vegantech/sims

# Filters added to this controller apply to all controllers in the application.
# Likewise, all the methods added will be available for all controllers.

class ApplicationController < ActionController::Base
  helper :all # include all helpers, all the time
  helper_method :multiple_selected_students?, :selected_student_ids,
    :current_student_id, :current_student, :current_district, :current_school, :current_user,
    :index_url_with_page, :readonly?

  #protect_from_forgery  TODO enable this

  before_filter :authenticate_user!,:check_domain, :authorize
  private

  def student_id_cache_key
    "student_ids_#{current_user.id}_#{session[:session_id][0..40]}"
  end

  def selected_student_ids
    if session[:selected_students] == "memcache"
      @memcache_student_ids ||= Rails.cache.read(student_id_cache_key)
    else
      session[:selected_students]
    end
  end

  def selected_student_ids=(student_ids=[])
    if student_ids.blank? || student_ids.length <50
      session[:selected_students] = student_ids
    else
      session[:selected_students] = "memcache"
      Rails.cache.write(student_id_cache_key, student_ids)
    end
  end

  def multiple_selected_students?
    Array(selected_student_ids).size > 1
  end

  def current_student_id
    session[:selected_student]
  end

  def current_student_id=(sid)
    cookies[:selected_student]={:value =>sid, :domain => session_domain}
    session[:selected_student]=sid
  end


  def current_student
    @student ||= Student.find_by_id(current_student_id)
  end

  def current_school_id
    session[:school_id]
  end

  def current_school
    @school ||= School.find_by_id(current_school_id)
  end

  def current_district
    @current_district ||=  current_user.try(:district) || District.find_by_subdomain(params[:district_abbrev].presence || current_subdomain.presence)
  end

  def authorize
    return true if devise_controller?
    controller = self.class.controller_path  # may need to change this
    unless current_user.authorized_for?(controller)
      logger.info "Authorization Failure: controller is #{controller}"
      flash[:notice] =  "You are not authorized to access that page"
      redirect_to not_authorized_url
      return false
    end
    true
  end

  def require_current_school
    if current_school.blank?
      if request.xhr?
        render :js => "$('#flash_notice').prepend('<br />Please reselect the school.');"
      else
        flash[:notice] = "Please reselect the school"
        redirect_to schools_url
      end
      return false
    end
    return true
  end

  rescue_from(ActiveRecord::RecordNotFound) do
    respond_to do |format|
      format.html do
        flash[:notice]='Record not found'
        begin
          redirect_to :back
        rescue ActionController::RedirectBackError
          redirect_to root_url
        end
      end
      format.js {render :nothing => true}
    end
  end


  def check_student
    #TODO generalize this
    student=Student.find_by_id(params[:student_id]) || Student.new
    if student.belongs_to_user?(current_user)
      @student=student
    else
      flash[:notice] = "The student is not accessible for this user"
      respond_to do |format|
        format.js { render :template => "/main/inaccessible_student.js"}
        format.html  {redirect_to :back }
      end
     return false
    end

  end

  def edit_obj_link(u)
    self.class.helpers.link_to u, self.send("edit_#{patherize_controller.singularize}_path",u)
  end

  def capture_paged_controller_params
    session[:paged_controller]={:path => params[:controller], :opts =>{ :last_name => params[:last_name],:page => params[:page], :title => params[:title] }}
  end

  def index_url_with_page
    if session[:paged_controller] && session[:paged_controller][:path] == params[:controller]
      self.send("#{patherize_controller}_path", session[:paged_controller][:opts])
    else
      self.send("#{patherize_controller}_path")
    end
  end

  def patherize_controller
    params[:controller].gsub(/\//,"_")
  end

  def wp_out_of_bounds?(wp_collection)
    wp_collection.out_of_bounds? && wp_collection.total_entries > 0
  end

  def  handle_unverified_request
    raise ActionController::InvalidAuthenticityToken #for now
    super
  end

  def current_subdomain
    request.subdomain.gsub(/^www(.)?/,'')
  end

  def session_domain
    Sims::Application.config.session_options[:domain]
  end

  def readonly?
    false
  end

  def check_domain
    return true if devise_controller?
    if current_district && subdomain_mismatch? && District.exists?(:abbrev => current_subdomain)
      sign_out
      redirect_to root_url
      return false
    end
  end

  def setup_session_from_user_and_student(user,student)
    session[:school_id] = (student.schools & user.schools).first.id
    self.current_student_id = student.id
    self.selected_student_ids = [student.id]
  end

  def subdomain_mismatch?
    #case insensitive strcmp so 0 is true
    !current_subdomain.casecmp(current_district.abbrev).zero?
  end

end