-      redirect_to home_path
-      return false
+      handle_no_access
     end
   end
 
+  def handle_no_access(messsage = "Action not allowed")
+    flash[:notice] = messsage
+    redirect_to home_path
+    return false
+  end
+
+  def ensure_can_access_project(project=nil)
+    project ||= @project
+    @can_access_project = current_user.can_view?(project) or handle_no_access
+  end
+
+  def ensure_can_manage_projects
+    @can_manage_projects = current_user.can_manage_projects? or handle_no_access
+  end
+
+  def ensure_can_edit_project
+    @can_edit_project = current_user.can_edit?(@project) or handle_no_access
+  end
+
+  def ensure_can_manage_hosts
+    current_user.can_manage_hosts? or handle_no_access
+  end
+
+  def ensure_can_manage_recipes
+    current_user.can_manage_recipes? or handle_no_access
+  end
+
   def ensure_not_disabled
     if logged_in? && current_user.disabled?
       logout
@@ -60,7 +96,7 @@ def ensure_not_disabled
       return true
     end
   end
-  
+
   def logout
     self.current_user.forget_me if logged_in?
     cookies.delete :auth_token
@@ -72,5 +108,5 @@ def logout
       redirect_to "#{CASClient::Frameworks::Rails::Filter.config[:logout_url]}?serviceUrl=#{home_url}"
     end
   end
-  
+
 end