scinote-web/app/controllers/application_controller.rb

class ApplicationController < ActionController::Base
  include PermissionHelper
  include FirstTimeDataGenerator

  # Prevent CSRF attacks by raising an exception.
  # For APIs, you may want to use :null_session instead.
  protect_from_forgery with: :exception
  before_action :authenticate_user!
  before_action :generate_intro_tutorial, if: :is_current_page_root?
  around_action :set_time_zone, if: :current_user
  layout "main"

  def forbidden
    render_403
  end

  def not_found
    render_404
  end

  def is_current_page_root?
    controller_name == "projects" && action_name == "index"
  end

  protected

  def log(message)
    if @my_module
      @my_module.log(message)
    elsif @project
      @project.log(message)
    elsif @organization
      @organization.log(message)
    else
      logger.error(message)
    end
  end

  def render_403
    respond_to do |format|
      format.html {
        render file: 'public/403.html', status: :forbidden, layout: false
      }
      format.json {
        render json: {}, status: :forbidden
      }
    end
    return
  end

  def render_404
    respond_to do |format|
      format.html {
        render :file => 'public/404.html', :status => :not_found, :layout => false
      }
      format.json {
        render json: {}, status: :not_found
      }
    end
    return
  end

  private

  def generate_intro_tutorial
    if Rails.configuration.x.enable_tutorial &&
      current_user.no_tutorial_done? &&
      current_user.organizations.where(created_by: current_user).count > 0 then
      demo_cookie = seed_demo_data current_user
      cookies[:tutorial_data] = {
        value: demo_cookie,
        expires: 1.week.from_now
      }
      current_user.update(tutorial_status: 1)
    end
  end

  # With this Devise callback user is redirected directly to sign in page instead
  # of to root path. Therefore notification for sign out is displayed.
  def after_sign_out_path_for(resource_or_scope)
    new_user_session_path
  end

  def set_time_zone(&block)
    Time.use_zone(current_user.time_zone, &block)
  end
end