End of day commit

Gemfile

@@ -68,6 +68,9 @@ gem 'kaminari'
 
 gem 'rqrcode'
 gem 'mini_magick'
+gem 'active_attr'
+gem 'naught'
+gem 'cancancan'
 
 #gem 'geokit'
 gem 'iso_country_codes'

Gemfile.lock

@@ -78,6 +78,9 @@ GEM
       erubis (~> 2.7.0)
       rails-dom-testing (~> 1.0, >= 1.0.5)
       rails-html-sanitizer (~> 1.0, >= 1.0.1)
+    active_attr (0.8.5)
+      activemodel (>= 3.0.2, < 5.0)
+      activesupport (>= 3.0.2, < 5.0)
     active_decorator (0.4.0)
     active_model_serializers (0.9.0)
       activemodel (>= 3.2)
@@ -113,6 +116,7 @@ GEM
       sass (~> 3.4)
       thor
     builder (3.2.2)
+    cancancan (1.10.1)
     capistrano (3.3.5)
       capistrano-stats (~> 1.1.0)
       i18n
@@ -270,6 +274,7 @@ GEM
     multi_json (1.10.1)
     multi_xml (0.5.5)
     multipart-post (2.0.0)
+    naught (1.0.0)
     net-scp (1.2.1)
       net-ssh (>= 2.6.5)
     net-ssh (2.9.2)
@@ -449,9 +454,11 @@ PLATFORMS
   ruby
 
 DEPENDENCIES
+  active_attr
   active_decorator
   active_model_serializers (= 0.9.0)
   bourbon
+  cancancan
   capistrano (~> 3.0)
   capistrano-local-precompile
   capistrano-rails (~> 1.1)
@@ -480,6 +487,7 @@ DEPENDENCIES
   launchy
   letter_opener
   mini_magick
+  naught
   omniauth-facebook
   omniauth-instagram
   paperclip

app/assets/javascripts/supplier/app/controllers/application_controller.js.coffee

@@ -17,7 +17,7 @@ App.ApplicationController = Ember.Controller.extend
     # @set 'supplier', @store.find('supplier', supplier_id)
   actions:
     signOut: ->
-      window.location = Routes.destroy_supplier_session_path()
+      window.location = Routes.destroy_employee_session_path()
     markSupplierClosed: ->
       return unless supplier = @get('supplier')
       supplier.close()

app/assets/javascripts/supplier/app/controllers/employees_index_controller.js.coffee

@@ -1,14 +1,17 @@
 App.EmployeesIndexController = Ember.ArrayController.extend
+  needs: ['application']
   employees: (-> @get('model').sortBy('name')).property('model.@each.name')
   actions:
     newEmployee: ->
       employee = @store.createRecord('employee')
       @modal 'employee_edit',
         model: employee
+        title_path: 'employee.modal.new_title'
         close: -> employee.deleteRecord()
     editEmployee: (employee)->
       @modal 'employee_edit',
         model: employee
+        title_path: 'employee.modal.edit_title'
         close: -> employee.rollback()
     destroyEmployee: (employee)->
       @modal 'confirm',

app/assets/javascripts/supplier/app/controllers/modals/add_section_controller.js.coffee

@@ -34,3 +34,5 @@ App.modals.AddSectionController = @App.modals.BaseController.extend
         @set 'section_title', ''
         @send 'closeModal'
         @transitionToRoute 'section', s.id
+      , @save_error.bind(@)
+

app/assets/javascripts/supplier/app/controllers/modals/base_controller.js.coffee

@@ -19,10 +19,21 @@
     else
       underscored.capitalize().replace(/_/, ' ')
   ).property('model.id')
+  save_error: (error)->
+    switch error.status
+      when 403
+        @set 'alert_message', 'Unauthorized action'
+      else
+        @set 'alert_message', 'Something went wrong'
+  save_success: ->
+    @set 'alert_message', ''
+    @send 'closeModal'
+
   actions:
     close: ->
       if close = @get('modal_options.close')
         close.apply(@)
+      @set 'alert_message', ''
       @send 'closeModal' unless @preventClose
     closeOnOverlay: ->
       @send('close') if @get('modal_options.closeOnOverlay')
@@ -33,11 +44,12 @@
     ok: ->
       if ok = @get('modal_options.ok')
         ok.apply(@)
+      @set 'alert_message', ''
       @send 'closeModal' unless @preventClose
     confirm: -> @send('ok')
     save: ->
       if @get('model.isValid')
-        @get('model').save().then((=> @send 'closeModal' ), (-> true))
+        @get('model').save().then @save_success.bind(@), @save_error.bind(@)
         #@send 'closeModal' unless @preventClose
     destroy: ->
       @modal 'confirm',

app/assets/javascripts/supplier/app/controllers/tables_index_controller.js.coffee

@@ -1,4 +1,5 @@
 App.TablesIndexController = Ember.ArrayController.extend
+  needs: ['application']
   tables: (-> @get('model').sortBy('casted_number')).property('model.@each.number')
   actions:
     newTable: ->

app/assets/javascripts/supplier/app/helpers/can.js.coffee

@@ -0,0 +1,5 @@
+Ember.Handlebars.registerHelper 'can', (operation, resource, options)->
+  if operation is 'manage' and @get('controllers.application.employee_settings.manager')
+    options.fn @
+  else
+    options.inverse @

app/assets/javascripts/supplier/app/models/employee.js.coffee

@@ -4,5 +4,5 @@ App.Employee= DS.Model.extend Ember.Validations.Mixin,
   email: attr 'string'
 
   validations:
-    name:
+    name: {presence: true}
-      presence: true
+    email: {format: /.+@.+\..{2,4}/}

app/assets/javascripts/supplier/app/models/product_category.js.coffee

@@ -1,5 +1,5 @@
 attr = DS.attr
-App.ProductCategory = DS.Model.extend
+App.ProductCategory = DS.Model.extend Ember.Validations.Mixin,
   name: attr('string')
   products: DS.hasMany('product')
   supplier: DS.belongsTo 'supplier'
@@ -25,3 +25,6 @@ App.ProductCategory = DS.Model.extend
     unless @get('full_day')
       result += "<span class=\"time-range\">#{day_minutes_to_time @get('start_from')} - #{day_minutes_to_time @get('end_on')}</span>"
     new Ember.Handlebars.SafeString result
+
+  validations:
+    name: {presence: true}

app/assets/javascripts/supplier/app/models/supplier.js.coffee

@@ -1,7 +1,6 @@
 attr = DS.attr
 App.Supplier = DS.Model.extend
   name: attr 'string'
-  email: attr 'string'
   time_zone: attr 'string'
   address: attr 'string'
   house_number: attr 'number'

app/assets/javascripts/supplier/app/routes/application_route.js.coffee.erb

@@ -2,18 +2,22 @@ App.ApplicationRoute = Ember.Route.extend
   beforeModel: ->
     # Preload only active lists and orders
     @supplier = @store.push 'supplier', supplier_object
-    @product_categories = @store.find 'product_category'
+    @employee = @store.push 'employee', employee_object
-    @sections = @store.find 'section'
+    #@product_categories = @store.find 'product_category'
-    Ember.RSVP.all([@product_categories, @sections]).then (results)=>
+    #@sections = @store.find 'section'
-       @store.find('list', state: 'active').then (lists) -> lists.invoke('get', 'table')
+    #Ember.RSVP.all([@product_categories, @sections]).then (results)=>
-       @lists = @store.all 'list'
+    @supplier.reload().then =>
+       @store.find('list', state: 'active') #.then (lists) -> lists.invoke('get', 'table')
+       #@lists = @store.all 'list'
     # product_categories = controller.set 'product_categories', @store.all('product_category')
     #@store.find 'order', state: 'active' included in list
   setupController: (controller)->
     controller.set 'supplier', @supplier
+    controller.set 'employee', @employee
+    controller.set 'employee_settings', Ember.Object.create(employee_settings)
     # @set 'supplier', @store.find('supplier', supplier_id)
-    controller.set 'sections', @sections
+    #controller.set 'sections', @sections
-    controller.set 'product_categories', @product_categories
+    #controller.set 'product_categories', @product_categories
 
     faye = new Faye.Client(event_host)
     faye.subscribe "/supplier/#{supplier_object.id}", (e)=>

app/assets/javascripts/supplier/app/templates/employees/index.emblem

@@ -15,7 +15,9 @@
               = employee.email
               = errors employee.errors.email
             td.actions
+              can manage sections
                 a.table-edit{ action 'editEmployee' employee }: span
                 a.table-destroy{ action 'destroyEmployee' employee }: span
   .form-actions
+    can manage employees
       a.form-action-new.new-employee-button{action "newEmployee"}= t 'employee.new_button'

app/assets/javascripts/supplier/app/templates/form_elements/boolean_button.emblem

@@ -0,0 +1 @@
+span= view.text

app/assets/javascripts/supplier/app/templates/menu.emblem

@@ -6,13 +6,16 @@
 each product_category in sorted_product_categories
   .row.product_category-container: .small-12.columns
     .product_category-header
+      can manage menu
         a.move{action "moveProductCategory" product_category} href="#"
       span.title= product_category.name
       span.availability= product_category.availability_text
+      can manage menu
         a.edit-product-category-button{action "editProductCategory" product_category} href="#"
         a.add-product-product_category-button{action "addProduct" product_category} href="#": span
     each product in product_category.sorted_products
       = menu-product product=product code_filter=product_code_filter
-.row
+can manage menu
+  .row
     .small-12.columns
       a.new-product_category-button{action "newProductCategory"} href="#" = t 'product_category.new_button'

app/assets/javascripts/supplier/app/templates/modals/employee_edit.emblem

@@ -1,4 +1,4 @@
-p=t 'employee.edit.modal.body_header'
+p=t 'employee.modal.body_header'
 .form-row.name
   .form-label=t 'attributes.employee.name'
   .form-field
@@ -7,8 +7,9 @@ p=t 'employee.edit.modal.body_header'
 .form-row.name
   .form-label=t 'attributes.employee.email'
   .form-field
-    = input type="email" valueBinding="model.email"
+    = input type="email" valueBinding="model.email" action="save"
     = errors model.errors.email
 hr
-button.modal-close{action "close"}=t 'section.add_employees.modal.close_button'
+button.modal-close{action "close"}=t 'employee.modal.close_button'
-button.modal-confirm.right{action "save"}=t 'section.add_employees.modal.add_button'
+button.modal-confirm.right{action "save"} disabled=model.isInvalid
+  =t 'employee.modal.save_button'

app/assets/javascripts/supplier/app/templates/modals/product_category_form.emblem

@@ -1,6 +1,6 @@
 .form-row.name
   .form-label.half=t 'attributes.product_category.name'
-  .form-field.half= input valueBinding="model.name"
+  .form-field.half= input valueBinding="model.name" action="save"
 .row
   .small-12.medium-6.columns
     unless model.supplier.week_starts_on_monday

app/assets/javascripts/supplier/app/templates/modals/product_category_new.emblem

@@ -2,4 +2,5 @@ p=t 'product_category.modal.new.body_header'
 = partial "modals/product_category_form"
 hr
 button.modal-close{action "close"}=t 'product_category.modal.new.close_button'
-button.modal-save.right{action "save"}=t 'product_category.modal.new.save_button'
+button.modal-save.right{action "save"} disabled=model.isInvalid
+  =t 'product_category.modal.new.save_button'

app/assets/javascripts/supplier/app/templates/section.emblem

@@ -2,8 +2,10 @@
   = link-to 'sections' class="goto-sections-index-tab-header": span
   each section in sections
     = view "section-tab-header" context=section
+  can manage sections
     a.add-section{action "addSection"}: span
-.section-manage-tables.pull-right
+can manage sections
+  .section-manage-tables.pull-right
     App.DropdownLink title="Action"
       ul
         li: a{action "addTables"}: span.section-add-tables-icon=t 'section.add_tables.button_label'

app/assets/javascripts/supplier/app/templates/sections/index.emblem

@@ -36,5 +36,6 @@
   else
     .row: .small-12.columns
       .panel=t 'section.none_found'
+  can manage sections
     .form-actions
       a.form-action-new{action "addSection"}=t 'helpers.links.new'

app/assets/javascripts/supplier/app/templates/tables/index.emblem

@@ -18,9 +18,11 @@
                   = table.section.title
             /td.timestamp=time table.created_at
             td.actions
+              can manage tables
                 a.table-edit{ action 'editTable' table }: span
                 a.table-destroy{ action 'destroyTable' table }: span
   .form-actions
+    can manage tables
       a.form-action-new.new-table-button{action "newTable"}= t 'table.new_button'
     if tables
       a.table-qr-codes{path qr_codes_suppliers_tables} target="_blank"

app/assets/javascripts/supplier/app/views/form_elements/boolean_button_view.js.coffee

@@ -2,7 +2,7 @@ App.BooleanButtonView = Ember.View.extend
   tagName: 'a'
   href: '#'
   classNames: "button"
-  # templateName: "form_elements/boolean_switch"
+  templateName: "form_elements/boolean_button"
   #template: Ember.Handlebars.compile "<span>{{view.text}}</span>"
   classNameBindings: ['rounded:round', 'active:active:disabled']
 

app/assets/javascripts/supplier/app/views/modal_view.js.coffee

@@ -1,6 +1,7 @@
 App.ModalView = Ember.View.extend
   layoutName: 'modals/layout'
   didInsertElement: ->
+    @$('input:first').focus()
     sortable = $('.sortable')
     controller = @get('controller')
     if sortable.length

app/assets/javascripts/supplier/foundation1/application.js.erb

@@ -24,6 +24,7 @@ String.prototype.capitalize = function() { return this.charAt(0).toUpperCase() +
 window.time_zones = <%= ActiveSupport::TimeZone.all.map{|tz| {name: tz.name, formatted: "GMT#{tz.formatted_offset} #{tz.name}"}}.to_json.html_safe %>;
 window.countries = <%= IsoCountryCodes.all.map{|cc| {name: cc.name}}.to_json.html_safe %>;
 
+
 var path_mapping = {
   user_root: '/user',
   join_occupied_table: '/user/join_occupied_table',

app/assets/stylesheets/supplier/foundation1/components/_forms.css.sass

@@ -25,7 +25,9 @@
         +grid-column($columns: 9, $last-column:true)
     &.half
       +grid-column(6)
-    .error, .error-message
+    .error
+      color: $alert-color
+  .error-message
     color: $alert-color
   &.form-actions
     padding-top: 12px

app/assets/stylesheets/theme1/elements/_forms.css.sass

@@ -17,6 +17,8 @@
     &.full
       @media #{$large-up}
         +grid-column($columns: 9, $last-column:true)
+  .error-message
+    color: $alert-color
   &.form-actions
     padding-top: 12px
 

app/controllers/admin/employees_controller.rb

@@ -0,0 +1,106 @@
+module Admin
+  class EmployeesController < Admin::ApplicationController
+    before_filter :set_relation_options, only: [:new, :edit, :create, :update]
+    skip_before_filter :authenticate_administrator!, only: :test_login
+    skip_before_filter :set_locale, only: :test_login
+    # GET /employees
+    # GET /employees.json
+    def index
+      @employees = Employee.all
+
+      respond_to do |format|
+        format.html # index.html.erb
+        format.json { render json: @employees }
+      end
+    end
+
+    def test_login
+      if Rails.env.test? and employee = Employee.find_by_email(params[:email])
+        sign_in employee
+      end
+      render nothing: true
+    end
+
+    # GET /employees/1
+    # GET /employees/1.json
+    def show
+      @employee = Employee.find(params[:id])
+
+      respond_to do |format|
+        format.html # show.html.erb
+        format.json { render json: @employee }
+      end
+    end
+
+    # GET /employees/new
+    # GET /employees/new.json
+    def new
+      @employee = Employee.new
+
+      respond_to do |format|
+        format.html # new.html.erb
+        format.json { render json: @employee }
+      end
+    end
+
+    # GET /employees/1/edit
+    def edit
+      @employee = Employee.find(params[:id])
+    end
+
+    # POST /employees
+    # POST /employees.json
+    def create
+      @employee = Employee.new(employee_params)
+
+      respond_to do |format|
+        if @employee.save
+          format.html { redirect_to [:admin, @employee], notice: t('action.create.successfull', model: Employee.model_name.human) }
+          format.json { render json: @employee, status: :created, location: @employee }
+        else
+          format.html { render action: "new" }
+          format.json { render json: @employee.errors, status: :unprocessable_entity }
+        end
+      end
+    end
+
+    # PUT /employees/1
+    # PUT /employees/1.json
+    def update
+      @employee = Employee.find(params[:id])
+
+      respond_to do |format|
+        if @employee.update_attributes(employee_params)
+          format.html { redirect_to [:admin, @employee], notice: t('action.update.successfull', model: Employee.model_name.human) }
+          format.json { head :no_content }
+        else
+          format.html { render action: "edit" }
+          format.json { render json: @employee.errors, status: :unprocessable_entity }
+        end
+      end
+    end
+
+    # DELETE /employees/1
+    # DELETE /employees/1.json
+    def destroy
+      @employee = Employee.find(params[:id])
+      @employee.destroy
+
+      respond_to do |format|
+        format.html { redirect_to admin_employees_path, notice: t('action.destroy.successfull', model: Employee.model_name.human) }
+        format.json { head :no_content }
+      end
+    end
+
+    private
+
+    def set_relation_options
+      @employees = Employee.all
+      @lists = List.all
+    end
+
+    def employee_params
+      params.require(:employee).permit!
+    end
+  end
+end

app/controllers/admin/suppliers_controller.rb

@@ -2,7 +2,6 @@ module Admin
   class SuppliersController < Admin::ApplicationController
     before_filter :set_relation_options, only: [:new, :edit, :create, :update]
     skip_before_filter :authenticate_administrator!, only: :test_login
-    skip_before_filter :set_locale, only: :test_login
     # GET /suppliers
     # GET /suppliers.json
     def index
@@ -14,13 +13,6 @@ module Admin
       end
     end
 
-    def test_login
-      if Rails.env.test? and supplier = Supplier.find_by_email(params[:email])
-        sign_in supplier
-      end
-      render nothing: true
-    end
-
     # GET /suppliers/1
     # GET /suppliers/1.json
     def show

app/controllers/new_suppliers_controller.rb

@@ -0,0 +1,22 @@
+class NewSuppliersController < ApplicationController
+  def index
+    new
+    render 'new'
+  end
+
+  def new
+    @new_supplier = NewSupplier.new
+    @new_supplier.current_employee = current_employee
+  end
+
+  def create
+    @new_supplier = NewSupplier.new(params[:new_supplier])
+    @new_supplier.current_employee = current_employee
+
+    if @new_supplier.save
+      redirect_to supplier_root_path
+    else
+      render 'new'
+    end
+  end
+end

app/controllers/supplier_controller.rb

@@ -1,5 +1,5 @@
-class SupplierController < ApplicationController
+class SupplierController < Suppliers::ApplicationController
-  before_filter :authenticate_supplier!
+  before_filter :setup_employee_and_supplier!
   layout 'supplier/app'
 
   def home
@@ -14,7 +14,8 @@ class SupplierController < ApplicationController
   end
 
   def current
-    render json: SupplierSupplierSerializer.new(current_supplier).as_json
+    [current_supplier].include_relations(sections: :tables, product_categories: :products)
+    render json: Suppliers::SupplierSerializer.new(current_supplier).as_json
   end
 
   # POST /supplier/settings
@@ -30,7 +31,7 @@ class SupplierController < ApplicationController
       end
       format.json do
         current_supplier.update_attributes(supplier_params)
-        render json: SupplierSupplierSerializer.new(current_supplier).as_json
+        render json: Suppliers::SupplierSerializer.new(current_supplier).as_json
       end
     end
   end

app/controllers/suppliers/application_controller.rb

@@ -1,11 +1,40 @@
 module Suppliers
   class ApplicationController < ::ApplicationController
-    before_filter :authenticate_supplier!
+    before_action :setup_employee_and_supplier!
+    load_and_authorize_resource
+    attr_reader :current_supplier, :employee_settings
+    helper_method :current_supplier, :employee_settings
     layout 'supplier/app'
 
     rescue_from 'RestClient::Conflict' do |e|
       #binding.pry
     end
+    rescue_from CanCan::AccessDenied do |exception|
+      render json: {}, status: :forbidden
+    end
 
+    def setup_employee_and_supplier!
+      authenticate_employee!
+      find_current_supplier!
+      return unless current_supplier.present?
+      @employee_settings = current_supplier.employee_settings.for_employee( current_employee )
+      @current_ability = ::Ability.new(@employee_settings)
+    end
+
+
+    def find_current_supplier!
+      return current_supplier if current_supplier.present?
+      if session[:supplier_id]
+        supplier = Supplier.find(session[:supplier_id])
+        if supplier.employee_ids.include?(current_employee.id)
+          @current_supplier = supplier
+        else
+          render nothing: true, status: :unauthorized
+        end
+      else
+        @current_supplier = current_employee.suppliers.first
+        session[:supplier_id] = @current_supplier.try(:id)
+      end
+    end
   end
 end

app/controllers/suppliers/employees_controller.rb

@@ -19,16 +19,14 @@ module Suppliers
     # POST /employees.json
     def create
       @employee = Employee.new(employee_params)
-      @employee.supplier = current_supplier
 
-      respond_to do |format|
       if @employee.save
+        current_supplier.add_employee @employee
         render json: @employee, serializer: Suppliers::EmployeeSerializer, status: :created
       else
         render json: {errors: @employee.errors}, status: :unprocessable_entity
       end
     end
-    end
 
     # PUT /employees/1
     # PUT /employees/1.json

app/controllers/suppliers/sections_controller.rb

@@ -17,7 +17,7 @@ module Suppliers
       #     end
       #   end
       # end
-      render json: @sections, each_serializer: SupplierExtendedSectionSerializer
+      render json: @sections, each_serializer: Suppliers::ExtendedSectionSerializer
     end
 
     # GET /sections/1

app/helpers/application_helper.rb

@@ -182,5 +182,4 @@ module ApplicationHelper
     options[:onclick] = function
     link_to title, 'javascript:void(0)', options
   end
-
 end

app/models/employee.rb

@@ -2,14 +2,23 @@ class Employee
   include SimplyStored::Couch
   include ActiveModel::SerializerSupport
 
-  devise :database_authenticatable, :recoverable, :rememberable, :trackable #, :omniauthable, :omniauth_providers => [:facebook] #, :token_authenticatable , :registerable
+  view :by_confirmation_token, key: :confirmation_token # devise confirmable
+  devise :database_authenticatable, :recoverable, :rememberable, :trackable, :registerable, :confirmable
+  property :unconfirmed_email
+
   property :name
-  property :email
+  #property :email
 
   view :by_email, key: :email
 
-  validates :email, email: true
+  class << self
-  belongs_to :supplier
+    def count_by_email(email)
+      database.view by_email(key: email, reduce: true)
+    end
+  end
+
+  #validates :email, email: true
+  has_and_belongs_to_many :suppliers, storing_keys: false
   has_many :orders
   has_and_belongs_to_many :lists, storing_keys: false
 

app/models/supplier.rb

@@ -3,9 +3,7 @@ class Supplier
   include ActiveModel::SerializerSupport
   include Supplier::Counters
 
-  view :by_confirmation_token, key: :confirmation_token # devise confirmable
+  #devise :database_authenticatable, :recoverable, :rememberable, :trackable, :registerable, :confirmable
-  devise :database_authenticatable, :recoverable, :rememberable, :trackable, :registerable, :confirmable
-  property :unconfirmed_email
 
   property :name
   property :open, type: :boolean, default: false
@@ -19,6 +17,7 @@ class Supplier
   property :country, default: 'Netherlands'
   property :facebook_promotion_url
   property :week_starts_on_monday, type: :boolean, default: true
+  property :employee_settings_storage
 
   #LOCATION
   property :lat, type: Float #, default: 52.08062426379751
@@ -41,16 +40,13 @@ class Supplier
   #has_many :lists, through: :tables
   has_many :orders, dependent: :destroy
   has_many :sections, dependent: :destroy
-  has_many :employees
+  has_and_belongs_to_many :employees, storing_keys: true
 
   after_create :add_section_on_create
 
-  view :by_email, key: :email
-
   validates :name, presence: true
-  validates :email, email: true
   validates :iens_profile, numericality: {allow_blank: true}
-  validates :password, confirmation: true, presence: {if: ->(r){ r.new_record? }}
+  #validates :password, confirmation: true, presence: {if: ->(r){ r.new_record? }}
 
   def location=(val)
     lat, lng = val.is_a?(Array) ? val : val.strip.split(/[ ,]+/).map(&:to_f)
@@ -62,6 +58,17 @@ class Supplier
     [lat, lng].join(',')
   end
 
+  def add_manager(employee)
+    add_employee employee unless employee_ids.include? employee.id
+    settings = employee_settings.for_employee(employee)
+    settings.is_manager!
+    save and employee
+  end
+
+  def employee_settings
+    SupplierEmployeesSettings.new(self)
+  end
+
   def active_orders(options = {})
     return @active_orders if @active_orders && @active_orders_options == options
     @active_orders_options = options
@@ -122,22 +129,22 @@ class Supplier
   # Options must have the confirmation_token
   #
   # Overwrite devise method for mail sending
-  def self.confirm_by_token(confirmation_token)
+  #def self.confirm_by_token(confirmation_token)
-    confirmable = find_or_initialize_with_error_by(:confirmation_token, confirmation_token)
+    #confirmable = find_or_initialize_with_error_by(:confirmation_token, confirmation_token)
-    send_creation_mail = confirmable.errors.empty? && !confirmable.confirmed?
+    #send_creation_mail = confirmable.errors.empty? && !confirmable.confirmed?
-    confirmable.confirm! if confirmable.persisted?
+    #confirmable.confirm! if confirmable.persisted?
-    confirmable.send_creation_notifications if send_creation_mail
+    #confirmable.send_creation_notifications if send_creation_mail
-    confirmable
+    #confirmable
-  end
+  #end
 
   # Send confirmation instructions by email
-  def send_confirmation_instructions(*args)
+  #def send_confirmation_instructions(*args)
-    self.confirmation_token = nil if reconfirmation_required?
+    #self.confirmation_token = nil if reconfirmation_required?
-    @reconfirmation_required = false
+    #@reconfirmation_required = false
 
-    @bypass_postpone = true and generate_confirmation_token! if self.confirmation_token.blank?
+    #@bypass_postpone = true and generate_confirmation_token! if self.confirmation_token.blank?
-    self.devise_mailer.confirmation_instructions(self, confirmation_token).deliver_now
+    #self.devise_mailer.confirmation_instructions(self, confirmation_token).deliver_now
-  end
+  #end
 
   def find_order(id)
     order = Order.find(id)

app/serializers/supplier_employees_settings.rb

@@ -0,0 +1,71 @@
+class SupplierEmployeesSettings
+  attr_reader :dictionary, :employee_ids, :supplier
+  def initialize(supplier)
+    @supplier = supplier
+    @dictionary = supplier.employee_settings_storage || {}
+    @employee_ids = supplier.employee_ids || []
+  end
+
+  def for_employee(employee_id)
+    employee_id = employee_id.id if employee_id.is_a?(Employee)
+    if employee_ids.include? employee_id
+      SupplierEmployeeSettings.new(self, employee_id, dictionary[employee_id])
+    else
+      SupplierEmployeeSettings::NullObject.new
+    end
+  end
+
+  def [](val)
+    val = val.to_s
+    if dictionary[val].is_a? SettingsPersistor
+      dictionary[val]
+    else
+      dictionary[val] = SettingsPersistor.new(self, dictionary[val])
+    end
+  end
+
+  def persist
+    supplier.employee_settings_storage = dictionary
+  end
+
+  def method_missing(m, *args)
+    dictionary.send(m, *args)
+  end
+
+  class SettingsPersistor < Hash
+    attr_reader :all_employees_settings
+    def initialize(all_employees_settings, options = {})
+      @all_employees_settings = all_employees_settings
+      self.replace options if options.is_a? Hash
+    end
+
+    def []=(*args)
+      super
+      all_employees_settings.persist
+    end
+  end
+
+  class SupplierEmployeeSettings
+    delegate :as_json, :to_json, to: :settings
+    DEFAULTS = {
+      'manager' => false
+    }
+    attr_reader :id, :settings, :all_employees_settings
+    class NullObject < ::NullObject
+    end
+
+    def initialize(all_employees_settings, employee_id, settings = {})
+      @all_employees_settings = all_employees_settings
+      @id = employee_id
+      @settings = DEFAULTS.merge(settings || {})
+    end
+
+    def manager?
+      settings['manager']
+    end
+
+    def is_manager!
+      all_employees_settings[id]['manager'] = true
+    end
+  end
+end

app/serializers/supplier_extended_section_serializer.rb

@@ -1,6 +0,0 @@
-class SupplierExtendedSectionSerializer < Qwaiter::Serializer
-  root 'section'
-  embed :ids, include: true
-  attributes :title, :path, :width, :height
-  has_many :tables, serializer: SupplierExtendedTableSerializer
-end

app/serializers/supplier_supplier_serializer.rb

@@ -1,10 +0,0 @@
-class SupplierSupplierSerializer < Qwaiter::Serializer
-  self.root = :supplier
-  attributes :extended_version, :open, :name, :lat, :lng, :email, :time_zone, :address, :house_number, :house_number_addition, :postal_code, :city, :country,
-    :facebook_promotion_url, :iens_profile, :week_starts_on_monday, :orders_in_process_count, :orders_placed_count
-
-  def extended_version
-    false
-  end
-
-end

app/serializers/supplier_table_serializer.rb

@@ -2,5 +2,5 @@ class SupplierTableSerializer < Qwaiter::Serializer
   self.root = :table
   embed :ids, include: true
   attributes :number, :width, :height, :position_x, :position_y, :section_id, :needs_help
-  has_one :supplier, serializer: SupplierSupplierSerializer
+  has_one :supplier, serializer: Suppliers::SupplierSerializer
 end

app/serializers/suppliers/employee_serializer.rb

@@ -1,6 +1,5 @@
 class Suppliers::EmployeeSerializer < Qwaiter::Serializer
   self.root = :employee
   embed :ids, include: true
-  attributes :supplier_id, :name, :email
+  attributes :name, :email
-  has_many :orders
 end

app/serializers/suppliers/extended_section_serializer.rb

@@ -0,0 +1,6 @@
+class Suppliers::ExtendedSectionSerializer < Qwaiter::Serializer
+  root 'section'
+  embed :ids, include: true
+  attributes :title, :path, :width, :height
+  has_many :tables, serializer: Suppliers::ExtendedTableSerializer
+end

app/serializers/suppliers/extended_table_serializer.rb

@@ -1,4 +1,4 @@
-class SupplierExtendedTableSerializer < Qwaiter::Serializer
+class Suppliers::ExtendedTableSerializer < Qwaiter::Serializer
   root 'table'
   embed :ids, include: true
   attributes :number, :width, :height, :position_x, :position_y, :section_id#, :active_list_id

app/serializers/suppliers/supplier_serializer.rb

@@ -0,0 +1,12 @@
+class Suppliers::SupplierSerializer < Qwaiter::Serializer
+  self.root = :supplier
+  embed :ids, include: true
+  attributes :extended_version, :open, :name, :lat, :lng, :time_zone, :address, :house_number, :house_number_addition, :postal_code, :city, :country,
+    :facebook_promotion_url, :iens_profile, :week_starts_on_monday, :orders_in_process_count, :orders_placed_count
+
+  def extended_version
+    true
+  end
+  has_many :sections, serializer: Suppliers::ExtendedSectionSerializer
+  has_many :product_categories
+end

app/services/ability.rb

@@ -0,0 +1,11 @@
+class Ability
+  include CanCan::Ability
+  def initialize(settings)
+    settings ||= SupplierEmployeesSettings.new(Supplier.new).for_employee(nil)
+    if settings.manager?
+      can :manage, :all
+    else
+      can :read, :all
+    end
+  end
+end

app/services/new_supplier.rb

@@ -0,0 +1,46 @@
+class NewSupplier
+  include ActiveAttr::Model
+  attr_accessor :current_employee
+
+  attribute :supplier_name
+  attribute :email
+  attribute :password
+  attribute :password_confirmation
+
+  without_current_supplier = { unless: 'current_employee.present?' }
+  validates :supplier_name, presence: true
+  validates :email, email: without_current_supplier
+  validates :password, presence: without_current_supplier, confirmation: without_current_supplier
+
+  validate :supplier_name_uniqueness
+  validate :employee_uniqueness
+
+  def save
+    if valid?
+      persist!
+      true
+    else
+      false
+    end
+  end
+
+  private
+
+  def persist!
+    employee = Employee.new unconfirmed_email: email, password: password, password_confirmation: password_confirmation
+    raise "Cannot create employee with #{attributes.inspect}" unless employee.save
+    supplier = Supplier.create name: supplier_name
+    supplier.add_manager employee
+  end
+
+  def employee_uniqueness
+    return if current_employee.present?
+    errors.add :email, :taken if Employee.count_by_email(email) > 0
+  end
+
+  def supplier_name_uniqueness
+    return unless current_employee.present? and supplier_name.present?
+    current_suppliers = current_employee.suppliers
+    errors.add :base, 'You already have a supplier with that name' if current_suppliers.map(&:name).include? supplier_name
+  end
+end

app/services/null_object.rb

@@ -0,0 +1,23 @@
+NullObject = Naught.build do |config|
+  config.black_hole
+  config.define_explicit_conversions
+  config.define_implicit_conversions
+end
+
+class NullObject
+  def presence
+    nil
+  end
+  def present?
+    false
+  end
+  def blank?
+    true
+  end
+  def empty?
+    true
+  end
+  def any?
+    false
+  end
+end

app/views/employees/mailer/confirmation_instructions.html.slim

@@ -3,4 +3,5 @@ p= t('devise.mailer.confirmation_instructions.supplier.salutation', email: @reso
 p=raw t \
   'devise.mailer.confirmation_instructions.supplier.body',
   unconfirmed_email: @resource.unconfirmed_email,
-  confirm_url: confirmation_url(@resource, :confirmation_token => @resource.confirmation_token)
+  confirm_url: confirmation_url(@resource, confirmation_token: @token)
+p Boe

app/views/new_suppliers/new.html.slim

@@ -0,0 +1,28 @@
+.row
+  .large-7.large-offset-1.columns
+    = form_for @new_supplier do |f|
+      = f.row :supplier_name
+        .large-4.columns= f.label :supplier_name
+        .large-4.columns= f.text_field :supplier_name
+        .large-4.columns= f.error_message :supplier_name
+      = f.row :email
+        .large-4.columns= f.label :email
+        .large-4.columns
+          - if @new_supplier.current_employee.present?
+            = @new_supplier.current_employee.email
+          - else
+            = f.email_field :email
+        .large-4.columns= f.error_message :email
+      - if not @new_supplier.current_employee.present?
+        = f.row :password
+          .large-4.columns= f.label :password
+          .large-4.columns= f.text_field :password
+          .large-4.columns= f.error_message :password
+        = f.row :password_confirmation
+          .large-4.columns= f.label :password_confirmation
+          .large-4.columns= f.text_field :password_confirmation
+          .large-4.columns= f.error_message :password_confirmation
+
+      .form-actions
+        = f.submit class: 'button'
+

app/views/suppliers/application/_head.html.erb

@@ -1,7 +1,9 @@
 <script>
 //var $locale = '<%= I18n.locale %>';
 //var supplier_id = '<%= current_supplier.id %>';
-var supplier_object=<%= SupplierSupplierSerializer.new(current_supplier).as_json(root: false).to_json.html_safe %>;
+var supplier_object=<%= {id: current_supplier.id}.to_json.html_safe %>;
+var employee_object=<%=raw current_employee.attributes.slice(:name, :email).merge(id: current_employee.id).to_json %>;
+var employee_settings=<%= raw employee_settings.to_json %>;
 var data_host = '';
 var event_host = '<%= Qwaiter.event_host %>';
 //var datepicker_options = {dateFormat: 'yy-mm-dd', firstDay: <%= current_supplier.week_starts_on_monday? ? 1 : 0 %>};

app/views/users/mailer/confirmation_instructions.html.slim

@@ -3,4 +3,4 @@ p= t('devise.mailer.confirmation_instructions.salutation', email: @resource.emai
 p=raw t \
   'devise.mailer.confirmation_instructions.body',
   unconfirmed_email: @resource.unconfirmed_email,
-  confirm_url: confirmation_url(@resource, :confirmation_token => @resource.confirmation_token)
+  confirm_url: confirmation_url(@resource, :confirmation_token => @token)

config/initializers/devise.rb

@@ -186,7 +186,7 @@ Devise.setup do |config|
   # Time interval you can reset your password with a reset password key.
   # Don't put a too small interval or your users won't have the time to
   # change their passwords.
-  config.reset_password_within = 6.hours
+  config.reset_password_within = 6.days
 
   # ==> Configuration for :encryptable
   # Allow you to use another encryption algorithm besides bcrypt (default). You can use

config/initializers/monkey_patches.rb

@@ -0,0 +1,5 @@
+class NilClass
+  def include?(*args)
+    false
+  end
+end

config/locales/models.en.yml

@@ -3,6 +3,7 @@ en:
     models:
       user: User
       supplier: Restaurant
+      new_supplier: New restaurant
       table: Table
       list: List
       product: Product
@@ -15,6 +16,7 @@ en:
       plural:
         user: Users
         supplier: Restaurants
+        new_supplier: New restaurants
         table: Tables
         list: Lists
         product: Products
@@ -67,3 +69,6 @@ en:
         created_at: Created
       user:
         email: 'E-mail'
+      employee:
+        name: Name
+        email: 'E-mail'

config/locales/models.nl.yml

@@ -3,6 +3,7 @@ nl:
     models:
       user: Gebruiker
       supplier: Restaurant
+      new_supplier: Nieuw restaurant
       table: Tafel
       list: Lijst
       product: Product
@@ -14,6 +15,7 @@ nl:
       plural:
         user: Gebruikers
         supplier: Restaurants
+        new_supplier: Nieuwe restaurants
         table: Tafels
         list: Lijsten
         product: Producten
@@ -66,3 +68,6 @@ nl:
         created_at: Aangemaakt
       user:
         email: 'E-mail'
+      employee:
+        name: Naam
+        email: 'E-mail'

config/locales/supplier.en.yml

@@ -187,6 +187,9 @@ en:
       destroy:
         modal:
           title: 'Delete ${models.employee} %{name}?'
-      edit:
       modal:
+        new_title: New ${models.employee}
+        new_title: Edit ${models.employee}
         body_header: ''
+        close_button: Close
+        save_button: Save

config/locales/supplier.nl.yml

@@ -190,3 +190,9 @@ nl:
       destroy:
         modal:
           title: '${models.employee} %{name} verwijderen?'
+      modal:
+        new_title: ${models.employee} aanmaker
+        new_title: Bewerk ${models.employee}
+        body_header: ''
+        close_button: Cancel
+        save_button: Save

config/routes.rb

@@ -1,7 +1,8 @@
 ALLOWED_LOCALES = /nl|be|de|fr|en/
 Qwaiter::Application.routes.draw do
   devise_for :users, controllers: { omniauth_callbacks: "users/omniauth_callbacks" }
-  devise_for :suppliers, controllers: { confirmations: 'confirmations', registrations: 'registrations' }
+  #devise_for :suppliers, controllers: { confirmations: 'confirmations', registrations: 'registrations' }
+  devise_for :employees
   devise_for :administrators
   namespace :admin do
     resources :users do
@@ -9,7 +10,8 @@ Qwaiter::Application.routes.draw do
         get :test_login
       end
     end
-    resources :suppliers do
+    resources :suppliers
+    resources :employees do
       collection do
         get :test_login
       end
@@ -26,6 +28,8 @@ Qwaiter::Application.routes.draw do
     root to: 'users#index'
   end
 
+  resources :new_suppliers
+
   post '/user_app' => 'dashboard#user_app_log' #TODO: separate high speed app at log.mozo.bar
   post '/user_feedback' => 'user#feedback'
 

spec/acceptance_steps/suppliers/authentication_steps.rb

@@ -1,6 +1,6 @@
 step "I am signed in as supplier" do
 
-  visit test_login_admin_suppliers_path(email: @supplier.email)
+  visit test_login_admin_employees_path(email: @employee.email)
   #step 'visit the supplier sign in path'
   #find('#supplier_email').set @supplier.email
   #find('#supplier_password').set @supplier_password

spec/acceptance_steps/suppliers/existance_steps.rb

@@ -1,5 +1,7 @@
 step 'there is a confirmed and open supplier' do
   @supplier_password = 'secret1'
-  @supplier = create :supplier, email: 'supplier@mozo.bar', password: @supplier_password, confirmation_token: 'abc', confirmed_at: Time.now.utc, open: true
+  @employee = create :employee, email: 'supplier@mozo.bar', password: @supplier_password, confirmation_token: 'abc', confirmed_at: Time.now.utc
+  @supplier = build :supplier, open: true
+  @supplier.add_manager @employee
   @section = create :section, title: 'Room', supplier: @supplier, width: 8, height: 8
 end

spec/factories/employee_factory.rb

@@ -0,0 +1,11 @@
+FactoryGirl.define do
+  factory :employee do
+    sequence(:name){|i| "Employee #{i}"}
+    email 'employee@mozo.bar'
+    password 'secret'
+
+    trait :confirmed do
+      confirmed_at { Time.now }
+    end
+  end
+end

spec/factories/supplier_factory.rb

@@ -1,12 +1,6 @@
 FactoryGirl.define do
   factory :supplier do
     sequence(:name){|i| "Supplier #{i}"}
-    email 'supplier@mozo.bar'
-    password 'secret'
 
-    trait :confirmed do
-      confirmed_at { Time.now }
-
-    end
   end
 end

spec/models/employee_spec.rb

@@ -0,0 +1,16 @@
+require 'spec_helper'
+
+describe Employee do
+  context 'class methods' do
+    describe '.count_by_email' do
+      it 'is zero without employees' do
+        described_class.count_by_email('admin@example.com').should be_zero
+      end
+
+      it 'is one when an email already exists' do
+        create :employee, email: 'alreadyexisting@example.com'
+        described_class.count_by_email('alreadyexisting@example.com').should be 1
+      end
+    end
+  end
+end

spec/models/supplier_spec.rb

@@ -103,4 +103,30 @@ describe Supplier do
     end
   end
 
+  describe '#employee_settings' do
+    let(:employee){ create :employee }
+    it 'is initialized by default' do
+      supplier.employee_settings.should be_a SupplierEmployeesSettings
+    end
+
+    it 'returns null object without employee' do
+      supplier.employee_settings.for_employee('asdf').should_not be_present
+    end
+    it 'returns employee_settings on for employee' do
+      supplier.add_employee employee
+      settings = supplier.employee_settings.for_employee(employee.id)
+      settings.should be_present
+      settings.manager?.should be false
+    end
+
+    it 'indicates a manager when specified as such and is persisted' do
+      supplier.add_manager employee
+      settings = supplier.employee_settings.for_employee(employee.id)
+      settings.manager?.should be true
+      reloaded_supplier = Supplier.find(supplier.id)
+      settings = reloaded_supplier.employee_settings.for_employee(employee.id)
+      settings.manager?.should be true
+    end
+
+  end
 end

spec/services/new_supplier_spec.rb

@@ -0,0 +1,6 @@
+require 'spec_helper'
+
+describe NewSupplier do
+  subject { described_class.new }
+  it { should_not be_persisted }
+end

spec/support/features/basic_helpers.rb

@@ -5,9 +5,9 @@ module Features
     def create_user(email, password='secret')
       @user = User.find_by_email(email) || FactoryGirl.create(:user, email: email, password: password)
     end
-    def create_supplier(email, password='secret')
+    #def create_supplier(email, password='secret')
-      @supplier = Supplier.find_by_email(email) || FactoryGirl.create(:supplier, email: email, password: password)
+      #@supplier = Supplier.find_by_email(email) || FactoryGirl.create(:supplier, email: email, password: password)
-    end
+    #end
 
     def create_confirmed_supplier(email, password='secret')
       @supplier = Supplier.find_by_email(email) || FactoryGirl.create(:supplier, :confirmed, email: email, password: password)
@@ -21,10 +21,10 @@ module Features
       submit_form
     end
 
-    def login_supplier_as(email)
+    def login_employee_as(email)
-      visit "/suppliers/sign_in"
+      visit "/employees/sign_in"
-      fill_in "supplier_email", with: email
+      fill_in "employee_email", with: email
-      fill_in "supplier_password", with: "secret"
+      fill_in "employee_password", with: "secret"
       submit_form
     end