feat(15-02): add Posts admin with mlmarkdown and FormatHTML
YAML-driven Posts screen stores translatable markdown and regenerates content_html in the plugin. Publish writes without access_publish are refused; list and form queries stay on the principal without access_other_posts. Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Jakub Zych
208
controllers/posts.go
Normal file
208
controllers/posts.go
Normal file
@@ -0,0 +1,208 @@
|
||||
package controllers
|
||||
|
||||
import (
|
||||
"context"
|
||||
"errors"
|
||||
"strconv"
|
||||
|
||||
"git.golem15.com/golem15/sm-journal-plugin/classes"
|
||||
"git.golem15.com/golem15/sm-journal-plugin/models"
|
||||
"git.golem15.com/golem15/summercms/modules/backpack"
|
||||
"git.golem15.com/golem15/summercms/modules/bouncer"
|
||||
"git.golem15.com/golem15/summercms/modules/cabana"
|
||||
"git.golem15.com/golem15/summercms/modules/pact"
|
||||
"gorm.io/gorm"
|
||||
)
|
||||
|
||||
const (
|
||||
// PostsControllerID is the cabana controller id of the Posts screen.
|
||||
PostsControllerID = "golem15.journal.posts"
|
||||
|
||||
// PermissionAccessPosts is Posts::$requiredPermissions.
|
||||
PermissionAccessPosts = "golem15.journal.access_posts"
|
||||
// PermissionAccessOtherPosts lets an administrator see every author's posts.
|
||||
PermissionAccessOtherPosts = "golem15.journal.access_other_posts"
|
||||
// PermissionAccessPublish is required to persist published=true or published_at.
|
||||
PermissionAccessPublish = "golem15.journal.access_publish"
|
||||
)
|
||||
|
||||
type postsAdminController struct {
|
||||
app func() *backpack.App
|
||||
}
|
||||
|
||||
func (postsAdminController) ID() string { return PostsControllerID }
|
||||
|
||||
func (postsAdminController) ModelName() string { return `Golem15\Journal\Models\Post` }
|
||||
|
||||
func (postsAdminController) ConfigDir() string { return "controllers/posts" }
|
||||
|
||||
func (postsAdminController) RequiredPermissions() []string {
|
||||
return []string{PermissionAccessPosts}
|
||||
}
|
||||
|
||||
func (postsAdminController) NewRecord() any { return &models.Post{} }
|
||||
|
||||
func (c postsAdminController) application() *backpack.App {
|
||||
if c.app == nil {
|
||||
return nil
|
||||
}
|
||||
return c.app()
|
||||
}
|
||||
|
||||
func (c postsAdminController) pool() *gorm.DB {
|
||||
app := c.application()
|
||||
if app == nil {
|
||||
return nil
|
||||
}
|
||||
gdb, ok := app.Lookup[*gorm.DB]()
|
||||
if !ok {
|
||||
return nil
|
||||
}
|
||||
return gdb
|
||||
}
|
||||
|
||||
func (c postsAdminController) db(ctx context.Context) *gorm.DB {
|
||||
if tx, ok := cabana.TxFromContext(ctx); ok {
|
||||
return tx
|
||||
}
|
||||
return c.pool()
|
||||
}
|
||||
|
||||
func (postsAdminController) ListExtendQuery(ctx context.Context, db *gorm.DB) *gorm.DB {
|
||||
return restrictToOwnPosts(ctx, db)
|
||||
}
|
||||
|
||||
func (postsAdminController) FormExtendQuery(ctx context.Context, db *gorm.DB) *gorm.DB {
|
||||
return restrictToOwnPosts(ctx, db)
|
||||
}
|
||||
|
||||
func restrictToOwnPosts(ctx context.Context, db *gorm.DB) *gorm.DB {
|
||||
if db == nil {
|
||||
return db
|
||||
}
|
||||
principal, ok := bouncer.User(ctx)
|
||||
if !ok || principal == nil || !principal.Backend {
|
||||
return db.Where("1 = 0")
|
||||
}
|
||||
if cabana.Allows(principal, []string{PermissionAccessOtherPosts}) {
|
||||
return db
|
||||
}
|
||||
return db.Where("user_id = ?", principal.ID)
|
||||
}
|
||||
|
||||
func (postsAdminController) ListRowStates(_ context.Context, _ *gorm.DB, records []any) ([][]pact.RowState, error) {
|
||||
out := make([][]pact.RowState, len(records))
|
||||
for i, record := range records {
|
||||
post, ok := record.(*models.Post)
|
||||
if !ok || post == nil {
|
||||
return nil, errors.New("posts admin: list record is not a post")
|
||||
}
|
||||
if !post.Published {
|
||||
out[i] = append(out[i], pact.RowStateDisabled)
|
||||
}
|
||||
}
|
||||
return out, nil
|
||||
}
|
||||
|
||||
func (c postsAdminController) FilterOptions(scope string) []pact.Option {
|
||||
if scope != models.FilterCategories {
|
||||
return nil
|
||||
}
|
||||
db := c.pool()
|
||||
if db == nil {
|
||||
return nil
|
||||
}
|
||||
var cats []models.Category
|
||||
if err := db.Session(&gorm.Session{NewDB: true}).Order("name ASC, id ASC").Find(&cats).Error; err != nil {
|
||||
return nil
|
||||
}
|
||||
out := make([]pact.Option, 0, len(cats))
|
||||
for _, cat := range cats {
|
||||
out = append(out, pact.Option{Value: strconv.FormatUint(uint64(cat.ID), 10), Label: cat.Name})
|
||||
}
|
||||
return out
|
||||
}
|
||||
|
||||
func (postsAdminController) AdminFieldRelations() []cabana.FieldRelationContract {
|
||||
return []cabana.FieldRelationContract{
|
||||
{
|
||||
Field: "user",
|
||||
Kind: "belongsTo",
|
||||
NewRelated: func() any { return &cabana.BackendUser{} },
|
||||
ForeignKey: "user_id",
|
||||
LabelColumn: "login",
|
||||
WritableForeignKey: true,
|
||||
},
|
||||
{
|
||||
Field: "categories",
|
||||
Kind: "belongsToMany",
|
||||
NewRelated: func() any { return &models.Category{} },
|
||||
NewPivot: func() any { return &models.PostCategory{} },
|
||||
ParentForeignKey: "post_id",
|
||||
RelatedForeignKey: "category_id",
|
||||
LabelColumn: "name",
|
||||
},
|
||||
{
|
||||
Field: "tags",
|
||||
Kind: "belongsToMany",
|
||||
NewRelated: func() any { return &models.Tag{} },
|
||||
NewPivot: func() any { return &models.PostTag{} },
|
||||
ParentForeignKey: "post_id",
|
||||
RelatedForeignKey: "tag_id",
|
||||
LabelColumn: "name",
|
||||
},
|
||||
}
|
||||
}
|
||||
|
||||
func (c postsAdminController) FormBeforeCreate(ctx context.Context, model any) error {
|
||||
post, ok := model.(*models.Post)
|
||||
if !ok || post == nil {
|
||||
return errors.New("posts admin: form model is not a post")
|
||||
}
|
||||
if post.UserID == nil || *post.UserID == 0 {
|
||||
principal, ok := bouncer.User(ctx)
|
||||
if ok && principal != nil && principal.Backend {
|
||||
id := principal.ID
|
||||
post.UserID = &id
|
||||
}
|
||||
}
|
||||
return preparePostWrite(ctx, post)
|
||||
}
|
||||
|
||||
func (c postsAdminController) FormBeforeUpdate(ctx context.Context, model any) error {
|
||||
post, ok := model.(*models.Post)
|
||||
if !ok || post == nil {
|
||||
return errors.New("posts admin: form model is not a post")
|
||||
}
|
||||
return preparePostWrite(ctx, post)
|
||||
}
|
||||
|
||||
func preparePostWrite(ctx context.Context, post *models.Post) error {
|
||||
if err := refuseUnpublishedWrite(ctx, post); err != nil {
|
||||
return err
|
||||
}
|
||||
if post.Published && post.PublishedAt == nil {
|
||||
return &cabana.ValidationError{Details: map[string]any{
|
||||
"published_at": []string{"golem15.journal::lang.post.published_validation"},
|
||||
}}
|
||||
}
|
||||
html, err := classes.FormatHTML(post.Content)
|
||||
if err != nil {
|
||||
return &cabana.ValidationError{Details: map[string]any{
|
||||
"content": []string{err.Error()},
|
||||
}}
|
||||
}
|
||||
post.ContentHTML = html
|
||||
return nil
|
||||
}
|
||||
|
||||
func refuseUnpublishedWrite(ctx context.Context, post *models.Post) error {
|
||||
if !post.Published && post.PublishedAt == nil {
|
||||
return nil
|
||||
}
|
||||
principal, _ := bouncer.User(ctx)
|
||||
if cabana.Allows(principal, []string{PermissionAccessPublish}) {
|
||||
return nil
|
||||
}
|
||||
return &cabana.ForbiddenError{Message: "golem15.journal::lang.journal.access_publish"}
|
||||
}
|
||||
Reference in New Issue
Block a user