feat(users): Adds ability to view all users and admins (#216)

* feat(users): Adds ability to view all users and admins
refactor(admins): Moves hard-coded strings to en.yml

* style(users): Removes whitespace for style

Co-authored-by: Peter Kos <[email protected]>

Author: cbaudouinjr

app/assets/javascripts/manage/lib/setupDataTables.js

@@ -17,6 +17,23 @@ var setupDataTables = function () {
   });
 
   $('.datatable.users').DataTable({
+    order: [5, 'desc'],
+    columns: [
+      { orderable: true, data: 'id', visible: false },
+      { orderable: true, data: 'email' },
+      { orderable: true, data: 'role' },
+      { orderable: false, data: 'questionnaire'},
+      { orderable: true, data: 'active' },
+      { orderable: true, data: 'created_at' },
+      { orderable: true, data: 'current_sign_in_at', visible: false },
+      { orderable: true, data: 'last_sign_in_at', visible: false },
+      { orderable: true, data: 'current_sign_in_ip', visible: false },
+      { orderable: true, data: 'last_sign_in_ip', visible: false },
+      { orderable: true, data: 'sign_in_count', visible: false },
+    ],
+  });
+
+  $('.datatable.admins').DataTable({
     order: [1, 'asc'],
     columns: [
       { orderable: true, data: 'id', visible: false },
@@ -29,7 +46,7 @@ var setupDataTables = function () {
       { orderable: true, data: 'last_sign_in_at', visible: false },
       { orderable: true, data: 'current_sign_in_ip', visible: false },
       { orderable: true, data: 'last_sign_in_ip', visible: false },
-      { orderable: true, data: 'sign_in_count', visible: false },
+      { orderable: true, data: 'sign_in_count', visible: true },
     ],
   });
 

app/controllers/manage/questionnaires_controller.rb

@@ -93,7 +93,7 @@ def convert_to_admin
     user = @questionnaire.user
     @questionnaire.destroy
     user.update_attributes(role: :admin)
-    redirect_to edit_manage_admin_path(user)
+    redirect_to edit_manage_user_path(user)
   end
 
   def destroy

app/controllers/manage/admins_controller.rb renamed to app/controllers/manage/users_controller.rb

@@ -1,4 +1,5 @@
-class Manage::AdminsController < Manage::ApplicationController
+class Manage::UsersController < Manage::ApplicationController
+  before_action :require_full_admin
   before_action :find_user, only: [:show, :edit, :update, :destroy]
 
   respond_to :html, :json
@@ -7,43 +8,34 @@ def index
     respond_with(:manage, User.where(role: [:admin, :admin_limited_access, :event_tracking]))
   end
 
-  def datatable
-    render json: AdminDatatable.new(params, view_context: view_context)
+  def user_datatable
+    render json: UserDatatable.new(params, view_context: view_context)
   end
 
-  def show
-    respond_with(:manage, @user)
+  def admin_datatable
+    render json: AdminDatatable.new(params, view_context: view_context)
   end
 
-  def new
-    @user = ::User.new
+  def show
     respond_with(:manage, @user)
   end
 
   def edit
   end
 
-  def create
-    @user = ::User.new(user_params.merge(password: Devise.friendly_token.first(10)))
-    if @user.save
-      @user.send_reset_password_instructions
-      flash[:notice] = "Created account for #{@user.email} and sent email with link to set a password"
-    end
-    respond_with(:manage, @user, location: manage_admins_path)
-  end
-
   def update
     @user.update_attributes(user_params)
-    respond_with(:manage, @user, location: manage_admins_path)
+    respond_with(:manage, @user, location: manage_users_path)
   end
 
   def destroy
+    if @user.questionnaire.present?
+      @user.questionnaire.destroy
+    end
     @user.destroy
-    respond_with(:manage, @user, location: manage_admins_path)
+    respond_with(:manage, @user, location: manage_users_path)
   end
 
-  private
-
   def user_params
     params.require(:user).permit(
       :email, :password, :password_confirmation, :remember_me, :role, :is_active, :receive_weekly_report

app/datatables/admin_datatable.rb

@@ -1,5 +1,5 @@
 class AdminDatatable < ApplicationDatatable
-  def_delegators :@view, :link_to, :manage_admin_path, :bold, :display_datetime
+  def_delegators :@view, :link_to, :manage_user_path, :bold, :display_datetime
 
   def view_columns
     @view_columns ||= {
@@ -23,7 +23,7 @@ def data
     records.map do |record|
       {
         id: record.id,
-        email: link_to(bold(record.email), manage_admin_path(record)),
+        email: link_to(bold(record.email), manage_user_path(record)),
         role: record.role.titleize,
         active: record.is_active ? '<span class="badge badge-secondary">Active</span>'.html_safe : '<span class="badge badge-danger">Inactive<span>'.html_safe,
         receive_weekly_report: yes_no_display(record.receive_weekly_report),

app/datatables/user_datatable.rb

@@ -0,0 +1,42 @@
+class UserDatatable < ApplicationDatatable
+  def_delegators :@view, :link_to, :manage_user_path, :manage_questionnaire_path, :bold, :display_datetime
+
+  def view_columns
+    @view_columns ||= {
+      id: { source: "User.id" },
+      email: { source: "User.email" },
+      role: { source: "User.role", searchable: false },
+      active: { source: "User.is_active", searchable: false },
+      created_at: { source: "User.created_at", searchable: false },
+      current_sign_in_at: { source: "User.current_sign_in_at", searchable: false },
+      last_sign_in_at: { source: "User.last_sign_in_at", searchable: false },
+      current_sign_in_ip: { source: "User.current_sign_in_ip" },
+      last_sign_in_ip: { source: "User.last_sign_in_ip" },
+      sign_in_count: { source: "User.sign_in_count", searchable: false },
+    }
+  end
+
+  private
+
+  def data
+    records.map do |record|
+      {
+        id: record.id,
+        email: link_to(bold(record.email), manage_user_path(record)),
+        role: record.role.titleize,
+        questionnaire: record.questionnaire.present? ? link_to(bold("View &raquo;".html_safe), manage_questionnaire_path(record.questionnaire.id)) : 'None',
+        active: record.is_active ? '<span class="badge badge-secondary">Active</span>'.html_safe : '<span class="badge badge-danger">Inactive<span>'.html_safe,
+        created_at: display_datetime(record.created_at),
+        current_sign_in_at: display_datetime(record.current_sign_in_at),
+        last_sign_in_at: display_datetime(record.last_sign_in_at),
+        current_sign_in_ip: record.current_sign_in_ip == "::1" ? "127.0.0.1" : record.current_sign_in_ip,
+        last_sign_in_ip: record.last_sign_in_ip == "::1" ? "127.0.0.1" : record.last_sign_in_ip,
+        sign_in_count: record.sign_in_count,
+      }
+    end
+  end
+
+  def get_raw_records
+    User.all
+  end
+end

app/views/layouts/manage/application.html.haml

@@ -38,10 +38,11 @@
                 = active_link_to manage_checkins_path, class: "nav-link" do
                   .fa.fa-drivers-license-o.fa-fw.icon-space-r-half
                   Check-in
-              %li.nav-item
-                = active_link_to manage_admins_path, class: "nav-link" do
-                  .fa.fa-users.fa-fw.icon-space-r-half
-                  Admins
+              - if current_user.admin?
+                %li.nav-item
+                  = active_link_to manage_users_path, class: "nav-link" do
+                    .fa.fa-users.fa-fw.icon-space-r-half
+                    = t(:title, scope: 'pages.manage.users')
               %li.nav-item
                 = active_link_to manage_messages_path, class: "nav-link" do
                   .fa.fa-bullhorn.fa-fw.icon-space-r-half