admin.js 30 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919
  1. module.exports = function(crowi, app) {
  2. 'use strict';
  3. var debug = require('debug')('crowi:routes:admin')
  4. , fs = require('fs')
  5. , models = crowi.models
  6. , Page = models.Page
  7. , PageGroupRelation = models.PageGroupRelation
  8. , User = models.User
  9. , UserGroup = models.UserGroup
  10. , UserGroupRelation = models.UserGroupRelation
  11. , Config = models.Config
  12. , PluginUtils = require('../plugins/plugin-utils')
  13. , pluginUtils = new PluginUtils()
  14. , ApiResponse = require('../util/apiResponse')
  15. , MAX_PAGE_LIST = 50
  16. , actions = {};
  17. function createPager(total, limit, page, pagesCount, maxPageList) {
  18. const pager = {
  19. page: page,
  20. pagesCount: pagesCount,
  21. pages: [],
  22. total: total,
  23. previous: null,
  24. previousDots: false,
  25. next: null,
  26. nextDots: false,
  27. };
  28. if (page > 1) {
  29. pager.previous = page - 1;
  30. }
  31. if (page < pagesCount) {
  32. pager.next = page + 1;
  33. }
  34. let pagerMin = Math.max(1, Math.ceil(page - maxPageList/2));
  35. let pagerMax = Math.min(pagesCount, Math.floor(page + maxPageList/2));
  36. if (pagerMin === 1) {
  37. if (MAX_PAGE_LIST < pagesCount) {
  38. pagerMax = MAX_PAGE_LIST;
  39. } else {
  40. pagerMax = pagesCount;
  41. }
  42. }
  43. if (pagerMax === pagesCount) {
  44. if ((pagerMax - MAX_PAGE_LIST) < 1) {
  45. pagerMin = 1;
  46. } else {
  47. pagerMin = pagerMax - MAX_PAGE_LIST;
  48. }
  49. }
  50. pager.previousDots = null;
  51. if (pagerMin > 1) {
  52. pager.previousDots = true;
  53. }
  54. pager.nextDots = null;
  55. if (pagerMax < pagesCount) {
  56. pager.nextDots = true;
  57. }
  58. for (let i = pagerMin; i <= pagerMax; i++) {
  59. pager.pages.push(i);
  60. }
  61. return pager;
  62. }
  63. actions.index = function(req, res) {
  64. return res.render('admin/index', {
  65. plugins: pluginUtils.listPlugins(crowi.rootDir),
  66. });
  67. };
  68. // app.get('/admin/app' , admin.app.index);
  69. actions.app = {};
  70. actions.app.index = function(req, res) {
  71. var settingForm;
  72. settingForm = Config.setupCofigFormData('crowi', req.config);
  73. return res.render('admin/app', {
  74. settingForm: settingForm,
  75. });
  76. };
  77. actions.app.settingUpdate = function(req, res) {
  78. };
  79. // app.get('/admin/security' , admin.security.index);
  80. actions.security = {};
  81. actions.security.index = function(req, res) {
  82. var settingForm;
  83. settingForm = Config.setupCofigFormData('crowi', req.config);
  84. return res.render('admin/security', { settingForm });
  85. };
  86. // app.get('/admin/markdown' , admin.markdown.index);
  87. actions.markdown = {};
  88. actions.markdown.index = function(req, res) {
  89. var config = crowi.getConfig();
  90. var markdownSetting = Config.setupCofigFormData('markdown', config);
  91. return res.render('admin/markdown', {
  92. markdownSetting: markdownSetting,
  93. });
  94. };
  95. // app.post('/admin/markdown/lineBreaksSetting' , admin.markdown.lineBreaksSetting);
  96. actions.markdown.lineBreaksSetting = function(req, res) {
  97. var markdownSetting = req.form.markdownSetting;
  98. req.session.markdownSetting = markdownSetting;
  99. if (req.form.isValid) {
  100. Config.updateNamespaceByArray('markdown', markdownSetting, function(err, config) {
  101. Config.updateConfigCache('markdown', config);
  102. req.session.markdownSetting = null;
  103. req.flash('successMessage', ['Successfully updated!']);
  104. return res.redirect('/admin/markdown');
  105. });
  106. } else {
  107. req.flash('errorMessage', req.form.errors);
  108. return res.redirect('/admin/markdown');
  109. }
  110. };
  111. // app.get('/admin/customize' , admin.customize.index);
  112. actions.customize = {};
  113. actions.customize.index = function(req, res) {
  114. var settingForm;
  115. settingForm = Config.setupCofigFormData('crowi', req.config);
  116. return res.render('admin/customize', {
  117. settingForm: settingForm,
  118. });
  119. };
  120. // app.get('/admin/notification' , admin.notification.index);
  121. actions.notification = {};
  122. actions.notification.index = function(req, res) {
  123. var config = crowi.getConfig();
  124. var UpdatePost = crowi.model('UpdatePost');
  125. var slackSetting = Config.setupCofigFormData('notification', config);
  126. var hasSlackWebClientConfig = Config.hasSlackWebClientConfig(config);
  127. var hasSlackIwhUrl = Config.hasSlackIwhUrl(config);
  128. var hasSlackToken = Config.hasSlackToken(config);
  129. var slack = crowi.slack;
  130. var slackAuthUrl = '';
  131. if (!Config.hasSlackWebClientConfig(req.config)) {
  132. slackSetting['slack:clientId'] = '';
  133. slackSetting['slack:clientSecret'] = '';
  134. }
  135. else {
  136. slackAuthUrl = slack.getAuthorizeURL();
  137. }
  138. if (!Config.hasSlackIwhUrl(req.config)) {
  139. slackSetting['slack:incomingWebhookUrl'] = '';
  140. }
  141. if (req.session.slackSetting) {
  142. slackSetting = req.session.slackSetting;
  143. req.session.slackSetting = null;
  144. }
  145. UpdatePost.findAll()
  146. .then(function(settings) {
  147. return res.render('admin/notification', {
  148. settings,
  149. slackSetting,
  150. hasSlackWebClientConfig,
  151. hasSlackIwhUrl,
  152. hasSlackToken,
  153. slackAuthUrl
  154. });
  155. });
  156. };
  157. // app.post('/admin/notification/slackSetting' , admin.notification.slackauth);
  158. actions.notification.slackSetting = function(req, res) {
  159. var slackSetting = req.form.slackSetting;
  160. req.session.slackSetting = slackSetting;
  161. if (req.form.isValid) {
  162. Config.updateNamespaceByArray('notification', slackSetting, function(err, config) {
  163. Config.updateConfigCache('notification', config);
  164. req.flash('successMessage', ['Successfully Updated!']);
  165. req.session.slackSetting = null;
  166. // Re-setup
  167. crowi.setupSlack().then(function() {
  168. return res.redirect('/admin/notification');
  169. });
  170. });
  171. } else {
  172. req.flash('errorMessage', req.form.errors);
  173. return res.redirect('/admin/notification');
  174. }
  175. };
  176. // app.get('/admin/notification/slackAuth' , admin.notification.slackauth);
  177. actions.notification.slackAuth = function(req, res) {
  178. const code = req.query.code;
  179. const config = crowi.getConfig();
  180. if (!code || !Config.hasSlackConfig(req.config)) {
  181. return res.redirect('/admin/notification');
  182. }
  183. const slack = crowi.slack;
  184. slack.getOauthAccessToken(code)
  185. .then(data => {
  186. debug('oauth response', data);
  187. Config.updateNamespaceByArray('notification', {'slack:token': data.access_token}, function(err, config) {
  188. if (err) {
  189. req.flash('errorMessage', ['Failed to save access_token. Please try again.']);
  190. } else {
  191. Config.updateConfigCache('notification', config);
  192. req.flash('successMessage', ['Successfully Connected!']);
  193. }
  194. return res.redirect('/admin/notification');
  195. });
  196. }).catch(err => {
  197. debug('oauth response ERROR', err);
  198. req.flash('errorMessage', ['Failed to fetch access_token. Please do connect again.']);
  199. return res.redirect('/admin/notification');
  200. });
  201. };
  202. actions.search = {};
  203. actions.search.index = function(req, res) {
  204. var search = crowi.getSearcher();
  205. if (!search) {
  206. return res.redirect('/admin');
  207. }
  208. return res.render('admin/search', {
  209. });
  210. };
  211. // app.post('/admin/notification/slackIwhSetting' , admin.notification.slackIwhSetting);
  212. actions.notification.slackIwhSetting = function(req, res) {
  213. var slackIwhSetting = req.form.slackIwhSetting;
  214. if (req.form.isValid) {
  215. Config.updateNamespaceByArray('notification', slackIwhSetting, function(err, config) {
  216. Config.updateConfigCache('notification', config);
  217. req.flash('successMessage', ['Successfully Updated!']);
  218. // Re-setup
  219. crowi.setupSlack().then(function() {
  220. return res.redirect('/admin/notification#slack-incoming-webhooks');
  221. });
  222. });
  223. } else {
  224. req.flash('errorMessage', req.form.errors);
  225. return res.redirect('/admin/notification#slack-incoming-webhooks');
  226. }
  227. };
  228. // app.post('/admin/notification/slackSetting/disconnect' , admin.notification.disconnectFromSlack);
  229. actions.notification.disconnectFromSlack = function(req, res) {
  230. const config = crowi.getConfig();
  231. const slack = crowi.slack;
  232. Config.updateNamespaceByArray('notification', {'slack:token': ''}, function(err, config) {
  233. Config.updateConfigCache('notification', config);
  234. req.flash('successMessage', ['Successfully Disconnected!']);
  235. return res.redirect('/admin/notification');
  236. });
  237. };
  238. actions.search.buildIndex = function(req, res) {
  239. var search = crowi.getSearcher();
  240. if (!search) {
  241. return res.redirect('/admin');
  242. }
  243. return new Promise(function(resolve, reject) {
  244. search.deleteIndex()
  245. .then(function(data) {
  246. debug('Index deleted.');
  247. resolve();
  248. }).catch(function(err) {
  249. debug('Delete index Error, but if it is initialize, its ok.', err);
  250. resolve();
  251. });
  252. })
  253. .then(function() {
  254. return search.buildIndex()
  255. })
  256. .then(function(data) {
  257. if (!data.errors) {
  258. debug('Index created.');
  259. }
  260. return search.addAllPages();
  261. })
  262. .then(function(data) {
  263. if (!data.errors) {
  264. debug('Data is successfully indexed.');
  265. req.flash('successMessage', 'Data is successfully indexed.');
  266. } else {
  267. debug('Data index error.', data.errors);
  268. req.flash('errorMessage', `Data index error: ${data.errors}`);
  269. }
  270. return res.redirect('/admin/search');
  271. })
  272. .catch(function(err) {
  273. debug('Error', err);
  274. req.flash('errorMessage', `Error: ${err}`);
  275. return res.redirect('/admin/search');
  276. });
  277. };
  278. actions.user = {};
  279. actions.user.index = function(req, res) {
  280. var page = parseInt(req.query.page) || 1;
  281. User.findUsersWithPagination({page: page}, function(err, result) {
  282. const pager = createPager(result.total, result.limit, result.page, result.pages, MAX_PAGE_LIST);
  283. return res.render('admin/users', {
  284. users: result.docs,
  285. pager: pager
  286. });
  287. });
  288. };
  289. actions.user.invite = function(req, res) {
  290. var form = req.form.inviteForm;
  291. var toSendEmail = form.sendEmail || false;
  292. if (req.form.isValid) {
  293. User.createUsersByInvitation(form.emailList.split('\n'), toSendEmail, function(err, userList) {
  294. if (err) {
  295. req.flash('errorMessage', req.form.errors.join('\n'));
  296. } else {
  297. req.flash('createdUser', userList);
  298. }
  299. return res.redirect('/admin/users');
  300. });
  301. } else {
  302. req.flash('errorMessage', req.form.errors.join('\n'));
  303. return res.redirect('/admin/users');
  304. }
  305. };
  306. actions.user.makeAdmin = function(req, res) {
  307. var id = req.params.id;
  308. User.findById(id, function(err, userData) {
  309. userData.makeAdmin(function(err, userData) {
  310. if (err === null) {
  311. req.flash('successMessage', userData.name + 'さんのアカウントを管理者に設定しました。');
  312. } else {
  313. req.flash('errorMessage', '更新に失敗しました。');
  314. debug(err, userData);
  315. }
  316. return res.redirect('/admin/users');
  317. });
  318. });
  319. };
  320. actions.user.removeFromAdmin = function(req, res) {
  321. var id = req.params.id;
  322. User.findById(id, function(err, userData) {
  323. userData.removeFromAdmin(function(err, userData) {
  324. if (err === null) {
  325. req.flash('successMessage', userData.name + 'さんのアカウントを管理者から外しました。');
  326. } else {
  327. req.flash('errorMessage', '更新に失敗しました。');
  328. debug(err, userData);
  329. }
  330. return res.redirect('/admin/users');
  331. });
  332. });
  333. };
  334. actions.user.activate = function(req, res) {
  335. var id = req.params.id;
  336. User.findById(id, function(err, userData) {
  337. userData.statusActivate(function(err, userData) {
  338. if (err === null) {
  339. req.flash('successMessage', userData.name + 'さんのアカウントを承認しました');
  340. } else {
  341. req.flash('errorMessage', '更新に失敗しました。');
  342. debug(err, userData);
  343. }
  344. return res.redirect('/admin/users');
  345. });
  346. });
  347. };
  348. actions.user.suspend = function(req, res) {
  349. var id = req.params.id;
  350. User.findById(id, function(err, userData) {
  351. userData.statusSuspend(function(err, userData) {
  352. if (err === null) {
  353. req.flash('successMessage', userData.name + 'さんのアカウントを利用停止にしました');
  354. } else {
  355. req.flash('errorMessage', '更新に失敗しました。');
  356. debug(err, userData);
  357. }
  358. return res.redirect('/admin/users');
  359. });
  360. });
  361. };
  362. actions.user.remove = function(req, res) {
  363. var id = req.params.id;
  364. let username = '';
  365. return new Promise((resolve, reject) => {
  366. User.findById(id, (err, userData) => {
  367. username = userData.username;
  368. return resolve(userData);
  369. });
  370. })
  371. .then((userData) => {
  372. return new Promise((resolve, reject) => {
  373. userData.statusDelete((err, userData) => {
  374. if (err) {
  375. reject(err);
  376. }
  377. resolve(userData);
  378. });
  379. });
  380. })
  381. .then((userData) => {
  382. return Page.removePageByPath(`/user/${username}`)
  383. .then(() => userData);
  384. })
  385. .then((userData) => {
  386. req.flash('successMessage', `${username} さんのアカウントを削除しました`);
  387. return res.redirect('/admin/users');
  388. })
  389. .catch((err) => {
  390. req.flash('errorMessage', '削除に失敗しました。');
  391. return res.redirect('/admin/users');
  392. });
  393. };
  394. // これやったときの relation の挙動未確認
  395. actions.user.removeCompletely = function(req, res) {
  396. // ユーザーの物理削除
  397. var id = req.params.id;
  398. User.removeCompletelyById(id, function(err, removed) {
  399. if (err) {
  400. debug('Error while removing user.', err, id);
  401. req.flash('errorMessage', '完全な削除に失敗しました。');
  402. } else {
  403. req.flash('successMessage', '削除しました');
  404. }
  405. return res.redirect('/admin/users');
  406. });
  407. };
  408. // app.post('/_api/admin/users.resetPassword' , admin.api.usersResetPassword);
  409. actions.user.resetPassword = function(req, res) {
  410. const id = req.body.user_id;
  411. const User = crowi.model('User');
  412. User.resetPasswordByRandomString(id)
  413. .then(function(data) {
  414. data.user = User.filterToPublicFields(data.user);
  415. return res.json(ApiResponse.success(data));
  416. }).catch(function(err) {
  417. debug('Error on reseting password', err);
  418. return res.json(ApiResponse.error('Error'));
  419. });
  420. }
  421. actions.userGroup = {};
  422. actions.userGroup.index = function (req, res) {
  423. var page = parseInt(req.query.page) || 1;
  424. UserGroup.findUserGroupsWithPagination({ page: page }, function (err, result) {
  425. const pager = createPager(result.total, result.limit, result.page, result.pages, MAX_PAGE_LIST);
  426. var userGroups = result.docs
  427. var groupRelations = new Map();
  428. UserGroupRelation.findAllRelationForUserGroups(userGroups)
  429. .then( function(relations) {
  430. userGroups.map((group) => {
  431. groupRelations.set(group, relations.filter( function(target) {
  432. return target.relatedGroup.toString() == group._id.toString();
  433. }));
  434. });
  435. return res.render('admin/user-groups', {
  436. userGroups: userGroups,
  437. userGroupRelations: groupRelations,
  438. pager: pager
  439. });
  440. })
  441. .catch( function(err) {
  442. debug('Error on find all relations', err);
  443. return res.json(ApiResponse.error('Error'));
  444. });
  445. });
  446. };
  447. // グループ詳細
  448. actions.userGroup.detail = function (req, res) {
  449. var name = req.params.name;
  450. var renderVar = {
  451. userGroup: null,
  452. userGroupRelations: [],
  453. pageGroupRelations: [],
  454. notRelatedusers: []
  455. }
  456. UserGroup.findUserGroupByName(name)
  457. .then(function (userGroup) {
  458. if (userGroup == null) {
  459. req.flash('errorMessage', 'ユーザグループの検索に失敗しました');
  460. debug('Error on get userGroupDetail', err);
  461. return res.redirect('/admin/user-groups');
  462. } else {
  463. renderVar.userGroup = userGroup;
  464. UserGroupRelation.findAllRelationForUserGroup(userGroup)
  465. .then(function (relations) {
  466. renderVar.userGroupRelations = relations;
  467. PageGroupRelation.findAllRelationForUserGroup(userGroup)
  468. .then(function (pageRelations) {
  469. renderVar.pageGroupRelations = pageRelations;
  470. User.findAllUsers(null)
  471. .then(function (users) {
  472. debug('users', users);
  473. users = users.filter( function(user) {
  474. var relation = relations.find( function(relation) {
  475. return relation.relatedUser._id.toString() == user._id.toString();
  476. });
  477. return relation == null;
  478. });
  479. debug('users', users);
  480. debug('user-group-detail succeed', relations);
  481. renderVar.notRelatedusers = users;
  482. return res.render('admin/user-group-detail', renderVar);
  483. })
  484. .catch(function(err) {
  485. req.flash('errorMessage', 'ユーザの検索に失敗しました');
  486. debug('Error on find all unrelated users', err);
  487. return res.redirect('/admin/user-groups');
  488. });
  489. })
  490. .catch(function (err) {
  491. req.flash('errorMessage', 'グループ関連ページの検索に失敗しました');
  492. debug('Error on find all relations', err);
  493. return res.redirect('/admin/user-groups');
  494. });
  495. }).catch(function (err) {
  496. req.flash('errorMessage', 'グループ関連ユーザの検索に失敗しました');
  497. debug('Error on find all relations', err);
  498. return res.redirect('/admin/user-groups');
  499. });
  500. }
  501. })
  502. .catch(function(err) {
  503. req.flash('errorMessage', 'ユーザグループの検索に失敗しました');
  504. debug('Error on get userGroupDetail', err);
  505. return res.redirect('/admin/user-groups');
  506. });
  507. }
  508. //グループの生成
  509. actions.userGroup.create = function (req, res) {
  510. var form = req.form.createGroupForm;
  511. if (req.form.isValid) {
  512. UserGroup.isRegisterableName(form.userGroupName, function (registerable){
  513. if (registerable) {
  514. UserGroup.createGroupByName(form.userGroupName, function (err, newUserGroup) {
  515. if (err) {
  516. req.flash('errorMessage', req.form.errors.join('\n'));
  517. } else {
  518. req.flash('successMessage', newUserGroup.name)
  519. req.flash('createdUserGroup', newUserGroup);
  520. }
  521. return res.redirect('/admin/user-groups');
  522. });
  523. }
  524. else {
  525. req.flash('errorMessage', '同じグループ名が既に存在します。');
  526. debug('userGroupName', form.userGroupName);
  527. return res.redirect('/admin/user-groups');
  528. }
  529. });
  530. } else {
  531. req.flash('errorMessage', req.form.errors.join('\n'));
  532. return res.redirect('/admin/user-groups');
  533. }
  534. };
  535. //
  536. actions.userGroup.update = function (req, res) {
  537. var userGroupId = req.params.userGroupId;
  538. var name = req.body.name;
  539. UserGroup.findById(userGroupId, function (err, userGroupData) {
  540. if (!userGroupData) {
  541. req.flash('errorMessage', 'グループの検索に失敗しました。');
  542. return res.redirect('/admin/user-groups');
  543. }
  544. // 名前存在チェック
  545. UserGroup.isRegisterableName(name, function (isRegisterableName) {
  546. // 既に存在するグループ名に更新しようとした場合はエラー
  547. if (!isRegisterableName) {
  548. req.flash('errorMessage', 'グループ名が既に存在します。');
  549. return res.redirect('/admin/user-group-detail/' + userGroupData.name);
  550. }
  551. userGroupData.updateName(name, function (err, updatedName) {
  552. if (err) {
  553. req.flash('errorMessage', 'グループ名の更新に失敗しました。');
  554. return res.redirect('/admin/user-group-detail/' + userGroupData.name);
  555. }
  556. else {
  557. req.flash('successMessage', 'グループ名を更新しました。');
  558. return res.redirect('/admin/user-group-detail/' + name);
  559. }
  560. });
  561. });
  562. });
  563. };
  564. actions.userGroup.uploadGroupPicture = function (req, res) {
  565. var fileUploader = require('../util/fileUploader')(crowi, app);
  566. //var storagePlugin = new pluginService('storage');
  567. //var storage = require('../service/storage').StorageService(config);
  568. var userGroupId = req.params.userGroupId;
  569. var tmpFile = req.file || null;
  570. if (!tmpFile) {
  571. return res.json({
  572. 'status': false,
  573. 'message': 'File type error.'
  574. });
  575. }
  576. UserGroup.findById(userGroupId, function (err, userGroupData) {
  577. if (!userGroupData) {
  578. return res.json({
  579. 'status': false,
  580. 'message': 'UserGroup error.'
  581. });
  582. }
  583. var tmpPath = tmpFile.path;
  584. var filePath = UserGroup.createUserGroupPictureFilePath(userGroupData, tmpFile.filename + tmpFile.originalname);
  585. var acceptableFileType = /image\/.+/;
  586. if (!tmpFile.mimetype.match(acceptableFileType)) {
  587. return res.json({
  588. 'status': false,
  589. 'message': 'File type error. Only image files is allowed to set as user picture.',
  590. });
  591. }
  592. var tmpFileStream = fs.createReadStream(tmpPath, { flags: 'r', encoding: null, fd: null, mode: '0666', autoClose: true });
  593. fileUploader.uploadFile(filePath, tmpFile.mimetype, tmpFileStream, {})
  594. .then(function (data) {
  595. var imageUrl = fileUploader.generateUrl(filePath);
  596. userGroupData.updateImage(imageUrl, function (err, data) {
  597. fs.unlink(tmpPath, function (err) {
  598. if (err) {
  599. debug('Error while deleting tmp file.', err);
  600. }
  601. return res.json({
  602. 'status': true,
  603. 'url': imageUrl,
  604. 'message': '',
  605. });
  606. });
  607. });
  608. }).catch(function (err) {
  609. debug('Uploading error', err);
  610. return res.json({
  611. 'status': false,
  612. 'message': 'Error while uploading to ',
  613. });
  614. });
  615. });
  616. };
  617. actions.userGroup.deletePicture = function (req, res) {
  618. var userGroupId = req.params.userGroupId;
  619. UserGroup.findById(userGroupId, function (err, userGroupData) {
  620. if (!userGroupData) {
  621. req.flash('errorMessage', 'Error while deleting group picture');
  622. }
  623. userGroupData.deleteImage(function (err, data) {
  624. req.flash('successMessage', 'Deleted group picture');
  625. });
  626. return res.redirect('/admin/user-group-detail/' + userGroupData.name);
  627. });
  628. };
  629. // app.post('/_api/admin/user-group/delete' , admin.userGroup.removeCompletely);
  630. actions.userGroup.removeCompletely = function (req, res) {
  631. const id = req.body.user_group_id;
  632. UserGroup.removeCompletelyById(id, function (err, removed) {
  633. if (err) {
  634. debug('Error while removing userGroup.', err, id);
  635. req.flash('errorMessage', '完全な削除に失敗しました。');
  636. } else {
  637. req.flash('successMessage', '削除しました');
  638. }
  639. return res.redirect('/admin/user-groups');
  640. });
  641. }
  642. actions.userGroupRelation = {};
  643. actions.userGroupRelation.index = function(req, res) {
  644. }
  645. actions.userGroupRelation.create = function(req, res) {
  646. const User = crowi.model('User');
  647. const UserGroup = crowi.model('UserGroup');
  648. const UserGroupRelation = crowi.model('UserGroupRelation');
  649. // ユーザを名前で検索
  650. User.findUserByUsername(req.body.user_name)
  651. .then((user) => {
  652. // ユーザグループをIDで検索
  653. UserGroup.findById(req.body.user_group_id, function(err, userGroup) {
  654. if (err) {
  655. debug('Error on create user-group relation', err);
  656. req.flash('errorMessage', 'グループの取得に失敗しました');
  657. return res.redirect('/admin/user-group-detail/' + userGroup.name);
  658. }
  659. // Relation を作成
  660. UserGroupRelation.createRelation(userGroup, user, function (err, data) {
  661. if (err) {
  662. debug('Error on create user-group relation', err);
  663. req.flash('errorMessage', 'ユーザの追加に失敗しました');
  664. return res.redirect('/admin/user-group-detail/' + userGroup.name);
  665. }
  666. return res.redirect('/admin/user-group-detail/' + userGroup.name);
  667. });
  668. });
  669. }).catch((err) => {
  670. debug('Error on create user-group relation', err);
  671. req.flash('errorMessage', 'ユーザの取得に失敗しました');
  672. return res.redirect('/admin/user-group-detail/' + userGroup.name);
  673. });
  674. }
  675. actions.userGroupRelation.remove = function (req, res) {
  676. const UserGroupRelation = crowi.model('UserGroupRelation');
  677. var name = req.params.name;
  678. var relationId = req.params.relationId;
  679. debug(name, relationId);
  680. UserGroupRelation.removeById(relationId, function(err) {
  681. if (err) {
  682. debug('Error on remove user-group-relation', err);
  683. req.flash('errorMessage', 'グループのユーザ削除に失敗しました。');
  684. }
  685. return res.redirect('/admin/user-group-detail/' + name);
  686. });
  687. }
  688. actions.api = {};
  689. actions.api.appSetting = function(req, res) {
  690. var form = req.form.settingForm;
  691. if (req.form.isValid) {
  692. debug('form content', form);
  693. // mail setting ならここで validation
  694. if (form['mail:from']) {
  695. validateMailSetting(req, form, function(err, data) {
  696. debug('Error validate mail setting: ', err, data);
  697. if (err) {
  698. req.form.errors.push('SMTPを利用したテストメール送信に失敗しました。設定をみなおしてください。');
  699. return res.json({status: false, message: req.form.errors.join('\n')});
  700. }
  701. return saveSetting(req, res, form);
  702. });
  703. } else {
  704. return saveSetting(req, res, form);
  705. }
  706. } else {
  707. return res.json({status: false, message: req.form.errors.join('\n')});
  708. }
  709. };
  710. actions.api.securitySetting = function(req, res) {
  711. var form = req.form.settingForm;
  712. if (req.form.isValid) {
  713. debug('form content', form);
  714. return saveSetting(req, res, form);
  715. } else {
  716. return res.json({status: false, message: req.form.errors.join('\n')});
  717. }
  718. };
  719. actions.api.customizeSetting = function(req, res) {
  720. var form = req.form.settingForm;
  721. if (req.form.isValid) {
  722. debug('form content', form);
  723. return saveSetting(req, res, form);
  724. } else {
  725. return res.json({status: false, message: req.form.errors.join('\n')});
  726. }
  727. }
  728. // app.post('/_api/admin/notifications.add' , admin.api.notificationAdd);
  729. actions.api.notificationAdd = function(req, res) {
  730. var UpdatePost = crowi.model('UpdatePost');
  731. var pathPattern = req.body.pathPattern;
  732. var channel = req.body.channel;
  733. debug('notification.add', pathPattern, channel);
  734. UpdatePost.create(pathPattern, channel, req.user)
  735. .then(function(doc) {
  736. debug('Successfully save updatePost', doc);
  737. // fixme: うーん
  738. doc.creator = doc.creator._id.toString();
  739. return res.json(ApiResponse.success({updatePost: doc}));
  740. }).catch(function(err) {
  741. debug('Failed to save updatePost', err);
  742. return res.json(ApiResponse.error());
  743. });
  744. };
  745. // app.post('/_api/admin/notifications.remove' , admin.api.notificationRemove);
  746. actions.api.notificationRemove = function(req, res) {
  747. var UpdatePost = crowi.model('UpdatePost');
  748. var id = req.body.id;
  749. UpdatePost.remove(id)
  750. .then(function() {
  751. debug('Successfully remove updatePost');
  752. return res.json(ApiResponse.success({}));
  753. }).catch(function(err) {
  754. debug('Failed to remove updatePost', err);
  755. return res.json(ApiResponse.error());
  756. });
  757. };
  758. // app.get('/_api/admin/users.search' , admin.api.userSearch);
  759. actions.api.usersSearch = function(req, res) {
  760. const User = crowi.model('User');
  761. const email =req.query.email;
  762. User.findUsersByPartOfEmail(email, {})
  763. .then(users => {
  764. const result = {
  765. data: users
  766. };
  767. return res.json(ApiResponse.success(result));
  768. }).catch(err => {
  769. return res.json(ApiResponse.error());
  770. });
  771. };
  772. function saveSetting(req, res, form)
  773. {
  774. Config.updateNamespaceByArray('crowi', form, function(err, config) {
  775. Config.updateConfigCache('crowi', config);
  776. return res.json({status: true});
  777. });
  778. }
  779. function validateMailSetting(req, form, callback)
  780. {
  781. var mailer = crowi.mailer;
  782. var option = {
  783. host: form['mail:smtpHost'],
  784. port: form['mail:smtpPort'],
  785. };
  786. if (form['mail:smtpUser'] && form['mail:smtpPassword']) {
  787. option.auth = {
  788. user: form['mail:smtpUser'],
  789. pass: form['mail:smtpPassword'],
  790. };
  791. }
  792. if (option.port === 465) {
  793. option.secure = true;
  794. }
  795. var smtpClient = mailer.createSMTPClient(option);
  796. debug('mailer setup for validate SMTP setting', smtpClient);
  797. smtpClient.sendMail({
  798. to: req.user.email,
  799. subject: 'Wiki管理設定のアップデートによるメール通知',
  800. text: 'このメールは、WikiのSMTP設定のアップデートにより送信されています。'
  801. }, callback);
  802. }
  803. return actions;
  804. };