SoundSoftware Code Site

# Redmine - project management software

# Copyright (C) 2006-2012  Jean-Philippe Lang

#

# This program is free software; you can redistribute it and/or

# modify it under the terms of the GNU General Public License

# as published by the Free Software Foundation; either version 2

# of the License, or (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

#

# You should have received a copy of the GNU General Public License

# along with this program; if not, write to the Free Software

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

class Watcher < ActiveRecord::Base

  belongs_to :watchable, :polymorphic => true

  belongs_to :user

  validates_presence_of :user

  validates_uniqueness_of :user_id, :scope => [:watchable_type, :watchable_id]

  validate :validate_user

  # Unwatch things that users are no longer allowed to view

  def self.prune(options={})

    if options.has_key?(:user)

      prune_single_user(options[:user], options)

    else

      pruned = 0

      User.find(:all, :conditions => "id IN (SELECT DISTINCT user_id FROM #{table_name})").each do |user|

        pruned += prune_single_user(user, options)

      end

      pruned

    end

  end

  protected

  def validate_user

    errors.add :user_id, :invalid unless user.nil? || user.active?

  end

  private

  def self.prune_single_user(user, options={})

    return unless user.is_a?(User)

    pruned = 0

    find(:all, :conditions => {:user_id => user.id}).each do |watcher|

      next if watcher.watchable.nil?

      if options.has_key?(:project)

        next unless watcher.watchable.respond_to?(:project) && watcher.watchable.project == options[:project]

      end

      if watcher.watchable.respond_to?(:visible?)

        unless watcher.watchable.visible?(user)

          watcher.destroy

          pruned += 1

        end

      end

    end

    pruned

  end

end

<%= form_tag({:action => 'edit', :tab => 'repositories'}) do %>

<fieldset class="box settings enabled_scm">

<legend><%= l(:setting_enabled_scm) %></legend>

<%= hidden_field_tag 'settings[enabled_scm][]', '' %>

<table>

  <tr>

    <th></th>

    <th><%= l(:text_scm_command)         %></th>

    <th><%= l(:text_scm_command_version) %></th>

  </tr>

  <% Redmine::Scm::Base.all.collect do |choice| %>

    <% scm_class = "Repository::#{choice}".constantize %>

    <% text, value = (choice.is_a?(Array) ? choice : [choice, choice]) %>

    <% setting = :enabled_scm %>

		<% enabled = Setting.send(setting).include?(value) %>

    <tr>

      <td class="scm_name">

        <label>

        <%= check_box_tag("settings[#{setting}][]", value, enabled, :id => nil) %>

        <%= text.to_s %>

        </label>

      </td>

      <td>

         <% if enabled %>

         <%=

           image_tag(

              (scm_class.scm_available ? 'true.png' : 'exclamation.png'),

              :style => "vertical-align:bottom;"

           )

           %>

          <%= scm_class.scm_command %>

					<% end %>

       </td>

       <td>

          <%= scm_class.scm_version_string if enabled %>

       </td>

     </tr>

  <% end %>

</table>

<p><em class="info"><%= l(:text_scm_config) %></em></p>

</fieldset>

<div class="box tabular settings">

<p><%= setting_check_box :autofetch_changesets %></p>

<p><%= setting_check_box :sys_api_enabled,

                         :onclick =>

                             "if (this.checked) { $('#settings_sys_api_key').removeAttr('disabled'); } else { $('#settings_sys_api_key').attr('disabled', true); }" %></p>

<p><%= setting_text_field :sys_api_key,

                          :size     => 30,

                          :id       => 'settings_sys_api_key',

                          :disabled => !Setting.sys_api_enabled?,

                          :label    => :setting_mail_handler_api_key %>

  <%= link_to_function l(:label_generate_key),

                       "if (!$('#settings_sys_api_key').attr('disabled')) { $('#settings_sys_api_key').val(randomKey(20)) }" %>

</p>

<p><%= setting_text_field :repository_log_display_limit, :size => 6 %></p>

</div>

<fieldset class="box tabular settings">

<legend><%= l(:text_issues_ref_in_commit_messages) %></legend>

<p><%= setting_text_field :commit_ref_keywords, :size => 30 %>

<em class="info"><%= l(:text_comma_separated) %></em></p>

<p><%= setting_text_field :commit_fix_keywords, :size => 30 %>

&nbsp;<%= l(:label_applied_status) %>: <%= setting_select :commit_fix_status_id,

                                                          [["", 0]] +

                                                              IssueStatus.find(:all).collect{

                                                                 |status| [status.name, status.id.to_s]

                                                              },

                                                          :label => false %>

&nbsp;<%= l(:field_done_ratio) %>: <%= setting_select :commit_fix_done_ratio,

                                                       (0..10).to_a.collect {|r| ["#{r*10} %", "#{r*10}"] },

                                                       :blank => :label_no_change_option,

                                                       :label => false %>

<em class="info"><%= l(:text_comma_separated) %></em></p>

<p><%= setting_check_box :commit_cross_project_ref %></p>

<p><%= setting_check_box :commit_logtime_enabled,

                         :onclick =>

                            "if (this.checked) { $('#settings_commit_logtime_activity_id').removeAttr('disabled'); } else { $('#settings_commit_logtime_activity_id').attr('disabled', true); }"%></p>

<p><%= setting_select :commit_logtime_activity_id,

                      [[l(:label_default), 0]] +

                          TimeEntryActivity.shared.active.collect{|activity| [activity.name, activity.id.to_s]},

                      :disabled => !Setting.commit_logtime_enabled?%></p>

</fieldset>

<%= submit_tag l(:button_save) %>

<% end %>

# Redmine - project management software

# Copyright (C) 2006-2012  Jean-Philippe Lang

#

# This program is free software; you can redistribute it and/or

# modify it under the terms of the GNU General Public License

# as published by the Free Software Foundation; either version 2

# of the License, or (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

#

# You should have received a copy of the GNU General Public License

# along with this program; if not, write to the Free Software

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

require File.expand_path('../../../../test_helper', __FILE__)

class Redmine::CipheringTest < ActiveSupport::TestCase

  def test_password_should_be_encrypted

    Redmine::Configuration.with 'database_cipher_key' => 'secret' do

      r = Repository::Subversion.create!(:password => 'foo', :url => 'file:///tmp', :identifier => 'svn')

      assert_equal 'foo', r.password

      assert r.read_attribute(:password).match(/\Aaes-256-cbc:.+\Z/)

    end

  end

  def test_password_should_be_clear_with_blank_key

    Redmine::Configuration.with 'database_cipher_key' => '' do

      r = Repository::Subversion.create!(:password => 'foo', :url => 'file:///tmp', :identifier => 'svn')

      assert_equal 'foo', r.password

      assert_equal 'foo', r.read_attribute(:password)

    end

  end

  def test_password_should_be_clear_with_nil_key

    Redmine::Configuration.with 'database_cipher_key' => nil do

      r = Repository::Subversion.create!(:password => 'foo', :url => 'file:///tmp', :identifier => 'svn')

      assert_equal 'foo', r.password

      assert_equal 'foo', r.read_attribute(:password)

    end

  end

  def test_blank_password_should_be_clear

    Redmine::Configuration.with 'database_cipher_key' => 'secret' do

      r = Repository::Subversion.create!(:password => '', :url => 'file:///tmp', :identifier => 'svn')

      assert_equal '', r.password

      assert_equal '', r.read_attribute(:password)

    end

  end

  def test_unciphered_password_should_be_readable

    Redmine::Configuration.with 'database_cipher_key' => nil do

      r = Repository::Subversion.create!(:password => 'clear', :url => 'file:///tmp', :identifier => 'svn')

    end

    Redmine::Configuration.with 'database_cipher_key' => 'secret' do

      r = Repository.first(:order => 'id DESC')

      assert_equal 'clear', r.password

    end

  end

  def test_ciphered_password_with_no_cipher_key_configured_should_be_returned_ciphered

    Redmine::Configuration.with 'database_cipher_key' => 'secret' do

      r = Repository::Subversion.create!(:password => 'clear', :url => 'file:///tmp', :identifier => 'svn')

    end

    Redmine::Configuration.with 'database_cipher_key' => '' do

      r = Repository.first(:order => 'id DESC')

      # password can not be deciphered

      assert_nothing_raised do

        assert r.password.match(/\Aaes-256-cbc:.+\Z/)

      end

    end

  end

  def test_encrypt_all

    Repository.delete_all

    Redmine::Configuration.with 'database_cipher_key' => nil do

      Repository::Subversion.create!(:password => 'foo', :url => 'file:///tmp', :identifier => 'foo')

      Repository::Subversion.create!(:password => 'bar', :url => 'file:///tmp', :identifier => 'bar')

    end

    Redmine::Configuration.with 'database_cipher_key' => 'secret' do

      assert Repository.encrypt_all(:password)

      r = Repository.first(:order => 'id DESC')

      assert_equal 'bar', r.password

      assert r.read_attribute(:password).match(/\Aaes-256-cbc:.+\Z/)

    end

  end

  def test_decrypt_all

    Repository.delete_all

    Redmine::Configuration.with 'database_cipher_key' => 'secret' do

      Repository::Subversion.create!(:password => 'foo', :url => 'file:///tmp', :identifier => 'foo')

      Repository::Subversion.create!(:password => 'bar', :url => 'file:///tmp', :identifier => 'bar')

      assert Repository.decrypt_all(:password)

      r = Repository.first(:order => 'id DESC')

      assert_equal 'bar', r.password

      assert_equal 'bar', r.read_attribute(:password)

    end

  end

end

# Redmine - project management software

# Copyright (C) 2006-2012  Jean-Philippe Lang

#

# This program is free software; you can redistribute it and/or

# modify it under the terms of the GNU General Public License

# as published by the Free Software Foundation; either version 2

# of the License, or (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

#

# You should have received a copy of the GNU General Public License

# along with this program; if not, write to the Free Software

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

module Redmine

  module Acts

    module Searchable

      def self.included(base)

        base.extend ClassMethods

      end

      module ClassMethods

        # Options:

        # * :columns - a column or an array of columns to search

        # * :project_key - project foreign key (default to project_id)

        # * :date_column - name of the datetime column (default to created_on)

        # * :sort_order - name of the column used to sort results (default to :date_column or created_on)

        # * :permission - permission required to search the model (default to :view_"objects")

        def acts_as_searchable(options = {})

          return if self.included_modules.include?(Redmine::Acts::Searchable::InstanceMethods)

          cattr_accessor :searchable_options

          self.searchable_options = options

          if searchable_options[:columns].nil?

            raise 'No searchable column defined.'

          elsif !searchable_options[:columns].is_a?(Array)

            searchable_options[:columns] = [] << searchable_options[:columns]

          end

          searchable_options[:project_key] ||= "#{table_name}.project_id"

          searchable_options[:date_column] ||= "#{table_name}.created_on"

          searchable_options[:order_column] ||= searchable_options[:date_column]

          # Should we search custom fields on this model ?

          searchable_options[:search_custom_fields] = !reflect_on_association(:custom_values).nil?

          send :include, Redmine::Acts::Searchable::InstanceMethods

        end

      end

      module InstanceMethods

        def self.included(base)

          base.extend ClassMethods

        end

        module ClassMethods

          # Searches the model for the given tokens

          # projects argument can be either nil (will search all projects), a project or an array of projects

          # Returns the results and the results count

          def search(tokens, projects=nil, options={})

            if projects.is_a?(Array) && projects.empty?

              # no results

              return [[], 0]

            end

            # TODO: make user an argument

            user = User.current

            tokens = [] << tokens unless tokens.is_a?(Array)

            projects = [] << projects unless projects.nil? || projects.is_a?(Array)

            find_options = {:include => searchable_options[:include]}

            find_options[:order] = "#{searchable_options[:order_column]} " + (options[:before] ? 'DESC' : 'ASC')

            limit_options = {}

            limit_options[:limit] = options[:limit] if options[:limit]

            if options[:offset]

              limit_options[:conditions] = "(#{searchable_options[:date_column]} " + (options[:before] ? '<' : '>') + "'#{connection.quoted_date(options[:offset])}')"

            end

            columns = searchable_options[:columns]

            columns = columns[0..0] if options[:titles_only]

            token_clauses = columns.collect {|column| "(LOWER(#{column}) LIKE ?)"}

            if !options[:titles_only] && searchable_options[:search_custom_fields]

              searchable_custom_field_ids = CustomField.find(:all,

                                                             :select => 'id',

                                                             :conditions => { :type => "#{self.name}CustomField",

                                                                              :searchable => true }).collect(&:id)

              if searchable_custom_field_ids.any?

                custom_field_sql = "#{table_name}.id IN (SELECT customized_id FROM #{CustomValue.table_name}" +

                  " WHERE customized_type='#{self.name}' AND customized_id=#{table_name}.id AND LOWER(value) LIKE ?" +

                  " AND #{CustomValue.table_name}.custom_field_id IN (#{searchable_custom_field_ids.join(',')}))"

                token_clauses << custom_field_sql

              end

            end

            sql = (['(' + token_clauses.join(' OR ') + ')'] * tokens.size).join(options[:all_words] ? ' AND ' : ' OR ')

            find_options[:conditions] = [sql, * (tokens.collect {|w| "%#{w.downcase}%"} * token_clauses.size).sort]

            scope = self

            project_conditions = []

            if searchable_options.has_key?(:permission)

              project_conditions << Project.allowed_to_condition(user, searchable_options[:permission] || :view_project)

            elsif respond_to?(:visible)

              scope = scope.visible(user)

            else

              ActiveSupport::Deprecation.warn "acts_as_searchable with implicit :permission option is deprecated. Add a visible scope to the #{self.name} model or use explicit :permission option."

              project_conditions << Project.allowed_to_condition(user, "view_#{self.name.underscore.pluralize}".to_sym)

            end

            # TODO: use visible scope options instead

            project_conditions << "#{searchable_options[:project_key]} IN (#{projects.collect(&:id).join(',')})" unless projects.nil?

            project_conditions = project_conditions.empty? ? nil : project_conditions.join(' AND ')

            results = []

            results_count = 0

            scope = scope.scoped({:conditions => project_conditions}).scoped(find_options)

            results_count = scope.count(:all)

            results = scope.find(:all, limit_options)

            [results, results_count]

          end

        end

      end

    end

  end

end