123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899 |
- # Redmine - project management software
- # Copyright (C) 2006-2011 Jean-Philippe Lang
- #
- # This program is free software; you can redistribute it and/or
- # modify it under the terms of the GNU General Public License
- # as published by the Free Software Foundation; either version 2
- # of the License, or (at your option) any later version.
- #
- # This program is distributed in the hope that it will be useful,
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- # GNU General Public License for more details.
- #
- # You should have received a copy of the GNU General Public License
- # along with this program; if not, write to the Free Software
- # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
-
- class RolesController < ApplicationController
- layout 'admin'
-
- before_filter :require_admin, :except => :index
- before_filter :require_admin_or_api_request, :only => :index
- before_filter :find_role, :only => [:edit, :update, :destroy]
- accept_api_auth :index
-
- def index
- respond_to do |format|
- format.html {
- @role_pages, @roles = paginate :roles, :per_page => 25, :order => 'builtin, position'
- render :action => "index", :layout => false if request.xhr?
- }
- format.api {
- @roles = Role.givable.all
- }
- end
- end
-
- def new
- # Prefills the form with 'Non member' role permissions
- @role = Role.new(params[:role] || {:permissions => Role.non_member.permissions})
- @roles = Role.sorted.all
- end
-
- def create
- @role = Role.new(params[:role])
- if request.post? && @role.save
- # workflow copy
- if !params[:copy_workflow_from].blank? && (copy_from = Role.find_by_id(params[:copy_workflow_from]))
- @role.workflows.copy(copy_from)
- end
- flash[:notice] = l(:notice_successful_create)
- redirect_to :action => 'index'
- else
- @roles = Role.sorted.all
- render :action => 'new'
- end
- end
-
- def edit
- end
-
- def update
- if request.put? and @role.update_attributes(params[:role])
- flash[:notice] = l(:notice_successful_update)
- redirect_to :action => 'index'
- else
- render :action => 'edit'
- end
- end
-
- def destroy
- @role.destroy
- redirect_to :action => 'index'
- rescue
- flash[:error] = l(:error_can_not_remove_role)
- redirect_to :action => 'index'
- end
-
- def permissions
- @roles = Role.sorted.all
- @permissions = Redmine::AccessControl.permissions.select { |p| !p.public? }
- if request.post?
- @roles.each do |role|
- role.permissions = params[:permissions][role.id.to_s]
- role.save
- end
- flash[:notice] = l(:notice_successful_update)
- redirect_to :action => 'index'
- end
- end
-
- private
-
- def find_role
- @role = Role.find(params[:id])
- rescue ActiveRecord::RecordNotFound
- render_404
- end
- end
|