UsersControllerValidate.rb

## FROM https://github.com/thinkdry/blank-application/blob/master/app/controllers/admin/users_controller.rb#L187

class Admin::UsersController < Admin::ApplicationController
	
  acts_as_ajax_validation

	acts_as_authorizable(
		:actions_permissions_links => {
		    'new' => 'new',
		    'create' => 'new',
				'edit' => 'edit',
				'update' => 'edit',
				'show' => 'show',
				'destroy' => 'destroy',
				'locking' => 'destroy'
			},
		:skip_logging_actions => [:validate, :forgot_password, :reset_password, :activate])

	#layout 'application', :expect => [:new, :create]
	layout :give_da_layout

  # Check Current User Status and Give the Layout
	def give_da_layout 
		if params[:action] == 'forgot_password' || params[:action] == 'reset_password'
			if logged_in?
				return get_current_layout
			else
				return 'login'
			end
		else
			return get_current_layout
		end
	end

  make_resourceful do
    actions :all, :only => [:new, :create, :edit, :update]

    before :new do
      get_roles
    end

		before :edit do
			get_roles
		end

    after :create do
      if is_given_private_workspace  
        @current_object.create_private_workspace
      end
      session[:locale] = nil
      flash[:notice] = I18n.t('user.new.flash_notice')
    end

    after :update do
      session[:locale] = nil
			flash[:notice] = I18n.t('user.edit.flash_notice')
    end

    after :create_fails do
			get_roles
			flash[:error] = I18n.t('user.new.flash_error')
    end

    after :update_fails do
			get_roles
			flash[:error] = I18n.t('user.edit.flash_error')
    end
    
    response_for :create, :update do |format|
      format.html {params[:continue] ? redirect_to(new_admin_user_path) : redirect_to(admin_user_path(@current_object))}
    end
  end
  
	def locking
		current_object
		if @current_object.activation_code == 'unlocked'
			if @current_object.lock
				flash[:notice] = I18n.t('user.locking.lock_flash_notice')
			else
				flash[:error] = I18n.t('user.locking.flash_error')
			end
		else
			if @current_object.unlock
				flash[:notice] = I18n.t('user.locking.unlock_flash_notice')
			else
				flash[:error] = I18n.t('user.locking.flash_error')
			end
		end
		redirect_to admin_users_path
	end

	def index
		current_objects
	  respond_to do |format|
			format.html {  }
			format.js { render :layout => false }
			format.xml { render :xml => @current_objects }
			format.json { render :json => @current_objects }
      format.atom { render :template => "users/index.atom.builder", :layout => false }
		end
	end

  # Users Index Object for All Users
	def current_objects #:nodoc:
	  params[:container_type] = 'workspace'
    params_hash = setting_searching_params(:from_params => params)
    params_hash.merge!({:skip_pag => true}) if params[:format] && params[:format] != 'html'
    if @current_user.has_system_role('superadmin')
		  @current_objects ||= @objects = User.get_da_objects_list(params_hash)
		else
		  @current_objects ||= @objects = User.get_da_objects_list(params_hash).delete_if{|u| u.has_system_role('superadmin')}
		end
	end

  # AutoComplete for Users in TextBox
  #
  # Usage URL
  #
  # /users/autocomplete_on
  def autocomplete_on
    conditions = if params['login']
      ["login LIKE :login OR firstname LIKE :login OR lastname LIKE :login",
        { :login => "%#{params['login']}%"}]
    else
      {}
    end
    @objects ||= User.find(:all, :conditions => conditions)
    render :text => '<ul>'+@objects.map{ |e| "<li>#{e.login} (#{e.full_name})</li>" }.join(' ')+'</ul>'
  end
	
  # Function allowing to activate the user with the RESTful authentification plugin
  #
  # Usage URL
  #
  # /users/activate
  def activate
    self.current_user = params[:activation_code].blank? ? :false : User.find_by_activation_code(params[:activation_code])
    if logged_in? && !current_user.active?
      current_user.activate
      flash[:notice] = "Subscription complete !"
    end
    redirect_back_or_default(admin_root_url)
  end

  # Function allowing to gain his password by email in case of forgot
  #
  # Usage URL
  #
  # /forgot_password
  def forgot_password
    return unless request.post?
    if @user = User.find_by_email(params[:user][:email])
      @user.create_reset_code
      flash[:notice] = I18n.t('user.forgot_password.flash_notice')
      redirect_to admin_login_path
    else
      flash[:error] = I18n.t('user.forgot_password.flash_error')
      render :action => "forgot_password"
    end
  end
 
  # Function allowing to reset the password of the current user after to have received a reset link in an email
  #
  # Usage URL
  #
  # /reset_password
  def reset_password
    if (@user = User.find_by_password_reset_code(params[:password_reset_code]) unless params[:password_reset_code].nil?)
      if request.post?
        if @user.update_attributes(:password => params[:user][:password], :password_confirmation => params[:user][:password_confirmation])
          self.current_user = @user
          @user.delete_reset_code
          flash[:notice] = "#{@user.login},"+I18n.t('user.reset_password.flash_notice')
          redirect_to admin_login_path
        else
          flash.now[:error] = I18n.t('user.reset_password.flash_error')
          render :action => :reset_password
        end
      end
    else
      flash[:error] = I18n.t('user.reset_password.flash_error_link')
      redirect_to admin_login_path
    end
  end

  # Overwritting the AjaxValidation plugin to manage the permission
  #
  # /users/validate
  def validate
    model_class = params['model'].classify.constantize
    @model_instance = params['id'] ? model_class.find(params['id']) : model_class.new
    @model_instance.send("#{params['attribute']}=", params['value']) 
    @model_instance.valid?
    render :inline => "<%= error_message_on(@model_instance, params['attribute']) %>"
  end

  # allow only post pethod to resend activation mail again or activate manually by admin only and parameter id is user's activation_code
  def resend_activation_mail_or_activate_manually
    if @current_user.has_system_role('admin') and @user = User.find_by_activation_code(params[:id])
      UserMailer.deliver_signup_notification(@user) if !params[:resend_activation_mail].nil?
      @user.activate if !params[:activate_manually].nil?
      redirect_to users_path
    else
      flash[:error] = I18n.t('general.common_message.permission_denied')
      redirect_to admin_login_path
    end
  end
  

  private
  def get_roles
    if (@current_user.has_system_role('superadmin') || @current_user.has_system_role('admin'))
      @roles = Role.find(:all, :conditions => { :type_role => 'system' })
    else
      @roles = [Role.find_by_name('user')]
    end
  end

end