Class: AdminController

Inherits:
ApplicationController show all
Defined in:
app/controllers/admin_controller.rb

Overview

Web controller. Provides authenticated actions for use by administrators.

Instance Method Summary collapse

Methods inherited from ApplicationController

#dashboard, #keyboard_tools, #upload

Instance Method Details

#admin_email ⇒ Object 



43
 
# File 'app/controllers/admin_controller.rb', line 43

def admin_email; end

#all_email ⇒ Object 



55
 
# File 'app/controllers/admin_controller.rb', line 55

def all_email; end

#audit_log ⇒ Object 



67
68
69
70
71
72
73
74
75
76
77
 
# File 'app/controllers/admin_controller.rb', line 67

def audit_log
  @logs = if current_user.is_global_admin
            AuditLog.unscoped.where.not(log_type: ['user_annotation', 'user_history'])
          else
            AuditLog.where.not(log_type: ['block_log', 'user_annotation', 'user_history'])
          end.user_sort({ term: params[:sort], default: :created_at },
                        age: :created_at, type: :log_type, event: :event_type,
                        related: Arel.sql('related_type DESC, related_id DESC'), user: :user_id)
          .paginate(page: params[:page], per_page: 100)
  render layout: 'without_sidebar'
end

#change_back ⇒ Object 



175
176
177
178
179
 
# File 'app/controllers/admin_controller.rb', line 175

def change_back
  return not_found unless session[:impersonator_id].present?

  @impersonator = User.find session[:impersonator_id]
end

#change_users ⇒ Object 



157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
 
# File 'app/controllers/admin_controller.rb', line 157

def change_users
  @user = User.find params[:id]

  unless params[:comment].present?
    flash[:danger] = 'Please explain why you are impersonating this user.'
    render :impersonate
    return
  end

  dev_id = current_user.id
  AuditLog.admin_audit(event_type: 'impersonation_start', related: @user, user: current_user,
                       comment: params[:comment])
   @user
  session[:impersonator_id] = dev_id
  flash[:success] = "You are now impersonating #{@user.username}."
  redirect_to root_path
end

#create_site ⇒ Object 



83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
 
# File 'app/controllers/admin_controller.rb', line 83

def create_site
  @new_community = Community.create(name: params[:community][:name], host: params[:community][:host])

  # Run Seeds
  Rails.application.load_seed

  # Manage Site Settings
  settings = SiteSetting.for_community_id(@new_community.id)
  settings.find_by(name: 'SiteName').update(value: @new_community.name)

  # Audit Log
  AuditLog.admin_audit(event_type: 'new_site', related: @new_community, user: current_user,
                       comment: "<<Community #{@new_community.attributes_print}>>")

  # Clear cache
  Rails.cache.clear

  # Render template
  render
end

#error_reports ⇒ Object 



10
11
12
13
14
15
16
17
18
 
# File 'app/controllers/admin_controller.rb', line 10

def error_reports
  @reports = if params[:uuid].present?
               ErrorLog.where(uuid: params[:uuid])
             elsif current_user.is_global_admin
               ErrorLog.all
             else
               ErrorLog.where(community: RequestContext.community)
             end.order(created_at: :desc).paginate(page: params[:page], per_page: 50)
end

#hellban ⇒ Object 



146
147
148
149
150
151
 
# File 'app/controllers/admin_controller.rb', line 146

def hellban
  @user = User.find params[:id]
  @user.block("user manually blocked by admin ##{current_user.id}")
  flash[:success] = t 'admin.user_fed_stat'
  redirect_back fallback_location: admin_path
end

#impersonate ⇒ Object 



153
154
155
 
# File 'app/controllers/admin_controller.rb', line 153

def impersonate
  @user = User.find params[:id]
end

#index ⇒ Object 



8
 
# File 'app/controllers/admin_controller.rb', line 8

def index; end

#new_site ⇒ Object 



79
80
81
 
# File 'app/controllers/admin_controller.rb', line 79

def new_site
  @new_community = Community.new
end

#privileges ⇒ Object 



20
21
22
 
# File 'app/controllers/admin_controller.rb', line 20

def privileges
  @abilities = Ability.all
end

#send_admin_email ⇒ Object 



45
46
47
48
49
50
51
52
53
 
# File 'app/controllers/admin_controller.rb', line 45

def send_admin_email
  Thread.new do
    AdminMailer.with(body_markdown: params[:body_markdown], subject: params[:subject]).to_moderators.deliver_now
  end
  AuditLog.admin_audit(event_type: 'send_admin_email', user: current_user,
                       comment: "Subject: #{params[:subject]}")
  flash[:success] = t 'admin.email_being_sent'
  redirect_to admin_path
end

#send_all_email ⇒ Object 



57
58
59
60
61
62
63
64
65
 
# File 'app/controllers/admin_controller.rb', line 57

def send_all_email
  Thread.new do
    AdminMailer.with(body_markdown: params[:body_markdown], subject: params[:subject]).to_all_users.deliver_now
  end
  AuditLog.admin_audit(event_type: 'send_all_email', user: current_user,
                       comment: "Subject: #{params[:subject]}")
  flash[:success] = t 'admin.email_being_sent'
  redirect_to admin_path
end

#setup ⇒ Object 



104
 
# File 'app/controllers/admin_controller.rb', line 104

def setup; end

#setup_save ⇒ Object 



106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
 
# File 'app/controllers/admin_controller.rb', line 106

def setup_save
  settings = SiteSetting.for_community_id(@community.id)
  default_settings = SiteSetting.for_community_id(Community.first.id)

  # Set settings from config page
  { primary_color: 'SiteCategoryHeaderDefaultColor', logo_url: 'SiteLogoPath', ad_slogan: 'SiteAdSlogan',
    mathjax: 'MathJaxEnabled', syntax_highlighting: 'SyntaxHighlightingEnabled', chat_link: 'ChatLink',
    analytics_url: 'AnalyticsURL', analytics_id: 'AnalyticsSiteId', content_transfer: 'AllowContentTransfer' } \
    .each do |key, setting|
    settings.find_by(name: setting).update(value: params[key])
  end

  # Auto-load settings
  ['AdminBadgeCharacter', 'ModBadgeCharacter', 'SEApiClientId', 'SEApiClientSecret', 'SEApiKey',
   'AdministratorContactEmail'].each do |setting|
    settings.find_by(name: setting)
            .update(value: default_settings.find_by(name: setting).value)
  end

  # Generate meta tags
  required_tags = ['discussion', 'support', 'feature-request', 'bug']
  status_tags = ['status-completed', 'status-declined', 'status-review', 'status-planned', 'status-deferred']
  tags = required_tags + status_tags
  Tag.create(tags.map { |t| { name: t, community_id: @community.id, tag_set: TagSet.meta } })

  Category.where(name: 'Q&A').last.update tag_set: TagSet.main
  Category.where(name: 'Meta').last.update tag_set: TagSet.meta

  # Set Meta tags as required/mod-only
  meta_category = Category.where(name: 'Meta').last
  meta_category.required_tags << Tag.unscoped.where(community: @community, name: required_tags)
  meta_category.moderator_tags << Tag.unscoped.where(community: @community, name: status_tags)

  Rails.cache.clear
  AuditLog.admin_audit(event_type: 'setup_site', related: @new_community, user: current_user,
                       comment: 'Site Settings updated via /admin/setup')

  render
end

#show_privilege ⇒ Object 



24
25
26
27
28
29
 
# File 'app/controllers/admin_controller.rb', line 24

def show_privilege
  @ability = Ability.find_by internal_id: params[:name]
  respond_to do |format|
    format.json { render json: @ability }
  end
end

#update_privilege ⇒ Object 



31
32
33
34
35
36
37
38
39
40
41
 
# File 'app/controllers/admin_controller.rb', line 31

def update_privilege
  @ability = Ability.find_by internal_id: params[:name]
  type = ['post', 'edit', 'flag'].include?(params[:type]) ? params[:type] : nil
  return not_found if type.nil?

  pre = @ability.send("#{type}_score_threshold".to_sym)
  @ability.update("#{type}_score_threshold" => params[:threshold])
  AuditLog.admin_audit(event_type: 'ability_threshold_update', related: @ability, user: current_user,
                       comment: "#{params[:type]} score\nfrom <<#{pre}>>\nto <<#{params[:threshold]}>>")
  render json: { status: 'OK', privilege: @ability }, status: :accepted
end

#verify_elevation ⇒ Object 



181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
 
# File 'app/controllers/admin_controller.rb', line 181

def verify_elevation
  return not_found unless session[:impersonator_id].present?

  @impersonator = User.find session[:impersonator_id]
  if @impersonator&.sso_profile.present?
    session.delete :impersonator_id
    AuditLog.admin_audit(event_type: 'impersonation_end', related: current_user, user: @impersonator)
    sign_out @impersonator
    redirect_to new_saml_user_session_path
  elsif @impersonator&.valid_password? params[:password]
    session.delete :impersonator_id
    AuditLog.admin_audit(event_type: 'impersonation_end', related: current_user, user: @impersonator)
     @impersonator
    redirect_to root_path
  else
    flash[:danger] = 'Incorrect password.'
    render :change_back
  end
end