Implement role authorization

app/views/admin/conference/_roles.html.haml

@@ -0,0 +1,29 @@
+.roles{ id: 'myroles' }
+  - unless @role.blank?
+    %p.text-muted
+      = @role.first.description
+
+  %hr
+  .row
+    .col-md-6
+      = semantic_form_for(:user, url: add_user_admin_conference_path(@conference.short_title, role: @selected), remote: true) do |f|
+        %h4
+          = f.input :email, label: "Add role '#{@selected}' to user: ", placeholder: "User's email"
+        = f.action :submit, as: :button, label: "Add User", button_html: {value: 'Add', class: 'btn btn-primary'}
+  .row
+    .col-md-12
+      %h3 Users with role #{@selected}
+      %table.table.table-striped.table-bordered.table-hover
+        %thead
+          %th ID
+          %th Name
+          %th Email
+        %tbody
+          - @role_users[@selection].each do |user|
+            %tr
+              %td
+                = link_to remove_user_admin_conference_path(@conference.short_title, user: user, role: @selected), method: :delete, remote: true, title: 'Remove user' do
+                  %i{class: 'fa fa-times'}
+                = user.id
+                %td= user.name
+                %td= user.email

app/views/admin/conference/_todo_list.html.haml

@@ -8,25 +8,49 @@
         = conference_progress['process'] + '%'
   %li{'class'=>class_for_todo(conference_progress['registration'])}
     %span{'class'=>icon_for_todo(conference_progress['registration'])}
-    = link_to 'Set up registration period', edit_admin_conference_path(conference_progress['short_title'], :anchor => 'conference-end-datepicker')
+    - if can? :update, @conference.registrations.build
+      = link_to 'Set up registration period', edit_admin_conference_path(conference_progress['short_title'], :anchor => 'conference-end-datepicker')
+    - else
+      Set up registration period
   %li{'class'=>class_for_todo(conference_progress['cfp'])}
     %span{'class'=>icon_for_todo(conference_progress['cfp'])}
-    = link_to 'Set up call for papers', admin_conference_callforpapers_path(conference_progress['short_title'])
+    - if can? :update, CallForPapers.new(conference_id: @conference.id)
+      = link_to 'Set up call for papers', admin_conference_callforpapers_path(conference_progress['short_title'])
+    - else
+      Set up call for papers
   %li{'class'=>class_for_todo(conference_progress['venue'])}
     %span{'class'=>icon_for_todo(conference_progress['venue'])}
-    = link_to 'Add venue', admin_conference_venue_info_path(conference_progress['short_title'])
+    - if can? :update, @conference.venue
+      = link_to 'Add venue', admin_conference_venue_info_path(conference_progress['short_title'])
+    - else
+      Add venue
   %li{'class'=>class_for_todo(conference_progress['rooms'])}
     %span{'class'=>icon_for_todo(conference_progress['rooms'])}
-    = link_to 'Add rooms', admin_conference_rooms_path(conference_progress['short_title'])
+    - if can? :update, @conference.rooms.build
+      = link_to 'Add rooms', admin_conference_rooms_path(conference_progress['short_title'])
+    - else
+      Add rooms
   %li{'class'=>class_for_todo(conference_progress['tracks'])}
     %span{'class'=>icon_for_todo(conference_progress['tracks'])}
-    = link_to 'Add tracks', admin_conference_tracks_path(conference_progress['short_title'])
+    - if can? :update, @conference.tracks.build
+      = link_to 'Add tracks', admin_conference_tracks_path(conference_progress['short_title'])
+    - else
+      Add tracks
   %li{'class'=>class_for_todo(conference_progress['event_types'])}
     %span{'class'=>icon_for_todo(conference_progress['event_types'])}
-    = link_to 'Add event types', admin_conference_eventtypes_path(conference_progress['short_title'])
+    - if can? :update, @conference.event_types.build
+      = link_to 'Add event types', admin_conference_event_types_path(conference_progress['short_title'])
+    - else
+      Add event types
   %li{'class'=>class_for_todo(conference_progress['difficulty_levels'])}
     %span{'class'=>icon_for_todo(conference_progress['difficulty_levels'])}
-    = link_to 'Add difficulty levels', admin_conference_difficulty_levels_path(conference_progress['short_title'])
+    - if can? :update, @conference.difficulty_levels.build
+      = link_to 'Add difficulty levels', admin_conference_difficulty_levels_path(conference_progress['short_title'])
+    - else
+      Add difficulty levels
   %li{class: class_for_todo(conference_progress['make_conference_public'])}
     %span{'class'=>icon_for_todo(conference_progress['make_conference_public'])}
-    = link_to 'Make Splash Page Public for Visitors', edit_admin_conference_path(conference_progress['short_title'])
+    - if can? :update, @conference
+      = link_to 'Make Splash Page Public for Visitors', edit_admin_conference_path(conference_progress['short_title'])
+    - else
+      Make Splash Page Public for Visitors

app/views/admin/conference/roles.html.haml

@@ -0,0 +1,22 @@
+.row
+  .col-md-6
+    = semantic_form_for(:user, url: roles_admin_conference_path(@conference.short_title), remote: true) do |f|
+      %h4
+        = f.input :roles, collection: @roles, label: 'Show users for role: '
+
+= render partial: 'roles'
+
+:javascript
+
+  $("#user_roles_input").change(function () {
+
+    var url = document.forms[0].action;
+    var selected_role = $(this).find('option:selected').attr('value');
+
+    $.ajax({
+      url: url,
+      type: "POST",
+      data: {user: { roles: selected_role } },
+      dataType: "script"
+    });
+  });

app/views/admin/conference/roles.js.erb

@@ -0,0 +1 @@
+$('#myroles').html("<%= escape_javascript(render partial: 'roles').html_safe %>");