redmine_dmsf/app/controllers/dmsf_controller.rb

# Redmine plugin for Document Management System "Features"
#
# Copyright (C) 2011   Vít Jonáš <vit.jonas@gmail.com>
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

class DmsfController < ApplicationController
  unloadable
  
  before_filter :find_project
  before_filter :authorize, :except => [:delete_entries] 
  before_filter :find_folder, :except => [:new, :create, :edit_root, :save_root]
  before_filter :find_parent, :only => [:new, :create]
  
  helper :all

  def show
    if @folder.nil?
      @subfolders = @project.dmsf_folders.visible
      @files = @project.dmsf_files.visible
    else 
      @subfolders = @folder.subfolders.visible
      @files = @folder.files.visible
    end
    
    @files.sort! do |a,b|
      a.last_revision.title <=> b.last_revision.title
    end
  end

  def entries_operation
    selected_folders = params[:subfolders]
    selected_files = params[:files]
    
    if selected_folders.nil? && selected_files.nil?
      flash[:warning] = l(:warning_no_entries_selected)
      redirect_to :action => "show", :id => @project, :folder_id => @folder
      return
    end
    
    if !params[:email_entries].blank?
      email_entries(selected_folders, selected_files)
    else
      download_entries(selected_folders, selected_files)
    end
  rescue ZipMaxFilesError
    flash[:error] = l(:error_max_files_exceeded, :number => Setting.plugin_redmine_dmsf["dmsf_max_file_download"].to_i.to_s)
    redirect_to({:controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder})
  rescue EmailMaxFileSize
    flash[:error] = l(:error_max_email_filesize_exceeded, :number => Setting.plugin_redmine_dmsf["dmsf_max_email_filesize"].to_s)
    redirect_to({:controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder})
  rescue DmsfAccessError
    render_403
  end

  def entries_email
    @email_params = params[:email]
    if @email_params["to"].strip.blank?
      flash.now[:error] = l(:error_email_to_must_be_entered)
      render :action => "email_entries"
      return
    end
    DmsfMailer.send_documents(User.current, @email_params["to"], @email_params["cc"],
      @email_params["subject"], @email_params["zipped_content"], @email_params["body"]).deliver
    File.delete(@email_params["zipped_content"])
    flash[:notice] = l(:notice_email_sent)
    redirect_to({:controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder})
  end

  class ZipMaxFilesError < StandardError
  end

  class EmailMaxFileSize < StandardError
  end

  def delete_entries
    selected_folders = params[:subfolders]
    selected_files = params[:files]
    if selected_folders.nil? && selected_files.nil?
      flash[:warning] = l(:warning_no_entries_selected)
    else
      failed_entries = []
      deleted_files = []
      deleted_folders = []
      unless selected_folders.nil?
        if User.current.allowed_to?(:folder_manipulation, @project)
          selected_folders.each do |subfolderid|
            subfolder = DmsfFolder.visible.find(subfolderid)
            next if subfolder.nil?
            if subfolder.project != @project || !subfolder.delete
              failed_entries.push(subfolder) 
            else
              deleted_folders.push(subfolder)
            end
          end
        else
          flash[:error] = l(:error_user_has_not_right_delete_folder)
        end
      end
      unless selected_files.nil?
        if User.current.allowed_to?(:file_manipulation, @project)
          selected_files.each do |fileid|
            file = DmsfFile.visible.find(fileid)
            next if file.nil?
            if file.project != @project || !file.delete
              failed_entries.push(file)
            else
              deleted_files.push(file)
            end
          end
        else
          flash[:error] = l(:error_user_has_not_right_delete_file)
        end
      end
      unless deleted_files.empty?
        deleted_files.each {|f| log_activity(f, "deleted")}
        DmsfMailer.files_deleted(User.current, deleted_files).deliver
      end
      if failed_entries.empty?
        flash[:notice] = l(:notice_entries_deleted)
      else
        flash[:warning] = l(:warning_some_entries_were_not_deleted, :entries => failed_entries.map{|e| e.title}.join(", "))
      end
    end
    
    redirect_to :controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder
  end

  # Folder manipulation

  def new
    @folder = DmsfFolder.new #Bugfix form error
    @pathfolder = @parent
    render :action => "edit"
  end

  def create
    @folder = DmsfFolder.new(params[:dmsf_folder])
    @folder.project = @project
    @folder.user = User.current
    if @folder.save
      flash[:notice] = l(:notice_folder_created)
      redirect_to({:controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder})
    else
      @pathfolder = @parent
      render :action => "edit"
    end
  end

  def edit
    @parent = @folder.folder
    @pathfolder = copy_folder(@folder)
  end

  def save
    unless params[:dmsf_folder]
      redirect_to :controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder
      return
    end
    @pathfolder = copy_folder(@folder)
    @folder.attributes = params[:dmsf_folder]
    if @folder.save
      flash[:notice] = l(:notice_folder_details_were_saved)
      redirect_to :controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder
    else
      render :action => "edit"
    end
  end

  def delete
    check_project(@delete_folder = DmsfFolder.visible.find(params[:delete_folder_id]))
    if !@delete_folder.nil?
      if @delete_folder.delete
        flash[:notice] = l(:notice_folder_deleted)
      else
        flash[:error] = @delete_folder.errors[:base][0]
      end
    end
    redirect_to :controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder
  rescue DmsfAccessError
    render_403  
  end

  def edit_root
  end

  def save_root
    @project.dmsf_description = params[:project][:dmsf_description]
    @project.save!
    flash[:notice] = l(:notice_folder_details_were_saved)
    redirect_to :controller => "dmsf", :action => "show", :id => @project
  end

  def notify_activate
    if @folder.notification
      flash[:warning] = l(:warning_folder_notifications_already_activated)
    else
      @folder.notify_activate
      flash[:notice] = l(:notice_folder_notifications_activated)
    end
    redirect_to params[:current] ? params[:current] : 
      {:controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder.folder}
  end
  
  def notify_deactivate
    if !@folder.notification
      flash[:warning] = l(:warning_folder_notifications_already_deactivated)
    else
      @folder.notify_deactivate
      flash[:notice] = l(:notice_folder_notifications_deactivated)
    end
    redirect_to params[:current] ? params[:current] : 
      {:controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder.folder}
  end


  def lock
    if @folder.nil?
      flash[:warning] = l(:warning_foler_unlockable)
    elsif @folder.locked?
      flash[:warning] = l(:warning_folder_already_locked)
    else
      @folder.lock!
      flash[:notice] = l(:notice_folder_locked)
    end
      redirect_to params[:current] ? params[:current] :
        {:controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder.folder}
  end

  def unlock
    if @folder.nil?
      flash[:warning] = l(:warning_foler_unlockable)
    elsif !@folder.locked?
      flash[:warning] = l(:warning_folder_not_locked)
    else
      if @folder.locks[0].user == User.current || User.current.allowed_to?(:force_file_unlock, @project)
        @folder.unlock!
        flash[:notice] = l(:notice_folder_unlocked)
      else
        flash[:error] = l(:error_only_user_that_locked_folder_can_unlock_it)
      end
    end
    redirect_to params[:current] ? params[:current] :
        {:controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder.folder}
  end
  
  def assign    
  end
  
  def assignment
    revision = DmsfFileRevision.find_by_id params[:dmsf_file_revision_id]
    if revision
      revision.set_workflow(params[:dmsf_workflow_id], params[:action])
      revision.assign_workflow(params[:dmsf_workflow_id])
      if request.post? && revision.save
        flash[:notice] = l(:notice_successful_create)
      end
    end
    redirect_to params[:current] ? params[:current] :
        {:controller => "dmsf", :action => "show", :id => @project, :folder_id => @folder.folder} 
  end

  private

  def log_activity(file, action)
    Rails.logger.info "#{Time.now.strftime('%Y-%m-%d %H:%M:%S')} #{User.current.login}@#{request.remote_ip}/#{request.env['HTTP_X_FORWARDED_FOR']}: #{action} dmsf://#{file.project.identifier}/#{file.id}"
  end

  def email_entries(selected_folders, selected_files)
    zip = DmsfZip.new
    zip_entries(zip, selected_folders, selected_files)
    
    ziped_content = "#{DmsfHelper.temp_dir}/#{DmsfHelper.temp_filename("dmsf_email_sent_documents.zip")}";
    
    File.open(ziped_content, "wb") do |f|
      zip_file = File.open(zip.finish, "rb")
      while (buffer = zip_file.read(8192))
        f.write(buffer)
      end
    end

    max_filesize = Setting.plugin_redmine_dmsf["dmsf_max_email_filesize"].to_f
    if max_filesize > 0 && File.size(ziped_content) > max_filesize * 1048576
      raise EmailMaxFileSize
    end
    
    zip.files.each do |f| 
      log_activity(f,"emailing zip")
      audit = DmsfFileRevisionAccess.new(:user_id => User.current.id, :dmsf_file_revision_id => f.last_revision.id, 
        :action => DmsfFileRevisionAccess::EmailAction)
      audit.save!
    end
    
    @email_params = {"zipped_content" => ziped_content}
    render :action => "email_entries"
  ensure
    zip.close unless zip.nil? 
  end

  def download_entries(selected_folders, selected_files)
    zip = DmsfZip.new
    zip_entries(zip, selected_folders, selected_files)
    
    zip.files.each do |f| 
      log_activity(f,"download zip")
      audit = DmsfFileRevisionAccess.new(:user_id => User.current.id, :dmsf_file_revision_id => f.last_revision.id, 
        :action => DmsfFileRevisionAccess::DownloadAction)
      audit.save!
    end
    
    send_file(zip.finish, 
      :filename => filename_for_content_disposition(@project.name + "-" + DateTime.now.strftime("%y%m%d%H%M%S") + ".zip"),
      :type => "application/zip", 
      :disposition => "attachment")
  ensure
    zip.close unless zip.nil? 
  end
  
  def zip_entries(zip, selected_folders, selected_files)
    if selected_folders && selected_folders.is_a?(Array)
      selected_folders.each do |selected_folder_id|
        check_project(folder = DmsfFolder.visible.find(selected_folder_id))
        zip.add_folder(folder, (@folder.dmsf_path_str unless @folder.nil?)) unless folder.nil?
      end
    end
    if selected_files && selected_files.is_a?(Array)
      selected_files.each do |selected_file_id|
        check_project(file = DmsfFile.visible.find(selected_file_id))
        zip.add_file(file, (@folder.dmsf_path_str unless @folder.nil?)) unless file.nil?
      end
    end
    
    max_files = 0
    max_files = Setting.plugin_redmine_dmsf["dmsf_max_file_download"].to_i
    if max_files > 0 && zip.files.length > max_files
      raise ZipMaxFilesError, zip.files.length
    end
    
    zip
  end
  
  def find_project
    @project = Project.find(params[:id])
  end
  
  def find_folder
    @folder = DmsfFolder.visible.find(params[:folder_id]) if params.keys.include?("folder_id")
    check_project(@folder)
  rescue DmsfAccessError
    render_403
  end

  def find_parent
    @parent = DmsfFolder.visible.find(params[:parent_id]) if params.keys.include?("parent_id")
    check_project(@parent)
  rescue DmsfAccessError
    render_403
  end

  def check_project(entry)
    if !entry.nil? && entry.project != @project
      raise DmsfAccessError, l(:error_entry_project_does_not_match_current_project) 
    end
  end

  def copy_folder(folder)
    copy = folder.clone
    copy.id = folder.id
    copy
  end

end