Merge branch 'szzh' into dev_zanle

Conflicts:
	app/views/projects/show.html.erb

.gitignore

@@ -1,23 +0,0 @@
-*.swp
-/.project
-/.idea
-/.bundle
-*.swp
-/config/database.yml
-/config/configuration.yml
-/files/*
-/log/*
-/public/tmp/*
-/tmp/*
-/public/cache/*
-.gitignore
-/config/newrelic.yml
-/public/images/avatars/*
-/Gemfile
-/Gemfile.lock
-/db/schema.rb
-/Gemfile.lock
-/lib/plugins/acts_as_versioned/test/debug.log
-.rbenv-gemsets
-.DS_Store
-public/api_doc/

Gemfile

@@ -21,7 +21,8 @@ gem 'acts-as-taggable-on', '2.4.1'
 gem 'spreadsheet'
 gem 'ruby-ole'
 #gem 'email_verifier', path: 'lib/email_verifier'
-
+gem 'rufus-scheduler'
+gem 'dalli', path: 'lib/dalli-2.7.2'
 group :development do
   gem 'grape-swagger'
   gem 'grape-swagger-ui', git: 'https://github.com/guange2015/grape-swagger-ui.git'

app/api/mobile/api.rb

@@ -6,6 +6,7 @@ module Mobile
   require_relative 'apis/watches'
   require_relative 'apis/upgrade'
   require_relative 'apis/homeworks'
+  require_relative 'apis/comments'
   class API < Grape::API
     version 'v1', using: :path
     format :json
@@ -37,6 +38,7 @@ module Mobile
     mount Apis::Watches
     mount Apis::Upgrade
     mount Apis::Homeworks
+    mount Apis::Comments
 
     #add_swagger_documentation ({api_version: 'v1', base_path: 'http://u06.shellinfo.cn/trustie/api'})
      #add_swagger_documentation ({api_version: 'v1', base_path: '/api'})  if Rails.env.development?

app/api/mobile/apis/comments.rb

@@ -0,0 +1,93 @@
+#coding=utf-8
+module Mobile
+  module Apis
+    class Comments < Grape::API
+      resource :comments do
+        desc '课程通知评论'
+        params do
+          requires :token, type: String
+          requires :comments, type: String
+        end
+        post ':id' do
+          cs = CommentService.new
+          cs_params = {
+              id: params[:id],
+              comment: params.reject{|k,v| [:id].include?(k)}}
+          comments = cs.news_comments cs_params,current_user
+          raise "create comments failed #{comments.errors.full_messages}" if comments.new_record?
+          present :data, comments, with: Mobile::Entities::Comment
+          present :status, 0
+        end
+
+        desc '作业留言（教师布置的作业）'
+        params do
+          requires :token, type: String
+          requires :message,type: String, desc: '留言'
+          #optional :reference_content, type: String ,desc: '引用的内容'
+          #optional :reference_user_id, type: Integer,desc: '被引用的人'
+        end
+        post ':id/create_homework_message' do
+          cs_params = {
+              id: params[:id],
+              token: params[:token],
+              reference_content: params[:reference_content],
+              bid_message: params.reject{|k,v| [:id,:token,:reference_content].include?(k)}}
+          cs = CommentService.new
+          message = cs.homework_message cs_params,current_user
+          present :data, message, with: Mobile::Entities::Jours
+          present :status, 0
+        end
+
+        desc '课程留言'
+        params do
+          requires :token, type: String
+          requires :course_message,type: String, desc: '留言'
+        end
+        post ':id/leave_course_message' do
+          cs_params = {
+              id: params[:id],
+              token: params[:token],
+              new_form: params.reject{|k,v| [:id,:token].include?(k)}}
+          cs = CommentService.new
+          message = cs.leave_course_message cs_params,current_user
+          present :data, message, with: Mobile::Entities::Jours
+          present :status, 0
+        end
+
+        desc '回复留言'
+        params do
+          requires :token, type: String
+          requires :reference_id, type: Integer,desc: '所属留言树的根留言id（最顶层的非回复的留言,留言对象中的m_parent_id）'
+          requires :reference_user_id,type: Integer ,desc: '被回复的留言的作者id'
+          #requires :reference_message_id,type: Integer,desc: '被回复的留言的id'
+          requires :user_notes,type: String,desc: '留言的内容'
+          requires :jour_type,type: String,desc: '等于父留言的jour_type'
+          requires :jour_id,type:Integer, desc: '等于父留言的jour_id'
+        end
+        post ':reference_message_id/create_reply'do
+          cs = CommentService.new
+          message = cs.create_reply params,current_user
+          raise "create reply failed #{message.errors.full_messages}" if message.new_record?
+          present :data, message, with: Mobile::Entities::Jours
+          present :status, 0
+        end
+
+        desc ' 意见反馈'
+        params do
+          requires :token, type: String
+          requires :subject,type: String,desc: '意见'
+        end
+        post do
+          cs_params = {
+              memo: {:subject => params[:subject],:content => '该贴来自手机App意见反馈'},
+          }
+          cs = CommentService.new
+          memo = cs.create_feedback cs_params, current_user
+          raise "commit failed #{memo.errors.full_messages}" if memo.new_record?
+          present :status, 0
+        end
+
+      end
+    end
+  end
+end

app/api/mobile/apis/courses.rb

@@ -8,10 +8,11 @@ module Mobile
           optional :school_id, type: Integer, desc: '传入学校id,返回该学校课程列表'
           requires :per_page_count, type: Integer, desc: '每页总数'
           requires :page, type: Integer, desc: '当前页码'
+          optional :token, type: String
         end
         get do
           cs = CoursesService.new
-          courses = cs.course_list(params)
+          courses = cs.course_list(params,current_user.nil? ? User.find(2):current_user)
           present :data, courses, with: Mobile::Entities::Course
           present :status, 0
         end
@@ -130,10 +131,11 @@ module Mobile
         desc "搜索课程"
         params do
           requires :name, type: String, desc: "课程名"
+          optional :token, type: String
         end
         get 'search' do
           cs = CoursesService.new
-          courses = cs.search_course(params)
+          courses = cs.search_course(params,current_user.nil? ? User.find(2):current_user)
           present :data, courses, with: Mobile::Entities::Course
           present :status, 0
         end
@@ -165,13 +167,15 @@ module Mobile
         desc "返回单个课程"
         params do
           requires :id, type: Integer
+          optional :token, type: String
         end
         route_param :id do
           get do
             cs = CoursesService.new
             course = cs.show_course(params,(current_user.nil? ? User.find(2):current_user))
             #course = Course.find(params[:id])
-            {status: 0, data: course}
+            present :data, course, with: Mobile::Entities::Course
+            present :status, 0
           end
         end
 
@@ -188,17 +192,18 @@ module Mobile
 
         desc "课程通知列表"
         params do
+          optional :token, type: String
         end
         get ":course_id/news" do
           cs = CoursesService.new
-          news = cs.course_news_list params
+          news = cs.course_news_list params,current_user.nil? ? User.find(2):current_user
           present :data, news, with: Mobile::Entities::News
           present :status, 0
         end
 
         desc "显示课程通知"
         params do
-
+          optional :token, type: String
         end
         get "news/:id" do
           cs = CoursesService.new
@@ -208,6 +213,16 @@ module Mobile
           present :status, 0
         end
 
+        desc '用户课程动态'
+        params do
+          requires :token, type: String
+        end
+        get "course_dynamic/:id" do
+          cs = CoursesService.new
+          count = cs.course_dynamic(params,current_user)
+          present :data, count, with: Mobile::Entities::CourseDynamic
+          present :status, 0
+        end
 
       end
     end

app/api/mobile/apis/homeworks.rb

@@ -70,6 +70,32 @@ module Mobile
           present :status, 0
         end
 
+        desc "作品打分"
+        params do
+          requires :token, type: String
+          requires :is_teacher, type: String,desc: '是否为教师（匿评作品详情返回的结果中可获取此参数的值）'
+          requires :is_anonymous_comments, type: String, desc: '是否为匿评（匿评作品详情返回的结果中可获取此参数的值）'
+          optional :stars_value, type: Integer,desc: '用户给出的评分'
+          optional :cur_page,type: Integer,desc: '匿评作品详情返回的结果中可获取此参数的值'
+          optional :cur_type, type: Integer,desc: '匿评作品详情返回的结果中可获取此参数的值'
+          optional :user_message, type: String, desc: '用户评论'
+        end
+
+        post ':homework_id/scoring' do
+          cs_params = {
+              new_form: params.reject{|k,v| [:token,:is_teacher,:is_anonymous_comments,:stars_value,:cur_page,:cur_type,:homework_id].include?(k)},
+              token: params[:token],
+              is_teacher: params[:is_teacher],
+              is_anonymous_comments: params[:is_anonymous_comments],
+              stars_value: params[:stars_value],
+              cur_page: params[:cur_page],
+              cur_type: params[:cur_type],
+              homework_id: params[:homework_id]
+          }
+          Homeworks.get_service.add_score_and_jour cs_params,current_user
+          present :status, 0
+        end
+
 
       end
     end

app/api/mobile/apis/users.rb

@@ -22,13 +22,15 @@ module Mobile
 
         desc "显示用户"
         params do
-
+          requires :id, type: Integer
         end
-        get ':id' do
-          us = UsersService.new
-          ue = us.show_user params
-          present :data, ue,with: Mobile::Entities::User
-          present :status, 0
+        route_param :id do
+          get do
+            us = UsersService.new
+            ue = us.show_user params
+            present :data, ue,with: Mobile::Entities::User
+            present :status, 0
+          end
         end
 
         desc "修改用户"
@@ -77,11 +79,12 @@ module Mobile
           present :status, 0
         end
 
-        desc "用户搜索" 
+        desc "用户搜索"
         params do
           requires :name, type: String, desc: '用户名关键字'
+          requires :search_by, type: String,desc: '搜索依据：0 昵称，1 用户名，2 邮箱'
         end
-        get 'search' do
+        get 'search/search_user' do
           us = UsersService.new
           user = us.search_user params
           present :data, user, with: Mobile::Entities::User

app/api/mobile/entities/anonymous_works_params.rb

@@ -15,6 +15,7 @@ module Mobile
       anonymous_works_params_expose :m_score
       anonymous_works_params_expose :is_anonymous_comments
       anonymous_works_params_expose :cur_type
+      anonymous_works_params_expose :cur_page
       expose :jours ,using: Mobile::Entities::Jours do |f, opt|
         if f.is_a?(Hash) && f.key?(:jours)
           f[:jours]

app/api/mobile/entities/comment.rb

@@ -0,0 +1,30 @@
+module Mobile
+  module Entities
+    class Comment < Grape::Entity
+      include Redmine::I18n
+      def self.comment_expose(field)
+        expose field do |f,opt|
+          if f.is_a?(Hash) && f.key?(field)
+            f[field]
+          elsif f.is_a?(::Comment)
+            if f.respond_to?(field)
+              if field == :created_on
+                format_time(f.send(field))
+              else
+                f.send(field)
+              end
+            end
+          end
+        end
+      end
+      comment_expose :id
+      expose :author, using: Mobile::Entities::User do |c, opt|
+        if c.is_a? ::Comment
+          c.author
+        end
+      end
+      comment_expose :comments
+      comment_expose :created_on
+    end
+  end
+end

app/api/mobile/entities/course.rb

@@ -1,6 +1,7 @@
 module Mobile
   module Entities
     class Course < Grape::Entity
+      include Redmine::I18n
       def self.course_expose(field)
         expose field do |f,opt|
           c = nil
@@ -9,9 +10,11 @@ module Mobile
           else
             c = f[:course]
           end
-          if field == :img_url
+          if f.is_a?(Hash) && f.key?(field)
             f[field] if f.is_a?(Hash) && f.key?(field)
             #f.img_url if f.respond_to?(:img_url)
+          elsif field == :created_at || field == :updated_at
+            (format_time(c[field]) if (c.is_a?(Hash) && c.key?(field))) || (format_time(c.send(field)) if c.respond_to?(field))
           else
             (c[field] if (c.is_a?(Hash) && c.key?(field))) || (c.send(field) if c.respond_to?(field))
           end
@@ -50,9 +53,11 @@ module Mobile
           c[:course].teacher
         end
       end
-      expose :my_homework,using: Mobile::Entities::HomeworkAttach  do |f, opt|
+      expose :my_homework,using: Mobile::Entities::Homework  do |f, opt|
         f[:my_homework] if f.is_a?(Hash) && f.key?(:my_homework)
       end
+      course_expose :current_user_is_member
+      course_expose :current_user_is_teacher
     end
   end
 end

app/api/mobile/entities/course_dynamic.rb

@@ -0,0 +1,16 @@
+module Mobile
+  module Entities
+    class CourseDynamic < Grape::Entity
+      def self.course_dynamic_expose(field)
+        expose field do |c,opt|
+          c[field] if (c.is_a?(Hash) && c.key?(field))
+        end
+      end
+      course_dynamic_expose :type
+      course_dynamic_expose :count
+      course_dynamic_expose :course_name
+      course_dynamic_expose :course_id
+      course_dynamic_expose :course_img_url
+    end
+  end
+end

app/api/mobile/entities/homework.rb

@@ -1,10 +1,15 @@
 module Mobile
   module Entities
     class Homework < Grape::Entity
+      include Redmine::I18n
       def self.homework_expose(field)
         expose field do |f,opt|
           if f.is_a?(Hash) && f.key?(field)
-            f[field]
+            if field == :created_on
+              format_time(f[field])
+            else
+              f[field]
+            end
           elsif f.is_a?(::Bid)
             if f.respond_to?(field)
               f.send(field)
@@ -18,8 +23,16 @@ module Mobile
       homework_expose :id
       #课程名称
       homework_expose :course_name
-      #课程老师
-      homework_expose :course_teacher
+
+      homework_expose :course_id
+      #作业发布者
+      expose :author,using: Mobile::Entities::User  do |f, opt|
+         f[:author]
+      end
+
+      #作业发布者真名
+      homework_expose :author_real_name
+
       #作业次数
       homework_expose :homework_times
       #作业名称
@@ -36,6 +49,13 @@ module Mobile
       #只有作业启用了匿评功能且当前用户是课程老师且已提交的作品数量大于或等于2才能开启匿评
       homework_expose :homework_state
 
+      homework_expose :created_on
+      homework_expose :deadline
+
+      expose :jours,using: Mobile::Entities::Jours  do |f, opt|
+        f[:jours] if f.is_a?(Hash) && f.key?(:jours)
+      end
+
       expose :homework_for_anonymous_comments,using: Mobile::Entities::HomeworkAttach  do |f, opt|
         f[:homework_for_anonymous_comments] if f.is_a?(Hash) && f.key?(:homework_for_anonymous_comments)
       end

app/api/mobile/entities/homework_attach.rb

@@ -17,6 +17,8 @@ module Mobile
                case field
                  when :homework_times
                    f.bid.courses.first.homeworks.index(f.bid) + 1 unless (f.bid.nil? || f.bid.courses.nil? || f.bid.courses.first.nil?)
+                 when :comment_status
+                   f.bid.comment_status
                end
             end
           end
@@ -28,6 +30,8 @@ module Mobile
       homework_attach_expose :homework_times
       homework_attach_expose :description
       homework_attach_expose :created_at
+      #comment_status 0:所属作业尚未开启匿评，1：匿评中 2：匿评结束
+      homework_attach_expose :comment_status
       expose :attachments,using: Mobile::Entities::Attachment do |f, opt|
         if f.respond_to?(:attachments)
           f.send(:attachments)

app/api/mobile/entities/homework_jours.rb

@@ -6,7 +6,11 @@ module Mobile
       def self.homework_jours_expose(field)
         expose field do |f,opt|
           if f.is_a?(Hash) && f.key?(field)
-            f[field]
+            if field == :created_at
+              format_time(f[field])
+            else
+              f[field]
+            end
           elsif f.is_a?(::SeemsRateableRates)
 
           end

app/api/mobile/entities/jours.rb

@@ -18,12 +18,15 @@ module Mobile
         end
       end
       jours_expose :id
+      jours_expose :jour_type
+      jours_expose :jour_id
       expose :user,using: Mobile::Entities::User do |f, opt|
         f.user
       end
       jours_expose :created_on
       jours_expose :notes
       jours_expose :m_reply_id
+      jours_expose :m_parent_id
       expose :reply_user,using: Mobile::Entities::User do |f, opt|
         f.at_user
       end

app/api/mobile/entities/news.rb

@@ -1,6 +1,7 @@
 module Mobile
   module Entities
     class News < Grape::Entity
+      include Redmine::I18n
       def self.news_expose(field)
         expose field do |f,opt|
           if f.is_a?(Hash) && f.key?(field)
@@ -9,13 +10,18 @@ module Mobile
             n = f[:news]
             comments = f[:comments]
             if n.is_a?(::News)
-              n.send(field) if n.respond_to?(field)
+              if field == :created_on
+                format_time(n.send(field)) if n.respond_to?(field)
+              else
+                n.send(field) if n.respond_to?(field)
+              end
+
             end
 
           end
         end
       end
-
+      news_expose :id
       #新闻标题
       news_expose :title
 
@@ -34,7 +40,11 @@ module Mobile
       #评论数量
       news_expose :comments_count
       #评论
-      news_expose :comments
+      expose :comments, using: Mobile::Entities::Comment do |f, opt|
+        if f.is_a?(Hash) && f.key?(:comments)
+          f[:comments]
+        end
+      end
 
 
     end

app/controllers/account_controller.rb

@@ -315,7 +315,7 @@ class AccountController < ApplicationController
     code = /\d*/
     #根据home_url生产正则表达式
     eval("code = " + "/^" + home_url.gsub(/\//,"\\\/") + "\\\/*(welcome)?\\\/*(\\\/index\\\/*.*)?\$/")
-    if code=~params[:back_url] && last_login_on != ''
+    if (code=~params[:back_url] || params[:back_url].to_s.include?('lost_password')) && last_login_on != ''
       redirect_to user_activities_path(user)
     else
       if last_login_on == ''

app/controllers/bids_controller.rb

@@ -9,7 +9,7 @@ class BidsController < ApplicationController
   menu_item :homework_statistics, :only => :homework_statistics
   menu_item :edit, :only => :edit
 
-
+  before_filter :auth_login1, :only => [:show_courseEx]
 
   before_filter :can_show_course,only: []
   before_filter :can_show_contest,only: []

app/controllers/courses_controller.rb

@@ -5,6 +5,7 @@ class CoursesController < ApplicationController
   helper :members
   helper :words
 
+  before_filter :auth_login1, :only => [:show, :feedback]
   menu_item :overview
   menu_item :feedback, :only => :feedback
   menu_item :homework, :only => :homework
@@ -98,7 +99,8 @@ class CoursesController < ApplicationController
   #更新课程信息
   def update
     cs = CoursesService.new
-    @course = cs.edit_course params,@course,User.current
+    c = cs.edit_course params,@course,User.current
+    @course = c[:course]
     if @course.errors.full_messages.count <= 0
         respond_to do |format|
           format.html {
@@ -254,8 +256,8 @@ class CoursesController < ApplicationController
     end
     @is_remote = true
     @result_count = @results.count
-    @results = paginateHelper @results
-
+    @results = paginateHelper @results, 10
+    @search_name = q
   end
 
   def addgroups
@@ -428,17 +430,34 @@ class CoursesController < ApplicationController
     # @results = paginateHelper @results@score_sort_by = "desc"
     @is_remote = true
     @score_sort_by = params[:sort_by] if params[:sort_by]
+    @search_name = params[:search_name] if params[:search_name]
     group_id = params[:group_id]
-    if group_id == '0'
-      page = params[:page].nil? ? 0 : (params['page'].to_i - 1)
-      @results = student_homework_score(0,page, 10,@score_sort_by)
+    if !@search_name.nil?
+      if group_id == '0'
+        page = params[:page].nil? ? 0 : (params['page'].to_i - 1)
 
-      @results = paginateHelper_for_members @results, 10
+        @results = searchmember_by_name(student_homework_score(0,0,0,@score_sort_by), @search_name)
+        @result_count = @results.count
+        @results = paginateHelper @results, 10
+      else
+        @group = CourseGroup.find(group_id)
+        @results = searchmember_by_name(student_homework_score(group_id, 0, 0,@score_sort_by),@search_name)
+        @result_count = @results.count
+        @results = paginateHelper @results, 10
+      end
     else
-      @group = CourseGroup.find(group_id)
-      @results = student_homework_score(group_id, 0, 0,@score_sort_by)
-      @results = paginateHelper @results, 10
+      if group_id == '0'
+        page = params[:page].nil? ? 0 : (params['page'].to_i - 1)
+        @results = student_homework_score(0,page, 10,@score_sort_by)
+
+        @results = paginateHelper_for_members @results, 10
+      else
+        @group = CourseGroup.find(group_id)
+        @results = student_homework_score(group_id, 0, 0,@score_sort_by)
+        @results = paginateHelper @results, 10
+      end
     end
+
   end
   # 显示每个学生的作业评分详情
   def show_member_score
@@ -481,7 +500,7 @@ class CoursesController < ApplicationController
 
   def create
     cs = CoursesService.new
-    @course = cs.create_course params,User.current
+    @course = cs.create_course(params,User.current)[:course]
     if @course.new_record?
       respond_to do |format|
         format.html { render :action => 'new', :layout => 'base' } #Added by young
@@ -938,10 +957,34 @@ class CoursesController < ApplicationController
     else
       render_403
     end
-
   end
 
-
+  #根据已有课程复制课程
+  #param id:已有课程ID
+  def copy_course
+    if @course
+      @new_course = Course.new @course.attributes
+      @new_course.tea_id = User.current.id
+      @new_course.created_at = DateTime.now
+      @new_course.updated_at = DateTime.now
+      @new_course.endup_time = nil
+      if @new_course.save
+        r = Role.givable.find_by_id(Setting.new_project_user_role_id.to_i) || Role.givable.first
+        m = Member.new(:user => User.current, :roles => [r])
+        m.project_id = -1
+        course = CourseInfos.new(:user_id => User.current.id, :course_id => @new_course.id)
+        #user_grades = UserGrade.create(:user_id => User.current.id, :course_id => @course.id)
+        if @new_course.is_public == 1
+          course_status = CourseStatus.create(:course_id => @new_course.id, :watchers_count => 0, :changesets_count => 0, :grade => 0, :course_type => 1)
+        end
+        @new_course.members << m
+        @new_course.course_infos << course
+        redirect_to settings_course_url @new_course
+      end
+    else
+      render_404
+    end
+  end
 
   private
 

app/controllers/files_controller.rb

@@ -20,7 +20,7 @@ class FilesController < ApplicationController
     layout 'base_projects' #by young
 
   menu_item :files
-
+  before_filter :auth_login1, :only => [:index]
   before_filter :find_project_by_project_id#, :except => [:getattachtype]
   before_filter :authorize, :except => [:getattachtype,:quote_resource_show,:search]
 

app/controllers/forums_controller.rb

@@ -15,12 +15,14 @@ class ForumsController < ApplicationController
   PageLimit = 20
   def create_feedback
     if User.current.logged?
-      @memo = Memo.new(params[:memo])
-      @memo.forum_id = "1"
-      @memo.author_id = User.current.id
+      #@memo = Memo.new(params[:memo])
+      #@memo.forum_id = "1"
+      #@memo.author_id = User.current.id
       #@forum = @memo.forum
+      cs = CommentService.new
+      @memo = cs.create_feedback params,User.current
       respond_to do |format|
-        if @memo.save
+        if !@memo.new_record?
           format.html { redirect_to forum_path(@memo.forum) }
         else
           sort_init 'updated_at', 'desc'

app/controllers/messages_controller.rb

@@ -17,6 +17,7 @@
 
 class MessagesController < ApplicationController
   include ApplicationHelper
+  before_filter :authorize1, :only => [:show]
   menu_item :boards
   default_search_scope :messages
   before_filter :find_board, :only => [:new, :preview,:edit]

app/controllers/news_controller.rb

@@ -17,6 +17,7 @@
 
 class NewsController < ApplicationController
   layout 'base_projects'# by young
+  before_filter :authorize1, :only => [:show]
   default_search_scope :news
   model_object News
   before_filter :find_model_object, :except => [:new, :create, :index]

app/controllers/poll_controller.rb

@@ -23,6 +23,10 @@ class PollController < ApplicationController
 
   def show
     @poll = Poll.find params[:id]
+    if @poll.polls_status != 2 && !User.current.allowed_to?(:as_teacher,@course)
+      render_403
+      return
+    end
     #已提交问卷的用户不能再访问该界面
     if has_commit_poll?(@poll.id,User.current.id) && (!User.current.admin?)
       render_403