openproject/app/controllers/wiki_controller.rb

# frozen_string_literal: true

#-- copyright
# OpenProject is an open source project management software.
# Copyright (C) the OpenProject GmbH
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License version 3.
#
# OpenProject is a fork of ChiliProject, which is a fork of Redmine. The copyright follows:
# Copyright (C) 2006-2013 Jean-Philippe Lang
# Copyright (C) 2010-2013 the ChiliProject Team
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
#
# See COPYRIGHT and LICENSE files for more details.
#++

require "htmldiff"

# The WikiController follows the Rails REST controller pattern but with
# a few differences
#
# * index - shows a list of WikiPages grouped by page or date
# * new - not used
# * create - not used
# * show - will also show the form for creating a new wiki page
# * edit - used to edit an existing or new page
# * update - used to save a wiki page update to the database, including new pages
# * destroy - normal
#
# Other member and collection methods are also used
class WikiController < ApplicationController
  default_search_scope :wiki_pages
  before_action :find_wiki, :authorize
  before_action :find_existing_page, only: %i[edit_parent_page
                                              update_parent_page
                                              rename
                                              protect
                                              history
                                              diff
                                              annotate
                                              destroy]
  before_action :find_wiki_page, only: %i[show]
  before_action :handle_new_wiki_page, only: %i[show]
  before_action :build_wiki_page, only: %i[new]

  include AttachableServiceCall
  include AttachmentsHelper
  include PaginationHelper
  include Redmine::MenuManager::WikiMenuHelper

  attr_reader :page, :related_page

  current_menu_item :index do |controller|
    controller.current_menu_item_sym :related_page
  end

  current_menu_item :new_child do |controller|
    controller.current_menu_item_sym :parent_page
  end

  current_menu_item do |controller|
    controller.current_menu_item_sym :page
  end

  # List of pages, sorted alphabetically and by parent (hierarchy)
  def index
    slug = wiki_page_title.nil? ? "wiki" : WikiPage.slug(wiki_page_title)
    @related_page = WikiPage.find_by(wiki_id: @wiki.id, slug:)

    @pages = @wiki.pages.order(Arel.sql("title")).includes(wiki: :project)
    @pages_by_parent_id = @pages.group_by(&:parent_id)
  end

  # display a page (in editing mode if it doesn't exist)
  def show # rubocop:disable Metrics/AbcSize
    # Set the related page ID to make it the parent of new links
    flash[:_related_wiki_page_id] = @page.id

    version = params[:version] if User.current.allowed_in_project?(:view_wiki_edits, @project)

    @page = ::WikiPages::AtVersion.new(@page, version)

    if params[:format] == "markdown" && User.current.allowed_in_project?(:view_wiki_pages, @project)
      send_data(@page.text, type: "text/plain", filename: "#{@page.title}.md")
      return
    end

    @editable = editable?
    @show_create = show_create?
  end

  def new; end

  def new_child
    find_existing_page
    return if performed?

    old_page = @page

    build_wiki_page

    @page.parent = old_page
    render action: "new"
  end

  def menu
    @page = @wiki.pages.find_by(id: params[:id])
    render layout: nil
  end

  # edit an existing page or a new one
  def edit
    page = @wiki.find_or_new_page(wiki_page_title)
    return render_403 unless editable?(page)

    if page.new_record? && flash[:_related_wiki_page_id]
      page.parent_id = flash[:_related_wiki_page_id]
    end

    version = params[:version] if User.current.allowed_in_project?(:view_wiki_edits, @project)

    @page = ::WikiPages::AtVersion.new(page, version)
  end

  def create
    call = attachable_create_call ::WikiPages::CreateService,
                                  args: permitted_params.wiki_page.to_h.merge(wiki: @wiki)

    @page = call.result

    if call.success?
      call_hook(:controller_wiki_edit_after_save, params:, page: @page)
      flash[:notice] = I18n.t(:notice_successful_create)
      redirect_to_show
    else
      render action: :new, status: :unprocessable_entity
    end
  end

  # Creates a new page or updates an existing one
  def update # rubocop:disable Metrics/AbcSize
    @old_title = params[:id]
    @page = @wiki.find_or_new_page(@old_title)
    if @page.nil?
      render_404
      return
    end

    return if locked?

    call = attachable_update_call ::WikiPages::UpdateService,
                                  model: @page,
                                  args: permitted_params.wiki_page.to_h

    @page = call.result

    if call.success?
      call_hook(:controller_wiki_edit_after_save, params:, page: @page)
      flash[:notice] = I18n.t(:notice_successful_update)
      redirect_to_show
    else
      render action: :edit, status: :unprocessable_entity
    end
  rescue ActiveRecord::StaleObjectError
    # Optimistic locking exception
    flash.now[:error] = I18n.t(:notice_locking_conflict)
    render action: :edit, status: :unprocessable_entity
  end

  # rename a page
  def rename # rubocop:disable Metrics/AbcSize
    return render_403 unless editable?

    @page.redirect_existing_links = true
    # used to display the *original* title if some AR validation errors occur
    @original_title = @page.title

    if request.patch?
      attributes = permitted_params.wiki_page_rename

      if (item = conflicting_menu_item(attributes["title"]))
        flash[:error] = I18n.t(
          :error_wiki_root_menu_item_conflict,
          old_name: @page.title,
          new_name: attributes["title"],
          existing_caption: item.caption,
          existing_identifier: item.name
        )

        redirect_to_show
      elsif @page.update(attributes)
        flash[:notice] = t(:notice_successful_update)
        redirect_to_show
      end
    end
  end

  def conflicting_menu_item(title)
    page.menu_item &&
      page.menu_item.parent_id.nil? &&
      project_menu_items.find { |item| item.name.to_s == WikiPage.slug(title) }
  end

  def project_menu_items
    Redmine::MenuManager.items("project_menu").children + wiki_root_menu_items
  end

  def wiki_root_menu_items
    MenuItems::WikiMenuItem
      .main_items(@wiki.id)
      .map { OpenStruct.new name: it.name, caption: it.title, item: it }
  end

  def edit_parent_page
    return render_403 unless editable?

    @parent_pages = @wiki.pages.includes(:parent) - @page.self_and_descendants
  end

  def update_parent_page
    return render_403 unless editable?

    @page.parent_id = params[:wiki_page][:parent_id]
    if @page.save
      flash[:notice] = I18n.t(:notice_successful_update)
      redirect_to_show
    else
      @parent_pages = @wiki.pages.includes(:parent) - @page.self_and_descendants
      render "edit_parent_page"
    end
  end

  def protect
    @page.update_attribute :protected, params[:protected]
    redirect_to_show
  end

  # show page history
  def history
    # don't load text
    @versions = @page.journals
                     .select(:id, :user_id, :notes, :created_at, :version)
                     .order(version: :desc)
                     .page(page_param)
                     .per_page(per_page_param)

    render layout: !request.xhr?
  end

  def diff
    if (@diff = @page.diff(params[:version_to], params[:version_from]))
      @html_diff = OpenProject::HtmlDiff.from_markdown(
        @diff.content_from.data.text,
        @diff.content_to.data.text
      )
    else
      render_404
    end
  end

  def annotate
    @annotate = @page.annotate(params[:version])
    render_404 unless @annotate
  end

  # Removes a wiki page and its history
  # Children can be either set as root pages, removed or reassigned to another parent page
  def destroy # rubocop:disable Metrics/AbcSize, Metrics/PerceivedComplexity
    unless editable?
      flash.now[:error] = I18n.t(:error_unable_delete_wiki)
      return render_403
    end

    @descendants_count = @page.descendants.size
    if @descendants_count > 0
      case params[:todo]
      when "nullify"
        # Nothing to do
      when "destroy"
        # Removes all its descendants
        @page.descendants.each(&:destroy)
      when "reassign"
        # Reassign children to another parent page
        reassign_to = @wiki.pages.find_by(id: params[:reassign_to_id].presence)
        return unless reassign_to

        @page.children.each do |child|
          child.update_attribute(:parent, reassign_to)
        end
      else
        @reassignable_to = @wiki.pages - @page.self_and_descendants
        return
      end
    end
    @page.destroy!

    flash[:notice] = I18n.t(:notice_successful_delete)
    if page = @wiki.find_page(@wiki.start_page) || @wiki.pages.first
      redirect_to action: "index", project_id: @project, id: page, status: :see_other
    else
      redirect_to project_path(@project), status: :see_other
    end
  end

  # Export wiki to a single html file
  def export
    if User.current.allowed_in_project?(:view_wiki_pages, @project)
      @pages = @wiki.pages.order(Arel.sql("title"))
      export = render_to_string action: "export_multiple", layout: false
      send_data(export, type: "text/html", filename: "wiki.html")
    else
      redirect_to action: "show", project_id: @project, id: nil
    end
  end

  def current_menu_item_sym(page)
    page = page_for_menu_item(page)

    menu_item = page.try(:menu_item)
    return menu_item.menu_identifier if menu_item.present?
    return unless page

    default_item = default_menu_item(page)
    return unless default_item

    :"no-menu-item-#{default_item.menu_identifier}"
  end

  def show_create?
    @editable && @page && User.current.allowed_in_project?(:edit_wiki_pages, @project)
  end

  private

  def locked?
    return false if editable?

    flash[:error] = I18n.t(:error_unable_update_wiki)
    render_403
    true
  end

  def page_for_menu_item(page)
    if page == :parent_page
      page = send(:page)
      page = page.parent if page&.parent
    else
      page = send(page)
    end
    page
  end

  def wiki_page_title
    params[:title] || (action_name == "new_child" ? "" : params[:id].to_s.capitalize.tr("-", " "))
  end

  def find_wiki
    @project = Project.visible.find(params[:project_id])
    @wiki = @project.wiki
    render_404 unless @wiki
  end

  # Finds or created the wiki page associated
  # to the wiki
  def find_wiki_page
    @page = @wiki.find_or_new_page(wiki_page_title)
  end

  # Handles new pages for non-editable permissions
  def handle_new_wiki_page
    return unless @page.new_record?

    if User.current.allowed_in_project?(:edit_wiki_pages, @project) && editable?
      edit
      render action: :new
    elsif params[:id] == "wiki"
      flash[:info] = I18n.t("wiki.page_not_editable_index")
      redirect_to action: :index
    else
      render_404
    end
  end

  # Finds the requested page and returns a 404 error if it doesn't exist
  def find_existing_page
    @page = @wiki.find_page(wiki_page_title.presence || params[:id])
    render_404 if @page.nil?
  end

  def build_wiki_page
    # Using the empty contract here as we use the method to instantiate the model, not to save it (new and new_child action).
    # Errors are expected here as the user has not yet entered any data.
    @page = WikiPages::SetAttributesService
              .new(model: WikiPage.new, user: current_user, contract_class: EmptyContract)
              .call(wiki: @wiki, title: wiki_page_title.presence, parent_id: flash[:_related_wiki_page_id])
              .result
  end

  # Returns true if the current user is allowed to edit the page, otherwise false
  def editable?(page = @page)
    page.editable_by?(User.current)
  end

  def redirect_to_show
    redirect_to action: :show, project_id: @project, id: @page
  end
end