Add a Simple Wiki to your Rails App

source 'https://rubygems.org'
ruby '2.0.0'

# Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
gem 'rails', '4.2.0'
gem 'passenger'
gem 'bcrypt', '~> 3.1.7'
gem 'devise', '~> 3.4.1'
gem 'pundit'
gem 'ancestry'

# Use postgresql as the database for Active Record
gem 'pg'
# Use SCSS for stylesheets
gem 'sass-rails', '~> 4.0.3'
# All the things for Bootstrap Sass
gem 'bootstrap-sass', '~> 3.3.1'
gem 'bootstrap_form'
gem 'draper', '~> 1.3'

# Use Uglifier as compressor for JavaScript assets
gem 'uglifier', '>= 1.3.0'
# Use CoffeeScript for .js.coffee assets and views
gem 'coffee-rails', '~> 4.0.0'
# See https://github.com/sstephenson/execjs#readme for more supported runtimes
gem 'therubyracer',  platforms: :ruby
gem 'will_paginate', '~> 3.0.7'
gem 'will_paginate-bootstrap', '~> 1.0.1'
gem 'simple_form'
gem 'activerecord-session_store'
gem 'ransack', '~> 1.6.3'

# markdown in comments
gem 'html-pipeline', '~> 1.11.0'
gem 'github-markdown', '~> 0.6.7'
gem 'gemoji', '~> 2.1.0'
gem 'sanitize', '~> 3.0.3'

#wiki and tags
gem 'acts-as-taggable-on', '~> 3.4'
gem 'wistia-api', '~> 0.2.3'

group :development, :test do
  gem 'minitest'
  gem 'rspec', '~> 2.14'
  gem 'rspec-rails'
  gem 'capybara', '~> 2.2.0'
  gem 'factory_girl_rails', '4.2.1'
  gem 'faker'
  gem 'launchy', '~> 2.1.2'
  gem "shoulda-matchers", "~> 2.4.0"
# Spring speeds up development by keeping your application running in the background. Read more: https://github.com/rails/spring
  gem 'spring'
  gem 'spring-commands-rspec'
  gem 'jazz_hands'
  gem 'pry-byebug'
end

# Use jquery as the JavaScript library
gem 'jquery-rails'
# Turbolinks makes following links in your web application faster. Read more: https://github.com/rails/turbolinks
# gem 'turbolinks'
# Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder
gem 'jbuilder', '~> 2.0'
# bundle exec rake doc:rails generates the API under doc/api.

group :doc do
  gem 'sdoc', '~> 0.4.0', :require => false
end

group :development do
  gem 'better_errors'
  gem 'binding_of_caller'
  gem 'annotate', '~> 2.6.5'
  gem 'guard-rspec', require: false
  gem 'web-console', '~> 2.0'
end

gem 'rails_12factor', group: :production do
  gem 'capistrano',  '~> 3.1'
  gem 'capistrano-rails', '~> 1.1.1'
end

require 'spec_helper'

feature 'User creates a wiki page' do
  
  let(:wiki_page) { create(:wiki_page) }
  let(:user) { create(:user) }
  let(:super_admin) { create(:super_admin) }

  before(:each) do
    sign_in_as_user(super_admin)
  end

  scenario 'they can create a wiki from the index page' do
    visit wiki_pages_path
    click_link 'Create Wiki'
    fill_in 'wiki_page_title', with: "A wiki"
    fill_in 'wiki_page_content', with: "You know its a wiki"
    click_button 'submit'
    expect(WikiPage.last.title).to eql("A wiki")
  end

  scenario 'only super admin can create pages' do
    change_user_role(user, 'account')
    visit wiki_pages_path
    click_link 'Create Wiki'
    expect(page).to_not have_content("Create Wiki")
  end

  scenario 'even if they try and force their way in' do
    change_user_role(user, 'account')
    visit new_wiki_page_path
    expect(page).to_not have_content("Create Wiki")
    expect(page).to_not have_content("You cannot perform this action.")
  end
end

# == Schema Information
#
# Table name: wiki_pages
#
#  id         :integer          not null, primary key
#  path       :string
#  title      :string
#  content    :string
#  ancestry   :string
#  created_by :integer
#  updated_by :integer
#  created_at :datetime
#  updated_at :datetime
#  wistia     :string
#

class WikiPage < ActiveRecord::Base

  has_ancestry
  acts_as_taggable

  # RELATIONSHIPS
  has_many :comments, as: :commentable
  belongs_to :user, :foreign_key => 'created_by'

  # VALIDATIONS
  validates_presence_of :title
  validates_presence_of :content

  # VALIDATIONS
  #scope :has_video, where("wistia <> ''")

  def created_by_user
    user_id = self.created_by
    if !user_id.blank?
      author = User.find(user_id)
    end
  end

  def updated_by_user
    user_id = self.updated_by
    if !user_id.blank?
      updater = User.find(user_id)
    end
  end

end

class WikiPageDecorator < ApplicationDecorator
  delegate_all
  decorates_association :comments

  # Define presentation-specific methods here. Helpers are accessed through
  # `helpers` (aka `h`). You can override attributes, for example:
  #
  #   def created_at
  #     helpers.content_tag :span, class: 'time' do
  #       object.created_at.strftime("%a %m/%d/%y")
  #     end
  #   end

  def created_by_user_name
    object.created_by_user.present? ? h.link_to(object.created_by_user.name, h.user_path(object.created_by_user)) : ""
  end

  def updated_by_user_name
    object.updated_by_user.present? ? h.link_to(object.updated_by_user.name, h.user_path(object.updated_by_user)) : ""
  end

  def back
    h.link_to 'Back', h.wiki_pages_path
  end

  def pun_edit_link
    h.policy(object).update? ? h.link_to('Edit', h.edit_wiki_page_path(object)) : ""
  end

  def pun_destroy_link
    h.policy(object).destroy? ? h.link_to('Destroy', object, method: :delete, data: { confirm: 'Are you sure?' } ) : ""
  end

end

class WikiPagePolicy < ApplicationPolicy
  class Scope < Scope
    attr_reader :user, :scope

    def initialize(user, scope)
      @user = user
      @scope = scope
    end

    def resolve
      scope.all unless @user.blocked?
    end
  end

  def show?
    return true unless @user.blocked?
  end

  def create?
    return true if @user.super_admin?
  end

  def new?
    create?
  end

  def update?
    return true if user.super_admin?
  end

  def edit?
    update?
  end

  def destroy?
    return true if user.super_admin?
  end
end

require 'spec_helper'
require 'pundit/rspec'

describe WikiPagePolicy do

  let!(:user) { create(:user) }
  let!(:super_admin) { create(:super_admin) }
  let!(:blocked_user) { create(:blocked_user) }

  subject { WikiPagePolicy }

  permissions ".scope" do
  end

  permissions :index? do
  end

  permissions :create? do
    it "grants access if user is super admin" do
      expect(subject).to permit(super_admin)
    end

    it "rejects access to everyone else" do
      #rejects
      expect(subject).to_not permit(user)
      expect(subject).to_not permit(blocked_user)
    end
  end

  permissions :show? do
    it "grants access if user is super admin" do
      expect(subject).to permit(super_admin)
    end

    it "rejects access if user is blocked" do
      expect(subject).not_to permit(blocked_user, supplier)
    end
  end

  permissions :update? do
    it "grants access if user is super admin" do
      expect(subject).to permit(super_admin)
    end
  end

  permissions :destroy? do
    it "grants access if user is super admin" do
      expect(subject).to permit(super_admin)
    end
  end
end

class WikiPagesController < ApplicationController

  before_action :authenticate_user!
  before_action :redirect_blocked_user
  before_action :set_wiki_page, only: [:show, :edit, :update, :destroy]

  after_filter :verify_authorized,  except: :index
  after_filter :verify_policy_scoped, only: :index

  def index
    if params[:tag]
      @query = policy_scope(WikiPage.tagged_with(params[:tag])).ransack(params[:q])
      @wiki_pages = @query.result(distinct: true).paginate(:page => params[:page])
    else
      @query = policy_scope(WikiPage).ransack(params[:q])
      @wiki_pages = @query.result(distinct: true).paginate(:page => params[:page])
    end
  end

  def show
    authorize @wiki_page
    @wiki_page = @wiki_page.decorate
  end

  def new
    @wiki_page = WikiPage.new.decorate
    authorize @wiki_page
  end

  def edit
    authorize @wiki_page
    @wiki_page = @wiki_page.decorate
  end

  def create
    @wiki_page = WikiPage.new(wiki_page_params)
    @wiki_page.created_by = current_user.id
    authorize @wiki_page
    respond_to do |format|
      if @wiki_page.save
        format.html { redirect_to @wiki_page, notice: 'WikiPage was successfully created.' }
      else
        format.html { render :new }
      end
    end
  end

  def update
    @wiki_page.updated_by = current_user.id
    authorize @wiki_page
    respond_to do |format|
      if @wiki_page.update(wiki_page_params)
        format.html { redirect_to @wiki_page, notice: 'WikiPage was successfully updated.' }
      else
        format.html { render :edit }
      end
    end
  end

  def destroy
    authorize @wiki_page
    @wiki_page.destroy
    respond_to do |format|
      format.html { redirect_to wiki_pages_url, notice: 'WikiPage was successfully destroyed.' }
    end
  end

  private
    # Use callbacks to share common setup or constraints between actions.
    def set_wiki_page
      @wiki_page = WikiPage.find(params[:id])
    end

    # Never trust parameters from the scary internet, only allow the white list through.
    def wiki_page_params
      params.require(:wiki_page).permit(:title, :content, :path, :wistia, :parent_id, :tag_list, :created_by, :updated_by)
    end
end

module WikiPagesHelper

  def wistia_embed
     Wistia.embed(@wiki_page.wistia, {
      videoFoam: true
    });
  end
end

require "spec_helper"

describe WikiPagesController do
  describe "routing" do
    it("routes to #index") { get("/wiki_pages").should route_to("wiki_pages#index") }
    it("routes to #show") { get("/wiki_pages/1").should route_to("wiki_pages#show", :id => "1") }
    it("routes to #new") { get("/wiki_pages/new").should route_to("wiki_pages#new") }
    it("routes to #create") { post("/wiki_pages").should route_to("wiki_pages#create") }
    it("routes to #edit") { get("/wiki_pages/1/edit").should route_to("wiki_pages#edit", :id => "1") }
    it("routes to #update") { put("/wiki_pages/1").should route_to("wiki_pages#update", :id => "1") }
    it("routes to #destroy") { delete("/wiki_pages/1").should route_to("wiki_pages#destroy", :id => "1") }
  end
end

class CreateWikiPages < ActiveRecord::Migration
  def change
    create_table :wiki_pages do |t|
      t.string :path
      t.string :title
      t.string :content
      t.string :ancestry
      t.integer :created_by
      t.integer :updated_by
      t.timestamps
    end
  end
end